{"resultsPerPage":5664,"startIndex":0,"totalResults":5664,"format":"NVD_CVE","version":"2.0","timestamp":"2025-11-12T15:15:34.093","vulnerabilities":[{"cve":{"id":"CVE-2006-5268","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to obtaining \"administrative access to the RPC interface.\""},{"lang":"es","value":"Vulnerabilidad no especificada en  Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código de su elección a través de vectores relacionados para obtener \"acceso administrativo a la interface RPC\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/307.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31112","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-5269","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface."},{"lang":"es","value":"Desbordamiento de búfer en la memoria libre para la reserva dinámica (heap) en un procedimiento no especificado de Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, probablemente relacionados con una interfaz RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/308.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31113","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-7234","sourceIdentifier":"secalert@redhat.com","published":"2008-10-27T17:21:27.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://lynx.isc.org/lynx2.8.6/patches/","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en Lynx anterior a 2.8.6rel.4; permite a usuarios locales ejecutar código de su elección a través de los ficheros maliciosos (1) .mailcap y (2) mime.types en el directorio de trabajo actual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:*:rel3:*:*:*:*:*:*","versionEndIncluding":"2.8.6","matchCriteriaId":"213A4462-AB03-4FC0-81C2-D899067F9F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.1:*:*:*:*:*:*","matchCriteriaId":"862A5445-8315-4A2C-8695-E161449C24D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.10:*:*:*:*:*:*","matchCriteriaId":"C9D4E577-AE2E-415C-A270-C0114A73893B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.11:*:*:*:*:*:*","matchCriteriaId":"AD2ECEE2-8458-421E-AEB5-39ED85B968A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.12:*:*:*:*:*:*","matchCriteriaId":"B570E564-ED10-4871-ACB9-5663A2872E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.13:*:*:*:*:*:*","matchCriteriaId":"A4572C92-B30D-40FE-8EB2-614BB85D4D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.14:*:*:*:*:*:*","matchCriteriaId":"B4316D3B-6F6F-4DA3-89D5-191830BD731D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.15:*:*:*:*:*:*","matchCriteriaId":"531CF003-9A81-459F-972F-8D01660AEA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.16:*:*:*:*:*:*","matchCriteriaId":"C376BE36-FD58-4F28-8AD7-95E7AB640568"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.17:*:*:*:*:*:*","matchCriteriaId":"8007AF95-DD87-4711-A2A7-3A680BB06BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.18:*:*:*:*:*:*","matchCriteriaId":"F30D66EF-D058-4138-B85D-C5292401B1F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.19:*:*:*:*:*:*","matchCriteriaId":"63FC230B-EA6D-4DF1-AA47-4CDE062D4307"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.2:*:*:*:*:*:*","matchCriteriaId":"13E500F0-E922-4F48-A4F1-B626D7CCC71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.20:*:*:*:*:*:*","matchCriteriaId":"043D6299-0541-42A8-B25B-86AAFC8F02D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.21:*:*:*:*:*:*","matchCriteriaId":"3705A24D-622A-46DC-971E-F5B9A1C22924"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.22:*:*:*:*:*:*","matchCriteriaId":"3F885BED-CEE1-4EA0-9CC3-AA206D93EC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.23:*:*:*:*:*:*","matchCriteriaId":"3972751B-45FF-44F7-B43D-63CEF5A8E420"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.24:*:*:*:*:*:*","matchCriteriaId":"EF239E93-FC86-496C-B188-AE8E365E4830"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.26:*:*:*:*:*:*","matchCriteriaId":"EA2470E7-8D3D-4CD1-96B8-CDAC2E286883"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.27:*:*:*:*:*:*","matchCriteriaId":"A3CC6ED2-2163-4652-AF6E-97E90733EF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.28:*:*:*:*:*:*","matchCriteriaId":"219E37CC-7624-4F0F-B80C-CE8A751D6213"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.29:*:*:*:*:*:*","matchCriteriaId":"F8797B26-20B9-495C-B7F4-0AD152B4C22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.3:*:*:*:*:*:*","matchCriteriaId":"1DC8FB1A-AA96-488F-8DB1-703E74F3745D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.4:*:*:*:*:*:*","matchCriteriaId":"4B90FBE5-6905-4699-B167-4622A6D2A328"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.5:*:*:*:*:*:*","matchCriteriaId":"EBD9FCE8-DE5E-4558-816B-B6D4D1863827"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.6:*:*:*:*:*:*","matchCriteriaId":"6C175A7B-A967-493C-83BF-EC80579C50E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.7:*:*:*:*:*:*","matchCriteriaId":"4DC670C5-EE53-4D14-ACA0-E353EC760003"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.8:*:*:*:*:*:*","matchCriteriaId":"B3D922E9-A39D-436C-8AC7-8B64BE68A1A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.9:*:*:*:*:*:*","matchCriteriaId":"CF8BE003-9D90-4DA4-B3F0-DD7C2514857B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.1:*:*:*:*:*:*","matchCriteriaId":"C74E230F-B0F6-49BB-9DD6-CF4C0800BB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.10:*:*:*:*:*:*","matchCriteriaId":"7CA8ABB8-7894-438C-8EF7-F6043B8CC69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.11:*:*:*:*:*:*","matchCriteriaId":"48820A7C-C55A-4B73-A837-2FD7BDEAA8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.2:*:*:*:*:*:*","matchCriteriaId":"63945073-0E2F-483F-AF88-2EC99127852D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.3:*:*:*:*:*:*","matchCriteriaId":"98605AD2-A416-4223-AF4F-0855C2C9AC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.4:*:*:*:*:*:*","matchCriteriaId":"44B18544-1B8B-4BAF-A82F-2A070190CE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.5:*:*:*:*:*:*","matchCriteriaId":"81AFD48B-EB2D-4A76-9421-3DE8E6E6C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.6:*:*:*:*:*:*","matchCriteriaId":"1DA4550C-5EC5-436C-9F18-BEC1AB6CEC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.7:*:*:*:*:*:*","matchCriteriaId":"79EF180E-5E02-4761-86D3-334BA5A46C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.8:*:*:*:*:*:*","matchCriteriaId":"8AB68958-C147-4B9E-8B84-7D04FDBF54F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.9:*:*:*:*:*:*","matchCriteriaId":"260D7B17-8357-4B3F-B8EC-A40D5157BBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:rel.1:*:*:*:*:*:*","matchCriteriaId":"3C12D052-763F-4A5F-9CFC-E08A9706033F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:rel.2:*:*:*:*:*:*","matchCriteriaId":"5DA73148-3C3E-4501-AE45-02FC3FB487BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.1:*:*:*:*:*:*","matchCriteriaId":"D59F1BD2-EA67-481A-935A-6FC0D07C4F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.10:*:*:*:*:*:*","matchCriteriaId":"81FA0F2C-A817-467A-BCA8-C9207EBD538A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.11:*:*:*:*:*:*","matchCriteriaId":"FB8F0E29-88BC-4CF0-9843-F5A32DB27F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.12:*:*:*:*:*:*","matchCriteriaId":"EF93CE9B-3E63-40BE-8CCC-6C57A667DB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.13:*:*:*:*:*:*","matchCriteriaId":"DA42F704-D1EF-4855-8679-10DCCF661420"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.14:*:*:*:*:*:*","matchCriteriaId":"4921C912-5DC0-45B6-9748-81ED0BA83D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.15:*:*:*:*:*:*","matchCriteriaId":"04CCEA26-8F53-4F0A-893A-C9E8F4058366"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.16:*:*:*:*:*:*","matchCriteriaId":"FA1A5BBB-6F3E-4C91-9E7A-54BF5EB79921"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.17:*:*:*:*:*:*","matchCriteriaId":"3BD24C16-6BF9-438C-B124-E1394D4E67E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.18:*:*:*:*:*:*","matchCriteriaId":"BC302B05-153A-46B8-84EF-975286369E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.19:*:*:*:*:*:*","matchCriteriaId":"DEF3A639-D731-4E0D-8D43-9960AA998F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.2:*:*:*:*:*:*","matchCriteriaId":"9CA2172E-DD08-435F-BA3C-D84287F307B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.20:*:*:*:*:*:*","matchCriteriaId":"F1F23869-E42A-41F3-AC39-7AA24CD43EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.21:*:*:*:*:*:*","matchCriteriaId":"BE45B4F4-831B-46C4-94B0-B5A2E552FB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.22:*:*:*:*:*:*","matchCriteriaId":"A732341A-F6BD-4E98-A187-0E0CBA2DE003"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.23:*:*:*:*:*:*","matchCriteriaId":"4BF68D4F-C79D-48E8-A77E-5A6C1B773EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.24:*:*:*:*:*:*","matchCriteriaId":"7EBA2266-7A0F-46B4-8B3C-1F233C57AE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.25:*:*:*:*:*:*","matchCriteriaId":"0CA8BEC0-9B09-4252-A663-12D7527F42B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.26:*:*:*:*:*:*","matchCriteriaId":"D5EC9A87-B380-4C3E-ABFB-C31ABC0E7683"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.3:*:*:*:*:*:*","matchCriteriaId":"618B6F91-C5DC-44DE-8B04-1B8F458E6F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.4:*:*:*:*:*:*","matchCriteriaId":"1EAE8DDC-05C3-4C02-A193-614C901FF70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.5:*:*:*:*:*:*","matchCriteriaId":"E523B829-5BCE-4B23-B4CA-96EC164E630F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.6:*:*:*:*:*:*","matchCriteriaId":"E36A8455-89AF-4996-900A-DCA537E5967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.7:*:*:*:*:*:*","matchCriteriaId":"9AA632B2-2508-465C-B25A-1F14CC94CE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.8:*:*:*:*:*:*","matchCriteriaId":"038E89B8-3486-4D39-9FF5-1638092CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.9:*:*:*:*:*:*","matchCriteriaId":"81D5CDA1-D682-49CB-A19C-754159533866"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.1:*:*:*:*:*:*","matchCriteriaId":"12D4953F-F735-4D99-81FA-B120F2CD6187"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.10:*:*:*:*:*:*","matchCriteriaId":"6DE542DF-5FA2-4C98-AE7A-98BEDCD32C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.11:*:*:*:*:*:*","matchCriteriaId":"E2875C64-5DE3-4612-8A2D-07368AE0E613"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.2:*:*:*:*:*:*","matchCriteriaId":"BEB48407-4A1C-4A2A-91AB-A7F2469C643D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.3:*:*:*:*:*:*","matchCriteriaId":"770E6D06-A8E8-46EC-8ECB-E5034A3ACDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.4:*:*:*:*:*:*","matchCriteriaId":"BB2C468C-053D-4516-BBD5-097D9CA3C6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.5:*:*:*:*:*:*","matchCriteriaId":"0BFA48A1-D025-4CB7-9D7A-3C3D3F84C344"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.6:*:*:*:*:*:*","matchCriteriaId":"2952132D-CE4A-4D85-AB0F-321DD73CB8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.7:*:*:*:*:*:*","matchCriteriaId":"F0DE6D59-D33B-499E-93C4-D57D821055DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.8:*:*:*:*:*:*","matchCriteriaId":"3DA6C82E-497A-4E68-A019-76732FCDE79D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.9:*:*:*:*:*:*","matchCriteriaId":"A51E8735-1187-478B-A27E-E172A75D1E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:rel.1:*:*:*:*:*:*","matchCriteriaId":"D4D7D16D-2DA0-4052-9B91-942900CC24BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.1:*:*:*:*:*:*","matchCriteriaId":"EBE97229-F7E7-4767-86B2-61066B69D30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.10:*:*:*:*:*:*","matchCriteriaId":"AAF905CD-FB1F-46CB-A432-625A8F050223"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.11:*:*:*:*:*:*","matchCriteriaId":"556F1631-93C7-48EA-A6C2-E8E3E6ACBB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.12:*:*:*:*:*:*","matchCriteriaId":"C50B29E2-3837-499A-BC2E-813C2BB92DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.13:*:*:*:*:*:*","matchCriteriaId":"BFF73BCA-644B-4091-A6F9-3C0B4F1C220C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.14:*:*:*:*:*:*","matchCriteriaId":"11450D21-1F22-4314-9C97-13F39F152156"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.15:*:*:*:*:*:*","matchCriteriaId":"087425C2-7A81-4B0F-AE36-A77E6913876B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.16:*:*:*:*:*:*","matchCriteriaId":"5A6E40AF-1674-4E37-A175-BABB6CFE222C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.17:*:*:*:*:*:*","matchCriteriaId":"4CADE41F-8802-4EE2-9B49-C461DCA522B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.18:*:*:*:*:*:*","matchCriteriaId":"39549DA6-1DE4-4760-BECE-E9C207836DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.19:*:*:*:*:*:*","matchCriteriaId":"301D4516-8280-4FBE-8E40-6ACF1FA6EDAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.2:*:*:*:*:*:*","matchCriteriaId":"8B9FDC9F-9FBB-496E-BA0A-D45666BD23EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.20:*:*:*:*:*:*","matchCriteriaId":"C4430E79-886C-4987-BF6C-3A9BC107C488"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.21:*:*:*:*:*:*","matchCriteriaId":"8F45A77D-1185-4E63-B387-C4EAE44A2043"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.22:*:*:*:*:*:*","matchCriteriaId":"9362AB7A-7564-4553-88EA-EC2501D2C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.23:*:*:*:*:*:*","matchCriteriaId":"51033A6B-71FD-4392-B162-0C2C1D15062E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.3:*:*:*:*:*:*","matchCriteriaId":"0DAE9201-C90D-4764-B533-3DBB3FDC8E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.4:*:*:*:*:*:*","matchCriteriaId":"20F61B2C-AC76-4E7A-8675-CC7075441274"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.5:*:*:*:*:*:*","matchCriteriaId":"839CE73D-D363-46C0-A7D8-0E0970C9D960"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.6:*:*:*:*:*:*","matchCriteriaId":"609D3A11-7245-4347-94B6-349D665BBA1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.7:*:*:*:*:*:*","matchCriteriaId":"0CF2C0B8-8DBD-44E7-A247-46FBCA6DE606"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.8:*:*:*:*:*:*","matchCriteriaId":"22CF3A40-D17E-47AD-A109-20A476238BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.9:*:*:*:*:*:*","matchCriteriaId":"7F5C7A93-25F2-4429-9278-46F990ECB310"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre1:*:*:*:*:*:*","matchCriteriaId":"9619AB62-947D-4DD8-9870-245DF1A6BE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre2:*:*:*:*:*:*","matchCriteriaId":"133925D5-A33B-4B85-A834-6A187C186250"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre3:*:*:*:*:*:*","matchCriteriaId":"445D1083-FF37-466F-97FA-2B757692BA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre4:*:*:*:*:*:*","matchCriteriaId":"6CAD635C-FAB2-4BB1-AFBA-FC6A692C58B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre5:*:*:*:*:*:*","matchCriteriaId":"A18F33E1-52BC-4A6F-99C6-02777FBE2D3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre6:*:*:*:*:*:*","matchCriteriaId":"7911DA89-EA53-4E8C-87AE-B0E14EDF0040"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre7:*:*:*:*:*:*","matchCriteriaId":"83F2DC55-5D05-4336-8090-4563847819D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre8:*:*:*:*:*:*","matchCriteriaId":"628F3D87-9FCE-4BF5-8381-01E3181464B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:rel1:*:*:*:*:*:*","matchCriteriaId":"D53E25C2-BE29-4123-8AC0-FFD4760C7D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev1:*:*:*:*:*:*","matchCriteriaId":"4C0A1E2A-6846-43B7-89F7-EAFE87F23EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev10:*:*:*:*:*:*","matchCriteriaId":"79B7CD30-4DFA-4516-BFCE-D1628C4CB9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev11:*:*:*:*:*:*","matchCriteriaId":"FC834555-D75D-4A46-847B-6E8531A805CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev12:*:*:*:*:*:*","matchCriteriaId":"6D08BCAF-B83C-426B-A826-5D78D7D22C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev13:*:*:*:*:*:*","matchCriteriaId":"960F3E0F-7C73-4D69-86DB-1307CF0B7F41"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev14:*:*:*:*:*:*","matchCriteriaId":"C4E41961-28B3-4CA1-98BE-CDDAC3E12E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev15:*:*:*:*:*:*","matchCriteriaId":"5569496E-BA89-40B6-A5C9-E8A8640F9606"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev16:*:*:*:*:*:*","matchCriteriaId":"1FF48553-45A3-449F-BAB1-B2A77352237B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev17:*:*:*:*:*:*","matchCriteriaId":"AF350141-E5CC-451E-A05A-AD5EA160D3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev18:*:*:*:*:*:*","matchCriteriaId":"D6739C37-A79B-49B5-B2FD-357F6B05E0CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev19:*:*:*:*:*:*","matchCriteriaId":"56F72A7B-217D-4EAF-8187-F8C59CF891E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev2:*:*:*:*:*:*","matchCriteriaId":"49BF5E5B-2AE0-4BBF-AF13-0E4F7E284A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev20:*:*:*:*:*:*","matchCriteriaId":"538BD607-D360-4436-919F-00F0735F2F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev21:*:*:*:*:*:*","matchCriteriaId":"3B07CAD3-7F2F-4549-AF28-A5CE69CB2038"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev3:*:*:*:*:*:*","matchCriteriaId":"692D1DAF-46EE-4782-9B03-13D258C8EF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev4:*:*:*:*:*:*","matchCriteriaId":"B31CE784-35EC-45C6-9D06-9577C66B051A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev5:*:*:*:*:*:*","matchCriteriaId":"6D94E3FF-08E2-42D0-8AB9-4FFC4C9834D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev6:*:*:*:*:*:*","matchCriteriaId":"F20427C6-347C-4E1E-B983-7DCDF2D72ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev7:*:*:*:*:*:*","matchCriteriaId":"8EE07315-C850-4181-A531-31220BFF9A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev8:*:*:*:*:*:*","matchCriteriaId":"C7982641-B75F-454F-834F-EAF3BA897C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev9:*:*:*:*:*:*","matchCriteriaId":"04EBC013-48E1-407C-A8E5-5F30CF11AFD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.1:*:*:*:*:*:*","matchCriteriaId":"FC3E52FF-3CD4-4A01-8F89-584563A06352"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.2:*:*:*:*:*:*","matchCriteriaId":"7C9C8B8B-CE71-4CB0-8C10-FBC3172B9269"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.3:*:*:*:*:*:*","matchCriteriaId":"66889F07-374C-4B9E-8C98-4578C5173A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.4:*:*:*:*:*:*","matchCriteriaId":"12F6F8F4-298D-460E-AC41-29FB448B96D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.5:*:*:*:*:*:*","matchCriteriaId":"FCC527A6-4804-47B7-9A5A-61402431BAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:rel.1:*:*:*:*:*:*","matchCriteriaId":"76FBFA8F-B2EF-489E-A832-08DC1BA091AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.1:*:*:*:*:*:*","matchCriteriaId":"59FE42C9-ABE6-4622-8AAE-D58C5C3060B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.10:*:*:*:*:*:*","matchCriteriaId":"0D31A992-F02D-4F76-A6B5-F3A8C4BD1040"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.11:*:*:*:*:*:*","matchCriteriaId":"4D03BC65-AE7E-4AB1-805F-7BF3A15FE035"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.12:*:*:*:*:*:*","matchCriteriaId":"633F1F2A-4F8A-4C5F-9D95-B806CBC5B74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.13:*:*:*:*:*:*","matchCriteriaId":"80F84D1E-3C9F-48A6-BED2-F3669B8EC819"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.14:*:*:*:*:*:*","matchCriteriaId":"FA979A2C-FBA8-4A86-8830-C0824AF54C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.15:*:*:*:*:*:*","matchCriteriaId":"9EF93004-261D-4C40-A288-C029A3054E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.16:*:*:*:*:*:*","matchCriteriaId":"F96D987C-B89F-48F8-BD22-0EA7E845B920"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.17:*:*:*:*:*:*","matchCriteriaId":"D2BA9934-E4AC-43BF-B860-3C60B5F18DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.2:*:*:*:*:*:*","matchCriteriaId":"0990275A-E44E-43F9-9164-B1979719BC9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.3:*:*:*:*:*:*","matchCriteriaId":"C0D186F7-CDBE-415B-AB26-146BA8F3FC7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.4:*:*:*:*:*:*","matchCriteriaId":"B0A4224C-A1B5-4BEB-9B4A-78CD0243E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.5:*:*:*:*:*:*","matchCriteriaId":"5E733E5C-8272-4D18-99C4-2862728F7E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.6:*:*:*:*:*:*","matchCriteriaId":"386FC0D1-38F1-491B-949C-65138E864C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.7:*:*:*:*:*:*","matchCriteriaId":"2C2EF1AA-77DF-424F-9473-4831ACE3F47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.8:*:*:*:*:*:*","matchCriteriaId":"2436626C-6214-4D73-923C-4BBD9148AE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.9:*:*:*:*:*:*","matchCriteriaId":"4F59D4B7-77A5-487B-B9D7-ACCDC25BE03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.1:*:*:*:*:*:*","matchCriteriaId":"A311B404-6815-434F-9948-971E316AB08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.2:*:*:*:*:*:*","matchCriteriaId":"CF21426F-0A83-4CAA-B8FE-5D1140840792"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.3:*:*:*:*:*:*","matchCriteriaId":"A440FBED-FBE9-499C-AAEE-A476526B3862"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.4:*:*:*:*:*:*","matchCriteriaId":"8BED0DE4-DC20-44FF-A491-E22A59BED1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.5:*:*:*:*:*:*","matchCriteriaId":"FB00EE41-8071-46BB-B783-F37B25072C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:rel.1:*:*:*:*:*:*","matchCriteriaId":"4E00B7BF-21AC-4E32-96ED-641A39C79326"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev1:*:*:*:*:*:*","matchCriteriaId":"ABB39A6E-973C-429D-9BAA-0B7A377F4679"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev10:*:*:*:*:*:*","matchCriteriaId":"C78F3CA3-2C11-4019-BF9D-2B2A3149BC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev11:*:*:*:*:*:*","matchCriteriaId":"210DDCD6-36E2-4B3F-9765-D7F3C8DB49E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev12:*:*:*:*:*:*","matchCriteriaId":"64BCE913-DB20-40A7-9BC2-984541F3535C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev13:*:*:*:*:*:*","matchCriteriaId":"2EFD0B54-67F6-4149-AF8A-191C550EF088"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev14:*:*:*:*:*:*","matchCriteriaId":"19C5642E-037F-4E75-8949-255F1368596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev15:*:*:*:*:*:*","matchCriteriaId":"A8291528-45B3-481F-9A3B-332601544A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev2:*:*:*:*:*:*","matchCriteriaId":"C45DF1C4-4B67-4773-BF03-E15C18CEFA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev3:*:*:*:*:*:*","matchCriteriaId":"962E0199-2154-4F10-A58E-753FA840A631"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev4:*:*:*:*:*:*","matchCriteriaId":"F16BA322-D764-4648-BB7C-3AD5E4F76CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev5:*:*:*:*:*:*","matchCriteriaId":"FA8D13D1-56BF-4237-A86F-9C270992D047"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev6:*:*:*:*:*:*","matchCriteriaId":"1A1A3227-4F30-49F1-947D-E20D7A4A4A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev7:*:*:*:*:*:*","matchCriteriaId":"E77E1F5A-8BEC-4126-98DB-25F53CD95085"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev8:*:*:*:*:*:*","matchCriteriaId":"F044F727-1BA7-4307-B237-48B5D0127CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev9:*:*:*:*:*:*","matchCriteriaId":"B65566DF-BEE2-4808-A03E-685B931EF827"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:rel1:*:*:*:*:*:*","matchCriteriaId":"A7FE0B3F-B43A-4236-BF3D-1BFEBD49D019"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:rel2:*:*:*:*:*:*","matchCriteriaId":"AFACAE6B-FF04-4F9E-8DBF-A29F03D7C09D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32407","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33568","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:217","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/25/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0965.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31917","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021107","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=214205","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46132","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/25/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0965.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=214205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-7235","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1) multiple STOR (aka PUT) commands, or an MKD command followed by (2) a '*' argument, (3) a '|' argument, (4) spaces, or (5) a long string.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Teamtek Universal FTP Server v1.0.50 permite a atacantes remotos provocar una denegación de servicio (caída de demonio o cuelgue) a través  de (1) múltiples comandos STOR (alias PUT), o un comando MKD seguido de (2) un argumento '*', (3) un argumento '|', (4) espacios o (5) una cadena larga. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:5e5:teamtek_universal_ftp_server:1.0.44:*:*:*:*:*:*:*","matchCriteriaId":"937AF8CF-2228-43A8-8DFA-C52FC4636F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:5e5:teamtek_universal_ftp_server:1.0.50:*:*:*:*:*:*:*","matchCriteriaId":"3E4D8873-A3BF-4A2B-8AF8-3F412DA94936"}]}]}],"references":[{"url":"http://secunia.com/advisories/22553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21085","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0012","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribute, which triggers a NULL pointer dereference in jpiexp32.dll when the applet is decoded and passed to the JVM."},{"lang":"es","value":"Sun JRE 5.0 anterior al update 14 permite a atacantes remotos provocar una denegación de servicio (caída de Internet Explorer) mediante una etiqueta object con un applet codificado y un atributo name no definido, lo cual dispara una referencia a puntero nulo en jpiexp32.dll cuando el applet es decodificado y pasado a la JVM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update10:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"1CBCA6F7-38C1-4B08-8E46-4322497B2B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update11:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB640827-CF8F-481A-9603-B7AEEB4647E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update12:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"60A25C25-BD19-4FEE-9842-C898604AB861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update13:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"0284CD7F-4BF7-47EE-A27B-A7A12AD6553D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update7:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"B8465117-3947-46D6-A984-3F380C8CB34B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update8:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"B69D755C-76ED-4902-BC6D-EB021C3A394F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update9:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"FCC8898D-6CD3-4A9D-866B-E9F1B2D40811"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485942/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27185","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39549","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485942/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0065","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request."},{"lang":"es","value":"Búfer overflow basado en montículo en el objeto OLE (Object Linking and Embedding)Automation en Windows 2000 SP4, XP SP2, Server 2003 SP1 y SP2, Vista, Office 2004 para Mac, y Visual basic 6.0 SP6, permite a atacantes remotos ejecutar código de su elección a través de una petición de secuencia de comandos manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*","matchCriteriaId":"644E2E89-F3E3-4383-B460-424D724EE62F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:*:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"06A2E44E-E858-4713-9F36-58061E83D438"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F562268C-1B63-4360-BD4C-A7F45009B7D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28902","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27661","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019373","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0510/references","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0510/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0066","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T20:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka \"Windows Kernel TCP/IP/ICMP Vulnerability.\""},{"lang":"es","value":"El kernel de Microsoft Windows 2000 SP4, XP SP2 y Server 2003, cuando se habilita el protocolo de detección de enrutador ICMP (RDP), permite a los atacantes remotos provocar una denegación de servicio mediante paquetes ICMP de anuncios de enrutador fragmentados que desencadenan una vulnerabilidad de lectura fuera de límites, también se conoce como \"Windows Kernel TCP/IP/ICMP Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:home_server:*:*:*:*:*:*:*:*","matchCriteriaId":"A1FE37CF-CE30-49E7-AE92-9EB92153A4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:small_business_server:2003:*:sp1:*:*:*:*:*","matchCriteriaId":"58EF6E9F-6443-4805-B956-2E8C9E496222"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:gold:itanium:*:*:*:*:*","matchCriteriaId":"81C8959A-915B-472F-B043-A57BA11FDB93"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28297","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019166","source":"cve@mitre.org"},{"url":"http://www.iss.net/threats/282.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27139","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-008A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0069","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39254","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5271","source":"cve@mitre.org"},{"url":"http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/threats/282.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-008A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0069","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T20:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka \"Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en el kernel de Microsoft Windows XP SP2, Server 2003 y Vista permite a los atacantes remotos causar una denegación de servicio (consumo de CPU) y posiblemente ejecutar código arbitrario por medio de paquetes creados (1) IGMPv3 y (2) MLDv2 que activan la corrupción de memoria, también se conoce como \"Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-3-the-case-of-the-igmp-network-critical.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28297","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019166","source":"cve@mitre.org"},{"url":"http://www.iss.net/threats/282.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/115083","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27100","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-008A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0069","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39452","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39453","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5370","source":"cve@mitre.org"},{"url":"http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-3-the-case-of-the-igmp-network-critical.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/threats/282.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/115083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-008A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0071","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow."},{"lang":"es","value":"El desbordamiento de enteros en Adobe Flash Player versión 9.0.115.0 y versiones anteriores, y versión 8.0.39.0 y versiones anteriores, permite que los atacantes remotos ejecuten código arbitrario por medio de un archivo SWF creado con un valor de Scene Count negativo, que pasa por una comparación firmada, se utiliza como compensación de un puntero NULL, y se desencadena un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.0.39.0","matchCriteriaId":"307CD062-FF65-4300-AC60-4B5DA1E1961C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.0.115.0","matchCriteriaId":"F3962F47-B2A5-4B69-AB35-F8C7745682A2"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=4465","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29763","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30404","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30507","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/threats/289.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/159523","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/395473","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/44282","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28695","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29386","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019811","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020114","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-149A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1662/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-032/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37277","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10379","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=4465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/threats/289.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/159523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/395473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/44282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-149A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1662/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-032/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-0072","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a read operation over RPC."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en un procedimiento no especificado en Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos, posiblemente relacionados con una operación de lectura sobre RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/309.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38760","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0073","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a file read operation over RPC."},{"lang":"es","value":"Desbordamiento de búfer en memoria libre para la reserva dinámica (heap) en un procedimiento no especificado de Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, posiblemente relacionados con una operación de lectura de un fichero sobre RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/309.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39050","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0074","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC."},{"lang":"es","value":"Desbordamiento de búfer en un procedimiento no especificado en Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos, posiblemente relacionados con una operación de lectura de carpeta sobre RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/309.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39051","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-0216","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka \"Microsoft Works File Converter Input Validation Vulnerability.\""},{"lang":"es","value":"La biblioteca wkcvqd01.dll en Microsoft Works versión 6 File Converter, tal y como es usado en Office 2003 SP2, Works versión 8.0 y Works Suite 2005, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo .wps con encabezados de longitud de sección diseñados, también se conoce como \"Microsoft Works File Converter Input Validation Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*","matchCriteriaId":"CB8E7A05-97EE-40A4-A410-B2DE582AA381"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=659","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28904","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27657","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019386","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0513/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5309","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0513/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-1201","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka \"Office Web Components DataSource Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en determinados objetos COM de Microsoft Office Web Components 2000 permite a atacantes remotos con la complicidad del usuario ejecutar códigode su elección mediante vectores relativos a DataSource que disparan una corrupción de memoria, también conocido como \"Vulnerabilidad en Office Web Components DataSource.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:biztalk_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"1677D31C-2601-41A8-BEF7-11A545011E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:biztalk_server:2002:*:*:*:*:*:*:*","matchCriteriaId":"44BFE3B9-3C8C-4747-AAC0-A10EED857C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"AF65806C-05BF-4EB7-976B-3346F2D64886"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"B2133B46-6837-4C95-97F6-0AEF862FA0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29328","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28136","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019581","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0849/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5327","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0849/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-1682","sourceIdentifier":"cret@cert.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method."},{"lang":"es","value":"Múltiples desbordmientos de búfer basados en pila en el control ActiveX de FileManager en SAFmgPws.dll de SoftArtisans XFile versiones anteriores a 2.4.0 permiten a atacantes remotos ejecutar código de su elección a través de llamadas no especificadas a los métodos (1) BuildPath, (2) GetDriveName, (3) DriveExists, o (4) DeleteFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.4","matchCriteriaId":"BDFD01A6-2CB3-4EF1-A81F-CF472294081C"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A349F44E-3A51-4702-BBB3-7D5B622C68C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"57F37B78-F308-4F2C-BEA4-96E91AA05906"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E0FAEA84-407B-4900-9642-60127D617C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"84A4500E-7D34-4436-8B27-B127C1D08CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F04D099-BFA4-4330-8AF3-EC395E436709"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.01:*:*:*:*:*:*:*","matchCriteriaId":"1B58368F-25B3-4FE4-A5C6-00F6C6888F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FAE74F9B-2F6E-4445-9A34-A04E622F269E"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC26101E-077A-42AD-B82F-C5E19AC7FB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"710AB2A2-293A-44D8-92EC-26143599BB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"AA5E00B5-1D19-4C95-9660-5E3B18E871B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E00A5FCF-31B6-4788-B836-34FEA4A5E1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"53C356DC-5C96-4F8D-83AD-3142E87F88B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E203841-ACD0-4B16-93BC-F650CB6F7853"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.0:*:*:*:*:*:*:*","matchCriteriaId":"92F3C27D-9BF4-4A36-8B0C-B813C367B22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8557F8A0-265D-4FEA-9982-9E19EE36CF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"28350273-2166-474C-AD1F-5591AD644F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C6EC8D73-E71A-4988-A687-10C9AB6EFC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3134EF9B-D4D6-4F9A-8E63-3AE20105BF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCB5E60A-8DEB-408A-B0BB-404BF2D6AB16"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"6D143F22-E10F-4548-80CE-79547366A670"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F61EA55C-4DC4-4D7E-8B95-B331DC510A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6F31FDCD-EC0D-4F49-8032-C062A9FB7E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:softartisans:xfile:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D7D43259-8042-45A4-AF36-B1576FACBAFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/31615","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://support.softartisans.com/Support-114.aspx","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/914785","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30826","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/31615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.softartisans.com/Support-114.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/914785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-1899","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via (2) the post_id parameter in an edit action to admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en myWebland myBloggie 2.1.6, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro user_id en una acción viewuser de index.php, y permitir a administradores autenticados en remoto ejecutar comandos SQL de su elección mediante (2) el parámtro post_id en una acción edit de admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:mybloggie:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"247E690A-5F53-43FB-9B07-113D2F367C3B"}]}]}],"references":[{"url":"http://descriptions.securescout.com/tc/17969","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.netvigilance.com/advisory0040","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5975","source":"cve@mitre.org"},{"url":"http://descriptions.securescout.com/tc/17969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.netvigilance.com/advisory0040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2952","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila del servicio de filtros (aka k9filter.exe)\r\n en Blue Coat K9 Web Protection 3.2.44 con Filter 3.2.32 permite (1) a atacantes remotos ejecutar código arbitrariamente mediante una cabecera larga HTTP Referer al interfaz web K9 Web Protection Administration y (2) a los atacantes \"man-in-the-middle\" ejecutar código de su elección a través de una respuesta con una versión de campo HTTP larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blue_coat_systems:filter:3.2.32:*:*:*:*:*:*:*","matchCriteriaId":"F7D4BF55-B581-4127-9154-84F70FEB872F"},{"vulnerable":true,"criteria":"cpe:2.3:a:blue_coat_systems:k9_web_protection:3.2.44:*:*:*:*:*:*:*","matchCriteriaId":"84FF427C-D666-4607-AB2A-5C23866A6C88"}]}]}],"references":[{"url":"http://secunia.com/advisories/25813","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-61/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-64/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494975/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/494984/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/30463","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/30464","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020587","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020588","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2263/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44123","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44124","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/25813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-61/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-64/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494975/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494984/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2263/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-3650","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages."},{"lang":"es","value":"myWebland myBloggie 2.1.6 permite a los atacantes remotos obtener información sensible a través de (1) un parámetro no válido de año para calendar.php alcanzado a través de index.php; (2) una petición directa a common.php; y (3) una cadena de consulta a login.php, el cual revela la ruta de instalación en varios mensajes de error."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:mybloggie:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"247E690A-5F53-43FB-9B07-113D2F367C3B"}]}]}],"references":[{"url":"http://descriptions.securescout.com/tc/17970","source":"cve@mitre.org"},{"url":"http://www.netvigilance.com/advisory0039","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://descriptions.securescout.com/tc/17970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netvigilance.com/advisory0039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-3651","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message."},{"lang":"es","value":"class/page.php de Farsi Script (también conocido como FaScript) FaName 1.0, permite a atacantes remotos obtener información sensible mediante una secuencia '; (apósotrofe punto y coma) en un parámetro id, esto revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFFF8451-6F54-4A58-A981-1A1EF4971D6E"}]}]}],"references":[{"url":"http://descriptions.securescout.com/tc/17971","source":"cve@mitre.org"},{"url":"http://www.netvigilance.com/advisory0041","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://descriptions.securescout.com/tc/17971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netvigilance.com/advisory0041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-3652","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: this might be the same issue as CVE-2008-0328."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en class/page.php en Farsi Script (alias FaScript) FaName 1.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id. NOTA: Esto es lo mismo que la vulnerabilidad CVE-2008-0328"}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFFF8451-6F54-4A58-A981-1A1EF4971D6E"}]}]}],"references":[{"url":"http://descriptions.securescout.com/tc/17972","source":"cve@mitre.org"},{"url":"http://www.netvigilance.com/advisory0042","source":"cve@mitre.org"},{"url":"http://descriptions.securescout.com/tc/17972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netvigilance.com/advisory0042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-3653","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) key or (2) desc parameter to index.php, or (3) the name parameter to page.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de Comandos en Sitios Cruzados (XSS) en Farsi Script (también conocido como FaScript) FaName 1.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante un parámetro (1) key o (2) desc en index.php, o (3) el parámetro name en page.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFFF8451-6F54-4A58-A981-1A1EF4971D6E"}]}]}],"references":[{"url":"http://descriptions.securescout.com/tc/17973","source":"cve@mitre.org"},{"url":"http://www.netvigilance.com/advisory0043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502","source":"cve@mitre.org"},{"url":"http://descriptions.securescout.com/tc/17973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netvigilance.com/advisory0043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-3676","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory corruption or other invalid memory access. NOTE: this might be the same issue as CVE-2008-0698."},{"lang":"es","value":"El Servidor de Administración (DAS) de IBM DB2 Universal Database (UDB) en versión 8 anterior al Fix Pack 16 y versión 9 anterior a Fix Pack 4, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de valores del puntero modificados en solicitudes de administración remota no especificadas; esto  provoca una corrupción de memoria u otro acceso no válido a memoria. NOTA: este podría ser el mismo problema que CVE-2008-0698"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fix_pack15:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"BE6286F5-FA0B-4879-90FA-9D4A7AF3D5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fix_pack3a:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"A9109ED9-2529-427D-8A8C-6FAF3A2D438B"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=654","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019318","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4130","sourceIdentifier":"secalert@redhat.com","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service (panic) via invalid arguments to set_mempolicy in an MPOL_BIND operation."},{"lang":"es","value":"El kernel de Linux 2.6.9 antes de 2.6.9-67 en Red Hat Enterprise Linux (RHEL) 4 de Itanium (ia64). No maneja correctamente fallos de página durante el acceso a memoria de NUMA, lo que permite a usuarios locales causar una denegación de servicio (panic) por medio de argumentos no válidos a set_mempolicy en una operación MPOL_BIND"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:as:*:*:*:*:*","matchCriteriaId":"49EF5B77-9BC9-4AE8-A677-48E5E576BE63"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:es:*:*:*:*:*","matchCriteriaId":"36389D32-61C1-4487-8399-FA7D2864FACD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:ws:*:*:*:*:*","matchCriteriaId":"49B67F74-AF8F-4A27-AA8A-A8479E256A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4:*:*:*:*:*:*:*","matchCriteriaId":"D986CAD0-F4E0-4F97-B240-8967CD4466FB"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2008-0055.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/28748","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27556","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=179665","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11437","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=179665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4349","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-23T22:00:01.027","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference."},{"lang":"es","value":"El servicio Shared Trace (también se conoce como OVTrace) en HP Performance Agent versión C.04.70 (4.70), HP OpenView Performance Agent versiones C.04.60 y C.04.61, HP Reporter versión 3.8 y HP OpenView Reporter versión 3.7 (Informe 3.70), permite a los atacantes remotos causar una denegación de servicio por medio de una serie no especificada de peticiones RPC (también se conoce como Mensajes de Eventos de Rastreo) que desencadena un acceso de memoria fuera de límites, relacionado con una referencia de objeto errónea."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_performance_agent:c.04.60:*:*:*:*:*:*:*","matchCriteriaId":"9374AB08-64F6-4376-BF01-652E88A7E050"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_performance_agent:c.04.61:*:*:*:*:*:*:*","matchCriteriaId":"15053C63-0407-422A-9E7B-591E336D6121"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_reporter:3.70:*:*:*:*:*:*:*","matchCriteriaId":"380F0F94-E4D6-4630-AC10-C4D8922760A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:performance_agent:4.70:*:*:*:*:*:*:*","matchCriteriaId":"4B769539-D927-4086-9160-F162488F5337"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:reporter:3.8:*:*:*:*:*:*:*","matchCriteriaId":"2BCEDB40-6EC3-4F4F-A2E5-5B223AA58DDF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122876677518654&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://marc.info/?l=bugtraq&m=122876827120961&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://marc.info/?l=bugtraq&m=122876827120961&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27054","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-83/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4501","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497648/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31860","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021092","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2888","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46028","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://marc.info/?l=bugtraq&m=122876677518654&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122876827120961&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122876827120961&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-83/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497648/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4350","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-21T18:00:00.913","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la interfaz de gestión de HP SiteScope 9.0 build 911 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un mensaje trampa SNMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:sitescope:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DFC27BE3-016D-464C-AD53-06EE4D7BCD60"}]}]}],"references":[{"url":"http://secunia.com/advisories/27126","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-84/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4447","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securitytracker.com/id?1021068","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497548/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31816","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2854","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45958","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-84/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4516","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via malformed packets."},{"lang":"es","value":"Volume Manager Scheduler Service (también conocido como VxSchedService.exe) de Symantec Veritas Storage Foundation 5.0 para Windows permite a atacantes remotos provocar una denegación de servicio (cuelgue o caída del demonio) a través de paquetes malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:storage_foundation:5.0:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B5E01C9C-40F1-4148-A57C-C10F8C48FAD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:storage_foundation:5.0:32bit:windows_2003:*:*:*:*:*","matchCriteriaId":"67D515CF-E898-4915-9C19-B3681BFC147A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29033","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019458","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27440","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.20.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0624","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4576","sourceIdentifier":"secalert@redhat.com","published":"2008-01-29T02:00:00.000","lastModified":"2023-11-07T02:01:04.480","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-4575.  Reason: This candidate is a reservation duplicate of CVE-2007-4575.  Notes: All CVE users should reference CVE-2007-4575 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"references":[]}},{"cve":{"id":"CVE-2007-4592","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and 7.0.1.1_iFix01 allow remote attackers to inject arbitrary web script or HTML via the (1) contextid, (2) username, (3) userNameVal, and (4) schema parameters to the login component."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en la interfaz web para IBM Rational ClearQuest versiones anteriores a 2003.06.16 Parche 2008A, 7.0.0.2_iFix01 y 7.0.1.1_iFix01, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) contextid , (2) username, (3) userNameVal y (4) schema en el componente login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*","versionEndIncluding":"2003-06-16","matchCriteriaId":"AF2B2BA7-86BA-45E5-B6D2-D279D6A3C873"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEB65A10-EE74-43DF-8D05-B39551F57D2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3753","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489861/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28296","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019685","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0952/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489861/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0952/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4620","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests."},{"lang":"es","value":"Múltiples desbordamientos de buffer basados en pila del servicio Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0 y 7.1.758.0, usado en varios productos CA incluyendo Anti-Virus para la versión Enterprise 7.1 a la r11.1 y Threat Manager para la versión Enterprise 8.1 y r8, permiten a usuarios autenticados ejecutar código de su elección mediante peticiones RPC manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*","matchCriteriaId":"607CCBDA-7288-4496-A7ED-EF6DED40CA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8:*:*:*:*:*:*:*","matchCriteriaId":"F6B76576-ABB1-439E-80B0-0B5AAE14BA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:*","matchCriteriaId":"FE175BB8-DF9B-4DA0-AD2F-885CC13BB812"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*","matchCriteriaId":"E37161BE-6AF5-40E0-BD63-2C17431D8B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*","matchCriteriaId":"477EE032-D183-478F-A2BF-6165277A7414"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*","matchCriteriaId":"6E236148-4A57-4FDC-A072-A77D3DD2DB53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager_for_the_enterprise:r8:*:*:*:*:*:*:*","matchCriteriaId":"7E7E12A7-F92F-47E3-B810-4019FD885B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager_for_the_enterprise:r8.1:*:*:*:*:*:*:*","matchCriteriaId":"72342377-2084-41CB-82BF-ADEEB45BFA4E"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29665","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3799","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490466/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28605","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019789","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019790","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1103/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41639","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103","source":"cve@mitre.org"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490466/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1103/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4769","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number."},{"lang":"es","value":"El analizador de expresiones regulares en TCL versiones anteriores a 8.4.17, como es usado en PostgreSQL versiones 8.2 anteriores a 8.2.6,versiones 8.1 anteriores a 8.1.11, versiones 8.0 anteriores a 8.0.15 y versiones 7.4 anteriores a 7.4.19, permite a usuarios autenticados remotos causar una denegación de servicio (bloqueo del backend) por medio de un número backref fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*","matchCriteriaId":"4064A96D-84D5-4257-9981-1139CD4CD08C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C98290E4-2919-4492-BD14-BB24BA85C729"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B56E9F72-6CBF-4784-89CD-435A030AC0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"03B480F0-8FFC-4463-ADC6-95906751811C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"629881D2-2A6D-4461-8C35-6EE575B63E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A19EB5-A1AF-4293-854D-347CD21065DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B18ED293-B408-435F-9D1F-2365A2E51022"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"E7106B29-76F3-43FD-BF57-4693D5B55076"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*","matchCriteriaId":"16B804CD-AE47-4B46-9B37-7F46D4C9A332"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*","matchCriteriaId":"D23E89A3-551D-42E2-90EC-59A9DAB4F854"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*","matchCriteriaId":"2FC46594-100B-459F-BCB7-1FA9D0719D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.14:*:*:*:*:*:*:*","matchCriteriaId":"AECD278B-55A7-4BCC-8AF1-004F02A96BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.15:*:*:*:*:*:*:*","matchCriteriaId":"95DB94EF-32AE-4DD9-A9A4-4F7D4BE5F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.16:*:*:*:*:*:*:*","matchCriteriaId":"DE0ED225-91C8-4FA6-9E33-A1D1AA99AA9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.19:*:*:*:*:*:*:*","matchCriteriaId":"99679F07-ED44-47EE-AD51-3139F30B88DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*","matchCriteriaId":"FBE2567C-BF48-4255-9E56-590A6F9DD932"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20C8302B-631A-4DF7-839B-C6F3CC39E000"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FB318EB9-1B49-452A-92CF-89D9BA990AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5913A53B-7B72-4CBD-ADAE-318333EB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"815E58C0-327D-4F14-B496-05FC8179627E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3EF2D056-5120-4F98-8343-4EC31F962CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"516E0E86-3D8A-43F9-9DD5-865F5C889FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A7FC7F18-B227-4C46-9A33-FB34DDE456CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BCDB903F-0C89-4E65-857E-553CF9C192E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"CD0DEB63-CA70-44C1-9491-E0790D1A8E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"DA8E73E5-BA41-4FA2-8457-803A97FB00C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*","matchCriteriaId":"94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"105E9F52-D17E-4A0B-9C46-FD32A930B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE2055D-AAA4-4A6A-918F-349A9749AF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C12409B2-161B-4F78-B7AD-3CF69DDCC574"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD2F1DA4-6625-469D-988B-5457B68851A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2E26D52-D95A-4547-BE6E-4F142F54A624"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4AAB2D1D-BE61-4D7C-B305-58B4F4126620"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EEE16023-9A5E-46D5-B597-E6885C224786"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.317:*:*:*:*:*:*:*","matchCriteriaId":"C8E78663-EBEA-4C00-9CD0-2115676C86E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FEEC35A2-B17C-46EC-8697-9E03568339BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B52D093-7867-4FE8-B055-D8190103A1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF855730-C61C-4FDC-96CB-57775A903421"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"02DC4E8A-A728-4734-B67A-C58C37DA90C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:*:*:*:*:*:*:*:*","versionEndIncluding":"8.4.16","matchCriteriaId":"8A797831-3F58-45FD-86F7-5B0A9AA038DB"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28359","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28437","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28454","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28477","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28698","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019157","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/about/news.905","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39499","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/568-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/about/news.905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/568-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4770","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \\0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames."},{"lang":"es","value":"libicu de International Components for Unicode (ICU) 3.8.1 y versiones anteriores intenta procesar referencias a un grupo de captura no existente cero (también conocido como \\0), lo cual podría permitir a atacantes locales o remotos dependientes del contexto leer desde, ó escribir en, direcciones de memoria fuera de los límites, relativo a corrupción de REStackFrames.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"8C296240-3851-4E13-8941-F20F6B42EF94"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0090.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28575","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28615","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28669","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28783","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29194","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29291","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29294","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29333","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29852","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29910","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29987","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/30179","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019269","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%40mail.gmail.com","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231641-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233922-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1511","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:026","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487677/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27455","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-591-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0282","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0807/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429023","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39938","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2199","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11172","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5507","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00896.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00921.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%40mail.gmail.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231641-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233922-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487677/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-591-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0807/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00921.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-4771","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función doInterval de regexcmp.cpp de libicu de International Components for Unicode (ICU) 3.8.1 y versiones anteriores, permite a atacantes locales o remotos dependientes del contexto provocar una denegación de servicio (agotamiento de memoria) y posiblemente tiene otro impacto desconocido mediante una expresión regular que escribe una gran cantidad de datos en la pila de vuelta atrás (backtracking).\r\nNOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\\/c\\+\\+:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"8C296240-3851-4E13-8941-F20F6B42EF94"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0090.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28575","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28615","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28669","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28783","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29194","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29291","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29294","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29333","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29852","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29910","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29987","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/30179","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019269","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%40mail.gmail.com","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231641-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233922-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1511","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:026","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487677/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27455","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-591-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0282","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0807/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429025","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39936","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2199","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10507","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5431","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00896.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00921.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/28783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/29987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%40mail.gmail.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231641-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233922-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487677/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-591-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0807/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00921.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-4772","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression."},{"lang":"es","value":"El intérprete de expresiones regulares en TCL en versiones anteriores a 8.4.17, como se utiliza en PostgreSQL 8.2 en versiones anteriores a 8.2.6, 8.1 en versiones anteriores a 8.1.11, 8.0 en versiones anteriores a 8.0.15 y 7.4 en versiones anteriores a 7.4.19, permite a atacantes dependientes del contexto provocar una denegación de servicio (bucle infinito) a través de una expresión regular manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4","versionEndExcluding":"7.4.19","matchCriteriaId":"D71AF224-1C94-4B65-9060-41D2B14FCB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.0.15","matchCriteriaId":"09FF885C-11CD-40BB-B31C-C6A09E5EF1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1","versionEndExcluding":"8.1.11","matchCriteriaId":"ECEB192A-37F7-482D-BAEE-6F857854B1C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2","versionEndExcluding":"8.2.6","matchCriteriaId":"EC882AEF-C3B0-4E09-8075-5A42A383CB3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl:tcl\\/tk:*:*:*:*:*:*:*:*","versionEndExcluding":"8.4.17","matchCriteriaId":"2D605EDF-9AAD-4CD6-946A-E4C9E570884F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0122.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28359","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28437","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28454","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28455","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28464","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28477","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28479","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28679","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28698","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29070","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29248","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29638","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30535","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019157","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:059","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.postgresql.org/about/news.905","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0134.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27163","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/568-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.postgresql.org/about/news.905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0134.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/568-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-4850","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \\x00 sequence, a different vulnerability than CVE-2006-2563."},{"lang":"es","value":"curl/interface.c en la librería cURL (también conocido como libcurl) en PHP 5.2.4 y 5.2.5 permite a atacantes dependientes de contexto evitar las restricciones safe_mode y open_basedir, y leer ficheros de su elección mediante una petición file:// que contiene una secuencia \\x00, una vulnerabilidad diferente de CVE-2006-2563."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n","lastModified":"2009-09-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"}]}]}],"references":[{"url":"http://cvs.php.net/viewcvs.cgi/php-src/NEWS?revision=1.2027.2.547.2.1047&view=markup","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059849.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30048","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/51","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3562","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486856/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492671/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27413","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39852","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42134","source":"cve@mitre.org"},{"url":"http://cvs.php.net/viewcvs.cgi/php-src/NEWS?revision=1.2027.2.547.2.1047&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059849.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/51","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486856/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492671/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4998","sourceIdentifier":"secalert@redhat.com","published":"2008-01-31T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination."},{"lang":"es","value":"El comando cp, cuando se ejecuta con una opción para preservar enlaces simbólicos en múltiples sistemas operativos, permite a atacantes locales ayudados por usuarios sobrescribir archivos de su elección a través de un ataque de enlaces simbólicos utilizando directorios manipulados que contienen múltiples archivos fuente que se copian al mismo destino"}],"vendorComments":[{"organization":"Red Hat","comment":"This issue affects the busybox package in Red Hat Enterprise Linux 2.1, 3, 4, and 5,\n\nThis issue affects the fileutils package in Red Hat Enterprise Linux 2.1.\n\nThis issue affects the coreutils package in Red Hat Enterprise Linux 3.\n\nThe coreutils package in Red Hat Enterprise Linux 4 and 5 are not vulnerable to this issue.\n\nGiven this issue has minimal risk we do not intend to issues updates to correct this issue in affected versions of Red Hat Enterprise Linux.\n\nFor more information please see:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=356471","lastModified":"2008-02-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://osvdb.org/43228","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=356471","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2023","source":"secalert@redhat.com"},{"url":"http://osvdb.org/43228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=356471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5001","sourceIdentifier":"secalert@redhat.com","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special file."},{"lang":"es","value":"El Kernel de Linux versiones anteriores a la 2.4.21, permite a usuarios locales provocar una denegación de servicio (kernel panic) a través de una entrada o salida asíncrona en un fichero especial FIFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_3:*:*:*:*:*:*:*","matchCriteriaId":"6EA8914F-DB6D-4C21-A727-8B94BE0424BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/44987","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30110","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31246","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29083","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=326251","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42273","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11329","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=326251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5333","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3385."},{"lang":"es","value":"Apache Tomcat 6.0.0 hasta 6.0.14, 5.5.0 hasta 5.5.25, 4.1.36 y 4.1.0 al no manejar adecuadamente secuencias (1) caracteres de dobles comillas (\") o (2) secuencias de contrabarra codificadas %5C en un valor de cookie, podría provocar que información sensible como los IDs de sesión sean filtradas a atacantes remotos, así como habilitar ataques de secuestro de sesión.\r\nNOTA: este problema existe debido a una arreglo erroneo de CVE-2007-3385."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-04-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.36","matchCriteriaId":"E458C818-F9FA-4D48-8D70-D284138BB7F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.25","matchCriteriaId":"8B9A1E54-7B84-4ECE-88ED-B28AA9A4EA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0BBB0739-1784-432E-BF78-3E120A11EE56"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2309470767/index.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28878","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28884","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28915","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29711","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30676","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30802","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32036","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33330","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/44183","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3636","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT2163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24018932","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012047","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012048","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:018","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487822/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27706","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0488","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2690","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532111","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://jvn.jp/jp/JVN%2309470767/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/44183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24018932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487822/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-5348","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:01:19.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka \"GDI+ VML Buffer Overrun Vulnerability.\""},{"lang":"es","value":"Desbordamiento de enteros en GDI+ en Microsoft Internet Explorer versión 6 SP1, Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, Server 2008, Office XP SP3, Office 2003 SP2 y SP3, 2007 Microsoft Office System Gold y SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works versión 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 y 2008, y Forefront Client Security versión 1.0, permite a atacantes remotos ejecutar código arbitrario por medio de un archivo de imagen con tamaño degradado creados en la entrada de relleno de degradado, que activa un desbordamiento de búfer en la región heap de la memoria relacionado con las bibliotecas GdiPlus.dll y VGX.DLL, también se conoce como \"GDI+ VML Buffer Overrun Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*","matchCriteriaId":"24F42695-7FB7-4C43-A9A7-8A234B6E5937"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"033138E1-82C7-443C-89C1-23D8032674CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*","matchCriteriaId":"30E84216-227B-4074-B65B-6AA399D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:server:2008:*:*:*:*:*:*:*","matchCriteriaId":"FAE680C6-F940-4095-BDD5-05CBD8DA14DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:office_system:*:gold:*:*:*:*:*:*","matchCriteriaId":"D08AE69C-A8E4-4291-AE45-C311BA8168D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:office_system:*:sp1:*:*:*:*:*:*","matchCriteriaId":"9E27318C-A079-40D4-8994-96C6809CA1FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:2003_server:sp1:*:*:*:*:*:*","matchCriteriaId":"CFC4CDAF-F0C4-4B7D-9692-5E73C489F5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:2003_server:sp2:*:*:*:*:*:*","matchCriteriaId":"6265A492-BDB8-4A41-A5D1-9947C8EF002E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*","matchCriteriaId":"85442DDD-DFB0-455D-8078-EFE49ABC60B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=743","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32154","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31018","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020834","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6055","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5352","sourceIdentifier":"secure@microsoft.com","published":"2008-01-08T20:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request."},{"lang":"es","value":"Vulnerabilidad no especificada en Local Security Authority Subsystem Service (LSASS) en Microsoft Windows 2000 SP4, XP SP2, y Server 2003 SP1 y SP2 permite a usuarios locales ganar privilegios a través de una respuesta de procedimiento de llamada local (LPC)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*","matchCriteriaId":"644E2E89-F3E3-4383-B460-424D724EE62F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://secunia.com/advisories/28341","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019165","source":"secure@microsoft.com"},{"url":"http://www.kb.cert.org/vuls/id/410025","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27099","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-008A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0070","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-002","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39233","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5408","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/410025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-008A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5360","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T20:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003."},{"lang":"es","value":"El desbordamiento de búfer en OpenPegasus Management Server, cuando es compilado para usar PAM y con PEGASUS_USE_PAM_STANDALONE_PROC definido, tal como se usa en VMWare ESX Server versión 3.0.1 y versión  3.0.2, podría permitir que los atacantes remotos ejecuten código arbitrario por medio de vectores relacionados con la autenticación PAM, una vulnerabilidad diferente de CVE-2008-0003."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of tog-pegasus as shipped with Red Hat Enterprise Linux 4, or 5.  For more details see\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360","lastModified":"2008-01-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpegasus:management_server:*:*:*:*:*:*:*:*","matchCriteriaId":"7B6F73FB-2E43-4A9D-9EF0-019DA9977E10"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C3613B7-CA1B-4C9A-9076-A2894202DDA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE7ECF1C-285C-4AA3-8B66-28EDAB0763E8"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28358","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29986","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3538","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001879.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0063","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0064","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1391/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39524","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001879.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1391/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5394","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-30T20:00:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure, a different vulnerability than CVE-2007-5169 and CVE-2007-6432."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en la biblioteca AldFs32.dll en Adobe PageMaker versiones 7.0.1 y 7.0.2, permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de un archivo .PMD con una estructura de fuente diseñada, una vulnerabilidad diferente de CVE-2007-5169 y CVE-2007-6432."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:pagemaker:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B68D537F-E26B-41DF-BA33-21428F6AB805"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:pagemaker:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"734A3A65-7D14-49CC-B6EB-10DF1D91B8BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/27200","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-80/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-10.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497901/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31975","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021119","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2955","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-80/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497901/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-5397","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el servicio activePDF Server  (también conocido como  APServer.exe) en activePDF Server 3.8.4 y 3.8.5.14, y posiblemente versiones anteriores a 3.8.6.16, que permite a atacantes remotos   ejecutar código de su elección a través de un paquete con un tamaño de campo que es menor que el tamaño de datos actual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activepdf:server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.4","matchCriteriaId":"8AF42C71-D2FD-4EDF-BD1C-59BBC1CADA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:activepdf:server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.5.14","matchCriteriaId":"D4ADBD30-69D0-47D2-A030-42BCD0BC7A62"}]}]}],"references":[{"url":"http://secunia.com/advisories/27371","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-87/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28013","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-87/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5399","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long (1) To, (2) Cc, (3) Bcc, (4) From, (5) Date, (6) Subject, (7) Priority, (8) Importance, or (9) X-MSMail-Priority header; (10) a long string at the beginning of an RFC2047 encoded-word in a header; (11) a long text string in an RFC2047 encoded-word in a header; or (12) a long Subject header, related to creation of an associated filename."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en emlsd.dll en el lector EML en Autonomy (anteriormente Verity) KeyView 10.3.0.0, usado en IBM Lotus Notes, permite a atacantes remotos ejecutar código de su elección a través de un campo largo(1) To(para) , (2) Cc, (3) Bcc, (4) From (desde), (5) Date, (6) Subject (Asunto), (7) Priority, (8) Importance, or (9)cabecera X-MSMail-Priority; (10) una cadena larga al comiezo de un palabra en la cabecera codificada RFC2047; (11)un texto largo al comienzo de un palabra en la cabecera codificada RFC2047; o (12) una cabecera de Subject(Asunto) larga, relacionada con la creación de un fichero asociado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:10.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"589D3BC2-ED1F-4C5B-8F94-67AE1909580D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28209","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-91/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-92/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490832/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490833/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28454","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019842","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41723","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-91/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-92/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490832/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490833/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5400","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el manejador de ventanas (SWF) en RealNetworks RealPlayer 10.5 Build 6.0.12.1483, puede permitir a atacantes remotos ejecutar código de su elección a través de un archivo SWF manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:real:realplayer:10.1:*:*:*:*:*:*:*","matchCriteriaId":"1B4B39F4-A57B-4A2B-9D97-20A5751795E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD49D16C-B0AC-4228-9984-010661596232"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27620","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31321","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35416","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2007-93/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4048","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.kb.cert.org/vuls/id/298651","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0812.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/494749/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/30370","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020562","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43996","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2007-93/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/298651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0812.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494749/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5401","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions."},{"lang":"es","value":"Vulnerabilidad de envío de archivos no restringido en uploadrequest.asp de Layton HelpBox 3.7.1 permite a usuarios autenticados remotamente enviar y ejecutar archivos ASP de su elección, relacionado con no comprobar adecuadamente las extensiones de archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:layton_technology:helpbox:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C49D31B3-8A03-40BF-91A9-708D62FCD0D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/27699","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27187","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39536","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5402","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow (1) remote attackers to execute arbitrary SQL commands via the sys_request_id parameter to editrequestenduser.asp; and allow remote authenticated users to execute arbitrary SQL commands via (2) the oldpassword parameter to writepwdenduser.asp, and the sys_request_id parameter to (3) changerequeststatus.asp, (4) editrequestuser.asp, (5) requestcommentsuser.asp, and (6) useractions.asp, different vectors than CVE-2004-2551."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Layton HelpBox 3.7.1 permite (1) a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sys_request_id en editrequestenduser.asp; y permite a usuarios remotos validados ejecutar comandos SQL de su elección a través del parámetro (2)oldpassword en writepwdenduser.asp, y el parámetro sys_request_id en (3) changerequeststatus.asp, (4) editrequestuser.asp, (5) requestcommentsuser.asp, y (6) useractions.asp, vectores diferentes que CVE-2004-2551."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:layton_technology:helpbox:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C49D31B3-8A03-40BF-91A9-708D62FCD0D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/27699","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27187","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39538","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39539","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5403","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Forename, (2) Surname, (3) Telephone, and (4) Fax fields to writeenduserenduser.asp; the (5) Filter field to statsrequestypereport.asp; and the (6) sys_request_id parameter to requestattach.asp; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) Asset, (8) Location, and (9) Problem fields to editrequestenduser.asp; the (10) Asset, (11) Asset Location, (12) Problem Desc, and (13) Solution Desc fields to editrequestuser.asp; and the (14) End User and (15) Description fields to usersearchrequests.asp.  NOTE: vectors 5 and 6 do not require authentication to exploit."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Layton HelpBox 3.7.1 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de los campos (1) Forename, (2) Surname, (3) Telephone, y (4) Fax de writeenduserenduser.asp; el campo (5) Filter de statsrequestypereport.asp; y el parámetro (6) sys_request_id de requestattach.asp;y permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección a través de los campos (7) Asset, (8) Location, y (9) Problem de editrequestenduser.asp;los campos (10) Asset, (11) Asset Location, (12) Problem Desc, y (13) Solution Desc de editrequestuser.asp; y los campos (14) End User y (15) Description de usersearchrequests.asp. NOTA: los vectores 5 y 6 no requieren autenticación para ser explotados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:layton_technology:helpbox:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C49D31B3-8A03-40BF-91A9-708D62FCD0D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/27699","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27187","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39537","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39540","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39541","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39542","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39543","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5404","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"Layton HelpBox 3.7.1 genera diferentes respuestas dependiendo si un nombre de usuario es válido o no en un intento de fallo de conexión, lo cual permite a atacantes remotos indicar nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:layton_technology:helpbox:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C49D31B3-8A03-40BF-91A9-708D62FCD0D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/27699","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/27187","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39544","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2007-94/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5405","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a .ag file with (1) a long ENCODING attribute in a *BEGIN tag, (2) a long token, or (3) the initial *BEGIN tag."},{"lang":"es","value":"Múltiples desbordamientos de búfer  en kpagrdr.dll 2.0.0.2 y 10.3.0.0 en el lector  Applix Presents de Autonomy (anteriormente Verity) KeyView,usado por IBM Lotus Notes, Symantec Mail Security, y activePDF DocConverter, permite a atacantes remotos ejecutar código de su elección a través de un archivo .ag con (1)un atributo ENCODING largo en la etiqueta *BEGIN, (2) un token largo, o (3) la etiqueta inicial *BEGIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activepdf:docconverter:3.8.2_.5:*:*:*:*:*:*:*","matchCriteriaId":"0D165E31-F294-4F7E-959F-7AFE69AF90A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:activepdf:docconverter:3.8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D4286B71-18BA-4BC0-9E2C-6D00A24974E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E6634684-2416-4A5C-A5C7-B1E946B33419"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:10.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"589D3BC2-ED1F-4C5B-8F94-67AE1909580D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"9608BF57-0D9A-4874-BFDA-C92447FACD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*","matchCriteriaId":"5E7788BD-652E-4306-AED0-6AE7F9A07836"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*","matchCriteriaId":"A8430D5E-A8A7-4724-8A6B-B5E2CA437729"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5:*:domino:*:*:*:*:*","matchCriteriaId":"7D29BE63-3E26-4136-BAB1-AA3D50BA71F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security_appliance:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA92128-13DD-47D8-8822-23C4CDDFB715"}]}]}],"references":[{"url":"http://secunia.com/advisories/27763","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28140","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-95/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-96/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-97/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-98/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019805","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490825/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490837/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490838/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490839/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28454","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019844","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.04.08e.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1154","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41721","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-95/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-96/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-97/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-98/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490825/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490837/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490838/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490839/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.04.08e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5406","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"IBM description: http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453\r\n\r\nSymantec description:\r\nhttp://www.symantec.com/avcenter/security/Content/2008.04.08e.html","cveTags":[],"descriptions":[{"lang":"en","value":"kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, does not properly parse long tokens, which allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted .ag file."},{"lang":"es","value":"kpagrdr.dll 2.0.0.2 y 10.3.0.0 en el lector  Applix Presents de Autonomy (anteriormente Verity) KeyView, usado por IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, no parsea adecuadamente los token largos, lo que permite a atacantes remotos  provocar una denegación de servicio (consumo de memoria y CPU) a través de un fichero .ag manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"692E295E-E650-42D5-AF7A-D6276C3D76E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"50660BA1-A24A-4DBF-AB59-1CF04FA54120"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:*:*:domino:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"6D9CF359-CBCB-4EA2-B189-3CF01CE694D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9C3D6178-9D83-44C7-8EBB-50CDB68CB5EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"9608BF57-0D9A-4874-BFDA-C92447FACD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*","matchCriteriaId":"5E7788BD-652E-4306-AED0-6AE7F9A07836"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*","matchCriteriaId":"A8430D5E-A8A7-4724-8A6B-B5E2CA437729"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:*:*:*:*:*:*:*:*","matchCriteriaId":"3A31DE25-F7B5-4AEA-B870-2B852F4FD8A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/27763","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28140","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-95/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-96/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-97/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-98/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019805","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490825/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490837/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490838/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490839/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28454","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019844","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1154","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41722","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-95/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-96/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-97/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-98/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490825/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490837/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490838/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490839/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5474","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long."},{"lang":"es","value":"El driver para el punto de acceso Wi-Fi de Linksys WRT350N con firmware 2.00.17 y chipset Atheros AR5416-AC1E no realiza correctamente el análisis sintáctico del elemento de información específico del fabricante Atheros en una petición de asociación, lo cual permite a atacantes remotos autenticados provocar una denegación de servicio (reinicio de sistema o cuelgue) o posiblemente ejecutar código arbitrariamente a través de un elemento de información Atheros de longitud no válida, tal y como se ha demostrado  con un elemento demasiado largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:atheros:ar5416-ac1e_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"4A125E74-B624-470B-8923-6AA3C57DBF7E"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt350n:2.00.17:*:*:*:*:*:*:*","matchCriteriaId":"09DD63BB-4E99-4E2B-A94B-13A24897C6E1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4226","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495984/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44921","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495984/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5495","sourceIdentifier":"secalert@redhat.com","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file."},{"lang":"es","value":"Vulnerabilidad en sealert in setroubleshoot 2.0.5, permite a los usuarios locales sobrescribir ficheros arbitrarios a través de un ataque mediate enlace simbólico en el fichero temporal sealert.log \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*","matchCriteriaId":"AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:selinux:setroubleshoot:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5AB054C7-7CE7-4856-82C4-C50248F1DDAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30339","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020077","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0061.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29320","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=288221","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42591","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9705","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=288221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5496","sourceIdentifier":"secalert@redhat.com","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert."},{"lang":"es","value":"Vulnerabilidad de ejecución de código en sitios cruzados en setroubleshoot 2.0.5, permite a usuarios locales inyectar código web oi HTMl a através de (1) un fichero o (2) un nombre de proceso, con disparadores en la entrada del fichero de registro de Access Vector Cache (AVC), durante la creación de documentos HTML para sealert"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*","matchCriteriaId":"AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:selinux:setroubleshoot:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5AB054C7-7CE7-4856-82C4-C50248F1DDAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30339","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020078","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0061.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29324","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=288271","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42592","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10455","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=288271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5498","sourceIdentifier":"secalert@redhat.com","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large number of blocks."},{"lang":"es","value":"El driver Xen hypervisor block backend (situado entre el hardware y el sistema operativo) para el Kernel de Linux 2.6.18, cuando corre en un host de 64 bit con un cliente paravirtualizado de 32 bit, permite a usuarios locales con privilegios provocar una denegación de Servicio (caída del SO del host) en el SO cliente mediante una petición que especifica un número largo de bloques."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"}]}]}],"references":[{"url":"http://secunia.com/advisories/30116","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32918","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29082","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=369531","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42274","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9452","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=369531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5602","sourceIdentifier":"cret@cert.org","published":"2008-02-05T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the (1) svocx.ocx ActiveX control or the (2) npsview.dll plugin for Mozilla and Firefox."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en SwiftView Viewer antes del 8.3.5, como lo utilizaban SwiftView y SwiftSend. Permiten a  atacantes remotos ejecutar código arbitrario a través de vectores no especificados al (1) control svocx.ocx ActiveX o al (2) plugin npsview.dll para Mozilla y Firefox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swiftview:viewer:*:*:windows:*:*:*:*:*","versionEndIncluding":"8.3.4","matchCriteriaId":"C6B0A3D4-80F6-4D0C-99B8-A2BF92552E6F"}]}]}],"references":[{"url":"http://osvdb.org/42836","source":"cret@cert.org"},{"url":"http://osvdb.org/42837","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/28724","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/639169","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27527","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1019287","source":"cret@cert.org"},{"url":"http://www.swiftview.com/tech/security/bulletins/SBSV-07-10-02.htm","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0330","source":"cret@cert.org"},{"url":"http://osvdb.org/42836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/639169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.swiftview.com/tech/security/bulletins/SBSV-07-10-02.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5604","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Vulnerabilidad distinta de CVE-2007-5605, CVE-2007-5606 y CVE-2007-5607."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:1.0.0.22:*:*:*:*:*:*:*","matchCriteriaId":"F9D2FEAB-8821-4034-B793-3F40386028C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/754403","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42844","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/754403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5605","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Vulnerabilidad distinta de CVE-2007-5604, CVE-2007-5606 y CVE-2007-5607."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/558163","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29531","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42845","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/558163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5606","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Vulnerabilidad distinta de CVE-2007-5604, CVE-2007-5605, y CVE-2007-5607."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/221123","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29532","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42846","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/221123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5607","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Vulnerabilidad distinta de CVE-2007-5604, CVE-2007-5605, y CVE-2007-5606."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:1.0.0.22:*:*:*:*:*:*:*","matchCriteriaId":"F9D2FEAB-8821-4034-B793-3F40386028C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/526131","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29534","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42848","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/526131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5608","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second argument, a different vulnerability than CVE-2008-0952 and CVE-2008-0953."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Vulnerabilidad distinta de CVE-2008-0952 y CVE-2008-0953."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/949587","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29530","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42850","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/949587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5610","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the argument."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/857539","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29536","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42852","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/857539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5616","sourceIdentifier":"cret@cert.org","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"ssh-signer en SSH Tectia Client y Server 5.x anterior a 5.2.4, y 5.3.x anterior a 5.3.6, sobre Unix y Linux permite a usuarios locales ganar privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.2.4","matchCriteriaId":"4D56E908-9C03-4EDE-8073-6A694F8EA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.6","matchCriteriaId":"14F18621-132A-4B0B-AA42-218182593597"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.2.4","matchCriteriaId":"D7B22708-3E09-4CFD-B43C-1D3BEA9A0713"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.6","matchCriteriaId":"42A5D80B-7C03-4E4E-9FDA-37359AFA639D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*","matchCriteriaId":"6A90CB3A-9BE7-475C-9E75-6ECAD2106302"}]}]}],"references":[{"url":"http://secunia.com/advisories/28247","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019167","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/921339","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/WDON-7AMRRF","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27191","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0078","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39569","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/921339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/WDON-7AMRRF","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-5655","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointers."},{"lang":"es","value":"TIBCO SmartSockets RTserver 6.8.0 y anteriores, RTworks anterior a 4.0.4, y Enterprise Message Service (EMS) 4.0.0 hasta la 4.4.1 permite a atacantes remotos ejecutar código de su elección a través de respuestas manipuladas que contienen valores que son utilizados como punteros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rtworks:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"1A4F1058-6D26-4FA9-ACC0-8E2CB9E47EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8.0","matchCriteriaId":"8A607554-6A94-47FC-919C-8BC77E72E527"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tibco:ems_server:*:*:*:*:*:*:*:*","matchCriteriaId":"A71A6DEC-C0A5-456D-BB28-EC5CA61BE796"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*","matchCriteriaId":"C559EFC8-9BA6-41F7-AB44-3C10AEC52F56"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28490","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27292","source":"cve@mitre.org"},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39705","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5656","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory."},{"lang":"es","value":"TIBCO SmartSockets RTserver 6.8.0 y anteriores, RTworks anterior a 4.0.4, y Enterprise Message Service (EMS) 4.0.0 hasta la 4.4.1 permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través de respuestas manipuladas que controlan operaciones de bucle relacionados con la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A391F64-B618-4961-942C-109CE548FBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3811EEE8-ED90-4272-BDC9-9FBB7E2ABC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72D4BFCE-FD9B-45D8-B23A-B928B86ED2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A8B14826-B53E-46DC-8AE9-85776867D341"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A42A8728-2B49-4F1F-930C-AB2B808BDDA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50598050-FAC6-42B6-98E5-D02DF85F1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rtworks:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"1A4F1058-6D26-4FA9-ACC0-8E2CB9E47EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8.0","matchCriteriaId":"8A607554-6A94-47FC-919C-8BC77E72E527"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28490","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27293","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39708","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5657","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets."},{"lang":"es","value":"TIBCO SmartSockets RTserver 6.8.0 y anteriores, RTworks anterior a 4.0.4, y Enterprise Message Service (EMS) 4.0.0 hasta el 4.4.1 permite a atacantes remotos ejecutar código de su elección a través de respuestas manipuladas que contienen valores que son utilizados como punteros de compensación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rtworks:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"1A4F1058-6D26-4FA9-ACC0-8E2CB9E47EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8.0","matchCriteriaId":"8A607554-6A94-47FC-919C-8BC77E72E527"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tibco:ems_server:*:*:*:*:*:*:*:*","matchCriteriaId":"A71A6DEC-C0A5-456D-BB28-EC5CA61BE796"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*","matchCriteriaId":"C559EFC8-9BA6-41F7-AB44-3C10AEC52F56"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28490","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27295","source":"cve@mitre.org"},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39707","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5658","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing size and copy-length values that trigger the overflow."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en TIBCO SmartSockets RTserver 6.8.0 y anteriores, RTworks before 4.0.4, y Enterprise Message Service (EMS) 4.0.0 hasta el 4.4.1 permite a atacantes remotos ejecutar código de su elección a través de una respuesta manipulada que contiene valores de tamaño y longitud de copia que dispara el desbordamiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A391F64-B618-4961-942C-109CE548FBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3811EEE8-ED90-4272-BDC9-9FBB7E2ABC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72D4BFCE-FD9B-45D8-B23A-B928B86ED2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A8B14826-B53E-46DC-8AE9-85776867D341"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A42A8728-2B49-4F1F-930C-AB2B808BDDA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50598050-FAC6-42B6-98E5-D02DF85F1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rtworks:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"1A4F1058-6D26-4FA9-ACC0-8E2CB9E47EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8.0","matchCriteriaId":"8A607554-6A94-47FC-919C-8BC77E72E527"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28490","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27294","source":"cve@mitre.org"},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39703","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/mk/advisory.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5659","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T19:00:00.000","lastModified":"2025-10-22T01:15:32.927","vulnStatus":"Deferred","cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.  NOTE: this issue might be subsumed by CVE-2008-0655."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Adobe Reader and Acrobat 8.1.1 y anteriores permiten a atacantes remotos ejecutar código de su elección a través de ficheros PDF con argumentos largos de métodos no especificados de JavaScript.\r\nNOTA: esta cuestión podría ser subsumida por CVE-2008-0655."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndExcluding":"8.1.2","matchCriteriaId":"B1BF2209-B59C-497A-AEA7-154C1A140157"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndExcluding":"8.1.2","matchCriteriaId":"AC62F510-1939-40B4-A219-84FE2C1F7CCA"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29065","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29205","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/666281","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9813","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/666281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-5659","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2007-5661","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T00:44:00.000","lastModified":"2025-08-01T02:04:24.627","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are named as parameters to the control, which allows remote attackers to download arbitrary library code onto a client machine."},{"lang":"es","value":"El control ActiveX Macrovision InstallShield InstallScript One-Click Install (OCI) 12.0 versiones anteriores SP2 no valida los ficheros DLL que se consideran como parámetros del control, lo cual permite a atacantes remotos descargar código de librerías de su elección de la máquina cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:revenera:installshield:*:-:*:*:premier:*:*:*","versionEndExcluding":"12","matchCriteriaId":"3E517998-10B4-4F97-86CE-0B80BD585988"},{"vulnerable":true,"criteria":"cpe:2.3:a:revenera:installshield:*:-:*:*:professional:*:*:*","versionEndExcluding":"12","matchCriteriaId":"6E210100-72C1-4934-84EE-D015EEFDC6B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:revenera:installshield:12:-:*:*:premier:*:*:*","matchCriteriaId":"BC0E32A3-182F-45A5-88E7-B56E89949372"},{"vulnerable":true,"criteria":"cpe:2.3:a:revenera:installshield:12:-:*:*:professional:*:*:*","matchCriteriaId":"1A35FFED-FDF9-40E9-B02C-29BB2E87D0C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:revenera:installshield:12:sp1:*:*:premier:*:*:*","matchCriteriaId":"817F98C8-E328-4234-82C9-C6AE2AD82753"},{"vulnerable":true,"criteria":"cpe:2.3:a:revenera:installshield:12:sp1:*:*:professional:*:*:*","matchCriteriaId":"3560B05C-CD70-4796-8788-DD4CA5A552CF"}]}]}],"references":[{"url":"http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019735","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/28533","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1049","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41558","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://knowledge.macrovision.com/selfservice/microsites/search.do?cmd=displayKC&externalId=Q113640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/28533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-5663","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T19:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in.  NOTE: this issue might be subsumed by CVE-2008-0655."},{"lang":"es","value":"Adobe Reader y Acrobat 8.1.1 y anteriores permite a atacantes remotos ejecutar código de su elección a través de un archivo PDF manipulado que llama a un método JavaScript inseguro en el complemento EScript.api. NOTA: este problema podría estar incluido en CVE-2008-0655."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"3A068220-ADFE-46F0-AE35-3355BEFEECD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"82321E60-2553-41E2-A4F4-375CFF011C0A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/140129","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9928","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/140129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5664","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization."},{"lang":"es","value":"db2dasrrm en DB2 Administration Server (DAS) de IBM DB2 Universal Database 9.5 anterior al Fix Pack 1, 9.1 anterior al Fix Pack 4a, y 8 anterior al FixPak 16, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre archivos usados para su inicialización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*","matchCriteriaId":"3BB95F92-EA60-4301-99AD-AC8DA2491086"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:*:*:*:*:*:*","matchCriteriaId":"01B696CD-C61F-4FDF-A51C-E62CB843BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F01421A6-B4B4-4F86-87D3-B11AEC1258CC"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27870","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019852","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1237/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41848","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1237/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5665","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe binary in the diagnostic report directory."},{"lang":"es","value":"STEngine.exe 3.5.0.20 en Novell ZENworks Endpoint Security Management (ESM) 3.5, y otras versiones ESM anterior a 3.5.0.82, dinamicamente crea secuencias de comandos en un directorio con permisos de escritura para todos cuando genera informes de diagnóstico, lo cual permite a usuarios locales ganar privilegios, como se demostró con la creación del binario cmd.exe en el directorio de informes de diagnóstico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_endpoint_security_management:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"ABC2DB55-8F7A-4E7E-BDFF-F08C1F940805"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=635","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28351","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27146","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019155","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0044","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5666","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T19:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory.  NOTE: this issue might be subsumed by CVE-2008-0655."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en Adobe Reader y Acrobat 8.1.1 y anteriores permite a usuarios locales ejecutar código de su elección a través de una librería maliciosa del proveedor de Seguridad en el directorio de trabajo actual de los lectores. NOTA: este asunto podría estar subsumido por CVE-2008-0655."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"3A068220-ADFE-46F0-AE35-3355BEFEECD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"82321E60-2553-41E2-A4F4-375CFF011C0A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11161","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5671","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\\\.\\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges."},{"lang":"es","value":"HGFS.sys en el VMware Tools package en VMware Workstation 5.x anterior a 5.5.6 build 80404, VMware Player anterior a 1.0.6 build 80404, VMware ACE anterior a 1.0.5 build 79846, VMware Server anterior a 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2, no valida correctamente argumentos en el modo de usuario METHOD_NEITHER IOCTLs hacia  \\\\.\\hgfs, lo que permite al sistema operativo huesped, modificar ubicaciones de memoria de su elección en el núcleo de la memoria del sistema huesped y así obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"700C0BB4-2272-4405-9D9A-A636E3D22461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"8ADCA876-2B69-4267-8467-E7E470428D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3771AFCF-E247-427A-8076-9E36EA457658"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17C124AC-C421-459E-8251-E7B3BD33874B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"65DD6966-72EA-4C4D-BC90-B0D534834BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBFC9B7A-8A40-467B-9102-EE5259EC4D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB9565E5-042E-4C62-A7C7-54808B15F0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8230EFE6-8AB6-41DF-9A46-CAE4E5BB7F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B2C792F-48DA-46B5-B42E-9A045B393531"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"270D5FAD-A226-4F6F-BF0B-2C6D91C525D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"504CD24F-2EC6-45C0-8E46-69BAE8483521"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"294B621F-6C1A-4571-AE13-49495680D255"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA47458-E783-4A6A-ABF1-59E8D87E9B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1BA6DF4-4D53-482A-8820-B9B0E6EBD51D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"974D84A6-F5AB-4F0A-B9B5-9095A0E4733C"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C3613B7-CA1B-4C9A-9076-A2894202DDA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE7ECF1C-285C-4AA3-8B66-28EDAB0763E8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3922","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020197","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493148/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493172/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5358","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5688","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493148/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493172/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5745","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región heap de la memoria en OpenOffice.org versiones anteriores a 2.4, permiten a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo Quattro Pro (QPRO) con (1) Atributo y (2) registros de Descripción de Fuente diseñados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"335E5C44-CC5E-4DD0-9D49-9049D684081C"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=691","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28819","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019891","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435678","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41863","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11006","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5746","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted EMR_STRETCHBLT record, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en OpenOffice.org versiones anteriores a 2.4, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo EMF con un registro EMR_STRETCHBLT especialmente diseñado, que desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"54678E59-299F-4236-86C4-95F5B68C11D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BC884B82-CEF3-47B7-A578-B502AD52DBF2"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=692","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231661-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:090","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5746.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0176.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28819","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019892","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41861","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10249","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231661-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5746.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5747","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow."},{"lang":"es","value":"Subdesbordamiento de enteros en OpenOffice.org versiones anteriores a 2.4, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo Quattro Pro (QPRO) con valores diseñados que desencadenan un bucle excesivo y un desbordamiento de búfer en la región stack de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"C40FFFD3-AD2E-4823-A4AD-14C69E0B9F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6348420-C1BF-4F2B-964A-035A78164BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D4F46C7F-E645-4F87-B897-431039A17BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A76AAD8-2ACB-44C4-895A-FBA85058FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71982BDE-67C3-4BEF-B878-CD5701F48983"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28819","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019891","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41881","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11298","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231601-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5757","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database (UDB) 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library.  NOTE: this might be the same issue as CVE-2008-0697."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en db2pd de IBM DB2 Universal Database (UDB) versiones anteriores a 8 FixPak 16 y versiones anteriores a 9 Fix Pack 4 permite a usuarios locales conseguir privilegios de root mediante la modificación de la variable de entorno DB2INSTANCE para que apunte a una librería maliciosa. \r\nNOTA: esto podría ser la misma cuestión que CVE-2008-0697.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fixpak_15:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"85F3A6E3-CC1B-4641-9DEC-179823897C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.0:fixpak_3a:*:*:*:*:*:*","matchCriteriaId":"51075EBA-905B-4165-8674-44E406A2177C"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=653","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019319","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5758","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en db2dasrrm del DB2 Administration Server (DAS) en IBM DB2 Universal Database 9.5 anterior a Fix Pack 1, 9.1 anterior a Fix Pack 4a, y 8 anterior a FixPak 16; permite a usuarios locales ejecutar código de su elección mediante una larga variable de entorno DASPROF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*","matchCriteriaId":"3BB95F92-EA60-4301-99AD-AC8DA2491086"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:*:*:*:*:*:*","matchCriteriaId":"01B696CD-C61F-4FDF-A51C-E62CB843BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F01421A6-B4B4-4F86-87D3-B11AEC1258CC"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=689","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27870","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019853","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1237/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41847","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1237/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5760","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index."},{"lang":"es","value":"Error de índice de Array en la extensión XFree86-Misc de X.Org Xserver versiones anteriores a 1.4.1 permite a atacantes locales o remotos dependientes del contexto ejecutar código de su elección mediante una petición PassMessage conteniendo un índice de array largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"EBC8352E-BBB6-4B41-AD07-447D8D71CE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:xfree86-misc:*:*:*:*:*:*:*:*","matchCriteriaId":"D07789B6-CC72-4B9E-B712-6CF5B81E5814"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=646","source":"cve@mitre.org"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28273","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28539","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28540","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28584","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30161","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019232","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27336","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27354","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39766","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11718","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/571-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/571-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5761","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\\\.\\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a denial of service (system crash), as demonstrated by modifying the SYSENTER_EIP_MSR CPU Model Specific Register (MSR) value."},{"lang":"es","value":"El dispositivo NantSys  5.0.0.115 en Motorola netOctopus 5.1.2 construcción 1011 tiene permisos débiles para el dispositivo de interfaz \\\\.\\NantSys (nantsys.sys), el cual permite a usuarios locales ganar privilegios o provocar denegación de servicio (caida de sistema), como se demostró con la modificación del valor SYSENTER_EIP_MSR CPU Model Specific Register (MSR)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:motorola:netoctopus:5.1.2_build_1011:*:*:*:*:*:*:*","matchCriteriaId":"0705A9F9-E77C-4F5C-9CAE-CB1E52F4A758"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28366","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019161","source":"cve@mitre.org"},{"url":"http://www.netopia.com/support/software/technotes/netoctopus/Removing_the_nantsys_Driver.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27175","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39503","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netopia.com/support/software/technotes/netoctopus/Removing_the_nantsys_Driver.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5762","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\\\.\\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode."},{"lang":"es","value":"El controlador NICM.SYS 3.0.0.4, como el utilizado en Novell NetWare Client 4.91 SP4, permite a usuarios locales ejecutar código de su elección abriendo el dispositivo \\\\.\\nicm y proporcionando direcciones del núcleo manipuladas mediante IOCTLs con modo de uso de búfer METHOD_NEITHER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netware_client:4.91:sp4:*:*:*:*:*:*","matchCriteriaId":"D33517C1-1716-4535-8AC6-FE6490FC5A39"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=4FmI89wOmg4~","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28396","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27209","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019172","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0088","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39576","source":"cve@mitre.org"},{"url":"http://download.novell.com/Download?buildid=4FmI89wOmg4~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5763","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2023-11-07T02:01:22.623","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0401.  Reason: This candidate is a reservation duplicate of CVE-2008-0401.  Notes: All CVE users should reference CVE-2008-0401 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2007-5764","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long command line option."},{"lang":"es","value":"Desbordamiento de búfer en el programa pioout de printers.rte en IBM AIX 5.2, 5.3, y 6.1 permite a usuarios locales obtener privilegios mediante una opción larga de línea de comando."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10840","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10841","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10842","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27428","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019264","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4078","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39912","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5616","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5803","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en programas CGI en Nagios versiones anteriores a  2.12,  podrían permitir a atacantes remotos inyectar script web o HTML arbitrario por medio  de vectores no especificados, un problema diferente de CVE-2007-5624 y CVE-2008-1360."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"52432776-C9C6-4CA7-B3D9-87513CBA5716"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"601958D5-B393-4EFA-9A6F-A5A04A95F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b3:*:*:*:*:*:*:*","matchCriteriaId":"99B2E88A-A611-43C5-8037-411D6B78EC03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*","matchCriteriaId":"2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b5:*:*:*:*:*:*:*","matchCriteriaId":"E61ACC55-1002-4FA3-8E5A-52041CE5DCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b6:*:*:*:*:*:*:*","matchCriteriaId":"6C773265-0BE7-463A-8E24-84D804F14AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A847327-D74E-460C-9F6F-E04C9B77E0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F7425E3-F152-439B-B95F-5160E4593DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E5911624-5BD8-4A40-B417-FCD926D352BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF45013F-A844-4726-8B2A-EF602A3BC4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A91E463-D239-4853-8A63-E01EE7DB319F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"239CAF7F-E9BF-4D0F-BB99-EF51E1366516"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"738DF14D-A716-46F0-87AC-2DB2F1E44594"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"4E8E1234-9F0D-4E6F-BF58-5DAE8E41DB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"0073F69B-C5FA-470A-BA95-9C4E8033F5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b5:*:*:*:*:*:*:*","matchCriteriaId":"AAA7C5B6-C13D-4814-AA7B-444CF12E4DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b6:*:*:*:*:*:*:*","matchCriteriaId":"E1209D1C-DD27-41FC-8DAF-BFC0B4B1D602"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"39551FFC-E1F0-4D45-ADA6-AB3E74BB576D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"7BED52AA-BE20-447C-8896-4B591C42F66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.1:*:*:*:*:*:*:*","matchCriteriaId":"82DE68E3-7003-4675-96A9-6F7308E1E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E3F8DC3-2F34-4E11-A796-4EA7CB17FDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:*","matchCriteriaId":"7ADCBA8C-06DB-4D85-AEED-807E64A29DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D3EE2D7-BD17-4C37-ABA3-79FCE8328EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.4:*:*:*:*:*:*:*","matchCriteriaId":"927B8496-720D-4B15-A12E-52169AFB38D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9E80B2-E349-488F-A870-9BD50D47A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4C3374C3-9F57-4014-8712-DDDAB52998FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E5D4F00F-C732-477B-988A-25F8E8D32D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.11:*:*:*:*:*:*:*","matchCriteriaId":"725F9938-0A5C-4A59-BFA4-C58044DE26DB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30202","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600377","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600377&group_id=26589","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29140","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1567/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42522","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600377&group_id=26589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1567/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5958","sourceIdentifier":"secalert@redhat.com","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists."},{"lang":"es","value":"X.Org Xserver versiones anteriores a 1.4.1 permite a usuarios locales determinar la existencia de ficheros de su elección mediante un argumento nombre de fichero en la opción -sp en el programa X, lo cual produce diferentes mensajes de error dependientes de si el fichero existe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"EBC8352E-BBB6-4B41-AD07-447D8D71CE7D"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28273","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28532","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28535","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28540","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28542","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28543","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28584","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28592","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28718","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28885","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28997","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29420","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29622","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29707","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32545","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019232","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27336","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27356","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39769","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1970","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/571-1/","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/5152","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/571-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5961","sourceIdentifier":"secalert@redhat.com","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la característica de búsqueda de canal en Red Hat Network, como las usadas en RHN y Red Hat Network Satelite anteriores a 5.0.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:network_satellite:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"F7B591BB-5B16-4252-968C-8BE929857E08"}]}]}],"references":[{"url":"http://osvdb.org/45765","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020051","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=396641","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42559","source":"secalert@redhat.com"},{"url":"http://osvdb.org/45765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=396641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5962","sourceIdentifier":"secalert@redhat.com","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option."},{"lang":"es","value":"Filtrado de memoria en cierto parche de Red Hat, aplicado a vsftpd 2.0.5 vsftpd 2.0.5 sobre Red Hat Enterprise Linux (RHEL) 5, Fedora 6 a la 8, Foresight Linux y aplicaciones rPath, permite a atacantes remotos provocar una denegación de servicio (Consumo de memoria) a través una un gran número de comandos CWD, como se ha demostrado mediante un ataque al demonio con la opción de configuración deny_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:6:*:*:*:*:*:*:*","matchCriteriaId":"FE785318-36E2-4865-918F-CCCDD0995C68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:foresight_linux:appliances:*:*:*:*:*:*:*:*","matchCriteriaId":"4AD8CF33-C113-49FA-8FB4-C81DE4D70468"},{"vulnerable":true,"criteria":"cpe:2.3:h:rpath:appliance_platform_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"8F332836-94B6-469E-9207-439A48CF06C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30341","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30354","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020079","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0185","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/10","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/12","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/8","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0295.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/493167/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29322","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1600","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=397011","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42593","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8850","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/5814","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00681.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00691.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00699.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/493167/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=397011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00681.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00691.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00699.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5965","sourceIdentifier":"secalert@redhat.com","published":"2008-01-08T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user."},{"lang":"es","value":"QSslSocket de Trolltech Qt 4.3.0 hasta 4.3.2 no verifica apropiadamente certificados SSL, lo cual facilita a atacantes remotos engañar a un usuario para que acepte un certificado de servidor inválido para un servicio suplantado, ó engañar a un servicio a aceptar un certificado cliente inválido de un usuario."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of qt or qt4 packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-01-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qsslsocket:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3FF434-BE6C-4C4B-8356-14D31497D4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qsslsocket:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"336C6B49-EDF5-44FD-8437-D03116D01F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qsslsocket:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9CE4CAED-50AD-4D3E-92C9-8CF96DC3446D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28228","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28321","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28999","source":"secalert@redhat.com"},{"url":"http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:042","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27112","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-579-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0018","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=427232","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-579-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=427232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6016","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-02-29T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states \"Authenticated user involvement required,\" but authentication is not needed to attack a client machine that loads this control."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el control ActiveX PVATLCalendar.PVCalendar.1 en el archivo pvcalendar.ocx en el componente scheduler en el Servidor Multimedia en Symantec Backup Exec for Windows Server (BEWS) versiones 11d 11.0.6235 y 11.0.7170, y versiones 12.0 12.0.1364, permite a atacantes remotos ejecutar código arbitrario por medio de un valor de propiedad largo (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _TextoMes3, (12) _TextoMes4, (13) _TextoMes5, (14) _TextoMes6, (15) _TextoMes7, (16) _TextoMes8, (17) _TextoMes9, (18) _TextoMes10, o (19) _TextoMes11, cuando se ejecuta el método Save. NOTA: el proveedor declara \"Authenticated user involvement required,\" pero la autenticación no es necesaria para atacar una máquina cliente que carga este control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.6235:*:*:*:*:*:*","matchCriteriaId":"7BB204AD-5637-4408-858E-DBEB2EDAB292"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.7170:*:*:*:*:*:*","matchCriteriaId":"90137D90-F420-45C7-9662-802D7EF61A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:12.0:12.0.1364:*:*:*:*:*:*","matchCriteriaId":"1CBEACF9-E444-4433-8587-09FE25CAF79E"}]}]}],"references":[{"url":"http://secunia.com/advisories/27885","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-101/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019524","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://seer.support.veritas.com/docs/308669.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/26904","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.28.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.29.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0718","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2672","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5205","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-101/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.support.veritas.com/docs/308669.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.28.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6017","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-02-29T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote attackers to cause a denial of service (browser crash), or create or overwrite arbitrary files, via string values of the (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, and (19) _MonthText11 properties. NOTE: the vendor states \"Authenticated user involvement required,\" but authentication is not needed to attack a client machine that loads this control."},{"lang":"es","value":"El Control ActiveX de PVATLCalendar.PVCalendar.1 en el archivo pvcalendar.ocx en el componente scheduler en el servidor multimedia de Symantec Backup Exec para Windows Server (BEWS) 11d versiones 11.0.6235 y 11.0.7170 y 12.0 12.0.1364, expone el método Save no seguro, que permite a atacantes remotos causar una denegación de servicio (bloqueo del navegador), o crear o sobrescribir archivos arbitrarios, por medio de valores de cadena de las propiedades (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, y (19) _MonthText11. NOTA: el proveedor indica \"Authenticated user involvement required\", pero no es necesaria la autenticación para atacar un equipo cliente que carga este control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.6235:*:*:*:*:*:*","matchCriteriaId":"7BB204AD-5637-4408-858E-DBEB2EDAB292"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.7170:*:*:*:*:*:*","matchCriteriaId":"90137D90-F420-45C7-9662-802D7EF61A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:12.0:12.0.1364:*:*:*:*:*:*","matchCriteriaId":"1CBEACF9-E444-4433-8587-09FE25CAF79E"}]}]}],"references":[{"url":"http://secunia.com/advisories/27885","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-101/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019525","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://seer.entsupport.symantec.com/docs/300471.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://seer.support.veritas.com/docs/308669.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://support.veritas.com/docs/300471","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28008","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.28.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.29.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0718","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2672","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-101/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.entsupport.symantec.com/docs/300471.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.support.veritas.com/docs/308669.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.veritas.com/docs/300471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.28.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.29.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6018","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-11T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) \"purge\" deleted emails via a crafted email message."},{"lang":"es","value":"IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, y Horde Groupware Webmail Edition 1.0.3 no validan peticiones HTTP no especificadas, lo cual permite a atacantes remotos (1) borrar mensajes de correo electrónico de su elección mediante un ID numérico modificado o (2) \"purgar\" correos electrónicos eliminados mediante un mensaje de correo electrónico manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:framework:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"8873E0B6-9A41-4D39-BB6F-06EF2F4BCB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"664B0D12-607C-4B5F-AC8E-FB1BBD1332E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"96A4F9E2-7978-4C82-9BD3-B6B73C4918E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C129AAEE-5388-4D81-AC1F-570EFF27EF89"}]}]}],"references":[{"url":"http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17&r2=1.17.2.1&ty=h","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1&ty=h","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.horde.org/archives/announce/2008/000360.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28020","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28546","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29184","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29185","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29186","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34418","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2007-102/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1470","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/27223","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428625","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39595","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00888.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00927.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17&r2=1.17.2.1&ty=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1&ty=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000360.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2007-102/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00888.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00927.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6019","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly."},{"lang":"es","value":"Adobe Flash Player 9.0.115.0 y versiones anteriores, y 8.0.39.0 y versiones anteriores, permite a atacantes remotos ejecutar código de su elección a través de un fichero SWF con una etiqueta modificada DeclareFunction2 Actionscript, lo cual evita que un objeto sea instanciado adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash:basic:8:*:*:*:*:*:*","matchCriteriaId":"AE84A707-495C-4690-9E37-60D8DED51342"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash:professional:8:*:*:*:*:*:*","matchCriteriaId":"81CE77EB-2050-4EC5-957F-90F4F96230A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash:professional:cs3:*:*:*:*:*:*","matchCriteriaId":"5845F66C-214D-48AE-BE8B-28A19F2D757C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.115.0","matchCriteriaId":"5E284324-E67D-4C9A-9144-D08908BBD299"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0_r67:*:*:*:*:*:*:*","matchCriteriaId":"7AB20235-B2F2-426E-B797-BFA361CEC488"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29763","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29865","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30507","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3805","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490623/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490824/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28694","source":"PSIRT-CNA@flexerasoftware.com","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019810","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-021","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41717","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490623/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490824/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6020","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en foliosr.dll en el lector rápido Folio Flat File de Autonomy (anteriormente Verity) KeyView 10.3.0.0, usado por IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, permiten a atacentes remotos ejecutar código de su eleccióna través de un valor largo en los atributos de las etiquetas (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS en un fichero .fff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activepdf:docconverter:3.8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D4286B71-18BA-4BC0-9E2C-6D00A24974E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E6634684-2416-4A5C-A5C7-B1E946B33419"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:10.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"589D3BC2-ED1F-4C5B-8F94-67AE1909580D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"9608BF57-0D9A-4874-BFDA-C92447FACD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*","matchCriteriaId":"5E7788BD-652E-4306-AED0-6AE7F9A07836"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*","matchCriteriaId":"A8430D5E-A8A7-4724-8A6B-B5E2CA437729"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5:*:domino:*:*:*:*:*","matchCriteriaId":"7D29BE63-3E26-4136-BAB1-AA3D50BA71F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security_appliance:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA92128-13DD-47D8-8822-23C4CDDFB715"}]}]}],"references":[{"url":"http://secunia.com/advisories/27763","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28140","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-104/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-105/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-106/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-107/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019805","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490827/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490829/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490830/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490831/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28454","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019841","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.04.08e.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1154","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41716","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-104/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-105/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-106/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-107/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490829/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490830/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490831/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.04.08e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6021","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-30T20:00:00.840","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en Adobe PageMaker versiones 7.0.1 y 7.0.2, permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de un archivo .PMD con una estructura de fuente diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:pagemaker:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B68D537F-E26B-41DF-BA33-21428F6AB805"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:pagemaker:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"734A3A65-7D14-49CC-B6EB-10DF1D91B8BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/27200","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-80/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-10.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497901/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31975","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021119","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2955","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-80/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497901/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-6067","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted \"complex\" regular expression with doubly-nested states."},{"lang":"es","value":"Vulnerabilidad de complejidad algorítmica en el analizador de la expresión regular en TCL en versiones anteriores a 8.4.17, tal como se utiliza en PostgreSQL 8.2 en versiones anteriores a 8.2.6, 8.1 en versiones anteriores a 8.1.11, 8.0 en versiones anteriores a 8.0.15 y 7.4 en versiones anteriores a 7.4.19, permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de memoria) a través de una expresión regular \"compleja\" manipulada con estados doblemente anidados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*","matchCriteriaId":"4064A96D-84D5-4257-9981-1139CD4CD08C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C98290E4-2919-4492-BD14-BB24BA85C729"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B56E9F72-6CBF-4784-89CD-435A030AC0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"03B480F0-8FFC-4463-ADC6-95906751811C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"629881D2-2A6D-4461-8C35-6EE575B63E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A19EB5-A1AF-4293-854D-347CD21065DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B18ED293-B408-435F-9D1F-2365A2E51022"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"E7106B29-76F3-43FD-BF57-4693D5B55076"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*","matchCriteriaId":"16B804CD-AE47-4B46-9B37-7F46D4C9A332"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*","matchCriteriaId":"D23E89A3-551D-42E2-90EC-59A9DAB4F854"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*","matchCriteriaId":"2FC46594-100B-459F-BCB7-1FA9D0719D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.14:*:*:*:*:*:*:*","matchCriteriaId":"AECD278B-55A7-4BCC-8AF1-004F02A96BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.15:*:*:*:*:*:*:*","matchCriteriaId":"95DB94EF-32AE-4DD9-A9A4-4F7D4BE5F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.16:*:*:*:*:*:*:*","matchCriteriaId":"DE0ED225-91C8-4FA6-9E33-A1D1AA99AA9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.19:*:*:*:*:*:*:*","matchCriteriaId":"99679F07-ED44-47EE-AD51-3139F30B88DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*","matchCriteriaId":"FBE2567C-BF48-4255-9E56-590A6F9DD932"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20C8302B-631A-4DF7-839B-C6F3CC39E000"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FB318EB9-1B49-452A-92CF-89D9BA990AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5913A53B-7B72-4CBD-ADAE-318333EB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"815E58C0-327D-4F14-B496-05FC8179627E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3EF2D056-5120-4F98-8343-4EC31F962CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"516E0E86-3D8A-43F9-9DD5-865F5C889FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A7FC7F18-B227-4C46-9A33-FB34DDE456CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BCDB903F-0C89-4E65-857E-553CF9C192E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"CD0DEB63-CA70-44C1-9491-E0790D1A8E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"DA8E73E5-BA41-4FA2-8457-803A97FB00C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*","matchCriteriaId":"94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"105E9F52-D17E-4A0B-9C46-FD32A930B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE2055D-AAA4-4A6A-918F-349A9749AF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C12409B2-161B-4F78-B7AD-3CF69DDCC574"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD2F1DA4-6625-469D-988B-5457B68851A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2E26D52-D95A-4547-BE6E-4F142F54A624"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4AAB2D1D-BE61-4D7C-B305-58B4F4126620"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EEE16023-9A5E-46D5-B597-E6885C224786"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.317:*:*:*:*:*:*:*","matchCriteriaId":"C8E78663-EBEA-4C00-9CD0-2115676C86E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FEEC35A2-B17C-46EC-8697-9E03568339BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B52D093-7867-4FE8-B055-D8190103A1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF855730-C61C-4FDC-96CB-57775A903421"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"02DC4E8A-A728-4734-B67A-C58C37DA90C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:*:*:*:*:*:*:*:*","versionEndIncluding":"8.4.16","matchCriteriaId":"8A797831-3F58-45FD-86F7-5B0A9AA038DB"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0122.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28359","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28437","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28438","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28454","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28455","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28477","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28698","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29638","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019157","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/about/news.905","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39498","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10235","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/568-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/about/news.905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/568-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6148","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspecified sequence of Real Time Message Protocol (RTMP) requests."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación (use-after-free) en el servidor Edge de Adobe Flash Media Server 2 versiones anteriores a  2.0.5, y Connect Enterprise Server 6 versiones anteriores a SP3, permite a atacantes remotos ejecutar código de su elección a través de una secuencia no especificada de la petición Real Time Message Protocol (RTMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:connect_enterprise_server:*:sp2:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"842B6CFF-CF79-48CF-9B06-E86B4DA80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server_2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"239C1517-C0FF-430A-BCDF-77C6270A3C48"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28946","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28947","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-03.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-04.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27762","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019398","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0538/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0539","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0538/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6149","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time Message Protocol (RTMP) message with a crafted integer field that is used for allocation."},{"lang":"es","value":"Múltiples desbordamientos de enteros (integers) en Edge server de Adobe Flash Media Server 2 antes de 2.0.5 y Connect Enterprise Server 6 antes de SP3. Permiten a atacantes remotos ejecutar código de su elección a través de un  mensaje Real Time Message Protocol (RTMP) con un campo entero manipulado que se usa para reserva de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:connect_enterprise_server:*:sp2:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"842B6CFF-CF79-48CF-9B06-E86B4DA80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server_2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"239C1517-C0FF-430A-BCDF-77C6270A3C48"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28946","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28947","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-03.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-04.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27762","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019399","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0538/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40471","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0538/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6250","sourceIdentifier":"cret@cert.org","published":"2008-01-09T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), como el utilizado en el control ActiveX AmpX (AmpX.dll), podría permitir a atacantes remotos ejecutar código de su elección a través del método AppendFileToPlayList."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aolmediaplaybackcontrol:*:*:*:*:*:*:*:*","matchCriteriaId":"86250B2F-4218-4F5B-81C6-436309247A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ampx:*:*:*:*:*:*:*:*","matchCriteriaId":"79984371-2F9F-4B0C-A062-B862FB54FE40"}]}]}],"references":[{"url":"http://secunia.com/advisories/28399","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/568681","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27207","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1019173","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0085","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39592","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/28399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/568681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6252","sourceIdentifier":"cret@cert.org","published":"2008-03-03T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be obtained from: http://www.securityfocus.com/bid/28058/info\r\n\r\nInstructions on disabling Active X in internet explorer is located here:\r\nhttp://support.microsoft.com/kb/240797","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Learn2 Corporation STRunner (aka Street Technologies) ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control ActiveX Learn2 Corporation STRunner (también conocido como Street Technologies) de iestm32.dll permiten a atacantes remotos ejecutar código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:learn2:strunner:*:*:*:*:*:*:*:*","matchCriteriaId":"10D532A0-FE3F-41B1-AA1C-FEB606DB80FB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29195","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/524857","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28058","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0733","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40973","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/29195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/524857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6253","sourceIdentifier":"cret@cert.org","published":"2008-03-12T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the (1) Adobe File Dialog Button (FileDlg.dll) and the (2) Adobe Copy to Server Object (SvrCopy.dll) ActiveX controls."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Adobe Form Designer versión 5.0 y Form Client versión  5.0, permiten a atacantes remotos ejecutar código arbitrario por medio  de vectores desconocidos en los controles ActiveX de (1) Adobe File Dialog Button (biblioteca FileDlg.dll) y (2) Adobe Copy to Server Object (biblioteca SvrCopy.dll)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:form_client:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2A6E54F6-AF15-4A2E-8C46-A6E043B158D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:form_designer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CBA789DC-3CDA-4613-8202-3501097D0B19"}]}]}],"references":[{"url":"http://secunia.com/advisories/29330","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-09.html","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/362849","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28210","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019601","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0863/references","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41142","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/29330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/362849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0863/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6254","sourceIdentifier":"cret@cert.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX SAP Business Objects BusinessObjects RptViewerAX en RptViewerAX.dll de Business Objects 6.5 anterior a CHF74 permite a atacantes remotos ejecutar código de su elección utilizando vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:business_objects:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"1BD5A176-9F56-45BB-8A01-F14DED89413D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29437","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/329673","source":"cret@cert.org","tags":["Exploit","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-732R7X","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28292","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1019668","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0927/references","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41256","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/29437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/329673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-732R7X","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0927/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6255","sourceIdentifier":"cret@cert.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX Microsoft HeartbeatCtl en HRTBEAT.OCX permite a atacantes remotos ejecutar código de su elección a través del argumento Host en un método no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*","matchCriteriaId":"18420EC8-633E-4AED-B33F-5A3C673C396D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:professional:*:*:*:x64:*","matchCriteriaId":"39DC2489-8FB9-4301-A966-268DE7D0A503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:professional:*:*:*:x64:*","matchCriteriaId":"C551BCF9-358A-46F5-8592-E309D3EBC5F3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://osvdb.org/44652","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/570089","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28882","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41940","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/44652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/570089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-6258","sourceIdentifier":"cret@cert.org","published":"2008-02-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el módulo de Apache legacy mod_jk2 2.0.3-DEV y anteriores permiten a atacantes remotos ejecutar código de su elección a través de una (1) cabecera Host larga o (2) Hostname dentro de una cabecera Host larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0CA42140-E4FD-433A-BAF3-A12CD558F912"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8D178D51-8C86-419D-BC71-76EADD61CBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9BBE7148-D24F-4D43-B766-5550D139BF75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:2.0.3_dev:*:*:*:*:*:*:*","matchCriteriaId":"758CE28D-573B-4791-8889-BBD2E7A088AA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip:9.2.3.30:*:*:*:*:*:*:*","matchCriteriaId":"ACF26DE2-D526-4845-A886-8199520A6A09"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3661","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.ioactive.com/pdfs/mod_jk2.pdf","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdf","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/771937","source":"cret@cert.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487983/100/100/threaded","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27752","source":"cret@cert.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0572","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"https://www.exploit-db.com/exploits/5330","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5386","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/3661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ioactive.com/pdfs/mod_jk2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/771937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487983/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://www.exploit-db.com/exploits/5330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2007-6282","sourceIdentifier":"secalert@redhat.com","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV."},{"lang":"es","value":"La implementación IPsec en el Kernel de Linux, versiones anteriores a la 2.6.25, permite a routers remotos provocar una denegación de servicio (caída) a través de un paquete ESP fragmentado en el que el primer fragmento no contiene la cabecera ESP y el IV (Vector de Inicialización) completos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*","matchCriteriaId":"6BF1F027-C9FF-4583-AB40-E0B757F9EE41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*","matchCriteriaId":"B18EBE6E-482D-435D-851C-73EC301F0A26"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4:*:*:*:*:*:*:*","matchCriteriaId":"D986CAD0-F4E0-4F97-B240-8967CD4466FB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=linux-netdev&m=120372380411259&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30112","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30294","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30890","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31107","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31628","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0275.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29081","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=404291","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42276","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10549","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-netdev&m=120372380411259&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0275.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=404291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6284","sourceIdentifier":"secalert@redhat.com","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences."},{"lang":"es","value":"La función xmlCurrentChar de libxml2, en versiones anteriores a la 2.6.31, permite que algunos atacantes, dependiendo del contexto, provoquen denegación de servicio (por bucle infinito) usando un XML que contenga secuencias no válidas de UTF-8.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*","matchCriteriaId":"5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*","matchCriteriaId":"AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*","matchCriteriaId":"5EACF214-FA27-44FF-A431-927AB79377A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*","matchCriteriaId":"E2B58895-0E2A-4466-9CB2-0083349A83B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*","matchCriteriaId":"03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*","matchCriteriaId":"2311919C-7864-469D-B0F6-9B11D8D0A1C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*","matchCriteriaId":"19876495-4C1A-487C-955A-C5AA46362A1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*","matchCriteriaId":"D75286DD-50BC-4B72-8AC8-E20730124DC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*","matchCriteriaId":"1998C972-497E-4916-B50E-FB32303EEA8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*","matchCriteriaId":"A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*","matchCriteriaId":"6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"08E90AFA-C262-46D0-B60E-26B67C9602D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*","matchCriteriaId":"02362C25-B373-4FB1-AF4A-2AFC7F7D4387"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:*","matchCriteriaId":"19AD5F8D-6EB9-4E4B-9E82-FFBAB68797E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*","matchCriteriaId":"19D64247-F0A0-4984-84EA-B63FC901F002"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"316AA6EB-7191-479E-99D5-40DA79E340E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"CB7AD2F3-451D-4F37-A6F3-DE676804BBA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"5FE8C9E7-15C3-4F89-8E54-C9691FAD4E4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2BB0B27C-04EA-426F-9016-7406BACD91DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94F65351-C2DA-41C0-A3F9-1AE951E4386E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"1B795F9F-AFB3-4A2A-ABC6-9246906800DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=202628","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000009.html","source":"secalert@redhat.com"},{"url":"http://mail.gnome.org/archives/xml/2008-January/msg00036.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28444","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28450","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28452","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28458","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28466","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28470","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28475","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28716","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28740","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29591","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31074","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200801-20.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019181","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103201-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201514-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-047.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-050.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1461","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:010","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0032.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486410/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490306/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27248","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0117","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0144","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1033/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"secalert@redhat.com"},{"url":"http://www.xmlsoft.org/news.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=425927","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2121","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11594","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5216","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/569-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00379.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00396.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=202628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.gnome.org/archives/xml/2008-January/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103201-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201514-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-047.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-050.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486410/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490306/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1033/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=425927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/569-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00379.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00396.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6286","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of \"a duplicate copy of one of the recent requests,\" as demonstrated by using netcat to send the empty request."},{"lang":"es","value":"Apache Tomcat de 5.5.11 a 5.5.25 y de 6.0.0 a 6.0.15, cuando se utiliza el conector ARP nativo no maneja correctamente una petición vacía al puerto SSL, lo que permite a atacantes remotos disparar el manejo de \"una copia duplicada de una de las peticiones recientes\", como se demostró utilizando netcat para enviar la petición vacía."}],"vendorComments":[{"organization":"Red Hat","comment":"Not Vulnerable.  Red Hat does not ship a version of Apache Tomcat that enables the native APR connector.","lastModified":"2008-04-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29711","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30676","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3637","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487823/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0488","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487823/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6313","sourceIdentifier":"cve@mitre.org","published":"2008-02-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements."},{"lang":"es","value":"MySQL Server 5.1.x antes de 5.1.23 y 6.0.x antes de 6.0.4 no comprueba los privilegios de entidad ejecutando BINLOG, lo que permite a usuarios autorizados remotamente ejecutar sentencias BINLOG de su elección."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-02-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"78D57F50-6907-4F3A-B6C8-A7F96191E57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2AA549DB-8870-41C2-881A-018C1FA66A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"85C4F943-4457-43CB-BCD4-89A593446877"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1F9345D2-DFFC-4932-B967-996363D5556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A950B554-660F-474E-A0E0-55EAE4CF0ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0E77E350-47C9-4286-8B2E-2021974F2AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BB79AEDA-C256-4B5C-953F-5C8BFFF80612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2D6F573E-B1E5-4AB3-BEA7-130EF8AD51C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"62D4CC90-D892-4E1D-A6D7-9A50FAF9466C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D211EF2D-AF05-441E-8C6C-7F3CB4AFC417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2A79BEFA-B205-4C94-9575-EB970823B935"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"16939E17-0791-4B50-A6E1-4A2FF3C02109"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"0D39E098-FBFC-42EC-835B-AB487807D176"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"902F6029-CB42-4A3B-9D9B-4F5134871685"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"7428EF7D-3ECA-4C54-A945-AD03CA3EEA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"798A89AA-4CD7-4402-9B14-B45970022C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"879DEFCF-B345-41ED-8A2E-531FBD7A2FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"8313D34E-CE00-4B0B-B30F-9E2591BD515A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"E0E05202-0E64-4698-970A-DCF665E0E9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"4C85219E-C93F-4DCC-9507-AD6B00CAD687"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"DC835BFC-8AE7-4A01-99C1-C7EFDBFA8A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A022751-FE6D-4C5D-AB02-22C44D7E6B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AC3405E4-CFB2-4C28-A064-C5DF930D7265"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F7C8380-7E23-4434-B23E-1885E45D6FFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8E82B78B-BA41-4054-8ABC-6B11FD550C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql_community_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"682DC73C-2EEC-4939-9BF8-2F9C238374F7"}]}]}],"references":[{"url":"http://bugs.mysql.com/31611","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/43179","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019083","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0560/references","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/31611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0560/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6319","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating \"new accounts that collide with existing accounts.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Lyris ListManager 8.x versiones posteriores a la 8.95d, 9.2  versiones posteriores a la 9.2c y 9.3 versiones posteriores a la 9.3b, permiten a atacantes remotos (1) conseguir privilegios de administrador o (2) acceder a listas de correo de su elección a través de vectores no conocidos relacionados con la modificación de la información de la parte cliente y (3) permitir a administradores remotos autenticados modificar datos de otra cuenta creando “nuevas cuentas que colisionan con otras ya existentes”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*","matchCriteriaId":"73133FFC-F2D6-44FB-A0EB-B8032BE1E45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:8.95a:*:*:*:*:*:*:*","matchCriteriaId":"C0A40E4E-E122-49F9-9BBE-D3D147E219AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:8.95b:*:*:*:*:*:*:*","matchCriteriaId":"B50A3C7E-7BD3-4811-A48B-C1DE1FA2290D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:8.95c:*:*:*:*:*:*:*","matchCriteriaId":"1723FC6E-0A53-444A-8FB1-DAB0F8C0F95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:9.2:*:*:*:*:*:*:*","matchCriteriaId":"666997DC-6DFC-4E69-B756-73AC512744EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:9.2a:*:*:*:*:*:*:*","matchCriteriaId":"EDD4E440-95BB-4B79-A6C1-D5B7E2D9E2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:9.2b:*:*:*:*:*:*:*","matchCriteriaId":"BD10C9A9-7F4E-4177-BD91-297EBCF70A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:9.3:*:*:*:*:*:*:*","matchCriteriaId":"03038BF0-4B6D-4E54-8D94-70CF0AC9CCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:9.3a:*:*:*:*:*:*:*","matchCriteriaId":"A484B37E-8DB3-405B-863A-A3D4ECE1AEF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29019","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3671","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019436","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488343/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26792","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0618","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488343/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6339","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified \"undocumented object parameters.\""},{"lang":"es","value":"El control ActiveX del Gestor de descargas Akamai (Aka DLM dlmanager) (DownloadManagerV2.ocx) anterior a 2.2.3.5 permite a los atacantes remotos forzar la descarga y ejecución de código arbitrario mediante \"parámetros indocumentados de objeto\" sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.0.0","matchCriteriaId":"51B191BB-2289-4CC2-881C-C5B3AA09BB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1.0","matchCriteriaId":"1EFE40E1-1A6D-4019-B972-677E667C7DAB"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=695","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061923.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28993","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019955","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1408/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42117","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061923.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1408/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6340","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector (IV), which makes it easier for local users to obtain cleartext passwords."},{"lang":"es","value":"Geert Moernaut LSrunasE 1.0 y Supercrypt 1.0 utilizan el algoritmo de cifrado continuo RC4 sin construir una única inicialización de vector (IV), lo cual hace más fácil al usuario local obtener contraseñas en texto planto.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moernaut:lsrunase:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0482BA34-F085-4EB3-810B-5ACD34529828"},{"vulnerable":true,"criteria":"cpe:2.3:a:moernaut:supercrypt:1.0:*:*:*:*:*:*:*","matchCriteriaId":"099A6BF7-E809-458B-B267-D0222207B1F3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3611","source":"cve@mitre.org"},{"url":"http://www.moernaut.com/default.aspx?item=lsrunase","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.moernaut.com/default.aspx?item=supercrypt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487269/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.moernaut.com/default.aspx?item=lsrunase","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.moernaut.com/default.aspx?item=supercrypt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487269/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6388","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T18:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS), en mod_status, dentro de Apache HTTP Server, en versiones 2.2.0 hasta 2.2.6, 2.0.35 hasta 2.0.61, y 1.3.2 hasta 1.3.39, cuando la página server-status está activada, permite que atacantes remotos inyecten , a su elección, código web o HTML, usando vectores no especificados."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.2.8, 2.0.63 and 1.3.41:\nhttp://httpd.apache.org/security/vulnerabilities_22.html\nhttp://httpd.apache.org/security/vulnerabilities_20.html\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3.2","versionEndIncluding":"1.3.39","matchCriteriaId":"DD78E985-B27D-4CF5-972A-566519D4574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndIncluding":"2.0.61","matchCriteriaId":"04EDED7F-C19B-4F21-8921-0F7E28898030"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.6","matchCriteriaId":"99C31669-9295-4771-BE93-EA7B832213D6"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://httpd.apache.org/security/vulnerabilities_13.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://httpd.apache.org/security/vulnerabilities_20.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28467","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28471","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28526","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28607","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28749","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28922","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28965","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28977","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29504","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29640","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29806","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29988","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30356","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30732","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/31142","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/32800","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/33200","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://securityreason.com/securityalert/3541","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://securitytracker.com/id?1019154","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233623-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=689039","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK62966","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63273","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24019245","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK59667&apar=only","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200808e.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0007.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/488082/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/488082/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/494428/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/498523/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498523/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27237","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0047","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0447/references","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0554","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0809/references","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0986/references","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1224/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1623/references","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2008/05/023342-01.pdf","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39472","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10272","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://httpd.apache.org/security/vulnerabilities_13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://httpd.apache.org/security/vulnerabilities_20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/28977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/31142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/32800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/33200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://securityreason.com/securityalert/3541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://securitytracker.com/id?1019154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233623-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=689039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK62966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24019245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK59667&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200808e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/488082/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/488082/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/494428/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/498523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0447/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0809/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0986/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1224/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1623/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2008/05/023342-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-6415","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as implemented by OpenSSH, with the -F and -o options."},{"lang":"es","value":"scponly versión 4.6 y anteriores, permiten a usuarios autenticados remotamente omitir las restricciones previstas y ejecutar código arbitrario invocando scp, tal como es implementado por OpenSSH, con las opciones -F y -o."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203099","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28538","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28981","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-06.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1473","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00546.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00595.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00595.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6420","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.2.x allows remote attackers to gain privileges via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site request forgery (CSRF) en el controlador-balanceador en el componente mod_proxy_balancer en el servidor HTTP de Apache versión 2.2.x, permite a los atacantes remotos conseguir privilegios por medio de vectores no especificados."}],"vendorComments":[{"organization":"Mandriva","comment":"Mandriva ships mod_proxy_balancer but will not be issuing updates to correct this flaw as the security risk is quite low due to the fact that is not enabled by default, the at-risk user would have to be authenticated, and successful exploitation would be limited to a denial of service on the web server.","lastModified":"2008-03-12T00:00:00.000"},{"organization":"Red Hat","comment":"mod_proxy_balancer is shipped in Red Hat Enterprise Linux 5 and Red Hat Application Stack v2.  We do not plan on correcting this issue as it poses a very low security risk:  The balancer manager is not enabled by default, the user targeted by the CSRF would need to be authenticated, and the consequences of an exploit would be limited to a web server denial of service.\n","lastModified":"2008-01-24T00:00:00.000"},{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.2.9.  http://httpd.apache.org/security/vulnerabilities_22.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"67AD11FB-529C-404E-A13B-284F145322B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"49A81C75-4C54-43FE-9317-E15EDFEC06B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"34A847D1-5AD5-4EFD-B165-7602AFC1E656"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"9AF3A0F5-4E5C-4278-9927-1F94F25CCAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31026","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33797","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34219","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3523","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0966.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/494858/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27236","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8371","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0966.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/494858/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2007-6421","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL."},{"lang":"es","value":"La vulnerabilidad de tipo cross-site-scripting (XSS) en el controlador-balanceador en el componente mod_proxy_balancer en el servidor  HTTP de Apache versión 2.2.0 hasta 2.2.6, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio de los parámetros (1) ss, (2) wr o (3) rr, o (4) la dirección URL."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.2.8.  http://httpd.apache.org/security/vulnerabilities_22.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACBC75F8-C1AF-45AE-91BA-5670EF2D0DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"733D62FE-180A-4AE8-9DBF-DA1DC18C1932"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"34A847D1-5AD5-4EFD-B165-7602AFC1E656"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28526","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28749","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28977","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29640","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3523","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27236","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0048","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39474","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10664","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8651","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6422","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T18:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable."},{"lang":"es","value":"La función balancer_handler en el componente mod_proxy_balancer en el servidor  HTTP de Apache versión 2.2.0 hasta 2.2.6, cuando se utiliza un módulo de procesamiento múltiple enhebrado, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del proceso secundario) por medio de una variable bb no válida."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.2.8.  http://httpd.apache.org/security/vulnerabilities_22.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACBC75F8-C1AF-45AE-91BA-5670EF2D0DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"733D62FE-180A-4AE8-9DBF-DA1DC18C1932"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"34A847D1-5AD5-4EFD-B165-7602AFC1E656"}]}]}],"references":[{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28749","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28977","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29348","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3523","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27236","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39476","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10181","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8690","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"cve@mitre.org"},{"url":"http://httpd.apache.org/security/vulnerabilities_22.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6423","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL.  NOTE: the vendor could not reproduce this issue"},{"lang":"es","value":"** CUESTIONABLE ** Vulnerabilidad no especificada en mod_proxy_balancer para Apache HTTP Server 2.2.x, en versiones anteriores a la 2.2.7-dev, cuando se ejecuta en Windows, permite que atacantes remotos provoquen una corrupción de memoria usando una URL larga. NOTA: el vendedor no pudo reproducir el problema"}],"vendorComments":[{"organization":"Red Hat","comment":"mod_proxy_balancer is included in the version of Apache HTTP Server as shipped in Red Hat Enterprise Linux 5 and Red Hat Application Stack v2.  Red Hat was unable to reproduce this issue.","lastModified":"2008-01-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"34A847D1-5AD5-4EFD-B165-7602AFC1E656"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27236","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6425","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP-UX B.11.31, cuando ejecuta ARPA Transport, permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]}]}],"references":[{"url":"http://secunia.com/advisories/28612","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486852/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486852/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019260","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0262","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39858","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486852/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486852/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6426","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en EMC RepliStor 6.2 SP2 y puede que versiones anteriores, permite a atacantes remotos ejecutar código de su elección mediante datos comprimidos y manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:replistor:6.2_sp2:*:*:*:*:*:*:*","matchCriteriaId":"C80C67AE-7182-466D-8200-1F8F4F2C944A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488419/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27915","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019457","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0625","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488419/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6427","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990."},{"lang":"es","value":"La extensión XInput de X.Org Xserver versiones anteriores a 1.4.1 permite a atacantes locales o remotos dependientes del contexto ejecutar código de su elección mediante peticiones relativas al intercambio de bytes y corrupción de cabecera dentro d múltiples funciones, vulnerabilidad distinta de CVE-2007-4990."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.1","matchCriteriaId":"F65D4017-F140-482C-ADC8-BEC8072B703E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"A1E0F574-6859-45A6-B160-7DDE92C07CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.2","matchCriteriaId":"D139BCA7-8B43-4BDE-9AE9-5F41F4B6BD0D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A9BD0E68-2DC1-47EA-882A-6F5921A0F1BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"68B14008-5E0A-4187-AF93-DE2FF5BA5921"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*","matchCriteriaId":"4C1B3637-1CDC-47FE-B19C-95FCEB833450"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*","matchCriteriaId":"FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"29184B59-5756-48DB-930C-69D5CD628548"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*","matchCriteriaId":"33EB57D5-DE8D-417C-8C00-AD331D61181C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:open_enterprise_server:-:*:*:*:*:*:*:*","matchCriteriaId":"012EA049-526D-44A7-9EFE-544D9EBE0D44"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28532","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28535","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28536","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28539","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28540","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28542","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28543","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28550","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28584","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28592","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28616","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28693","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28718","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28838","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28843","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28885","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28941","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29139","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29707","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30161","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32545","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019232","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27336","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27351","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"cve@mitre.org","tags":["Mitigation","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39759","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/571-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/571-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-6428","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index."},{"lang":"es","value":"La función ProcGetReservedColormapEntries de la extensión TOG-CUP de X.Org Xserver versiones anteriores a 1.4.1 permite a atacantes locales o remotos dependientes del contexto leer el contenido de ubicaciones de memoria de su elección mediante peticiones conteniendo un valor de 32 bits que se utiliza inapropiadamente como un índice de array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:tog-cup:*:*:*:*:*:*:*:*","matchCriteriaId":"CCB67CA9-98C0-4111-AF1E-1357D2DE2116"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"EBC8352E-BBB6-4B41-AD07-447D8D71CE7D"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=644","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28273","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28539","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28540","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28542","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28584","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29139","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30161","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019232","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27336","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27355","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39761","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11754","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/571-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/571-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6429","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension."},{"lang":"es","value":"Múltiples desbordamientos de búfer en X.Org Xserver versiones anteriores a 1.4.1 permiten a atacantes locales o remotos dependientes del contexto ejecutar código de su elección mediante (1) una petición GetVisualInfo conteniendo un valor de 32 bits que se utiliza inapropiadamente para calcular una cantidad de memoria para alojamiento por la extensión EVI, ó (2) una petición conteniendo valores relativos al tamaño de pixmap que es inapropiadamente utilizado en la gestión de memoria compartida por la extensión MIT-SHM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:evi:*:*:*:*:*:*:*:*","matchCriteriaId":"03108EF9-17AB-4260-823B-DF2BB34691F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:mit-shm:*:*:*:*:*:*:*:*","matchCriteriaId":"0283B878-7F07-44F5-ABC8-4B7F0FABDBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"EBC8352E-BBB6-4B41-AD07-447D8D71CE7D"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=645","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28273","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28539","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28540","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28542","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28584","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29139","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30161","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32545","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019232","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27336","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27353","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39763","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39764","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11045","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/571-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/571-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6431","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to \"take control of the affected system\" via unspecified vectors, a different issue than CVE-2007-6148 and CVE-2007-6149."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Flash Media Server 2 versiones anteriores a 2.0.5, y Connect Enterprise Server 6 versiones anteriores a SP3, permite a atacantes remotos \"tomar el control del sistema afectado\" a través de vectores no especificados, una cuestión diferente a CVE-2007-6148 y CVE-2007-6149."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:connect_enterprise_server:*:sp2:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"842B6CFF-CF79-48CF-9B06-E86B4DA80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server_2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"239C1517-C0FF-430A-BCDF-77C6270A3C48"}]}]}],"references":[{"url":"http://secunia.com/advisories/28946","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28947","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-03.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-04.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27762","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019400","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0538/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40504","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0538/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6432","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a malformed .PMD file, related to \"Key Strings,\" a different vulnerability than CVE-2007-5169 and CVE-2007-5394."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AldFs32.dll en Adobe PageMaker 7.0.1 y 7.0.2 permite a atacantes remotos ayudados por el usuario ejecutar código de su elección mediante un archivo .PMD malformado, relacionado con \"Key Strings (Cadenas Clave)\", una vulnerabilidad distinta a CVE-2007-5169 y CVE-2007-5394."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:pagemaker:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B68D537F-E26B-41DF-BA33-21428F6AB805"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:pagemaker:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"734A3A65-7D14-49CC-B6EB-10DF1D91B8BE"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=749","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497996/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31999","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021123","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2955","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46233","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497996/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6531","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips.  NOTE: a second buffer overflow (over-read) in the xfce_mkdirhier function was also reported, but it might not be exploitable for a crash or code execution, so it is not a vulnerability."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el componente Panel (xfce4-panel) para Xfce anterior a 4.4.2 podría permitir a atacantes remotos ejecutar código de su elección mediante un globo de ayuda de Launcher. NOTA: se ha reportado también un segundo desbordamiento de búfer (sobre-lectura) en la función xfce_mkdirhier, pero podría no ser explotable para un cierre o ejecución de código, y por tanto no es una vulnerabilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfce:xfce:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.1","matchCriteriaId":"505C43F9-E1DF-494C-B156-CFE90BE31C47"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201289","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201293","source":"cve@mitre.org"},{"url":"http://osvdb.org/43422","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0080","source":"cve@mitre.org"},{"url":"http://www.xfce.org/documentation/changelogs/4.4.2","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xfce.org/documentation/changelogs/4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6532","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the \"cliend id, program name and working directory in session management.\""},{"lang":"es","value":"Una vulnerabilidad de doble liberación en la Biblioteca Widgets (libxfcegui4) en Xfce versiones anteriores a 4.4.2, podría permitir a atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos relacionados al \"cliend id, program name and working directory in session management.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfce:xfce:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.1","matchCriteriaId":"505C43F9-E1DF-494C-B156-CFE90BE31C47"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201292","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0080","source":"cve@mitre.org"},{"url":"http://www.xfce.org/documentation/changelogs/4.4.2","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=201292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xfce.org/documentation/changelogs/4.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6598","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password."},{"lang":"es","value":"Dovecot anterior a 1.0.10, con determinadas opciones de configuración incluyendo el uso de %variables, no mantiene adecuadamente la caché LDAP+auth, lo cual podría permitir a permite a usuarios autenticados remotamente identificarse como un usuario diferente que tiene la misma contraseña."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of Dovecot as shipped with Red Hat Enterprise Linux before version 5.  An update to Red Hat Enterprise Linux 5 was released to correct this issue:\nhttps://rhn.redhat.com/errata/RHSA-2008-0297.html\n","lastModified":"2008-05-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.9","matchCriteriaId":"E86FDDEF-12EF-4D0A-892D-A048C1FEFD74"}]}]}],"references":[{"url":"http://dovecot.org/list/dovecot-news/2007-December/000057.html","source":"cve@mitre.org"},{"url":"http://dovecot.org/list/dovecot-news/2007-December/000058.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/39876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28227","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28271","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28404","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28434","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32151","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1457","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0297.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485779/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485787/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27093","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-567-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0017","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2076","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10458","source":"cve@mitre.org"},{"url":"http://dovecot.org/list/dovecot-news/2007-December/000057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dovecot.org/list/dovecot-news/2007-December/000058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485779/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485787/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-567-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6599","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock."},{"lang":"es","value":"Condición de carrera en el servidor de ficheros de OpenAFS 1.3.50 hasta 1.4.5 y 1.5.0 hasta 1.5.27 permite a atacantes remotos provocar una denegación de servicio (caída de demonio) al adquirir simultáneamente y devolver llamadas a ficheros, lo cual provoca que el gestor de GiveUpAllCallBacks RPC realice operaciones de listas enlazadas sin el bloqueo host_glock."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3.50","versionEndIncluding":"1.4.5","matchCriteriaId":"AD3D1161-AA0C-434B-9748-C49CF593B5A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndIncluding":"1.5.27","matchCriteriaId":"D280E1D2-765F-4367-A109-6656572D9A33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28327","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28401","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28433","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-04.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1458","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:207","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openafs.org/security/OPENAFS-SA-2007-003.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27132","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0046","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.openafs.org/pipermail/openafs-announce/2007/000220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openafs.org/security/OPENAFS-SA-2007-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-6600","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges."},{"lang":"es","value":"PostgreSQL 8.2 anterior a 8.2.6, 8.1 anterior a 8.1.11, 8.0 anterior a 8.0.15, 7.4 anterior a 7.4.19, y 7.3 anterior a 7.3.21 utiliza privilegios de super usuario en lugar de los privilegios del propietario de la tabla para las operaciones (1) VACUUM y (2) ANALYZE en funciones de índice, y soporta (3) SET ROLE y (4) SET SESSION AUTHORIZATION en funciones de índice, lo cual permite a usuarios remotos autenticados obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*","matchCriteriaId":"4064A96D-84D5-4257-9981-1139CD4CD08C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C98290E4-2919-4492-BD14-BB24BA85C729"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B56E9F72-6CBF-4784-89CD-435A030AC0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6DEF0FE5-EFCF-448E-B6BD-95FDDD4E17FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"03B480F0-8FFC-4463-ADC6-95906751811C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.5:*:*:*:*:*:*:*","matchCriteriaId":"9BF44286-0DBF-4CCA-8FFB-993976C18CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"629881D2-2A6D-4461-8C35-6EE575B63E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.7:*:*:*:*:*:*:*","matchCriteriaId":"E5C91580-6428-4234-92DF-6A96108FCF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A19EB5-A1AF-4293-854D-347CD21065DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B18ED293-B408-435F-9D1F-2365A2E51022"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"E7106B29-76F3-43FD-BF57-4693D5B55076"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.11:*:*:*:*:*:*:*","matchCriteriaId":"16B804CD-AE47-4B46-9B37-7F46D4C9A332"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.12:*:*:*:*:*:*:*","matchCriteriaId":"D23E89A3-551D-42E2-90EC-59A9DAB4F854"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.13:*:*:*:*:*:*:*","matchCriteriaId":"2FC46594-100B-459F-BCB7-1FA9D0719D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.14:*:*:*:*:*:*:*","matchCriteriaId":"AECD278B-55A7-4BCC-8AF1-004F02A96BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.15:*:*:*:*:*:*:*","matchCriteriaId":"95DB94EF-32AE-4DD9-A9A4-4F7D4BE5F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.16:*:*:*:*:*:*:*","matchCriteriaId":"DE0ED225-91C8-4FA6-9E33-A1D1AA99AA9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.17:*:*:*:*:*:*:*","matchCriteriaId":"5952970A-E97F-487C-A22C-258F57E18749"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.18:*:*:*:*:*:*:*","matchCriteriaId":"823FA621-A72C-4927-AA9E-3359FFAFA031"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.19:*:*:*:*:*:*:*","matchCriteriaId":"99679F07-ED44-47EE-AD51-3139F30B88DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*","matchCriteriaId":"FBE2567C-BF48-4255-9E56-590A6F9DD932"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20C8302B-631A-4DF7-839B-C6F3CC39E000"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FB318EB9-1B49-452A-92CF-89D9BA990AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5913A53B-7B72-4CBD-ADAE-318333EB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"815E58C0-327D-4F14-B496-05FC8179627E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3EF2D056-5120-4F98-8343-4EC31F962CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"516E0E86-3D8A-43F9-9DD5-865F5C889FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A7FC7F18-B227-4C46-9A33-FB34DDE456CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BCDB903F-0C89-4E65-857E-553CF9C192E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"CD0DEB63-CA70-44C1-9491-E0790D1A8E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"DA8E73E5-BA41-4FA2-8457-803A97FB00C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"8AC4A04B-738C-4018-BB2F-FBEC8746200C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*","matchCriteriaId":"94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B45F3BF0-9EB6-4A06-B6F7-DE95DD13EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"105E9F52-D17E-4A0B-9C46-FD32A930B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE2055D-AAA4-4A6A-918F-349A9749AF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C12409B2-161B-4F78-B7AD-3CF69DDCC574"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD2F1DA4-6625-469D-988B-5457B68851A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"870F4348-6001-4C2F-A547-61964074E7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2E26D52-D95A-4547-BE6E-4F142F54A624"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4AAB2D1D-BE61-4D7C-B305-58B4F4126620"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E260F1F9-0068-4289-A8E8-C30220C2E1F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EEE16023-9A5E-46D5-B597-E6885C224786"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"84D64D74-9645-4CB7-B710-4FC26FB65B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8EB12063-F487-4067-A7A5-4482E19D8D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FEEC35A2-B17C-46EC-8697-9E03568339BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"00562C18-DD81-4B09-AF93-739AF8757A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B52D093-7867-4FE8-B055-D8190103A1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF855730-C61C-4FDC-96CB-57775A903421"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D93296E1-AEA2-443E-B9AA-D70535DDD093"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"02DC4E8A-A728-4734-B67A-C58C37DA90C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D59B0E32-9E71-4E41-BBAF-7A20008E43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"06253BA8-7F1E-4C79-9B2E-197307A627F0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28359","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28437","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28454","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28698","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019157","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/about/news.905","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0039.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39496","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10493","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/568-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/about/news.905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/568-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6601","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3278."},{"lang":"es","value":"El módulo DBLink en PostgreSQL 8.2 anterior a 8.2.6, 8.1 anterior a 8.1.11, 8.0 anterior a 8.0.15, 7.4 anterior a 7.4.19, y 7.3 anterior a 7.3.21, cuando locales de confianza o identidades de autenticación son utilizadas, permite a atacantes remotos ganar privlegios a través de vectores no especificados. NOTA: este asunto existe a causa de un parche incompleto para CVE-2007-3278."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.21","matchCriteriaId":"69279942-4D12-4924-96BE-EE42CEE8C6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.19","matchCriteriaId":"A2A8D367-7B80-43B1-88CF-773792A01CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.15","matchCriteriaId":"44129F9A-F9CC-46A8-95AD-30573220DC70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.1.11","matchCriteriaId":"2FC070BF-4154-4686-A5E0-6A8E942DAFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.6","matchCriteriaId":"809B71BC-405A-4696-ABFA-91BD4F3AE784"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28359","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28437","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28438","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28445","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28454","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28455","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28464","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28477","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28479","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28679","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28698","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29638","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019157","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.postgresql.org/about/news.905","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0039.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27163","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39500","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/568-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.postgresql.org/about/news.905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/486407/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/0109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1071/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-1768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/568-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-6610","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T20:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument. NOTE: this might only be a vulnerability when unp is invoked by a third party product."},{"lang":"es","value":"unp versión 1.0.12, y otras versiones anteriores a 1.0.14, no escapa apropiadamente los nombres de archivo, lo que podría permitir a los atacantes dependiendo del contexto ejecutar comandos arbitrarios por medio de metacaracteres de shell en un argumento filename. NOTA: esto sólo puede ser una vulnerabilidad cuando unp es invocado por un producto de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:unp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.12","matchCriteriaId":"D442FF56-F699-4B89-BEB9-CD232167A530"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448437","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203106","source":"cve@mitre.org"},{"url":"http://osvdb.org/42759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28282","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28388","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-01.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27182","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6611","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo view.php en Mantis versiones anteriores a 1.1.0, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del filename, relacionado con el archivo bug_report.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0a1","matchCriteriaId":"A878BD34-787E-4330-9EE2-D1CD7FE6678E"}]}]}],"references":[{"url":"http://osvdb.org/39873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29198","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-04.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=562940","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1467","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/view.php?id=8679","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27045","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=427277","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00227.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00309.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/39873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=562940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/view.php?id=8679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=427277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00227.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6612","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (\".%252e\")."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en DirHandler (lib/mongrel/handlers.rb) de Mongrel 1.0.4 y 1.1.x versiones anteriores a 1.1.3 permite a atacantes remotos leer ficheros de su elección mediante una petición HTTP conteniendo secuencias doblemente codificadas (\".%252e\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongrel:mongrel:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"564EACB0-F19D-418A-8FAC-C3EC2C280B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongrel:mongrel:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A294C0EA-8230-458E-8727-26A5A58EAF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongrel:mongrel:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E794ED51-4AC6-4E80-A7BB-1D0737E3424F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://mongrel.rubyforge.org/news.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/39866","source":"cve@mitre.org"},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004733.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004736.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004742.html","source":"cve@mitre.org"},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004743.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27133","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mongrel.rubyforge.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004733.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004736.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004742.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rubyforge.org/pipermail/mongrel-users/2007-December/004743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6613","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función print_iso9660_recurse de iso-info (src/iso-info.c) en GNU Compact Disc Input and Control Library (libcdio) 0.79 y anteriores permite a atacantes locales o remotos (dependiendo del contexto) provocar una denegación de servicio (core dump) y posiblemente ejecutar código de su elección mediante un disco o imagen que contiene un nombre de archivo joilet largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libcdio:*:*:*:*:*:*:*:*","versionEndIncluding":"0.79","matchCriteriaId":"B20DC6E0-3612-4DCA-A156-23B51BAB7482"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203777","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lists.gnu.org/archive/html/libcdio-devel/2007-12/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28569","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28796","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-08.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27131","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-580-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0030","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=427197","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39405","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.gnu.org/archive/html/libcdio-devel/2007-12/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-580-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=427197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6614","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en admin/frontpage_right.php de Agares Media phpAutoVideo 2.21 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro loadadminpage, asunto similar a CVE-2007-6542."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:phpautovideo:2.21:*:*:*:*:*:*:*","matchCriteriaId":"8114BC14-9AAF-4CCB-BC3A-9E4E0D8DCDAE"}]}]}],"references":[{"url":"http://forums.agaresmedia.com/viewtopic.php?f=13&t=407","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/39617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28230","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27023","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/4319","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4782","source":"cve@mitre.org"},{"url":"http://forums.agaresmedia.com/viewtopic.php?f=13&t=407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/39617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/4319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6615","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selected_provider parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/block.php de Agares Media phpAutoVideo 2.21 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro selected_provider."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:phpautovideo:2.21:*:*:*:*:*:*:*","matchCriteriaId":"8114BC14-9AAF-4CCB-BC3A-9E4E0D8DCDAE"}]}]}],"references":[{"url":"http://forums.agaresmedia.com/viewtopic.php?f=13&t=407","source":"cve@mitre.org"},{"url":"http://osvdb.org/39618","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28230","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27023","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/4319","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4782","source":"cve@mitre.org"},{"url":"http://forums.agaresmedia.com/viewtopic.php?f=13&t=407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/4319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6616","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en simpleforum.cgi de SimpleForum 4.6.2 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro searchkey en una acción search. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpleforum:simpleforum:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.2","matchCriteriaId":"17E9B5DE-D595-4DD7-BC30-81CD1FA944B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3509","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485489/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485489/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6617","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML, which is not properly handled when generating error messages, as demonstrated by input originally sent in the URI to secure/CreateIssue.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en 500page.jsp de JIRA Enterprise Edition versiones anteriores a 3.12.1 permite a atacantes remotos inyectar scripts web o HTML de su elección, que no son apropiadamente gestionado cuando se generan mensajes de error, como se demuestra con entradas originalmente enviadas en el URI a secure/CreateIssue.\r\nNOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:jira:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"204318E0-AA2F-4DCD-9CCE-73A2F2DD838D"}]}]}],"references":[{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jira.atlassian.com/browse/CONF-9560","source":"cve@mitre.org"},{"url":"http://osvdb.org/42768","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27095","source":"cve@mitre.org"},{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jira.atlassian.com/browse/CONF-9560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6618","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID."},{"lang":"es","value":"JIRA Enterprise Edition anterior a 3.12.1 permite a atacantes remotos borrar filtros compartidos de otros usuarios mediante un identificador de filtro modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:jira:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"204318E0-AA2F-4DCD-9CCE-73A2F2DD838D"}]}]}],"references":[{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/42769","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27095","source":"cve@mitre.org"},{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/42769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6619","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language."},{"lang":"es","value":"El Asistente de Instalación de Atlassian JIRAEnterprise Edition anterior a 3.12.1 no restringe adecuadamente los intentos de instalación una vez que la instalación se ha completado, lo cual permite a atacantes remotos  cambiar el lenguaje por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:jira:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"204318E0-AA2F-4DCD-9CCE-73A2F2DD838D"}]}]}],"references":[{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/42770","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27954","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27095","source":"cve@mitre.org"},{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2007-12-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/42770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6620","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/images.inc.php de Joovili 2.x permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro picture."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"487CE531-CDE0-48C0-9627-6F26A959FD69"}]}]}],"references":[{"url":"http://osvdb.org/40153","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28231","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27056","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4799","source":"cve@mitre.org"},{"url":"http://osvdb.org/40153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6621","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en joovili.images.php de Joovili 3.0.0 hasta 3.0.6  permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro picture."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"487CE531-CDE0-48C0-9627-6F26A959FD69"}]}]}],"references":[{"url":"http://osvdb.org/39666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28231","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27056","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4799","source":"cve@mitre.org"},{"url":"http://osvdb.org/39666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6622","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en security.php de ZeusCMS 0.3 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante la referencia de cabecera HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeuscms:zeuscms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"58820CBD-2654-41A4-BB0B-DD4DA7D72950"}]}]}],"references":[{"url":"http://osvdb.org/39759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27058","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4798","source":"cve@mitre.org"},{"url":"http://osvdb.org/39759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6623","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en ZeusCMS 0.3 y versiones anteriores podrían permitir a atacantes remotos listar directorios de su elección mediante un nombre de ruta completo en el parámetro dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeuscms:zeuscms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"58820CBD-2654-41A4-BB0B-DD4DA7D72950"}]}]}],"references":[{"url":"http://osvdb.org/39760","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27058","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4798","source":"cve@mitre.org"},{"url":"http://osvdb.org/39760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6624","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en printview.php de PNphpBB2 1.2i y anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro phpEx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb:1.2.0_i:*:*:*:*:*:*:*","matchCriteriaId":"14A74446-AB78-4282-8B2D-8630C6377771"}]}]}],"references":[{"url":"http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln/","source":"cve@mitre.org"},{"url":"http://osvdb.org/39879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27039","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39243","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4796","source":"cve@mitre.org"},{"url":"http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6625","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan."},{"lang":"es","value":"El Platform Service Process (asampsp) de Fan-Out Driver Platform Services para Novell Identity Manager (IDM) 3.5.1 permite a atacantes remotos provocar una denegación de servicio (caída de demonio) mediante tráfico de red no especificado que dispara un mensaje de syslog conteniendo especificadores de formato de cadena inválidos, como se demuestra con un análisis Nessus."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:identity_manager:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"681283D5-0BF4-4E47-BC4A-E6B95C0A71AE"}]}]}],"references":[{"url":"http://osvdb.org/40104","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28237","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019144","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5007560.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27028","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4311","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39206","source":"cve@mitre.org"},{"url":"http://osvdb.org/40104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5007560.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6626","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in LScube Feng 0.1.15 and earlier allow remote attackers to execute arbitrary code via (1) a long first line of a response, as demonstrated by a long VER line; or (2) a long second line of a response, as demonstrated by a message that follows a RETURN line."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la función RTSP_valid_response_msg de RTSP_state_machine.c en LScube Feng 0.1.15 y anteriores permiten a atacantes remotos ejecutar código de su elección mediante (1) una primera línea larga en una respuesta, como se ha demostrado mediante una línea VER larga; o (2) una segunda línea larga en una respuesta, como se ha demostrado mediante un mensaje que sigue a una línea RETURN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:feng:feng:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.15","matchCriteriaId":"4B682043-086D-461F-ABFF-24D0A6B10F5E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/40532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28229","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6627","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an RTP packet with a size value of 0xffff."},{"lang":"es","value":"Desbordamiento de entero en la función RTSP_remove_msg en RTSP_lowlevel.c de LScube Feng 0.1.15 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un paquete RTP con un valor de tamaño de 0xffff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:feng:feng:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.15","matchCriteriaId":"4B682043-086D-461F-ABFF-24D0A6B10F5E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/fengulo.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/40533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28229","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/fengulo.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6628","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via (1) a malformed Transport header, which triggers misparsing in parse_transport_header in RTSP_setup.c, as demonstrated by a Transport header that contains only a \"RTP/AVP;unicast;client_port\" sequence; or (2) a malformed Range header, which triggers misparsing in parse_play_time_range in RTSP_Play, as demonstrated by an empty Range header."},{"lang":"es","value":"LScube Feng 0.1.15 y anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a NULL y caída del demonio) mediante (1) una cabecera Transport mal formada, lo cual dispara una análisis incorrecto en parse_transport_header de RTSP_setup.c, como se ha demostrado mediante una cabecera Transport que contiene sólo una secuencia \"RTP/AVP;unicast;client_port\"; o (2) una cabecera Range mal formada, lo cual dispara un análisis incorrecto en parse_play_time_range de RTSP_Play, como se ha demostrado mediante una cabecera Range vacía."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:feng:feng:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.15","matchCriteriaId":"4B682043-086D-461F-ABFF-24D0A6B10F5E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/40534","source":"cve@mitre.org"},{"url":"http://osvdb.org/40535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28229","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6629","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line."},{"lang":"es","value":"Conflicto de interpretación en LScube Feng 0.1.15 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (Referencia a Null y caída de demonio) mediante la línea de cabecera User-Agent que contiene un caracter retorno de carro, lo cual es considerado como un delimitador de línea cuando la cabecera se fracciona en líneas individuales, pero no cuando log_user_agent de RTSP_utils.c analiza sitácticamente del contenido de la línea User-Agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:feng:feng:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.15","matchCriteriaId":"4B682043-086D-461F-ABFF-24D0A6B10F5E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/40537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28229","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6630","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a malformed URI containing a \"/:\" sequence, as demonstrated by a \"DESCRIBE /: RTSP/1.0\" request."},{"lang":"es","value":"La función Url_init en utils/url.c de Netembryo 0.0.4, cuando se usa en LScube Feng, permite a atacantes remotos provocar una denegación de servicio (referencia a NULL y caída del demonio) mediante un URI mal formado conteniendo una secuencia \"/:\", como se ha demostrado con una petición \"DESCRIBE /: RTSP/1.0\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:feng:feng:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.15","matchCriteriaId":"4B682043-086D-461F-ABFF-24D0A6B10F5E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/40158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28253","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0012","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/fengulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/fengulo.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6631","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via (1) a reply that begins with a long version string, which triggers an overflow in handle_rtsp_pkt in rtsp_handlers.c; long headers that trigger overflows in (2) send_pause_request, (3) send_play_request, (4) send_setup_request, or (5) send_teardown_request in rtsp_send.c, as demonstrated by the Content-Base header; or a long Transport header, which triggers an overflow in (6) get_transport_str_sctp, (7) get_transport_str_tcp, or (8) get_transport_str_udp in rtsp_transport.c."},{"lang":"es","value":"Múltiples desbordamientos de búfer en LScube libnemesi 0.6.4-rc1 y versiones anteriores permiten a atacantes remotos ejecutar código de su elección mediante (1) una respuesta que comienza con una cadena de versión larga, lo cual dispara un desbordamiento en handle_rtsp_pkt de rtsp_handlers.c; cabeceras largas que disparan desbordamientos en (2) send_pause_request, (3) send_play_request, (4) send_setup_request, ó (5) send_teardown_request de rtsp_send.c, como se demuestra con la cabecera Content-Base; ó una cabecera Transport larga, que dispara un desbordamiento en (6) get_transport_str_sctp, (7) get_transport_str_tcp, ó (8) get_transport_str_udp de rtsp_transport.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lscube:libnemesi:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.4-rc1","matchCriteriaId":"7183514D-E44D-4932-8CCF-87C03F036FBF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/libnemesibof-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/libnemesibof.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/42820","source":"cve@mitre.org"},{"url":"http://osvdb.org/42821","source":"cve@mitre.org"},{"url":"http://osvdb.org/42822","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485575/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27048","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0010","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/libnemesibof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/libnemesibof.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6632","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"showCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter."},{"lang":"es","value":"showCode.php en xml2owl 0.1.1 permite a atacantes remotos ejecutar comandos de su elección mediante metacaracteres de línea de comandos en el parámetro path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xml2owl:xml2owl:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A559446-8CFD-4C41-B7EA-EB8B1CF41D5A"}]}]}],"references":[{"url":"http://osvdb.org/39880","source":"cve@mitre.org"},{"url":"http://www.inj3ct-it.org/exploit/xml2owl-0.1.1.rce.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39327","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4800","source":"cve@mitre.org"},{"url":"http://osvdb.org/39880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.inj3ct-it.org/exploit/xml2owl-0.1.1.rce.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6633","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified parameters to the (2) add categories, (3) edit categories, (4) delete categories, (5) add faq, (6) edit faq, and (7) delete faq Admin scripts."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en FAQMasterFlexPlus, posiblemente 1.5 o 1.52, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) cat_name de faq.php; y parámetros no especificados de los scripts de administración para (2) añadir categorías, (3) editar categorías, (4) borrar categorías, (5) añadir preguntas frecuentes, (6) editar preguntas frecuentes, y (7) borrar preguntas frecuentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netbizcity:faqmasterflexplus:*:*:*:*:*:*:*:*","matchCriteriaId":"569B63E3-7DCF-4FB0-93F8-CF56CE96D6F1"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/39664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485589/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39287","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485589/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6634","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php, and unspecified other vectors involving additional scripts."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en FAQMasterFlexPlus, posiblemente 1.5 ó 1.52, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro category_id en faq.php, y otros vectores no especificados involucrando scripts adicionales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netbizcity:faqmasterflexplus:*:*:*:*:*:*:*:*","matchCriteriaId":"569B63E3-7DCF-4FB0-93F8-CF56CE96D6F1"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/39665","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485589/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27052","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39286","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/39665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485589/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6635","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access."},{"lang":"es","value":"FAQMasterFlexPlus, posiblemente 1.5 o 1.52, almacena la contraseña de administración en texto claro en la base de datos, lo cual podría permitir a atacantes locales o remotos (dependiendo del contexto) obtener la contraseña mediante acceso a base de datos no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netbizcity:faqmasterflexplus:*:*:*:*:*:*:*:*","matchCriteriaId":"569B63E3-7DCF-4FB0-93F8-CF56CE96D6F1"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485589/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485589/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6636","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the StorageFarabDb module in Bitflu before 0.42 allows user-assisted remote attackers to create or append data to arbitrary files via a crafted .torrent file."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo StorageFaradDb de Bitflu anterior a 0.42 permite a atacantes remotos con la intervención del usuario crear o añadir datos a ficheros de su elección mediante un archivo .torrent manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitflu:bitflu:*:*:*:*:*:*:*:*","versionEndIncluding":"0.41","matchCriteriaId":"B4088F43-6A2D-4ACC-AB4A-B2D4381AAB0A"}]}]}],"references":[{"url":"http://bitflu.workaround.ch/ChangeLog.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/39892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28238","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27043","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39269","source":"cve@mitre.org"},{"url":"http://bitflu.workaround.ch/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6637","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to \"pre-generated SWF files\" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect.  NOTE: the asfunction: vector is already covered by CVE-2007-6244.1."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Adobe Flash Player permiten a atacantes remotos inyectar scripts web o HTML de su elección mediante un fichero SWF manipulado, relativo a \"ficheros SWF pre-generados\" y Adobe Dreamweaver CS3 ó Adobe Acrobat Connect.\r\nNOTA: El vector de la función as se detalla en CVE-2007-6244.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29763","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29865","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30507","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019141","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa07-06.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27034","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9828","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa07-06.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6638","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz."},{"lang":"es","value":"March Networks DVR 3204 almacena información sensible bajo la raíz web con control de acceso insuficiente, lo cual permite a atacantes remotos obtener nombres de usuario, contraseñas, nombres de dispositivo, y direcciones IP mediante una petición directa de scripts/logfiles.tar.gz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:march_networks:3204_dvr:*:*:*:*:*:*:*:*","matchCriteriaId":"1A8F803C-CD2B-4E0E-A70C-A721D63D1C7C"}]}]}],"references":[{"url":"http://osvdb.org/39726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.milw0rm.com/papers/190","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27054","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR_3204_Logfile_Information_Disclosure","source":"cve@mitre.org"},{"url":"http://www.sybsecurity.com/pages/advisors/static/dvr3204_exp.txt","source":"cve@mitre.org"},{"url":"http://www.sybsecurity.com/resources/static/An_Insecurity_Overview_of_the_March_Networks_DVR-CCTV_3204.pdf","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4797","source":"cve@mitre.org"},{"url":"http://osvdb.org/39726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.milw0rm.com/papers/190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR_3204_Logfile_Information_Disclosure","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sybsecurity.com/pages/advisors/static/dvr3204_exp.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sybsecurity.com/resources/static/An_Insecurity_Overview_of_the_March_Networks_DVR-CCTV_3204.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6639","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewdir action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de IPTBB 0.5.4 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción viewdir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iptbb_team:iptbb:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"366E4F94-174F-45D5-91B5-7278361A84DA"}]}]}],"references":[{"url":"http://osvdb.org/39881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27082","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39340","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4821","source":"cve@mitre.org"},{"url":"http://osvdb.org/39881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6640","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured."},{"lang":"es","value":"Creammonkey 0.9 hasta 1.1 y GreaseKit 1.2 hasta v1.3 no evita apropiadamente el acceso a funciones peligrosas, lo cual permite a atacantes remotos leer la configuración, modificarla, ó enviar una petición HTTP mediante la función (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, ó (6) GM_xmlhttpRequest sin una página web en la cual el script de usuario sea configurado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:creammonkey:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C352EAE2-12E3-4E07-A3FD-2FE0C212AFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:creammonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F30228EB-E9FA-4CFB-B3E3-79A0C069F33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:creammonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"05B7F0FD-2DE5-45FE-BFFB-9648720705BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:greasekit:1.2:*:*:*:*:*:*:*","matchCriteriaId":"EB16097A-0A1F-412B-9DD4-56779A2B6B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:greasekit:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CA950CE-E29A-44B3-B2A3-03C734BBDAA6"}]}]}],"references":[{"url":"http://8-p.info/greasekit/vuln/20071226-en.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/42819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28241","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39272","source":"cve@mitre.org"},{"url":"http://8-p.info/greasekit/vuln/20071226-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6641","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo dir.php en milliscripts Redirection, permite a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro cat en una acción browse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:milliscripts:milliscripts:*:*:*:*:*:*:*:*","matchCriteriaId":"E3B399DC-9106-4AF0-9363-0E93D06982CA"}]}]}],"references":[{"url":"http://osvdb.org/39882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485653/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27078","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39306","source":"cve@mitre.org"},{"url":"http://osvdb.org/39882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485653/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6642","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote attackers to (1) add a Super Admin, (2) upload an extension containing arbitrary PHP code, and (3) modify the configuration as administrators via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Joomla! anterior a 1.5 RC4 permiten a atacantes remotos (1) añadir un Super Administrador, (2) enviar una extensión que contenga código PHP de su elección, y (3) modificar la configuración como administradores a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*","matchCriteriaId":"FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"}]}]}],"references":[{"url":"http://osvdb.org/41263","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29257","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3505","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019145","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485676/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28111","source":"cve@mitre.org"},{"url":"http://osvdb.org/41263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485676/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6643","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the com_poll component in Joomla! before 1.5 RC4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente com_poll de Joomla! versiones anteriores a 1.5 RC4 permite a atacantes remotos inyectar scripts web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*","matchCriteriaId":"FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"}]}]}],"references":[{"url":"http://osvdb.org/39979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29257","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019145","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28111","source":"cve@mitre.org"},{"url":"http://osvdb.org/39979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6644","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model."},{"lang":"es","value":"Joomla! anterior a 1.5 RC4 permite a permite a administradores autenticados remotamente promocionar usuarios de su elección al grupo de administradores, violando el modelo de seguridad pretendido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*","matchCriteriaId":"FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"}]}]}],"references":[{"url":"http://osvdb.org/43277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29257","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019145","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28111","source":"cve@mitre.org"},{"url":"http://osvdb.org/43277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6645","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Joomla! before 1.5 RC4 allows remote authenticated users to gain privileges via unspecified vectors, aka \"registered user privilege escalation vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Joomla! versiones anteriores a 1.5 RC4 permite a usuarios remotos autenticados obtener privilegios mediante vectores no especificados, también conocido como \"vulnerabilidad de escalado de privilegios de usuario registrado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*","matchCriteriaId":"FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"}]}]}],"references":[{"url":"http://osvdb.org/43276","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29257","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019145","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28111","source":"cve@mitre.org"},{"url":"http://osvdb.org/43276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.joomla.org/content/view/4335/116/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6646","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, (3) the return parameter to the order script, or (4) the email parameter to user/remindComplete."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en LiveCart versión 1.0.1, y posiblemente otras versiones anteriores a 1.1.0, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de (1) el parámetro return en user/remindPassword, (2) parámetro q en el script category, (3) el parámetro return al script order, y (4) el parámetro email en user/remindComplete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:integry_systems:livecart:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5565CADC-FB0F-4A2A-8201-DCD755CF02B1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0003.html","source":"cve@mitre.org"},{"url":"http://livecart.com/news/Major-update-LiveCart-1-1-0.8","source":"cve@mitre.org"},{"url":"http://osvdb.org/39756","source":"cve@mitre.org"},{"url":"http://osvdb.org/39757","source":"cve@mitre.org"},{"url":"http://osvdb.org/39758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3512","source":"cve@mitre.org"},{"url":"http://www.hackerscenter.com/archive/view.asp?id=28144","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485654/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27087","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39305","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://livecart.com/news/Major-update-LiveCart-1-1-0.8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hackerscenter.com/archive/view.asp?id=28144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485654/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6647","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de w-Agora 4.2.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1","matchCriteriaId":"48F47D2F-DD9A-4B64-875F-D1A97289CB09"}]}]}],"references":[{"url":"http://osvdb.org/39883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39308","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4817","source":"cve@mitre.org"},{"url":"http://osvdb.org/39883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6648","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de SanyBee Gallery 0.1.0 y 0.1.1 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro p."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sanybee_gallery:sanybee_gallery:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"930909CF-EB00-41FB-8B44-421F8843EEA1"}]}]}],"references":[{"url":"http://osvdb.org/39784","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27072","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39392","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4816","source":"cve@mitre.org"},{"url":"http://osvdb.org/39784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6649","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/tumbnail.php de MatPo Bilder Galerie 1.1 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro config[root_ordner]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matpo_bilder_galerie:matpo_bilder_galerie:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DD1F999-8759-48EB-A3A9-157A9EA68B78"}]}]}],"references":[{"url":"http://osvdb.org/39916","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4815","source":"cve@mitre.org"},{"url":"http://osvdb.org/39916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6650","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en fisheye/upload.php de Bitweaver R2 CMS permite a atacantes remotos enviar archivos de su elección usando el tipo de contenido image/gif, y posiblemente otros tipos de contenido de tipo imágen y PDF, como se ha demostrado enviando un archivo .htaccess."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:r2_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"D0EAA3E1-5244-412B-8BBA-792D7DDF116B"}]}]}],"references":[{"url":"http://osvdb.org/40155","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/24","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485642/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39321","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4814","source":"cve@mitre.org"},{"url":"http://osvdb.org/40155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485642/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6651","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. (dot dot) in the suck_url parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en wiki/edit.php de Bitweaver R2 CMS permite a atacantes remotos obtener información sensible (código fuente de archivos) mediante un .. (punto punto) en el parámetro suck_url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8E3F9B77-302B-4EB0-B103-594CB366F880"}]}]}],"references":[{"url":"http://osvdb.org/39915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28300","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/24","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485642/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27081","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39322","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4814","source":"cve@mitre.org"},{"url":"http://osvdb.org/39915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485642/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6652","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer)."},{"lang":"es","value":"cpie.php en XCMS 1.83 y anteriores envía una redirección al navegador web pero no sale, lo cual permite a atacantes remotos llevar a cabo ataques de inyección de código estático y ejecutar código de su elección a través del parámetro testo_0 en una acción cpie admin de index.php, la cual escribe en dati/generali/footer.dtb (también conocido como  el pie XCMS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xcms:xcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.83","matchCriteriaId":"AA48D866-B01E-433A-AE45-B424E09B798E"}]}]}],"references":[{"url":"http://osvdb.org/40277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28256","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39346","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4813","source":"cve@mitre.org"},{"url":"http://osvdb.org/40277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6653","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php de Mihalism Multi Host 2.07 permite a atacantes remotos leer archivos de su elección mediante un .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mihalism:multi_host:2.07:*:*:*:*:*:*:*","matchCriteriaId":"BEDF3AAE-5957-4572-ACA9-D1FD564289B1"}]}]}],"references":[{"url":"http://osvdb.org/39884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39330","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4812","source":"cve@mitre.org"},{"url":"http://osvdb.org/39884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6654","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument (second argument) to the DownloadAndExecute method, a different vulnerability than CVE-2007-0321, CVE-2007-2419, and CVE-2007-5660."},{"lang":"es","value":"Desbordamiento de búfer en un determinado control ActiveX de Macrovision InstallShield Update Service Web Agent 5.1.100.47363 permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en el argumento ProductCode (segundo argumento) para el método DownloadAndExecute, una vulnerabilidad diferente de CVE-2007-0321, CVE-2007-2419, y CVE-2007-5660."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macrovision:update_service:5.1.100_47363:*:*:*:*:*:*:*","matchCriteriaId":"C231476E-2C4B-49CF-A322-5BC972CF8107"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059288.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/39980","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39204","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4819","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/39980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6655","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/function.php de Kontakt Formular 1.4 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro root_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matpo_bilder_galerie:kontakt_formular:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D9EBAB5B-F648-4EA4-8921-E3363FDA2991"}]}]}],"references":[{"url":"http://osvdb.org/39836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28296","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39310","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4811","source":"cve@mitre.org"},{"url":"http://osvdb.org/39836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6656","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en content_css.php del módulo TinyMCE para CMS Made Simple 1.2.2 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro templateid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"FC758107-D88D-4AE3-89A9-D542F0C3402C"}]}]}],"references":[{"url":"http://blog.cmsmadesimple.org/2008/01/02/announcing-cms-made-simple-123/","source":"cve@mitre.org"},{"url":"http://forum.cmsmadesimple.org/index.php/topic%2C18240.0.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/39788","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28285","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39311","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4810","source":"cve@mitre.org"},{"url":"http://blog.cmsmadesimple.org/2008/01/02/announcing-cms-made-simple-123/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.cmsmadesimple.org/index.php/topic%2C18240.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6657","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en source/includes/load_forum.php de Mihalism Multi Forum Host 3.0.x y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro mfh_root_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mihalism:multi_host:*:*:*:*:*:*:*:*","matchCriteriaId":"010DB278-BD2F-418D-B1B8-06EA84200FD3"}]}]}],"references":[{"url":"http://osvdb.org/39895","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4808","source":"cve@mitre.org"},{"url":"http://osvdb.org/39895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6658","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p parameter in the Console page."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo admin.php/vars.php en CustomCMS (CCMS) versión 3.1 Demo, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro p en la página Console."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:customcms:ccms:3.1:*:demo:*:*:*:*:*","matchCriteriaId":"DA27FBA3-0F92-4323-96D8-9DFD71222942"}]}]}],"references":[{"url":"http://osvdb.org/39894","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3510","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485633/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39317","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4809","source":"cve@mitre.org"},{"url":"http://osvdb.org/39894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485633/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6659","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) contentshort or (2) contentfull parameter in an addnews action to the default URI; (3) the content parameter in a pm write action to 2z/admin.php; (4) the referer parameter to templates/default/usermenu.tpl, accessed through index.php; or the (5) newavatar or (6) newphoto parameter in a profile action to the default URI under 2z/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en 2z project 0.9.6.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) contentshort o (2) contentfull en una acción addnews del URI por defecto;(3) el parámetro content en una acción pm write de 2z/admin.php; (4) el parámetro referer de templates/default/usermenu.tpl, accedido a través de index.php; o los parámetros (5) newavatar o (6) newphoto en una acción profile del URI por defecto bajo 2z/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2z_project:2z_project:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C1E80A0B-04AB-4391-94C8-1D389BCE5606"}]}]}],"references":[{"url":"http://2z-project.ru/forum/viewtopic.php?pid=8309","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28244","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3514","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485590/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://2z-project.ru/forum/viewtopic.php?pid=8309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485590/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-6660","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain year and month parameters, which reveals the path in various error messages."},{"lang":"es","value":"2z project 0.9.6.1 permite a atacantes remotos obtener información confidencial mediante (1) una petición a index.php con una plantilla inválida ó (2) una petición al URI por defecto con determinados parámetros año y mes, que revela la ruta en varios mensajes de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2z_project:2z_project:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C1E80A0B-04AB-4391-94C8-1D389BCE5606"}]}]}],"references":[{"url":"http://2z-project.ru/forum/viewtopic.php?pid=8309","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3514","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485590/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://2z-project.ru/forum/viewtopic.php?pid=8309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485590/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-6661","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"2z project 0.9.6.1 allows attackers to change the password without supplying the old password."},{"lang":"es","value":"2z project 0.9.6.1 permite a los atacantes cambiar la contraseña sin suministrar la contraseña anterior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2z_project:2z_project:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C1E80A0B-04AB-4391-94C8-1D389BCE5606"}]}]}],"references":[{"url":"http://2z-project.ru/forum/viewtopic.php?pid=8309","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3514","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485590/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://2z-project.ru/forum/viewtopic.php?pid=8309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485590/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-6662","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en file.php de CuteNews 2.6 permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el fichero parámetro, como se demuestra leyendo el nombre y resumen de contraseña de administrador en data/users.db.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:2.6:*:*:*:*:*:*:*","matchCriteriaId":"8AEE5E47-8898-4A7A-A10B-A8F47052FFAA"}]}]}],"references":[{"url":"http://osvdb.org/39885","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3515","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485632/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39328","source":"cve@mitre.org"},{"url":"http://osvdb.org/39885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6663","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) 2.0.3, 2.1.2, and 2.1.3 Beta component for Joomla!  allows remote attackers to execute arbitrary SQL commands via the fid parameter to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en los archivos (1) Puarcade.php y (2) PUarcade.html.php en componente Pragmatic Utopia PU Arcade (com_puarcade) versiones 2.0.3, 2.1.2 y 2.1.3 Beta para Joomla!, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro fid en el archivo index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragmatic_utopia:pu_arcade:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6A46D57-04DE-4821-92C6-D54493263157"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragmatic_utopia:pu_arcade:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"044156BE-82EC-4775-8BB6-B3C4F790194E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragmatic_utopia:pu_arcade:2.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"26868957-1DE9-4BB9-B567-CEBA2F76D8B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/39787","source":"cve@mitre.org"},{"url":"http://osvdb.org/39886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28295","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pragmaticutopia.com/","source":"cve@mitre.org"},{"url":"http://www.pragmaticutopia.com/index.php?option=com_fireboard&Itemid=121&func=view&id=4407&catid=2#4408","source":"cve@mitre.org"},{"url":"http://www.pragmaticutopia.com/index2.php?option=com_content&do_pdf=1&id=224","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27089","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39332","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4827","source":"cve@mitre.org"},{"url":"http://osvdb.org/39787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pragmaticutopia.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pragmaticutopia.com/index.php?option=com_fireboard&Itemid=121&func=view&id=4407&catid=2#4408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pragmaticutopia.com/index2.php?option=com_content&do_pdf=1&id=224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6664","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de WebPortal CMS 0.6.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro m."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.0","matchCriteriaId":"1E23ED0E-D803-43B2-B823-F3C32C249246"}]}]}],"references":[{"url":"http://osvdb.org/39887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27088","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39336","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4826","source":"cve@mitre.org"},{"url":"http://osvdb.org/39887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6665","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL commands via the txtLoginID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en dmin/login.asp de Netchemia oneSCHOOL permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro txtLoginID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netchemia:oneschool:*:*:*:*:*:*:*:*","matchCriteriaId":"0056C327-350C-41B2-9C97-55229E2887A8"}]}]}],"references":[{"url":"http://osvdb.org/39893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27085","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39349","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4824","source":"cve@mitre.org"},{"url":"http://osvdb.org/39893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6666","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rss.php de Zenphoto 1.1 hasta 1.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro albumnr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenphoto:zenphoto:1.1:*:*:*:*:*:*:*","matchCriteriaId":"98BCEF55-59A3-451E-8FDE-BD00C30C92BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zenphoto:zenphoto:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4B9E3F1F-B90D-4D05-92F2-9DBF35E4B214"},{"vulnerable":true,"criteria":"cpe:2.3:a:zenphoto:zenphoto:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65C25F92-97C2-4282-8772-302E493AF337"},{"vulnerable":true,"criteria":"cpe:2.3:a:zenphoto:zenphoto:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D83D1354-8EF3-4FC1-A9E5-048B674B4126"}]}]}],"references":[{"url":"http://osvdb.org/39786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28281","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39341","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4823","source":"cve@mitre.org"},{"url":"http://osvdb.org/39786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6667","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the member.php vector is already covered by CVE-2005-0413."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en faq.php de MyPHP Forum 3.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id.\r\nNOTA: el vector member.php se describe en CVE-2005-0413."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphp:myphp_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"E959C994-642A-4537-91BA-5C28B9F35301"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphp:myphp_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5ED98B7B-A74D-4592-B9E3-E5FC7DA44146"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphp:myphp_forum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"78C9F6E1-5CB3-4880-944B-8F1E96C3050D"}]}]}],"references":[{"url":"http://osvdb.org/39781","source":"cve@mitre.org"},{"url":"http://osvdb.org/39782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39347","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4822","source":"cve@mitre.org"},{"url":"http://osvdb.org/39781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6668","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading (1) a .php file and (2) a .php%00.jpeg file."},{"lang":"es","value":"admin/uploadgames.php de MySpace Content Zone (MCZ) 3.x no requiere privilegios administrativos, lo cual permite a atacantes remotos realizar promociones de ficheros sin restricción, como se demuestra enviando (1) un fichero .php y (2) un fichero .php%00.jpeg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peergoal:myspace_content_zone:*:*:*:*:*:*:*:*","versionEndIncluding":"3.60","matchCriteriaId":"BB2E4BA9-1977-4D65-807F-9AAE3689DD2C"}]}]}],"references":[{"url":"http://osvdb.org/40211","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28159","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27062","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4741","source":"cve@mitre.org"},{"url":"http://osvdb.org/40211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6669","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de PHCDownload 1.1.0 permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcredo:phcdownload:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E61F4ED-E256-4D9A-B8B7-F7A879B20D6A"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2007/12/xss-flaw-posible-sql-injection-in.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/40190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28258","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27066","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39420","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2007/12/xss-flaw-posible-sql-injection-in.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/40190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6670","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php in PHCDownload 1.1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcredo:phcdownload:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E61F4ED-E256-4D9A-B8B7-F7A879B20D6A"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2007/12/xss-flaw-posible-sql-injection-in.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/40191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28258","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27066","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lostmon.blogspot.com/2007/12/xss-flaw-posible-sql-injection-in.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/40191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-6671","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Password parameter, a different product than CVE-2006-6021. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login_form.asp de Instant Softwares Dating Site permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Password, un producto distinto al de  CVE-2006-6021.\r\nNOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instantsoftwares:dating_site:*:*:*:*:*:*:*:*","matchCriteriaId":"1E17026B-5E31-4240-A21B-200FE1DFBFA0"}]}]}],"references":[{"url":"http://aria-security.net/forum/showthread.php?p=1189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/39766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3518","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485655/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27080","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39326","source":"cve@mitre.org"},{"url":"http://aria-security.net/forum/showthread.php?p=1189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/39766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485655/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6672","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI."},{"lang":"es","value":"Mortbay Jetty versiones 6.1.5 y 6.1.6, permite a atacantes remotos omitir los mecanismos de protección y leer la fuente de archivos por medio de múltiples caracteres \"/\" (barra diagonal) en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay_jetty:jetty:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"EBAE736A-6F3E-4F4B-87D3-56342E68C43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay_jetty:jetty:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B7D7D91E-3F2B-4B37-8B3E-C0D28F63ADF7"}]}]}],"references":[{"url":"http://jira.codehaus.org/browse/JETTY-386#action_117699","source":"cve@mitre.org"},{"url":"http://jira.codehaus.org/browse/JETTY/fixforversion/13950","source":"cve@mitre.org"},{"url":"http://osvdb.org/39855","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28547","source":"cve@mitre.org"},{"url":"http://www.igniterealtime.org/community/message/163752","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/553235","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27117","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0079","source":"cve@mitre.org"},{"url":"http://jira.codehaus.org/browse/JETTY-386#action_117699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jira.codehaus.org/browse/JETTY/fixforversion/13950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/39855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.igniterealtime.org/community/message/163752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/553235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6673","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Makale Scripti permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro ara del URI por defecto bajo Ara/ en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:makale_scripti:makale_scripti:*:*:*:*:*:*:*:*","matchCriteriaId":"027EE8A9-B0A0-4090-A54C-993775053DED"}]}]}],"references":[{"url":"http://secunia.com/advisories/28262","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0712-exploits/makale-xss.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27067","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0712-exploits/makale-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6674","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Default.asp de RapidShare Database permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro Arayalim."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rapidshare:database:*:*:*:*:*:*:*:*","matchCriteriaId":"E9B411A4-3EE5-4003-BDB8-5B96FF6F84D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/28189","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0801-exploits/rapidshare-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39491","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0801-exploits/rapidshare-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6675","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, which allows remote attackers to read the comments in restricted modules."},{"lang":"es","value":"La función b_system_comments_show en htdocs/modules/system/blocks/system_blocks.php de XOOPS anterior a 2.0.18 no comprueba los permisos, lo cual permite a atacantes remotos leer los comentarios en módulos restringidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.17_1","matchCriteriaId":"B8A492DB-63D2-49DB-879B-3334E05EC914"}]}]}],"references":[{"url":"http://secunia.com/advisories/28264","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=41586&release_id=564689","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1808484&group_id=41586&atid=430840","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27135","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=41586&release_id=564689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1808484&group_id=41586&atid=430840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6676","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) .html, (2) .asp, and other possibly dangerous extensions, which allows remote attackers to use these extensions in uploads via (a) uu_file_upload.php, related to uu_file_upload.js and (b) uber_uploader_file.php, related to uber_uploader_file.js, a different issue than CVE-2007-0123.  NOTE: the vendor disputes the severity of the issue, noting that it is the administrator's responsibility to \"add file extensions that you may or may not want uploaded.\""},{"lang":"es","value":"La configuración por defecto de Uber Uploader (UU) 5.3.6 y anteriores no bloquea los envíos de (1) .html, (2) .asp, y otras extensiones potencialmente peligrosas, lo cual permite a atacantes remotos usar estas extensiones en envíos a través de (a) uu_file_upload.php, relacionado con uu_file_upload.js y (b) uber_uploader_file.php, relacionado con uber_uploader_file.js, un problema diferente de CVE-2007-0123. NOTA: el fabricante impugna la severidad del problema, notando que es la responsabilidad del administrador \"añadir extensiones que puede o no querer que se envíen\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uber_uploader:uber_uploader:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.6","matchCriteriaId":"6B4D52CA-10E1-4228-9D66-0074257244E8"}]}]}],"references":[{"url":"http://osvdb.org/43535","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3519","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485235/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485290/100/100/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/43535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485235/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485290/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6677","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the comment field in the comment form."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión Peter's Random Anti-Spam Image 0.2.4 y anteriores para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del campo comentario en el formulario de comentarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peters_software:random_anti-spam_image:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"0.2.4","matchCriteriaId":"5DAD76F8-513C-438E-976D-557A5DD77D58"}]}]}],"references":[{"url":"http://osvdb.org/43444","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://websecurity.com.ua/1535/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/43444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://websecurity.com.ua/1535/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-6678","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T01:46:00.000","lastModified":"2023-11-07T02:01:36.267","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6167.  Reason: This candidate is a duplicate of CVE-2007-6167.  Notes: All CVE users should reference CVE-2007-6167 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[]}},{"cve":{"id":"CVE-2007-6679","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to \"security concerns with monitor role users.\"  NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected."},{"lang":"es","value":"Una vulnerabilidad no especificada en la Consola Administrativa en IBM WebSphere Application Server versión 6.1 anterior a Fix Pack 13, presenta vectores de ataques e impactos desconocidos, relacionados a \"security concerns with monitor role users.\" NOTA: más tarde se reportó que las versión 6.0.2 anterior a Fix Pack 25 también esta afectado"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.24","matchCriteriaId":"B6D01526-995E-4861-9A65-D71C6317872C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"}]}]}],"references":[{"url":"http://secunia.com/advisories/28588","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019174","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0241","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-6680","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to an error in the support for links in the TSD_FILES_LOCK policy."},{"lang":"es","value":"Trusted Execution en IBM AIX 6.1 utiliza un argumento de nombre de ruta incorrecto en una llamada a la función trustchk_block_write, lo cual podría permitir a usuarios locales modificar ficheros de confianza, relacionado con un error en el soporte para enlaces en la política TSD_FILES_LOCK."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28257","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ12119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27177","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019158","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0060","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ12119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6681","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en modules/demux/subtitle.c de VideoLAN VLC 0.8.6d permite a atacantes remotos ejecutar código de su elección mediante un subtítulo largo en un fichero (1) MicroDvd, (2) SSA, y (3) Vplayer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6d","matchCriteriaId":"51E219A8-7A7C-49A5-9978-A1470CEF3702"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vlcboffs-adv.txt","source":"cve@mitre.org"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-June/032672.html","source":"cve@mitre.org"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-June/033394.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/42207","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29800","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3550","source":"cve@mitre.org"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485488/30/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27015","source":"cve@mitre.org"},{"url":"http://www.videolan.org/security/sa0801.php","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5667","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vlcboffs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-June/032672.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-June/033394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485488/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa0801.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6682","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función httpd_FileCallBack (network/httpd.c) de VideoLAN VLC 0.8.6d permite a atacantes remotos ejecutar código de su elección mediante especificadores de cadenas de formato en el parámetro Connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6d","matchCriteriaId":"51E219A8-7A7C-49A5-9978-A1470CEF3702"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vlcboffs-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/42208","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3550","source":"cve@mitre.org"},{"url":"http://trac.videolan.org/vlc/changeset/23839","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485488/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27015","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14790","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5519","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vlcboffs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.videolan.org/vlc/changeset/23839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485488/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6683","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability."},{"lang":"es","value":"La extensión de navegación de VideoLAN VLC 0.8.6d permite a atacantes remotos sobrescribir ficheros de su elección mediante (1) la opción :demuxdump-file en un nombre de fichero de una lista de reproducción, o (2) una sentencia EXTVLCOPT en un fichero MP3, posiblemente una vulnerabilidad de inyección de argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6d:*:*:*:*:*:*:*","matchCriteriaId":"686E1C6D-CDE6-4615-B983-3BCDDDE921AD"}]}]}],"references":[{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-December/037726.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/42205","source":"cve@mitre.org"},{"url":"http://osvdb.org/42206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28712","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14619","source":"cve@mitre.org"},{"url":"https://trac.videolan.org/vlc/changeset/23197","source":"cve@mitre.org"},{"url":"https://trac.videolan.org/vlc/ticket/1371","source":"cve@mitre.org"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-December/037726.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/42205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://trac.videolan.org/vlc/changeset/23197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://trac.videolan.org/vlc/ticket/1371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6684","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, which triggers a NULL pointer dereference."},{"lang":"es","value":"El módulo RTSP de VideoLAN VLC 0.8.6d permite a atacantes remotos provocar una denegación de servicio (caída) mediante una petición sin el parámetro Transfer, lo cual provoca una referencia a un puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6d:*:*:*:*:*:*:*","matchCriteriaId":"686E1C6D-CDE6-4615-B983-3BCDDDE921AD"}]}]}],"references":[{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-September/034722.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org"},{"url":"http://trac.videolan.org/vlc/changeset/22023","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14876","source":"cve@mitre.org"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2007-September/034722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.videolan.org/vlc/changeset/22023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6685","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo Publish XP para Menalto Gallery anterior a 2.2.4 permite a atacantes remotos crear álbumes y subir ficheros mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery_publish_xp_module:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"F1D5D025-5596-4BD1-911E-A8DFB312A9A4"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6686","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller."},{"lang":"es","value":"El módulo URL rewrite para Menalto Gallery anterior a 2.2.4 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante vectores desconocidos relacionados con el controlador de la administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org"},{"url":"http://osvdb.org/41674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6687","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the (1) Core or (2) add-item modules; or via (3) HTTP PROPPATCH in the WebDAV module."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Menalto Gallery anterior a 2.2.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante nombres de fichero manipulados a los módulos (1) Core o (2) add-item; o mediante (3) HTTP PROPPATCH en el módulo WebDAV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41671","source":"cve@mitre.org"},{"url":"http://osvdb.org/41672","source":"cve@mitre.org"},{"url":"http://osvdb.org/41673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6688","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to \"web-accessibility protection of the storage folder.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la aplicación de instalacón en Menalto Gallery, en versiones anteriores a la 2.2.4. Tiene un impacto desconocido y vectores de ataque relacionados con \"Proteccion de la accesibilidad web del directorio de almacenamiento\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41670","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39987","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6689","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute arbitrary code via the (1) Core application or (2) MIME module."},{"lang":"es","value":"Menalto Gallery anterior a 2.2.4 no comprueba extensiones de fichero maliciosas durante la subida de ficheros, lo cual permite a atacantes remotos ejecutar código de su elección mediante los módulos (1) Core o (2) MIME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6690","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors."},{"lang":"es","value":"El módulo Gallery Remote para Menalto Gallery anterior a 2.2.4 no comprueba los permisos para comandos GR no especificados, lo cual tiene impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org"},{"url":"http://osvdb.org/41668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6691","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) \"hotlink protection\" in the URL rewrite module, (2) a WebDAV view in the WebDAV module, (3) a comment view in the Comment module, (4) unspecified \"item information disclosure attacks\" in the Core module Gallery application, (5) the slideshow in the Slideshow module, and (6) multiple Print modules."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Menalto Gallery anterior a 2.2.4 tiene impacto desconocido, relacionado con (1) \"hotlink protection\" en el módulo URL rewrite, (2) una vista WebDAV en el módulo WebDAV, (3) una vista de comentario en el módulo Comment, (4) \"ataques de revelación de información de ítem\" no especificados en el módulo Core de la aplicación Gallery, (5) la exposición de diapositivas en el módulo Slideshow, y (6) múltiples módulos de impresión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41662","source":"cve@mitre.org"},{"url":"http://osvdb.org/41663","source":"cve@mitre.org"},{"url":"http://osvdb.org/41664","source":"cve@mitre.org"},{"url":"http://osvdb.org/41665","source":"cve@mitre.org"},{"url":"http://osvdb.org/41666","source":"cve@mitre.org"},{"url":"http://osvdb.org/41667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6692","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) Core and (2) print modules."},{"lang":"es","value":"Vulnerabilidad de redirección libre en Menalto Gallery, en versiones anteriores a la 2.2.4, permite que atacantes remotos redirijan a los usuarios a sitios web arbitrarios y lleven a cabo ataques de phising, a través de una URL en los módulos (1) Core y (2) print"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"8783B6EF-0D51-4266-BE80-BCE62FAEB0C9"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org"},{"url":"http://osvdb.org/41660","source":"cve@mitre.org"},{"url":"http://osvdb.org/41661","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6693","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a \"proxied request.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo WebCam de Menalto Gallery versiones anteriores a 2.2.4 tiene impacto desconocido y vectores de ataque relativos a \"petición por proxy\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery_webcam_module:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"A13725E9-63E9-4C2E-B43F-4A1D07D7A8BD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28898","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=203217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gallery.menalto.com/gallery_2.2.4_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6694","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference."},{"lang":"es","value":"La función chrp_show_cpuinfo (chrp/setup.c) en Linux kernel 2.4.21 hasta 2.6.18-53, cuando funciona sobre PowerPC, podría permitir a usuarios locales provocar denegación de servicio (caida) a través de vectores desconocidos que hacen que la función of_get_property falle, lo cual dispara un puntero de referencia NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*","matchCriteriaId":"74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9_pre5:*:*:*:*:*:*:*","matchCriteriaId":"D0B58DDD-D3C4-4A2E-A908-64485497207D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*","matchCriteriaId":"E1D21AD5-C34F-4005-92F3-98F714DE98D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*","matchCriteriaId":"4F83D55B-3106-4907-A75F-A7EBF0EC6974"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*","matchCriteriaId":"0AFD594E-48BA-4281-8DEE-306E3008ABB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*","matchCriteriaId":"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*","matchCriteriaId":"637A08D0-E382-4DE8-AEEC-6A53A72849B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*","matchCriteriaId":"550DFE6E-DCE6-4649-8746-522996021DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*","matchCriteriaId":"2D3D2AA2-05B2-46E3-96EE-27EB29795E04"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*","matchCriteriaId":"E17BB496-749A-40C8-BAA9-6CFBBE308065"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*","matchCriteriaId":"AF51F68C-60A5-451F-9150-6DABBAE1D41E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*","matchCriteriaId":"0A3BF9D6-BE14-4590-91B8-501DC92261BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"0C30F255-1297-46EA-9FBC-05564792FF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*","matchCriteriaId":"5A6E8B0E-DEDD-43D1-9841-4BAF5A805967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*","matchCriteriaId":"934CBC22-864C-468F-B267-3CDE4449DA9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*","matchCriteriaId":"2AC432E3-7214-4B61-A666-2DAF5CCAEC52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*","matchCriteriaId":"7682650A-8332-484D-874F-2B67246880B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*","matchCriteriaId":"6DFF499A-6602-4BD3-90B5-E6C4AC888812"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*","matchCriteriaId":"0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:rc3:*:*:*:*:*:*","matchCriteriaId":"9484837D-600E-4378-8663-F7BA37E92EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:*","matchCriteriaId":"1C53EDB2-923D-4860-8251-9A07C9F8FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:*","matchCriteriaId":"2E2A5D6B-7011-40AE-8A94-02B062B19010"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35:*:*:*:*:*:*:*","matchCriteriaId":"9E460A86-FD22-4023-A0D7-0D2F43131635"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9BDB59EF-74EF-462E-BC84-89201F734380"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0755A136-3DE3-4B61-B5EF-F6282AACD38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"81D950C3-0DDC-4549-99F8-1E206768219A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"195A133A-26C9-401E-913F-285BA220D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B8D68E21-6C58-46A7-96F2-9A79DD880803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"38D11B12-AFD7-4055-A366-D932CA1BA8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BC990132-9DF2-4D23-B9DA-0819809A3CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FFA51D40-E72C-40A4-B238-70F6806FA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1E1B7D68-E41E-4A5A-9606-F14F057B39E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*","matchCriteriaId":"70BCB10C-FD72-4F18-84C9-AE0603402426"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*","matchCriteriaId":"54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*","matchCriteriaId":"CF742FF1-5504-41BB-8FAA-D71B83C791B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*","matchCriteriaId":"901C6D04-3226-4654-9A41-0325B48A2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*","matchCriteriaId":"072A77AD-BB27-4C24-91A0-A12D6E741593"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BF900D1D-E351-4407-8269-80E5403432B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"44915F9F-88DF-4304-8F66-58A869654BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*","matchCriteriaId":"4CC2D90D-2115-406C-B609-870B241F00B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EF681CC1-B3EC-467A-A10D-10840D3D4575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*","matchCriteriaId":"8660C030-328E-4221-847E-AC4BDA08CE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*","matchCriteriaId":"B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*","matchCriteriaId":"47AEC277-F9A4-412F-B2EA-C1AEA336A46C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*","matchCriteriaId":"7234AF29-BCDA-4728-A141-C169EE59CEC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*","matchCriteriaId":"E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*","matchCriteriaId":"374851C5-C61D-4964-8B4A-473B0A008F11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*","matchCriteriaId":"1FD55C81-3687-46BF-880E-58D7E005A185"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*","matchCriteriaId":"2953267F-16BF-404F-83F1-73E0908979B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*","matchCriteriaId":"9D953B61-3457-4A0E-A668-BA4937B79784"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*","matchCriteriaId":"5F5F3607-C0DD-494C-AB6E-46E383A6B17D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*","matchCriteriaId":"19138F52-25EA-42B6-89DC-692A8AF0A720"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4C2EBADC-0817-4E38-9F49-8446D8A20CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*","matchCriteriaId":"340368E7-0005-4F8A-8AF1-C20A1198288C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*","matchCriteriaId":"0DC860DD-57DF-4474-AE2B-9AADB9060175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*","matchCriteriaId":"DC1D576A-0763-4611-B3CF-CD8514F18783"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*","matchCriteriaId":"4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*","matchCriteriaId":"6F570226-CA89-46F4-8C68-9A59BC0602A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*","matchCriteriaId":"162A88DA-E2EA-4E92-B174-9AD86BE8D983"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*","matchCriteriaId":"EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*","matchCriteriaId":"5EE5C4F5-C64D-4714-B02E-689B435E3E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*","matchCriteriaId":"BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*","matchCriteriaId":"164F4483-9F28-491A-8F99-4242C9B9CBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*","matchCriteriaId":"34803A7D-45C4-4DBE-BF18-19CE9DE62A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*","matchCriteriaId":"1178D6EE-A462-4CC1-B430-9A44C75D2336"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*","matchCriteriaId":"4360530E-6E07-48F9-B8F8-B36622331052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*","matchCriteriaId":"17508D09-AE14-4458-93A2-E2764452EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*","matchCriteriaId":"05F2CD4A-CCA9-4743-86C4-7675D2487E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*","matchCriteriaId":"75C1504C-03C5-49E4-8192-E1E698CF07A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*","matchCriteriaId":"DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*","matchCriteriaId":"37A3172A-E663-42F6-90E7-51C3850AF9E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*","matchCriteriaId":"16F6692C-494F-44ED-97C6-A6CD05334DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*","matchCriteriaId":"3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*","matchCriteriaId":"5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*","matchCriteriaId":"77231F8B-137F-4FAE-BCD9-658F32943CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*","matchCriteriaId":"552ED77A-F09A-4923-A907-8E0DF8445363"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*","matchCriteriaId":"CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*","matchCriteriaId":"5DF940EA-676A-42C8-A6E0-7F53C8A34340"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*","matchCriteriaId":"BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*","matchCriteriaId":"5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*","matchCriteriaId":"29DCCFB1-054F-4BF0-92F1-78A2063415D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*","matchCriteriaId":"D3D3222C-7469-42F6-984D-3223BCD8080E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*","matchCriteriaId":"697B7069-D08D-41BD-8285-A1ABA0E1142F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*","matchCriteriaId":"72173CFB-BAB6-456C-B5F2-3AA31D799E74"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*","matchCriteriaId":"FDD08A67-195F-431B-98A5-42B2966055DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*","matchCriteriaId":"658C7317-D50B-475A-9E0E-E68AECD49B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*","matchCriteriaId":"1270F454-8E05-413C-BAF4-35D062CA5803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*","matchCriteriaId":"9F727CD3-D3C2-4648-9EC5-092DF3F73B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*","matchCriteriaId":"D1765065-ABE5-478C-9ACC-EFFA8E4A7043"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*","matchCriteriaId":"D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*","matchCriteriaId":"95DD4647-564E-4067-A945-F52232C0A33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*","matchCriteriaId":"6E20AD05-586B-4493-9793-3FF8028CF887"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*","matchCriteriaId":"4F76C298-81DC-43E4-8FC9-DC005A2116EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*","matchCriteriaId":"0AB349B2-3F78-4197-882B-90ADB3BF645A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*","matchCriteriaId":"8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*","matchCriteriaId":"F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*","matchCriteriaId":"31523E67-5E4F-43F7-9410-20CB3F287DAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*","matchCriteriaId":"9B627DE3-2702-4EB2-9733-253D315FB594"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*","matchCriteriaId":"C5B76C21-70C8-4911-A24B-270F876EF7C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*","matchCriteriaId":"A89DC9CD-C06F-4B9B-B376-900E65016296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*","matchCriteriaId":"15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*","matchCriteriaId":"8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*","matchCriteriaId":"707ECC75-65B6-4B02-BE85-A4804549A2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*","matchCriteriaId":"E55F2549-F813-4BD6-8933-6788D898ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:powerpc:*:*:*:*:*:*:*:*","matchCriteriaId":"4DA3EF4E-F381-4065-B51A-34428967C763"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=119576191029571&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0055.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28696","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28748","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29058","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29236","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30515","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30769","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1503","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1504","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0154.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27555","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0380","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=396751","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11215","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/614-1/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=119576191029571&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=396751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/614-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6695","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary web script or HTML via the option parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Drake 0.4.9 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro  option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"E52D8811-02A7-4123-B293-D4A5D4A01158"}]}]}],"references":[{"url":"http://osvdb.org/41199","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-drake_cms.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27459","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39976","source":"cve@mitre.org"},{"url":"http://osvdb.org/41199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-drake_cms.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6696","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) an event description, (2) the query string to pref.php, and (3) the adv parameter to search.php.  NOTE: vector 1 requires user authentication."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WebCalendar 1.1.6, permiten a atacantes remotos inyectar a su elección web script o HTM mediante (1) unas descripciones de eventos, (2) la cadena de consulta de pref.php, y (3) el parámetro adv de search.php. \r\nNOTA: el vector 1 requiere autenticación de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"ACAD8EF1-302C-4037-BB23-210020781701"}]}]}],"references":[{"url":"http://osvdb.org/41274","source":"cve@mitre.org"},{"url":"http://osvdb.org/41275","source":"cve@mitre.org"},{"url":"http://osvdb.org/41276","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-webcalendar.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27461","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/41274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-webcalendar.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-6697","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en la función LWZReadByte en IMG.gif.c en SDL_image anteriores a 1.2.7 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de un fichero GIF manipulado, similar a CVE-2006-4484. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sdl:sdl_image:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.6","matchCriteriaId":"EBAB41F3-8D8C-4DD6-9CA3-F503B7746C29"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207933","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120110205511630&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28752","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28837","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29542","source":"cve@mitre.org"},{"url":"http://vexillium.org/?sec-sdlgif","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0061","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1493","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml","source":"cve@mitre.org"},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/CHANGES?revision=3462&view=markup","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_gif.c?r1=2970&r2=3462","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:040","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488079/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27417","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-595-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0266","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39865","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2206","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120110205511630&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vexillium.org/?sec-sdlgif","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/CHANGES?revision=3462&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_gif.c?r1=2970&r2=3462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488079/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-595-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6698","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability."},{"lang":"es","value":"El backend de BDB para slapd en OpenLDAP versiones anteriores a 2.3.36, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo) por medio de una operación de modificación potencialmente con éxito con el control NOOP establecido en crítico, posiblemente debido a una vulnerabilidad de doble liberación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.35","matchCriteriaId":"44D78472-79A1-4DFD-8DAB-6AF7470C82B4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29068","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0059","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1541","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:058","source":"cve@mitre.org"},{"url":"http://www.openldap.org/lists/openldap-bugs/200704/msg00067.html","source":"cve@mitre.org"},{"url":"http://www.openldap.org/lists/openldap-bugs/200704/msg00068.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0110.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488242/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26245","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019480","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-584-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431203","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00105.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openldap.org/lists/openldap-bugs/200704/msg00067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openldap.org/lists/openldap-bugs/200704/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488242/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-584-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6699","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el control ActiveX AIM PicEditor 9.5.1.8 de YGPPicEdit.dll en AOL You've Got Pictures (YGP) Picture Editor. Permiten  a atacantes remotos causar una denegación de servicio (caída del navegador) a través de una cadena larga en los valores de propiedades  (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy y (8) UserAgent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:ygp_piceditor_activex_control:9.5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"A7D59B34-EC0B-4EE1-BD33-67252F3EEE18"}]}]}],"references":[{"url":"http://osvdb.org/41198","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0561.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0574.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27026","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019143","source":"cve@mitre.org"},{"url":"http://osvdb.org/41198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6700","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cgi-bin/bgplg en la interfaz web para el demonio BGPD de OpernBSD 4.1 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro cmd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/28726","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mail-archive.com/misc%40openbsd.org/msg49057.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/bgplg/bgplg.c","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487350/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487369/100/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27535","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mail-archive.com/misc%40openbsd.org/msg49057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/bgplg/bgplg.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487350/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487369/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6701","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el servicio Spooler (nwspool.dll) de Novell Client 4.91 SP4 para Windows permiten a atacantes remotos ejecutar código de su elección a través de argumentos largos de múltiples funciones RCP no especificadas, también conocido como Novell bug 287919, una vulnerabilidad diferente a CVE-2007-2954."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp4:*:*:*:*:*:*","matchCriteriaId":"EDDFB0E9-EF4C-4E9E-9369-453AF2A8481F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2007-08/0082.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26238","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018471","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005400.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25092","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-045.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35653","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2007-08/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6702","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603."},{"lang":"es","value":"goform/QuickStart_c0 sobre GoAhead Web Server en el dispositivo VDSL FS4104-AW (también conocido como rooter), permite la lectura del password del campo typepassword a través del código HTML. Vulnerabilidad distinta a CVE-2002-1603."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:fs4104-aw_device:*:*:*:*:*:*:*:*","matchCriteriaId":"7C109F00-3021-4C40-AA76-AB1073536130"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:*:*:*:*:*:*:*:*","matchCriteriaId":"9B4D1011-A3F5-4CE5-B8AA-7569E5D7FE28"}]}]}],"references":[{"url":"http://osvdb.org/43168","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39149","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4744","source":"cve@mitre.org"},{"url":"http://osvdb.org/43168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6703","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in vdccm before 0.10.1 in SynCE (SynCE-dccm) might allow attackers to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en vdccm anterior a 0.10.1 en SynCE (SynCE-dccm), que permitiría a atacantes remotos causar una denegación de servicio a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synce:vdccm:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10","matchCriteriaId":"CA251173-7B20-4B33-9E18-30EEFE49B5FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29285","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=766440","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28141","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41174","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=766440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6704","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to (1) my.activation.php3 and (2) my.logon.php3."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en F5 FirePass 4100 SSL VPN 5.4.1 hasta 5.5.2 y 6.0 hasta 6.0.1, cuando las secuencias pre-logon están activadas, permiten a atacantes remotos inyectar web script o HMTL de su elección a través de la cadena de consulta de (1) my.activation.php3 y (2) my.logon.php3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1D7B7CDD-2146-4B46-BCCC-A2E724F668C6"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"85AE9E11-C5F0-462E-AEFA-68ABE3B6AB0D"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A60081E6-94C5-4A8E-B95D-5131DAFF9537"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7FB490F1-237B-494F-9315-BE6A2920B693"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8A396D79-468A-4C32-8090-AED20AD7E4A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"EE197C0E-34AD-46AD-8359-713BA2034512"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"A90B5729-2F85-475B-AC7D-B9EEC15B0524"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"D595F076-822D-4A99-9838-18B9A28A323A"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.4.9:*:*:*:*:*:*:*","matchCriteriaId":"1D609CB0-72B0-4CCC-8351-897801B57B17"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"74BFE0EE-9554-4C6C-AB24-DC8AA50AF7A3"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8C79823A-E8DF-4F67-BB6D-4901E007D636"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A7EF2BA6-CA87-421B-A2DB-D74A16C1A845"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A4F8E7C1-84F6-42A4-9534-7C822F625240"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3F108EAE-0CC6-41C9-978B-B596F0981A5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/27904","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3712","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/38980","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/38981","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-14.php","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-15a.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/484411/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/484413/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492511/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26661","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38785","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38795","source":"cve@mitre.org"},{"url":"https://support.f5.com/kb/en-us/solutions/public/7000/900/SOL7923.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/38980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/38981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-14.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-15a.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/484411/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/484413/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492511/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/7000/900/SOL7923.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6705","sourceIdentifier":"cve@mitre.org","published":"2008-03-09T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESS_DUP_HANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly hijack an arbitrary process."},{"lang":"es","value":"El cliente WebSphere MQ XA 5.3 antes de FP13 y 6.0.x antes de 6.0.2.1 para Windows, cuando se ejecuta en un entorno MTS o COM+, garantiza el privilegio PROCESS_DUP_HANDLE al grupo Everyone (Todo el mundo) hasta la conexión a un gestionador de cola, el cual permite a usuarios locales duplicar una manipulación de su elección y prosiblemente secuestrar un proceso de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:*:fp_13:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"68907115-7F32-4C32-A2AC-B7C9E4F0BA57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.0","matchCriteriaId":"E9A2214B-937A-4138-A39F-2980A61922DA"}]}]}],"references":[{"url":"http://osvdb.org/43167","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019529","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC50431","source":"cve@mitre.org"},{"url":"http://osvdb.org/43167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC50431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6706","sourceIdentifier":"cve@mitre.org","published":"2008-03-09T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP."},{"lang":"es","value":"Vulnerabilidad sin especificar en nlnotes.dll en el cliente de IBM Lotus Notes 6.5, 7.0.x antes de 7.0.2 CCH or 7.0.3, y posiblemente 8.0 permite a atacantes remotos ejecutar código de su elección a través de un texto manipulado en un email enviado por SMTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.2","matchCriteriaId":"F61B72CC-BC8D-40AF-AE72-5A6EEFB53B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"692E295E-E650-42D5-AF7A-D6276C3D76E0"}]}]}],"references":[{"url":"http://osvdb.org/40956","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27279","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019464","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21271957","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3597","source":"cve@mitre.org"},{"url":"http://osvdb.org/40956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21271957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6707","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Cisco Linksys WAG54GS Wireless-G ADSL Gateway con versiones del código 1.01.03 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados, es una cuestión diferente a CVE-2007-3574."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wag54gs:*:*:*:*:*:*:*:*","versionEndIncluding":"firmware_1.01.03","matchCriteriaId":"F37E4D28-033F-4ECA-8581-C6FD3CFA2BFD"}]}]}],"references":[{"url":"http://osvdb.org/43539","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41270","source":"cve@mitre.org"},{"url":"http://osvdb.org/43539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6708","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by (1) a Restore Factory Defaults action using the mtenRestore parameter to setup.cgi and (2) creation of a user account using the sysname parameter to setup.cgi."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Cisco Linksys WAG54GS Wireless-G ADSL Gateway con versión de código 1.01.03 y anteriores permite a atacantes remotos realizar acciones como administrador mediante la utilización de una solicitud válida a una URI de administración, como se demuestra por (1) una acción de restauración de los valores de fábrica por defecto usando el parámetro mtenRestore de setup.cgi y por (2) la creación de una cuenta de usuario utilizando el parámetro sysname de setup.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wag54gs:*:*:*:*:*:*:*:*","versionEndIncluding":"firmware_1.01.03","matchCriteriaId":"F37E4D28-033F-4ECA-8581-C6FD3CFA2BFD"}]}]}],"references":[{"url":"http://osvdb.org/43537","source":"cve@mitre.org"},{"url":"http://osvdb.org/43538","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41269","source":"cve@mitre.org"},{"url":"http://osvdb.org/43537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6709","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has \"admin\" as its default password for the \"admin\" account, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"Cisco Linksys WAG54GS Wireless-G ADSL Gateway con versión de código 1.01.03 y anteriores pone  \"admin\" como contraseña por defecto del usuario \"admin\", que facilita a atacantes remotos la obtención de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wag54gs:*:*:*:*:*:*:*:*","versionEndIncluding":"firmware_1.01.03","matchCriteriaId":"F37E4D28-033F-4ECA-8581-C6FD3CFA2BFD"}]}]}],"references":[{"url":"http://osvdb.org/43536","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41268","source":"cve@mitre.org"},{"url":"http://osvdb.org/43536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6711","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, 2.2.6 and 2.2.7WIP1/2 allows remote attackers to gain administrator privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en customer.php de FreeWebshop.org 2.2.5, 2.2.6 y 2.2.7WIP1/2 permite a atacantes remotos obtener privilegios de administrador a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebshop:freewebshop:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"457F229C-4CEB-4C7A-9CF0-7C8E07F0ADD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freewebshop:freewebshop:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7F33949C-8DC9-4E7A-BAA5-177F46673EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freewebshop:freewebshop:2.2.7_wip1_2:*:*:*:*:*:*:*","matchCriteriaId":"0D0EA1D3-1DC4-4902-A52F-FCF73DE826B5"}]}]}],"references":[{"url":"http://osvdb.org/43804","source":"cve@mitre.org"},{"url":"http://www.freewebshop.org/?Downloads:Fixes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.freewebshop.org/?News","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41439","source":"cve@mitre.org"},{"url":"http://osvdb.org/43804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freewebshop.org/?Downloads:Fixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.freewebshop.org/?News","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6712","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired."},{"lang":"es","value":"Desbordamiento de entero en la función hrtimer_forward function (hrtimer.c) en el kernel 2.6.21-rc4 de Linux, cuando corren en sistemas de 64-bit, permite a los usuarios locales provocar una denegación de servicio (bucle infinito) mediante un temporizador con un valor de caducidad largo, que provoca que el temporizador esté siempre expirado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kernel:linux_kernel:2.6.21_rc4:*:x64:*:*:*:*:*","matchCriteriaId":"C6D37A03-867E-4925-8E6F-22AB678A9E26"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/chris/linux-2.6.git%3Ba=commitdiff%3Bh=13788ccc41ceea5893f9c747c59bc0b28f2416c2","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30818","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31628","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0275.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29294","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41827","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9210","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/chris/linux-2.6.git%3Ba=commitdiff%3Bh=13788ccc41ceea5893f9c747c59bc0b28f2416c2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0275.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6713","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Flip4Mac WMV before 2.2.0.49 has unknown impact and attack vectors related to malformed WMV files."},{"lang":"es","value":"Vulnerabilidad sin especificar en Flip4Mac WMV anterior a 2.2.0.49, tiene un impacto y vectores de ataque desconocido relacionados con archivos WMV mal formados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BFC2599B-6742-4A07-A17B-34BA2B60DABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EBFC8995-DFCF-4C8E-93F2-0CE77299AC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C629F875-6F67-4D36-ACC7-412CB5669B45"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.0.33:*:*:*:*:*:*:*","matchCriteriaId":"FD3FA537-AD91-4C26-996F-78DC361479B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.1.70:*:*:*:*:*:*:*","matchCriteriaId":"285B2DA9-AEFF-43CF-9E58-25F2B81796F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.1.72:*:*:*:*:*:*:*","matchCriteriaId":"2A368D2A-10B6-492B-BFA0-62EB09F4DCFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D9705197-67A4-496B-AB43-20A7AD7C2BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B920BC22-11CF-4166-86D5-27AC969F8889"}]}]}],"references":[{"url":"http://secunia.com/advisories/29922","source":"cve@mitre.org"},{"url":"http://www.flip4mac.com/downloads/wmv_components/rel_Flip4mac_WMV_2.2.0.49.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28912","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.flip4mac.com/downloads/wmv_components/rel_Flip4mac_WMV_2.2.0.49.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6714","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication."},{"lang":"es","value":"DBMail anterior a 2.2.9, cuando usa authldap con un servidor LDAP que soporta validación (login) anónima como en Active Directory, permite a atacantes remotos evitar la autenticación con una contraseña vacía, esto provoca que LDAP muestre un acceso válido basándose en la autenticación anónima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FA4DB4CD-B262-4247-BD2E-F092BA6537BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A2580139-D5DB-4B4D-B6E7-F0957D4EE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F2FD1538-8288-4156-A181-BA077CED44A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D65C8E14-7FB2-41E5-8C74-5509D2FC4AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.7:rc2:*:*:*:*:*:*","matchCriteriaId":"E76AF034-85D5-40F3-8C5B-85DBCCDF4E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.7:rc3:*:*:*:*:*:*","matchCriteriaId":"10D91F87-6055-4186-855E-0BC198C0FF31"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.7:rc4:*:*:*:*:*:*","matchCriteriaId":"51B8C537-0501-413B-8BE1-35D8845194B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"604DBA7B-4C2A-425E-B243-677C0F3AB6C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dbmail:dbmail:2.2.8:rc1:*:*:*:*:*:*","matchCriteriaId":"7839DDA0-A977-4AE4-B1D4-28D0472E8EB0"}]}]}],"references":[{"url":"http://dbmail.org/index.php?page=news&id=44","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/44561","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29903","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29937","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29984","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-24.xml","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/dbmail-dev%40dbmail.org/msg09942.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28849","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019914","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1321/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41907","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00549.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00585.html","source":"cve@mitre.org"},{"url":"http://dbmail.org/index.php?page=news&id=44","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/44561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/dbmail-dev%40dbmail.org/msg09942.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1321/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00585.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6715","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox allows remote attackers to cause a denial of service (crash) via crafted image, as demonstrated by the zzuf lol-firefox.gif test case."},{"lang":"es","value":"Mozilla Firefox permite a atacantes remotos provocar una denegación de servicio (caída) mediante una imagen manipulada, como se demostró en la prueba de concepto zzuf lol-firefox.gif."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this flaw a security issue. This flaw is not exploitable beyond causing the web browser to crash.","lastModified":"2008-04-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://hboeck.de/archives/578-How-long-does-it-take-to-fix-a-crash-bug.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/44727","source":"cve@mitre.org"},{"url":"http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities","source":"cve@mitre.org"},{"url":"http://sam.zoy.org/zzuf/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27243","source":"cve@mitre.org"},{"url":"http://hboeck.de/archives/578-How-long-does-it-take-to-fix-a-crash-bug.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sam.zoy.org/zzuf/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6716","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test."},{"lang":"es","value":"fs/direct-io.c del subsistema dio del núcleo de Linux anterior a 2.6.23, no suprime de forma correcta la estructura dio, esto permite a usuario locales provocar una denegación de servicio (OOPS), como se ha demostrado en determinados test fio."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.23","matchCriteriaId":"CE323F46-5BE8-40FC-B564-B21ADE5D4DC6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"15E235E9-EC31-4F3F-80F7-981C720FF353"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/30/448","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32023","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32103","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32237","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32356","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32370","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32799","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31515","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461082","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=848c4dd5153c7a0de55470ce99a8e13a63b4703f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/30/448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-6717","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:04:27.757","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento del búfer en tftp de bos.net.tcp.client de IBM AIX 5.2.0 y 5.3.0; permite a usuarios locales obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A7DBFF-B11B-47EC-9E52-C12B156739D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DE57C2-E728-4016-9774-28FB4B0509AB"}]}]}],"references":[{"url":"http://secunia.com/advisories/27437","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ03054","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ03060","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?path=/200710/SECURITY/20071030/datafile110126&mode=7&heading=AIX53","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45651","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ03054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ03060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?path=/200710/SECURITY/20071030/datafile110126&mode=7&heading=AIX53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6718","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T17:59:23.053","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3; (2) a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; (3) a malformed MPEG-1 file, as demonstrated by lol-mplayer.mpg; (4) a malformed MPEG-2 file, as demonstrated by lol-mplayer.m2v; (5) a malformed MPEG-4 AVI file, as demonstrated by lol-mplayer.avi; (6) a malformed FLAC file, as demonstrated by lol-mplayer.flac; (7) a malformed Ogg Theora file, as demonstrated by lol-mplayer.ogm; (8) a malformed WMV file, as demonstrated by lol-mplayer.wmv; or (9) a malformed AAC file, as demonstrated by lol-mplayer.aac.  NOTE: vector 5 might overlap CVE-2007-4938, and vector 6 might overlap CVE-2008-0486."},{"lang":"es","value":"MPlayer, posiblemente v1.0rc1, permite a atacantes remotos causar denegación de servicio (SIGSEGV y caída de aplicación) mediante (1) un archivo MP3 mal formado, como se ha demostrado en lol-mplayer.mp3; (2) un archivo mal formado Ogg Vorbis, como se ha demostrado en lol-mplayer.ogg; (3) un archivo mal formado MPEG-1,  como se ha demostrado en lol-mplayer.mpg; (4) un archivo mal formado MPEG-2, como se ha demostrado en lol-mplayer.m2v; (5) un archivo mal formado MPEG-4 AVI, como se ha demostrado en lol-mplayer.avi; (6) un archivo mal formado FLAC, como se ha demostrado en lol-mplayer.flac; (7) un archivo mal formado Ogg Theora, como se ha demostrado en lol-mplayer.ogm; (8) un archivo mal formado WMV, como se ha demostrado en lol-mplayer.wmv; or (9) un archivo mal formado AAC, como se ha demostrado en lol-mplayer.aac.  NOTA: el vector 5 podría superponerse a CVE-2007-4938, y el vector 6 podría superponerse a CVE-2008-0486."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0_rc1","matchCriteriaId":"CB911389-3DF4-407A-B2B0-ADFD14763DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*","matchCriteriaId":"2AD73BA0-D315-4ADA-A942-8DCC2A920B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*","matchCriteriaId":"710ACCE6-B3E3-474A-B78B-5A123EC24DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*","matchCriteriaId":"55D3C3E6-862E-470E-8CEA-4B333B906172"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*","matchCriteriaId":"30D6A539-5523-4E52-854A-82CDCDBDFC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CA841B0B-8FA9-45F9-9B60-7C9BD1A92E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*","matchCriteriaId":"91907AEA-D84F-4DD9-AD22-41E563182FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"D200DE0F-D8BB-460D-928E-E59473F84B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*","matchCriteriaId":"5103A1E1-670A-4527-9FB8-9D8B0DA506D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"500E5BD7-3F17-455F-8463-50B145128873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"3BE4C532-1756-4B2E-94EE-8F8253281F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"0E6875BE-67F1-4E0E-A610-7B6EDBAB6431"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*","matchCriteriaId":"4E74EBC5-296E-4B20-8BCB-F104D06595AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"29A09BDA-DA05-4512-9E39-14819C410CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:*","matchCriteriaId":"A5650520-0CCA-47C1-A7B8-8A6129BE6B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:*","matchCriteriaId":"FD1FAB76-B1DB-400E-9224-09E82D9A8847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:*","matchCriteriaId":"D4D18950-F883-47D1-B95B-6F46F2F6F701"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre6:*:*:*:*:*:*:*","matchCriteriaId":"00928380-0E20-4678-98B7-18A634164F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7:*:*:*:*:*:*:*","matchCriteriaId":"A671EC1E-A917-4A9C-8254-7885FF612D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7try2:*:*:*:*:*:*:*","matchCriteriaId":"430103FB-6255-4581-A7DC-F218E5B86D4A"}]}]}],"references":[{"url":"http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/07/1","source":"cve@mitre.org"},{"url":"http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6719","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Wiz-Ad v1.3 permitiría la ejecución de comandos SQL a través de vectores desconocidos. NOTA: La procedencia de esta información es desconocida. Los detalles se obtuvieron totalmente de una información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inspector_it:wiz-ad:1.3:*:*:*:*:*:*:*","matchCriteriaId":"AE07AB8E-1252-4130-B16C-D45891DC96D0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/25819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0001","sourceIdentifier":"secalert@redhat.com","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories."},{"lang":"es","value":"VFS en el kernel de Linux versiones anteriores a 2.6.22.16 y versiones 2.6.23.x anteriores a 2.6.23.14, realiza pruebas de modo de acceso mediante el uso de la variable flag en lugar de la variable acc_mode, lo que podría permitir a usuarios locales omitir los permisos previstos y eliminar directorios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.22.15","matchCriteriaId":"6A120078-D32C-462F-BB51-E195A9E7265E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC106BDA-2EA4-41A2-AA01-6352A5C255B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*","matchCriteriaId":"FB515243-7519-4CA4-9267-D9A6798CBC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*","matchCriteriaId":"B672E1B6-E8E9-473F-853F-906EA56D712E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*","matchCriteriaId":"0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*","matchCriteriaId":"EC36074C-C310-4341-8B3C-BB34E572BF94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*","matchCriteriaId":"ECCC155A-C68C-44A8-8C44-7979C9889C34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*","matchCriteriaId":"040EBFDA-7F8D-428F-BB69-BB1B52BB868B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*","matchCriteriaId":"69E703D2-8CC9-421A-9728-75E8FCFB4FE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc5:*:*:*:*:*:*","matchCriteriaId":"D25556CC-C522-4C79-99DD-9A7329697B8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=974a9f0b47da74e28f68b9c8645c3786aa5ace1a","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0055.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28485","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28558","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28626","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28628","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28643","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28664","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28706","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28748","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28806","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28971","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29245","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019289","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0021","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1479","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:044","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:112","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0089.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/486485/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27280","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-574-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-578-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0151","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39672","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2146","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9709","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00828.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=974a9f0b47da74e28f68b9c8645c3786aa5ace1a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486485/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-574-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-578-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00828.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0002","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the exception."},{"lang":"es","value":"Apache Tomcat 6.0.0 hasta 6.0.15 procesa parámetros en el contexto de una solicitud errónea cuando ocurre una excepción durante el procesamiento del parámetro, lo cual permite a atacantes remotos obtener información sensible, tal como se demostró durante este tratamiento para provocar la excepción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28834","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29711","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3638","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487812/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27703","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0488","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487812/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0003","sourceIdentifier":"secalert@redhat.com","published":"2008-01-08T20:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360."},{"lang":"es","value":"Un desbordamiento del búfer en la región stack de la memoria en la función PAMBasicAuthenticator::PAMCallback en el servidor de administración de OpenPegasus CIM (tog-pegasus), cuando es compilado para usar PAM y sin PEGASUS_USE_PAM_STANDALONE_PROC definida, podría permitir a atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos, una vulnerabilidad diferente de CVE -2007-5360."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:as:*:*:*:*:*","matchCriteriaId":"49EF5B77-9BC9-4AE8-A677-48E5E576BE63"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:es:*:*:*:*:*","matchCriteriaId":"36389D32-61C1-4487-8399-FA7D2864FACD"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:ws:*:*:*:*:*","matchCriteriaId":"49B67F74-AF8F-4A27-AA8A-A8479E256A9F"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.5.z:*:as:*:*:*:*:*","matchCriteriaId":"9E17C039-50DC-487F-B800-8694C2E733FA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.5.z:*:es:*:*:*:*:*","matchCriteriaId":"B380DA56-B6E4-4735-A66C-EE29B56D7A52"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpegasus:management_server:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"718022C2-CA80-44CB-ACF9-A24FBF5ABDA6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000014.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/40082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28338","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28462","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29056","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29785","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29986","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019159","source":"secalert@redhat.com"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001879.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0002.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/490917/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27172","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27188","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0063","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0638","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1234/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1391/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=426578","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39527","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.html","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001879.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/490917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1234/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1391/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=426578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0005","sourceIdentifier":"secalert@redhat.com","published":"2008-01-12T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding."},{"lang":"es","value":"mod_proxy_ftp en  Apache 2.2.x antes de la versión 2.2.7-dev, 2.0.x antes de la2.0.62-dev, y 1.3.x antes de 1.3.40-dev, no define un conjunto de caracteres, lo que permite que atacantes remootos puedan llevar a cabo ataques de secuencias de comandos (XSS) en sitios cruzados usando una codificación UTF-7."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.2.8 and 2.0.63:\nhttp://httpd.apache.org/security/vulnerabilities_22.html\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.63","matchCriteriaId":"D7572E20-B854-485C-AAF2-52D0B5A4E262"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.8","matchCriteriaId":"7EBFF547-F2F3-4ED7-B1A5-D878002787D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28467","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28471","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28526","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28607","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28749","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28977","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29348","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29420","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29640","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30732","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35650","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/49","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3526","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:015","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0007.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486167/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27234","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019185","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1875/references","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39615","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10812","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/49","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486167/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-575-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1875/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00541.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00562.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0006","sourceIdentifier":"secalert@redhat.com","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table."},{"lang":"es","value":"Un desbordamiento del búfer en (1) X.Org Xserver versiones anteriores a 1.4.1, y (2) las bibliotecas libfont y libXfont en algunas plataformas, incluyendo Sun Solaris, permite a atacantes dependiendo del contexto ejecutar código arbitrario por medio de una fuente PCF con una diferencia considerable entre los últimos y primeros valores col en la tabla PCF_BDF_ENCODINGS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_libfont:*:*:*:*:*:*:*:*","matchCriteriaId":"E88F5381-BBB6-4D16-8C15-CAC9F21EBD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_libxfont:*:*:*:*:*:*:*:*","matchCriteriaId":"C5D35315-915F-4F6B-816F-17E0CD9AE6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:xserver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"EBC8352E-BBB6-4B41-AD07-447D8D71CE7D"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN88935101/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001043.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28273","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28500","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28532","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28535","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28536","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28540","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28542","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28544","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28550","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28571","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28592","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28621","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28718","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28885","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28941","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29139","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29420","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29622","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29707","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32545","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019232","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201230-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-038.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/203220","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:024","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0064.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27336","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27352","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"secalert@redhat.com"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428044","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39767","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10021","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/571-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00674.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00771.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN88935101/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-January/031918.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201230-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-038.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/203220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata41.html#012_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html#006_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0497/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/571-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00674.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0007","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset."},{"lang":"es","value":"Núcleo de Linux versiones anteriores a 2.6.22.17, cuando se usan ciertos controladores que registran un error en el manejador, que no realiza comprobaciones de rango, permite a usuarios locales acceder a la memoria del núcleo a través de un desplazamiento fuera de rango."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.22.16","matchCriteriaId":"B5EA05A9-3110-45FF-BFF9-EF263D9A680A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"secalert@redhat.com"},{"url":"http://lkml.org/lkml/2008/2/6/457","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28806","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28826","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29058","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29570","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30018","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30110","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30112","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30116","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30769","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31246","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33280","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019357","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1503","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1504","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:044","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:072","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:112","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487808/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27686","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27705","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0445/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/2/6/457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487808/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0445/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0008","sourceIdentifier":"secalert@redhat.com","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion."},{"lang":"es","value":"La función pa_drop_root en PulseAudio versión 0.9.8, y una cierta build 0.9.9, no comprueba los valores de retorno de llamadas (1) setresuid, (2) setreuid, (3) setuid y (4) seteuid, cuando intenta perder privilegios, lo que podría permitir a usuarios locales alcanzar privilegios causando que esas llamadas fallen por ataques tales como el agotamiento de recursos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*","matchCriteriaId":"19D64247-F0A0-4984-84EA-B63FC901F002"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"316AA6EB-7191-479E-99D5-40DA79E340E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"CB7AD2F3-451D-4F37-A6F3-DE676804BBA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"5FE8C9E7-15C3-4F89-8E54-C9691FAD4E4C"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulseaudio:pulseaudio:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"F7E8B62F-B9DE-4209-9531-8FA6C4869295"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulseaudio:pulseaudio:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"21A099DF-9D09-4698-96FC-00D188FD9E36"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207214","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://pulseaudio.org/changeset/2100","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28608","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28623","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28738","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28952","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200802-07.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1476","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:027","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27449","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-573-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0283","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=347822","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=425481","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39992","source":"secalert@redhat.com","tags":["VDB Entry"]},{"url":"https://tango.0pointer.de/pipermail/pulseaudio-discuss/2008-January/001228.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00852.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00869.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://pulseaudio.org/changeset/2100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200802-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-573-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=347822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=425481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://tango.0pointer.de/pipermail/pulseaudio-discuss/2008-January/001228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00852.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00869.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0009","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations."},{"lang":"es","value":"La función vmsplice_to_user en fs/splice.c del núcleo de Linux 2.6.22 hasta 2.6.24 no valida ciertos punteros en el espacio antes referenciados, lo cual permite a usuarios locales acceder a localizaciones de memoria del núcleo de su elección."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-02-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"}]}]}],"references":[{"url":"http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28835","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28896","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487982/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27704","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27799","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0487/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431206","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html","source":"secalert@redhat.com"},{"url":"http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487982/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0487/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0010","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations."},{"lang":"es","value":"La copia de la función copy_from_user_mmap_semen fs/splice.c en  kernel linux de la versión 2.6.22  a la 2.6.24,  no valida ciertos referencias a punteros en memoria, que permite a usuarios locales leer espacios de memoria del kernel de su elección."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-02-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"}]}]}],"references":[{"url":"http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28835","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28875","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28896","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1494","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487982/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27704","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27796","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0487/references","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/5093","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html","source":"secalert@redhat.com"},{"url":"http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487982/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0487/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0011","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the \"MJPEG Decoder Vulnerability.\""},{"lang":"es","value":"Microsoft DirectX 8.1 a 9.0c, y DirectX en Microsoft XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no realiza adecuadamente la comprobación de errores MJPEG lo cual podría permitir a usuarios remotos ejecutar código de su elección a través de una cadena de datos MJPEG manipulada en un archivo (1) AVI o (2) ASF, también conocida como la \"Vulnerabilidad del decodificador MJPEG\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*","matchCriteriaId":"59F8A83B-899C-47CE-B444-E8B4AC7723C7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*","matchCriteriaId":"7AF8B188-A5E0-4D53-9FE1-C72BD956191B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:10.0:*:*:*:*:*:*:*","matchCriteriaId":"5A53A6AC-74B0-4DB3-B94D-06FB969AE83C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30579","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020222","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29581","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1780","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0012","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0013 and CVE-2008-0014."},{"lang":"es","value":"Desbordamiento de búfer en la memoria libre para la reserva dinámica (heap) en un procedimiento desconocido de Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, posiblemente relacionados con la configuración del producto, una vulnerabilidad diferente de CVE-2008-0012 y CVE-2008-0013."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/310.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39918","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0013","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0014."},{"lang":"es","value":"Desbordamiento del búfer basado en montículo en un procedimiento no especificado en Trend Micro ServerProtect v5.7 y v5.58 permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos, posiblemente relacionados con la configuración de productos, una vulnerabilidad diferente de CVE-2008-0012 y CVE-2008-0014."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/310.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39919","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0014","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a different vulnerability than CVE-2008-0012 and CVE-2008-0013."},{"lang":"es","value":"Un Desbordamiento de búfer en la memoria libre para la reserva dinámica (heap) en un procedimiento no especificado de Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, posiblemente relacionados con la configuración del producto, una vulnerabilidad diferente que CVE-2008-0012 y CVE-2008-0013."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*","matchCriteriaId":"BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}]}]}],"references":[{"url":"http://blogs.iss.net/archive/trend.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/310.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39920","source":"cve@mitre.org"},{"url":"http://blogs.iss.net/archive/trend.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/768681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0016","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T20:37:04.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la implementación de análisis URL de Firefox de Mozilla antes de 2.0.0.17 y SeaMonkey antes de 1.1.12 permite a atacantes remotos ejecutar código de su elección mediante un URL UTF-8 manipulado en un enlace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"541E2386-4ABC-4CBA-9D50-7610590B4799"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"288192A0-8E52-4436-AA5E-6E01C5B98532"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31984","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31985","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32012","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32042","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32082","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32092","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32196","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32845","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33434","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34501","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-37.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31397","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020913","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443288","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451617","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11579","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"cve@mitre.org"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-37.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0017","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.173","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow."},{"lang":"es","value":"El analizador de tipo http-index-format MIME (nsDirIndexParser) en Firefox 3.x antes de 3.0.4, Firefox 2.x antes de 2.0.0.18 y SeaMonkey 1.x antes de 1.1.13 no comprueba un fallo de almacenamiento, lo que permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una respuesta de índice HTTP con una cabecera 200 manipulada, lo que dispara corrupción de memoria y un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/threats/311.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-54.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021185","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443299","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11005","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/threats/311.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-54.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0026","sourceIdentifier":"psirt@cisco.com","published":"2008-02-14T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages."},{"lang":"es","value":"Una vulnerabilidad de la inyección SQL en Cisco Unified CallManager/Communications Manager (CUCM) versiones 5.0/5.1 anteriores a 5.1(3a) y versiones 6.0/6.1 anteriores a 6.1(1a), permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio del parámetro key en las páginas de interfaz de (1) administrador y (2) usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"37FEF567-5F92-40BB-8581-3FCF584AAA1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E9211420-9F35-4872-879A-5F7CA29C6299"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D7DD4B55-4C68-45CD-988E-D470C26E5E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"BC32C417-3E61-4892-9A42-C31C6D62F09D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0_4a:*:*:*:*:*:*:*","matchCriteriaId":"97694D13-B0A4-4AE4-9142-76F6B7C446C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8DC17139-DB98-4C59-B29B-1B792C67EB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3D748F22-A917-4EE3-B523-13419D826EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AF68FA-433F-46F2-B309-B60A108BECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:*","matchCriteriaId":"CFE62DB5-943D-43B5-BD13-D74DAA122578"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:*","matchCriteriaId":"D2D76BC6-1A59-4D74-A7C9-8C05D96E01F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:*","matchCriteriaId":"788BDB54-0970-468F-9713-14B097E1A863"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:*","matchCriteriaId":"3CAE1371-F46C-4DFD-A4A4-D609E93C4740"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_4:*:*:*:*:*:*:*","matchCriteriaId":"E7AC2F39-C029-4FAB-A963-0C7F1D5A8067"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_4a:*:*:*:*:*:*:*","matchCriteriaId":"62781360-15FC-4E40-AEF8-BF01606A671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_4a_su1:*:*:*:*:*:*:*","matchCriteriaId":"08E03DCC-4DCB-4830-943F-05F7E3BB49EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"05F443F9-B454-42B3-8464-ACEA40066DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28932","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7c.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/27775","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019404","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0542","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40484","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7c.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0027","sourceIdentifier":"psirt@cisco.com","published":"2008-01-17T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servicio proveedor de Listas de Certificados Confiables (CTL, Certificate Trust List) (CTLProvider.exe) en Cisco Unified Communications Manager (CUCM) 4.2 anterior a 4.2(3)SR3 y 4.3 anterior a 4.3(1)SR1, y CallManager 4.0 y 4.1 anterior a 4.1(3)SR5c, permite a atacantes remotos provocar una denegación de servicio o ejecutar código de su elección mediante una petición larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FF04567B-73C5-4ACC-9B31-5C3BAAB6E641"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AC772518-51CC-4692-BEB2-2C9C2A215F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1\\(3\\)sr4:*:*:*:*:*:*:*","matchCriteriaId":"20A8643E-304C-4879-8CD5-209C1016DF31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1\\(3\\)sr5:*:*:*:*:*:*:*","matchCriteriaId":"FA1FF9B0-3BEB-4256-8D50-11CD6EEF04BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1\\(3\\)sr5b:*:*:*:*:*:*:*","matchCriteriaId":"D909C0AF-F213-4371-8A35-C5720B43ED90"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E6C20851-DC17-4E89-A6C1-D1B52D47608F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2:*:*:*:*:*:*:*","matchCriteriaId":"19432E5E-EA68-4B7A-8B99-DEBACBC3F160"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2b:*:*:*:*:*:*:*","matchCriteriaId":"ABE4CD8E-F27C-4F96-B955-FC1E71B5D55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"577571D6-AC59-4A43-B9A5-7B6FC6D2046C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-02","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28530","source":"psirt@cisco.com"},{"url":"http://securityreason.com/securityalert/3551","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486432/100/0/threaded","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/27313","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019223","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0171","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39704","source":"psirt@cisco.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486432/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0028","sourceIdentifier":"psirt@cisco.com","published":"2008-01-23T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted IP packet."},{"lang":"es","value":"Hay una vulnerabilidad no especificada en PIX 500 Series Security Appliance y 5500 Series Adaptive Security Appliance (ASA) de Cisco anterior a las versiones  7.2 (3) 6 y 8.0 (3), cuando la función de decremento de Time-to-Live (TTL) está habilitada, permite que los atacantes remotos causen una denegación de servicio (recarga del dispositivo) por medio  de un paquete IP creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2\\(3\\)6","matchCriteriaId":"324140A9-53BA-439E-A748-676584CE24A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"31E7CB8A-17DF-43EB-9BCB-F2E5293C949F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2\\(3\\)6","matchCriteriaId":"76D9DFF9-699B-4124-842F-6B8655F19D6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:8.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"40F5356F-4EA4-463A-A3E3-DD2A7252ACB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:-:*:*:*:*:*:*:*","matchCriteriaId":"AE9B5E72-D461-4CB6-9F78-E0B23981ACD9"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:pix_500:-:*:*:*:*:*:*:*","matchCriteriaId":"AE0B01EA-ECFF-4D57-9A68-4265A9821F39"}]}]}],"references":[{"url":"http://secunia.com/advisories/28625","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27418","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019262","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019263","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0259","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39862","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0029","sourceIdentifier":"psirt@cisco.com","published":"2008-01-23T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Application Velocity System (AVS) before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges."},{"lang":"es","value":"Cisco Application Velocity System (AVS) anterior a 5.1.0 se instala con contraseñas por defecto para algunas cuentas de sistema, lo cual permite a atacantes remotos obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:application_velocity_system_3110:*:*:*:*:*:*:*:*","matchCriteriaId":"3A9C3657-6645-4203-9DC5-889235B36FFC"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:application_velocity_system_3120:*:*:*:*:*:*:*:*","matchCriteriaId":"15FED567-5130-403C-8624-1F5519F31C0D"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:application_velocity_system_3180:*:*:*:*:*:*:*:*","matchCriteriaId":"165458F9-1AC7-4AC5-A15E-8DC73951ACD4"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:application_velocity_system_3180a:*:*:*:*:*:*:*:*","matchCriteriaId":"BCD0E724-A269-4037-A59B-BBC4FD7A7133"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_velocity_system:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.1","matchCriteriaId":"C1578AC4-2DEE-4B41-8DF6-167E1C6BA55A"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/27421","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019259","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0260","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39860","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0031","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Sorenson 3 video file, which triggers memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada en Apple QuickTime anterior a 7.4 permite a atacantes remotos provocar denegación de servicio (fin de la aplicación) y ejecutar código de su elección a través de un archivo de video manipulado Sorenson 3, el cual dispara corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"E24B999C-BF13-4379-A8FF-A4C831C97453"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27298","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019221","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39695","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0032","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption."},{"lang":"es","value":"Apple QuickTime before 7.4 permite a atacantes remotos ejecutar código de su elección a través de un archivo de película que contiene un registro Macintosh Resource con valor de longitud modificado en la cabecera del recurso, el cual dispara una corrupción de pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"E24B999C-BF13-4379-A8FF-A4C831C97453"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=642","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27301","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019221","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39696","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0033","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption."},{"lang":"es","value":"Una vulnerabilidad no especificada en Apple QuickTime versiones anteriores a 7.4, permite a los atacantes remotos causar una denegación de servicio (finalización de aplicación) y ejecutar código arbitrario por medio de un archivo de película con átomos de Image Descriptor (IDSC) que contiene un tamaño de átomo no válido, lo que desencadena una corrupción de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3.1.70","matchCriteriaId":"A93D8F3E-D7CF-4C11-BE95-BD5BBEB3F7B3"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-01","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486413/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27299","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019221","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39697","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486413/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0034","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency calls."},{"lang":"es","value":"Vulnerabilidad no especificada en Passcode Lock en Apple iPhone 1.0 hasta el 1.1.2 permite a usuarios con acceso físico ejecutar aplicaciones Sin entrar en el código de acceso a través de los vectores relacionados con las llamadas de emergencia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CA40173B-5F79-400E-9540-7E0BF7A78E35"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307302","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28497","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27297","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019219","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0147","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39701","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0035","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted URL that triggers memory corruption in Safari."},{"lang":"es","value":"Una vulnerabilidad no especificada en Foundation, como es usado en Apple iPhone versiones 1.0 hasta 1.1.2, iPod touch versiones 1.1 hasta 1.1.2 y Mac OS X versiones 10.5 hasta 10.5.1, permite a los atacantes remotos causar una denegación de servicio (finalización de aplicación) o ejecutar código arbitrario por medio de una URL diseñada que desencadena una corrupción de memoria en Safari."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CA40173B-5F79-400E-9540-7E0BF7A78E35"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307302","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27296","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019220","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0147","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39700","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0036","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding."},{"lang":"es","value":"Desbordamiento de búfer en Apple QuickTime anterior a 7.4 permite a atacantes remotos ejecutar código de su elección a través de una imagen comprimida manipulada PICT, el cual dispara el desbordamiento durante la decodificación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"E24B999C-BF13-4379-A8FF-A4C831C97453"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31034","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27300","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019221","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39698","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-016A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0037","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the \"Allow connections from network client\" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server."},{"lang":"es","value":"X11 en Apple Mac OS X 10.5 hasta 10.5.1 no gestiona correctamente cuando la preferencia \"Allow connections from network client\" está desactivada, lo que permite a atacantes remotos evitar restricciones de acceso intencionadas y conectar con el servidor X."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019365","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0038","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application."},{"lang":"es","value":"Launch Services en Apple Mac OS X 10.5 a 10.5.1 permiten a una aplicación no instalada ser lanzada si se encuentra en una copia de seguridad de Time Machine; esto puede permitir a usuarios locales evitar restricciones de seguridad intencionadas o explotar vulnerabilidades en la aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019360","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0039","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL."},{"lang":"es","value":"Vulnerabilidad sin especificar en Apple Mail de Mac OS X 10.4.11 permite a atacantes remotos ejecutar comandos de su elección a través de un  file:// URL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mail:*:*:*:*:*:*:*:*","matchCriteriaId":"2D2F1B23-5CB1-45C5-AF97-DA82DE791400"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019361","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0040","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada en NFS de Apple Mac OS X 10.5 hasta 10.5.1 permite a atacantes remotos provocar una denegación de servicio (apagado de sistema) o ejecutar código de su elección a través de vectores no conocidos relacionados a cadenas mbuf que disparan una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019362","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0041","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com \"when a website is unblocked,\" which allows remote attackers to determine when a system is running Parental Controls."},{"lang":"es","value":"Control Parental en Apple Mac OS X 10.5 hasta 10.5.1 contacta con www.apple.com \"cuando un sitio web es desbloqueado\", lo que permite a atacantes remotos determinar cuando un sistema esta ejecutando el Control Parental."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019363","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0042","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes."},{"lang":"es","value":"Vulnerabilidad de inyección de argumentos en Terminal.app de Terminal en Apple Mac OS X 10.4.11 y de 10.5 a 10.5.1 permite a atacantes remotos ejecutar código de su elección a través de esquemas URL no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/774345","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019364","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/774345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0495/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0043","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en Apple iPhoto versiones anteriores a 7.1.2 permite a atacantes remotos ejecutar código arbitrario a través de suscripciones photocast."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:iphoto:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"32E0A60E-624D-44DC-B8D4-F43514B2C403"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307398","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28805","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27636","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019307","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0428/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0428/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0044","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted afp:// URL."},{"lang":"es","value":"Múltiples Desbordamientos de búfer de\r\nAFP Client en Apple Mac OS X 10.4.11 y 10.5.2, que permite a atacantes remotos  provocar una denegación de servicio (caída de aplicación) y ejecutar código de su elección a través de  una URL afp:// manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28320","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019640","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41319","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0045","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names."},{"lang":"es","value":"Vulnerabilidad sin especificar de AFP Server en Apple Mac OS X 10.4.11, que permite a atacantes remotos evitar la identificación entre dominios (realm) a través de manipulaciones desconocidas sobre los nombres de dominio Kerberos principales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28323","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019642","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41318","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0046","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the \"Set access for specific services and applications\" radio button that might cause the user to believe that the button is used to restrict access only to specific services and applications, which might allow attackers to bypass intended access restrictions."},{"lang":"es","value":"La Application Firewall en Apple Mac OS X 10.5.2 tiene una traducción al alemán incorrecta para el botón de radio \"Permitir acceso para servicios y aplicaciones concretas\" -Set access for specific services and applications- lo que puede provocar que el usuario crea que el botón sirve para restringir el acceso sólo a determinados servicios y aplicaciones; esto puede permitir a los atacantes evitar las restricciones de acceso pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28368","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019658","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41317","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0047","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la función cgiCompileSearch en CUPS versión 1.3.5 y otras versiones incluyendo la versión incorporada con Apple Mac OS X versión 10.5.2, cuando el uso compartido de impresoras está habilitado, permite a los atacantes remotos ejecutar código arbitrario por medio de expresiones de búsqueda diseñadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cups:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3EB2B6EB-FA2F-46FA-8086-F025722693A4"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=674","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29431","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29448","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29655","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1530","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:081","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0192.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28307","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019646","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0921/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10085","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0921/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0048","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AppKit de Apple Mac OS X 10.4.11 permite a atacantes dependientes del contexto ejecutar código de su elección a través de un nombre de archivo largo a la API NSDocument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28388","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019647","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41315","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0049","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications."},{"lang":"es","value":"AppKit en Apple Mac OS X versión 10.4.11, inadvertidamente realiza una habilitación de un puerto mach NSApplication para la comunicación entre procesos en lugar de la comunicación entre subprocesos (hilos), lo que permite a los usuarios locales ejecutar código arbitrario por medio de mensajes diseñados a aplicaciones privilegiadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28340","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019647","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41314","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0050","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error."},{"lang":"es","value":"CFNetwork en Apple Mac OS X versión 10.4.11, permite que los servidores proxy HTTPS remotos falsifiquen sitios web seguros por medio de datos en un error 502 Bad Gateway."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28356","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019655","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41313","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0051","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via crafted time zone data."},{"lang":"es","value":"Desbordamiento de entero de CoreFoundation en Apple Mac OS X 10.4.11, debería permitir a los usuarios locales, ejecutar código de su elección mediante datos de zona horaria manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28375","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019670","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41310","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0052","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CoreServices in Apple Mac OS X 10.4.11 treats .ief as a safe file type, which allows remote attackers to force Safari users into opening an .ief file in AppleWorks, even when the \"Open 'Safe' files\" preference is set."},{"lang":"es","value":"CoreServices en Apple Mac OS X 10.4.11 trata los ficheros con extensión .ief como de tipo seguro, lo cual permite a atacantes remotos forzar a usuarios de Safari abrir un fichero .ief en AppleWorks, aun cuando la preferencia \"Apertura Segura\" de ficheros este seleccionada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28384","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019671","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41312","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0053","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el filtro HP-GL/2-a-PostScript en CUPS versiones anteriores a 1.3.6, podrían permitir a los atacantes remotos ejecutar código arbitrario por medio de un archivo HP-GL/2 diseñado."}],"vendorComments":[{"organization":"Red Hat","comment":"NVD clarification:\n\nTo exploit this flaw an attacker needs to print a malicious file through the vulnerable filter (either themselves or by convincing a victim to do so), it should therefore be AC:M\n\nIn CUPS, print filters run as an unprivileged user no superuser (root), therefore this should be scored C:P, I:P, A:P","lastModified":"2008-05-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"604D0E97-6CCF-4793-9A13-647CA5FFB9E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"7C671B95-8892-4D71-87FE-BABF5CBEC144"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DBD0B172-FB22-4270-B73D-4489EC2F4CE6"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29655","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1625","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:081","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0192.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28334","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019672","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41272","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10356","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0054","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed selector name to the NSSelectorFromString API, which causes an \"unexpected selector\" to be used."},{"lang":"es","value":"Foundation en Apple Mac OS X 10.4.11 podría permitir a atacantes dependientes del contexto ejecutar código de su elección a través de un nombre de selector mal formado a la API NSSelectorFromString, lo que provoca que se utilice \"unexpected selector\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28341","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019649","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41355","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0055","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges."},{"lang":"es","value":"Foundation en Apple Mac OS X 10.4.11 crea directorios \"world-writable\" mientras NSFileManager copia archivos progresivamente y modifica los permisos después, esto permite a usuarios locales modificar los archivos copiados lo que provoca una denegación de servicio y posiblemente, una elevación de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28343","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019649","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41299","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0056","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a \"long pathname with an unexpected structure\" that triggers the overflow in NSFileManager."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Foundation de Apple Mac OS X 10.4.11 permite a atacantes dependientes del contexto ejecutar código de su elección a través de \"un nombre de ruta largo con una estructura inesperada\" que dispara el desbordamiento en NSFileManager."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28357","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019649","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41309","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0057","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in a \"legacy serialization format\" parser in AppKit in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via a crafted serialized property list."},{"lang":"es","value":"Múltiples desbordamientos de enteros en un analizador de \"legacy serialization format\" en AppKit en Apple Mac OS X versión 10.4.11, permite a los atacantes remotos ejecutar código arbitrario por medio de una lista de propiedades serializadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28358","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019648","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41298","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0058","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via unspecified manipulations that cause messages to be sent to a deallocated object."},{"lang":"es","value":"Condición de carrera en la funcionalidad de gestión de cache NSURLConnection en Foundation de Apple Mac OS X 10.4.11, permite a atacantes remotos ejecutar código de su elección a través de manipulaciones no especificadas que provocan que los mensajes sean enviados a un objeto no asignado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28359","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019650","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41297","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0059","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a crafted XML file, related to \"error handling logic.\""},{"lang":"es","value":"Condiciones de carrera en NSXML de Foundation para Apple Mac OS X 10.4.11 permite a atacantes dependientes del contexto ejecutar código de su elección a través de un archivo XML manipulado, relacionado con \"error handling logic (lógica de manipulación de error)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28367","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019650","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41296","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0060","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary Applescript via a help:topic_list URL that injects HTML or JavaScript into a topic list page, as demonstrated using a help:runscript link."},{"lang":"es","value":"Help Viewer en Apple Mac OS X 10.4.11 y 10.5.2, permite a atacantes remotos ejecutar Applescript de su elección a través de la URL help:topic_list, la cual inyecta HTML o JavaScript dentro de una página de listado de topic, tal y como se ha demostrado usando el enlace  help:runscript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28371","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019657","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41295","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0061","sourceIdentifier":"cve@mitre.org","published":"2008-01-03T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka \"improper rotation of resource records.\""},{"lang":"es","value":"MaraDNS 1.0 versiones anteriores a 1.0.41, 1.2 versiones anteriores a 1.2.12.08, y 1.3 versiones anteriores a 1.3.07.04 permite a atacantes remotos provocar una denegación de servicio mediante un paquete DNS manipulado que evita que un registro de nombre autorizado (CNAME) sea resuelto, también conocido como \"rotación inapropiada de registros de recursos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.00:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B65E-015A-412B-9843-B6BB2136B43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"F54B62CF-C5F1-4F6B-BE54-0C096A745EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.02:*:*:*:*:*:*:*","matchCriteriaId":"B9DA12C9-1A78-484A-96AB-1037E537CF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9B9A8DB0-A40C-434C-9E9E-04CEA4FA24B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.04:*:*:*:*:*:*:*","matchCriteriaId":"43AB9078-D426-4396-8065-7C34978B21A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.05:*:*:*:*:*:*:*","matchCriteriaId":"C3936CB1-71E2-4BEA-8F49-9BA29CA92573"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.06:*:*:*:*:*:*:*","matchCriteriaId":"CE579661-78BC-42E7-84AF-711AC1B9ADEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.07:*:*:*:*:*:*:*","matchCriteriaId":"DA384650-1036-4A40-9979-13EA35EA57BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.08:*:*:*:*:*:*:*","matchCriteriaId":"78B58BC6-748F-4878-94B0-710EF66074E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.09:*:*:*:*:*:*:*","matchCriteriaId":"98050C87-BE9A-4E7D-9022-B1E2F897127D"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DE75A373-9E93-4394-93F0-E08CD8306373"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7E7B591C-FA73-4EA3-A04F-607FCD771599"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"7CD4B6EC-C8F7-449A-9B7F-06D60B40F97C"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"56A5F70F-B3FA-4934-AD74-18924343AE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"AD8D24C0-94D6-4B43-9C34-239D676CF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"76239525-7DBD-42A5-BB6C-BF532BCBE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"CD12723C-2A61-4484-9C2B-2BF2EE53FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"9FE55FB2-3A1D-44DF-B76D-9F33AEDF896C"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"1C909136-CFE5-496F-A3FD-40D9006EEA7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"C9E1E2A9-5D12-4B33-B678-B25CE640481F"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"FBD35BC4-3AB7-4BED-B7BC-D289DF05C36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"DD2A8D02-4020-404A-B784-CA154FAE701B"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"35AB42F8-E1E1-4D28-874D-9C04581C1234"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"C1323AB3-2BF5-4D59-B181-A7A0AE48F3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"3AE5E808-5B6F-47DC-AA64-85EB9E0C4018"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"15119E09-C516-4FD8-BCB6-8E7A2E522C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"61DCD6E4-5F86-4713-A6AE-67A2AD209E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.27:*:*:*:*:*:*:*","matchCriteriaId":"AD52F8FC-0A86-4695-99DD-3785291FA461"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.28:*:*:*:*:*:*:*","matchCriteriaId":"70BC41A6-FCCC-4624-81AC-6B54A4C5371C"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.29:*:*:*:*:*:*:*","matchCriteriaId":"00B76451-E05D-4CE0-A3FE-01DCACCDA870"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.30:*:*:*:*:*:*:*","matchCriteriaId":"540F0664-587E-43AA-8D47-576D71A913C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.31:*:*:*:*:*:*:*","matchCriteriaId":"816E6F57-FFC3-4E58-952A-0E31322849C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.32:*:*:*:*:*:*:*","matchCriteriaId":"127762D9-E951-4F43-8D0E-4A41620FE80B"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.33:*:*:*:*:*:*:*","matchCriteriaId":"F193DACC-6E51-4689-BD1B-F1731DFBA264"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.34:*:*:*:*:*:*:*","matchCriteriaId":"F0159BDF-2247-4FF1-A180-0A15CF066933"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.35:*:*:*:*:*:*:*","matchCriteriaId":"048813A2-40FD-4C2D-8AA6-83B51DFFBAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.36:*:*:*:*:*:*:*","matchCriteriaId":"22C134FF-A76D-4CAF-BB05-739D00CC5116"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.37:*:*:*:*:*:*:*","matchCriteriaId":"33950A35-F9FC-4F14-9477-0F1C495772A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.38:*:*:*:*:*:*:*","matchCriteriaId":"A606A9F3-60D4-4A1C-9D77-41E509DCE3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.0.39:*:*:*:*:*:*:*","matchCriteriaId":"DF72C265-7E42-494E-BB52-65CAD1756DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.01:*:*:*:*:*:*:*","matchCriteriaId":"5C66798F-5DAF-414F-91A8-22CF33BABEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.02:*:*:*:*:*:*:*","matchCriteriaId":"7A22A70C-EF0B-4A82-BE88-0D32F4408073"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.03:*:*:*:*:*:*:*","matchCriteriaId":"35453D24-5C87-4723-8B10-AB9EF176AB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.04:*:*:*:*:*:*:*","matchCriteriaId":"97BC2590-19DC-478D-A800-8EB06280BF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.05:*:*:*:*:*:*:*","matchCriteriaId":"6428BA29-DAB0-4885-9704-74801BDF6A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.06:*:*:*:*:*:*:*","matchCriteriaId":"50977CFA-6AB1-464B-A355-0A105505D1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.2.12.07:*:*:*:*:*:*:*","matchCriteriaId":"C43A3F3F-536D-4DE4-942A-167DCB010E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.01:*:*:*:*:*:*:*","matchCriteriaId":"965A94F4-9DE1-4E76-A630-0BFA1B725708"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.02:*:*:*:*:*:*:*","matchCriteriaId":"5E7C14B5-830E-4234-9DE2-A4E9FA2B9DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.03:*:*:*:*:*:*:*","matchCriteriaId":"4152EC32-1A1E-4C8E-BF22-7E610D9EE3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.04:*:*:*:*:*:*:*","matchCriteriaId":"CB9E2D75-5874-4115-B8A1-BDB363C1578D"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.05:*:*:*:*:*:*:*","matchCriteriaId":"48DB2061-1E36-4C1B-AA12-84C143D0A270"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.06:*:*:*:*:*:*:*","matchCriteriaId":"EE3C6973-CDB3-45F9-BD43-0C74B231FFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.07:*:*:*:*:*:*:*","matchCriteriaId":"2A2E173B-5A4B-455F-A7AE-9DEBD17DAB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.07.01:*:*:*:*:*:*:*","matchCriteriaId":"DA6C5C7B-02E6-4AC4-99A6-2D50BA66CED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.07.02:*:*:*:*:*:*:*","matchCriteriaId":"05BF942C-EF7E-4320-AF8A-8BEEDDEE4D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:1.3.07.03:*:*:*:*:*:*:*","matchCriteriaId":"3D3D577E-F9DC-4616-9A6A-402C212D5A70"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204351","source":"cve@mitre.org"},{"url":"http://maradns.blogspot.com/2007/08/maradns-update-all-versions.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28650","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-16.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1445","source":"cve@mitre.org"},{"url":"http://www.maradns.org/changelog.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27124","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0026","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://maradns.blogspot.com/2007/08/maradns-update-all-versions.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maradns.org/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0062","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."},{"lang":"es","value":"KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecución de código de su elección mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberación de memoria (double-free)."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"904FBF9F-9269-4088-BD5A-3C773E6F841E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29423","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29424","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29428","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29435","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29438","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29450","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29451","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29457","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29462","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29464","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29516","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29663","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30535","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0112","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1524","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/895609","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0164.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0180.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0181.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0182.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/489761","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489883/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28303","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019626","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-587-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41275","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/895609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0182.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/489761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489883/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-587-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-0063","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\""},{"lang":"es","value":"El soporte Kerberos 4 en KDC en MIT Kerberos 5 (krb5kdc) no borra apropiadamente la parte no utilizada de un búfer cuando se genera un mensaje de error, lo que podría permitir a los atacantes remotos obtener información confidencial, también se conoce como \"Uninitialized stack values.\""}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"904FBF9F-9269-4088-BD5A-3C773E6F841E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"A1E0F574-6859-45A6-B160-7DDE92C07CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.2","matchCriteriaId":"D139BCA7-8B43-4BDE-9AE9-5F41F4B6BD0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"B2D0444E-6B76-46EE-95EF-617F8967F6B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.2","matchCriteriaId":"E4317913-336B-40CD-AF63-9F11C374419D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"A9BD0E68-2DC1-47EA-882A-6F5921A0F1BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"29184B59-5756-48DB-930C-69D5CD628548"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*","matchCriteriaId":"33EB57D5-DE8D-417C-8C00-AD331D61181C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29423","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29424","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29428","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29435","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29438","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29450","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29451","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29457","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29462","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29464","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29516","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29663","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30535","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0112","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1524","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0164.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0180.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0181.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0182.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/489761","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489883/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28303","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019627","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-587-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41277","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8916","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0182.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/489761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489883/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-587-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-0064","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Pierre-emmanuel Gougelet (1) XnView 1.91 y 1.92, (2) NConvert 4.85 y (3) libgfl280.dll en GFL SDK 2.870 para Windows. Permite a atacantes remotos con colaboración del usuario ejecutar código arbitrario a través de un archivo Radiance RGBE (.hdr) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pierreegougelet:gfl_sdk:2.870:*:windows:*:*:*:*:*","matchCriteriaId":"CC17F42E-AA60-46F4-AFFC-FB43568D6D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:pierreegougelet:nconvert:*:*:*:*:*:*:*:*","versionEndIncluding":"4.85","matchCriteriaId":"3398E9EC-B365-4472-9318-7CA9FF082541"},{"vulnerable":true,"criteria":"cpe:2.3:a:pierreegougelet:xnview:*:*:*:*:*:*:*:*","versionEndIncluding":"1.91","matchCriteriaId":"B60BA9B5-694F-4F19-8FD6-53F0CDE8DEBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pierreegougelet:xnview:*:*:*:*:*:*:*:*","versionEndIncluding":"1.92","matchCriteriaId":"EFCE1571-F735-478D-860A-21A607112A50"}]}]}],"references":[{"url":"http://secunia.com/advisories/28326","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28710","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-1/advisory","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27514","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0328","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0329","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-1/advisory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0065","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles."},{"lang":"es","value":"Múltiples desbordamientos de búfer basado en pila en in_mp3.dll en Winamp 5.21, 5.5, y 5.51 permite a atacantes remotos ejecutar código de su elección a través de etiquetas largas (1) artist o (2) name en Ultravox streaming metadata, relacionado con la construcción de títulos del stream."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winamp:nullsoft_winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"307242AB-FF16-4ECC-BEE5-C89BE7B4FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:winamp:nullsoft_winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"DCDED78F-AD83-46FC-A40C-A74209C69040"},{"vulnerable":true,"criteria":"cpe:2.3:a:winamp:nullsoft_winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"5A6AFDE1-795E-4E64-856F-7F733D4BB34B"}]}]}],"references":[{"url":"http://secunia.com/advisories/27865","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-2/advisory/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/27344","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0183","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.winamp.com/player/version-history","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39778","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/27865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-2/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.winamp.com/player/version-history","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0066","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with (1) \"large chunks of data,\" or a long URL in the (2) BACKGROUND attribute of a BODY element or (3) SRC attribute of an IMG element."},{"lang":"es","value":"Múltiples desbordamientos de búfer en htmsr.dll en el lector rápido HTML de Autonomy (anteriormente Verity) KeyView, usado por IBM Lotus Notes 7.0.2 and 7.0.3, permiten a atacantes remotos ejecutar código de su elección a través un documento HTML con (1)\"large chunks of data,\" (grandes cadenas/trozos de datos) o una URL larga en (2)  el atributo BACKGROUND del elemento BODY (3) o a través del atributo SRC de una etiqueta IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:*:*:*:*:*:*:*:*","matchCriteriaId":"3A31DE25-F7B5-4AEA-B870-2B852F4FD8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28140","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-3/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490828/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28454","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019843","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41724","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-3/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490828/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0068","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo OpenView5.exe en HP OpenView Network Node Manager (OV NNM) versiones 7.01, 7.51 y 7.53, permite a los atacantes remotos leer archivos arbitrarios por medio secuencias de salto de directorio en el parámetro Action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29796","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-4/advisory/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/3814","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.osvdb.org/44359","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28745","source":"PSIRT-CNA@flexerasoftware.com","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019838","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019839","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-4/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0069","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en XnView 1.92 y 1.92.1 permite a a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un parámetro FontName largo en un fichero slideshow (.sld), un vector distinto a CVE-2008-1461."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pierreegougelet:xnview:*:*:*:*:*:*:*:*","versionEndIncluding":"1.92","matchCriteriaId":"EFCE1571-F735-478D-860A-21A607112A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:pierreegougelet:xnview:*:*:*:*:*:*:*:*","versionEndIncluding":"1.92.1","matchCriteriaId":"83856C77-27FA-4EC1-BA09-5FA651655C66"}]}]}],"references":[{"url":"http://secunia.com/advisories/29620","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-6/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28579","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1044/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41542","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.exploit-db.com/exploits/5346","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-6/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1044/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0070","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en Orb Networks Orb 2.00.1014 y Winamp Remote BETA permite a atacantes remotos ejecutar código de su elección a través de una petición RPC que especifica un número grande de dimensiones de arrays, lo que dispara un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.0.1014:*:*:*:*:*:*:*","matchCriteriaId":"7847C210-7ADE-448A-BFE8-162411CABB87"}]}]}],"references":[{"url":"http://secunia.com/advisories/28203","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-5/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28431","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0984/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41410","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-5/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0984/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0071","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header."},{"lang":"es","value":"El interfaz web UI en (1)BitTorrent anterior a 6.0.3 build 8642 y (2)uTorrent anterior a 1.8beta build 10524, permite a atacantes remotos provocar una denegación de servicio a través de una petición HTTP con una cabecera \"Range\" mal formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2","matchCriteriaId":"C62B0043-F276-4C97-9A30-E83A39A38477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A3628182-3D58-4555-9DFF-1921CA3C54F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"68FDECB8-8713-4D37-A0DB-E2FB5D3A16DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EFF04516-5372-4D39-A58A-E0840E99C9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"738167A5-9052-4ABA-843B-D5DC2DD0EAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FF3687F7-A1DC-4AB1-91F2-60C2639A3146"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"946E1E70-E472-4C8F-BDE9-63E952F1AD41"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE2183E7-8338-4CE5-9D10-85E623BC50AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"02DE484A-930E-40CE-8FC7-25C32D94DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"79D7B8AC-D171-413B-B1DF-82484A4C4B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"23512725-DA47-47F9-8081-2B0A74471DBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"168AAA79-E82A-426B-ABAB-C62FA18D757E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4E21B17B-EA03-4B0A-B944-E869994E596E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"2A5D0343-9AD0-4F1D-ACDA-20BDD76F6EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"43485B34-530E-4A80-8C39-3A751E8090B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"184686B8-37F7-43F7-AFAD-4B92946424C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"22BD68CE-00DD-457E-8195-96670270D543"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D822D5A-F3C2-4726-9A87-B3AEC6A7D2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19B5B235-6BE8-477B-B7D1-21FF14541391"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"34604F10-6D7A-48D3-9761-5907B1511018"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B6EC9CC-538E-4F44-B065-9C0B7AD9F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1EABCAD8-2455-4817-8352-E1C99D6031C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5BAAD599-5C89-48FA-99F3-1EFE5D491E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"24BB8DB0-1342-4D49-9883-3C853FBD858A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5DA8E4C7-A501-4506-9D47-4CB75EE23459"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"73653253-EEDA-410E-B7F0-3A6997F4CCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DB6F507B-8AEC-488F-879C-73EDB63E72B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F08D41D8-E7F7-4F78-BA39-F480C1327C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8E190768-A30C-473A-ABF2-9306C2807918"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9C5230C8-4BCF-4366-A925-9A282DD9537F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"211C4C3B-0587-45BE-819E-51426E849A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"A75C68D1-F42F-4B49-9C26-767E7285001E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"BBE28509-8681-4875-B3F2-6CB89FB31B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"4C9FCE5F-1B0F-4A33-98EB-FC3F0CDE2EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"437FACF4-0016-4E00-AFD8-0C4D32EEBF73"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"A196C475-C350-462F-8B20-29FA403BAC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.0:*:*:*:*:*:*:*","matchCriteriaId":"6ED97A72-801C-40EB-AE70-FAC1A4593BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.1:*:*:*:*:*:*:*","matchCriteriaId":"85E091CB-F105-4032-B6CE-E2AB5098B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.2:*:*:*:*:*:*:*","matchCriteriaId":"142AF7BB-E734-45D0-A82A-A66C212296A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.4:*:*:*:*:*:*:*","matchCriteriaId":"54685CE2-734E-4DD2-92E5-D170C9AC8C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.6:*:*:*:*:*:*:*","matchCriteriaId":"24B3E9A7-759A-474B-B5A2-77336D010F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBF44AF-C4F1-4EF8-BFCD-6E43FEA76FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.8:*:*:*:*:*:*:*","matchCriteriaId":"826E9D27-A316-4A99-AAD0-C73A8E81513E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.9:*:*:*:*:*:*:*","matchCriteriaId":"3D4E9832-90DA-4D4F-A7F5-EDC118EC85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.0:*:*:*:*:*:*:*","matchCriteriaId":"51155C5E-5394-4015-9ECE-CA7B63EA4C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"C216CC0F-4AB7-4CAA-A44B-EE83500F0C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.4:*:*:*:*:*:*:*","matchCriteriaId":"9FCBFEB7-419A-468D-BA8C-5FBDEE7D1C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.24.0:*:*:*:*:*:*:*","matchCriteriaId":"122BCB78-104C-48B1-B0AF-BA9E1DBAC496"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.24.2:*:*:*:*:*:*:*","matchCriteriaId":"74325695-412A-465E-8278-AEA222354A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.26.0:*:*:*:*:*:*:*","matchCriteriaId":"112ACDDE-7742-4D7A-BA03-FE50ADF8ED02"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.27.1:*:*:*:*:*:*:*","matchCriteriaId":"751E51E0-F2B9-4FB2-97C1-1D7EC3F9A6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.27.2:*:*:*:*:*:*:*","matchCriteriaId":"37E6EF53-6DC8-49C5-9125-BC32CA644131"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4BAEFBC6-5B93-4C44-AD87-7946367AF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F393E6B-6576-4671-8311-3B64EDAB621F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898F4B04-1329-4442-A01B-BAF47549E3E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6715F83C-7928-41CE-AB4D-7B855C3038B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9865DE2B-0BDF-4120-BD0C-408518F84286"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ECC8D79A-3A04-4E26-8EDD-7A07F3EF5D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EDA4DD9D-E3C9-4818-BB2C-9F4A86F65216"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"153A361C-691C-4126-9FE5-EC964437F1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E6395ECE-34FF-43D3-9DDA-0503B06F08E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8D7B594F-AB4B-4C92-BFFD-CD55C5FB2393"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"696B8F10-DCCB-41F5-B771-3B8EF8DD33B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1FFA73B3-9FA6-4026-A59E-3EBBE3CDFBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE1695B6-872B-4308-A529-E18EE228886B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.7","matchCriteriaId":"06D5FF42-9626-44FF-862A-305F9E5F237E"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F133D6CF-1F5C-4DA9-AD2B-A0EBD3F8783F"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E1BE1497-6C95-41B3-861D-318B79C0BD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8FD2577B-7D73-414F-ABD9-99B8DB77277A"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A91C32-D05F-459B-8CF1-BC965610F70F"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DE4258E9-055A-4079-917B-B1C9680816FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"64611E61-2728-437C-B35C-B104C0828A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2FD9058B-A162-466A-95F9-3FC1BB6838D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5F63991-BFBD-4C52-B87F-DD59F4974AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2148FDA-313B-4603-A89C-EDE7E41A31C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2F1A8AD9-50CD-4254-9A54-E439EC4B11AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.4:*:*:*:*:*:*:*","matchCriteriaId":"068F4B69-E6C1-4DA9-9EEB-EECB6899B3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E4950A28-EB7F-4991-86E4-CDC4FA381ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.5:*:*:*:*:*:*:*","matchCriteriaId":"36CE40C8-0FB1-4656-9BAD-155B4409FE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.6:*:*:*:*:*:*:*","matchCriteriaId":"18259FA6-04B8-4C50-B74C-306F59DC090B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7:*:*:*:*:*:*:*","matchCriteriaId":"7A643D2C-DFEC-4A98-8B56-C4B9511F65C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9D1773-3FCB-4D0C-A837-7D3B9ABA7B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E6B47FF8-885A-4509-B259-447EBDE79831"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"01788873-AAB2-464E-B564-0E0EA62078E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"69E3BDC4-9B81-4D5C-897E-793173F973FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"EC998099-553A-4719-A903-0C67EC0D23DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B81DCF33-72C0-42C2-BE0D-2B9F171E59E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28703","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30605","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-7/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3943","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securitytracker.com/id?1020266","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/493269/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29661","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020265","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1808","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1809","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.exploit-db.com/exploits/5918","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-7/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493269/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0072","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato en la función emf_multipart_encrypted en el archivo mail/em-format.c en Evolution versión 2.12.3 y anteriores,  permite a atacantes remotos ejecutar código arbitrario por medio de un mensaje encriptado diseñado, tal y como es demostrado usando el campo Version."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*","versionEndIncluding":"2.12.3","matchCriteriaId":"0082BF0D-750E-4F7F-A0B8-38DA399283EC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00003.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29057","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29163","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29244","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29258","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29264","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29317","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30437","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30491","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-8/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-12.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0105","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1512","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/512491","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:063","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0177.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0178.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492684/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28102","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019540","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/usn-583-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0768/references","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41011","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://issues.rpath.com/browse/RPL-2310","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10701","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00190.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00195.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-8/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/512491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0177.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0178.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492684/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-583-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0768/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00195.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0073","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter."},{"lang":"es","value":"Error de índice de array en la función sdpplin_parse de input/libreal/sdpplin.c en xine-lib 1.1.10.1 permite a servidores RTSP remotos ejecutar código de su elección a través de un parámetro streamid SDP grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28694","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29392","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29472","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29503","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29578","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29601","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29740","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29766","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29800","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30581","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31372","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31393","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-10/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-01.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1536","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:219","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28312","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019682","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.videolan.org/security/sa0803.php","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0923","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://xinehq.de/index.php/news","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41339","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-10/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa0803.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xinehq.de/index.php/news","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0074","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\\Root, or WWWRoot folders."},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Internet Information Services (IIS) de 5.0 a 7.0. Permite a usuarios locales conseguir privilegios a través de vectores desconocidos relacionados a notificaciones de cambios de archivos en las carpetas TPRoot, NNTPFile\\Root, or WWWRoot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F7C954A7-FF84-4DEB-8728-5B207F374ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:6.0:beta:*:*:*:*:*:*","matchCriteriaId":"E14B55BE-74CB-4929-9380-C948950C9920"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28849","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27101","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019384","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0507/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-005","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5389","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0507/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0075","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages."},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Internet Information Services (IIS) de 5.1 a 6.0. Permite a atacantes remotos ejecutar código de su elección a través de entradas manipuladas para páginas ASP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F7C954A7-FF84-4DEB-8728-5B207F374ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:6.0:beta:*:*:*:*:*:*","matchCriteriaId":"E14B55BE-74CB-4929-9380-C948950C9920"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28893","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27676","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019385","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0508/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-006","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5308","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0508/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0076","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout combinations, aka \"HTML Rendering Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no espicificada en Microsoft Internet Explorer 5.01, 6 SP1 y SP2, y 7 permite a atacantes remotos ejecutar código de su elección mediante combinaciones del diseño HTML manipuladas, también conocido como  \"HTML Rendering Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*","matchCriteriaId":"B054A26A-7414-41B2-A46D-49E798D7A346"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:*","matchCriteriaId":"181D0FA2-79E1-4422-9810-D7A557805872"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"81C4C1ED-AC7D-4970-8B34-62D304A83FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"574EE6CB-7AF4-4DE2-B668-36BBCB19FCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"BE2858A5-C9BF-40D8-B3D2-056562BF1C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2:*:*:*:*:*","matchCriteriaId":"75234062-241B-421A-B7BC-610A5B0D8EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2_itanium:*:*:*:*:*","matchCriteriaId":"82D6ABD4-C607-44E8-8D84-25406AE0F3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition:*:*:*:*:*","matchCriteriaId":"379FE901-58AC-4F47-9B3B-9A40D723CC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"EC18DBBB-9C9E-4532-B390-92C35E52943A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition:*:*:*:*:*","matchCriteriaId":"49C8060E-CFB9-4EEA-B5B9-B7607B046AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"FB17CABD-21BE-454F-9602-19DB444A574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp1_itanium:*:*:*:*:*","matchCriteriaId":"AB202F47-248D-4290-955F-D1304C6F2395"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2:*:*:*:*:*","matchCriteriaId":"3994AE83-EC42-4893-AF51-BC98F35A53CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2_itanium:*:*:*:*:*","matchCriteriaId":"33F4B074-7BA5-4A36-A866-945D771D2EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition:*:*:*:*:*","matchCriteriaId":"491333D2-FDB1-4FC8-B54C-19E06B57FC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"E8453618-EDD7-41F4-840E-AA323A873B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista:*:*:*:*:*","matchCriteriaId":"E5E8CC5B-B8E9-4B54-AE32-4632E77F0320"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista_x64:*:*:*:*:*","matchCriteriaId":"EA7D9655-718E-42D6-9752-64BA3AAC5546"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition:*:*:*:*:*","matchCriteriaId":"8E5B894F-6E15-46DA-93B4-EAB9468D37A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"CCE0AF0B-DF2A-4F3F-8F5C-0E4056A34229"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28903","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27668","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019379","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0512/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5487","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0512/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0077","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka \"Property Memory Corruption Vulnerability.\""},{"lang":"es","value":"La vulnerabilidad de Uso de la Memoria Previamente Liberada en Microsoft Internet Explorer versiones 6 SP1, 6 SP2 y 7 permite a los atacantes remotos ejecutar código arbitrario por la asignación de valores malformados a determinadas propiedades, como se demuestra mediante la propiedad de un elemento de animateMotion SVG, también se conoce como \"Property Memory Corruption Vulnerability\""}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2A0607E7-B416-4AF8-ADF6-6E503627DD29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:gold:x64:*:*:*:*:*","matchCriteriaId":"135FCE5E-4296-4D8C-AF7B-84D20CD275EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:gold:x64:*:*:*:*:*","matchCriteriaId":"135FCE5E-4296-4D8C-AF7B-84D20CD275EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=661","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/28903","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/228569","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/488048/100/0/threaded","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27666","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019380","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0512/references","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-006.html","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/28903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/228569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/488048/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0512/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-0078","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka \"Argument Handling Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el Control ActiveX (dxtmsft.dll) en Microsoft Internet Explorer 5.01, 6 SP1 y SP2, y 7, que permite a atacantes remotos ejecutar código de su elección a través de una imagen manipulada, también conocida como \"Vulnerabilidad de memoria en el manejo de un argumento\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:activex:*:*:*:*:*:*:*:*","matchCriteriaId":"EDEF84E6-3C24-4B73-96A4-467F5C03DB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*","matchCriteriaId":"B054A26A-7414-41B2-A46D-49E798D7A346"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:*","matchCriteriaId":"181D0FA2-79E1-4422-9810-D7A557805872"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"81C4C1ED-AC7D-4970-8B34-62D304A83FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"574EE6CB-7AF4-4DE2-B668-36BBCB19FCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"BE2858A5-C9BF-40D8-B3D2-056562BF1C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2:*:*:*:*:*","matchCriteriaId":"75234062-241B-421A-B7BC-610A5B0D8EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2_itanium:*:*:*:*:*","matchCriteriaId":"82D6ABD4-C607-44E8-8D84-25406AE0F3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition:*:*:*:*:*","matchCriteriaId":"379FE901-58AC-4F47-9B3B-9A40D723CC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"EC18DBBB-9C9E-4532-B390-92C35E52943A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition:*:*:*:*:*","matchCriteriaId":"49C8060E-CFB9-4EEA-B5B9-B7607B046AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"FB17CABD-21BE-454F-9602-19DB444A574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp1_itanium:*:*:*:*:*","matchCriteriaId":"AB202F47-248D-4290-955F-D1304C6F2395"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2:*:*:*:*:*","matchCriteriaId":"3994AE83-EC42-4893-AF51-BC98F35A53CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2_itanium:*:*:*:*:*","matchCriteriaId":"33F4B074-7BA5-4A36-A866-945D771D2EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition:*:*:*:*:*","matchCriteriaId":"491333D2-FDB1-4FC8-B54C-19E06B57FC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"E8453618-EDD7-41F4-840E-AA323A873B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista:*:*:*:*:*","matchCriteriaId":"E5E8CC5B-B8E9-4B54-AE32-4632E77F0320"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista_x64:*:*:*:*:*","matchCriteriaId":"EA7D9655-718E-42D6-9752-64BA3AAC5546"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition:*:*:*:*:*","matchCriteriaId":"8E5B894F-6E15-46DA-93B4-EAB9468D37A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"CCE0AF0B-DF2A-4F3F-8F5C-0E4056A34229"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28903","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27689","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019381","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0512/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4904","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0512/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0080","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el WebDAV Mini-Redirector de Microsoft Windows XP SP2, Server 2003 SP1 y SP2 y Vista permite a atacantes remotos ejecutar código de su elección mediante una respuesta WebDAV manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"938477CF-6103-47C3-B30E-53F9175CFF34"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"CC15A6FF-E573-4AD7-AEA7-CC041E25C347"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:x64:*:*:*:*:*","matchCriteriaId":"5894A4E3-D063-4BE2-8579-B9BBF581EE98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:webdav_mini-redirector:*:*:*:*:*:*:*:*","matchCriteriaId":"7EF404C4-8342-4703-92B8-183D74B5B9A0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28894","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27670","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019372","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0509/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-007","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5381","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0509/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0081","sourceIdentifier":"secure@microsoft.com","published":"2008-01-16T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka \"Macro Validation Vulnerability,\" a different vulnerability than CVE-2007-3490."},{"lang":"es","value":"Una vulnerabilidad no especificada en Microsoft Excel 2000 SP3 hasta 2003 SP2, Viewer 2003 y Office 2004 para Mac, permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de macros diseñadas, también se conoce como \"VMacro Validation Vulnerability,\" una vulnerabilidad diferente de CVE-2007-3490."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*","matchCriteriaId":"0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/28506","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019200","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.microsoft.com/technet/security/advisory/947563.mspx","source":"secure@microsoft.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27305","source":"secure@microsoft.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0146","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39699","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5546","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/28506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.microsoft.com/technet/security/advisory/947563.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-0082","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and \"change state,\" obtain contact information, and establish audio or video connections without notification via unknown vectors."},{"lang":"es","value":"Un control ActiveX (Messenger.UIAutomation.1) en Windows Messenger versiones 4.7 y 5.1, es marcado como seguro para scripting, lo que permite a los atacantes remotos controlar la aplicación Messenger y \"change state\", obtener información de contacto, y establecer conexiones de audio o vídeo sin notificación por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"83CFC566-F4BA-4E71-BA29-78B1370A5E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_messenger:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FD30E402-8BB9-4A7C-8011-16F8C6165719"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31446","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495467/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30551","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020681","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2354","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-050","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5995","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495467/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0083","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Los motores de scripting (1) VBScript (VBScript.dll) y (2) JScript (JScript.dll) versiones 5.1 y 5.6, tal y como es usado en Microsoft Windows 2000 SP4, XP SP2 y Server 2003 SP1 y SP2, no descodifican apropiadamente el script, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29712","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28551","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019799","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1146/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-022","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5495","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1146/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0084","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Apply patches.\r\n\r\nWindows Vista:\r\nhttp://www.microsoft.com/downloads/de...=8ce9608b-7049-47cd-adc4-22a803877d33\r\n\r\nWindows Vista x64 Edition:\r\nhttp://www.microsoft.com/downloads/de...=d7b9c3d1-9c23-4e05-bac6-d0b327feaf53","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and restart) via a crafted DHCP packet."},{"lang":"es","value":"Vulnerabilidad no especificada en el soporte TCP/IP en Microsoft Windows Vista permite a servidores remotos DHCP causar una denegación de servicio (cuelgue y reinicio) a través de un paquete DHCP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28828","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27634","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019383","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0506/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-004","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5240","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0506/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0085","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse."},{"lang":"es","value":"SQL Server versiones 7.0 SP4, 2000 SP4, 2005 SP1 y SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 y SP2, y 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) versión 1.0 SP4; y Internal Database (WYukon) SP2, no inicializa las páginas de memoria al reasignar memoria, lo que permite a los operadores de bases de datos conseguir información confidencial (contenido de base de datos) mediante vectores desconocidos relacionados con la reutilización de páginas de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:sp4:*:*:*:*:*:*","matchCriteriaId":"12788D78-4334-4A8A-9841-3DD894FDED50"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"A7A5116E-BD37-4539-B815-F1B70EC4D45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:itanium:*","matchCriteriaId":"0BB71613-4B60-4866-BC95-574A7AED05B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"412A3365-9AB3-4EA5-85B6-63F3D76325C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:*:*:*:*:itanium:*","matchCriteriaId":"A5AF127A-9B09-459E-97D8-F175A5238244"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:*:*:*:*:x64:*","matchCriteriaId":"733042B2-3B85-4DE2-B575-69CB335BAF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:express:*:*:*:*:*","matchCriteriaId":"96106DF3-05B0-4ABE-B34D-8A4748F89D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:itanium:*","matchCriteriaId":"A75752D4-77FB-424D-B7C3-93C011B425AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:x64:*","matchCriteriaId":"A1EAEEB8-F177-4427-B524-7DCF72061C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:express:*:*:*:*:*","matchCriteriaId":"4003E7DB-CC5F-4775-9374-B9E8B81970C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_desktop_engine:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"7910EDCF-376B-462A-996D-782C27E7322A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wmsde:2000:*:*:*:*:*:*:*","matchCriteriaId":"9587D8FD-01AC-4DE5-8B1D-5EE9B7BC5E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wyukon:*:sp2:*:*:*:*:*:*","matchCriteriaId":"C4037FF7-C7C3-4ABF-BB86-E5517A52EFE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2A0607E7-B416-4AF8-ADF6-6E503627DD29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wmsde:2000:*:*:*:*:*:*:*","matchCriteriaId":"9587D8FD-01AC-4DE5-8B1D-5EE9B7BC5E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wyukon:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"53B85948-15D2-4528-9AE8-80F580F651C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30970","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020441","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14213","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0086","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression."},{"lang":"es","value":"Un desbordamiento de búfer en la función convert en SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4 y 2000 Desktop Engine (WMSDE), de Microsoft, permite a usuarios autenticados remotos ejecutar código arbitrario por medio de una expresión SQL diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:sp4:*:*:*:*:*:*","matchCriteriaId":"12788D78-4334-4A8A-9841-3DD894FDED50"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"A7A5116E-BD37-4539-B815-F1B70EC4D45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_desktop_engine:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"7910EDCF-376B-462A-996D-782C27E7322A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_express_edition:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"7E9E6FCD-B64C-4BA5-BD11-5659B61D74BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30970","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/494082/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020441","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secure@microsoft.com"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14052","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494082/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0087","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses."},{"lang":"es","value":"El cliente de DNS en Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 y SP2, y Vista, emplea IDs de transacciones de DNS predecibles, lo que permite a atacantes remotos falsificar respuestas DNS."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*","matchCriteriaId":"4902A7BD-0645-4CAC-8EA8-24BD2D8B893A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29696","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490575/100/0/threaded","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28553","source":"secure@microsoft.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019802","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trusteer.com/docs/windowsresolver.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1144/references","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-020","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5314","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trusteer.com/docs/windowsresolver.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1144/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0088","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request."},{"lang":"es","value":"Vulnerabilidad sin especificar en Active Directory de Microsoft Windows 2000 y Windows Server 2003 y Active Directory Application Mode (ADAM) de XP y Server 2003. Permite a atacantes remotos provocar una denegación de servicio (cuelgue y reinicio) a través de una petición LDAP manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*","matchCriteriaId":"644E2E89-F3E3-4383-B460-424D724EE62F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28764","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27638","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019382","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0505/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-003","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5181","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0505/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0089","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en uprofile.php de ClipShare permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro UID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clip-share:clipshare:*:*:*:*:*:*:*:*","matchCriteriaId":"F2D6CA76-5983-4C6B-AF88-563327DF1A6B"}]}]}],"references":[{"url":"http://osvdb.org/40077","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28313","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39364","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4830","source":"cve@mitre.org"},{"url":"http://osvdb.org/40077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0090","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method."},{"lang":"es","value":"Un determinado control ActiveX de npUpload.dll de DivX Player 6.6.0 permite a atacantes remotos provocar una denegación de servicio (Caída de Internet Explorer 7) mediante un argumento largo en el método SetPassword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_player:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E758EBF8-A9BE-4B20-80CF-A8388A1C1835"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27106","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39386","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4829","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0091","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download2.php de AGENCY4NET WEBFTP 1 permite a atacantes remotos leer y borrar archivos de su elección mediante un .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agency4net:webftp:1:*:*:*:*:*:*:*","matchCriteriaId":"278F139A-C110-4E59-9C5C-0896FCC306B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28309","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001865.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39343","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4828","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0092","sourceIdentifier":"cve@mitre.org","published":"2008-01-04T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php del módulo de búsqueda en Appalachian State University phpWebSite 1.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"512D8F50-4A5B-4167-9DC5-50A118880B65"}]}]}],"references":[{"url":"http://phpwebsite.appstate.edu/blog/2143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28303","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27090","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39391","source":"cve@mitre.org"},{"url":"http://phpwebsite.appstate.edu/blog/2143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0093","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en newticket.php de eTicket 1.5.5.2, y 1.5.6 RC2 y RC3, permiten a atacantes remotos inyectar scripts web o HTML de su elección mediante los parámetros (1) Name y (2) Subject."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"58F416E7-3F9A-4830-BD13-C6A7D45681BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E0FDA0E7-0503-47D9-BEA6-F124E9B411B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.6_rc3:*:*:*:*:*:*:*","matchCriteriaId":"B54CC1FA-6654-426C-8AE0-CCD973C3F7F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/28331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27130","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0094","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) include and execute arbitrary local files via a .. (dot dot) in the as_language parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and (2) read arbitrary local files via a .. (dot dot) in the file parameter to assets/js/htcmime.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en MODx Content Management System 0.9.6.1 permiten a atacantes remotos (1) incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro as_language en assets/snippets/AjaxSearch/AjaxSearch.php, alcanzado a través de index-ajax.php; y (2) leer ficheros locales de su elección mediante un .. (punto punto) en el parámetro file en assets/js/htcmime.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"}]}]}],"references":[{"url":"http://modxcms.com/forums/index.php/topic%2C21290.0.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28220","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3522","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485707/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27096","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27097","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39352","source":"cve@mitre.org"},{"url":"http://modxcms.com/forums/index.php/topic%2C21290.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485707/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0095","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference."},{"lang":"es","value":"El controlador de canal SIP de Asterisk Open Source 1.4.x versiones anteriores a 1.4.17, Business Edition versiones anteriores a C.1.0-beta8, AsteriskNOW versiones anteriores a beta7, Appliance Developer Kit versiones anteriores a Asterisk 1.4 revision 95946, y Appliance s800i 1.0.x versiones anteriores a 1.0.3.4  permite a atacantes remotos provocar una denegación de servicio (cáida de demonio) mediante un mensaje BYE con una cabecera Also (tranfiere también), que dispara un referencia a puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4_revision_95945","matchCriteriaId":"0D6AD937-90F0-4359-85DD-038604F64D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c.1.0beta7","matchCriteriaId":"526991C1-D07E-465C-A609-704C19F8096A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:*:*:*:*:*:*:*:*","versionEndIncluding":"beta_6","matchCriteriaId":"C896A32E-906D-4AD0-A00B-11DC064CBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.16","matchCriteriaId":"B2EF54E7-C4A1-474F-9D89-18E13F620F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3.3","matchCriteriaId":"AFA6388A-09B4-4338-8228-3E27500DD521"}]}]}],"references":[{"url":"http://bugs.digium.com/view.php?id=11637","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://downloads.digium.com/pub/security/AST-2008-001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28299","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28312","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485727/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27110","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019152","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39361","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00166.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00167.html","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=11637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://downloads.digium.com/pub/security/AST-2008-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485727/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00167.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0096","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a (1) a long username, which triggers an overflow in the log function; or (2) a long password."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 y versiones anteriores permiten a atacantes remotos ejecutar código de su elección mediante (1) un nombre de usuario largo, que dispara un desbordamiento en la función log; ó (2) una contraseña larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:georgia_softworks:ssh2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.01.0003","matchCriteriaId":"F69F893E-0A25-47C3-9A39-10FAA42D71E2"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/gswsshit-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28307","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3517","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485725/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27103","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/gswsshit-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485725/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0097","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función log de Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 y versiones anteriores permite a atacantes remotos ejecutar código de su elección mediante especificadores de formato de cadena en el campo nombre de usuario, como se demuestra con un determinado mensaje LoginPassword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:georgia_softworks:ssh2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.01.0003","matchCriteriaId":"F69F893E-0A25-47C3-9A39-10FAA42D71E2"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/gswsshit-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3517","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485725/100/0/threaded","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/gswsshit-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485725/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0098","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors.  NOTE: As of 20080103, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer en RealPlayer 11 build 6.0.14.748 permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados.\r\nNOTA: a día 20080103, esta averiguación no dispone de información ejecutable. Sin embargo, dado que el autor de VulnDisco Pack es un investigador reputado, a este asunto se le asigna un identificador CVE por motivos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11_build_6.0.14.748:*:*:*:*:*:*:*","matchCriteriaId":"D4A1E94D-E25C-4888-9FDE-207FEC5FD370"}]}]}],"references":[{"url":"http://gleg.net/realplayer11.html","source":"cve@mitre.org"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2008-January/004811.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27091","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019153","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/current/index.html#public_exploit_code_for_realplayer","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0016","source":"cve@mitre.org"},{"url":"http://gleg.net/realplayer11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2008-January/004811.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/current/index.html#public_exploit_code_for_realplayer","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0099","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the searchtext parameter to search.php, and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en MyPHP Forum 3.0 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro searchtext en search.php, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphp_forum:myphp_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"BE5484F3-4B16-4728-ACE0-3FDD687DD615"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27118","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0100","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función Scene::errorf de Scene.cpp de White_Dune 0.29 beta791 y versiones anteriores permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en un fichero .WRL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:white_dune:white_dune:*:*:*:*:*:*:*:*","versionEndIncluding":"0.29beta791","matchCriteriaId":"E6B0B9DC-3F04-40D3-81A6-16A19AA2C030"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/whitedunboffs-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28287","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3516","source":"cve@mitre.org"},{"url":"http://vrml.cip.ica.uni-stuttgart.de/dune/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485724/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27102","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39385","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/whitedunboffs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vrml.cip.ica.uni-stuttgart.de/dune/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485724/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0101","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función swDebugf de DuneApp.cpp de White_Dune 0.29 beta791 y versiones anteriores permite a atacantes remotos ejecutar código de su elección mediante un especificador de formato de cadena en un fichero .WRL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:white_dune:white_dune:*:*:*:*:*:*:*:*","versionEndIncluding":"0.29beta791","matchCriteriaId":"E6B0B9DC-3F04-40D3-81A6-16A19AA2C030"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/whitedunboffs-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28287","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3516","source":"cve@mitre.org"},{"url":"http://vrml.cip.ica.uni-stuttgart.de/dune/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485724/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27102","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39388","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/whitedunboffs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vrml.cip.ica.uni-stuttgart.de/dune/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485724/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0102","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid \"memory values,\" aka \"Publisher Invalid Memory Reference Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada de Microsoft Office Publisher 2000, 2002, y 2003 SP2 permite a atacantes remotos ejecutar código de su elección a través del fichero manipulado .pub, relativo a invalidad \"valores de memoria\", también conocido como \"Publisher Invalid Memory Reference Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*","matchCriteriaId":"95648599-D3B3-4043-821C-D385FB7A77CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*","matchCriteriaId":"99ED878A-CFC5-4FD5-A403-EB16CC4F8BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"EA174ECD-853D-4529-A499-3ECE313F17CE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28906","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27739","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019376","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0514/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5305","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0514/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0103","sourceIdentifier":"secure@microsoft.com","published":"2008-02-13T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Office document that contains a malformed object, related to a \"memory handling error,\" aka \"Microsoft Office Execution Jump Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2 y Office 2004 para Mac. Permite a atacantes remotos ejecutar código de su elección a través de un documento de Office que contiene un objeto mal formado, relacionado con un \"error de gestión de memoria\" también conocido como \"Microsoft Office Execution Jump Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"E681CCF5-F7B3-4BBC-B013-E566D84F5880"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28909","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27738","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019375","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0515/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-013","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5407","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0515/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0104","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka \"Publisher Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Office Publisher 2000, 2002 y 2003 SP2. Permite a atacantes remotos ejecutar código de su elección a través de un archivo .pub manipulado, también conocido como \"Publisher Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:*:*:*:*:*:*:*:*","matchCriteriaId":"5A46E1AD-0C04-49E9-982D-160431A2662D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28906","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27740","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019377","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0514/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4547","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0514/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0105","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka \"Microsoft Works File Converter Index Table Vulnerability.\""},{"lang":"es","value":"Microsoft Works 6 File Converter, como el utilizado en Office 2003 SP2 y SP3, Works 8.0, y Works Suite 2005, permite a atacantes remotos ejecutar código de su elección a través de un fichero .wps con una sección de la cabecera de índice de la tabla de información manipulada, también conocida como \"Vulnerabilidad en Tabla Índice de Microsoft Works File Converter\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*","matchCriteriaId":"CB8E7A05-97EE-40A4-A410-B2DE582AA381"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28904","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27658","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019387","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0513/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5009","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0513/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0106","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement."},{"lang":"es","value":"Un desbordamiento de búfer en SQL Server 2005 SP1 y SP2, y 2005 Express Edition SP1 y SP2, de Microsoft, permite a usuarios autenticados remotos ejecutar código arbitrario por medio de una sentencia insert diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:sp4:*:*:*:*:*:*","matchCriteriaId":"12788D78-4334-4A8A-9841-3DD894FDED50"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"A7A5116E-BD37-4539-B815-F1B70EC4D45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_desktop_engine:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"7910EDCF-376B-462A-996D-782C27E7322A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_express_edition:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"7E9E6FCD-B64C-4BA5-BD11-5659B61D74BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30970","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/494082/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020441","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secure@microsoft.com"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13785","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494082/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0107","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka \"SQL Server Memory Corruption Vulnerability.\""},{"lang":"es","value":"Desbordamiento inferior de enteros en SQL Server versiones 7.0 SP4, 2000 SP4, 2005 SP1 y SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 y SP2 y 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) versión 1.0 SP4; y Internal Database (WYukon) SP2, permite a los usuarios autenticados remotos ejecutar código arbitrario por medio de un (1) SMB o (2) pathname de WebDAV para un archivo en disco (también se conoce como archivo de copia de seguridad almacenada) con un valor de tamaño de registro creado, que desencadena un desbordamiento de búfer basado en la región heap de la memoria, también se conoce como \"SQL Server Memory Corruption Vulnerability\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:sp4:*:*:*:*:*:*","matchCriteriaId":"12788D78-4334-4A8A-9841-3DD894FDED50"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"A7A5116E-BD37-4539-B815-F1B70EC4D45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp4:itanium:*:*:*:*:*","matchCriteriaId":"8F78E205-376E-42AF-A7BF-53A2FA971005"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"412A3365-9AB3-4EA5-85B6-63F3D76325C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:express:*:*:*:*:*","matchCriteriaId":"96106DF3-05B0-4ABE-B34D-8A4748F89D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:itanium:*:*:*:*:*","matchCriteriaId":"FD176461-5B49-497B-B7BE-79C91CCF5FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp1:x64:*:*:*:*:*","matchCriteriaId":"DCC460F8-8006-4463-ADD6-C32DEAF28216"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:express:*:*:*:*:*","matchCriteriaId":"4003E7DB-CC5F-4775-9374-B9E8B81970C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_desktop_engine:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"7910EDCF-376B-462A-996D-782C27E7322A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wmsde:2000:*:*:*:*:*:*:*","matchCriteriaId":"9587D8FD-01AC-4DE5-8B1D-5EE9B7BC5E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wyukon:*:sp2:*:*:*:*:*:*","matchCriteriaId":"C4037FF7-C7C3-4ABF-BB86-E5517A52EFE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wmsde:2000:*:*:*:*:*:*:*","matchCriteriaId":"9587D8FD-01AC-4DE5-8B1D-5EE9B7BC5E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wyukon:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"0BEE38BD-C7FC-4529-B074-67280DC3F455"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wyukon:*:sp2:*:*:*:*:*:*","matchCriteriaId":"C4037FF7-C7C3-4ABF-BB86-E5517A52EFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wyukon:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"0BEE38BD-C7FC-4529-B074-67280DC3F455"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=723","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30970","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.insomniasec.com/advisories/ISVA-080709.1.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/494082/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30119","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020441","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secure@microsoft.com"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13936","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insomniasec.com/advisories/ISVA-080709.1.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494082/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2022/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0108","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted field lengths, aka \"Microsoft Works File Converter Field Length Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en la biblioteca wkcvqd01.dll en Microsoft Works versión 6 File Converter, tal y como es usado en Office 2003 SP2 y SP3, Works versión 8.0 y Works Suite 2005, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo .wps con longitudes de campo diseñado, también se conoce como \"Microsoft Works File Converter Field Length Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*","matchCriteriaId":"CB8E7A05-97EE-40A4-A410-B2DE582AA381"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28904","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27659","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019388","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0513/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5202","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/5107","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0513/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0109","sourceIdentifier":"secure@microsoft.com","published":"2008-02-12T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File Information Block (FIB) of a Word file, which triggers length calculation errors and memory corruption."},{"lang":"es","value":"Word en Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2 y Office Word Viewer 2003, permite a los atacantes remotos ejecutar código arbitrario por medio de campos especialmente diseñados dentro del File Information Block (FIB) de un archivo de Word, lo que desencadena errores de cálculo de longitud  y corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*","matchCriteriaId":"DB7EA4CC-E705-42DB-86B6-E229DA36B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:*:*:*:*:*:*:*:*","matchCriteriaId":"391970C6-3A95-404B-9180-28A340B122DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/28901","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/692417","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/488071/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/27656","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019374","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0511/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-009","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120361015026386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/692417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/488071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0511/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0110","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI."},{"lang":"es","value":"Vulnerabilidad no especificada de Microsoft Outlook en Office 2000 SP3, XP SP3, 2003 SP2 y Sp3, y sistemas Office permite a atacantes remotos asistidos por usuarios ejecutar código de su elección mediante la modificación de un mailto URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29320","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/393305","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28147","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019579","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0847/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-015","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5278","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/393305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0847/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0111","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka \"Excel Data Validation Record Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Excel 2000 SP3 a 2007, Viewer 2003, Compatibility Pack, y Office 2004 para Mac permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante registros de validación de datos manipulados, también conocido como \"Vulnerabilidad de Registro de Validación de Datos en Excel.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28094","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019582","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5114","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0112","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka \"Excel File Import Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Excel 2000 SP3 y Office para Mac 2004 y 2008 permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante un fichero .SLK manipulado que no es gestionado adecuadamente en la importación del fichero, también conocido como \"Vulnerabilidad de Importación de Fichero Excel (Excel File Import Vulnerability).\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28095","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019583","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5284","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0113","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an \"allocation error,\" aka \"Microsoft Office Cell Parsing Memory Corruption Vulnerability.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en Microsoft Office Excel Viewer 2003 hasta SP3, permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de un documento de Excel con comentarios de celda malformada que desencadenan la corrupción de memoria a partir de un \"allocation error,\" también se conoce como \"Microsoft Office Cell Parsing Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29321","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489415/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019578","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0848/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-008","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489415/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0848/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0114","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Excel 2000 SP3 a 2003 SP2, Viewer 2003, y Office para Mac 2004 permite a atacantes remotos con la intervención del usuario ejecutar código de su elección mediante registros Style manipulados que que disparan corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28166","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019584","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5456","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0115","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka \"Excel Formula Parsing Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Excel 2000 SP3 hasta 2007, Viewer 2003, Pack de compatibilidad (Compatibility Pack), and Office para Mac 2004 permite a atacantes remotos asistidos por usuarios ejecutar código de su elección mediante formulas mal formadas, también conocido como \"Vulnerabilidad de análisis sintáctico de formulas\" (Excel Formula Parsing Vulnerability)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*","matchCriteriaId":"5A70D659-F648-4870-852A-4E86D1F4B646"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28167","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019585","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5512","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0116","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka \"Excel Rich Text Validation Vulnerability.\""},{"lang":"es","value":"Microsoft Excel 2000 SP3 hasta 2003 SP2, Viewer 2003, Compatibility Pack y Office 2004 y 2008 para Mac, permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de etiquetas malformadas en texto enriquecido, también se conoce como \"Excel Rich Text Validation Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-03","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/489430/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28168","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019586","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5212","source":"secure@microsoft.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489430/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0117","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka \"Excel Conditional Formatting Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Excel 2000 SP3 y 2002 SP2, y Office 2004 y 2008 para Mac, permite a atacantes remotos asistidos por usuarios ejecutar código de su elección mediante valores  de formateo condicional (conditional formatting values), también conocido como \"Vulnerabilidad Excel de formateo condicional\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"AD6D6166-9198-4395-91A9-036BCDA9A02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*","matchCriteriaId":"5A70D659-F648-4870-852A-4E86D1F4B646"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28170","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019587","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5508","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0846/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0118","sourceIdentifier":"secure@microsoft.com","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an \"allocation error,\" aka \"Microsoft Office Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 hasta SP3, y Office 2004 para Mac permite a atacantes remotos con la complicidad del usuario ejecutar código de su elección mediante documento Office manipulado que dispara una corrupción de memoria por un error de asignación (allocation error), también conocido como \"Vulnerabilidad de Corrupción de Memoria en Microsoft Office (Microsoft Office Memory Corruption Vulnerability).\"\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29321","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28146","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019578","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0848/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5190","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120585858807305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-071A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0848/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0119","sourceIdentifier":"secure@microsoft.com","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka \"Publisher Object Handler Validation Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft publisher en Office XP SP3, 2003 SP2  y SP3 y 2007 SP1 y anteriores, permite a atacantes remotos ejecutar código de su elección a través  de un fichero publisher con datos en el objeto de cabecera manipulados lo que provoca una corrupción de memoria, también conocido como \"Vulnerabilidad en la validación del manejo del objeto\"·"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"4142D44F-26F2-467B-A7DE-00239C0013D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30150","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492073/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/29158","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020015","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1505/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-027","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5303","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492073/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1505/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0120","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka \"Memory Allocation Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de enteros en PowerPoint Viewer 2003 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de PowerPoint con un índice de imagen malformado que desencadena una corrupción de memoria, relacionados con el manejo de objetos CString, también se conoce como \"Memory Allocation Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=739","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31453","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30552","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020676","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2355","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5768","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0121","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A \"memory calculation error\" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka \"Memory Calculation Vulnerability.\""},{"lang":"es","value":"Un \"memory calculation error\" en PowerPoint Viewer 2003 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de PowerPoint con un índice de imagen no válido que desencadena una corrupción de memoria, también se conoce como \"Memory Calculation Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=738","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31453","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30554","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020676","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2355","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5724","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0122","sourceIdentifier":"secteam@freebsd.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption."},{"lang":"es","value":"Error por un paso en la función inet_network en libbind en ISC BIND 9.4.2 y versiones anteriores, como se utiliza en libc en FreeBSD 6.2 hasta la versión 7.0-PRERELEASE, permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de entradas manipuladas que desencadenan corrupción de memoria."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of GNU libc as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n\nThis issue affects the versions of libbind as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5, however the vulnerable function is not used by any shipped applications.  The Red Hat Security Response Team has therefore rated this issue as having low security impact, a future update may address this flaw. \nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0122\n\nAn update to Red Hat Enterprise Linux 5 was released to correct this issue:\nhttps://rhn.redhat.com/errata/RHSA-2008-0300.html","lastModified":"2008-05-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.2","matchCriteriaId":"27AB604E-DF87-4E96-A348-CED75A9A76FF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:-:*:*:*:*:*:*","matchCriteriaId":"99009B85-61C6-4113-B3EF-40B8F330B65C"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p1:*:*:*:*:*:*","matchCriteriaId":"34B2D56E-32CE-4892-958A-CE339F69D63C"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p10:*:*:*:*:*:*","matchCriteriaId":"5320FE55-9641-4298-A2C3-98263891CAA1"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p11:*:*:*:*:*:*","matchCriteriaId":"70C230AE-27C9-4EFA-B413-74A42B2D1044"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p12:*:*:*:*:*:*","matchCriteriaId":"E9DB2F8F-0F2F-4FD4-92DC-E987B82F76C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p4:*:*:*:*:*:*","matchCriteriaId":"BBCED956-7969-40E0-8E45-8A8DB8C4473F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p5:*:*:*:*:*:*","matchCriteriaId":"285D90AC-242A-403F-BB38-A52459523B4A"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p6:*:*:*:*:*:*","matchCriteriaId":"B7749CCD-6474-4E81-8C08-F44EF0C306A9"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p7:*:*:*:*:*:*","matchCriteriaId":"DDA9DC77-22F6-45A3-9726-9E16EBBC62BB"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p8:*:*:*:*:*:*","matchCriteriaId":"0B6DB6EA-BF8A-402E-A1FD-CA674899E65E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:p9:*:*:*:*:*:*","matchCriteriaId":"DD640B09-ABAB-4E6C-9AA4-937A4C7E63AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"C527F07A-A8A0-49DD-AEE8-095EEAF8FAA8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"831F5B5E-BA5F-449E-B172-466606A868EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:-:*:*:*:*:*:*","matchCriteriaId":"2D9F4FEB-30E5-4EF6-BEB6-0F1A4DE7EFB9"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p1:*:*:*:*:*:*","matchCriteriaId":"BB6FC258-9735-4199-9499-ACFCEF30EE5E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p10:*:*:*:*:*:*","matchCriteriaId":"277D5B3F-A909-4135-B7AB-7A754A058AA0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p11:*:*:*:*:*:*","matchCriteriaId":"E8D5B37F-85BA-4436-B0B5-2FF640535D68"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p12:*:*:*:*:*:*","matchCriteriaId":"B2ADD6F7-6FC3-48A8-8942-E0CDA50D74DB"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p13:*:*:*:*:*:*","matchCriteriaId":"47137313-8B9D-4574-9189-1A807482D5A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p14:*:*:*:*:*:*","matchCriteriaId":"3DC070F4-8B34-4212-BD66-64305E8A5AFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p15:*:*:*:*:*:*","matchCriteriaId":"99EC1D5D-C805-4BBF-9419-D9B00EAC4922"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p2:*:*:*:*:*:*","matchCriteriaId":"BA825CA5-84B6-4DA4-9F7F-644E532185A8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p3:*:*:*:*:*:*","matchCriteriaId":"90B64FDC-01C0-4A83-827D-31F477C0359B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p4:*:*:*:*:*:*","matchCriteriaId":"6C826F67-CA6D-4DA4-B5E9-9F4FEFE3D6D1"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p5:*:*:*:*:*:*","matchCriteriaId":"D5666E87-F0CB-45FA-9AED-C7A0F383A559"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p6:*:*:*:*:*:*","matchCriteriaId":"6032AC16-C610-4D19-96A2-FA5233FC56B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p7:*:*:*:*:*:*","matchCriteriaId":"243B3C87-7899-4E1F-9488-D0AA0AFDDB03"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p8:*:*:*:*:*:*","matchCriteriaId":"E596C19A-0BD6-4A9E-A7E5-C86DE0616763"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p9:*:*:*:*:*:*","matchCriteriaId":"6A9AEE2B-EE04-4B51-B28E-E401E99BF63B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"492B1533-775F-446E-84A3-BB1BF27CC2BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:-:*:*:*:*:*:*","matchCriteriaId":"F0F3E8EE-7DA6-4A92-8A73-4785205E4BF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p1:*:*:*:*:*:*","matchCriteriaId":"A50D71A9-6046-46DE-9D7B-624165EAB074"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p10:*:*:*:*:*:*","matchCriteriaId":"971C97E8-1324-4F95-BD09-FBDAF127A7B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p11:*:*:*:*:*:*","matchCriteriaId":"F1BA5765-A75D-411F-8A77-4114D5BE5CAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p2:*:*:*:*:*:*","matchCriteriaId":"77823FF0-285C-40D5-BFCF-8B4AD6A025CD"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p3:*:*:*:*:*:*","matchCriteriaId":"E24AD132-4334-4A3D-A035-5D9E52AD48B6"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p4:*:*:*:*:*:*","matchCriteriaId":"5A0C7D2E-D7D8-464B-8DE8-49C4552D05A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p5:*:*:*:*:*:*","matchCriteriaId":"AC2C60BA-E0F5-44C3-AB03-9EE8503401E0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p6:*:*:*:*:*:*","matchCriteriaId":"880342FB-2B63-4FB4-8B3A-87BFB81DEAD6"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p7:*:*:*:*:*:*","matchCriteriaId":"2EF0C9BB-9691-4382-A756-92521E2937FC"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p8:*:*:*:*:*:*","matchCriteriaId":"EDFB4A8B-8CA8-4C7A-B94E-C72F84FCEED6"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:p9:*:*:*:*:*:*","matchCriteriaId":"A1912ACC-136C-4697-9021-598EDBFDAD6D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"secteam@freebsd.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28367","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28429","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28487","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28579","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29161","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30313","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30538","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30718","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc","source":"secteam@freebsd.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1","source":"secteam@freebsd.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"secteam@freebsd.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/203611","source":"secteam@freebsd.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0300.html","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487000/100/0/threaded","source":"secteam@freebsd.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27283","source":"secteam@freebsd.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019189","source":"secteam@freebsd.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0193","source":"secteam@freebsd.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"secteam@freebsd.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1743/references","source":"secteam@freebsd.org","tags":["Permissions Required"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429149","source":"secteam@freebsd.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39670","source":"secteam@freebsd.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2169","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html","source":"secteam@freebsd.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/203611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0300.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487000/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1743/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0123","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T01:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter.  NOTE: this issue only exists until the installation is complete."},{"lang":"es","value":"Vulnerabilidad de cruce de directorios (XSS) en install.php de  Moodle 1.8.3, y posiblemente otras versiones anteriores a la 1.8.4. Permite que atacantes remotos inyecten, a su elección, códigos web o HTML a traves del parámetro dbname. NOTA: este problema sólo se produce cuando la instalación se ha completado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.3","matchCriteriaId":"A9A0580F-928E-46B1-BE64-F3AA436FCA43"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0202.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://int21.de/cve/CVE-2008-0123-moodle.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28838","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486198/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27259","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0164","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39630","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0202.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://int21.de/cve/CVE-2008-0123-moodle.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486198/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0124","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via (1) the \"Real name\" field in Personal Settings, which is presented to readers of articles; or (2) a file upload, as demonstrated by a .htm, .html, or .js file."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Serendipity (S9Y) anterior a 1.3-beta 1, permite a usuarios autenticados remotamente inyectar secuencias de comandos Web de su elección o HTML a través de (1) el campo \"Real name\" de Personal Settings, el cuál es mostrado a los lectores de los artículos; o (2) la subida de un fichero, como se ha demostrado  mediante un fichero .htm, .html, o .js."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*","matchCriteriaId":"62233D77-9838-48AB-9A2D-F4EAA9E237EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DCAE37-B4E9-490E-B441-CA6DD4DBBE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"F47E7512-FDB5-45F2-80B2-9BDAB856E856"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E7930F0-59AD-45D6-B79D-92DB88EFF4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl1:*:*:*:*:*:*:*","matchCriteriaId":"75786060-F4F7-4491-8239-2081EBD3AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl2:*:*:*:*:*:*:*","matchCriteriaId":"742C3558-301D-4930-859F-7A8AAC231689"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*","matchCriteriaId":"5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"41A56925-4CE9-4843-94BE-E35DBF6CFA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"785115A5-380A-462E-88F6-718320DD7E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*","matchCriteriaId":"925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C739BCD2-1722-42E0-9560-752DBBF05BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*","matchCriteriaId":"62C28957-2724-406D-BAD4-DDCDE8CFA843"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*","matchCriteriaId":"5FE669F3-75FA-4237-8424-109FE52F59ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*","matchCriteriaId":"18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*","matchCriteriaId":"E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*","matchCriteriaId":"15CFA451-FFD4-452D-A744-5FDA80379BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B7515A9A-1FD0-484E-97CB-5969729804DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"40A451C0-D4D8-43FF-BFC9-E525138DCA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"9E1F8976-0691-4C47-9BA3-BC01BA808BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8_beta_6_snapshot:*:*:*:*:*:*:*","matchCriteriaId":"79995783-EFF9-486A-9556-709595EEE31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8_beta5:*:*:*:*:*:*:*","matchCriteriaId":"F29716C7-2882-4B69-A4F8-BDBF0FB9CF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A455F8B9-8A31-4BF1-895B-5D4579BE9C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"47CE7E31-9C42-434E-B1B7-F38966514405"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B027CFC-5E0E-45D3-82BC-8F59F386D188"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3C6CB12-9D14-4D5C-8FC0-02179436B487"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"9CF5283A-C29F-47FC-BC9B-6F521A2A12C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"2CDB172B-17ED-4984-BBCD-91411967FC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"707176E4-B735-4A6A-AC7D-01250663D25D"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2217392-37F3-4CC6-85DE-33CB8841814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"706E7CF6-C396-4A19-B87C-05BA8C8D9EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D0C422BF-FBDE-4DD2-BB55-868B19890479"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A1E92848-05FA-45EE-BD8A-98E337131892"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2__beta5:*:*:*:*:*:*:*","matchCriteriaId":"ED377FC0-93AE-4AA0-B92F-AEB8E2FC9ED8"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://int21.de/cve/CVE-2008-0124-s9y.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29128","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29502","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1528","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28003","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019502","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0700/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40851","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://int21.de/cve/CVE-2008-0124-s9y.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0700/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0125","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en phpstats.php de Michael Wagner phpstats 0.1 alpha permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro baseDir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstats:phpstats:0.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"5FA2C23C-C1F9-401E-BBC9-51026A2D3A0E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3765","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489722/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28291","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41261","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489722/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0127","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long initial authentication packet."},{"lang":"es","value":"La interfaz de administración en McAfee E-Business Server 8.5.2 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y ejecutar código de su elección mediante un paquete de autenticación inicial largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:e-business_server:*:*:*:*:*:*:*:*","versionEndIncluding":"8.5.2","matchCriteriaId":"04814607-007E-4A9A-A07F-E0B39781C7F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/28408","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3530","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019170","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485992/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486035/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27197","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0087","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39561","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39563","source":"cve@mitre.org"},{"url":"https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=614472&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=614472","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485992/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486035/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=614472&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=614472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0128","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie."},{"lang":"es","value":"El valor SingleSignOn (org.apache.catalina.authenticator.SingleSignOn) en Apache Tomcat anterior a 5.5.21 no asigna la bandera segura para la cookie JSESSIONIDSSO en una sesión http, haciéndolo más fácil para atacantes remotos para capturar esta cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.20","matchCriteriaId":"4CEF61B3-70E2-4B42-B02C-D819805E86A0"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx","source":"cve@mitre.org"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=41217","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0630.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28552","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31493","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33668","source":"cve@mitre.org"},{"url":"http://security-tracker.debian.net/tracker/CVE-2008-0128","source":"cve@mitre.org"},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1468","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500396/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500412/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27365","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0192","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0233","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39804","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=41217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0630.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-tracker.debian.net/tracker/CVE-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500396/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500412/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0129","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en starnet/addons/slideshow_full.php en Site@School 2.3.10 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro album_name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteatschool:siteatschool:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.10","matchCriteriaId":"B60902CF-8F07-43B6-A3C2-2A53E00AC712"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27120","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39417","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0130","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Username parameter, a different vulnerability than CVE-2007-6671.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo login_form.asp en Instant Softwares Dating Site, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro Username, una vulnerabilidad diferente de CVE-2007-6671. NOTA: se desconoce la procedencia de esta información; los detalles son obtenidos únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instantsoftwares:dating_site:*:*:*:*:*:*:*:*","matchCriteriaId":"1E17026B-5E31-4240-A21B-200FE1DFBFA0"}]}]}],"references":[{"url":"http://osvdb.org/39766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39326","source":"cve@mitre.org"},{"url":"http://osvdb.org/39766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0131","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different product than CVE-2006-6022.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login_form.asp de Instant Softwares Dating Site permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro msg, un producto diferente que en CVE-2006-6022. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instantsoftwares:dating_site:*:*:*:*:*:*:*:*","matchCriteriaId":"1E17026B-5E31-4240-A21B-200FE1DFBFA0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0132","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T11:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username."},{"lang":"es","value":"Pragma FortressSSH 5.0 Build 4 Revision 293 y anteriores maneja entradas largas en sshd.exe a través de la creación de una ventana de mensajes de error y esperando que el administrador haga click en este ventana antes de terminar el proceso sshd.exe, lo cual permite atacantes remotos provocar denegación de servicio (fin de conexión al slot) a través de una inundación de conexiones SSH con objetos de datos largos, como se demostró a través de un (1) lista largo de llaves y un (2) nombre de usuario largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragmasys:fortress_ssh:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0","matchCriteriaId":"D64B2FCC-F4F3-47D7-958E-EB0133E6A917"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragmasys:fortress_ssh:5.0:build4_revision293:*:*:*:*:*:*","matchCriteriaId":"FF7EDBE4-A28D-40B5-9EB5-D7EAF20E9A0A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/pragmassh-adv.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://aluigi.org/poc/pragmassh.zip","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=119947184730448&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27141","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39354","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://aluigi.altervista.org/adv/pragmassh-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://aluigi.org/poc/pragmassh.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=119947184730448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0133","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to cat_main.php and the (2) cat parameter to forum.php in a liste action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Tribisur 2.1 y versiones anteriores. Permite que atacantes remotos ejecuten comandos SQL de su elección, a través de:  (1) el parámetro id pasado a  cat_main.php, y (2) el parámetro cat pasado a forum.php, en una acción liste."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_perez:tribisur:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"30552FCB-A9A8-4945-831F-4D6EC4A33E06"}]}]}],"references":[{"url":"http://secunia.com/advisories/28362","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27149","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39443","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0134","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Forums/setup.asp de Snitz Forums 2000 3.4.06 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro MAIL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.06","matchCriteriaId":"5B1F3BBC-EE45-4D02-B306-7501D0F2AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E646E96C-F0AC-4E13-8F3A-2908AC069581"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*","matchCriteriaId":"E212B816-692F-4C5C-AEDF-B173BEE115A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*","matchCriteriaId":"C4396E99-B5C8-4914-A3DB-76E22A10AE84"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*","matchCriteriaId":"0D89B42F-7738-47EE-871A-FE16C53BCD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*","matchCriteriaId":"FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*","matchCriteriaId":"A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*","matchCriteriaId":"C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"}]}]}],"references":[{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27162","source":"cve@mitre.org"},{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0135","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb."},{"lang":"es","value":"Snitz Forums 2000 3.4.06 y anteriores almacena información sensible bajo la raíz del web con controles de acceso insuficientes, lo cual podría permitir a atacantes remotos descargar una base de datos a través de una respuesta directa para forum/snitz_forums_2000.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.06","matchCriteriaId":"5B1F3BBC-EE45-4D02-B306-7501D0F2AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E646E96C-F0AC-4E13-8F3A-2908AC069581"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*","matchCriteriaId":"E212B816-692F-4C5C-AEDF-B173BEE115A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*","matchCriteriaId":"C4396E99-B5C8-4914-A3DB-76E22A10AE84"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*","matchCriteriaId":"0D89B42F-7738-47EE-871A-FE16C53BCD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*","matchCriteriaId":"FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*","matchCriteriaId":"A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*","matchCriteriaId":"C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"}]}]}],"references":[{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485894/100/200/threaded","source":"cve@mitre.org"},{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485894/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0136","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path."},{"lang":"es","value":"Snitz Forums 2000 3.4.05 permite a atacantes remotos obtener información sensible mediante una petición directa a forum/whereami.asp, lo cual revela la ruta de la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*","matchCriteriaId":"C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"}]}]}],"references":[{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485894/100/200/threaded","source":"cve@mitre.org"},{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485894/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0137","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en config.inc.php en SNETWORKS PHP CLASSIFIEDS 5.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro path_escape."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snetworks:php_classifieds:5.0:*:*:*:*:*:*:*","matchCriteriaId":"6010173A-18FC-46CE-97B3-FD8A3380DF88"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/0053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39468","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4838","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0138","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en xoopsgallery/init_basic.php del módulo mod_gallery para XOOPS, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro GALLERY_BASEDIR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoopsgallery_module:1.3.3_9:*:*:*:*:*:*:*","matchCriteriaId":"8B484BE4-7047-406D-9B04-3DB7C756806A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39461","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0139","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter."},{"lang":"es","value":"Vulnerabilidad de inyección Eval en loudblog/inc/parse_old.php en Loudblog 0.8.0 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:loudblog:loudblog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.0","matchCriteriaId":"78B550A6-15FB-48C3-88E8-B36B2B183D07"}]}]}],"references":[{"url":"http://secunia.com/advisories/28336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27157","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39445","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0140","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the selected_theme parameter, a different vector than CVE-2007-3172."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en error.php de Uebimiau Webmail 2.7.10 y 2.7.2 permite a usuarios autenticados remotamente leer archivos de su elección mediante un .. (punto punto) en el parámetro selected_theme, un vector diferente de CVE-2007-3172."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uebimiau:webmail:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"03591F8F-1A57-485C-BFC8-C915A5AFF816"},{"vulnerable":true,"criteria":"cpe:2.3:a:uebimiau:webmail:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2CC56859-A750-47D6-BD45-8690139E8BCD"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2008-January/001867.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39460","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4846","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001867.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0141","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action."},{"lang":"es","value":"actions.php de WebPortal CMS 0.6-beta genera contraseñas predecibles conteniendo sólo la hora del día, lo cual facilita a atacantes remotos obtener acceso a cualquier cuenta mediante una acción lostpass."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webportal_cms_project:webportal_cms:0.6.0:beta:*:*:*:*:*:*","matchCriteriaId":"12F7AE7C-07C0-4817-93FA-73F4B169E4F7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27145","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39486","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4835","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0142","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en WebPortal CMS 0.6-beta permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user_name en actions.php, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:0.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"56776AA3-3EAD-479E-9E45-3AEF312868BB"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/4835","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0143","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows remote attackers to execute arbitrary PHP code via a URL in the commonpath parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo common/db.php en samPHPweb, posiblemente versión 4.2.2 y otras, como es proporcionado con SAM Broadcaster, permite a atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro commonpath"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spacial_audio_solutions:sam_broadcaster:*:*:*:*:*:*:*:*","matchCriteriaId":"E3405182-9082-4278-8E7F-282488CEE161"},{"vulnerable":true,"criteria":"cpe:2.3:a:spacial_audio_solutions:samphpweb:*:*:*:*:*:*:*:*","matchCriteriaId":"5F374401-13AC-4475-8465-5A1EB41DA132"}]}]}],"references":[{"url":"http://secunia.com/advisories/28355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.spacialaudio.com/news/index.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39397","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.spacialaudio.com/news/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0144","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: this can also be leveraged for local file inclusion using directory traversal sequences."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en index.php de NetRisk 1.9.7 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro page. NOTA: esto puede ser aprovechado también para incluir archivos locales usando secuencias de salto de directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprisk:netrisk:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"F159AA19-A7A3-4BDE-8D91-EF3AAC422AB2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=119955114428283&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39419","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4833","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=119955114428283&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0145","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors.  NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663."},{"lang":"es","value":"Vulnerabilidad no especificada en glob de PHP versiones anteriores a 4.4.8, cuando open_basedir está habilitado, tiene impacto desconocido y vectores de ataque.\r\nNOTA: esta vulnerabilidad existe debido a una regresión relativa a CVE-2007-4663."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue. Regression introduced break glob() functionality, but does not bypass security restrictions.\n\nFurthermore, "open_basedir" bypass issues are not treated as security sensitive as described at https://bugzilla.redhat.com/show_bug.cgi?id=169857#c1 and\nhttp://www.php.net/security-note.php","lastModified":"2008-01-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.7","matchCriteriaId":"25A322B4-9EBB-449F-A678-33BAD936A606"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=41655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28318","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28936","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-4.php","source":"cve@mitre.org"},{"url":"http://www.php.net/releases/4_4_8.php","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39401","source":"cve@mitre.org"},{"url":"http://bugs.php.net/bug.php?id=41655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-4.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/4_4_8.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0146","sourceIdentifier":"cve@mitre.org","published":"2008-01-08T19:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the top-level URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página de error de W3-mSQL permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del PATH_INFO del URI de primer nivel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes_technologies:w3-msql:*:*:*:*:*:*:*:*","matchCriteriaId":"75A39A43-B34A-4090-8A0F-F8226AD2F421"}]}]}],"references":[{"url":"http://osvdb.org/51235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28294","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3521","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485736/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27116","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485736/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0147","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (1) the user_email parameter and possibly (2) username parameter in a Members action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en SmallNuke 2.0.4 y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro (1)user_email y posiblemente (2) username en una acción Members."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smallnuke:smallnuke:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D2404476-6E8F-4EF3-AC3B-4253FFC045AF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39525","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0148","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request."},{"lang":"es","value":"TUTOS 1.3 no tiene restricciones de acceso a php/admin/cmd.php, lo cual permite a atacantes remotos ejecutar comandos del intérprete de comandos (shell) a través del parámetro cmd en una respuesta de directorio.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tutos:tutos:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EADC5A5D-9067-4B03-9F25-62945345D212"}]}]}],"references":[{"url":"http://secunia.com/advisories/28291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39531","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4861","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0149","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"TUTOS 1.3 permite a atacantes remotos leer información del sistema a través de una respuesta directa en php/admin/phpinfo.php, la cual llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tutos:tutos:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EADC5A5D-9067-4B03-9F25-62945345D212"}]}]}],"references":[{"url":"http://secunia.com/advisories/28291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4861","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0150","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica de autenticación LDAP en Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, y 2.4.8.11-FIPS o anteriores permite a atacantes remotos evitar los mecanismos de autenticación y obtener acceso a la interfaz de acceso o gestión del VPN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controllers:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8.11-fips","matchCriteriaId":"D65E31D5-A435-4465-A36E-8B31BACAAE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controllers:2.3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"CCDD6CA8-D586-4B1A-B9DA-6D8C0D071740"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controllers:2.5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"B6F3D45C-90AE-4435-AFEA-D83AA60DD4B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controllers:2.5.4.25:*:*:*:*:*:*:*","matchCriteriaId":"A0F2CC24-FB37-487E-8DA6-2D565E668561"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controllers:2.5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"FF7A2D49-72A9-4398-8422-8F62D1F1CBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controllers:3.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4E0822F8-6E88-47F7-8D40-CA7FE71DB411"}]}]}],"references":[{"url":"http://secunia.com/advisories/28357","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3529","source":"cve@mitre.org"},{"url":"http://www.arubanetworks.com/support/alerts/aid-122207.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485831/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arubanetworks.com/support/alerts/aid-122207.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485831/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0151","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options."},{"lang":"es","value":"Un desbordamiento del búfer en la región heap de la memoria en Foxit WAC Server versiones 2.1.0.910, 2.0 Build 3503 y anteriores, permite a atacantes remotos causar una denegación de servicio (crash) y ejecutar código arbitrario por medio de una petición Telnet con opciones largas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:wac_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4B62FEC-CB95-4E1E-9D69-7173B93782BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:wac_server:2.1.0.910:*:*:*:*:*:*:*","matchCriteriaId":"C6576708-F3BB-4296-8E4A-8CCBCF7FE0C9"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/waccaz-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/wachof-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3525","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485812/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488366/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27142","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39427","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/waccaz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.altervista.org/adv/wachof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485812/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488366/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0152","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service (crash) via unspecified telnet options, which triggers a NULL pointer dereference.  NOTE: the crash is not user-assisted when the server is running in debug mode."},{"lang":"es","value":"En el archivo SLnet.exe en SeattleLab SLNet RF Telnet Server versión 4.1.1.3758 y anteriores, permite a atacantes remotos asistidos por el usuario causar una denegación de servicio (bloqueo de aplicación) por medio de opciones telnet no especificadas, lo que desencadena una desreferencia del puntero NULL. NOTA: el bloqueo no es asistido por el usuario cuando el servidor es ejecutado en modo de depuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:seattle_lab_software:slnet_rf_telnet_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1.3758","matchCriteriaId":"D7BE2BBD-9E12-4D7F-8A7C-F53421D04F6E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/slnetmsg-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=119947184730448&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27134","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/slnetmsg-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=119947184730448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0153","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference."},{"lang":"es","value":"telnetd.exe en Pragma TelnetServer 7.0.4.589 permite a atacantes remotos provoquen una denegación de servicio (por caída del proceso y agotamiento de recursos) a traves de una opción telnet TELOPT PRAGMA LOGON manipulada, que provoca la referencia a un puntero NULL"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:pragma_telnetserver:7.0.4.589:*:*:*:*:*:*:*","matchCriteriaId":"9B7786F9-92E8-4895-8E69-482FE6E9FDEC"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/pragmatel-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=119947184730448&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27143","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39353","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/pragmatel-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=119947184730448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0154","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL commands the c parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en EvilBoard 0.1a (Alpha) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evilboard:evilboard:0.1a:*:*:*:*:*:*:*","matchCriteriaId":"9BDBDA7C-4C98-446C-BC35-73F5B0754EE6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27190","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39529","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4865","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0155","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitrary web script or HTML via the c parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en EvilBoard 0.1a (Alpha) permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evilboard:evilboard:0.1a:*:*:*:*:*:*:*","matchCriteriaId":"9BDBDA7C-4C98-446C-BC35-73F5B0754EE6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27190","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4865","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0156","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded \"/\" (%2F) sequences in the link parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en index.php en Million Dollar Script 2.0.14 permite a atacantes remotos leer archivos de su elección a través de la secuencia de codificación \"/\" (%2F) en el parámetro link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:million_dollar_script:million_dollar_script:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"94BEBF8C-5646-4DF0-A887-2179E9F4D659"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27174","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39492","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0157","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en FlexBB 0.6.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro flexbb_temp_id en una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flexbb:flexbb:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.3","matchCriteriaId":"E2E9515F-B487-41D0-A09D-025E09D5BBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:flexbb:flexbb:1.0_10005_beta_release_1:*:*:*:*:*:*:*","matchCriteriaId":"9F3C450D-5F13-4C67-AF26-8CAE195AF417"}]}]}],"references":[{"url":"http://secunia.com/advisories/28373","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27164","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39475","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0158","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a .. (dot dot) in the aux_page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php in Shop-Script 2.0 y posiblemente otras versiones permite a atacantes remotos leer archivos de su elección a través de la secuencia .. (punto punto) en un parámetro aux_page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shop-script:shop-script:2.0:*:*:*:*:*:*:*","matchCriteriaId":"80F57ACF-36C0-4D97-A83B-7F4DA55384EA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0801-exploits/shopscript-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27165","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39449","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4855","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0801-exploits/shopscript-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0159","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php in eggBlog 3.1.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro eggblogpassword en una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eggblog:eggblog:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"819B5692-0D93-4826-A4B8-330C71131CCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/28371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27168","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39473","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4860","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0162","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges."},{"lang":"es","value":"misc.c in splitvt 1.6.6 y anteriores no borra los privilegios de grupo antes de ejecutar xprop, lo que permite a usuarios locales obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sam_lantinga:splitvt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.6","matchCriteriaId":"164D27CB-7CED-4397-9D5D-416C55FB4AEA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29190","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-05.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1500","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27936","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0163","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc."},{"lang":"es","value":"Linux kernel 2.6, cuando usa vservers, permite a usuarios locales acceder a recursos de otros vservers a través de un ataque de enlaces simbólicos en /proc."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-02-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28875","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1494","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27704","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0164","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Must login to view link 1015140","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Plone CMS 3.0.5 y 3.0.6 permite a atacantes remotos (1) añadir cuentas de su elección desde la página join_form y (2) cambiar los privilegios de grupos de su elección desde la página prefs_groups_overview."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"53289AB1-3A39-40CD-8AA1-D280E212F904"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9CD7FC61-2000-48CF-97C8-09D62FE4EECB"}]}]}],"references":[{"url":"http://plone.org/about/security/advisories/cve-2008-0164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3754","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41263","source":"cve@mitre.org"},{"url":"http://plone.org/about/security/advisories/cve-2008-0164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0165","sourceIdentifier":"cve@mitre.org","published":"2008-04-21T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Ikiwiki versiones anteriores a 2.42 permite a atacantes remotos modificar preferencias de usuarios, incluyendo contraseñas, a través de los formularios (1) preferences y (2) edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"2.41","matchCriteriaId":"FFB7C1FD-F2FF-4B1F-9B29-B5CE7A9BB32E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445","source":"cve@mitre.org"},{"url":"http://ikiwiki.info/security/#index31h2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29932","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1553","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1297/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41904","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ikiwiki.info/security/#index31h2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1297/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0166","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys."},{"lang":"es","value":"OpenSSL versión 0.9.8c-1 hasta versiones anteriores a 0.9.8g-9, sobre sistemas operativos basados en Debian usa un generador de números aleatorios que genera números predecibles, lo que facilita a atacantes remotos la conducción de ataques de adivinación por fuerza bruta contra claves criptográficas."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This flaw was caused by a third-party vendor patch to the OpenSSL\nlibrary.  This patch has never been used by Red Hat, and this issue therefore does not affect any Fedora, Red Hat, or upstream supplied OpenSSL packages.","lastModified":"2008-05-13T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8c-1","versionEndIncluding":"0.9.8g","matchCriteriaId":"8EEFA1C8-85D4-425F-A987-29AC6D10C303"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://metasploit.com/users/hdm/tools/debian-openssl/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30136","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30220","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30221","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30231","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30239","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30249","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1576","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/925211","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492112/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29179","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020017","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-612-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-2","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-4","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-7","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-137A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://16years.secvuln.info","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42375","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://news.ycombinator.com/item?id=40333169","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5622","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5632","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5720","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://metasploit.com/users/hdm/tools/debian-openssl/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/925211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492112/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-612-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-137A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://16years.secvuln.info","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://news.ycombinator.com/item?id=40333169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0167","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances."},{"lang":"es","value":"La función write_array_file en utils/include.pl de GForge 4.5.14 actualiza los archivos de configuración truncándolos a longitud cero y a continuación escribe datos nuevos, lo que podría permitir a atacantes evitar las restricciones de acceso planificadas o tener otros impactos no especificados en circunstancias oportunas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s390:*:*:*:*:*","matchCriteriaId":"4567FE5A-5061-4741-AA6D-4AB365579F8D"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"}]}]}],"references":[{"url":"http://secunia.com/advisories/30088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1577","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29215","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1537/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1537/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0169","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence."},{"lang":"es","value":"Plugin/passwordauth.pm (también conocido como plugin passwordauth) en ikiwiki versiones de la 1.34 hasta la 2.47, permite a atacantes remotos saltarse la autenticación y login de cualquier cuenta en la que se configura una identidad OpenID y no se configura una contraseña, especificando una contraseña vacía durante la secuencia de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.5:*:*:*:*:*:*:*","matchCriteriaId":"71E2F2DF-4338-4DF6-8C9B-13E71EA11B88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.34:*:*:*:*:*:*:*","matchCriteriaId":"23C20D44-6C00-4443-9803-DDA2502B3397"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.34.1:*:*:*:*:*:*:*","matchCriteriaId":"F7113F05-8351-4A80-B161-993367E6789E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.34.2:*:*:*:*:*:*:*","matchCriteriaId":"2AF3D536-A6A2-419A-8D62-04DC0A2E7501"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.35:*:*:*:*:*:*:*","matchCriteriaId":"65D4943C-A9D3-4918-90A2-3F8FF9CE38B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.36:*:*:*:*:*:*:*","matchCriteriaId":"ADF46EE7-B811-414F-A08E-D4E21D7EE4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.37:*:*:*:*:*:*:*","matchCriteriaId":"1229F63D-D1AA-4C96-999E-12B7AA162034"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.38:*:*:*:*:*:*:*","matchCriteriaId":"369A8C2E-31CB-4B55-A695-7BE0767F2C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.39:*:*:*:*:*:*:*","matchCriteriaId":"67065260-88DD-42AE-8A26-03A9034B15F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.40:*:*:*:*:*:*:*","matchCriteriaId":"874B99CA-6284-4488-A90B-5666B95CAD5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.41:*:*:*:*:*:*:*","matchCriteriaId":"B176C826-1DAC-4ED3-9EF0-650140BF2BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.42:*:*:*:*:*:*:*","matchCriteriaId":"9B2C6C5B-5605-4570-87B9-F1C96F3A6A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.43:*:*:*:*:*:*:*","matchCriteriaId":"560AD3F1-B825-4366-B813-8EC5C17EC130"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.44:*:*:*:*:*:*:*","matchCriteriaId":"907C38BF-0AF3-4C79-97C5-E6F2D96A95C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.45:*:*:*:*:*:*:*","matchCriteriaId":"80B09A6E-0455-4F70-8098-A97604F20908"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.46:*:*:*:*:*:*:*","matchCriteriaId":"843B6F62-9667-4CD6-84F4-503474198AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.47:*:*:*:*:*:*:*","matchCriteriaId":"416AEE64-BD36-4C85-BD22-6E711DD62194"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.48:*:*:*:*:*:*:*","matchCriteriaId":"899105EF-0843-4324-B871-8137B30BCE1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.49:*:*:*:*:*:*:*","matchCriteriaId":"4671EE3F-B495-4858-B8BF-597A2A763EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.51:*:*:*:*:*:*:*","matchCriteriaId":"5B2A2B1B-195C-431F-B504-94116BC292B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.0:*:*:*:*:*:*:*","matchCriteriaId":"196439CC-B5BE-4016-B6CF-B8308002D61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.1:*:*:*:*:*:*:*","matchCriteriaId":"20FFAE6B-9EBD-461A-AF5C-BB00EA2A652F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C064545-5C87-4CC5-A9FA-379A9F4ED0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.3:*:*:*:*:*:*:*","matchCriteriaId":"729BA91F-625A-4734-814D-EADE78A42CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.4:*:*:*:*:*:*:*","matchCriteriaId":"025BA9CF-1F77-4BC1-A884-3E49B23BB668"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C3120790-F2E2-4780-8022-B88EB326C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.6:*:*:*:*:*:*:*","matchCriteriaId":"DF180F3A-2B55-4555-9A3B-D8C12CB52CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.7:*:*:*:*:*:*:*","matchCriteriaId":"E1152479-FAAA-4AF5-85A8-9454C48CE087"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4490706B-50FF-4126-8EB8-4F4AFDE5B2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.9:*:*:*:*:*:*:*","matchCriteriaId":"70DD7148-E3ED-4726-A7B7-E4DEB6978DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.10:*:*:*:*:*:*:*","matchCriteriaId":"350315D5-C124-430D-BD7C-9EE5C3F4D957"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.11:*:*:*:*:*:*:*","matchCriteriaId":"8CA658C7-2D79-4A8D-977E-D7F4640CEAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.12:*:*:*:*:*:*:*","matchCriteriaId":"8892C63F-297A-4D7A-8F63-B15BAE578645"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.13:*:*:*:*:*:*:*","matchCriteriaId":"0E83FBBB-0837-41EE-A56A-C837FAE6394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.14:*:*:*:*:*:*:*","matchCriteriaId":"E14AF144-D023-4FF1-B6B6-FF3E74D61F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.15:*:*:*:*:*:*:*","matchCriteriaId":"2FDE3606-418B-4E76-97F8-655CE1679857"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.16:*:*:*:*:*:*:*","matchCriteriaId":"0F6877A1-D793-48A7-9187-63EA568EC854"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.17:*:*:*:*:*:*:*","matchCriteriaId":"739EB847-21B4-4728-9F38-3925893A37A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.18:*:*:*:*:*:*:*","matchCriteriaId":"FA1630A6-8578-4B0A-9F12-549EE0C42E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.19:*:*:*:*:*:*:*","matchCriteriaId":"15FE7BEB-A9E9-476A-ABDF-663A8F69BA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.20:*:*:*:*:*:*:*","matchCriteriaId":"10E53E42-F691-4237-AAC1-A93E35EADD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.30:*:*:*:*:*:*:*","matchCriteriaId":"6994F418-61A4-4CB5-94FA-C7DC7A31BBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31:*:*:*:*:*:*:*","matchCriteriaId":"356A3B66-637B-4429-A201-EAB0A8FD9DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31.1:*:*:*:*:*:*:*","matchCriteriaId":"11BC2505-E5EF-4CA4-B747-F74F20BFDCE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31.2:*:*:*:*:*:*:*","matchCriteriaId":"6CDB27DC-1B2B-4893-AFC7-71535919567B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31.3:*:*:*:*:*:*:*","matchCriteriaId":"18275BA3-A5D0-410B-9D90-B8DBDB486849"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.40:*:*:*:*:*:*:*","matchCriteriaId":"06E20D04-ADEA-4773-843A-2D6BB0FC5591"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.41:*:*:*:*:*:*:*","matchCriteriaId":"C76D329C-975F-4180-9102-2CAA24230C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.42:*:*:*:*:*:*:*","matchCriteriaId":"86A6C38C-6B71-4A83-B280-C1195D668DDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.43:*:*:*:*:*:*:*","matchCriteriaId":"0AB24A6A-D1D2-4200-ACF6-93F20AA2CEE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.44:*:*:*:*:*:*:*","matchCriteriaId":"3B998D73-576D-4942-A164-8898437815DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.47:*:*:*:*:*:*:*","matchCriteriaId":"C26EFAF6-5DE3-4562-A831-DE9CCD40B31E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483770","source":"cve@mitre.org"},{"url":"http://ikiwiki.info/news/version_2.48/index.html","source":"cve@mitre.org"},{"url":"http://ikiwiki.info/security/#index33h2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/31/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29479","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1710","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42798","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ikiwiki.info/news/version_2.48/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ikiwiki.info/security/#index33h2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/31/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0171","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression."},{"lang":"es","value":"regex/v4/perl_matcher_non_recursive.hpp en la librería de expresiones regulares (también conocido como Boost.Regex) de Boost 1.33 y 1.34 permite a atacantes remotos dependientes de contexto provocar una denegación de servicio (fallo de aserción y caída) mediante una expresión regular inválida."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of boost as shipped with Red Hat Enterprise Linux 4.\n\nFor Red Hat Enterprise Linux 5, Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0171\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-05-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boost:boost:1.33:*:*:*:*:*:*:*","matchCriteriaId":"B7A527FE-ED5E-4C9A-823C-0D76B1885691"},{"vulnerable":true,"criteria":"cpe:2.3:a:boost:boost:1.34:*:*:*:*:*:*:*","matchCriteriaId":"C9CAD8FD-3F47-4AA4-9B97-41892E58FB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:boost:boost_regex_library:*:*:*:*:*:*:*:*","matchCriteriaId":"81538702-CFC1-4A99-96B9-F8745F8D1D53"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205955","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28860","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28943","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48099","source":"cve@mitre.org"},{"url":"http://svn.boost.org/trac/boost/changeset/42674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://svn.boost.org/trac/boost/changeset/42745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0063","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488102/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27325","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-570-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0249","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2143","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.boost.org/trac/boost/changeset/42674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://svn.boost.org/trac/boost/changeset/42745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488102/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-570-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0172","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression."},{"lang":"es","value":"La función get_repeat_type en basic_regex_creator.hpp de la librería de expresiones regulares (también conocido como Boost.Regex) de Boost 1.33 y 1.34 permite a atacantes remotos dependientes de contexto provocar una denegación de servicio (referencia nula y caída) mediante una expresión regular inválida."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of boost as shipped with Red Hat Enterprise Linux 4.\n\nFor Red Hat Enterprise Linux 5, Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0172\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-05-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:*","matchCriteriaId":"B8517E55-4357-4AFD-B571-5533123CB014"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"33904E65-D50D-4EAE-885D-FE2EBF535F18"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"F9A940B9-A553-4A0B-8ECF-52FD26894285"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"06FD8602-7069-41C6-B65C-84928EDCE2D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boost:boost:1.33:*:*:*:*:*:*:*","matchCriteriaId":"B7A527FE-ED5E-4C9A-823C-0D76B1885691"},{"vulnerable":true,"criteria":"cpe:2.3:a:boost:boost:1.34:*:*:*:*:*:*:*","matchCriteriaId":"C9CAD8FD-3F47-4AA4-9B97-41892E58FB57"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205955","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28860","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28943","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48099","source":"cve@mitre.org"},{"url":"http://svn.boost.org/trac/boost/changeset/42674","source":"cve@mitre.org"},{"url":"http://svn.boost.org/trac/boost/changeset/42745","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0063","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488102/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27325","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-570-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0249","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2143","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.boost.org/trac/boost/changeset/42674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.boost.org/trac/boost/changeset/42745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488102/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-570-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0173","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Gforge 4.6.99 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de parámetro no especificados, relacionado con la exportación de RSS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.99","matchCriteriaId":"B54AAA1E-4B9C-42A2-91C3-4192601BF302"}]}]}],"references":[{"url":"http://secunia.com/advisories/28395","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28451","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1459","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27266","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0115","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0174","sourceIdentifier":"cret@cert.org","published":"2008-01-29T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges."},{"lang":"es","value":"GE Fanuc Proficy Real-Time Information Portal 2.6 y versiones anteriores utiliza autenticación básica HTTP que transmite usuarios y contraseñas en texto en claro codificado base64 y permite a atacantes remotos  robar las contraseñas y obtener priviliegios."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ge:proficy_real-time_information_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"C56FDE31-26E9-4221-8A9B-94F45D753849"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3590","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1019273","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=KB12459","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/180876","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487075/100/0/threaded","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/487244/100/0/threaded","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30754","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/3590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1019273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=KB12459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/180876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/487244/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0175","sourceIdentifier":"cret@cert.org","published":"2008-01-29T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros no restringida en GE Fanuc Proficy Real-Time Information Portal 2.6 y versiones anteriores permite a atacantes remotos ejecutar código de su elección al subir un fichero con una extensión ejecutable al directorio virtual principal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:proficy_real-time_information_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"2EE7021B-BA05-4F4A-A1C0-4DCA860B897C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28678","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3591","source":"cret@cert.org"},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/339345","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487079/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/487242/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/27446","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1019274","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0307/references","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/28678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/339345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487079/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487242/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0307/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0176","sourceIdentifier":"cret@cert.org","published":"2008-01-29T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 010708_162517_6106, allow remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en w32rtr.exe de GE Fanuc CIMPLICITY HMI SCADA system 7.0 versiones anteriores a 7.0 SIM 9, y versiones anteriores a 6.1 SP6 Hot fix - 010708_162517_6106, permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:cimplicity:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1_sp6_hf_010708_162517_6106","matchCriteriaId":"C9F476A8-BF15-4CBE-B70E-9678EA01DCC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:cimplicity:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0_sim8","matchCriteriaId":"32225239-A0F7-4F30-8E11-FA4664CD23EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/28663","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3592","source":"cret@cert.org"},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=KB12458","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/308556","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487076/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/487241/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/27447","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1019275","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0306","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/28663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=KB12458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/308556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487076/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487241/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0177","sourceIdentifier":"cret@cert.org","published":"2008-02-07T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header."},{"lang":"es","value":"La función ipcomp6_input en sys/netinet6/ipcomp_input.c en el Proyecto KAME antes del 2007-12-01 no comprueba correctamente el valor de retorno de la función m_pulldown, lo que permite a atacantes remotos provocar una denegación de servicio (caída del sistema) mediante un paquete IPv6 con cabecera IPComp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kame:ipcomp:*:*:*:*:*:*:*:*","matchCriteriaId":"D2434FDC-4269-4FEC-9627-8743C8A5D7A1"}]}]}],"references":[{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cret@cert.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/28788","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28816","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28979","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/29130","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30430","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/31074","source":"cret@cert.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc","source":"cret@cert.org"},{"url":"http://securitytracker.com/id?1019314","source":"cret@cert.org"},{"url":"http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36%3Br2=1.37","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/110947","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27642","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0441","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0688","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/5191","source":"cret@cert.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36%3Br2=1.37","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/110947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0178","sourceIdentifier":"cret@cert.org","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente Enterprise Admin Session Monitoring de Liferay Portal 4.3.6. Permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección a través de la cabecera HTTP User-Agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C86D1BEF-DDC0-4622-8399-A23F7EFDE0F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28742","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4736","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/326065","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27547","source":"cret@cert.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/28742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/326065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-0179","sourceIdentifier":"cret@cert.org","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en service/impl/UserLocalServiceImpl.java en Liferay Portal 4.3.6. Permite a atacantes remotos inyectar scripts web o HTMLs arbitrarios a través de la cabecera User-Agent HTTP, que es usada cuando se redactan e-mails de Olvido de Contraseña en formato HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C86D1BEF-DDC0-4622-8399-A23F7EFDE0F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28742","source":"cret@cert.org"},{"url":"http://support.liferay.com/browse/LEP-4737","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/888209","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27550","source":"cret@cert.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.liferay.com/browse/LEP-4737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/888209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0180","sourceIdentifier":"cret@cert.org","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en themes/_unstyled/templates/init.vm en Liferay Portal 4.3.6. Permite a usuarios autenticados remotamente inyectar scripts web o HTMLs arbitrarios a través del campo Greeting en un Perfil de Usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"C94E89A8-FD42-4A27-A57E-D25700EC27E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1561FBB-3E05-4DE9-8785-9D1C149B466C"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5CD9FA47-07E1-42D1-8B9A-F31119D2C4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8340091-8C00-42AD-8709-866044D4A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9C414660-1C6E-4371-800F-1C0FBFAEF5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"266E1E93-431D-4C04-8288-077837158A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7A512412-F8BA-4187-8E71-040C5641EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B9265D3B-45C3-4D60-8B6E-E17C7C94CA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2050C79-6FCD-4C05-86A2-F8AF2BBEB735"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"569A80EE-0B9B-49BD-AEB0-8B07D8DA7CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"987419EB-E5FC-472A-AFFA-47D4D8799F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C86D1BEF-DDC0-4622-8399-A23F7EFDE0F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28742","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4738","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/732449","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27546","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/28742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/732449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0181","sourceIdentifier":"cret@cert.org","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el portlet Admin de Liferay Portal 4.3.6. Permite a usuarios autenticados remotamente inyectar scripts web o HTMLs arbitrarios a través del mensaje de Shutdown (apagado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C86D1BEF-DDC0-4622-8399-A23F7EFDE0F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28742","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4739","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/217825","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27554","source":"cret@cert.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/217825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0182","sourceIdentifier":"cret@cert.org","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el portlet Admin de Liferay Portal en versiones anteriores a 4.4.0.  Permite a usuario autenticados remotamente realizar acciones sin especificar como otros usuarios autenticados sin especificar a través del mensaje de Shutdown (apagado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.6","matchCriteriaId":"68EA9FF6-2115-409D-9523-B1CA74941FB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/28742","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4739","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/767825","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/28742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.liferay.com/browse/LEP-4739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/767825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2008-0184","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded \"/\" (\"%2F\") in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Sys-Hotel on Line System, permite que atacantes remotos lean ficheros arbitrariamente usando un \"/\" (\"%2F\") codificado en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prenotazioni_on_line:syshotel_on_line_system:*:*:*:*:*:*:*:*","matchCriteriaId":"0E4F8FDE-008E-47E6-AD2D-7B67068FF2C7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3528","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485940/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27184","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485940/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0185","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the pid parameter in a profile page (possibly profile.php)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de NetRisk 1.9.7 y posiblemente versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid en una página de perfil (posiblemente profile.php)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netrisk:netrisk:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B87A51A4-7F50-4E48-ACF1-9289983DFF8F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=551208&group_id=129681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485834/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27161","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=551208&group_id=129681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485834/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0186","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php en NetRisk 1.9.7 y posiblemente anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro page, posiblemente relacionado con CVE-2008-0144."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprisk:netrisk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.7","matchCriteriaId":"E0F564AA-B3E2-462A-834D-2E60CEB64EC8"}]}]}],"references":[{"url":"http://secunia.com/advisories/28369","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485834/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27161","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485834/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0187","sourceIdentifier":"cve@mitre.org","published":"2008-01-09T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the songid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el fichero songinfo.php de SAM Broadcaster samPHPweb, posiblmente en la versión 4.2.2 y anteriores, permite que atacantes remotos ejecuten comandos SQL arbitrarios a través del parámetro songid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spacial_audio_solutions:samphpweb:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E5B5DF76-98F9-4616-A154-01B875F1188C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27147","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39463","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4836","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0188","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T00:00:00.000","lastModified":"2023-11-07T02:01:41.413","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its requester.  Further investigation showed that it was not a new security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0189","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T00:00:00.000","lastModified":"2023-11-07T02:01:41.443","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its requester.  Further investigation showed that it was not a new security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0190","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow remote attackers to inject arbitrary web script or HTML via the (1) data[title], (2) data[message], (3) data[table][1][item], (4) data[table][1][url], or (5) data[poweredby] parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en templates/example_template.php de AwesomeTemplateEngine permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) data[title], (2) data[message], (3) data[table][1][item], (4) data[table][1][url], o (5) data[poweredby]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awesometemplateengine:awesometemplateengine:1:*:*:*:*:*:*:*","matchCriteriaId":"7916A351-BE81-4DFC-9E9B-74D346A54A49"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument784.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/1694/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27125","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39396","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument784.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/1694/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0191","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure."},{"lang":"es","value":"WordPress 2.2.x y 2.3.x permite a atacantes remotos obtener información sensible mediante un parámetro p inválido en una acción rss2 al URI por defecto, lo cual revela la ruta completa y la estructura de base de datos SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument663.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1634/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39423","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument663.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1634/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0192","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to (1) wp-admin/post.php or (2) wp-admin/page-new.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WordPress 2.0.9 y anteriores permiten a atacantes remotos  inyectar secuencias de comandos web o HTML de su elección a través del parámetro popuptitle de (1) wp-admin/post.php o (2) wp-admin/page-new.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.9","matchCriteriaId":"058B8089-FBA5-4281-93BD-E30DEF1063FE"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument714.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/1658/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27123","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39426","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument714.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/1658/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0193","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remote attackers to inject arbitrary web script or HTML via the backup parameter in a wp-db-backup.php action to wp-admin/edit.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en wp-db-backup.php de WordPress 2.0.11 y anteriores, y posiblemente 2.1.x hasta 2.3.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro backup en una acción wp-db-backup.php a wp-admin/edit.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.11","matchCriteriaId":"59250D63-6E6D-4A70-9053-2934E66EBE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29014","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument755.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/1676/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27123","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument755.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/1676/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0194","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php.  NOTE: this might be the same as CVE-2006-5705.1."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en wp-db-backup.php de WordPress 2.0.3 y anteriores permite a atacantes remotos leer y borrar archivos de su elección, y provocar una denegación de servicio mediante un .. (punto punto) en el parámetro backup en una acción wp-db-backup.php de wp-admin/edit.php. NOTA: esta podría ser la misma que CVE-2006-5705.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"84AC31B4-9402-479C-92A8-6023F56D5564"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29014","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument755.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1676/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27123","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument755.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1676/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0195","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages."},{"lang":"es","value":"WordPress 2.0.11 y anteriores permite a atacantes remotos obtener información sensible mediante un valor vacío del parámetro page a ciertas secuencias de comandos PHP bajo wp-admin/, lo cual revela la ruta en varios mensajes de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.11","matchCriteriaId":"59250D63-6E6D-4A70-9053-2934E66EBE5F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument762.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument768.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument772.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument773.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1679/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1683/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1686/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1687/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument762.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument768.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument772.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1679/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1683/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1686/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1687/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0196","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the page parameter to certain PHP scripts under wp-admin/ or (2) the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path via a request for the \\..\\..\\wp-config pathname; and allow remote attackers to modify arbitrary files via a .. (dot dot) in the file parameter to wp-admin/templates.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en WordPress 2.0.11 y anteriores permiten a atacantes remotos leer archivos de su elecció mediante un .. (punto punto) en (1) el parámetro page de determinados archivos bajo wp-admin/ o (2) el parámetro import de wp-admin/admin.php , como se ha demostrado descubriendo la ruta completa mediante una petición del nombre de ruta \\..\\..\\wp-config; y permiten a atacantes remotos modificar archivos de su elección mediante un .. (punto punto) en el parámetro file de wp-admin/templates.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.11","matchCriteriaId":"59250D63-6E6D-4A70-9053-2934E66EBE5F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument762.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument768.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument772.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument773.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1679/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1683/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1686/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1687/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument762.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument768.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument772.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1679/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1683/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1686/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1687/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0197","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wpcf_email, (2) wpcf_subject, (3) wpcf_question, (4) wpcf_answer, (5) wpcf_success_msg, (6) wpcf_error_msg, or (7) wpcf_msg parameter to wp-admin/admin.php, or (8) the SRC attribute of an IFRAME element."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en wp-contact-form/options-contactform.php de la extensión (plugin) WP-ContactForm 1.5 alpha y anteriores para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) wpcf_email, (2) wpcf_subject, (3) wpcf_question, (4) wpcf_answer, (5) wpcf_success_msg, (6) wpcf_error_msg, o (7) wpcf_msg parameter a wp-admin/admin.php, o (8) el atributo SRC de un elemento IFRAME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wp-contactform:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5_alpha","matchCriteriaId":"267633F3-EF40-40A6-B4D0-7CC4A6D9BD76"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument546.html","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument667.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1600/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1641/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument667.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1600/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1641/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0198","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) wpcf_question, (2) wpcf_success_msg, or (3) wpcf_error_msg parameter to wp-admin/admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en wp-contact-form/options-contactform.php en la extensión WP-ContactForm 1.5 alpha y anteriores para WordPress permiten a atacantes remotos realizar acciones como administradores a través de los parámetros (1) wpcf_question, (2) wpcf_success_msg, o (3) wpcf_error_msg de wp-admin/admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wp-contactform_project:wp-contactform:1.5:alpha:*:*:*:wordpress:*:*","matchCriteriaId":"C059DC29-0801-4CA4-A9E9-CC3A5C73D40A"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://securityvulns.ru/Sdocument546.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://securityvulns.ru/Sdocument667.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://websecurity.com.ua/1600/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://websecurity.com.ua/1641/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://securityvulns.ru/Sdocument546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://securityvulns.ru/Sdocument667.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://websecurity.com.ua/1600/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://websecurity.com.ua/1641/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0199","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI."},{"lang":"es","value":"PRO-Search 0.17 y anteriores permite a atacantes remotos provocar una denegación de servicio mediante determinados valores de los parámetros show_page y time para el URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pro_search:pro_search:*:*:*:*:*:*:*:*","versionEndIncluding":"0.16","matchCriteriaId":"D05067C5-07E0-4C9C-BAE8-F57C8D823EB3"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument731.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1259/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument731.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1259/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0200","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) drop parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en account/index.html de RotaBanner Local 3 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) user o (2) drop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:medialand:rotabanner_local:*:*:*:*:*:*:*:*","versionEndIncluding":"3","matchCriteriaId":"96FB8F9C-4BBD-4C3C-949F-67E9F774FA45"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument625.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1442/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27138","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1442/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0201","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de ExpressionEngine 1.2.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:expressionengine:expressionengine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"74A1574F-1A5D-452B-A4EB-1D5E812DF8EB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument472.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1454/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39442","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument472.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1454/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0202","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en index.php de ExpressionEngine 1.2.1 y anteriores permite a atacantes remotos inyectar  cabeceras HTTP y llevar a cabo ataques de división de respuesta HTTP a través del parámetro URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:expressionengine:expressionengine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"74A1574F-1A5D-452B-A4EB-1D5E812DF8EB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument472.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1454/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27128","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument472.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1454/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0203","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, or (24) brushsize parameter to wp-admin/options-general.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en cryptographp/admin.php en la extensión (plugin) Cryptographp 1.2 y anteriores para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, o (24) brushsize a wp-admin/options-general.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:cryptographp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"F7FB0CB4-462F-4E35-AE4A-DC6284299BB7"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1596/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1596/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0204","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en math-comment-spam-protection.php de la extensión Math Comment Spam Protection 2.1 y anteriores para WordPress permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) mcsp_opt_msg_no_answer o (2) mcsp_opt_msg_wrong_answer de wp-admin/options-general.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:math_comment_spam_protection_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"75C8E933-F5A8-43D7-8084-66DB5497AC47"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1576/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1576/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0205","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en math-comment-spam-protection.php de la extensión Math Comment Spam Protection 2.1 y anteriores para WordPress permiten a atacantes remotos realizar acciones como administradores a través de los parámetros (1) mcsp_opt_msg_no_answer o (2) mcsp_opt_msg_wrong_answer de wp-admin/options-general.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:math_comment_spam_protection_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"75C8E933-F5A8-43D7-8084-66DB5497AC47"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1576/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1576/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0206","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in captcha\\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) captcha_ttffolder, (2) captcha_numchars, (3) captcha_ttfrange, or (4) captcha_secret parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en captcha\\captcha.php del componente (plugin) Captcha! 2.5d y anteriores para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) captcha_ttffolder, (2) captcha_numchars, (3) captcha_ttfrange, o (4) captcha_secret."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:captcha:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5d","matchCriteriaId":"7C7E7368-DA8E-4BC2-965A-E5EA65E7C032"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1588/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1588/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0207","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PRO-Search 0.17 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, o (8) show_page para el URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pro_search:pro_search:*:*:*:*:*:*:*:*","versionEndIncluding":"0.17","matchCriteriaId":"B2E36618-3AAC-48C8-9FC2-DF1A83A26F7F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3539","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Sdocument731.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/1259/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27126","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Sdocument731.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/1259/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0208","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login.asp de Snitz Forums 2000 3.4.05 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.05","matchCriteriaId":"A45172EC-7E9C-4678-881D-4EDC6BEE6A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E646E96C-F0AC-4E13-8F3A-2908AC069581"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*","matchCriteriaId":"E212B816-692F-4C5C-AEDF-B173BEE115A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*","matchCriteriaId":"C4396E99-B5C8-4914-A3DB-76E22A10AE84"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*","matchCriteriaId":"0D89B42F-7738-47EE-871A-FE16C53BCD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*","matchCriteriaId":"FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*","matchCriteriaId":"A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"}]}]}],"references":[{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28284","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27162","source":"cve@mitre.org"},{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0209","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter."},{"lang":"es","value":"Una vulnerabilidad de redireccionamiento abierto en el archivo Forums/login.asp en Snitz Forums 2000 versión 3.4.06 y anteriores, permite a atacantes remotos redireccionar a los usuarios a sitios web arbitrarios por medio de una URL en el parámetro target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.06","matchCriteriaId":"5B1F3BBC-EE45-4D02-B306-7501D0F2AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E646E96C-F0AC-4E13-8F3A-2908AC069581"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*","matchCriteriaId":"E212B816-692F-4C5C-AEDF-B173BEE115A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*","matchCriteriaId":"C4396E99-B5C8-4914-A3DB-76E22A10AE84"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*","matchCriteriaId":"0D89B42F-7738-47EE-871A-FE16C53BCD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*","matchCriteriaId":"FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*","matchCriteriaId":"A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*","matchCriteriaId":"C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"}]}]}],"references":[{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"cve@mitre.org"},{"url":"http://hackerscenter.com/archive/view.asp?id=28145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485836/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0210","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting.  NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140."},{"lang":"es","value":"Uebimiau Webmail 2.7.10 y 2.7.2 no protege variables de estado de autenticación de ser establecidas mediante peticiones HTTP, lo cual permite a atacantes remotos evitar la autenticación mediante el parámetro de configuración sess[auth]=1. NOTA: esto podría ser aprovechado para llevar a cabo ataques de salto de directorio sin autenticación utilizando CVE-2008-0140."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uebimiau:webmail:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"03591F8F-1A57-485C-BFC8-C915A5AFF816"},{"vulnerable":true,"criteria":"cpe:2.3:a:uebimiau:webmail:2.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2CC56859-A750-47D6-BD45-8690139E8BCD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4846","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0211","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la BIOS de F.04 a F.11 para HP Compaq Business Notebook PC permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:2210_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.04","matchCriteriaId":"A12AB21A-D290-4FC0-9747-D514B1EBD097"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:2510_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.08","matchCriteriaId":"40277E5C-111F-490E-B3DA-224A894B440C"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:2710_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.0d","matchCriteriaId":"D475B041-F47D-49C4-B4BD-50B91EAF0BA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6510_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.0f","matchCriteriaId":"9936E389-A360-4549-9052-8307FEE0ADF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6515_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.0a","matchCriteriaId":"D9873291-8A7B-417F-A8A9-1468B4BE0237"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6520_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.08","matchCriteriaId":"1973EDEC-F711-4075-94F3-2722F0DED84A"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6710_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.0f","matchCriteriaId":"FB6CC23B-C78A-492D-9E9D-8E3872B6EED7"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6715_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.0a","matchCriteriaId":"6B413CA6-7582-465A-849F-29AD0A9EEFAC"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6720_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.08","matchCriteriaId":"B165B917-9F49-47B4-B4A2-67404AB3058D"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6820_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.08","matchCriteriaId":"B3334F5A-19BE-4080-8418-A65D5B2ADD84"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:6910_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.11","matchCriteriaId":"8BBA21E0-D23C-481E-904E-23A4C3BB15F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:8510_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.0e","matchCriteriaId":"51D89381-3E1B-49F0-BC17-52D48E246D55"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:8710_series_bios:*:*:*:*:*:*:*:*","versionEndIncluding":"f.08","matchCriteriaId":"3104E9C8-240B-4AFD-8684-7E1AB1222216"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120672155821700&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120672155821700&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019729","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1042/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41520","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120672155821700&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120672155821700&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1042/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0212","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access."},{"lang":"es","value":"ovtopmd en HP OpenView Network Node Manager (OV NNM) versiones 6.41, 7.01 y 7.51, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de una petición TCP diseñada que desencadena un acceso de memoria fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*","matchCriteriaId":"D24CCB02-FFFE-448B-AF31-D9AC39443552"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27629","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019306","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0213","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en un determinado control ActiveX para HP Virtual Rooms (HPVR) versión 6 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtual_rooms:*:*:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"57153BB2-3F5A-4A38-8B28-F6574013B29D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120231595903371&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120231595903371&w=2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019311","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120231595903371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120231595903371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0214","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"In order to download the patch, user must login.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to gain access via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13 y 4.20 permiten a usuarios validados obtener acceso a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.00:*:*:*:*:*:*:*","matchCriteriaId":"89ECFF6F-B4C6-46AA-879C-358D8E8125CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.01:*:*:*:*:*:*:*","matchCriteriaId":"5529BDF3-99C7-4873-8598-294EA902BF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.10:*:*:*:*:*:*:*","matchCriteriaId":"DE00A778-C04A-4660-9F5F-CC8997D03E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.11:*:*:*:*:*:*:*","matchCriteriaId":"68A69466-FAFB-42FC-A2C5-83E662822519"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.12:*:*:*:*:*:*:*","matchCriteriaId":"9317B31B-12A6-4F52-B3AA-8F028D9D0D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.13:*:*:*:*:*:*:*","matchCriteriaId":"7AA5FBBF-CD0E-4118-B90C-6148BFB450E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.20:*:*:*:*:*:*:*","matchCriteriaId":"72C2880E-27BB-4A74-815F-A988971A8D4D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120239931201443&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120239931201443&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27667","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019322","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0472","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120239931201443&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120239931201443&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0215","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspecified access to a managed device via unknown attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en HP Storage Essentials Storage Resource Management (SRM) anterior a 6.0.0. Permiten a atacantes remotos obtener acceso sin especificar a un dispositivo administrados a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storage_essentials_srm_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.3","matchCriteriaId":"7B77D685-65CD-4B42-93AA-7BA410844FFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storage_essentials_srm_standard:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.3","matchCriteriaId":"1751D8EE-4318-49AB-87B4-D29D47518542"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28813","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27643","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019312","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0440","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0216","sourceIdentifier":"secteam@freebsd.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user."},{"lang":"es","value":"La función ptsname en FreeBSD 6.0 hasta el 7.0-PRERELEASE no verifica de forma adecuada que una cierta porción de un nombre de dispositivo está asociado con un pty de un usuario quien está llamando a la función, la cual podría permitir a usuarios locales leer datos del pty desde otro usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*","matchCriteriaId":"CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*","matchCriteriaId":"C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"F4416CBA-76B9-4051-B015-F1BE89517309"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*","matchCriteriaId":"8C64EE9C-18E1-49C6-96DE-7E6F1607C0D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release_p10:*:*:*:*:*:*","matchCriteriaId":"B36B3805-8A85-4357-ABC1-AB22C61E3381"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*","matchCriteriaId":"231B70A8-890A-4790-A33A-64228656BF0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:*","matchCriteriaId":"C4E775BA-6DC1-4006-83A4-D30EA57417FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28498","source":"secteam@freebsd.org"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc","source":"secteam@freebsd.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27284","source":"secteam@freebsd.org"},{"url":"http://www.securitytracker.com/id?1019191","source":"secteam@freebsd.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39667","source":"secteam@freebsd.org"},{"url":"http://secunia.com/advisories/28498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0217","sourceIdentifier":"secteam@freebsd.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script."},{"lang":"es","value":"La secuencia de comandos en FreeBSD 5.0 hasta 7.0-PRERELEASE llama a openpty, el cual crea un pseudo-terminal con permisos: lectura-todos y escritura-todos cuando no está funcionando como root, lo cual permite a usuarios locales leer datos desde el terminal del usuario ejecutando la secuencia de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*","matchCriteriaId":"7752D43D-64AF-474F-BFBB-2625A29C1B88"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"F4416CBA-76B9-4051-B015-F1BE89517309"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28498","source":"secteam@freebsd.org"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc","source":"secteam@freebsd.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27284","source":"secteam@freebsd.org"},{"url":"http://www.securitytracker.com/id?1019191","source":"secteam@freebsd.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39665","source":"secteam@freebsd.org"},{"url":"http://secunia.com/advisories/28498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0218","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/index.html de Merak IceWarp Mail Server permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro message. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merak:icewarp_mail_server:*:*:*:*:*:*:*:*","matchCriteriaId":"FE0CEE12-1FBD-4F75-8D12-0DE29A87CF68"}]}]}],"references":[{"url":"http://secunia.com/advisories/28460","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/27189.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0135","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39564","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/27189.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0219","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter, a different vector than CVE-2007-4920."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en soporte_horizontal_w.php de PHP Webquest 2.6 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id_actividad, un vector diferente que CVE-2007-4920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_webquest:php_webquest:2.6:*:*:*:*:*:*:*","matchCriteriaId":"FA89DBB1-C201-4DAA-AA1B-06B538A4CD37"}]}]}],"references":[{"url":"http://secunia.com/advisories/26821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27192","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39560","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4867","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0220","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control ActiveX WebLaunch.WeblaunchCtl.1 (también conocido como CWebLaunchCtl) en weblaunch.ocx 1.0.0.1 de Gateway Weblaunch permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en (1) el segundo o (2) cuarto argumento al método DoWebLaunch. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gateway:cweblaunchctl_activex_control:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"39AB4190-6D1A-47E0-9258-3A4D46E02939"},{"vulnerable":true,"criteria":"cpe:2.3:a:gateway:weblaunch:*:*:*:*:*:*:*:*","matchCriteriaId":"419B4C4A-31EF-4E1A-AB77-32A46F8D2AFA"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=119984138526735&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/735441","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27193","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0077","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4869","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4982","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=119984138526735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/735441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0221","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\\ (dot dot backslash) in the second argument to the DoWebLaunch method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el control ActiveX WebLaunch.WeblaunchCtl.1 (también conocido como CWebLaunchCtl) en weblaunch.ocx 1.0.0.1 de Gateway Weblaunch permite a atacantes remotos ejecutar programas de su elección mediante secuencias ..\\ (punto punto barra invertida) en el segundo argumento al método DoWebLaunch. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gateway:weblaunch:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"799D7C95-DC55-4D0D-B611-0906940AFCD6"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=119984138526735&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0077","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4869","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=119984138526735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0222","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros no restringida en ajaxfilemanager.php de la extensión (plugin) Wp-FileManager 1.2 para WordPress permite a atacantes remotos subir y ejecutar ficheros PHP de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:filemanager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F9D497A8-8B7F-4341-A014-057C5581A238"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39462","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0223","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file."},{"lang":"es","value":"Un desbordamiento de búfer en JustSystems en la biblioteca JSFC.DLL, como es usado en varios productos de JustSystems como Ichitaro, permite a atacantes remotos ejecutar código arbitrario por medio de un archivo .JTD especialmente diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:11.0:*:*:*:*:*:*:*","matchCriteriaId":"69A39F16-968A-48E9-907F-36133B6775D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:12.0:*:*:*:*:*:*:*","matchCriteriaId":"FDC262B5-28BE-4EC6-89CC-B013A15CB10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:13.0:*:*:*:*:*:*:*","matchCriteriaId":"72EFC88E-B6D1-4B8A-ADDD-5B2EF6523FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:2004:*:*:*:*:*:*:*","matchCriteriaId":"AF08B2B3-8387-4A91-8866-4C9555901D0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:2005:*:*:*:*:*:*:*","matchCriteriaId":"B4125282-F81C-45E4-B5A3-D5685A859455"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:2006:*:*:*:*:*:*:*","matchCriteriaId":"038FB1DB-00F3-4761-A6F4-551360CF7983"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:2007:*:*:*:*:*:*:*","matchCriteriaId":"A56FB56C-D890-423B-8021-7F07D143522F"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro:linux:*:*:*:*:*:*:*","matchCriteriaId":"D42AF9B5-D9C7-435B-8FE7-B2DB39CDACC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro_lite2:*:*:*:*:*:*:*:*","matchCriteriaId":"52A939CD-2BB7-490A-A6DA-F77DB0412BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:justsystem:ichitaro_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"DEE5B0B5-C192-4CF6-B3D0-B2C234DDA1D4"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2308237857/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28275","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107","source":"cve@mitre.org"},{"url":"http://www.justsystems.com/jp/info/pd8001.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27153","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019168","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39501","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2308237857/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.justsystems.com/jp/info/pd8001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0224","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo Newbb_plus 0.92 y anteriores para RunCMS 1.6.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro Client-Ip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A4BE134F-F66D-45D5-93A2-98ED6483EDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C8102E61-6400-498B-B7CA-6A6738034FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD9BDC0-80CC-426E-AF93-36FBB4C3E1A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27152","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39478","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4845","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0225","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un desbordamiento del búfer en la región heap de la memoria en la función rmff_dump_cont en la biblioteca input/libreal/rmff.c en xine-lib versión 1.1.9 y anteriores, permite a atacantes remotos ejecutar código arbitrario por medio del atributo SDP Abstract en una sesión RTSP, relacionada a la función rmff_dump_header y relacionada con la omisión del campo max. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"7A3884A0-FDCE-4AB1-993E-835BD5897A61"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/xinermffhof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205197","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28384","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-12.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=567872","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1472","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:020","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27198","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0163","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428620","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00592.html","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/xinermffhof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=567872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00592.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0226","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) \"input_buffer& operator>>\" in yassl_imp.cpp."},{"lang":"es","value":"Múltiples desbordamientos de búfer en yaSSL 1.7.5 y anteriores, como el utilizado en MySQL y posiblemente otros productos, permite a atacantes remotos ejecutar código de su elección mediante (1) la función ProcessOldClientHello en handshake.cpp o (2) \"input_buffer& operator>>\" en yassl_imp.cpp."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, Red Hat Application Stack v1, and v2, as they are not built with yaSSL support.","lastModified":"2008-01-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yassl:yassl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.5","matchCriteriaId":"0E11538C-D2F9-4D94-8C84-69BDC305D744"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"FB92A552-079E-4A5E-B65E-8A6C956FC7DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9A5CD839-1C18-44F2-836F-97B85572D491"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.36:sp1:*:*:*:*:*:*","matchCriteriaId":"4BA355E8-593E-470C-B565-60CD51B14C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.40:*:*:*:*:*:*:*","matchCriteriaId":"7AF30535-45D3-4845-8B7C-16F7B6D05F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.44:sp1:*:*:*:*:*:*","matchCriteriaId":"87BAAF59-A8F5-46AB-9CAC-E0F76B47D942"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*","matchCriteriaId":"60540719-8329-47E4-820F-8B4E4AA55AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.48:*:*:*:*:*:*:*","matchCriteriaId":"7147148B-BD26-4280-9B3F-1B27551E0CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:sp1:*:*:*:*:*:*","matchCriteriaId":"DC81D22D-72FE-4FEC-8277-A994B184B91C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.56:sp1:*:*:*:*:*:*","matchCriteriaId":"B15A96B9-3982-49DF-A836-1DBC3FD29EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.58:*:*:*:*:*:*:*","matchCriteriaId":"A02DEBB1-65A5-4422-8B75-E8C86EA0B947"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.60:sp1:*:*:*:*:*:*","matchCriteriaId":"56225075-5A65-409E-AFC9-CACA381EAC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.62:*:*:*:*:*:*:*","matchCriteriaId":"AFB11E34-4045-4ACA-AD7D-48B70D13CD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.64:*:*:*:*:*:*:*","matchCriteriaId":"6D2FC440-4D06-4CE2-BE20-A46EB196182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.66:sp1:*:*:*:*:*:*","matchCriteriaId":"455E364E-5010-47D9-8F09-58FE4B15615B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]}],"references":[{"url":"http://bugs.mysql.com/33814","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28324","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28419","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28597","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29443","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://securityreason.com/securityalert/3531","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1478","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:150","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/485810/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/485811/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27140","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-588-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0560/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39429","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39431","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://bugs.mysql.com/33814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://securityreason.com/securityalert/3531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/485810/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/485811/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-588-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0560/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0227","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp."},{"lang":"es","value":"yaSSL 1.7.5 y anteriores, como el utilizado en MySQL y posiblemente otros productos, permite a atacantes remotos provocar una denegación de servicio (caída) mediante un paquete Hello que contiene un valor de tamaño grande, lo cual provoca una sobre-lectura de búfer en la función HASHwithTransform::Update en hash.cpp."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, Red Hat Application Stack v1, and v2, as they are not built with yaSSL support.","lastModified":"2008-01-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yassl:yassl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.5","matchCriteriaId":"0E11538C-D2F9-4D94-8C84-69BDC305D744"}]}]}],"references":[{"url":"http://bugs.mysql.com/33814","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28597","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29443","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3531","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1478","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:150","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485810/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27140","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-588-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0560/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39433","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/33814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485810/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-588-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0560/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0228","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en apply.cgi del enrutador Linksys WRT54GL Wireless-G Broadband con firmware 4.30.9 permite a atacantes remotos llevar a cabo acciones como administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54gl:4.30.9:*:*:*:*:*:*:*","matchCriteriaId":"8608E772-F7D8-47CA-84B7-BE992347D9CD"}]}]}],"references":[{"url":"http://secunia.com/advisories/28364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485853/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486362/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485853/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486362/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0229","sourceIdentifier":"cve@mitre.org","published":"2008-01-10T23:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows remote attackers on the local or wireless network to obtain administrative access."},{"lang":"es","value":"El servicio telnet en el enrutador LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router con firmware 1.00.11 y 1.00.12 no requiere autenticación, lo cual permite a atacantes remotos en la red local o en la red wireless obtener acceso administrativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:level_one:wbr-3460a:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A0240EBC-59D0-4E7D-9FEA-002DABF0B4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:level_one:wbr-3460a:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"5DFB2F27-6E54-41F7-BEA6-D7B8CD84DB20"}]}]}],"references":[{"url":"http://secunia.com/advisories/28397","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3533","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485935/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27183","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0230","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en php121db.php de osDate 2.0.8 y posiblemente en versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro php121dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osdate:osdate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1CECA0C9-6DE6-424B-B50D-5261D1E3AFAE"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0801-exploits/osdata-lfi.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27208","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39567","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4870","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0801-exploits/osdata-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0231","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via \"..\" sequences in the page parameter.  NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en el archivo index.php en las plantillas de páginas web de Tuned Studios: (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, y (7) Music Theme, permiten a atacantes remotos incluir y ejecutar archivos arbitrarios por medio de secuencias \"..\" en el parámetro page. NOTA: esto puede ser aprovechado para la inclusión de archivos remota cuando se ejecuta en algunos entornos PHP 5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:classic_theme:*:*:*:*:*:*:*:*","matchCriteriaId":"B039A91A-CD08-4797-BCC8-26CCA314B3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:endless:*:*:*:*:*:*:*:*","matchCriteriaId":"14A4ADC9-9FF0-4FD8-A0EB-D9A00EC4D489"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:freeze_theme:*:*:*:*:*:*:*:*","matchCriteriaId":"899816A8-C7E8-41E3-B915-6560DFFC8640"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:lonely_maple:*:*:*:*:*:*:*:*","matchCriteriaId":"5FD526F0-FA78-45E9-AB9A-8D14B510D204"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:music_theme:*:*:*:*:*:*:*:*","matchCriteriaId":"46B54A5E-D11C-4ACD-AB76-37B7D77B13E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:orange_cutout:*:*:*:*:*:*:*:*","matchCriteriaId":"E042281B-A23C-4D1C-8988-08AC480F499F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuned_studios:subwoofer:*:*:*:*:*:*:*:*","matchCriteriaId":"93467A28-7A77-468F-B625-6F6383656728"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3532","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485991/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27196","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39555","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4876","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485991/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0232","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T00:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Zero CMS 1.0 Alpha permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro id a index.php, o (2) los parámetros f o t a forums/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zero_cms:zero_cms:1.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"E05AC519-6859-4308-BEF1-23D8666472A2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27186","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39530","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4864","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0233","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg."},{"lang":"es","value":"Vulnerabilidad de subida de fichero no restringida en Zero CMS 1.0 Alpha y anteriores permite a atacantes remotos evitar las restricciones de acceso planeadas y ejecutar ficheros de su elección subiendo un fichero de avatar con tipo de contenido (Content-Type) como image/jpeg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zero_cms:zero_cms:1.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"E05AC519-6859-4308-BEF1-23D8666472A2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4864","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0234","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message."},{"lang":"es","value":"Un desbordamiento de búfer en Apple Quicktime Player versión 7.3.1.70 y otras versiones anteriores a 7.4.1, cuando el tunelado de RTSP está habilitado, permite a atacantes remotos ejecutar código arbitrario por medio de una respuesta Reason-Phrase larga a una petición rtsp://, como es demostrado usando un mensaje de error 404."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/112179","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486091/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486114/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486161/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486174/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486238/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486241/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486268/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27225","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019178","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39601","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4885","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4906","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Feb/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/112179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486091/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486114/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486174/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486238/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486241/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486268/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0235","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method."},{"lang":"es","value":"El control ActiveX Microsoft VFP_OLE_Server permite a atacantes remotos ejecutar código de su elección invocando el método foxcommand."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:vfp_ole_server_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"B8ED2E92-0B34-48C8-9EE0-1F2A9F8E2F38"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0801-exploits/msvfpole-exec.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28417","source":"cve@mitre.org"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_rNowA1916DKFNUF48NyS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27199","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39559","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4875","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0801-exploits/msvfpole-exec.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_rNowA1916DKFNUF48NyS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0236","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method."},{"lang":"es","value":"Un control ActiveX para Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) permite a atacantes remotos ejecutar comandos de su elección invocando el método DoCmd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:6.0:*:*:*:*:*:*:*","matchCriteriaId":"8936D267-41DF-4310-A990-5883787728E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/28417","source":"cve@mitre.org"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27205","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39558","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0237","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method."},{"lang":"es","value":"El control ActiveX Microsoft Rich Textbox (RICHTX32.OCX) 6.1.97.82 permite a atacantes remotos ejecutar comandos de su elección invocando el método inseguro SaveFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:rich_textbox_control:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B485FE00-9C40-46C4-AA30-6AB679C77525"}]}]}],"references":[{"url":"http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27201","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39557","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4874","source":"cve@mitre.org"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0238","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T21:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Please see the following link for more information regarding the exploit:\r\n\r\nhttp://aluigi.altervista.org/adv/xinermffhof-adv.txt","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples desbordamientos de la pila dinámica (heap) en la función rmff_dump_cont contenida en el fichero input/libreal/rmff.c de xine-lib 1.1.9, permite que atacantes remotos ejecuten código arbitrario a través del SDP (1) Title, (2) Author, o (3) el atributo Copyright, relacionado con la función rmff_dump_header, vectores diferentes a la CVE-2008-0225. NOTA: se desconoce la procedencia de esta información; los detalles se han obtenido sólamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"7A3884A0-FDCE-4AB1-993E-835BD5897A61"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205197","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28384","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-12.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:020","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=205197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0239","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Identity Manager 6.0 SP1 hasta SP3, 7.0, y 7.1 permiten a atacantes remotos inyectar, a su elección, códigos web o HTML, usando (1) los parámetros cntry o lang pasados a /idm/login.jsp, (2) el parámetro resultsForm pasado a /idm/account/findForSelect.jsp, o (3) el parámetro activeControl pasado a /idm/user/main.jsp.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/28356","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3535","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-06.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-07.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-08.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-09.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486076/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019175","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0089","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39580","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39581","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39582","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-06.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-07.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-08.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-09.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486076/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0240","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka \"frame injection.\""},{"lang":"es","value":"El fichero /idm/help/index.jsp en Sun Java System Identity Manager 6.0 SP1 hasta SP3, 7.0, y 7.1 permite que atacantes remotos inyecten marcos desde cualquier sitio web, y lleven a cabo ataques de phising a través del parámetro helpUrl, también conocido como \"inyección de marco\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/28356","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3535","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-10.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/486076/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27214","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0089","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39586","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-10.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/486076/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0241","sourceIdentifier":"cve@mitre.org","published":"2008-01-11T22:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter."},{"lang":"es","value":"Una vulnerabilidad de redireccionamiento abierto en el archivo /idm/user/login.jsp en Sun Java System Identity Manager versión 6.0 SP1 hasta SP3, versiones 7.0 y 7.1, permite a atacantes remotos redireccionar a los usuarios a sitios web arbitrarios y conducir ataques de phishing por medio de una URL en el parámetro nextPage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/28356","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3535","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-12.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/486076/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27214","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39590","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR07-12.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/486076/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0242","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions."},{"lang":"es","value":"Vulnerabilidad no especificada en libdevinfo de Sun Solaris 10, permite que usuario locales puedan acceder a ficheros y que obtengan privilegios, usando vectores desconocidos, relacionados con los permisos del dispositivo de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28493","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103165-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200641-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27253","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019187","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0131","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39629","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5211","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103165-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200641-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0243","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Lotus Domino 7.0.2, en versiones anteriores a la Fix Pack 3, permite que atacantes remotos provoquen una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8A7AF44-125F-4760-8370-34B7B4CB8753"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"69495B18-39A4-443F-A724-F713C4DD14A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp1:*:*:*:*:*","matchCriteriaId":"4A7F62D7-8225-4B84-A3CE-B91616B5AAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp2:*:*:*:*:*","matchCriteriaId":"82718D37-02FA-4EA0-ABB6-167B5A0A2F0B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28411","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011539","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27215","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0086","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39588","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0244","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via \"&&\" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe."},{"lang":"es","value":"SAP MaxDB 7.6.03 build 007 y versiones anteriores, permite que atacantes remotos ejecuten comandos arbitrarios usando \"$$\", además de otros metacarateres del intéprete de comandos (shell) en exec_sdbinfo, y de otros comandos no especificados, que se ejecutan cuando MaxDB invoca a cons.exe"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:maxdb:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.3_build_007","matchCriteriaId":"C15B96CF-B854-4A87-B702-3784333F9D1F"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/sapone-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486039/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27206","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019171","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0104","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39573","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4877","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/sapone-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486039/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0245","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action."},{"lang":"es","value":"admin.php in UploadImage 1.0 no comprueba la contraseña original antes de realizar un cambio en la nueva contraseña, lo cual permite que atacantes remotos consigan privilegios de administración, usando el parámetro pass sin contraseña alguna (Set Password)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uploadscript:uploadimage:1.0:*:*:*:*:*:*:*","matchCriteriaId":"287FA391-5E0C-47DF-BFAA-E1C75836A1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:uploadscript:uploadscript:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B4A3A60-D613-4A1C-BC38-5BE9174813F2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39571","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0246","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action."},{"lang":"es","value":"El fichero admin.php de UploadScript 1.0, no comprueba  la contrasña original antes de realizar un cambio en la nueva contraseña, lo que permite a atacantes remotos conseguir privilegios de administración usando el parámetro pass en una accion sin contraseña (Set Password)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uploadscript:uploadimage:1.0:*:*:*:*:*:*:*","matchCriteriaId":"287FA391-5E0C-47DF-BFAA-E1C75836A1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:uploadscript:uploadscript:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B4A3A60-D613-4A1C-BC38-5BE9174813F2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39570","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0247","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el servicio Express Backup Server (archivo dsmsvc.exe) en IBM Tivoli Storage Manager (TSM) Express versiones 5.3 anteriores a 5.3.7.3, permite a atacantes remotos ejecutar código arbitrario por medio de un paquete con un valor de longitud largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"294B0912-280C-45AA-822F-911FEB96986B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28440","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21291536","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486270/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27235","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019182","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-001.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21291536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486270/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0248","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method."},{"lang":"es","value":"Desbordamiento de buffer en un control ActiveX de ccpm_0237.dll, en StreamAudio ChainCast ProxyManager. Permite que atacantes remotos ejecuten código arbitrario pasando un argumento URL largo al método InternalTuneIn."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:streamaudio:chaincast_proxymanager_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"27C8916E-4066-4FFD-9846-7AA8B4AC7AB4"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059572.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28461","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27247","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39622","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4894","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059572.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0249","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails.  NOTE: this might only be an issue in limited environments."},{"lang":"es","value":"PHP Webquest 2.6 permite que atacantes remotos consigan los credenciales de la base de datos a través de una petición a admin/backup_phpwebquest.php, que filtra la información de credenciales en un mensaje de error si la llamada a /usr/bin/mysqldump falla. NOTA: puede que éste problema sólo se produzca en escenarios limitados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebquest:phpwebquest:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FD6FB00-BA7A-4F42-B70B-688F5E1B04EA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27202","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39572","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4872","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0250","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line."},{"lang":"es","value":"Desbordamiento de buffer en Microsoft Visual InterDev 6.0 (SP6). Permite que atacantes con ayuda del usuario ejecuten código arbitrario a través de un fichero Studio Solution (.SLN) con una linea larga de proyecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_interdev:6.0:sp6:*:*:*:*:*:*","matchCriteriaId":"38071390-7466-4136-BF26-21835A1E8C41"}]}]}],"references":[{"url":"http://secunia.com/advisories/28482","source":"cve@mitre.org"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_PoEOrFM8py30PXrDF7IY.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27250","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41826","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shinnai.altervista.org/exploits/txt/TXT_PoEOrFM8py30PXrDF7IY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0251","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ausencia de restricciones en las subidas de archivos, en PhotoPost vBGallery, en versiones anteriores a la 2.4.2, permite que atacantes remotos puedan subir y ejecutar fichero de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_vbgallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"77162F86-26AF-4039-AD7A-191073255C11"}]}]}],"references":[{"url":"http://secunia.com/advisories/28430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.photopost.com/forum/showthread.php?t=134909","source":"cve@mitre.org"},{"url":"http://www.photopost.com/forum/showthread.php?t=134910","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39621","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.photopost.com/forum/showthread.php?t=134909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.photopost.com/forum/showthread.php?t=134910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0252","sourceIdentifier":"cve@mitre.org","published":"2008-01-12T02:46:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie."},{"lang":"es","value":"Vulnerabilidad de cruce de directorios en la función _get_file_path de (1) lib/sessions.py en  CherryPy, versiones 3.0.x hasta 3.0.2, (2) filter/sessionfilter.py en CherryPy 2.1, y (3) filter/sessionfilter.py en CherryPy 2.x, permite que atacantes remotos creen o eliminen cualquier fichero, y posiblemente, también puedan leer y escribir trozos de cualquier linea, a través de un id de sesión contenido en una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cherrypy:cherrypy:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"EF7FEFD4-0529-4FB6-A2FB-A547570B2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherrypy:cherrypy:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"DD1D10BF-3139-47DE-B745-F0FBECFCD39F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28353","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28611","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28620","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28769","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-11.xml","source":"cve@mitre.org"},{"url":"http://www.cherrypy.org/changeset/1774","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.cherrypy.org/changeset/1775","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.cherrypy.org/changeset/1776","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cherrypy.org/ticket/744","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487001/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27181","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0039","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=204829","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2127","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00240.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00297.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cherrypy.org/changeset/1774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.cherrypy.org/changeset/1775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.cherrypy.org/changeset/1776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cherrypy.org/ticket/744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487001/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=204829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00297.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0253","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en full_text.php en Binn SBuilder permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro nid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:binn:sbuilder:*:*:*:*:*:*:*:*","matchCriteriaId":"921D1747-3720-4183-80F6-A0E846F4BD5C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/486265/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27264","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39634","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4904","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486265/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0254","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en TutorialCMS (también conocido como Photoshop Tutorials) 1.02, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro userName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wavelink_media:tutorialcms:1.02:*:*:*:*:*:*:*","matchCriteriaId":"1A685FBA-43C3-4324-8009-F3E72F1AC434"}]}]}],"references":[{"url":"http://secunia.com/advisories/28446","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27263","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39642","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0255","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en archive.php de iGaming 1.5, 1.3.1 y anteriores, permite que atacantes remotos ejecuten comandos SQL arbitrarios usando el parámetro section."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igamingcms:igaming_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1","matchCriteriaId":"A7C391D9-1EE6-4513-9A06-F8D41EED44FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igamingcms:igaming_cms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B868D4FA-2B52-4BC7-9787-1342D7851E70"}]}]}],"references":[{"url":"http://secunia.com/advisories/28426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27230","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39598","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0256","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp and the (2) ricerca parameter to (d) thumbricerca.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Matteo Binda ASP Photo Gallery 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1)id en (a) Imgbig.asp, (b) thumb.asp, y (c) thumbricerca.asp y el parámetro (2) ricerca en (d) thumbricerca.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_binda:asp_photo_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"28712B75-39CA-4A91-B087-CB395C7FF84A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28447","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27262","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39646","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0257","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en search.pl en Dansie Search Engine 2.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro keywordsl. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dansie:search_engine:2.7:*:*:*:*:*:*:*","matchCriteriaId":"66951D5C-44EE-41FA-801B-741C126B166E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28465","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0258","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php en PHP Running Management (phpRunMan) anterior a 1.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_running_management:phprunman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"CD822707-7716-492C-A27A-AC6475958197"}]}]}],"references":[{"url":"http://secunia.com/advisories/28474","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=568237&group_id=103505","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1204199&group_id=103505&atid=634992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27268","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=568237&group_id=103505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1204199&group_id=103505&atid=634992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0259","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) thumbcat and (2) thumb parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en _mg/php/mg_thumbs.php en minimal Gallery 0.8 permite a atacantes remotos leer archivos de su elección a través de la secuencia .. (punto punto) en los parámetros (1) thumbcat y (2) thumb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minimal_design:minimal_gallery:0.8:*:*:*:*:*:*:*","matchCriteriaId":"61631A0D-4DA0-4ECD-A6F7-678B5437BF01"}]}]}],"references":[{"url":"http://secunia.com/advisories/28391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27265","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39649","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4902","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0260","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, which calls the phpinfo function."},{"lang":"es","value":"minimal Gallery 0.8 permite a atacantes remotos obtener información de la configuración a través de una respuesta directa en php_info.php, el cual llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minimal_design:minimal_gallery:0.8:*:*:*:*:*:*:*","matchCriteriaId":"61631A0D-4DA0-4ECD-A6F7-678B5437BF01"}]}]}],"references":[{"url":"http://secunia.com/advisories/28391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4902","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0261","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service (query flood) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente y módulo search en Mambo 4.5.x y 4.6.x permite a atacantes remotos provocar denegación de servicio (inundación de consultas) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source:*:*:*:*:*:*:*:*","matchCriteriaId":"686EFBC8-B9CA-4ECB-94AF-48B1CE8EE8EC"}]}]}],"references":[{"url":"http://forum.mambo-foundation.org/showthread.php?t=9651","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28392","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27239","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39613","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=9651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0262","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en includes/articleblock.php en Agares PhpAutoVideo 2.21 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro articlecat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:phpautovideo:2.21:*:*:*:*:*:*:*","matchCriteriaId":"8114BC14-9AAF-4CCB-BC3A-9E4E0D8DCDAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27258","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39641","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4898","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0263","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to cause a denial of service (port exhaustion) via unspecified vectors."},{"lang":"es","value":"El módulo SIP en Ingate Firewall anterior a 4.6.1 y SIParator anterior a 4.6.1 no reutilizar los puertos de media SIP en llamadas de contro sin especificar y enviar solamente escenarios de multitud, lo cual permite a atacantes remotos provocar denegación de servicio (consumo de puerto) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ingate:firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"81883DB2-24CB-46A7-A692-DE06CE379713"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingate:ingate_siparator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"A0581CD4-834D-46DC-A80F-C063C9682577"}]}]}],"references":[{"url":"http://osvdb.org/40365","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ingate.com/relnote-461.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27222","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019176","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019177","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0108","source":"cve@mitre.org"},{"url":"http://osvdb.org/40365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ingate.com/relnote-461.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0264","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images are permitted in node bodies, allows remote authenticated users to execute arbitrary code via unspecified vectors involving creation of a node."},{"lang":"es","value":"Vulnerabilidad no especificada en los Meta Tags (también conocidos como Nodewords) módulos 5.x-1.6 para Drupal, cuando las imágenes se permiten en lo cuerpos del nodo, permite a usuarios remotos validados ejecutar código de su elección a través de vectores no especificados afectando a la creación de un nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:meta_tags_module:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.6","matchCriteriaId":"D789F023-2A6F-4365-B6BC-42CBA77C2F1F"}]}]}],"references":[{"url":"http://drupal.org/node/209759","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0129","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39638","source":"cve@mitre.org"},{"url":"http://drupal.org/node/209759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0265","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, and (5) list_asm.jsp in tmui/Control/jspmap/tmui/system/log/; and (6) list.jsp in certain directories."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la función Search en el interfaz de gestión web en F5 BIG-IP 9.4.3 permite a atacantes remotos inyectar secuencias de comandos web de su elección o a través de HTML el parámetro SearchString en (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, y (5) list_asm.jsp en tmui/Control/jspmap/tmui/system/log/; y (6) list.jsp en ciertos directorios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:f5:tmos:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"238F0964-D138-4673-9747-C73E8D84E367"}]}]}],"references":[{"url":"http://secunia.com/advisories/28505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486217/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27272","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019190","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0181","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486217/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0266","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks.  NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en admin.php en eTicket 1.5.5.2 permite a atacantes remotos cambiar la contraseña de administrador y posiblemente realizar otras tareas administrativas. NOTA: \t\r\nCualquiera de las viejas contraseñas deben ser conocidas, o el atacante debe aprovechar una vulnerabilidad de inyección de SQL.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"58F416E7-3F9A-4830-BD13-C6A7D45681BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485835/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39490","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485835/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0267","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (4) msg and (5) password parameters to admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en eTicket 1.5.5.2 permite a usuarior remotos validados ejecutar comandos SQL de su elección a través de los parámetros (1) status, (2) sort, y (3) way en search.php; y permite a administradores remotos validados ejecutar comandos SQL de su elección a través de los parámetros (4) msg y (5) password en admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"58F416E7-3F9A-4830-BD13-C6A7D45681BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485835/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39487","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485835/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0268","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en view.php en eTicket 1.5.5.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámeto s."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"58F416E7-3F9A-4830-BD13-C6A7D45681BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485835/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485835/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0269","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la función dotoprocs en Sun Solaris 10 permite a usuarios locales provocar denegación de servicio (panic) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28491","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103188-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201513-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27260","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0130","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39631","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103188-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201513-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0270","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en   TaskFreak! 0.6.1 y anteriores permite a usuarios remotos validados ejecutar comandos SQL de su elección a través del parámetro sContext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:taskfreak:taskfreak:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.1","matchCriteriaId":"8269D042-6407-4DDA-8683-B6D575B900D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28448","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27257","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39645","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4899","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0271","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for Drupal, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete custom editor interfaces."},{"lang":"es","value":"El editor de supresión de forma en BUEditor 4.7.x anterior a 4.7.x-1.0 y 5.x anterior a 5.x-1.1, un módulo para Drupal, no sigo el modelo de presentación API, el cual permite a atacantes remotos llevar a cabo ataques de falsificación de petición en sitios cruzados (CSRF) y borrar interfaces de editor de cliente.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:bueditor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7.x-1.0","matchCriteriaId":"05190EE2-474F-450F-B293-3C42D7FE48F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:bueditor:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0","matchCriteriaId":"63866FD8-95C8-4711-ADD2-5CB845DEB161"}]}]}],"references":[{"url":"http://drupal.org/node/208534","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28418","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39614","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0272","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo aggregator en Drupal 4.7.x anterior a 4.7.11 y 5.x anterior a 5.6 permite a atacantes remotos borrar campos desde un alimentador con privilegios de usuario.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E0CA1165-C304-48FA-9676-08EC5284C847"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C008BB7D-05AB-47B3-B020-C5C39B0FD03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.2.0_rc:*:*:*:*:*:*:*","matchCriteriaId":"94444F9F-858A-4040-BE97-8A92B84DA7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4:*:*:*:*:*:*:*","matchCriteriaId":"E51CCF47-FC19-44A1-A843-034227AC0ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA805CAF-A678-43A9-932D-EE35DBCCA793"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"18331C39-0ACE-4651-9D9F-1533AAD7C58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"439C861D-7612-4E6A-8D9D-F04043DA9298"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"82317650-F136-446D-904D-354B4D26E91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"06A1ACAF-A468-43F0-9FAD-FA3D48363843"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A68656D9-3EA0-4749-AF1B-2F9B485A02ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F6946291-0F27-4666-95C8-E744800D3EFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"79713A65-5A3A-4682-8A49-614174AB7C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"4E42FFA3-6FAE-4764-AF83-F544E6BA6CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7456EEFF-15B8-4A75-B10E-AF936B4AD347"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*","matchCriteriaId":"46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FC5ACB7E-0CEB-4417-839A-8B06615FC981"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"35BD7D35-AA9D-4589-A6BC-6D34219B7128"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"611B9D43-CE88-4451-A27C-7F6F24016B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AD1A7208-6273-4CC6-AB7B-DA855EEF2729"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC016B5-A4C2-4A78-B830-C041C8BAAD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"EB94DAC5-F0E1-4427-98E4-A5684BF3F408"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.10:*:*:*:*:*:*:*","matchCriteriaId":"AAB80759-1441-46B0-937B-848EF327CB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.11:*:*:*:*:*:*:*","matchCriteriaId":"6F6F8EE5-CECC-4B35-AAD4-8152DBF51605"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*","matchCriteriaId":"FFE9A8A9-19D4-4C50-A4B5-2EFD8B05BAE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"79F8FEEF-6857-4DC8-9D0D-76D801D0E914"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"61EC4ECE-6719-4C54-B150-017ACB32E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"1D5368BD-60AC-49E7-80D4-A5B317319A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"DC3B1D3A-B449-4F4A-9405-4B5FC9041974"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"228039D8-A41B-4D04-8084-40E13941659F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"550F4476-9749-4DE8-8ACF-C17FD4D82466"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"B281B2AC-1F20-4330-826B-B733BD6A88D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.8:*:*:*:*:*:*:*","matchCriteriaId":"D17799AB-2A2F-41FE-92DF-0AEDEF63CB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9E563D8F-2F1F-4B81-99F3-67879D658367"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.10:*:*:*:*:*:*:*","matchCriteriaId":"FA0B551D-175A-4CE6-A955-1035DBF933FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7_rev_1.2:*:*:*:*:*:*:*","matchCriteriaId":"8D91A74D-6AD6-42A7-B7CF-EC06D47DE465"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7_rev_1.15:*:*:*:*:*:*:*","matchCriteriaId":"88EB827F-99C1-429D-AABA-F7CD94CF2835"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"}]}]}],"references":[{"url":"http://drupal.org/node/208562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27238","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=6878","source":"cve@mitre.org"},{"url":"http://www.vbdrupal.org/forum/showthread.php?t=1349","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0127","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0134","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39617","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=6878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbdrupal.org/forum/showthread.php?t=1349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0273","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remote attackers to conduct cross-site scripting (XSS) attacks via invalid UTF-8 byte sequences, which are not processed as UTF-8 by Drupal's HTML filtering, but are processed as UTF-8 by Internet Explorer, effectively removing characters from the document and defeating the HTML protection mechanism."},{"lang":"es","value":"Conflicto de interpretación en Drupal 4.7.x anterior a 4.7.11 y 5.x anterior a 5.6, cuando se utiliza Internet Explorer 6, permite a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados a través de secuencias de bytes UTF-8 no válidas, las cuales no son procesadas como UTF-8 por el filtro HTML de Drupal, pero son procesadas por UTF-8 por el Internet Explorer, eliminando los caracteres del documento HTML y derrotando el mecanismo de protección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E0CA1165-C304-48FA-9676-08EC5284C847"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C008BB7D-05AB-47B3-B020-C5C39B0FD03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.2.0_rc:*:*:*:*:*:*:*","matchCriteriaId":"94444F9F-858A-4040-BE97-8A92B84DA7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4:*:*:*:*:*:*:*","matchCriteriaId":"E51CCF47-FC19-44A1-A843-034227AC0ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA805CAF-A678-43A9-932D-EE35DBCCA793"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"18331C39-0ACE-4651-9D9F-1533AAD7C58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"439C861D-7612-4E6A-8D9D-F04043DA9298"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"82317650-F136-446D-904D-354B4D26E91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"06A1ACAF-A468-43F0-9FAD-FA3D48363843"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A68656D9-3EA0-4749-AF1B-2F9B485A02ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F6946291-0F27-4666-95C8-E744800D3EFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"79713A65-5A3A-4682-8A49-614174AB7C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"4E42FFA3-6FAE-4764-AF83-F544E6BA6CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7456EEFF-15B8-4A75-B10E-AF936B4AD347"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*","matchCriteriaId":"46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FC5ACB7E-0CEB-4417-839A-8B06615FC981"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"35BD7D35-AA9D-4589-A6BC-6D34219B7128"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"611B9D43-CE88-4451-A27C-7F6F24016B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AD1A7208-6273-4CC6-AB7B-DA855EEF2729"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC016B5-A4C2-4A78-B830-C041C8BAAD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"EB94DAC5-F0E1-4427-98E4-A5684BF3F408"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.10:*:*:*:*:*:*:*","matchCriteriaId":"AAB80759-1441-46B0-937B-848EF327CB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.11:*:*:*:*:*:*:*","matchCriteriaId":"6F6F8EE5-CECC-4B35-AAD4-8152DBF51605"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*","matchCriteriaId":"FFE9A8A9-19D4-4C50-A4B5-2EFD8B05BAE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"79F8FEEF-6857-4DC8-9D0D-76D801D0E914"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"61EC4ECE-6719-4C54-B150-017ACB32E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"1D5368BD-60AC-49E7-80D4-A5B317319A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"DC3B1D3A-B449-4F4A-9405-4B5FC9041974"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"228039D8-A41B-4D04-8084-40E13941659F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"550F4476-9749-4DE8-8ACF-C17FD4D82466"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"B281B2AC-1F20-4330-826B-B733BD6A88D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.8:*:*:*:*:*:*:*","matchCriteriaId":"D17799AB-2A2F-41FE-92DF-0AEDEF63CB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9E563D8F-2F1F-4B81-99F3-67879D658367"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.10:*:*:*:*:*:*:*","matchCriteriaId":"FA0B551D-175A-4CE6-A955-1035DBF933FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7_rev_1.2:*:*:*:*:*:*:*","matchCriteriaId":"8D91A74D-6AD6-42A7-B7CF-EC06D47DE465"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7_rev_1.15:*:*:*:*:*:*:*","matchCriteriaId":"88EB827F-99C1-429D-AABA-F7CD94CF2835"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"}]}]}],"references":[{"url":"http://drupal.org/node/208564","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28422","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27238","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=6878","source":"cve@mitre.org"},{"url":"http://www.vbdrupal.org/forum/showthread.php?t=1349","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0127","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0134","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39619","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=6878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbdrupal.org/forum/showthread.php?t=1349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0274","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Drupal 4.7.x y 5.x, cuando ciertas protecciones .htaccess son desactivadas, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de enlaces manipulados afectando a los archivos del tema .tpl.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*","matchCriteriaId":"FFE9A8A9-19D4-4C50-A4B5-2EFD8B05BAE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"}]}]}],"references":[{"url":"http://drupal.org/node/208565","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28422","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27238","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=6878","source":"cve@mitre.org"},{"url":"http://www.vbdrupal.org/forum/showthread.php?t=1349","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0127","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0134","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39605","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=6878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbdrupal.org/forum/showthread.php?t=1349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0275","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content."},{"lang":"es","value":"El Atom 4.7 anterior a 4.7.x-1.0 y 5.x anterior al módulo 5.x-1.0 para Drupal no maneja de forma adecuada los permisos para los nodos (1) titles, (2) teasers, y (3) bodies, el cual podría permitir a atacantes remotos ganar privilegios de acceso en el contenido sindicado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:atom_module:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"32212177-C230-4E43-BEAD-57215D5EB5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:atom_module:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C63555FB-6BAE-4280-BF7B-BA4DA734DE0C"}]}]}],"references":[{"url":"http://drupal.org/node/208527","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39607","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0276","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en el módulo Devel anterior a 5.x-0.1 para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la variable site, Relacionado con la falta de escape de la variable tabla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E0CA1165-C304-48FA-9676-08EC5284C847"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C008BB7D-05AB-47B3-B020-C5C39B0FD03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.2.0_rc:*:*:*:*:*:*:*","matchCriteriaId":"94444F9F-858A-4040-BE97-8A92B84DA7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4:*:*:*:*:*:*:*","matchCriteriaId":"E51CCF47-FC19-44A1-A843-034227AC0ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA805CAF-A678-43A9-932D-EE35DBCCA793"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"18331C39-0ACE-4651-9D9F-1533AAD7C58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"439C861D-7612-4E6A-8D9D-F04043DA9298"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"82317650-F136-446D-904D-354B4D26E91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"06A1ACAF-A468-43F0-9FAD-FA3D48363843"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A68656D9-3EA0-4749-AF1B-2F9B485A02ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F6946291-0F27-4666-95C8-E744800D3EFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"79713A65-5A3A-4682-8A49-614174AB7C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"4E42FFA3-6FAE-4764-AF83-F544E6BA6CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7456EEFF-15B8-4A75-B10E-AF936B4AD347"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*","matchCriteriaId":"46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FC5ACB7E-0CEB-4417-839A-8B06615FC981"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"35BD7D35-AA9D-4589-A6BC-6D34219B7128"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"611B9D43-CE88-4451-A27C-7F6F24016B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AD1A7208-6273-4CC6-AB7B-DA855EEF2729"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"83457EB5-BA6B-4ECB-8CB2-A10989B3A9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"49A92C9C-18DD-4FF7-A95D-72EE72C83C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC016B5-A4C2-4A78-B830-C041C8BAAD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"35B99C22-9A8C-43F3-9AD8-D901D07D5FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"EB94DAC5-F0E1-4427-98E4-A5684BF3F408"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.10:*:*:*:*:*:*:*","matchCriteriaId":"AAB80759-1441-46B0-937B-848EF327CB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.6.11:*:*:*:*:*:*:*","matchCriteriaId":"6F6F8EE5-CECC-4B35-AAD4-8152DBF51605"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*","matchCriteriaId":"FFE9A8A9-19D4-4C50-A4B5-2EFD8B05BAE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"79F8FEEF-6857-4DC8-9D0D-76D801D0E914"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"61EC4ECE-6719-4C54-B150-017ACB32E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"1D5368BD-60AC-49E7-80D4-A5B317319A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"DC3B1D3A-B449-4F4A-9405-4B5FC9041974"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"228039D8-A41B-4D04-8084-40E13941659F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"550F4476-9749-4DE8-8ACF-C17FD4D82466"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"B281B2AC-1F20-4330-826B-B733BD6A88D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.8:*:*:*:*:*:*:*","matchCriteriaId":"D17799AB-2A2F-41FE-92DF-0AEDEF63CB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9E563D8F-2F1F-4B81-99F3-67879D658367"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7.10:*:*:*:*:*:*:*","matchCriteriaId":"FA0B551D-175A-4CE6-A955-1035DBF933FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7_rev_1.2:*:*:*:*:*:*:*","matchCriteriaId":"8D91A74D-6AD6-42A7-B7CF-EC06D47DE465"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.7_rev_1.15:*:*:*:*:*:*:*","matchCriteriaId":"88EB827F-99C1-429D-AABA-F7CD94CF2835"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"}]}]}],"references":[{"url":"http://drupal.org/node/208524","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39606","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0277","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo Fileshare para Drupal permite a usuarios remotos validados con privelegios de creación de nodos ejecutar código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:fileshare_module:4.7.x:*:*:*:*:*:*:*","matchCriteriaId":"0B73A33B-1A54-4860-846B-5B39D7811B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:fileshare_module:5.x:*:*:*:*:*:*:*","matchCriteriaId":"6D352CA7-1C11-41E7-B0C9-C68BA164FCDB"}]}]}],"references":[{"url":"http://drupal.org/node/208537","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39609","source":"cve@mitre.org"},{"url":"http://drupal.org/node/208537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0278","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a sm_window action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en X7 Chat 2.0.5 y posiblemente anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro day en una función sm_window."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"84A51FBD-DEEE-4D1B-951D-7D1E8C4FE956"}]}]}],"references":[{"url":"http://secunia.com/advisories/28503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39656","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0279","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitrary SQL commands via the topic parameter.  NOTE: the categorie parameter might also be affected."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en liretopic.php en Xforum 1.4 y posiblemente otros atacantes remotos ejecutar comandos SQL de su elección a través del parámetro topic. NOTA: la categoría parámetro podría verse afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xforum:xforum:1.4:*:*:*:*:*:*:*","matchCriteriaId":"99A84180-6D54-4E08-857E-DEE7BECFFB99"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27278","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39654","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4908","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0280","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the (1) a or (2) cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MTCMS 2.0 y posiblemente anteriores versiones permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro (1) a o (2) cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mtcms:mtcms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0C7AFF8F-FE8E-4B07-8D36-CFB4329540CC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28428","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3544","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486090/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27224","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39597","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486090/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0281","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en liste.php en ID-Commerce 2.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro idFamille."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id-commerce:id-commerce:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"8ECFE2EE-7932-4774-8A43-DFC66C784EA9"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059533.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059537.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059538.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27220","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39594","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059533.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059538.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0282","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo welcome/inscription.php de DomPHP 0.81 y versiones anteriores, permite que atacantes remotos ejecuten comandos SQL arbitrarios usando el parámetro mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:domphp:domphp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"39BB04D7-3A93-4768-9762-F49AC5BCD290"}]}]}],"references":[{"url":"http://secunia.com/advisories/28393","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39593","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4880","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0283","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en /aides/index.php en DomPHP 0.81 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:domphp:domphp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"39BB04D7-3A93-4768-9762-F49AC5BCD290"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27226","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0284","sourceIdentifier":"cve@mitre.org","published":"2008-01-15T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Simple Machines Forum (SMF) 1.1.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de argumentos (1) Itemid o (2) topic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_smf:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"A337EDD6-AF80-4AC5-BEC5-614073EE337F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3540","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486074/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39585","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486074/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0285","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference."},{"lang":"es","value":"ngIRCd 0.10.x anterior a 0.10.4 y 0.11.0 anterior a 0.11.0-pre2 permite a atacantes remotos provocar denegación de servicio (caida) a través de un mensaje manipulado IRC PART, el cual dispara una referencía no valída."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ngircd:ngircd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.3","matchCriteriaId":"95B6B769-3217-4185-B0EC-B6F543B2AB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ngircd:ngircd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.0-pre1","matchCriteriaId":"593E3E7C-15F2-4458-9139-CC4FC9AB439C"}]}]}],"references":[{"url":"http://arthur.barton.de/cgi-bin/viewcvs.cgi/ngircd/ngircd/src/ngircd/irc-channel.c?r1=1.40&r2=1.41&diff_format=h","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204834","source":"cve@mitre.org"},{"url":"http://ngircd.barton.de/doc/ChangeLog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28673","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200801-13.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27318","source":"cve@mitre.org"},{"url":"http://arthur.barton.de/cgi-bin/viewcvs.cgi/ngircd/ngircd/src/ngircd/irc-channel.c?r1=1.40&r2=1.41&diff_format=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=204834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ngircd.barton.de/doc/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200801-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0286","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) password fields."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/login.php en Article Dashboard permite a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) user o (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:article_dashboard:article_dashboard:*:*:*:*:*:*:*:*","matchCriteriaId":"E53D474B-0791-43B4-8FF3-7EE04548F301"}]}]}],"references":[{"url":"http://secunia.com/advisories/28495","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3546","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486323/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486646/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27286","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39657","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486323/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486646/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0287","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php and (2) checkout.php."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en VisionBurst vcart versión 3.3.2, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro abs_path en los archivos (1) index.php y (2) checkout.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visionburst:vcart:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D372D6F2-3169-42A3-8DDE-C82E6C7E8DFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/28424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27231","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39616","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0288","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands via the id, which is not properly handled in (1) classes/IADomain.php, (2) classes/IACollection.php, and (3) classes/IAUser.php, as demonstrated via the id parameter in a collection.imageview action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ImageAlbum 2.0.0b2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del id, el cual no se maneja adecuadamente en (1) classes/IADomain.php, (2) classes/IACollection.php, y (3) classes/IAUser.php, como se demostró a través del parámetro id en una acción collection.imageview."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagealbum:imagealbum:2.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"C577E774-ADE4-4C07-99B4-5B0396E9467D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3548","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486162/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27240","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4895","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486162/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0289","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter.  NOTE: a second vector might exist via the l parameter.  NOTE: as of 20080118, the vendor has disputed the set of affected versions, stating that the issue \"is already fixed, for almost a year.\""},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo view_func.php en Member Area System (MAS) versiones 1.7 y posiblemente otras, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro i. NOTA: puede existir un segundo vector por medio del parámetro l. NOTA: a partir de la versión 20080118, el suplidor ha cuestionado el conjunto de versiones afectadas, afirmando que el problema \"is already fixed, for almost a year\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mansion_productions:member_area_system:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"7E8762F9-0396-4454-9B67-F87F40DC7D4A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3547","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486172/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486618/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39611","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486172/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486618/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0290","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Digital Hive 2.0 RC2 y anteriores permite (1) a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro selectskin en un programa especificado, o a(2) administradores remotos validados ejecutar comandos SQL de su elección a través del parámetro user_id en la página gestion_membre.php en base.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digitalhive:digitalhive:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0_rc2","matchCriteriaId":"83980B6F-7EC8-45D2-9716-5036408421E5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27232","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39602","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0291","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showproduct.asp de RichStrong CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hangzhou_rui-qiang:richstrong_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"220BC13A-E9E2-4117-854E-25C27046AE6C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28449","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486402/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27281","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27310","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39668","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4910","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486402/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0292","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en photo_album.pl de Dansie Photo Album 1.0 permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro search.\r\nNOTA: El origen de esta información es desconocido; los detalles se han obtenido solamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dansie:photo_album:1.0:*:*:*:*:*:*:*","matchCriteriaId":"24507AC2-190A-4368-8AEB-A62FB983FAF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0293","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the show_foot function."},{"lang":"es","value":"Vulnerabilidad no especificada de cron.php de FreeSeat versiones anteriores a 1.1.5d, cuando format.php tiene determinadas modificaciones, permite a atacantes remotos evitar autenticación y obtener privilegios mediante vectores de ataque desconocidos relativos a la función show_foot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeseat:freeseat:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5c","matchCriteriaId":"AD6C8F10-F749-4C95-9A66-EF306851313A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28459","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=160239&release_id=568374","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=160239&release_id=568374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0294","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación seat-locking de FreeSeat versiones anteriores a 1.1.5d permite a atacantes remotos reservar un asiento mas de una vez mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeseat:freeseat:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5c","matchCriteriaId":"AD6C8F10-F749-4C95-9A66-EF306851313A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28459","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=568374&group_id=160239","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27270","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=568374&group_id=160239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0295","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en modules/access/rtsp/real_sdpplin.c de la biblioteca Xine, tal y como se usa en VideoLAN VLC Media Player 0.8.6d y versiones anteriores,  permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio (caída) ó ejecutar código de su elección mediante datos largos de Protocolo de Descripción de Sesión (SDP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6d","matchCriteriaId":"A14F15BC-28B2-4DCF-86CC-8213DD66402C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vlcxhof-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27221","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0105","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14776","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vlcxhof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0296","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el plugin libaccess_realrtsp de VideoLAN VLC Media Player 0.8.6d y versiones anteriores en Windows, podría permitir a servidores RTSP remotos provocar una denegación de servicio (caída de aplicación) ó ejecutar código de su elección mediante una cadena larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6d","matchCriteriaId":"A14F15BC-28B2-4DCF-86CC-8213DD66402C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vlcxhof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0105","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14597","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vlcxhof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0297","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials in its output."},{"lang":"es","value":"PhotoKorn permite a atacantes remotos obtener credenciales de base de datos mediante una petición directa a update/update3.php, lo cual incluye las credenciales en la salida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keil_software:photokorn:*:*:*:*:*:*:*:*","matchCriteriaId":"F47C46BB-9184-434D-8E7F-D74B848FA9DD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39652","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4897","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0298","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attribute of a DIV element."},{"lang":"es","value":"KHTML WebKit como el utilizado en Apple Safari 2.x permite a atacantes remotos provocar una denegación de servicio (caída del navegador) mediante una página web manipulada, posiblemente implicando un atributo STYLE en una elemento DIV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3549","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/avisos/s21sec-039-en.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486202/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27261","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39635","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/avisos/s21sec-039-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486202/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0299","sourceIdentifier":"cve@mitre.org","published":"2008-01-16T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool."},{"lang":"es","value":"common.py in Paramiko 1.7.1 y versiones anteriores, cuando se utilizan hilos o procesos bifurcados, no utiliza apropiadamente RandomPool, lo cual permite a una sesión obtener información confidencial de otra sesión prediciendo el estado de la pila de conexiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python_software_foundation:paramiko:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"69D90928-746C-442C-BFAB-0BF9250F0E8F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706","source":"cve@mitre.org"},{"url":"http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28510","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29168","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-07.xml","source":"cve@mitre.org"},{"url":"http://www.lag.net/pipermail/paramiko/2008-January/000599.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27307","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428727","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39749","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00529.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00594.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lag.net/pipermail/paramiko/2008-January/000599.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=428727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00529.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00594.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0300","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences."},{"lang":"es","value":"mapFiler.php en Mapbender 2.4 hasta 2.4.4 permite a atacantes remotos ejecutar código PHP de su elección mediante secuencias de código PHP en el parámetro factor, que no esta correctamente manejado cuando se accede al nombre del fichero que contiene esa secuencia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4:*:*:*:*:*:*:*","matchCriteriaId":"9B6B556A-9697-49EE-8C02-68367E6E0DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"234EFEA2-A7E5-4C26-AB6D-6CAA5D87AE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"939816A3-FDFB-436E-B264-9563DAF17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"22158443-4914-4CCC-827E-DF1CCA7102FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"03315A84-729C-4DF6-A7B3-98F13DA9F2D5"}]}]}],"references":[{"url":"http://secunia.com/advisories/29329","source":"cve@mitre.org"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28195","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41131","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5232","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0301","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Mapbender versión 2.4.4, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro gaz para el archivo mod_gazetteer_edit.php y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4:*:*:*:*:*:*:*","matchCriteriaId":"9B6B556A-9697-49EE-8C02-68367E6E0DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"234EFEA2-A7E5-4C26-AB6D-6CAA5D87AE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"939816A3-FDFB-436E-B264-9563DAF17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"22158443-4914-4CCC-827E-DF1CCA7102FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mapbender:mapbender:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"03315A84-729C-4DF6-A7B3-98F13DA9F2D5"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120523564611595&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3728","source":"cve@mitre.org"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2008-002.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489383/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28193","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41139","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5233","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=120523564611595&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2008-002.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489383/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0302","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en apt-listchanges.py de apt-listchanges versiones anteriores a 2.82 permite a usuarios locales ejecutar código de su elección mediante  un programa apt-listchanges malicioso en el directorio actual de trabajo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt-listchanges:*:*:*:*:*:*:*:*","versionEndIncluding":"2.81","matchCriteriaId":"C7E63EB0-F68F-4F6D-BE4E-67EE6FFA56DC"}]}]}],"references":[{"url":"http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28513","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28574","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1465","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27331","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-572-1","source":"cve@mitre.org"},{"url":"http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-572-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0303","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce."},{"lang":"es","value":"La característica de impresión FTP en múltiples impresoras Canon, incluyendo imageRUNNER e imagePRESS, permite a atacantes remotos utilizar el servidor como un proxy inadvertido a través de un comando PORT modificado, también conocido como salto FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canon:i-sensys:lbp3360:*:*:*:*:*:*:*","matchCriteriaId":"6D5527A3-316B-4C5C-9499-E90A9B3ED521"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:i-sensys:lbp3460:*:*:*:*:*:*:*","matchCriteriaId":"ACAFBF89-8C4D-4F18-BDB8-F7E5D5E18658"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:i-sensys:lbp5360:*:*:*:*:*:*:*","matchCriteriaId":"D090A27B-BDEF-45CB-ADDD-02C787401682"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagepress:c1:*:*:*:*:*:*:*","matchCriteriaId":"7A8A809D-AE44-439B-850A-A4C282E2879D"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:85plus:*:*:*:*:*:*:*","matchCriteriaId":"956D38C1-63EB-484A-86E1-8FFFBB4F2687"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:105plus:*:*:*:*:*:*:*","matchCriteriaId":"92429901-A557-4CCD-9014-1EA32D1D738C"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:2230:*:*:*:*:*:*:*","matchCriteriaId":"38E229C8-C530-4EF1-8582-E50000DDC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:2270:*:*:*:*:*:*:*","matchCriteriaId":"05045F4F-C2BD-4215-AB82-060A9C8E5C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:2570c:*:*:*:*:*:*:*","matchCriteriaId":"47F18BD2-8628-4D74-AB71-1F07C45AA865"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:2570ci:*:*:*:*:*:*:*","matchCriteriaId":"A2191AA9-6EAD-401E-A831-7EAFF1D1AE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:2870:*:*:*:*:*:*:*","matchCriteriaId":"AB25A914-5F7D-4134-B8D3-9FEE77D1E004"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3025:*:*:*:*:*:*:*","matchCriteriaId":"CBBB4571-76C9-44D6-85BF-A3A4EAEF30A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3025n:*:*:*:*:*:*:*","matchCriteriaId":"1EB2555A-4596-4502-9F3D-1C863A49A7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3035:*:*:*:*:*:*:*","matchCriteriaId":"7D230D14-2B2D-4005-A613-45AC1BCE881F"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3035n:*:*:*:*:*:*:*","matchCriteriaId":"3C8E5E7F-2A49-4EE1-8AF3-7A10D35A0C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3045:*:*:*:*:*:*:*","matchCriteriaId":"BB5F8120-3BB9-4922-A210-3EC2DE905824"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3045n:*:*:*:*:*:*:*","matchCriteriaId":"98C7BF9D-12DD-48AF-8CA2-F7FBE975827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3170c:*:*:*:*:*:*:*","matchCriteriaId":"522C81B2-8565-42B0-986A-AA529B68CE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3170ci:*:*:*:*:*:*:*","matchCriteriaId":"3D2BED79-2917-43D3-9B8F-AFE6103B780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3180c:*:*:*:*:*:*:*","matchCriteriaId":"FFAE5078-589D-4B69-BB89-0F639B63A617"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3180ci:*:*:*:*:*:*:*","matchCriteriaId":"52D2110B-56A3-4288-A81D-C9EB43602AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3530:*:*:*:*:*:*:*","matchCriteriaId":"83390EF6-E058-48C2-89C0-B05973017958"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:3570:*:*:*:*:*:*:*","matchCriteriaId":"D6B4AA49-EF73-44B9-BF36-7ACA3AF83865"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:4570:*:*:*:*:*:*:*","matchCriteriaId":"51C2944E-3FBC-465F-A2B5-35051F0531CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5055:*:*:*:*:*:*:*","matchCriteriaId":"D2E74C0F-E5DC-446A-AB63-47EC0A733E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5055n:*:*:*:*:*:*:*","matchCriteriaId":"B10EB3DD-F392-46E0-ADC0-10DA2AF44731"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5065:*:*:*:*:*:*:*","matchCriteriaId":"1AAE2C40-18E7-4BA5-B121-2363D973257B"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5065n:*:*:*:*:*:*:*","matchCriteriaId":"FFCFF25F-5974-40D0-916D-065A5899647B"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5075:*:*:*:*:*:*:*","matchCriteriaId":"040BE6F9-5F1C-4E4C-825D-3F9EB35A7D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5075n:*:*:*:*:*:*:*","matchCriteriaId":"FF5B10EF-4DEF-4B82-A3E2-ABABCEC4FA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5570:*:*:*:*:*:*:*","matchCriteriaId":"FB74285C-E11C-490A-970A-39B467AA9AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5800c:*:*:*:*:*:*:*","matchCriteriaId":"D4F0C391-0A24-4A71-B700-AC7968B18B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:5800cn:*:*:*:*:*:*:*","matchCriteriaId":"00810DAE-7457-4FBF-95C9-E1AF355D7C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:6570:*:*:*:*:*:*:*","matchCriteriaId":"9A409632-8511-4EC0-BB5F-743C9A14CBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:6800c:*:*:*:*:*:*:*","matchCriteriaId":"C116560B-00B6-4BCF-9349-EE345D07E0EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:6800cn:*:*:*:*:*:*:*","matchCriteriaId":"A2EC135D-87E6-40EE-A699-B7501ADF5D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:7086:*:*:*:*:*:*:*","matchCriteriaId":"17866E3B-F0AB-4776-8337-7F297613A766"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:7095:*:*:*:*:*:*:*","matchCriteriaId":"C15C1554-F055-457F-B1EB-99214798BD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:7095p:*:*:*:*:*:*:*","matchCriteriaId":"CEE290B3-F248-4F79-B971-6658845E531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:7105:*:*:*:*:*:*:*","matchCriteriaId":"786EC60E-A890-4236-AEC4-1815CBE36404"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:8070:*:*:*:*:*:*:*","matchCriteriaId":"10B23884-6B28-4E91-9207-C0B43A8911BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c2380i:*:*:*:*:*:*:*","matchCriteriaId":"0FBAD1AD-E705-4BB1-B308-C33B4F4FBF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c2620:*:*:*:*:*:*:*","matchCriteriaId":"6A3547DD-7C0B-4ED6-B361-25FD0D0C0FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c2620n:*:*:*:*:*:*:*","matchCriteriaId":"4B8527DA-E3A3-4CBD-AD8D-643314BFA0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c2880:*:*:*:*:*:*:*","matchCriteriaId":"1D82E498-D467-42E7-B82B-DB970A8584F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c2880i:*:*:*:*:*:*:*","matchCriteriaId":"6DCF3699-B5FA-4E48-8C95-20FA7ADA6EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c3220n:*:*:*:*:*:*:*","matchCriteriaId":"AC02E198-284C-45BE-8CB2-0AE1BED06FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c3380:*:*:*:*:*:*:*","matchCriteriaId":"3194031C-A77E-4DB1-8AA1-394D9D0069F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c3380i:*:*:*:*:*:*:*","matchCriteriaId":"F9795579-0C94-4704-94B6-419390055B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c4080i:*:*:*:*:*:*:*","matchCriteriaId":"C13F455D-7C30-45D3-8987-5EFD05930679"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c4580i:*:*:*:*:*:*:*","matchCriteriaId":"0BDB208C-9DFD-41D2-8563-6637958938F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c5185i:*:*:*:*:*:*:*","matchCriteriaId":"5EB8CBCB-7C3D-4D7F-92A9-07EE65D44864"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c5870:*:*:*:*:*:*:*","matchCriteriaId":"8944BA6B-1CE1-4548-BF12-AA00972869BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c5870i:*:*:*:*:*:*:*","matchCriteriaId":"311E74FA-8C6E-4186-95CB-57579796BF4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c5880:*:*:*:*:*:*:*","matchCriteriaId":"8DBD69F8-B40C-4189-93D4-6A7E611B31B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c5880i:*:*:*:*:*:*:*","matchCriteriaId":"1E5E4B7A-F8CB-4D01-BFF1-E2F2B4B680C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c6870i:*:*:*:*:*:*:*","matchCriteriaId":"B5D65FD6-90A3-4048-973D-1D6404B1CA57"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c6880:*:*:*:*:*:*:*","matchCriteriaId":"3415DF9C-CE4A-499E-A032-D0C66AA0E37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:c6880i:*:*:*:*:*:*:*","matchCriteriaId":"3CD97A28-761D-482F-8A3C-1BE80B356E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:clc4040:*:*:*:*:*:*:*","matchCriteriaId":"9CE907E6-6033-429D-948C-F0C67CFB39A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner:clc5151:*:*:*:*:*:*:*","matchCriteriaId":"ACE2BDF2-D17A-4ABB-82A3-F0B94064824D"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_2620:*:*:*:*:*:*:*:*","matchCriteriaId":"3E4C7D11-EE90-4E10-9BBB-9CDC55467A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_5000i:*:*:*:*:*:*:*:*","matchCriteriaId":"83EB4A89-5470-4B7E-B09D-3CC1D7CC7F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_5020:*:*:*:*:*:*:*:*","matchCriteriaId":"E411CEEF-8615-47B3-AC1F-F907ECD8C725"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_6870:*:*:*:*:*:*:*:*","matchCriteriaId":"86B994ED-E476-43EE-BD7D-FA3158AA66F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_8500:*:*:*:*:*:*:*:*","matchCriteriaId":"FC5C108F-F89B-457D-9EDA-A5096AA01363"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_9070:*:*:*:*:*:*:*:*","matchCriteriaId":"3C40ED96-C1D9-4C2F-B90A-BEF0B36BAF17"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_c3200:*:*:*:*:*:*:*:*","matchCriteriaId":"714DD889-AFDB-4300-9A72-F46A6263733C"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_c3220:*:*:*:*:*:*:*:*","matchCriteriaId":"66DACE20-FDA4-4633-9755-95F72257F6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_c6800:*:*:*:*:*:*:*:*","matchCriteriaId":"E1542430-BAEB-4A4E-B617-AFC303614E0C"}]}]}],"references":[{"url":"http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN10056705/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019528","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/568073","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28042","source":"cve@mitre.org"},{"url":"http://www.usa.canon.com/html/security/pdf/CVA-001.pdf","source":"cve@mitre.org"},{"url":"http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN10056705/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/568073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.usa.canon.com/html/security/pdf/CVA-001.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0304","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Mozilla Thunderbird antes de 2.0.0.12 y SeaMonkey antes de 1.1.8 podrían permitir a atacantes remotos ejecutar código de su elección a través de un tipo MIME \"message/external-body\" manipulado en un e-mail, relacionado a una reserva de memoria incorrecta durante la previsualización del mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.9","matchCriteriaId":"305FA56B-BDDC-4F20-B4E9-6CF841364121"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29098","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29133","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29211","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30327","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31043","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33433","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019504","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/661651","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-12.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28012","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/661651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-12.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0306","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings."},{"lang":"es","value":"sdbstarter en SAP MaxDB 7.6.0.37, y posiblemente en otras versiones, permite a usuarios locales ejecutar comandos de su elección mediante utilizando variables de entorno no especificadas para mnodificar parámetros de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:maxdb:7.6.0.37:*:*:*:*:*:*:*","matchCriteriaId":"75C1FA85-049A-4324-9E18-7C41017B84EE"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28185","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019570","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0844/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41104","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0844/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0307","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption."},{"lang":"es","value":"Error de presencia de signo en entero en vserver en SAP MaxDB 7.6.0.37, y posiblemente otras versiones permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados que disparan una corrupción de pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:maxdb:7.6.0.37:*:*:*:*:*:*:*","matchCriteriaId":"75C1FA85-049A-4324-9E18-7C41017B84EE"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28183","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019571","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0844/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41107","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0844/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0308","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp)."},{"lang":"es","value":"Symantec Decomposer, como se usa en ciertos productos antivirus Symantec  incluyendo Symantec Scan Engine 5.1.2 y otras versiones antes de 5.1.6.31, permite a atacantes remotos provocar una denegación de servicio (agotamiento de memoria) a través de un archivo RAR mal formado al puerto (1344/tcp) del Internet Content Adaptation Protocol (ICAP) (Protocolo de Adaptación de Contenido de Internet)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.4.24","matchCriteriaId":"AB87EEAE-C3E0-4145-B218-9D408F92019D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_clearswift:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"2338E29E-E63A-46BE-B07C-67360F06407E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:aix:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"16D7344B-86C6-4F85-A3BC-F0923BE01BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:linux:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"852B500B-D411-4423-95A8-EEC05AFEAC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:solaris:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"C0B93FAE-4014-4417-A46A-3F52667E223F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_messaging:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"5F8F198A-1410-4FDD-9906-BFBFE7056603"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_microsoft_sharepoint:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"8A4202FC-FF3F-4450-A3DE-7077FDCDE62A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_ms_isa:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"4ABF5B1A-8CC8-42AD-95E9-4957EE4B0FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_network_attached_storage:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"90C81F8F-8176-4EB2-B61B-08A3F8958628"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"E648A3CF-2DB0-4578-8FF4-E8DB7DEE249F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine_caching:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"F10B5FA2-D60A-4ECD-98D5-24E2AC227604"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_mail_security_exchange:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.5.12","matchCriteriaId":"7FEB2137-CCAA-436B-9152-0C82A922AE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_mail_security_exchange:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.4.363","matchCriteriaId":"95F252AB-3D74-46C1-BF05-8FEE8F87308F"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29140","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27911","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019503","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.27.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0680","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.27.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0309","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp)."},{"lang":"es","value":"Vulnerabilidad de Desbordamiento de búfer basado en pila en Symantec Decomposer incluído en productos como Symantec Scan Engine 5.1.2 y versiones anteriores a 5.1.6.31, que permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (caída de aplicación) a través de un fichero RAR mal formado al puerto (1344/tcp) Internet Content Adaptation Protocol (ICAP)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:scan_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.4.24","matchCriteriaId":"AB87EEAE-C3E0-4145-B218-9D408F92019D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:aix:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"16D7344B-86C6-4F85-A3BC-F0923BE01BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:linux:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"852B500B-D411-4423-95A8-EEC05AFEAC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_filtering_domino_mpe:*:*:solaris:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"C0B93FAE-4014-4417-A46A-3F52667E223F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_network_attached_storage:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"90C81F8F-8176-4EB2-B61B-08A3F8958628"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"E648A3CF-2DB0-4578-8FF4-E8DB7DEE249F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine_caching:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"F10B5FA2-D60A-4ECD-98D5-24E2AC227604"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine_clearswift:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"DAE997E4-3686-433C-94A8-1F039F6A5FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_microsoft_sharepoint:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"10C9C1CB-1E4F-48D8-A5CA-322C2944EF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine_for_ms_isa:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"64B57FBE-71D4-4392-BA76-B3B6BED94A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_antivirus_scan_engine_messaging:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.16.39","matchCriteriaId":"49FEB258-2259-4E24-BDAC-A857B4C98095"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.5.12","matchCriteriaId":"EF5109EC-23D1-4100-8F5E-751B566CE75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:symantec_mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.4.363","matchCriteriaId":"48264D1D-94A1-49C1-A57D-34074C582630"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29140","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27913","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019503","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.27.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0680","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.27.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0310","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via \"..\" sequences in an unspecified environment variable, probably PKGINST."},{"lang":"es","value":"Vulnerabilidad de Salto de Directorio en pkgadd de SCO UnixWare 7.1.4 y versiones anteriores a p534589 permite a usuarios locales crear o agregar archivos de su elección mediante secuencias “..” en una variable de entorno sin especificar, probablemente PKGINST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"}]}]}],"references":[{"url":"http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.sco.com/support/update/download/release.php?rid=324","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1019787","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41759","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5355","source":"cve@mitre.org"},{"url":"http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.sco.com/support/update/download/release.php?rid=324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1019787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0311","sourceIdentifier":"cve@mitre.org","published":"2008-04-06T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función PGMWebHandler::parse_request del componente StarTeam Multicast Service (STMulticastService) 6.4 en Borland CaliberRM 2006 permite a atacantes remotos ejecutar código de su elección a través de una petición HTTP grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland:caliberrm:2006:*:*:*:*:*:*:*","matchCriteriaId":"B298D0CD-0AED-409B-8D3E-1F7483CCBD5D"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019786","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28602","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1100","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41647","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0312","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el AutoFix Support Tool ActiveX control 2.7.0.1 en SYMADATA.DLL de múltiples productos de Symantec Norton, incluyendo Norton 360 1.0, AntiVirus 2006 hasta 2008, Internet Security 2006 hasta 2008, y System Works 2006 hasta 2008; permite a atacantes remotos ejecutar código de su elección mediante un argumento largo al método GetEventLogInfo. NOTA: Algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00819E08-CC5C-48FC-9F80-95B68AB19C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*","matchCriteriaId":"44843812-35FC-4378-B239-EEC74A0C8A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*","matchCriteriaId":"C988B309-F397-412A-8570-C3823C7FE7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*","matchCriteriaId":"FA990FD5-DF2F-470A-936D-155A36BEDE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"692ECBCD-AB6B-4965-93F4-BDAD4777C018"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"3EF87752-C86D-4C89-9DE9-F874068C89EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*","matchCriteriaId":"05EB078C-2538-4961-ABFF-6C4601C3977F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2007:*:*:*:*:*:*:*","matchCriteriaId":"92039406-19AB-43C6-97AE-3D7C13FD8AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2008:*:*:*:*:*:*:*","matchCriteriaId":"22CAEA36-93A4-48F5-B093-6DD843BB9FE9"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29660","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28507","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019751","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019752","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019753","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1077/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41629","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1077/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0313","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share."},{"lang":"es","value":"El método ActiveDataInfo.LaunchProcess en el control ActiveX 2.7.0.1 SymAData.ActiveDataInfo.1 en SYMADATA.DLL sobre múltiples productos Symantec Norton incluyendo  Norton 360 1.0, AntiVirus 2006 al 2008, Internet Security 2006 al 2008, y System Works 2006 al 2008, no es capaz de determinar correctamente la ubicación de AutoFix Tool, lo que permite a atacantes remotos ejecutar código de su elección a través de un recurso compartido del tipo (1) WebDAV o (2) SMB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00819E08-CC5C-48FC-9F80-95B68AB19C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*","matchCriteriaId":"44843812-35FC-4378-B239-EEC74A0C8A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*","matchCriteriaId":"C988B309-F397-412A-8570-C3823C7FE7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*","matchCriteriaId":"FA990FD5-DF2F-470A-936D-155A36BEDE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"692ECBCD-AB6B-4965-93F4-BDAD4777C018"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"3EF87752-C86D-4C89-9DE9-F874068C89EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:system_works:2006:*:*:*:*:*:*:*","matchCriteriaId":"9881BFC2-6DCC-477E-B672-5BBCF42C1C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:system_works:2007:*:*:*:*:*:*:*","matchCriteriaId":"7479C14D-E9BB-4D39-B9E1-0ACBA7CE424B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:system_works:2008:*:*:*:*:*:*:*","matchCriteriaId":"D2A0C983-021B-4B77-A0D4-CD07C55916AE"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29660","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28509","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019751","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019752","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019753","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1077/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41631","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1077/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0314","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en libclamav de ClamAV 0.92.1, permite a atacantes remotos ejecutar código de su elección mediante un paquete binario PE con un PeSpin manipulado con el valor de longitud modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=686","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29975","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"cve@mitre.org"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1549","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/858595","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28784","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019851","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41823","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=876","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/858595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0318","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en la función cli_scanpe en libclamav en ClamAV anterior a la versión 0.92.1, tal como es usado en clamd, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario por medio de un archivo PE empaquetado Petite creado, que desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.92","matchCriteriaId":"15D4A58F-9A7C-40CA-940F-ADF8CF91ACB0"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209915","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-19.txt","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=658","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200802-09.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019394","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575703","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1497","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27751","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00462.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00481.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-19.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200802-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00462.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00481.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0320","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el importador OLE en OpenOffice.org versiones anteriores a 2.4, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo OLE con una transmisión DocumentSummaryInformation diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"D0AD1FB6-3708-4D13-AF0A-C6287648DB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"54678E59-299F-4236-86C4-95F5B68C11D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231642-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:090","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2008-0320.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0176.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28819","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019890","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41860","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10318","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231642-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_23_openoffice.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/bulletin.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-4770.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2007-5745.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2008-0320.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0175.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-609-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1253/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1375/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0322","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the \"\\\\.\\I2OExc\" device interface, which allows local users to gain privileges.  NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer."},{"lang":"es","value":"El controlador (driver) I2O Utility Filter (i2omgmt.sys) 5.1.2600.2180 para Microsoft Windows XP tiene permisos de escritura para todos (Everyone/Write) para la interfaz del dispositivo \"\\\\.\\I2OExc\", esto permite a usuarios locales aumentar sus privilegios. NOTA: esta vulnerabilidad puede conllevar una sobre-escritura de memoria arbitraria y ejecución de código mediante una llamada IOCTL con un puntero manipulado DeviceObject."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=699","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/30203","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29171","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020006","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1476/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42358","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/30203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1476/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0324","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption."},{"lang":"es","value":"Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 permite a usuarios locales provocar una denegación de servicio (caída) llamando as IOCTL 0x80002038 con valor de tamaño pequeño, lo cual provoca una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.2.0090:*:windows:*:*:*:*:*","matchCriteriaId":"DF3345B2-964B-49CF-9531-69B129A57AF3"}]}]}],"references":[{"url":"http://secunia.com/advisories/28472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27289","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019240","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0170","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39694","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0325","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show.php de FaScript FaPersian Petition permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:fapersian_petition:*:*:*:*:*:*:*:*","matchCriteriaId":"8432A479-6FD4-4A18-BD63-46CC7D8B681D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28522","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27302","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39716","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0326","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to show.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en class/show.php de FaScript FaPersianHack 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id a show.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:fapersianhack:1.0:*:*:*:*:*:*:*","matchCriteriaId":"24673101-5979-46A5-B5A6-2FBCF8A11786"}]}]}],"references":[{"url":"http://secunia.com/advisories/28565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27302","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39717","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0327","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show.php de FaScript FaMp3 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:famp3:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C1C15501-6898-4786-B1D2-E95BA28BED85"}]}]}],"references":[{"url":"http://osvdb.org/40330","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28566","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27302","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39714","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4914","source":"cve@mitre.org"},{"url":"http://osvdb.org/40330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0328","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en page.php de FaScript FaName 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faname:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFFF8451-6F54-4A58-A981-1A1EF4971D6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28528","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27303","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39715","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0329","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_refuser.php in Admin/, which allows remote attackers to accept comments, delete comments, and delete articles via the id parameter."},{"lang":"es","value":"LulieBlog 1.0.1 y 1.0.2 no restringe el acceso a 1) article_suppr.php, (2) comment_accepter.php, y (3) comment_refuser.php en Admin/, lo cual permite a atacantes remotos aceptar y borrar comentarios, y borrar artículos mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:julien_plesniak:lulieblog:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EE51A217-0F5E-4050-9351-C9E625FBBD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:julien_plesniak:lulieblog:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF3D3065-D366-4F8F-B971-40E9E27D9A8D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39669","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0330","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) via malformed RADIUS requests, as demonstrated by packets sent by nmap."},{"lang":"es","value":"Open System Consultants (OSC) Radiator versiones anteriores a 4.0, permite a atacantes remotos causar una denegación de servicio (bloqueo del demonio) por medio de peticiones RADIUS malformadas, como es demostrado por los paquetes enviados mediante nmap"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:radiator:radius_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.17.1","matchCriteriaId":"E583DB63-7DF5-48DF-9578-115793B2317F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.open.com.au/radiator/history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27306","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0598","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39730","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.open.com.au/radiator/history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0331","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service (panic and reboot) via unspecified DNS requests."},{"lang":"es","value":"Vulnerabilidad no especificada en Funkwerk System Software anterior a 7.4.1 PATCH 9 para ciertos dispositivos Funkwerk Router / VPN permite a atacantes remotos provocar una denegación de servicio (error irrecuperable del sistema y reinicio) mediante peticiones DNS mal formadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:funkwerk:x2300:*:*:*:*:*:*:*:*","matchCriteriaId":"8AE2EA34-CD83-43DF-AF93-764022C6910F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:funkwerk:system_software:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.1_patch_8","matchCriteriaId":"78AD1DA5-DCF3-4D30-9700-D644DB7A2AEC"}]}]}],"references":[{"url":"http://osvdb.org/42782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7401p09/readme_741p9_en.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39731","source":"cve@mitre.org"},{"url":"http://osvdb.org/42782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7401p09/readme_741p9_en.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0332","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en arias/help/effect.php de aria 0.99-6 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aria:aria:0.99-6:*:*:*:*:*:*:*","matchCriteriaId":"ADEE5191-8A51-40C4-B950-147C3F8FC0C1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/486406/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27311","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39712","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486406/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0333","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the temp_filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download_view_attachment.aspx de AfterLogic MailBee WebMail Pro 4.1 para ASP.NET permite a atacantes remotos leer ficheros locales de su elección mediante una secuencia .. (punto punto)  en el parámetro temp_filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:afterlogic:mailbee_webmail_pro:4.1:*:*:*:*:asp.net:*:*","matchCriteriaId":"BB08962C-22DD-4F2B-BA1A-6FBC56129B59"}]}]}],"references":[{"url":"http://secunia.com/advisories/28521","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/27312","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39724","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4921","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/27312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0334","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en pm/language/spanish/preferences.php de PMachine Pro 2.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro L_PREF_NAME[855]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pmachine:pmachine_pro:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A2792A11-DDF0-4E88-A0AC-704415F1A685"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0801-exploits/pMachinePro-241-xss.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27282","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0801-exploits/pMachinePro-241-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0335","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en BugTracker.NET anterior a 2.7.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante campo de texto de su elección hecho a medida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bugtracker.net:bugtracker.net:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"3299076D-C820-4588-AEE8-1995E4650F98"}]}]}],"references":[{"url":"http://secunia.com/advisories/28481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=568160","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39650","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=568160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0336","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en BugTracker.NET anterior a 2.7.2 permite a atacantes remotos borrar registros de error (bugs) y llevar a cabo otras tareas administrativas mediante vectores no especificados, posiblemente relacionados con páginas delete_*.aspx, y massedit.aspx, subscribe.aspx, flag.aspx, y relationships.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bugtracker.net:bugtracker.net:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"3299076D-C820-4588-AEE8-1995E4650F98"}]}]}],"references":[{"url":"http://secunia.com/advisories/28481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=66812&release_id=568160","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=66812&release_id=568160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0337","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función _mwProcessReadSocket de http.c en MiniWeb HTTP Server 0.8.19 permite a atacantes remotos ejecutar código de su elección mediante un URI largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miniweb_http_server:miniweb_http_server:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"AF946D17-6EB5-4DEB-8872-9E8FD8D60940"}]}]}],"references":[{"url":"http://secunia.com/advisories/28512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugtraq.ir/adv/miniweb_english.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27319","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0176","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39718","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4923","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugtraq.ir/adv/miniweb_english.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0338","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función mwGetLocalFileName de http.c en MiniWeb HTTP Server 0.8.19 permite a atacantes remotos leer ficheros y listar directorios de su elección mediante (1) %2e (secuencia punto punto parcialmente codificada) o (2) %2e%2e (secuencia punto punto codificada) en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miniweb_http_server:miniweb_http_server:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"AF946D17-6EB5-4DEB-8872-9E8FD8D60940"}]}]}],"references":[{"url":"http://secunia.com/advisories/28512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugtraq.ir/adv/miniweb_english.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27319","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0176","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39713","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4923","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugtraq.ir/adv/miniweb_english.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0339","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente XML DB de Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, y 10.2.0.3 tiene impacto y vectores de ataque remotos desconocidos, también conocido como DB01."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0340","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1) Advanced Queuing component (DB02) and (2) Oracle Spatial component (DB04)."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, y 10.2.0.3 tiene impacto y vectores de ataque desconocidos, relacionados con los componentes (1) Advanced Queuing y (2) Oracle Spatial (DB04)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0341","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Advanced Queuing de  Oracle Database 9.0.1.5 FIPS+ y 10.1.0.5 tiene impacto y vectores de ataque desconocidos, también conocido como DB03."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0342","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB05."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Upgrade/Downgrade de Oracle Database 9.2.0.8, 10.1.0.5, y 10.2.0.3 tiene impacto y vectores de ataque desconocidos, también conocido como DB05."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0343","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Spatial de  Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, y 10.1.0.5 tiene impacto y vectores de ataque remotos desconocidos, también conocido como DB06."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0344","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Spatial de Oracle Database 10.1.0.5 y 10.2.0.3 tiene impacto y vectores de ataque remotos desconocidos, también conocido como DB07."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0345","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Core RDBMS de Oracle Database 11.1.0.6 tiene impacto y vectores de ataque remotos desconocidos, también conocido como DB08."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0346","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka AS01."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Jinitiator de Oracle Application Server 1.3.1.27 y E-Business Suite 11.5.10.2 tiene impacto y vectores de ataque remotos desconocidos, también conocido como AS01."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/40294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0347","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01.  NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Oracle Ultra Search en Oracle Collaboration Suite versión 10.1.2; Database versiones 9.2.0.8, 10.1.0.5 y 10.2.0.3; y Application Server 9.0.4.3 y 10.1.2.0.2; presenta un impacto desconocido y vectores de ataque locales, también se conoce como OCS01. NOTA: Oracle no ha cuestionado una afirmación confiable de que este problema está relacionado con los privilegios del esquema WKSYS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_9i:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6F6D1B99-8246-46F3-8078-C472DA29823A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_9i:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D8DA05-1661-400C-A110-98B6702BC3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.petefinnigan.com/Advisory_CPU_Jan_2008.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487322/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.petefinnigan.com/Advisory_CPU_Jan_2008.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487322/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0348","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka (1) PSE01, (2) PSE03, and (3) PSE04."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el componente PeopleTools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.22.18, 8.48.15, y 8.49.07 tienen impacto y vectores de ataque remotos desconocidos, también conocidos como (1) PSE01, (2) PSE03, y (3) PSE04."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0349","sourceIdentifier":"cve@mitre.org","published":"2008-01-17T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack vectors, aka PSE02."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleTools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.15 y 8.49.07 tiene impacto y vectores de ataque remotos desconocidos, también conocido como PSE02."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67FF2A2E-3693-424E-B53D-0BAD01D53F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0CBDB5-B13D-4071-994A-E1318A3821DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.1:*:*:*:*:*:*:*","matchCriteriaId":"610AE265-C18D-4895-8034-5DB331DC68DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97765939-6102-402F-ACE7-AA7B2350016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.47:*:*:*:*:*:*:*","matchCriteriaId":"4C2CF929-6203-436A-AAEB-6E2142B2B1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.48:*:*:*:*:*:*:*","matchCriteriaId":"7C098860-0862-4C5B-8EE4-9469D5D01815"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.49:*:*:*:*:*:*:*","matchCriteriaId":"445508AC-3316-459F-98C1-8310EF327E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0350","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to gain administrative privileges and make arbitrary configuration changes."},{"lang":"es","value":"admin/index.php en Evilsentinel 1.0.9 y anteriores envían una redirección al navegador web pero esta no existe, lo cual permite a atacantes remotos obtener privilegios de administrador y hacer cambios de configuración de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evilsentinel:evilsentinel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.9","matchCriteriaId":"CF4F3013-0FA2-4AE2-B98B-4825F7276EBA"}]}]}],"references":[{"url":"http://evilsentinel.altervista.org/forum/index.php?topic=49.0","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28427","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27227","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4884","source":"cve@mitre.org"},{"url":"http://evilsentinel.altervista.org/forum/index.php?topic=49.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0351","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es_security_captcha parameter and not invoking captcha.php."},{"lang":"es","value":"admin/config.php en Evilsentinel 1.0.9 y anteriores permite a atacantes remotos evitar el test CAPTCHA omitiendo el parámetro es_security_captcha y no invocando captcha.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evilsentinel:evilsentinel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.9","matchCriteriaId":"CF4F3013-0FA2-4AE2-B98B-4825F7276EBA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27227","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0352","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram)."},{"lang":"es","value":"El núcleo de Linux 2.6.20 hasta 2.6.21.1 permite a atacantes remotos provocar una denegación de servicio (error irrecuperable del sistema) mediante cierto paquete IPv6, posiblemente implicando la opción Jumbo Payload salto a salto (jumbogram)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=8450","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39643","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4893","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=8450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0353","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cognome_cerca parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en visualizza_tabelle.php de php-residence 0.7.2 y 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cognome_cerca.\r\nNOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-residence:php-residence:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"078D8B70-6C37-49FD-9B6C-B941C06AD41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-residence:php-residence:1.0:*:*:*:*:*:*:*","matchCriteriaId":"18679D41-4CE5-4E6A-B52D-0F7104F9EE73"}]}]}],"references":[{"url":"http://secunia.com/advisories/28516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27320","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39739","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4925","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0354","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el cliente chat de IBM Lotus Sametime 7.5 y 7.5.1 permite a atacantes locales o remotos dependientes del contexto inyectar scripts web o HTML de su elección mediante un mensaje manipulado, que dispara ejecución de código tras un evento mouseover iniciado por la víctima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_sametime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"8C5FF0F3-D0E6-4933-8826-50C5584D0615"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_sametime:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0C2F7120-CD96-4817-97C3-470FC21B75B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/27942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21292938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27316","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019224","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0168","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21292938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0355","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action, a different vector than CVE-2007-2866."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de el módulo forum de PHPEcho CMS, probablemente 2.0-rc3 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción sección, vector distinto de CVE-2007-2866."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpecho_cms:phpecho_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0-rc3","matchCriteriaId":"CD1CF32C-EB78-4D8C-AFE2-61EFB66681FF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27326","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39741","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0356","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513."},{"lang":"es","value":"Desbordamiento de búfer en el servicio Independent Management Architecture (IMA) de Citrix Presentation Server (MetaFrame Presentation Server) 4.5 y versiones anteriores, Access Essentials 2.0 y versiones anteriores, y Desktop Server 1.0 permite a atacantes remotos ejecutar código de su elección mediante un valor de tamaño inválido en un paquete al puerto TCP 2512 ó 2513."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"96365CE2-22BF-408E-939F-22FFABF63061"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08AEEC3F-E8DD-4535-98D2-4CFD83439A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_presentation_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"B612D535-0FED-49B5-85B7-7B33CC1EF320"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2B22EE40-B6D5-4A1D-B6F5-48E14FB189AD"}]}]}],"references":[{"url":"http://secunia.com/advisories/28508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX114487","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/412228","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486585/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27329","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019231","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0172","source":"cve@mitre.org"},{"url":"http://zerodayinitiative.com/advisories/ZDI-08-002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX114487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/412228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486585/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-08-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0357","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en pages/upload.php de Galaxyscripts Mini File Host 1.2.1 y versiones anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galaxyscripts:mini_file_host:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"F1D9F257-BE21-4E1E-BD84-29EE6AEC8152"}]}]}],"references":[{"url":"http://secunia.com/advisories/28504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27327","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39799","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4930","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0358","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Pixelpost 1.7 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro parent_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixelpost:pixelpost:1.7:*:*:*:*:*:*:*","matchCriteriaId":"2F4359FF-9202-4886-AC8E-7B62F77E44D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pixelpost.org/forum/showthread.php?t=7716","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27242","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019238","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39721","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4924","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pixelpost.org/forum/showthread.php?t=7716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0359","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BLOG:CMS 4.2.1b permiten a atacantes remotos inyectar scripts web o HTML de su elección mediante PATH_INFO en (1) admin.php ó (2) index.php de photo/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blog_cms:blog_cms:4.2.1_c:*:*:*:*:*:*:*","matchCriteriaId":"9421D852-1007-4BE0-AD6C-7056BC2B1934"}]}]}],"references":[{"url":"http://blogcms.com/wiki/changelog","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120049816924383&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27317","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39710","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4919","source":"cve@mitre.org"},{"url":"http://blogcms.com/wiki/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120049816924383&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0360","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (1) the blogid parameter to index.php, (2) the user parameter to action.php, or (3) the field parameter to admin/plugins/table/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en BLOG:CMS 4.2.1b permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) blogid en index.php, (2) user en action.php, ó (3) field en admin/plugins/table/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blog_cms:blog_cms:4.2.1_c:*:*:*:*:*:*:*","matchCriteriaId":"9421D852-1007-4BE0-AD6C-7056BC2B1934"}]}]}],"references":[{"url":"http://blogcms.com/wiki/changelog","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120049816924383&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27317","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/4919","source":"cve@mitre.org"},{"url":"http://blogcms.com/wiki/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120049816924383&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/4919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0361","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en agregar_info.php de GradMan 0.1.3 y versiones anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) a través del parámetro tabla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instituto_politicnico_nacional:gradman:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.3","matchCriteriaId":"CED6DFCD-79DF-41FF-A2CD-629A72118552"}]}]}],"references":[{"url":"http://secunia.com/advisories/28520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486444/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27324","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39732","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486444/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0362","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gallery.php de Clever Copy 3.0 y versiones anteriores permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro album."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clever_copy:clever_copy:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"96B850B6-8F15-40D8-9887-11121A8D926A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3553","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486492/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27335","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39747","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486492/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0363","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Clever Copy 3.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) ID en postcomment.php y (2) album en gallery.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clever_copy:clever_copy:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"96B850B6-8F15-40D8-9887-11121A8D926A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3553","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486492/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27335","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486492/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0364","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of service (application crash) via a long Unicode string representing a client version identifier."},{"lang":"es","value":"Desbordamiento de búfer en (1) BitTorrent 6.0 y versiones anteriores; y (2) uTorrent 1.7.5 y versiones anteriores, y 1.8-alpha-7834 y versiones anteriores en la serie 1.8.x; en Windows permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) mediante una cadena Unicode larga representando un identificador de versión de cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"CCE95C92-4707-4417-A231-962605A5D8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.5","matchCriteriaId":"0153AC2A-BC5D-48E8-934E-2FD2145A1254"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.8-alpha-7834:*:*:*:*:*:*:*","matchCriteriaId":"33D8726B-2375-4058-8098-C74DC3363AC0"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ruttorrent-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/ruttorrent.zip","source":"cve@mitre.org"},{"url":"http://download.utorrent.com/1.7.6/utorrent-1.7.6.txt","source":"cve@mitre.org"},{"url":"http://forum.utorrent.com/viewtopic.php?id=29330","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28537","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3554","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486426/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27321","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39719","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39720","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ruttorrent-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/ruttorrent.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.utorrent.com/1.7.6/utorrent-1.7.6.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.utorrent.com/viewtopic.php?id=29330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486426/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0365","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments to (1) IOCTL functions in the Firewall module or (2) SSDT hook handler functions in the Registry module."},{"lang":"es","value":"Múltiples desbordamientos de búfer en CORE FORCE versiones anteriores a 0.95.172 permiten a usuarios locales provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección en contexto de núcleo mediante argumentos manipulados en (1) funciones IOTCL en el módulo Firewall ó (2) funciones del gestor de enganche (hook) SSDT en el módulo Registry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:core_security_technologies:core_force:*:*:*:*:*:*:*:*","versionEndIncluding":"0.95.167","matchCriteriaId":"C5E443EA-4C09-40DD-A018-AAA25CC011E0"}]}]}],"references":[{"url":"http://force.coresecurity.com/index.php?module=articles&func=display&aid=32","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3555","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486513/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27341","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019245","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0242","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39758","source":"cve@mitre.org"},{"url":"http://force.coresecurity.com/index.php?module=articles&func=display&aid=32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486513/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0366","sourceIdentifier":"cve@mitre.org","published":"2008-01-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments."},{"lang":"es","value":"CORE FORCE versiones anteriores a 0.95.172 no valida apropiadamente argumentos en funciones del gestor de enganche (hook) SSDT en el módulo Registry, lo cual permite a usuarios locales provocar una denegación de servicio (caída de sistema) y posiblemente ejecutar código de su elección en contexto núcleo mediante argumentos manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:core_security_technologies:core_force:*:*:*:*:*:*:*:*","versionEndIncluding":"0.95.167","matchCriteriaId":"C5E443EA-4C09-40DD-A018-AAA25CC011E0"}]}]}],"references":[{"url":"http://force.coresecurity.com/index.php?module=articles&func=display&aid=32","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3555","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2025","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486513/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27341","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019245","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0242","source":"cve@mitre.org"},{"url":"http://force.coresecurity.com/index.php?module=articles&func=display&aid=32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/486513/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0367","sourceIdentifier":"cve@mitre.org","published":"2008-01-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks."},{"lang":"es","value":"En el navegador Mozilla Firefox 2.0.0.11, 3.0b2, y posiblemente versiones anteriores, cuando se abre la ventana de Autenticación HTTP básica, se muestra el sitio que requiere la autenticación despues del texto Realm, lo que podría provocar que servidores HTTP remotos lleven a cabo ataques de phising o spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"}]}]}],"references":[{"url":"http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485732/100/200/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/485738/100/200/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27111","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=244273","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/485732/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/485738/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=244273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0368","sourceIdentifier":"cve@mitre.org","published":"2008-01-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument."},{"lang":"es","value":"onedcu en IBM Informix Dynamic Server (IDS) versiones 10.x anteriores a 10.00.xC8, permite a usuarios locales crear archivos arbitrarios por medio del argumento de archivo Trace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"1716E256-B186-442F-8C4C-9305E0953081"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54307","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011556","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27328","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019237","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39751","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0369","sourceIdentifier":"cve@mitre.org","published":"2008-01-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs."},{"lang":"es","value":"Múltiples programas no especificados en IBM Informix Dynamic Server (IDS) versiones 10.x anteriores a 10.00.xC8, permiten a usuarios locales crear archivos arbitrarios especificando el archivo de destino en la variable de entorno SQLIDEBUG, cuya propiedad es cambiada por el usuario que invoca los programas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00:*:*:*:*:*:*:*","matchCriteriaId":"E67D2B80-49E9-4DDA-87A3-D145B9F49D10"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=650","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54309","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011556","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27328","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019237","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39751","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40009","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0370","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary web script or HTML via the rurl parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en dohtaccess.html en cPanel anterior a 11.17 construcción 19417 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro rurl. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.16:*:*:*:*:*:*:*","matchCriteriaId":"6E3919CF-D66F-4713-8E34-F4C9E9EDFB31"}]}]}],"references":[{"url":"http://aria-security.net/forum/showthread.php?p=1238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28561","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3561","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486404/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27308","source":"cve@mitre.org"},{"url":"http://aria-security.net/forum/showthread.php?p=1238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486404/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0371","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via (2) the id parameter to (b) inc/usercp.php, related to functionz/usercp.php; or (3) the username parameter to (c) admin/index.php, related to functionz/first_process.php, or (d) index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en aliTalk 1.9.1.1, cuando magic_quotes_gpc está desactivado, permite a usuarios remotos validados ejecutar comandos SQL de su elección a través del parámetro (1) mohit en (a) inc/receivertwo.php; y permite a atacants remotos ejecutar comandos SQL de su elección a través del parámetro (2) id en (b) inc/usercp.php, relacionado con la función functionz/usercp.php; o (3) el parámetro username en (c) admin/index.php, relacionado con la función functionz/first_process.php, o (d) index.php. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alilg:alitalk:1.9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BA2E3777-0EFC-40AE-97E9-FFD6A39C7800"}]}]}],"references":[{"url":"http://secunia.com/advisories/28515","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27315","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39733","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39735","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39736","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39745","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0372","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmented HTTP request."},{"lang":"es","value":"8e6 R3000 Internet Filter versión 2.0.05.33, y otras versiones anteriores a 2.0.11, permiten a atacantes remotos omitir las restricciones previstas por medio de una petición HTTP fragmentada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:8e6:r3000_internet_filter:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.05.33","matchCriteriaId":"7D2CC151-E3FA-4B20-B678-50E3AF455C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:8e6:r3000_internet_filter:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.10","matchCriteriaId":"89C23C39-A6FC-4B61-807C-B3DEB0FC0E88"}]}]}],"references":[{"url":"http://secunia.com/advisories/28524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3557","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486398/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486770/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27309","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39723","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486398/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486770/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0373","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo no restringida en PHP F1 Max's File Uploader permite a atacantes remotos actualizar y ejecutar archivos PHP de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:f1_maxs_file_uploader:*:*:*:*:*:*:*:*","matchCriteriaId":"6FC8ED46-B85C-4BF3-8AF1-B295293D06AF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27285","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39740","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0374","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777."},{"lang":"es","value":"OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, y Web Page 1.00 envia la configuración de la impresora en texto plano, lo cual permite a atacantes remotos obtener la contraseña del administrador a través de la conexión TCP puertos 5548 o 7777."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oki:c5510mfp_firmware:1.01:*:*:*:*:*:*:*","matchCriteriaId":"C5362609-08DD-42AC-811A-52F59ABF6576"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oki:c5510mfp:-:*:*:*:*:*:*:*","matchCriteriaId":"6B1AF628-BB40-454B-85B0-B39047E75F52"}]}]}],"references":[{"url":"http://secunia.com/advisories/28553","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3569","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/486511/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27339","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39775","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://secunia.com/advisories/28553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/486511/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0375","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set the password and obtain administrative access via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, y Web Page 1.00 permite a atacantes remotos asignar la contraseña y obtener el acceso administrativo a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:oki_printing_solutions:c5510_mfp_printer:*:*:*:*:*:*:*:*","matchCriteriaId":"D0E7F1F3-766D-4518-BA65-63AB2683CBFB"}]}]}],"references":[{"url":"http://secunia.com/advisories/28553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3569","source":"cve@mitre.org"},{"url":"http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486511/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486511/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0376","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfile parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en inc/linkbar.php en Small Axe Weblog 0.3.1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro cfile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softpedia:small_axe_weblog:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4BE8952D-E091-4996-9069-44B4E2DB2750"}]}]}],"references":[{"url":"http://secunia.com/advisories/28568","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27345","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39765","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4937","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0377","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin.php."},{"lang":"es","value":"MicroNews permite a atacantes remotos evitar la autenticación y ganar privilegios de administrador a través de una respuesta directa en admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:news:micronews:*:*:*:*:*:*:*:*","matchCriteriaId":"301EE084-8F93-48F2-85B1-133B2B76D261"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3556","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486349/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27288","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39702","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486349/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0378","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when \"Resolve all names remotely\" is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hostname."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en SocksCap 2.40-051231 y anteriores, cuando \"resolver las llamadas remotas\" está activado, permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través de un nombre de hos largas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nec:sockscap:*:*:*:*:*:*:*:*","versionEndIncluding":"2.40_051231","matchCriteriaId":"7466EF1D-AFA9-4D45-A0A5-4C9363251A5F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3560","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39781","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0379","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow."},{"lang":"es","value":"Condición de carrera en el controlador ActiveX(EnterpriseControls.dll 11.5.0.313) en Crystal Reports XI Release 2 permite a atacantes remotos provocar denegación de servicio (caida) y posiblemente ejecutar código de su elección a través del método SelectedSession, el cual dispara un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_reports_xi:r2:*:*:*:*:*:*:*","matchCriteriaId":"11DC74BF-CF03-49F5-89AA-609AA8758A39"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27333","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019239","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39743","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4931","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0380","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows remote attackers to execute arbitrary code via a long MP4Prefix property."},{"lang":"es","value":"Desbordamiento de búfer en el controlador ActiveX Digital Data Communications RtspVaPgCtrl (RtspVapgDecoder.dll 1.1.0.29) permite a atacantes remotos ejecutar código de su elección a través de una propiedad MP4Prefix ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digital_data_communications:rtspvapgdecoder.dll:1.1.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBBE1F24-B8A3-4F68-9F88-A7D2828A9F19"}]}]}],"references":[{"url":"http://secunia.com/advisories/28492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27337","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0182","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4932","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0381","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS) in uploaded files."},{"lang":"es","value":"Vulnerabilidad no especificada en Mahara anterior a 0.9.1 tiene un impacto desconocido y vectores de ataque remotos, probablemente relacionado con secuencias de comandos en sitios cruzados (XSS) en actualizaciones de archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.0","matchCriteriaId":"C4955B5E-76A8-45A5-BDED-82A2DF1C4A85"}]}]}],"references":[{"url":"http://secunia.com/advisories/28484","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27348","source":"cve@mitre.org"},{"url":"https://eduforge.org/frs/shownotes.php?release_id=342","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://eduforge.org/frs/shownotes.php?release_id=342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0382","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección eval en MyBB 1.2.10 y anteriores permite a atacantes remotos ejecutar código de su elección a través de un parámetro sortby en las acciones  (1) forumdisplay.php o (2)results en search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"858E3AD8-8A7C-4B33-A2AA-3C543D46E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0F3B187F-D0C5-4001-B877-3B0122784BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D04152D8-60BE-4362-BF68-688DE53A066C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"98789943-2C7D-404E-B61E-04C436C1681C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"678B50B3-D151-40ED-8CAA-C12FC5BA4520"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*","matchCriteriaId":"6DB91E8F-52F1-4514-88DC-F2749973CB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F1079E0F-7B89-45A9-83AD-F72470A63B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"59C3A929-B608-42FC-BB31-7599146E8CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4409B6-9F4D-4136-BA74-43736215A122"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D70B64CF-6EF1-487A-9617-68F904ACE727"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"94EC0E67-111A-4989-A311-6B051D37CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D6942A9C-55E6-4A87-903F-3C8314EA4EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"1DC39A88-9F34-4119-8404-8495735290DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7A15A18B-E4DB-4622-977B-3AA495E2F39A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4494C452-BB14-4180-A26E-572752FA6111"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6FD3E97-2E37-4FE3-83A7-13E489BDFF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A8C6BC25-C1BB-4640-9CC5-F10C0C119C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*","matchCriteriaId":"0846A9BC-9FFC-4C93-911D-431688A6FB58"}]}]}],"references":[{"url":"http://secunia.com/advisories/28509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486434/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27322","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4927","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4928","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0383","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1) the mergepost parameter in a do_mergeposts action, (2) rid parameter in an allreports action, or (3) threads parameter in a do_multimovethreads action to (a) moderation.php; or (4) gid parameter to (b) admin/usergroups.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en MyBB 1.2.10 y anteriores permite a moderadores remotos y administradores ejecutar comnandos SQL a través del parámetros (1)mergepost en una acción do_mergepostsm (2) parámetro rid en una acción allreports, o (3) parámetro threads en una acción do_multimovethreads en (a) moderation.php; o parámetro (4)gid en (b) admin/usergroups.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.10","matchCriteriaId":"9002DF3E-BDC7-4653-8C32-EC20CAFD436D"}]}]}],"references":[{"url":"http://community.mybboard.net/showthread.php?tid=27227","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486433/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27323","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.waraxe.us/advisory-62.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39728","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39729","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/showthread.php?tid=27227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486433/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.waraxe.us/advisory-62.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0384","sourceIdentifier":"cve@mitre.org","published":"2008-01-22T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabel_id2name function is not checked."},{"lang":"es","value":"OpenBSD 4.2 permtie a usuarios locales provocar denegación de servicio (kernel panic) a través de una llamada SIOCGIFRTLABEL IOCTL sobre una interfaz que no tiene una etiqueta route, el cual dispara un puntero de referencia NULL cuando devuelve el valor de la función rtlabel_id2name no está validada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]}]}],"references":[{"url":"http://marc.info/?l=openbsd-security-announce&m=120007327504064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/errata42.html#005_ifrtlabel","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27252","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019188","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4935","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openbsd-security-announce&m=120007327504064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/errata42.html#005_ifrtlabel","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0385","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with (1) statprt/js/request or (2) dyn/js/request in the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en server/widgetallocator.php en Urulu 2.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro connectionId a index.php con (1)statprt/js/request o (2) dyn/js/request en el PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:urulu:urulu:2.1:*:*:*:*:*:*:*","matchCriteriaId":"71C8C482-8E2E-4ECE-8A1C-975AB12E14BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29162","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3707","source":"cve@mitre.org"},{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2008-0385.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488909/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28032","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2008-0385.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488909/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0386","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email."},{"lang":"es","value":"Xdg-utils 1.0.2 y versiones anteriores permite a atacantes remotos ayudados por un usuario ejecutar comandos de su elección a través de metacaracteres de consola en un argumento URL a (1) xdg-open or (2) xdg-email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*","matchCriteriaId":"19D64247-F0A0-4984-84EA-B63FC901F002"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"316AA6EB-7191-479E-99D5-40DA79E340E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"CB7AD2F3-451D-4F37-A6F3-DE676804BBA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"5FE8C9E7-15C3-4F89-8E54-C9691FAD4E4C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:xdg-utils:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"8BFF1BFC-9F24-414F-9BB7-910BFBA3385D"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207331","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28728","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29048","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?r1=1.24&r2=1.25","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?view=log","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email?r1=1.36&r2=1.37","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open.in?r1=1.17&r2=1.18","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?r1=1.32&r2=1.33","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?view=log","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:031","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27528","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019284","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0342","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429513","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://security.gentoo.org/glsa/glsa-200801-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?r1=1.24&r2=1.25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email.in?view=log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-email?r1=1.36&r2=1.37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open.in?r1=1.17&r2=1.18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?r1=1.32&r2=1.33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://webcvs.freedesktop.org/portland/portland/xdg-utils/scripts/xdg-open?view=log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2008-0387","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption."},{"lang":"es","value":"Desbordamiento de entero en Firebird SQL 1.0.3 y versiones anteriores, 1.5.x versiones anteriores a 1.5.6, 2.0.x versiones anteriores a 2.0.4, y 2.1.x versiones anteriores a 2.1.0 RC1, podría permitir a atacantes remotos ejecutar código de su elección mediante peticiones manipuladas (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, y (6) op_start_send_and_receive XDR, que disparan corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"9439D7B3-B54A-4C31-B35B-445CF52B03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5","versionEndExcluding":"1.5.6","matchCriteriaId":"ED5BF0C6-148D-4142-9479-52831305FF8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.4","matchCriteriaId":"F587EADE-6D7E-4342-9626-0DB2D1640E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CAD9E1-1572-4BD7-AFAE-B862A5AF4B2E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29203","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29501","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3580","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://tracker.firebirdsql.org/browse/CORE-1681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/?action=item&id=2095","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1529","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487173/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27403","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39996","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tracker.firebirdsql.org/browse/CORE-1681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/?action=item&id=2095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487173/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0388","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el añadido WP-Forum 1.7.4 para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user en una acción showprofile en la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wp_forum:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"57865D55-4F48-4F78-B85D-A208BA61F43C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0272.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52211","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28567","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://weblogtoolscollection.com/archives/2008/01/21/wp-forum-plugin-security-bulletin/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39800","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4939","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://weblogtoolscollection.com/archives/2008/01/21/wp-forum-plugin-security-bulletin/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0389","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en la función serveServletsByClassnameEnabled en IBM WebSphere Application Server (WAS) versiones 6.0 hasta 6.0.2.25, versiones 6.1 hasta 6.1.0.14 y versiones 5.1.1.x anteriores a 5.1.1.18, presenta un impacto desconocido y vectores de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.1.17","matchCriteriaId":"1E42B3D6-7400-45D1-82D6-C187B5E50789"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31419896-89F7-43A2-8B7C-3B92744BBC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"559355CF-7FA8-4D90-8393-90C912F571C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"355967D9-475A-49AF-A3FF-E0AC3668B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC04CE9C-82B4-4406-823A-69A5E13ECA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F6A5B3A-E57D-4574-A481-7EDA93664076"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"425890C2-FC96-4191-B512-6A3DB7BCE2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"0CF8ED4D-D2B6-49EC-930A-16A78E729F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"2F215B48-7ED5-45EB-BD26-3D3EAD01506F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C47D1C56-238B-414B-B2D2-D7069E42D001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"625B5901-B0AF-4D00-BC56-525A6F72943D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01F45BA3-6504-47AF-B757-7B6D3526FBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*","matchCriteriaId":"D592217D-3489-40AE-8338-BF5AA5BBA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFCD0A1-64B4-4AE7-8161-D8A71F9D6904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C086B402-55AC-4913-A929-380EBC438988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D4FC14C3-5BFF-4F56-BBD2-3219E7151BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"40D5CB7D-BD01-4EF3-AF8B-100C200A4C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"736A02C8-784F-4CEE-BACF-C5C37E8930C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"200B6A88-EFBD-4935-9596-D8EF3BC24D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"20131F92-09B2-41D8-B5D9-38EFE6883EC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28576","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018067","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018067","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51118","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27371","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019251","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019894","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1133","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39808","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0390","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php."},{"lang":"es","value":"stat.php en AuraCMS 1.62, y Mod Block Statistik para AuraCMS, permite a atacantes remotos inyectar códio PHP de su elección a dentro de online.db.txt a través de la cabecera HTTP X-Forwarded-For en una acción stat en index.php, y ejecutar online.db.txt a través de ciertas respuestas index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:1.62:*:*:*:*:*:*:*","matchCriteriaId":"0C93C4BB-2CC5-48AA-9440-A2C2199F6B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:mod_block_statistik:*:*:*:*:*:*:*:*","matchCriteriaId":"A1E47A0E-01B5-4BCF-BC43-A8E02206220A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27342","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39777","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4933","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0391","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters."},{"lang":"es","value":"inc/elementz.php en aliTalk 1.9.1.1 no verifica de forma adecuada la validación, lo cual permite a atacantes remotos añadir un usuario de su elección a través del parámetro lilil modificado, en una conjunción con los parámetros ubild y pa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alilg:alitalk:1.9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BA2E3777-0EFC-40AE-97E9-FFD6A39C7800"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27315","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4922","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0392","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Microsoft Visual Basic Enterprise Edition 6.0 SP6  permite a atacantes remotos con la intervención del usuario ejecutar código de su elección a través del código de un archivo .dsr con una línea de longitud (1) ConnectionName o (2) CommandName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:sp6:enterprise:*:*:*:*:*","matchCriteriaId":"CF4DF3F5-AA1F-4F14-AEF5-247BBA88AEF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/28563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27349","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019258","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0195","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39773","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4938","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0393","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter, a different vector than CVE-2008-0361."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en info.php en GradMan 0.1.3 y anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de la secuencia .. (punto punto) en el parámetro table, un vector diferente que CVE-2008-0361."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gradman:gradman:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.3","matchCriteriaId":"3A6C2815-6457-4578-A335-A1B423CE8ADB"}]}]}],"references":[{"url":"http://secunia.com/advisories/28520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39768","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4936","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0394","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function.  NOTE: some of these details were obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en Citadel SMTP server 7.10 y anteriores permite a atacantes remotos ejecutgar código de su elección a través del comando largos RCTP TO, el cual no es manejado de forma adecuada por la función makeuserkey. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:smtp:*:*:*:*:*:*:*:*","versionEndIncluding":"7.10","matchCriteriaId":"B8BC4407-7770-4EEB-AF30-438746E1E60D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27376","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019255","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0252","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39807","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0395","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal."},{"lang":"es","value":"Kayako SupportSuite 3.11.01 permite a atacantes remotos obtener información de la configuración del servidor a través de una respuesta directa en syncml/index.php, el cual imprime el contenido de $_SERVER superglobal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*","matchCriteriaId":"0F297ABB-E65C-4BBF-B846-AFCC5A572540"}]}]}],"references":[{"url":"http://secunia.com/advisories/28613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3573","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486762/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-63.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486762/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-63.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0396","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en BitDefender Update Server (http.exe), tal y como se utiliza en los productos BitDefender incluyendo Security for Fileservers and Enterprise Manager (BDEM), permite a atacantes remotos leer archivos de su elección a través de la secuencia .. en una respuesta HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:update_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2E81A03E-FA83-4446-9DB1-F7F8656004F7"}]}]}],"references":[{"url":"http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3568","source":"cve@mitre.org"},{"url":"http://www.oliverkarow.de/research/bitdefender.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486701/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27358","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0213","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39802","source":"cve@mitre.org"},{"url":"http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oliverkarow.de/research/bitdefender.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486701/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0397","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to comments.php and (2) an unspecified parameter to view.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en aflog 1.01, y posiblemente anteriores, permite a atacantes remotos ejecutar comandos SQL a través del parñametro (1) id en comments.php y (2)unos parámetros no especificados en view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aflog.org:aflog:1.01:*:*:*:*:*:*:*","matchCriteriaId":"23FD5F54-5E12-4418-A78F-1F9CCF3773F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28594","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27398","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39825","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0398","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment form."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en aflog 1.01, y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del formulario comment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aflog:aflog:*:*:*:*:*:*:*:*","versionEndIncluding":"1.01","matchCriteriaId":"46A95E38-0C1D-4919-B6DA-A97A9F5A3212"}]}]}],"references":[{"url":"http://secunia.com/advisories/28594","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27398","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0255","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0399","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow remote attackers to execute arbitrary code via long arguments to the (1) SetPort and (2) SetIpAddress methods."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el controlador ActiveXToshiba Surveillance (Surveillix) RecordSend MeIpCamX.DLL 1.0.0.4) permite a atacantes remotos ejecutar código de su elección a través de argumentos largos en los métodos (1) SetPort y (2) SetIpAddress."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:surveillix:1.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"09DF3E64-531B-4B10-AA88-1E465BF8136B"}]}]}],"references":[{"url":"http://retrogod.altervista.org/rgod_toshiba_control.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27360","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0214","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39792","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4946","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/rgod_toshiba_control.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0400","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php."},{"lang":"es","value":"Vulnerabilidad se secuencias de comandos en sitios cruzados (XSS) en header.tpl.php en la plantilla modern para Singapore 0.10.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro gallery en default.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modern:modern:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EA0CFAEE-CFF6-4E4A-A49C-D102523BE3F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:singapore:singapore:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B81E7304-9E66-49F3-8437-5593043D0F00"}]}]}],"references":[{"url":"http://secunia.com/advisories/28573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trew.icenetx.net/toolz/advisory-singapore-modern-template.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27382","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trew.icenetx.net/toolz/advisory-singapore-modern-template.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0401","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request with a long method string to port 443/tcp."},{"lang":"es","value":"Un desbordamiento del búfer en la funcionalidad de inicio de sesión del servidor HTTP en IBM Tivoli Provisioning Manager para OS Deployment (TPMfOSD) versiones anteriores a 5.1.0.3 Interim Fix 3, permite a atacantes remotos causar una denegación de servicio (bloqueo del demonio) o posiblemente ejecutar código arbitrario por medio de una petición HTTP con una cadena de método larga hacia el puerto 443/tcp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_provisioning_manager_os_deployment:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.0.2","matchCriteriaId":"A3C1B6FC-DD04-4D5F-8C93-8A9A65878FF8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28604","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018010","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/158609","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27387","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019249","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0239","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39819","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/158609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0402","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members of the repository's owning group."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM WebSphere Business Modeler Basic y Advanced 6.0.2.1 anterior a Interim Fix 11 permite a usuarios remotos validados evitar intenciones las restricciones de acceso intencionada y borrar recursos del repositorio de su elección a través de vectores desconocidos, incluso cuando no son administradores o miembros del grupo al que pertenece el respositorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_business_modeler:6.0.2_1:*:advanced:*:*:*:*:*","matchCriteriaId":"C6D2FBE7-9647-43C0-B9C9-BBF65C2DDA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_business_modeler:6.0.2_1:*:basic:*:*:*:*:*","matchCriteriaId":"F08393EA-AA31-41C0-9259-27D5F008E65D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018060","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018061","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27389","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019252","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0403","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi."},{"lang":"es","value":"El servidor web en Belkin Wireless G Plus MIMO Router F5D9230-4 no requiere de validación paraSaveCfgFile.cgi, el cual permite a atacantes remotos leer y modificar la configuración a través de una respuesta directa a SaveCfgFile.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:f5d9230-4:*:*:*:*:*:*:*:*","matchCriteriaId":"D2D5A44B-9095-4C50-98EB-83B3734B5C14"}]}]}],"references":[{"url":"http://secunia.com/advisories/28554","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3566","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486748/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27359","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0215","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39793","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486748/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0404","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the \"Most active bugs\" summary."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en Mantis versiones anteriores a 1.1.1, permite a atacantes remotos inyectar script web o HTML arbitrario por medio de vectores relacionados con el resumen de \"Most active bugs\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"0DD01725-8887-4005-980A-EAC77E3AC5E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*","matchCriteriaId":"70450FAB-7886-418E-B471-8F16A68F9658"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*","matchCriteriaId":"101BF6DC-0F73-41E0-A0EE-BA1EA7397423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC458D9-12B1-4CF1-980E-BC86E874BBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*","matchCriteriaId":"5419E3AC-4215-4584-9538-AF790DC9BD5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D3C48B8F-633E-4D69-A174-26C19829DE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*","matchCriteriaId":"DD259C18-7111-45C9-B6C3-6A5F29998146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*","matchCriteriaId":"7CBA3B4B-D7E6-4555-969F-66217ACDACDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*","matchCriteriaId":"38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*","matchCriteriaId":"6770FDC6-792D-49B2-942B-282F9012D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C62F6BC-4397-44BD-A7DA-CD4C52425BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C6DB707C-29DF-442C-BBBE-650182692A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"0C420189-4748-465C-96FE-DC89502F7E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3B3A1BAC-F777-413E-BFB7-972C687C2D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*","matchCriteriaId":"730BE023-C283-4775-915C-79817723917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*","matchCriteriaId":"337E18A7-07A3-456D-868A-2002F96D7A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*","matchCriteriaId":"84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2B0DF8C-FF2D-4DE8-B0D1-92623974A874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0a1:*:*:*:*:*:*:*","matchCriteriaId":"F9555553-AEA7-42B3-BE94-7C4729259378"}]}]}],"references":[{"url":"http://secunia.com/advisories/28577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=569765","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27367","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0232","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429552","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39801","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00676.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00734.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=569765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00676.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00734.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0405","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remote attackers to create arbitrary (1) files and (2) directories via a .. (dot dot) in an account name, when requesting the / URI; and (3) append arbitrary data to a file via a .. (dot dot) in an account name, when requesting a URI composed of a \"/?%0a\" sequence followed by the data."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en HTTP File Server (HFS) versiones anteriores a 2.2c, cuando los nombres de cuenta se utilizan como ficheros de traza, permite a atacantes remotos crear (1) ficheros y (2) directorios mediante .. (punto punto),  de su elección en un nombre de cuenta, al realizar la petición / URI; y (3) añadir datos de su elección en un fichero mediante un .. (punto punto) en un nombre de cuenta, al realizar la petición de un URI compuesto de la secuencia \"/?%0a\" seguido de los datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2b","matchCriteriaId":"61CA8887-6726-40E3-B6DD-323BF32488C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3581","source":"cve@mitre.org"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486873/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27423","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfs-1-log.txt","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486873/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfs-1-log.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0406","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daemon crash) via a long account name."},{"lang":"es","value":"HTTP File Server (HFS) versiones anteriores a 2.2c, cuando los nombres de cuenta se utilizan como ficheros de traza, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) mediante un nombre de cuenta largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2b","matchCriteriaId":"61CA8887-6726-40E3-B6DD-323BF32488C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3581","source":"cve@mitre.org"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486873/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27423","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfs-1-log.txt","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39875","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486873/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfs-1-log.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0407","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request."},{"lang":"es","value":"HTTP File Server (HFS) versiones anteriores a 2.2c etiqueta entradas en el fichero de trazas relativas a peticiones HTTP con el nombre de usuario enviado durante la Autenticación HTTP Básica, sin importar si la autenticación fue exitosa, lo cual podría dificultar a un administrador para determinar quién realiza peticiones remotas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2b","matchCriteriaId":"61CA8887-6726-40E3-B6DD-323BF32488C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3582","source":"cve@mitre.org"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486874/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27423","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfs-1-username.txt","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39877","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486874/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfs-1-username.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0408","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication."},{"lang":"es","value":"HTTP File Server (HFS) versiones anteriores a 2.2c permite a atacantes remotos añadir texto de su elección en el fichero de trazas utilizando la representación base64 del texto durante la la Autenticación HTTP Básica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2b","matchCriteriaId":"61CA8887-6726-40E3-B6DD-323BF32488C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28631","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3582","source":"cve@mitre.org"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486874/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27423","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfs-1-username.txt","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486874/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfs-1-username.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0409","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo subcomponent of a URL."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en HTTP File Server (HFS) versiones anteriores a 2.2c permite a atacantes remotos inyectar scripts web o HTML de su elección mediante el subcomponente userinfo de un URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2b","matchCriteriaId":"61CA8887-6726-40E3-B6DD-323BF32488C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3583","source":"cve@mitre.org"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486872/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27423","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfs-1-template.txt","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486872/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfs-1-template.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0410","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL."},{"lang":"es","value":"HTTP File Server (HFS) versiones anteriores a 2.2c permite a atacantes remotos obtener detalles de la configuración y uso utilizando un elmento id tal como <id>%version%</id> en la Autenticación HTTP Básica en vez de un usuario y contraseña, como se demuestra al ubicar este elemento id en el sub componente userinfo de un URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hfs:http_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2b","matchCriteriaId":"61CA8887-6726-40E3-B6DD-323BF32488C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3583","source":"cve@mitre.org"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486872/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27423","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfs-1-template.txt","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39871","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rejetto.com/hfs/?f=wn","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486872/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfs-1-template.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/hfshack.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0411","sourceIdentifier":"secalert@redhat.com","published":"2008-02-28T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función zseticcspace de zicc.c en Ghostscript 8.61 y anteriores permite a atacantes remotos    ejecutar código de su elección a través de un archivo postscript (.ps) que contiene un array de Range (rango) largo en un operador .seticcspace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*","matchCriteriaId":"5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*","matchCriteriaId":"AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*","matchCriteriaId":"5EACF214-FA27-44FF-A431-927AB79377A1"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*","matchCriteriaId":"E2B58895-0E2A-4466-9CB2-0083349A83B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*","matchCriteriaId":"03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*","matchCriteriaId":"2311919C-7864-469D-B0F6-9B11D8D0A1C3"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*","matchCriteriaId":"19876495-4C1A-487C-955A-C5AA46362A1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*","matchCriteriaId":"D75286DD-50BC-4B72-8AC8-E20730124DC2"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*","matchCriteriaId":"1998C972-497E-4916-B50E-FB32303EEA8E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*","matchCriteriaId":"A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*","matchCriteriaId":"6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"08E90AFA-C262-46D0-B60E-26B67C9602D5"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*","matchCriteriaId":"02362C25-B373-4FB1-AF4A-2AFC7F7D4387"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.0_x86_64:*:*:*:*:*:*:*","matchCriteriaId":"DC4784E4-24D1-4E22-B880-846F21F52F73"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*","matchCriteriaId":"19D64247-F0A0-4984-84EA-B63FC901F002"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"316AA6EB-7191-479E-99D5-40DA79E340E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"CB7AD2F3-451D-4F37-A6F3-DE676804BBA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"5FE8C9E7-15C3-4F89-8E54-C9691FAD4E4C"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2BB0B27C-04EA-426F-9016-7406BACD91DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94F65351-C2DA-41C0-A3F9-1AE951E4386E"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrakesoft_corporate_server:3.0_x86_64:*:*:*:*:*:*:*","matchCriteriaId":"8E8AA83A-C1D6-486F-A765-065E3BCAAC3F"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrakesoft_corporate_server:4.0_x86_64:*:*:*:*:*:*:*","matchCriteriaId":"DD9BC765-C645-417C-A01C-AD37AE9DC81E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6C8CB34E-02FE-4F90-9642-B56D3B3ACEF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2AB2579A-2BC9-4E16-9641-248222301660"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*","matchCriteriaId":"5833A489-D6DE-4D51-9E74-189CBC2E28CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*","matchCriteriaId":"6BF1F027-C9FF-4583-AB40-E0B757F9EE41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_3:*:*:*:*:*:*:*","matchCriteriaId":"6EA8914F-DB6D-4C21-A727-8B94BE0424BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*","matchCriteriaId":"B18EBE6E-482D-435D-851C-73EC301F0A26"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*","matchCriteriaId":"AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_workstation:5:*:client:*:*:*:*:*","matchCriteriaId":"0E22A48D-9770-4BEC-BFA7-F9BD8C31AC44"},{"vulnerable":false,"criteria":"cpe:2.3:o:rpath:rpath_linux:1:*:*:*:*:*:*:*","matchCriteriaId":"0DD12BC0-1E50-49C6-AD0D-8CE90F0E8449"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:novell_linux_pos:9:*:*:*:*:*:*:*","matchCriteriaId":"C1197AF2-7BAE-4035-8C56-885CD12BDB6B"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"A876EFC5-50DC-4A6A-A9F2-24D8AC773E7D"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"D71E02A6-5F83-46EC-88C1-687E6EB88F5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_desktop:*:*:*:*:*","matchCriteriaId":"C4F119BA-1FCA-41DF-B834-62F14CA8816E"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"26B6132C-4FF0-4359-B0A6-BBA4ED73E1D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.1:*:ppc:*:*:*:*:*","matchCriteriaId":"84B05DB5-3BF9-4576-970B-A1701FC369AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.1:*:x86:*:*:*:*:*","matchCriteriaId":"F15CDDE2-BA9E-4B8D-8B01-21494360290E"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"5B367EE1-EB53-4DC6-B154-FFA99060DA47"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_open_enterprise_server:0:*:*:*:*:*:*:*","matchCriteriaId":"B4B0E781-64D4-4C1B-A8DE-9EB9ECC7F0F4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"8.61","matchCriteriaId":"838F2E76-9050-499F-AE47-5EF3AB7104A3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*","matchCriteriaId":"5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*","matchCriteriaId":"AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*","matchCriteriaId":"5EACF214-FA27-44FF-A431-927AB79377A1"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*","matchCriteriaId":"E2B58895-0E2A-4466-9CB2-0083349A83B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*","matchCriteriaId":"03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*","matchCriteriaId":"2311919C-7864-469D-B0F6-9B11D8D0A1C3"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*","matchCriteriaId":"19876495-4C1A-487C-955A-C5AA46362A1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*","matchCriteriaId":"D75286DD-50BC-4B72-8AC8-E20730124DC2"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*","matchCriteriaId":"1998C972-497E-4916-B50E-FB32303EEA8E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*","matchCriteriaId":"A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*","matchCriteriaId":"6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"08E90AFA-C262-46D0-B60E-26B67C9602D5"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:0:*:*:*:*:*:*:*","matchCriteriaId":"6E68242D-465A-443F-9D25-BE57F9080394"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9877DC36-5151-43C9-864D-BE7939A0304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*","matchCriteriaId":"1F9F0F0A-E413-42CC-B67D-434EC6A92543"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2008-001.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29101","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29103","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29112","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29135","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29147","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29154","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29169","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29196","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29314","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29768","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0082","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1510","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-14.xml","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:055","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0155.html","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488932/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/488946/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28017","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019511","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-599-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0693/references","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"https://issues.rpath.com/browse/RPL-2217","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html","source":"secalert@redhat.com","tags":["Release Notes","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2008-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/29768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/488946/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-599-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0693/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://issues.rpath.com/browse/RPL-2217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0412","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors."},{"lang":"es","value":"El motor de búsqueda en Mozilla Firefox versiones anteriores a la 2.0.0.12, Thunderbird versiones anteriores a la 2.0.0.12 y SeaMonkey versiones anteriores a la 1.1.8 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente disparar una corrupción de memoria a través de vectores relacionados con los métodos (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame y (6) nsLineLayout::TrimTrailingWhiteSpaceIn y con otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28808","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29164","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29211","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-01.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019320","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=398088%2C393141%2C364801%2C346405%2C396613%2C394337%2C406290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0413","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors."},{"lang":"es","value":"El motor JavaScript de Mozilla Firefox versiones anteriores a 2.0.0.12, Thunderbird versiones anteriores a 2.0.0.12, y SeaMonkey versiones anteriores a 1.1.8 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente disparar una corrupción de memoria a través de (1) sentencia switch larga (2) determinados usos de watch y eval, (3) determinados usos del evento de escucha mousedown y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29164","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29211","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-01.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019321","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720%2C390597%2C373344%2C398085%2C406572%2C391028%2C406036%2C402087","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=407720%2C390597%2C373344%2C398085%2C406572%2C391028%2C406036%2C402087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0414","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka \"focus spoofing.\""},{"lang":"es","value":"Mozilla Firefox versiones anteriores a 2.0.0.12 y SeaMonkey versiones anteriores a 1.1.8, permiten a atacantes remotos con la intervención del usuario engañarle enviando archivos de su elección  a través de etiquetas label que cambian el foco a un campo de entrada de archivo, también conocido como \"focus spoofing.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0414\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future updates will address this flaw.\nMore information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/","lastModified":"2008-02-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-02.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019330","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404451%2C408034%2C404391%2C405299","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404451%2C408034%2C404391%2C405299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0415","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka \"JavaScript privilege escalation bugs.\""},{"lang":"es","value":"Mozilla Firefox versiones anteriores a 2.0.0.12, Thunderbird versiones anteriores a 2.0.0.12, y SeaMonkey versiones anteriores a 1.1.8, permiten a atacantes remotos ejecutar scripts fuera de la caja de arena (sandbox) y realizar ataques de secuencias de comandos en sitios cruzados (XSS) a través de múltiples vectores incluyendo la función XMLDocument.load, también conocidos como \"bugs de escalado de privilegios en JavaScript\".<"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29164","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29211","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-03.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019327","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695%2C393761%2C393762%2C399298%2C407289%2C372075%2C363597","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=386695%2C393761%2C393762%2C399298%2C407289%2C372075%2C363597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0416","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox  before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) \"zero-length non-ASCII sequences\" in certain Asian character sets."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Mozilla Firefox en versiones anteriores a 2.0.0.12, Thunderbird en versiones anteriores a 2.0.0.12 y SeaMonkey en versiones anteriores a 1.1.8 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de ciertas codificaciones de caracteres, incluyendo (1) un carácter de retroceso que se trata como un espacio en blanco, (2) 0x80 con codificación Shift_JIS y (3) \"secuencias de longitud cero non-ASCII\" en ciertos conjuntos de caracteres asiáticos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN21563357/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-13.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29303","source":"secalert@redhat.com"},{"url":"http://www.turbolinux.com/security/2008/TLSA-2008-9.txt","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40488","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/576-1/","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN21563357/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/security/2008/TLSA-2008-9.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/576-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0417","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en versiones anteriores a Mozilla Firefox 2.0.0.12 que permite a sitios web remotos con la intervención del usuario corromper la contraseña de usuario almacenada en las nuevas líneas que no son manejadas adecuadamente cuando el usuario guarda la contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-04.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019334","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=394610","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11154","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=394610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0418","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using \"flat\" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, y SeaMonkey en versiones anteriores a 1.1.8, cuando usa addons \"llanos\", permite a atacantes remotos leer Javascript, imágenes, y ficheros de hojas de estilo de su elección a través de chrome: URI scheme, tal y como se demostró robando información de la sesión de sessionstore.js."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28622/","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29164","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29211","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/309608","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-05.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27406","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019329","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0263","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28622/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/309608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-05.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0419","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles."},{"lang":"es","value":"Mozilla Firefox versiones anteriores a 2.0.0.12 y SeaMonkey versiones anteriores a 1.1.8, permite a los atacantes remotos robar el historial de navegación y causar una denegación de servicio (bloqueo) por medio de imágenes en una página que usa tramas designMode, lo que desencadena corrupción de memoria relacionada con el manejo del redimensionamiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28808","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29164","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/879056","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-06.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019328","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=400556","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/879056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=400556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0420","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10."},{"lang":"es","value":"El archivo modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp en Mozilla Firefox versiones anteriores a 2.0.0.12, Thunderbird versiones anteriores a 2.0.0.12, y SeaMonkey versiones anteriores a 1.1.8, no realiza apropiadamente ciertos cálculos relacionados con la tabla mColors, lo que permite a los atacantes remotos leer partes de memoria no inicializadas por medio de un archivo de mapa de bits de 8 bits (BMP) diseñado que desencadena una lectura fuera de límites dentro de la pila, como es demostrado mediante el uso de un elemento CANVAS; o al causar una denegación de servicio (bloqueo de la aplicación) por medio de un archivo de mapa de bits de 8 bits diseñado que desencadena una lectura fuera de límites. NOTA: los reportes públicos iniciales indicaron que esto afectó a Firefox en Ubuntu versiones 6.06 hasta 7.10."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29098","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019434","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-07.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488264/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27826","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408076","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40491","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40606","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/576-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488264/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-582-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/576-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0421","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Invision Gallery 2.0.7 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro album en un comando rate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.7","matchCriteriaId":"DA75DBB9-9412-47C3-8B38-04AE349E8924"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/4966","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0422","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mail.php de boastMachine (también conocido como bMachine) 3.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boastmachine:boastmachine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"B9400823-B9FA-4B8C-8C9E-0509C38E72DF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486737/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498521/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27369","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32379","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0227","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39813","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4952","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486737/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498521/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0423","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MY_CONF[classRoot] parameter to (1) inc.steps.access_error.php, (2) inc.steps.check_login.php, or (3) inc.steps.init_system.php in admin/functions/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Lama Software permiten a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro MY_CONF[classRoot] (1) inc.steps.access_error.php, (2) inc.steps.check_login.php, ó (3) inc.steps.init_system.php en admin/functions/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lama:lama_software:*:*:*:*:*:*:*:*","matchCriteriaId":"10C29917-8F04-4FEC-AB7D-E4157EA50454"}]}]}],"references":[{"url":"http://secunia.com/advisories/28442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39821","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0424","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en blog.php de Mooseguy Blog System (MGBS) 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro month."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mooseguy_blog_system:mgbs:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17E75603-DEA8-460D-958B-33F348CEEEAB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27377","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0226","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39816","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4951","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0425","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary files and list arbitrary directories via a full pathname in the name parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en explorerdir.php de Frimousse 0.0.2 permite a atacantes remotos leer archivos y listar directorios de su elección mediante un nombre de ruta completo en el parámetro name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frimousse:frimousse:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"32AA1533-E45F-43BF-BFBE-6B7D1C09F5C4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27385","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0216","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39797","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0426","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PacerCMS before 0.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) headline, or (3) text field in a message."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el archivo submit.php en PacerCMS versiones anteriores a 0.6.1, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio del campo (1) name, (2) headline o (3) text en un mensaje ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pacercms:pacercms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.1","matchCriteriaId":"0F2A4EA3-1C4A-46D9-833E-C10636E9773B"}]}]}],"references":[{"url":"http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486796/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27386","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39832","source":"cve@mitre.org"},{"url":"http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486796/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0427","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en file.php de bloofoxCMS 0.3 permite a atacantes remotos leer archivos de su elección mediante un .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bloo:bloofoxcms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"2E9D590A-287A-4CF3-A7F1-4D455B930F24"}]}]}],"references":[{"url":"http://bugreport.ir/?/27","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120093005310107&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28415","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486714/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39795","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4945","source":"cve@mitre.org"},{"url":"http://bugreport.ir/?/27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120093005310107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486714/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0428","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la función login de system/class_permissions.php en bloofoxCMS 0.3 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) username o (2) password de admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bloofoxcms:bloofoxcms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"55A32A89-2755-43DD-966D-76A1C7CA510B"}]}]}],"references":[{"url":"http://bugreport.ir/?/27","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120093005310107&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28415","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486714/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4945","source":"cve@mitre.org"},{"url":"http://bugreport.ir/?/27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120093005310107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486714/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0429","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de AlstraSoft Forum Pay Per Post Exchange 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid en una acción forum_catview."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:forum_pay_per_post_exchange:2.0:*:*:*:*:*:*:*","matchCriteriaId":"41B27244-9257-4A54-AE73-7C1D545DA225"}]}]}],"references":[{"url":"http://secunia.com/advisories/28581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27381","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0231","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39820","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6401","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0430","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en form.php de 360 Web Manager 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro IDFM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:360_web_manager:360_web_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BEDB3BF2-B230-4AA1-9753-17C37A4EB76F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27364","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39796","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0431","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en administrator/download.php de IDMOS (también conocido como Phoenix) 1.0 permite a atacantes remotos leer archivos de su elección mediante un .. (punto punto) en el parámetro fileName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idmos:idmos_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AB819566-A236-48C5-9AB6-A5C4EB47C6D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28436","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27379","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39823","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4954","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0432","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de phpAutoVideo 2.21 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:phpautovideo:*:*:*:*:*:*:*:*","versionEndIncluding":"2.21","matchCriteriaId":"DA7D7F4F-CA89-48B1-8ECC-9749686D468E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3567","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486591/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27346","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0225","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39771","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486591/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0433","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter, a different vector than CVE-2007-6614."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en theme/phpAutoVideo/LightTwoOh/sidebar.php de Agares phpAutoVideo 2.21 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro loadpage, un vector diferente de CVE-2007-6614."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:phpautovideo:*:*:*:*:*:*:*:*","versionEndIncluding":"2.21","matchCriteriaId":"DA7D7F4F-CA89-48B1-8ECC-9749686D468E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3567","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486591/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27346","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0225","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39770","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486591/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0434","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en el módulo AXIMilter de AXIGEN Mail Server 5.0.2 permite a atacantes remotos ejecutar código de su elección mediante especificadores de cadena de formato en el comando CNHO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gecad_technologies:axigen_mail_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"32161963-537A-4813-9177-803D9EDAF5BB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28562","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3570","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486722/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39803","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4947","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486722/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0435","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the id parameter in a printpreview action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de OZJournals 2.1.1 permite a atacantes remotos leer partes de archivos de su elección mediante un .. (punto punto) en el parámetro id de una acción printpreview."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ozjournals:ozjournals:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7BA25D1D-D75F-41B0-8620-B148E730751F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27375","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39815","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4953","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0436","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web script or HTML via the target parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profile-upload/upload.asp de PD9 Software MegaBBS 1.5.14b permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:1.5.14b:*:*:*:*:*:*:*","matchCriteriaId":"BF3BE2E3-D07F-4232-AE66-CDCD1D5A645C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486723/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27368","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39812","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0437","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el control ActiveX WebHPVCInstall.HPVirtualRooms14.dll 1.0.0.100, usado en el proceso de instalación de HP Virtual Rooms, permiten a atacantes remotos ejecutar código de su elección mediante un valor largo para las propiedades (1) AuthenticationURL, (2) PortalAPIURL, o (3) cabroot. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtual_rooms:1.0.0.100:*:*:*:*:*:*:*","matchCriteriaId":"488DCE80-F39A-4AC7-BD74-F7C00FDF8F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:activex:*:*:*:*:*:*:*:*","matchCriteriaId":"EDEF84E6-3C24-4B73-96A4-467F5C03DB04"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120098751528333&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27384","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39836","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4959","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=120098751528333&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0438","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the txt parameter to a Flash (SWF) file, as demonstrated by fonts/FuturaLt.swf."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad de dibujado de fuentes en Novemberborn sIFR 2.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro txt de un fichero Flash (SWF), como se ha demostrado mediante fonts/FuturaLt.swf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novemberborn:sifr:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEB77B17-971E-47FB-81E9-41B257A93789"}]}]}],"references":[{"url":"http://novemberborn.net/sifr/2.0.3","source":"cve@mitre.org"},{"url":"http://osvdb.org/41006","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3571","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-38.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486787/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486829/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487585/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27394","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39835","source":"cve@mitre.org"},{"url":"http://novemberborn.net/sifr/2.0.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-38.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486787/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486829/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487585/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0439","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows remote attackers to inject arbitrary web script or HTML via the lang_listofmatches parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en template/default/admincp/attachments_header.php  de DeluxeBB 1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro lang_listofmatches."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27346DF8-248F-426C-A435-7FDBCB34A977"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3564","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486804/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27401","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39829","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486804/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0440","sourceIdentifier":"cve@mitre.org","published":"2008-01-23T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts."},{"lang":"es","value":"AlstraSoft Forum Pay Per Post Exchange 2.0 almacena contraseñas en texto en claro, lo cual facilita a atacantes el acceso a cuentas de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:forum_pay_per_post_exchange:2.0:*:*:*:*:*:*:*","matchCriteriaId":"41B27244-9257-4A54-AE73-7C1D545DA225"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/4956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0441","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the password to SM_server.log; and (2) after a reconfig action; which allows local users to obtain sensitive information."},{"lang":"es","value":"IBM Tivoli Business Service Manager (TBSM) 4.1.1 almacena contraseñas en texto plano (1) después de la autenticación externa, lo cual provoca la escritura de la contraseña en SM_server.log; y (2) después de la opción reconfig; lo cual permite a usuarios locales obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_business_service_manager:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DC626BB7-2A1C-48BA-9E8D-441B915D8568"}]}]}],"references":[{"url":"http://secunia.com/advisories/28603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24017939","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27388","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019250","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0240","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24017939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0442","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en inc/linkbar.php de Small Axe Weblog 0.3.1 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro ffile, un vector diferente de CVE-2008-0376. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:small_axe_solutions:weblog:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1E31E5E2-7C66-4381-89BB-4C52F1482BFA"}]}]}],"references":[{"url":"http://secunia.com/advisories/28568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27383","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0443","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX FileUploader.FUploadCtl.1 de FileUploader.dll 2.0.0.2 en el módulo Lycos FileUploader permite a atacantes remotos ejecutar código de su elección mediante un valor de la propiedad HandwriterFilename. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lycos:fileuploader.dll:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3ECB146F-5146-4251-9633-00D8F48895C2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27411","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0253","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39849","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0444","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Electronic Logbook (ELOG) anterior a 2.7.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro subtext a componentes no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AB5B281C-756F-4730-B988-129D5D5ED9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFEE69C0-8B08-4BCD-B388-7356E84466B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE73E755-EA42-4BDE-A6CC-E72658FD1A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E8249E7-DCF1-463D-BD6B-07B621E82EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"17DC6466-3E39-4502-AA3D-BEFDE016F759"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"121FC6FD-EA8D-43F0-9F2B-21FE4D56A8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A50F1799-7D13-48E3-83FB-9413BEC6AF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E35B5A4E-FDEB-4A9D-B3CC-4025F215FED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3589711E-612A-4C7A-A447-6190F5B988F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A43AAE0-7F48-4CAE-A669-A24902CE4D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D4A9DAE4-A22A-45E8-9259-393FF0DFB3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5E24350-DAB6-4D46-BB8C-BA127ADEAC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55A2F36E-B9EB-4D1F-93FB-4518A18E77B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80BB7A6F-CF02-4557-9EA3-977C160E0C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"26EB6E8F-24B5-4BA8-8ED6-3843ABE3E9DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"48420EC7-FC95-448D-912F-6BB9D2C0C084"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"6E8E5F55-AC2C-4844-8671-F8D7CA812F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B2A6942-5B5C-4622-BF2C-D69941250269"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A30AC66A-5BC9-4FA9-A8FB-4699FFDFA5CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B0F201C0-9AE3-4BB1-A744-CEB928534A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F97A2D31-B3C8-4A2D-9296-0D9FAE55F109"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"610F7CC0-63F7-41C9-BC41-B9A20BD9A022"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B671811E-E214-44CC-B2C5-89FA83B21A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B0B6187A-3335-4D89-B8F0-A4EAD8E88498"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5EA5C490-0487-4759-9274-844C5C6C8F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4F595EE-5852-4808-9003-42BC80DB7477"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E51017F-A270-4406-947E-D13857FE325C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0F9BF705-D6E5-42E4-AA3B-0D05D3E269C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1CC9A579-D75A-41FD-82CD-79ED098F448E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"73206777-B2E7-46E8-862C-FBF429A42C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8C96FD4C-1CBE-4BFB-A39B-0F64C9E96B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF5A2D83-B941-4A6E-842F-FDBCBBE670B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0D6A4B7-ADDB-4A28-B22B-A1A1DD811F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB7B94F8-688E-46BC-B390-3EDF54F050F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1CBB6D1D-698C-4A9B-9F6A-E10F6E730DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FBBE3368-77D3-4A61-A65B-F2096BF95823"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"39CBB4E1-91D5-4267-9E1D-0A82678489DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49C63CDB-1192-4A07-85E7-03F81909D6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"130EC88D-5245-42DB-AB4A-71C9AF44CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CBC05390-FE1B-47D0-8AC4-AFDFF40C6DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"15AD984D-3F11-4EFF-A653-D24221A2008F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4AC35EE0-08E3-406E-B866-F8691D9E69E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"398E385D-AE8B-4600-87E8-177130B0F414"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"97A00A3F-137A-4204-AA47-E55D71374672"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DB2B702F-EED9-4DAB-AD45-502F44D1748C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"E36E4839-FD1D-418A-8F62-88C39E378F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4D52BB1B-D26F-44B7-B139-5B5F2D3F1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A949E7C5-527E-467E-B91D-54B2D90A3893"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"350EA9F1-3FF4-4880-81AD-483B1CDBEA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B5B9A416-DB7F-4F13-B3E7-9DFA387D4656"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1D34F07F-8017-43D0-9750-03B6103B622E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0CED236A-63A2-43D7-9C9D-6C9107D2CE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"334D4A05-FB4A-4463-9978-0E59325EDDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EC55AF-21A6-406C-B02E-9DA668DB6B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03CBEF0B-74ED-439A-8DC2-EEB76F48FB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E013834E-8725-49B0-8544-D383A5A03166"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3A659097-9731-440C-9065-C04E6AC5C855"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"565BF8F2-C8B1-4933-882F-7ADA522F25C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"296F9E95-95BF-4F63-B601-6820C5CBC237"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"5D6E8A41-2AA2-4757-826A-8122E9002476"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7D8C5A99-E5A7-4650-92ED-116AFF7EDC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"97BD7090-ACE3-4D24-8765-38467B3F2E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"96675B57-21EC-41AD-9E57-A1A0A93E6B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3BD45019-5174-4173-B7A3-272F2890D53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"31EAE462-E18C-494F-B0BC-F8C21D883BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"66257524-9911-4625-8562-6D8FC6A378DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57638FC4-791C-4060-B91B-32C679945B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A6F10C8B-6F2E-4F76-B74C-C04EB78E5B4D"}]}]}],"references":[{"url":"http://midas.psi.ch/elog/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://osvdb.org/41681","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27399","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39828","source":"cve@mitre.org"},{"url":"http://midas.psi.ch/elog/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0445","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"La función replace_inline_img en elogd de Electronic Logbook (ELOG) anterior a 2.7.1 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) mediante entradas logbook manipuladas. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AB5B281C-756F-4730-B988-129D5D5ED9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFEE69C0-8B08-4BCD-B388-7356E84466B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE73E755-EA42-4BDE-A6CC-E72658FD1A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E8249E7-DCF1-463D-BD6B-07B621E82EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"17DC6466-3E39-4502-AA3D-BEFDE016F759"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"121FC6FD-EA8D-43F0-9F2B-21FE4D56A8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A50F1799-7D13-48E3-83FB-9413BEC6AF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E35B5A4E-FDEB-4A9D-B3CC-4025F215FED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3589711E-612A-4C7A-A447-6190F5B988F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A43AAE0-7F48-4CAE-A669-A24902CE4D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D4A9DAE4-A22A-45E8-9259-393FF0DFB3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5E24350-DAB6-4D46-BB8C-BA127ADEAC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55A2F36E-B9EB-4D1F-93FB-4518A18E77B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80BB7A6F-CF02-4557-9EA3-977C160E0C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"26EB6E8F-24B5-4BA8-8ED6-3843ABE3E9DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"48420EC7-FC95-448D-912F-6BB9D2C0C084"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"6E8E5F55-AC2C-4844-8671-F8D7CA812F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B2A6942-5B5C-4622-BF2C-D69941250269"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A30AC66A-5BC9-4FA9-A8FB-4699FFDFA5CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B0F201C0-9AE3-4BB1-A744-CEB928534A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F97A2D31-B3C8-4A2D-9296-0D9FAE55F109"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"610F7CC0-63F7-41C9-BC41-B9A20BD9A022"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B671811E-E214-44CC-B2C5-89FA83B21A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B0B6187A-3335-4D89-B8F0-A4EAD8E88498"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5EA5C490-0487-4759-9274-844C5C6C8F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4F595EE-5852-4808-9003-42BC80DB7477"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E51017F-A270-4406-947E-D13857FE325C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0F9BF705-D6E5-42E4-AA3B-0D05D3E269C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1CC9A579-D75A-41FD-82CD-79ED098F448E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"73206777-B2E7-46E8-862C-FBF429A42C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8C96FD4C-1CBE-4BFB-A39B-0F64C9E96B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF5A2D83-B941-4A6E-842F-FDBCBBE670B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0D6A4B7-ADDB-4A28-B22B-A1A1DD811F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB7B94F8-688E-46BC-B390-3EDF54F050F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1CBB6D1D-698C-4A9B-9F6A-E10F6E730DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FBBE3368-77D3-4A61-A65B-F2096BF95823"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"39CBB4E1-91D5-4267-9E1D-0A82678489DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49C63CDB-1192-4A07-85E7-03F81909D6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"130EC88D-5245-42DB-AB4A-71C9AF44CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CBC05390-FE1B-47D0-8AC4-AFDFF40C6DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"15AD984D-3F11-4EFF-A653-D24221A2008F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4AC35EE0-08E3-406E-B866-F8691D9E69E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"398E385D-AE8B-4600-87E8-177130B0F414"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"97A00A3F-137A-4204-AA47-E55D71374672"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DB2B702F-EED9-4DAB-AD45-502F44D1748C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"E36E4839-FD1D-418A-8F62-88C39E378F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4D52BB1B-D26F-44B7-B139-5B5F2D3F1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A949E7C5-527E-467E-B91D-54B2D90A3893"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"350EA9F1-3FF4-4880-81AD-483B1CDBEA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B5B9A416-DB7F-4F13-B3E7-9DFA387D4656"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1D34F07F-8017-43D0-9750-03B6103B622E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0CED236A-63A2-43D7-9C9D-6C9107D2CE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"334D4A05-FB4A-4463-9978-0E59325EDDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EC55AF-21A6-406C-B02E-9DA668DB6B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03CBEF0B-74ED-439A-8DC2-EEB76F48FB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E013834E-8725-49B0-8544-D383A5A03166"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3A659097-9731-440C-9065-C04E6AC5C855"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"565BF8F2-C8B1-4933-882F-7ADA522F25C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"296F9E95-95BF-4F63-B601-6820C5CBC237"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"5D6E8A41-2AA2-4757-826A-8122E9002476"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7D8C5A99-E5A7-4650-92ED-116AFF7EDC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"97BD7090-ACE3-4D24-8765-38467B3F2E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"96675B57-21EC-41AD-9E57-A1A0A93E6B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3BD45019-5174-4173-B7A3-272F2890D53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"31EAE462-E18C-494F-B0BC-F8C21D883BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"66257524-9911-4625-8562-6D8FC6A378DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57638FC4-791C-4060-B91B-32C679945B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A6F10C8B-6F2E-4F76-B74C-C04EB78E5B4D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27399","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39824","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0446","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en voircom.php de LulieBlog 1.02 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:julian_pawlowski:lulieblog:1.02:*:*:*:*:*:*:*","matchCriteriaId":"187D45DA-C818-4939-BD7C-2B2A02DA4CAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27416","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39854","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0447","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the story parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Foojan WMS PHP Weblog 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro story."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foojan:php_weblog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"65F0C37E-5F23-45E0-AC33-940312E67135"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27415","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39855","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4968","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0448","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code via a URL in the libcurlemuinc parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en utils/class_HTTPRetriever.php de phpSearch permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro libcurlemuinc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybergl_dev_team:phpsearch:*:*:*:*:*:*:*:*","matchCriteriaId":"9D5F7648-5F3B-4A52-A640-4AB3B909ED06"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120093067011293&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39805","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120093067011293&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0449","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en paypalresult.asp de VP-ASP Shopping Cart 6.50 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rocksalt_international:vp_asp:4.00:*:*:*:*:*:*:*","matchCriteriaId":"0E791D7A-3F0F-45C6-B151-AFAE56D980B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocksalt_international:vp_asp:4.50:*:*:*:*:*:*:*","matchCriteriaId":"4D8D1D74-AB78-4329-97A7-B18A989EA908"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocksalt_international:vp_asp:5.00:*:*:*:*:*:*:*","matchCriteriaId":"068C8698-95E3-4474-8E66-0DB82D6FCDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocksalt_international:vp_asp:5.50:*:*:*:*:*:*:*","matchCriteriaId":"61398039-C079-4D12-87A3-923BCDEE73AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocksalt_international:vp_asp:6.00:*:*:*:*:*:*:*","matchCriteriaId":"8FA0295C-6D46-4B07-91B0-5428634268A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocksalt_international:vp_asp:6.50:*:*:*:*:*:*:*","matchCriteriaId":"2AA49935-A2A5-42A0-B8E6-140525AECC51"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27347","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39811","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0450","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the (1) DIR_PLUGINS parameter to (a) index.php, and the (2) DIR_LIBS parameter to (b) media.php and (c) xmlrpc/server.php in admin/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en BLOG:CMS 4.2.1.c permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro (1) DIR_PLUGINS a (a) index.php, y (2) DIR_LIBS a (b) media.php y (c) xmlrpc/server.php en admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blog_cms:blog_cms:4.2.1_c:*:*:*:*:*:*:*","matchCriteriaId":"9421D852-1007-4BE0-AD6C-7056BC2B1934"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3576","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486743/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486743/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0451","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parameters to (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, and (6) staff-access.php in siteadmin/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PacerCMS 0.6 permite a usuarios remotos autenticados ejecutar comandos SQL de su elección mediante el parámetro id a (1) siteadmin/article-edit.php; y parámetros no especificados a (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, y (6) staff-access.php en siteadmin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pacercms:pacercms:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6F994223-6A8F-4633-9821-938EEB36F45A"}]}]}],"references":[{"url":"http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486796/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27397","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39833","source":"cve@mitre.org"},{"url":"http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486796/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0452","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the cat parameter in a viewart action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en articles.php de Siteman 1.1.9 permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en el parámetro cat en una acción viewart."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"794BFBDB-D4CF-466B-AF01-69B7432D5795"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27422","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4973","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0453","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en list.php de Easysitenetwork Recipe permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro categoryid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:recipe_website_script:*:*:*:*:*:*:*:*","matchCriteriaId":"EA81D9A2-6FEB-4020-A2D6-68FDF0346E88"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27405","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39853","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4960","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0454","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a (1) Dailymotion and possibly (2) Metacafe movie in the Skype video gallery, accessible through a search within the \"Add video to chat\" dialog, aka \"videomood XSS.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en zonas cruzadas en el control web Internet Explorer de Skype 3.6.0.244, y versiones anteriores 3.5.x y 3.6.x en Windows, permite a atacantes remotos con la complicidad del usuario inyectar secuencias de comandos web o HTML de su elección en la Zona de Máquina Local mediante el campo Title de un (1) Dailymotion y posiblemente (2) una película Metacafe en la galería de vídeos de Skype, accesible a través de una búsqueda dentro del diálogo \"Add video to chat\", también conocido como \"videomood XSS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.0.244","matchCriteriaId":"E42246D5-0D25-4630-84EF-A0B6CFE0AA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D09CC031-8F8F-4BC4-AEFF-4FD98411B272"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6:*:*:*:*:*:*:*","matchCriteriaId":"AD01462B-281F-4299-8D85-3FC6E6D392A8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0337.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0363.html","source":"cve@mitre.org"},{"url":"http://aviv.raffon.net/2008/01/17/SkypeCrosszoneScriptingVulnerability.aspx","source":"cve@mitre.org"},{"url":"http://share.skype.com/sites/security/2008/01/skype_cross_zone_scripting_vul.html","source":"cve@mitre.org"},{"url":"http://skype.com/security/skype-sb-2008-001-update1.html","source":"cve@mitre.org"},{"url":"http://skype.com/security/skype-sb-2008-001.html","source":"cve@mitre.org"},{"url":"http://www.critical.lt/?opinions/show/1470","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/vulnerabilities-in-skype","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/248184","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486512/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27338","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0194","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39754","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0337.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aviv.raffon.net/2008/01/17/SkypeCrosszoneScriptingVulnerability.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://share.skype.com/sites/security/2008/01/skype_cross_zone_scripting_vul.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://skype.com/security/skype-sb-2008-001-update1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://skype.com/security/skype-sb-2008-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.critical.lt/?opinions/show/1470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/vulnerabilities-in-skype","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/248184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/486512/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0455","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) \"406 Not Acceptable\" or (2) \"300 Multiple Choices\" HTTP response when the extension is omitted in a request for the file."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo mod_negotiation de Apache HTTP Server 2.2.6 y anteriores en las series 2.2.x, 2.0.61 y anteriores en las series 2.0.x, y 1.3.39 y anteriores en las series 1.3.x permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección subiendo un fichero con un nombre que contiene secuencias XSS y una extensión de fichero, lo cual conduce conduce a la inyección en respuestas HTTP (1) \"406 Not Acceptable\" o (2) \"300 Multiple Choices\" cuando se omite la extensión en la petición del fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider this issue to be security sensitive. Untrusted users should not be permitted to upload files to the directories from where they can be directly served by the web server without prior careful sanitation of both contents and filename.","lastModified":"2008-01-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.23","matchCriteriaId":"A7AF2AD9-F00C-4B4C-B501-6958216C6B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.1","versionEndExcluding":"2.4.3","matchCriteriaId":"01517F4B-7324-492F-BCD7-27C658F5BF36"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B1ABA871-3271-48E2-A69C-5AD70AF94E53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-1591.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1592.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1594.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0130.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29348","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51607","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3575","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019256","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.mindedsecurity.com/MSA01150108.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486847/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27409","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39867","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1591.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1592.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1594.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.mindedsecurity.com/MSA01150108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486847/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0456","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) \"406 Not Acceptable\" or (2) \"300 Multiple Choices\" HTTP response when the extension is omitted in a request for the file."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en el módulo mod_negotiation de Apache HTTP Server 2.2.6 y anteriores en las series 2.2.x, 2.0.61 y anteriores en las series 2.0.x, y 1.3.39 y anteriores en las series 1.3.x permite a usuarios remotos autenticados inyectar cabeceras HTTP y llevar a cabo ataques de ruptura de respuestas HTTP subiendo un fichero con un nombre multi-línea que contiene secuencias de cabeceras HTTP y una extensión de fichero, lo cual conduce a la inyección en respuestas HTTP (1) \"406 Not Acceptable\" o (2) \"300 Multiple Choices\" al omitir la extensión en una petición al fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider this issue to be security sensitive. Untrusted users should not be permitted to upload files to the directories from where they can be directly served by the web server without prior careful sanitation of both contents and filename.","lastModified":"2008-01-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.12","matchCriteriaId":"8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0130.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29348","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3575","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019256","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mindedsecurity.com/MSA01150108.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/486847/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27409","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39893","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mindedsecurity.com/MSA01150108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/486847/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0457","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin restricciones en la clase FileUpload que se ejecuta en el servidor Symantec LiveState Apache Tomcat, tal y como es usado por Symantec Backup Exec System Recovery Manager versiones 7.0 y 7.0.1, permite a los atacantes remotos cargar y ejecutar archivos JSP arbitrarios por medio de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17E843F0-6A21-4778-864C-CAADB1AC1457"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:7.01:*:*:*:*:*:*:*","matchCriteriaId":"609721EB-AAAC-4716-BD42-AB69180BC44D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/297171.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487688/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27487","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019303","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.04.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0413","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-003.html","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5078","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/297171.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0458","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlang parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de cruce de directorios en el fichero function/sources.php de SLAED CMS 2.5 Lite. Permite que atacantes remotos incluyan y ejecuten ficheros locales de su elección usando ..(punto punto) en el parámetro newlang de index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slaed:slaed_cms:2.5_lite:*:*:*:*:*:*:*","matchCriteriaId":"DD708B15-50CF-4285-A024-0EE8367BA366"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0308","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39897","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4975","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0459","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the update parameter."},{"lang":"es","value":"Vulnerabilidad de cruce de directorios en el fichero update/index.php de Liquid-Silver CMS 0.3. Permite, cuando magic_quotes_gpc está deshabilitado, que atacantes incluyan y ejecuten  ficheros locales de su elección usando .. (punto punto) en el parámetro update."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liquidsilvercms:liquidsilvercms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"BC0E1D44-434D-4D7A-890D-EDB156ECD09B"},{"vulnerable":true,"criteria":"cpe:2.3:a:liquidsilvercms:liquidsilvercms:0.35:*:*:*:*:*:*:*","matchCriteriaId":"DA042D24-106B-44E0-8BCF-B52FF9474523"}]}]}],"references":[{"url":"http://secunia.com/advisories/28619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27425","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0309","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39895","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0460","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el fichero api.php de (1)MediaWiki 1.11 hasta  1.11.0rc1, 1.10 hasta 1.10.2, 1.9 hasta 1.9.4, y 1.8; y de (2) la extensión BotQuery para MediaWiki 1.7 y anteriores; cuando se está usando Internet Explorer, permite a atacantes remotos inyectar, a su elección, código web o HTML a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"1C632052-D84B-41A1-B46F-1C1D9ADC72CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"46046B16-3EE4-42C0-BA77-73300A641BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"136E5FD9-C0A0-4970-8852-D97C5BC723E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FD2871-90BB-4AFA-89D0-B9B5BE365771"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"36D35193-8AF8-4CB9-A47D-A58DE389515E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9E1CD7D7-546A-48FA-9C4C-1FB0CA22C6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B40FB49B-1E96-44BC-A9B0-9BDB28F858A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E3A0921C-BEC5-4646-96FD-0529828B5BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"DB4E8709-43E2-4ADC-8759-16AC265658C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8A1D30-57E7-4010-B68A-8D22EA091FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"4EF7C683-F6E2-4D79-B0F9-234C9FAFB7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"E0983C0E-9035-4256-AC99-C2C81C1634E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5460DB30-FA14-4017-BC8B-15F9451469F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"ED2392D6-6ACF-4715-BBCD-B6DA9B91C750"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8C54ADEF-F360-41C6-AE27-B6D12E5BAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"B7056339-F0BC-4960-9ED2-68043000EAE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki_botquery_ext:*:*:*:*:*:*:*:*","matchCriteriaId":"6340F8D0-6F03-4664-ABAA-438AD195FC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"1C632052-D84B-41A1-B46F-1C1D9ADC72CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki_botquery_ext:*:*:*:*:*:*:*:*","matchCriteriaId":"6340F8D0-6F03-4664-ABAA-438AD195FC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-January/000068.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28629","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29266","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28137","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39901","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00189.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-January/000068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00189.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0461","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el fichero index.php del módulo Search de PHP-Nuke 8.0 FINAL y versiones anteriores. Cuando magic_quotes_gpc está deshabilitado, permite que atacantes remotos ejecuten comandos SQL de su elección usando el parámetro sid en una acción comments en modules.php. NOTA: algunos de estos detalles han sido obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0_final","matchCriteriaId":"268BAB8C-D5FF-48AB-8599-EA00C07AFAEE"}]}]}],"references":[{"url":"http://secunia.com/advisories/28624","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27408","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39850","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4965","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0462","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Archive 5.x, (versiones posteriores a la 5.x-1.8) para Drupal, permite que atacantes remotos inyecten, a su elección, código web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:archive_module:*:*:*:*:*:*:*:*","versionEndIncluding":"5_1.7","matchCriteriaId":"5988E56A-82FA-4D9B-B955-2912451E8999"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/213478","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27436","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0278","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39898","source":"cve@mitre.org"},{"url":"http://drupal.org/node/213478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0463","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving node properties."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Workflow para Drupal, en versiones 4.7.x anteriores a 4.7.x-1.2 y 5.x anteriores a 5.x-1.2, permite que atacantes remotos inyecten, a su elección, código web o HTML usando vectores relacionados con las propiedades nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:workflow:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7.x-1.1","matchCriteriaId":"FD74EB17-FF45-4EB6-A996-FC2983334DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:workflow:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.1","matchCriteriaId":"CBD47E97-474A-490B-921C-83906DF940A3"}]}]}],"references":[{"url":"http://drupal.org/node/213473","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27444","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0279","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39896","source":"cve@mitre.org"},{"url":"http://drupal.org/node/213473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0464","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter."},{"lang":"es","value":"Vulnerabilidad de cruce de diretorios en el archivo archiv.cgi de bsofort aconon Mail 2007 Enterprise SQL 11.7.0 y Mail 2004 Enterprise SQL 11.5.1, permite que atacantes remotos lean ficheros de su elección usando ..(punto punto) en el parámetro template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:absofort:aconon_mail_enterprise_sql:11.5.1:2004:*:*:*:*:*:*","matchCriteriaId":"5E37DBDF-A99B-430B-A1CD-73DB46FE136D"},{"vulnerable":true,"criteria":"cpe:2.3:a:absofort:aconon_mail_enterprise_sql:11.7.0:2007:*:*:*:*:*:*","matchCriteriaId":"79AFB67C-D4FE-47C9-BAF9-459DDA6620AA"}]}]}],"references":[{"url":"http://burnachurch.com/67/directory-traversal-luecke-in-aconon-mail/","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059856.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27427","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0310","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4977","source":"cve@mitre.org"},{"url":"http://burnachurch.com/67/directory-traversal-luecke-in-aconon-mail/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059856.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0465","sourceIdentifier":"cve@mitre.org","published":"2008-01-25T16:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"The vendor has released a patch for 0.6.3.  A patch can be found at the following location: \r\n\r\nhttp://seagullproject.org/download/\r\n\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the files parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo optimizer.php en Seagull versión 0.6.3, permite a atacantes remotos leer archivos arbitrarios por medio de un .. (punto punto) en el parámetro files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seagullproject.org:seagull:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"36CE1627-C7CB-4EF4-B1AD-E88CA153375E"}]}]}],"references":[{"url":"http://seagullproject.org/publisher/articleview/action/view/frmArticleID/98/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001891.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27437","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0311","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39902","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4980","source":"cve@mitre.org"},{"url":"http://seagullproject.org/publisher/articleview/action/view/frmArticleID/98/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0466","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files.  NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability."},{"lang":"es","value":"El archivo RTE_file_browser.asp en Web Wiz, como es  usado en Web Wiz Rich Text Editor versión 4.0, Web Wiz Forums versión 9.07 y Web Wiz Newspad versión 1.02, no requiere autenticación, lo que permite a atacantes remotos enumerar directorios y leer archivos. NOTA: esto puede ser aprovechado para listados fuera del árbol de directorios configurado explotando una vulnerabilidad de salto de directorio separada"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwiz:web_wiz_forums:9.07:*:*:*:*:*:*:*","matchCriteriaId":"67D078BB-71D4-4182-B733-4EAE579CB949"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwiz:web_wiz_newspad:1.02:*:*:*:*:*:*:*","matchCriteriaId":"FA2DDB39-D5DA-4696-BBA8-D7CDE2620949"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwiz:web_wiz_rich_text_editor:4.0:*:*:*:*:*:*:*","matchCriteriaId":"069C4645-7B6A-430A-89ED-7BB24286FE52"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3584","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019267","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/29","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/31","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486866/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486868/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27419","source":"cve@mitre.org"},{"url":"http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4970","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4971","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486866/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486868/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0467","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Firebird versiones anteriores a 2.0.4 y versiones 2.1.x anteriores a 2.1.0 RC1, podría permitir a atacantes remotos ejecutar código arbitrario por medio de un nombre de usuario largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"131041A7-1DA4-4A63-8FDF-66E3E69AE23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:rc1:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"79C05516-CD1D-433E-A3B8-4690F04A85A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/28596","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29203","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29501","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-02.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=570816&group_id=9028","source":"cve@mitre.org"},{"url":"http://tracker.firebirdsql.org/browse/CORE-1603","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27467","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019277","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0300","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=570816&group_id=9028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tracker.firebirdsql.org/browse/CORE-1603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0468","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en Flinx 1.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flinx:flinx:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"613755B6-4DC2-4338-B508-DEB002E02434"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27448","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0313","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39930","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0469","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Tiger Php News System (TPNS) 1.0b y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid en una acción newscat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiger_php_news_system:tiger_php_news_system:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0b","matchCriteriaId":"D52487D0-522D-4666-917B-F9525EC67679"}]}]}],"references":[{"url":"http://secunia.com/advisories/28641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3587","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27445","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0312","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39908","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4984","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0470","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method."},{"lang":"es","value":"Un ciertolador ActiveX en Comodo AntiVirus 2.0 permite a atacantes remotos ejecutar comandos de su elección a través del método ExecuteStr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comodo:comodo_antivirus:2.0:*:*:*:*:*:*:*","matchCriteriaId":"98228D94-5590-4C57-87F0-D688F3E44460"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:activex:*:*:*:*:*:*:*:*","matchCriteriaId":"EDEF84E6-3C24-4B73-96A4-467F5C03DB04"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39904","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4974","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0471","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en privmsg.php en phpBB 2.0.22 permite a atacantes remotos borrar mensajes privados (PM) como un usuario de su elección a través de una acción deleteall.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"2F959028-8C40-4341-A9EB-BFE9C8951111"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463589","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28871","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3585","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487004/100/0/threaded","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487004/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0472","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a thread_del action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en modcp.php en Woltlab Burning Board (wBB) 2.3.6 PL2 permite a atacantes remotos borrar hilos como administradores o moderadores a través de una acción thread_del.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:2.3.6_pl2:*:*:*:*:*:*:*","matchCriteriaId":"4746AEC4-F4BF-44F5-8DE6-4ED0A0E6DB50"}]}]}],"references":[{"url":"http://secunia.com/advisories/28634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3586","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486884/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0473","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors."},{"lang":"es","value":"RTE_popup_save_file.asp en Web Wiz Rich Text Editor 4.0 permite a atacantes remotos actualizar archivos (1) .html y (2) .htm a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_wiz:rich_text_editor:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D094614F-5DB7-4C3B-97C1-3110A433BED4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3584","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/31","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486868/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27419","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27420","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019267","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4971","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486868/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0474","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arbitrary web script or HTML via the (1) showlink parameter to jsp/DiscoveryProfiles.jsp; the (2) attributeIDs, (3) attributeToSelect, (4) redirectto, and (5) resourceid parameters to (a) jsp/ThresholdActionConfiguration.jsp; the (6) page and (7) redirect parameters to (b) jsp/UpdateGlobalSettings.jsp; and the (8) haid and (9) returnpath parameters to (c) showTile.do.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ManageEngine Applications Manager 8.1 construcción 8100 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) showlink en jsp/DiscoveryProfiles.jsp; los parámetros (2) attributeIDs, (3) attributeToSelect, (4) redirectto, y (5) resourceid en (a) jsp/ThresholdActionConfiguration.jsp; los parámetros (6) page y (7) redirect en (b) jsp/UpdateGlobalSettings.jsp; y los parámetros (8) haid y (9) returnpath en (c) showTile.do. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:applications_manager:8.1_build_8100:*:*:*:*:*:*:*","matchCriteriaId":"F1C09CB4-D01B-48CA-A739-045BCDDEDA79"}]}]}],"references":[{"url":"http://secunia.com/advisories/28332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0475","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home->Summary) via an invalid URI, as demonstrated by the \"/-\" URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"ManageEngine Applications Manager 8.1 construcción 8100 permite a atacantes remotos obtener información sensible ( Home->Summary) a través de una URI no válida, como se demostró con la URI \"/-\". NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:applications_manager:8.1_build_8100:*:*:*:*:*:*:*","matchCriteriaId":"F1C09CB4-D01B-48CA-A739-045BCDDEDA79"}]}]}],"references":[{"url":"http://secunia.com/advisories/28332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0476","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"ManageEngine Applications Manager 8.1 construcción 8100 no valida la autenticación para monitorType.do y otras páginas no especificadas, lo cual permite a atacantes remotos obtener información sensible y cambiar las configuraciones a través de vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:applications_manager:8.1_build_8100:*:*:*:*:*:*:*","matchCriteriaId":"F1C09CB4-D01B-48CA-A739-045BCDDEDA79"}]}]}],"references":[{"url":"http://secunia.com/advisories/28332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0477","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el controlador ActiveX en QMPUpgrade.Upgrade.1 en QMPUpgrade.dll 1.0.0.1 en Move Networks Upgrade Manager permite a atacantes remotos ejecutar código de su elección a través de un primer argumento largo en el método Upgrade. NOTA: algunos de estos detalles se obtuvieron de terceras fuentes de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:move_networks_inc:move_media_player:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5A4561-2804-4E41-8637-63306B49A40A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27438","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019270","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0274","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39913","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0478","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set parameter, as demonstrated by sending a certain CLIENT_IP HTTP header in an enter action to index.php, and injecting PHP sequences into files/enter.set, which is then included by index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en SetCMS 3.6.5 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de una secuencia ..(punto punto) en el parámetro set, como se demostró a través del envío en ciertas cabeceras CLIENT_IP HTTP en una acción de entrada en index.php, e inyectar secuencias de comandos PHP dentro de files/enter.set, las cuales están incluidas por index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:setcms:setcms:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F4E2E3F0-A7D4-4FD1-A9C0-A9527ACDF07D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27407","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39864","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0479","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\\\\ in the sub parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en RTE_file_browser.asp en Web Wiz NewsPad 1.02 permite a atacantes remotos listar directorios de su elección, y archivos .txt y .zip, a través de .....\\\\\\ en el parámetro sub."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_wiz:newspad:1.02:*:*:*:*:*:*:*","matchCriteriaId":"20793590-D4CB-4A94-ACC5-5AC00715C022"}]}]}],"references":[{"url":"http://secunia.com/advisories/28416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3588","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/30","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27419","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019268","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.webwizguide.com/webwiznewspad/kb/release_notes.asp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39863","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.webwizguide.com/webwiznewspad/kb/release_notes.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0480","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Web Wiz Forums 9.07 y anteriores permite a atacantes remotos listar directorios de su elección, y archivos .txt t .zip, a través de una secuencia .....\\\\\\ en el parámetro sub en (1) RTE_file_browser.asp o (2) file_browser.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_wiz:web_wiz_forums:*:*:*:*:*:*:*:*","versionEndIncluding":"9.07","matchCriteriaId":"F598A1E9-1FA4-4EB8-9C0B-D60430DA1F7E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3589","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/29","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486866/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27419","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.webwizguide.com/webwizforums/kb/release_notes.asp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39856","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486866/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.webwizguide.com/webwizforums/kb/release_notes.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0481","sourceIdentifier":"cve@mitre.org","published":"2008-01-29T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\\\\ in the sub parameter in a save action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en RTE_file_browser.asp en Web Wiz Rich Text Editor 4.0 permite a atacantes remotos listar directorios de su elección, y archivos .txt y .zip, a través de una secuencia .....\\\\\\ en el parámetro sub en una acción save."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_wiz:rich_text_editor:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D094614F-5DB7-4C3B-97C1-3110A433BED4"}]}]}],"references":[{"url":"http://secunia.com/advisories/28639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3584","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019267","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bugreport.ir/?/31","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486868/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27419","source":"cve@mitre.org"},{"url":"http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39868","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bugreport.ir/?/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/486868/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0485","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag."},{"lang":"es","value":"Error en el índice de array en libmpdemux/demux_mov.c de MPlayer 1.0 rc2 y versiones anteriores. Podría permitir a atacantes remotos ejecutar código de su elección a través de un archivo MOV de QuickTime modificado con una etiqueta stsc atom."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02rc2","matchCriteriaId":"5EA7B566-0182-40B1-BE73-4F17F5C1A559"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060032.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28956","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29307","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3607","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2102","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"cve@mitre.org"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487500/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27499","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019299","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0406/references","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487500/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0406/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0486","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow."},{"lang":"es","value":"Vulnerabilidad de índice de array en libmpdemux/demux_audio.c de MPlayer 1.0rc2 y SVN antes de r25917, y posiblemente versiones anteriores, como se utilizó en Xine-lib 1.1.10. Podría permitir a atacantes remotos ejecutar código de su elección a través de una etiqueta FLAC manipulada que provoca un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.02rc2:*:*:*:*:*:*:*","matchCriteriaId":"9395B548-2F82-4543-A100-86B56A52B394"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209106","source":"cve@mitre.org"},{"url":"http://bugs.xine-project.org/show_bug.cgi?id=38","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28779","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28801","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28918","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28989","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-12.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3608","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2103","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1536","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:046","source":"cve@mitre.org"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487501/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27441","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0406/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0421","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431541","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00442.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.xine-project.org/show_bug.cgi?id=38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487501/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0406/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00442.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0487","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiple vulnerabilidades de inyección SQL en login.asp en ASPired2Protect permite a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1)nombre de usuario y (2) contraseña.\r\nNOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_net_guys:aspired2protect:*:*:*:*:*:*:*:*","matchCriteriaId":"06FB71D8-1DAA-4572-AAEA-3541E3A27CC3"}]}]}],"references":[{"url":"http://secunia.com/advisories/28653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3598","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487137/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27474","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39989","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487137/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0488","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en tseekdir.cgi en VB Marketing permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro de localización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vb_marketing:vb_marketing:*:*:*:*:*:*:*:*","matchCriteriaId":"0A8D32C6-5A55-410A-9CF0-8AFF94F35EEB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487174/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27475","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39970","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487174/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0489","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en install.php en Clansphere 2007.4.4 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A2C73C22-D21C-4BAF-B945-C83F08D56AC6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3597","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487132/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27471","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39977","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487132/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0490","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en functions/ editevent.php en el plugin WP-Cal 0.3 para WordPress permite a atacantes remotos ejecutar comandos arbitrarios de SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wp_cal_plugin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"40F1B6CD-4609-4813-80A0-9B29413CF72E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28683","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27465","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0348","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39966","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4992","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0491","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en fim_rss.php en el plugin fGallery 2.4.1 para WordPress permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro álbum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fgallery_project:fgallery:2.4.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"A6CF4418-D3B2-474E-87CB-AACD26CF8D46"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27464","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0349","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39964","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4993","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/4993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0492","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en el control ActiveX Persits.XUpload.2 en XUpload.ocx 3.0.0.4 y anteriores en Persits XUpload 3.0 permite a atacantes remotos ejecutar código a su elección a través de un argumento largo en el método AddFile. \r\nNOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:persits:xupload:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5FA1A1DA-EF41-4D6F-8324-4E5B9E5976C9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27456","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0315","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39967","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0493","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which triggers heap corruption.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"fpx.dll 3.9.8.0 en el plugin FlashPix para IrfanView 4.10 permite a atacantes remotos ejecutar código arbitrario a través de un  archivo FlashPix (.FPX)manipulado, que provoca una corrupción de pila. \r\nNOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*","matchCriteriaId":"93312055-0238-4082-A3E0-E2E50491103A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28688","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27479","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40012","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0494","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Cross-site scripting (XSS) en      vpnum/userslist.php en Endian Firewall 2.1.2 permite a atacantes remotos inyectar script web o HTML a su elección mediante el parámetro psearch. \r\nNOTA: la procedencia de esta información es desconocida; los detalles se obtienen únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endian:firewall:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC007C4A-1CB0-481D-AA41-EA381E9A5EAB"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27477.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27477","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27477.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0495","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote attackers to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el servidor Pegasus CIM en IBM Hardware Management Console (HMC) 7 R3.2.0 permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados."}],"vendorComments":[{"organization":"Red Hat","comment":"We believe this issue is a duplicate of CVE-2007-5360.  Not vulnerable. This issue did not affect versions of tog-pegasus as shipped with Red Hat Enterprise Linux 4, or 5. For more details see\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360","lastModified":"2008-02-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EEB6EA1E-7AC0-4A32-9CA7-DEEE147D7160"}]}]}],"references":[{"url":"http://secunia.com/advisories/28667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29056","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02236","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27484","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019280","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0323","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0638","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40021","source":"cve@mitre.org"},{"url":"https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0496","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to inject arbitrary web script or HTML via the limit parameter in a search action."},{"lang":"es","value":"Vulnerabilidad Cross-site scripting (XSS) en el index.php en AmpJuke 0.7.0 permite a atacantes remotos inyectar script web o HTML a su elección mediante el parámetro limit en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ampjuke:ampjuke:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0017AF0A-723B-4667-8FD4-7AF7455A3545"}]}]}],"references":[{"url":"http://secunia.com/advisories/28661","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3594","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487258/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27498","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487258/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0497","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF."},{"lang":"es","value":"Vulnerabilidad de Cross-site scripting (XSS)en el action.php en Nucleus CMS 3.31 permite a  atacantes remotos inyectar script web o HTML a su elección mediante el PATH_INFO, que no es citado en el tratamiento de PHP_SELF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_cms:nucleus_cms:3.31:*:*:*:*:*:*:*","matchCriteriaId":"1A54BCBD-E9A4-41B8-BEF4-A162CF41616F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28680","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3593","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=66479&release_id=572117","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nucleuscms.org/item/3047","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487252/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487255/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27492","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0369","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=66479&release_id=572117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nucleuscms.org/item/3047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487252/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487255/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0498","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the pollid parameter in a results action to main_bigware_53.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main_bigware_53.tpl.php en Bigware Shop 2.0 permiten a atacantes remotos ejecutar comandos  SQL a su elección mediante el parámetro pollid en una acción results a main_bigware_53.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigware:bigware_shop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"547454D5-AC41-448F-8D0B-F6A82189849F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0351","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40010","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5002","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0499","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Mambo LaiThai 4.5.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mamboxchange:laithai:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"502F360E-F4E7-4D50-AD99-4E3EA6A190E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/28652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27483","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40013","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0500","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to (1) mod_login and (2) mod_template_chooser."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Mambo LaiThai 4.5.5 tienen un impacto desconocido y vectores de ataque relativos a (1) mod_login y (2) mod_template_chooser."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mamboxchange:laithai:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"502F360E-F4E7-4D50-AD99-4E3EA6A190E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/28652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27483","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40014","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=192544&release_id=571300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0501","sourceIdentifier":"cve@mitre.org","published":"2008-01-30T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page_courante parameter to the top-level URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en phpMyClub 0.0.1 permite a atacantes remotos incluir y ejecutar archivos locales a su elección mediante un .. (punto punto) en el parámetro page_courante de la URI de nivel superior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:phpmyclub:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"71DC2514-6A8A-4FA0-AEDA-9697C6C3A31A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27480","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0350","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40007","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5000","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0502","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the template_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivos PHP remotos en templates/Official/part_userprofile.php en Connectix Boards 0.8.2 y versiones anteriores. Permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro template_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:connectix:connectix_boards:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.2","matchCriteriaId":"47CC3E8C-5F4C-4E3F-8514-FA5C43E990B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:connectix:connectix_boards:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A1DC4820-EDE6-4A3D-A7F9-B3DCAC74167E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27506","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0363","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40040","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5012","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0503","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute arbitrary PHP code via the filedata parameter."},{"lang":"es","value":"Vulnerabilidad de inyección Eval (evaluación directa de código dinámico) en admin/op/disp.php en Netwerk Smart Publisher 1.0.1. Permite a atacantes remotos ejecutar código PHP arbitrario a través del parámetro filedata."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwerk:smart_publisher:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1B6C42A2-2DDF-449C-9AE5-707090CB93E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/28685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27488","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0352","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0504","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) albumid, (2) startpic, and (3) numpics parameters to util.php; and (4) cid_array parameter to reviewcom.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Coppermine Photo Gallery (CPG) en versiones anteriores a la 1.4.15 permiten que administradores remotos autenticados ejecuten comandos SQL arbitrarios mediante los parámetros (1) albumid, (2) startpic y (3) numpics en util.php; y el parámetro (4) cid_array en reviewcom.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.14","matchCriteriaId":"3823A84F-9E42-4E55-849E-C1A0F220D3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E358276F-157E-4D98-9055-061E6F2F2948"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A1831F9-4B4A-4226-B219-B3AFF06FFDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C457C25-AF6B-4F67-BD3B-83361A48CDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"808B8E20-BE09-4FC2-BC73-2F10261E82B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2003E2A5-A902-45A1-9189-15B956976ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE1E44B7-ACBD-4CBB-801E-18EACBC0EA58"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A53D1BF-C884-40F9-9D46-9CCD9ADC183E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"34A35889-023F-4305-A5A8-F7A8D3409172"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E51F81AC-6AE1-40E5-B2CB-34E1B5985C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*","matchCriteriaId":"8A465AB3-1426-4966-87DF-A1FA3FCCE5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*","matchCriteriaId":"E9D7FF03-F2A7-4014-BF17-8393F5220AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC98C672-0D2E-4A78-A206-CC44A5A6E14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D7434F90-B968-4385-B2DE-34706DC251A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BAC8-742D-4880-A936-198F89F4E63F"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"92CCBC14-1FBC-46C0-AB0B-BB39264B1C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B309A98E-6FA2-4741-9497-2A7A1E255C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3290C2FD-600E-4CB8-BB46-6750B4AA389B"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F4C237F5-4E77-43E3-A10C-0921859F991E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3CFE435D-3CF9-4F43-B704-829E648449B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4AFF3F0F-88BF-4EB4-8DCA-4D46D181FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:beta:*:*:*:*:*:*","matchCriteriaId":"940D9B5B-7828-4CDC-8BA9-311AD1CF8AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A3867BDE-B72A-4F7C-9A8A-20C8ECE608CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*","matchCriteriaId":"196B664C-C400-4770-893B-E327D40CD525"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"ECEE8E75-36D2-4F99-967E-52FDFA150E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"B8946662-2C1C-4113-977F-5D7FC3161565"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C2F59212-9725-4926-9905-28C8C64A3A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"A5FB7773-BBCA-4825-8489-7EE43D6BD312"}]}]}],"references":[{"url":"http://coppermine-gallery.net/forum/index.php?topic=50103.0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27509","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"cve@mitre.org"},{"url":"http://coppermine-gallery.net/forum/index.php?topic=50103.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0505","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el archivo docs/showdoc.php en Coppermine Photo Gallery (CPG) versiones anteriores a 1.4.15, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) h y (2) t."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.14","matchCriteriaId":"95F6AC5A-EA42-4B35-891A-C42527F29C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"F1BCC40D-EF9C-4843-9183-EA725C9C03FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F0D02234-2729-499B-A686-F1F85401FEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"E21C42CB-86B1-4EC1-A508-809316F83CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"F6626384-FA55-4B87-801B-554B9E7EC1F2"}]}]}],"references":[{"url":"http://coppermine-gallery.net/forum/index.php?topic=50103.0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27511","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"cve@mitre.org"},{"url":"http://coppermine-gallery.net/forum/index.php?topic=50103.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0506","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) quality, (2) angle, or (3) clipval parameter to picEditor.php."},{"lang":"es","value":"El archivo include/imageObjectIM.class.php en Coppermine Photo Gallery (CPG) versiones anteriores a 1.4.15, cuando el método de procesamiento de imágenes de ImageMagick es configurado, permite a los atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro (1) quality, (2) angle o (3) clipval en el archivo picEditor.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.14","matchCriteriaId":"95F6AC5A-EA42-4B35-891A-C42527F29C67"}]}]}],"references":[{"url":"http://coppermine-gallery.net/forum/index.php?topic=50103.0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487310/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27512","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019286","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-65.html","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5019","source":"cve@mitre.org"},{"url":"http://coppermine-gallery.net/forum/index.php?topic=50103.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487310/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-65.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0507","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en adclick.php en el plugin AdServe 0.2 para WordPress. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:adserve:0.2:*:*:*:*:*:*:*","matchCriteriaId":"7B609CC3-F047-47FD-9A40-03634936DB21"}]}]}],"references":[{"url":"http://secunia.com/advisories/28708","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0364","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40045","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5013","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0508","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en deans_permalinks_migration.php en el plugin Dean's Permalinks Migration 1.0 para WordPress,  permite a atacantes remotos modificar la configuración de oldstructure (también conocido como dean_pm_config[oldstructure]) como administradores a través del parámetro old_struct en una acción deans_permalinks_migration.php a wp-admin/options-general.php, como se demostró poniendo una secuencia XSS en este ajuste de la configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:permalinks_migration_plugin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"21305F73-180E-4B2A-8665-494339442E5C"}]}]}],"references":[{"url":"http://g30rg3x.com/wp-files/dpm_11gx.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://g30rg3x.com/xsrf-bajo-deans-permalinks-migration-10","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://packetstorm.linuxsecurity.com/0801-advisories/deans-xsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3595","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486840/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0281","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39845","source":"cve@mitre.org"},{"url":"http://g30rg3x.com/wp-files/dpm_11gx.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://g30rg3x.com/xsrf-bajo-deans-permalinks-migration-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://packetstorm.linuxsecurity.com/0801-advisories/deans-xsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486840/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0509","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain privileges via a long argument to (1) piox25, related to piox25.c; or (2) piox25remote, related to piox25remote.sh."},{"lang":"es","value":"Múltiples desbordamientos de búfer en IBM AIX 4.3. Permiten a atacantes remotos provocar una denegación de servicio (caída) o posiblemente obtener privilegios a través de un argumento largo a (1) piox25, relacionado con piox25.c; o (2) piox25remote, relacionado con piox25remote.sh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://secunia.com/advisories/28600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ13739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27510","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0324","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5796","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ13739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0510","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en los componentes Newsletter (com_newsletter) para Mambo 4.5 y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro listid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_newsletter:*:*:*:*:*:*:*:*","matchCriteriaId":"8FC51DFE-2856-4BA4-A29C-38135B649BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_newsletter:*:*:*:*:*:*:*:*","matchCriteriaId":"46030FE1-C9B2-4824-A10D-8B73D1E71438"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5:*:*:*:*:*:*:*","matchCriteriaId":"EBF4585E-26D9-434D-998C-AD4F0E2FB91B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27502","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0354","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40036","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5007","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0511","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente MaMML (com_mamml) para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro listid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mamml:*:*:*:*:*:*:*:*","matchCriteriaId":"BF8E4579-970C-4B8E-B9BA-68F1050C8E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_mamml:*:*:*:*:*:*:*:*","matchCriteriaId":"DFD68E80-DC5B-4DEC-AA61-6500076584F5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0356","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40037","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0512","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente fq (com_fq) para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro listid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_fq:*:*:*:*:*:*:*:*","matchCriteriaId":"8685AE82-AEE2-46A4-AA5D-CDECF09B9E12"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27501","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40035","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0513","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to parser/parser.php, as demonstrated by a filename ending with %00.gif, a different vector than CVE-2005-1840."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en parser/include/class.cache_phpcms.php en phpCMS 1.2.2. Permite a atacantes remotos leer archivos arbitrarios a través de .. (punto punto) en el parámetro file a parser/parser.php, como se demostró por un nombre de archivo que terminaba en %00.gif, un vector distinto a CVE-2005-1840."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcms:phpcms:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F2E9355D-517D-42A2-A9B2-04AFEFB6C836"}]}]}],"references":[{"url":"http://secunia.com/advisories/28709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487251/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487254/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27495","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0353","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40017","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5006","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487251/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0514","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Glossary (com_glossary) 2.0 para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro catid en una acción de visualización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:glossary:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9E1C6BD-16AD-40CA-8315-2EEBD3DDDD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:glossary:2.0:*:*:*:*:*:*:*","matchCriteriaId":"147DB741-B565-420E-83C3-0A804404D983"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27505","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40038","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5010","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0515","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en  la componente musepoes (com_musepoes) para Mambo y Joomla!. Permite a un atacante remoto ejecutar comandos SQL arbitrarios a través del parámetro aid en una acción de respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:musepoes_component:*:*:*:*:*:*:*:*","matchCriteriaId":"5F0AE0E0-8158-41C9-920A-5BF4ED162711"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:musepoes_component:*:*:*:*:*:*:*:*","matchCriteriaId":"7BABEB94-1845-47EE-A917-337E5581C91B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27507","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0358","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0516","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto spaw/dialogs/confirm.php en SQLiteManager 1.2.0. Permite a atacantes remotos ejecutar código PHP arbitrario a través una URL en el parámetro spaw_root. NOTA: el origen de esta información es desconocido; los detalles se han obtenido solamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sqlite_manager:sqlite_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"187F36B6-D816-42BD-9C29-4A541CBAE6F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27515","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0517","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en idex.php en el componente Darko Selesi EstateAgent (com_estateagent) 0.1 para Mambo 4.5.x y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro objid en una acción de contacto showObject."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darko_selesi:estateagent:0.1:*:*:*:*:*:*:*","matchCriteriaId":"6DDB5A2A-1051-4623-969E-5C5FF2D2B418"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5:*:*:*:*:*:*:*","matchCriteriaId":"EBF4585E-26D9-434D-998C-AD4F0E2FB91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"17E99D52-609D-4631-AC22-70B07229D887"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"729C14E1-B56D-49E1-81F6-5FA9B4FDC477"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1_1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EAFE201B-A40F-4387-B855-5176A828BA58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"6FE228E6-B001-40C9-85D7-24F8A7C14A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"10120ED3-B42C-4A62-879E-E92FC3F29E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1a:*:*:*:*:*:*:*","matchCriteriaId":"85B95AF0-CDD3-41FB-B343-46A69E909F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68EE93EF-D273-4DEC-A85C-76290FEE40A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3AC21C1E-131A-4366-8741-7BE7594B6F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"993587DE-DA24-4D52-B190-AB236327D687"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"16ED2979-BB01-44E7-A0A3-D1B7F550F538"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.3h:*:*:*:*:*:*:*","matchCriteriaId":"2E4E3399-C743-4664-A55A-77BF543CBD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E70B2D3E-8F55-45C6-8220-6A5CA6FD06D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49269426-5FA7-4CF1-AF64-BEC97A09E7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"863BE900-E43A-4E0E-BB25-A7403305F4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE971092-FF34-4F5C-A088-82914D46CE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"953A9204-E94E-4756-A687-FBE781ACE158"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2C7E14F4-A0E9-4014-8C3E-E6DCF3393D3F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27520","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0362","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40060","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0518","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Recipes (com_recipes) 1.00 para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_recipes:1.00:*:*:*:*:*:*:*","matchCriteriaId":"E9DED364-4E1B-400E-90C1-ED917D3DE342"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_recipes:1.00:*:*:*:*:*:*:*","matchCriteriaId":"EE90BFFA-8F01-4316-83BF-51D64B1B0BD3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27519","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0360","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40064","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0519","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Atapin Jokes (com_jokes) 1.0 para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro cat en una acción CatView."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_jokes:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A32C3146-E010-4A0A-A070-2C8C06A1EE21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_jokes:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA272E38-F655-43D6-A979-87F03AD5F4CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0361","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40067","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0520","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional research found the following links:\r\n\r\nhttp://secunia.com/advisories/28702/\r\n\r\nhttp://www.securityfocus.com/bid/27525","evaluatorSolution":"Additional research found the following link:\r\nhttp://downloads.wordpress.org/plugin/wassup.1.4.3a.zip","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en main.php en el plugin 1.4 WassUp a través de 1.4.3 para WordPress, permiten a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros (1) from_date o (2) to_date a spy.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wassup_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"CBAC5332-0E23-4623-827C-6D37A4E46803"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wassup_plugin:1.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB0557B-DCE5-4A0D-B56B-27B4158AAEF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/28702","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0365","source":"cve@mitre.org"},{"url":"http://www.wpwp.org/archives/warning-security-bug-in-version/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wpwp.org/archives/warning-security-bug-in-version/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0521","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files via a .. (dot dot) in the uri parameter to dispatcher.php in (1) examples/dispatcher/framework/, (2) examples/dispatcher/, (3) examples/wizard/, and (4) PHP/, different vectors than CVE-2008-0545."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Bubbling Library versión 1.32, permiten a los atacantes remotos leer archivos arbitrarios por medio de un .. (punto punto) en el parámetro uri en el archivo dispatcher.php en (1) examples/dispatcher/framework/, (2) examples/dispatcher/, (3) examples/wizard/, y (4) PHP/, vectores diferentes del CVE-2008-0545."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bubbling_library:bubbling_library:1.32:*:*:*:*:*:*:*","matchCriteriaId":"B42C1F6E-78BC-4993-8CCD-4F127348C006"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27482","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40008","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0522","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en múltiples productos de  Hal Networks. Permite a atacantes remotos inyectar scripts web o HTMLs arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hal_networks:perl__cgi_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"999EABF5-0DC6-4C01-94B0-44D66F51B234"},{"vulnerable":true,"criteria":"cpe:2.3:a:hal_networks:php_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"9408FD08-E5EC-4840-8BEC-DA4FD12EF667"},{"vulnerable":true,"criteria":"cpe:2.3:a:hal_networks:shop_hal_v1:*:*:*:*:*:*:*:*","matchCriteriaId":"05EF7113-D57C-4D4A-8032-9DB8413FC1D5"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2301162446/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28692","source":"cve@mitre.org"},{"url":"http://www.hal9800.com/home/bug/20080123.html","source":"cve@mitre.org"},{"url":"http://www.hal9800.com/home/bug/20080127.html","source":"cve@mitre.org"},{"url":"http://www.hal9800.com/home/bug/20080128.html","source":"cve@mitre.org"},{"url":"http://www.hal9800.com/home/bug/20080129.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27513","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0368","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2301162446/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hal9800.com/home/bug/20080123.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hal9800.com/home/bug/20080127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hal9800.com/home/bug/20080128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hal9800.com/home/bug/20080129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0523","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) License_Plate, (2) License_State, (3) Ticket_Date, and (4) Ticket_Number parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en SoftCart.exe de SoftCart 5.1.2.2, permiten a atacantes remotos inyectar webs scripts o HTMLs arbitrarios a través de los parámetros (1) License_Plate, (2) License_State, (3) Ticket_Date, y (4) Ticket_Number. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softcart:softcart:5.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A52DA27E-684D-498C-9CA4-9D3DF82C41B5"}]}]}],"references":[{"url":"http://secunia.com/advisories/28675","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27524","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40061","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0524","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la interfaz de administración en múltiples routers de Yamaha RT series. Permite a atacantes remotos cambiar configuraciones de contraseñas y probablemente otros ajustes de configuración como administradores a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt107e:*:*:*:*:*:*:*:*","matchCriteriaId":"425CDF9A-F6CB-46A0-9820-D3FDDF189E9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt52pro:*:*:*:*:*:*:*:*","matchCriteriaId":"F3265767-161D-4713-BFF2-75E8A8A50A71"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt56v:*:*:*:*:*:*:*:*","matchCriteriaId":"7AC8D1C0-6AF5-43E2-A249-0668541DE24A"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt57i:*:*:*:*:*:*:*:*","matchCriteriaId":"E34B7C2B-399B-4892-B715-8ACA3C2FCD39"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt58i:*:*:*:*:*:*:*:*","matchCriteriaId":"C4D07F7B-638C-441A-B2FD-F1555CD4D16F"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt60w:*:*:*:*:*:*:*:*","matchCriteriaId":"F0EEB41E-F757-49C4-9667-E35BE83308E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rt80i:*:*:*:*:*:*:*:*","matchCriteriaId":"4E169527-2124-4A1D-84BB-0CAE4A2E380A"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rta50i:*:*:*:*:*:*:*:*","matchCriteriaId":"B69B9D13-5F18-4746-8659-FDE58C262912"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rta52i:*:*:*:*:*:*:*:*","matchCriteriaId":"1E7D2A85-18A7-42F9-A057-F61A57404943"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rta54i:*:*:*:*:*:*:*:*","matchCriteriaId":"EAEBCB69-D290-49FF-B800-91D7C53EFECE"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rta55i:*:*:*:*:*:*:*:*","matchCriteriaId":"E9517A29-D59B-4C6B-8BD5-2F856D91CE79"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rtv700:*:*:*:*:*:*:*:*","matchCriteriaId":"51AF5618-F041-43F9-B225-ADEAE8379C3E"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rtw65b:*:*:*:*:*:*:*:*","matchCriteriaId":"2749A0C6-E134-4412-947F-FBEC20F96F10"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rtw65i:*:*:*:*:*:*:*:*","matchCriteriaId":"92BE52D4-DE4B-477A-84E7-C875C62EC675"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rtx1000:*:*:*:*:*:*:*:*","matchCriteriaId":"83831044-089B-4BA9-965C-7A5B2CBBACB7"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rtx1100:*:*:*:*:*:*:*:*","matchCriteriaId":"52AA01AA-C220-411B-8F96-77FE54EFFAF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:rtx1500:*:*:*:*:*:*:*:*","matchCriteriaId":"B03C6BB5-8BA2-475C-86FA-69B33BF7B3E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:yamaha:srt100:*:*:*:*:*:*:*:*","matchCriteriaId":"ECD5B3A4-A120-4DD3-8F66-FA298F7377A8"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2388575577/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28690","source":"cve@mitre.org"},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27491","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40015","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2388575577/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0525","sourceIdentifier":"cve@mitre.org","published":"2008-01-31T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script."},{"lang":"es","value":"El cliente PatchLink Update para Unix, tal y como es usado por Novell ZENworks Patch Management Update Agent para Linux/Unix/Mac (LUM) versiones 6.2094 hasta 6.4102 y otros productos, permite a los usuarios locales (1) truncar archivos arbitrarios por medio de un ataque de tipo symlink en el archivo /tmp/patchlink.tmp usado por el script logtrimmer y (2) ejecutar código arbitrario por medio de un ataque tipo symlink en el archivo /tmp/plshutdown usado por el script rebootTask."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A7C398-5356-45D6-AA5C-53E63BC88DCA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.2:*:linux:*:*:*:*:*","matchCriteriaId":"DE956C6E-C5CA-4581-9D06-533F5CFAEBE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.2:*:mac:*:*:*:*:*","matchCriteriaId":"A3033F8C-FB42-4838-B944-FE24E2CFA022"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.2:*:unix:*:*:*:*:*","matchCriteriaId":"A2CD08D1-5982-40E8-8B24-986710D2783A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.3:*:linux:*:*:*:*:*","matchCriteriaId":"E6C795ED-9FF2-4597-BA46-95A21CCE7EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.3:*:mac:*:*:*:*:*","matchCriteriaId":"CD18339F-3635-4DC5-AE03-475B1CDE4DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.3:*:unix:*:*:*:*:*","matchCriteriaId":"F60919A1-946C-424B-A3FC-E276ECDBBB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.4:*:linux:*:*:*:*:*","matchCriteriaId":"829ECFA8-8D23-47E3-8AD1-ACE034E9F870"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.4:*:mac:*:*:*:*:*","matchCriteriaId":"8D47A23C-75D3-4AA6-A5D3-68F819537CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lumension_security:patchlink_update:6.4:*:unix:*:*:*:*:*","matchCriteriaId":"C80615EC-D419-44A2-9FE5-B399D0568639"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:linux:*:*:*:*:*","matchCriteriaId":"965B9986-DE06-406F-AAA8-DA9A91FD548D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:mac:*:*:*:*:*","matchCriteriaId":"48E534D2-F6C4-4E1A-90C9-659A02FAA02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:unix:*:*:*:*:*","matchCriteriaId":"8D9CCF8F-B43E-4EEB-8425-6D04AA3EAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:linux:*:*:*:*:*","matchCriteriaId":"DCB9DBE8-3B84-4131-B376-8186D7951D15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:mac:*:*:*:*:*","matchCriteriaId":"2498DE12-4CF9-4C02-A875-546075E712F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:unix:*:*:*:*:*","matchCriteriaId":"3F1DAD3D-8DF1-48BC-AB54-F68651FEA2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:linux:*:*:*:*:*","matchCriteriaId":"6360AF99-4871-43BF-98B9-ED195913B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:mac:*:*:*:*:*","matchCriteriaId":"B6F50520-BE7A-4AFB-9AF5-038466C73D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:unix:*:*:*:*:*","matchCriteriaId":"69E0B7A0-2B99-4C4E-A1EA-3B4FEDC04D69"}]}]}],"references":[{"url":"http://secunia.com/advisories/28657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3599","source":"cve@mitre.org"},{"url":"http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527","source":"cve@mitre.org"},{"url":"http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528","source":"cve@mitre.org"},{"url":"http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=530","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487103/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27458","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019272","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39956","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39958","source":"cve@mitre.org"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/18/3908994_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487103/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/18/3908994_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0526","sourceIdentifier":"psirt@cisco.com","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"In order to download the patch, login is required","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet."},{"lang":"es","value":"Los teléfonos Cisco Unified IP Phone 7940, 7940G, 7960 y 7960G ejecutándose en software empotrado (firmware) SCCP permiten a atacantes remotos provocar una denegación de servicio (reinicio) mediante un paquete de petición de eco ICMP (ping) grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*","matchCriteriaId":"53A9A468-CAC3-4DC6-B839-557DBE8246D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*","matchCriteriaId":"26830222-1503-4748-A104-334265D8F06F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*","matchCriteriaId":"19712324-A41D-49F1-AA74-3B30A731FF47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*","matchCriteriaId":"43F9E1FE-4BD5-40B9-B239-B2185821A551"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*","matchCriteriaId":"DFE61DF2-3D61-400F-BA70-B506412C9C28"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*","matchCriteriaId":"F0B76F56-31D4-4576-AC95-00AED498F25A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*","matchCriteriaId":"2747DB12-83B9-40E4-9671-382E241C98EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*","matchCriteriaId":"FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5FDB3D25-274E-42F5-B5C1-B2A7875F94EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"780CE3C9-7CA3-4770-8DC9-BCB3365C32F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28935","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019407","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40487","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0527","sourceIdentifier":"psirt@cisco.com","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch download requires login","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request."},{"lang":"es","value":"El servidor HTTP en los telefonos Cisco Unified IP Phone 7935 y 7936 ejecutándose en un software empotrado (firmware) SCCP, permiten a atacantes remotos provocar una denegación de servicio (reinicio) mediante una solicitud HTTP manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*","matchCriteriaId":"53A9A468-CAC3-4DC6-B839-557DBE8246D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*","matchCriteriaId":"26830222-1503-4748-A104-334265D8F06F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*","matchCriteriaId":"19712324-A41D-49F1-AA74-3B30A731FF47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*","matchCriteriaId":"43F9E1FE-4BD5-40B9-B239-B2185821A551"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*","matchCriteriaId":"DFE61DF2-3D61-400F-BA70-B506412C9C28"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*","matchCriteriaId":"F0B76F56-31D4-4576-AC95-00AED498F25A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*","matchCriteriaId":"2747DB12-83B9-40E4-9671-382E241C98EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*","matchCriteriaId":"FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5FDB3D25-274E-42F5-B5C1-B2A7875F94EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"780CE3C9-7CA3-4770-8DC9-BCB3365C32F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28935","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019408","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40489","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0528","sourceIdentifier":"psirt@cisco.com","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch requires login","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data."},{"lang":"es","value":"Desbordamiento de búfer en los teléfonos Cisco Unified IP Phone 7940, 7940G, 7960 y 7960G ejecutándose en un software empotrado (firmware) SIP, puede que permita a atacantes remotos ejecutar código de su elección mediante un mensaje SIP con los datos MIME manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*","matchCriteriaId":"53A9A468-CAC3-4DC6-B839-557DBE8246D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*","matchCriteriaId":"26830222-1503-4748-A104-334265D8F06F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*","matchCriteriaId":"19712324-A41D-49F1-AA74-3B30A731FF47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*","matchCriteriaId":"43F9E1FE-4BD5-40B9-B239-B2185821A551"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*","matchCriteriaId":"DFE61DF2-3D61-400F-BA70-B506412C9C28"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*","matchCriteriaId":"F0B76F56-31D4-4576-AC95-00AED498F25A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*","matchCriteriaId":"2747DB12-83B9-40E4-9671-382E241C98EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*","matchCriteriaId":"FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5FDB3D25-274E-42F5-B5C1-B2A7875F94EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"780CE3C9-7CA3-4770-8DC9-BCB3365C32F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28935","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019409","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40492","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0529","sourceIdentifier":"psirt@cisco.com","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch requires login","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command."},{"lang":"es","value":"Desbordamiento de búfer en el servidor de telnet de Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, y 7971G ejecutándose en un software empotrado (firmware) SCCP, puede que permita a usuarios autenticados remotamente ejecutar código de su elección mediante un comando manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*","matchCriteriaId":"53A9A468-CAC3-4DC6-B839-557DBE8246D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*","matchCriteriaId":"26830222-1503-4748-A104-334265D8F06F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*","matchCriteriaId":"19712324-A41D-49F1-AA74-3B30A731FF47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*","matchCriteriaId":"43F9E1FE-4BD5-40B9-B239-B2185821A551"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*","matchCriteriaId":"DFE61DF2-3D61-400F-BA70-B506412C9C28"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*","matchCriteriaId":"F0B76F56-31D4-4576-AC95-00AED498F25A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*","matchCriteriaId":"2747DB12-83B9-40E4-9671-382E241C98EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*","matchCriteriaId":"FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5FDB3D25-274E-42F5-B5C1-B2A7875F94EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"780CE3C9-7CA3-4770-8DC9-BCB3365C32F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28935","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019410","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40493","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0530","sourceIdentifier":"psirt@cisco.com","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch requires login","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response."},{"lang":"es","value":"Desbordamiento de búfer en los teléfonos Cisco Unified IP Phone 7940, 7940G, 7960 y 7960G ejecutándose en los software empotrados (firmware) SCCP y SIP, puede que permitan a atacantes remotos ejecutar código de su elección mediante una respuesta de DNS manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*","matchCriteriaId":"53A9A468-CAC3-4DC6-B839-557DBE8246D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*","matchCriteriaId":"26830222-1503-4748-A104-334265D8F06F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*","matchCriteriaId":"19712324-A41D-49F1-AA74-3B30A731FF47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*","matchCriteriaId":"43F9E1FE-4BD5-40B9-B239-B2185821A551"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*","matchCriteriaId":"DFE61DF2-3D61-400F-BA70-B506412C9C28"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*","matchCriteriaId":"F0B76F56-31D4-4576-AC95-00AED498F25A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*","matchCriteriaId":"2747DB12-83B9-40E4-9671-382E241C98EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*","matchCriteriaId":"FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5FDB3D25-274E-42F5-B5C1-B2A7875F94EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"780CE3C9-7CA3-4770-8DC9-BCB3365C32F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28935","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019406","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40485","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0531","sourceIdentifier":"psirt@cisco.com","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch requires login","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en los teléfonos Cisco Unified IP Phone 7940, 7940G, 7960 y 7960G ejecutándose en un software empotrado (firmware) SIP, puede que permita a servidores SIP remotos ejecutar código de su elección mediante un mensaje de desafío/respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*","matchCriteriaId":"53A9A468-CAC3-4DC6-B839-557DBE8246D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*","matchCriteriaId":"26830222-1503-4748-A104-334265D8F06F"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*","matchCriteriaId":"19712324-A41D-49F1-AA74-3B30A731FF47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*","matchCriteriaId":"43F9E1FE-4BD5-40B9-B239-B2185821A551"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*","matchCriteriaId":"DFE61DF2-3D61-400F-BA70-B506412C9C28"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*","matchCriteriaId":"F0B76F56-31D4-4576-AC95-00AED498F25A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*","matchCriteriaId":"2747DB12-83B9-40E4-9671-382E241C98EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*","matchCriteriaId":"FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5FDB3D25-274E-42F5-B5C1-B2A7875F94EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*","matchCriteriaId":"26BC4C08-16FD-4E27-AC7E-155E9CBAB808"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*","matchCriteriaId":"987BEE5F-5686-4B83-A6EF-903C86439BB3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*","matchCriteriaId":"6EE292B7-DFC7-402C-BC10-9293D32B75B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*","matchCriteriaId":"648AFF80-3F8B-4966-9899-530F498C8B3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"780CE3C9-7CA3-4770-8DC9-BCB3365C32F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28935","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019411","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40498","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0532","sourceIdentifier":"psirt@cisco.com","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors."},{"lang":"es","value":"Múltiples desbordamientos de buffer en el módulo securecgi-bin/CSuserCGI.exe de User-Changeable Password (UCP) en versiones anteriores a la 4.2 de Cisco Secure Access Control Server (ACS)para Windows y ACS Solution Engine, permite a atacantes remotos ejecutar código de su elección, mediante la utilización de argumentos largos localizados a continuación del argumento Logout y posiblemente a través de otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:acs_for_windows:*:*:*:*:*:*:*:*","matchCriteriaId":"874EB4DE-9C14-4D6A-B67B-0AC2C4D2FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:acs_solution_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"706A8388-3141-4B5A-A54D-47BDD87A0A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:user_changeable_password:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D561CBFD-7CC3-435E-8D42-658637BB9F50"}]}]}],"references":[{"url":"http://secunia.com/advisories/29351","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3743","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1019608","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/archive/1/489463/100/0/threaded","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/28222","source":"psirt@cisco.com","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0868","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41154","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489463/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0533","sourceIdentifier":"psirt@cisco.com","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediately after the Help argument, and possibly unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) del módulo securecgi-bin/CSuserCGI.exe en vesiones anteriores a la 4.2 de Cisco Secure Access Control Server (ACS) para Windows y ACS Solution Engine, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la utilización de un argumento situado a continuación del argumento Help y probablemente mediante otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:acs_for_windows:*:*:*:*:*:*:*:*","matchCriteriaId":"874EB4DE-9C14-4D6A-B67B-0AC2C4D2FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:acs_solution_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"706A8388-3141-4B5A-A54D-47BDD87A0A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:user_changeable_password:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D561CBFD-7CC3-435E-8D42-658637BB9F50"}]}]}],"references":[{"url":"http://secunia.com/advisories/29351","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3743","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1019607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/archive/1/489463/100/0/threaded","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/28222","source":"psirt@cisco.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0868","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41156","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489463/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0534","sourceIdentifier":"psirt@cisco.com","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device restart or daemon outage) via a high rate of login attempts, aka Bug ID CSCsi68582."},{"lang":"es","value":"El servidor SSH en (1) Cisco Service Control Engine (SCE) versiones anteriores a 3.1.6, y (2) Icon Labs Iconfidant SSH versiones anteriores a 2.3.8, permite a los atacantes remotos causar una denegación de servicio (reinicio del dispositivo o interrupción del demonio) mediante una alta tasa de intentos de inicio de sesión, también se conoce como ID de Bug CSCsi68582."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:service_control_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.6","matchCriteriaId":"AA9282CB-43A7-44C4-A678-D5C67D3CF310"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icon-labs:iconfidant_ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.7","matchCriteriaId":"1863D250-A98A-48FB-AFD1-8A73FC6F18CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30316","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30590","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020074","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","source":"psirt@cisco.com"},{"url":"http://www.kb.cert.org/vuls/id/626979","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29316","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29609","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42565","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/626979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0535","sourceIdentifier":"psirt@cisco.com","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device instability) via \"SSH credentials that attempt to change the authentication method,\" aka Bug ID CSCsm14239."},{"lang":"es","value":"Una vulnerabilidad no especificada en el servidor SSH en (1) Cisco Service Control Engine (SCE) versiones anteriores a 3.1.6, y (2) Icon Labs Iconfidant SSH versiones anteriores a 2.3.8, permite a los atacantes remotos causar una denegación de servicio (inestabilidad del dispositivo) por medio de \"SSH credentials that attempt to change the authentication method,\" también se conoce como ID de Bug CSCsm14239."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:service_control_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.5","matchCriteriaId":"8F2AA0D7-4859-4DDB-87C9-AC92EEE85BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icon-labs:iconfidant_ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.7","matchCriteriaId":"1863D250-A98A-48FB-AFD1-8A73FC6F18CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30316","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30590","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020074","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","source":"psirt@cisco.com"},{"url":"http://www.kb.cert.org/vuls/id/626979","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29316","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29609","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42567","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/626979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0536","sourceIdentifier":"psirt@cisco.com","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers \"illegal I/O operations,\" aka Bug ID CSCsh49563."},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor SSH en (1) Cisco Service Control Engine (SCE) versiones 3.0.x anteriores a 3.0.7 y versiones 3.1.x anteriores a 3.1.0, y (2) Icon Labs Iconfidant SSH versiones anteriores a 2.3.8, permite a los atacantes remotos causar una denegación de servicio (interrupción de la interfaz de administración) por medio de un tráfico SSH que ocurre durante las operaciones de administración y desencadena \"illegal I/O operations,\" también se conoce como ID de error CSCsh49563."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:service_control_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.6","matchCriteriaId":"AA9282CB-43A7-44C4-A678-D5C67D3CF310"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:service_control_engine:3.0:*:*:*:*:*:*:*","matchCriteriaId":"47EE0074-7A1C-44C3-AB50-DB1E7D06FF0B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icon-labs:iconfidant_ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.7","matchCriteriaId":"1863D250-A98A-48FB-AFD1-8A73FC6F18CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30316","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30590","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020074","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","source":"psirt@cisco.com"},{"url":"http://www.kb.cert.org/vuls/id/626979","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29316","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29609","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/626979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0537","sourceIdentifier":"psirt@cisco.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), and Route Switch Processor 720 (RSP720) for multiple Cisco products, when using Multi Protocol Label Switching (MPLS) VPN and OSPF sham-link, allows remote attackers to cause a denial of service (blocked queue, device restart, or memory leak) via unknown vectors."},{"lang":"es","value":"Vulnerabilidades no especificadas en Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), y Route Switch Processor 720 (RSP720) para múltiples productos de Cisco, cuando utilizan Multi Protocol Label Switching (MPLS) VPN y OSPF sham-link, permite a atacantes remotos provocar una denegación de servicio (cola bloqueada, dispositivo reiniciado, o fuga de memoria) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:7600_router:*:*:*:*:*:*:*:*","matchCriteriaId":"9097F459-1AE3-4924-8E81-046F84FBB041"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:me_6524_ethernet_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"6188EAF7-F61F-44D9-8D8A-AED195D045F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:route_switch_processor:rsp720:*:*:*:*:*:*:*","matchCriteriaId":"ABC994F2-CD1D-4B42-A92F-EF01BBBD59BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:supervisor_engine:sup32:*:*:*:*:*:*:*","matchCriteriaId":"99A3D8A9-FFD2-4DAC-997A-0E118878A360"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:supervisor_engine:sup720:*:*:*:*:*:*:*","matchCriteriaId":"D5ECF6D1-A7AB-4149-943E-F011038F6C40"}]}]}],"references":[{"url":"http://secunia.com/advisories/29559","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28463","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019716","source":"psirt@cisco.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1005/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41466","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1005/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0538","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to login.php, the (2) id parameter to display.php, and unspecified other vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en phpIP Management 4.3.2, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro password en login.php, (2) el parámetro id de display.php, y otros vectores no especificados. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpip:phpip_management:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"02AD21E8-FC0C-4207-BD7D-B52232501178"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120139657100513&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487122/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27468","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0346","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39965","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4990","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=120139657100513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487122/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0539","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the report_type parameter."},{"lang":"es","value":"Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en dms/policy/rep_request.php en F5 BIG-IP Application Security Manager (ASM) 9.4.3, permiten a atacantes remotos inyectar web script o HTML de su elección a través del parámetro report_type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndExcluding":"9.2.5","matchCriteriaId":"BD01A059-EDA8-403E-BA03-E35B04E02950"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.4","matchCriteriaId":"DEA8345E-E928-44BD-89EA-0F7BFE6D851E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6A367082-83AA-44C6-9829-7BF00EF64F68"}]}]}],"references":[{"url":"http://secunia.com/advisories/28655","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3602","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487118/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489290/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27462","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28151","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019276","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0301","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39979","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://secunia.com/advisories/28655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487118/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489290/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0540","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in trixbox 2.4.2.0 allow remote attackers to inject arbitrary web script or HTML via the query string to index.php in (1) user/ or (2) maint/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en trixbox 2.4.2.0, permiten a atacantes remotos inyectar web script o HTML de su elección a través de la cadena de consulta de index.php en (1)user/ o (2) maint/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trixbox:trixbox:2.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"790D43F1-BE49-4190-9D2A-0A5CA0DAD773"}]}]}],"references":[{"url":"http://www.digitrustgroup.com/advisories/web-application-security-trixbox.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27460","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-trixbox.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0541","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) open and (2) date_show parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en forum.php en Gerd Tentler Simple Forum 3.2, permiten a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) open y (2) date_show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gerd_tentler:simple_forum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44FEFAC6-5518-4920-8E1E-A8DDC1B19C25"}]}]}],"references":[{"url":"http://secunia.com/advisories/28681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27463","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39978","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4989","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0542","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en thumbnail.php de Gerd Tentler Simple Forum 3.2 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gerd_tentler:simple_forum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44FEFAC6-5518-4920-8E1E-A8DDC1B19C25"}]}]}],"references":[{"url":"http://secunia.com/advisories/28681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27463","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39980","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4989","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0543","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Pre Dynamic Institution allow remote attackers to execute arbitrary SQL commands via the (1) sloginid and (2) spass parameters to (a) login.asp and (b) siteadmin/login.asp.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Pre Dynamic Institution, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) sloginid y (2) spass a (a) login.asp y (b) siteadmin/login.asp. \r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pre_projects:pre_dynamic_institution:*:*:*:*:*:*:*:*","matchCriteriaId":"E2C838F7-638F-49C8-9D7F-A78997470237"}]}]}],"references":[{"url":"http://secunia.com/advisories/28651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3603","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487054/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27451","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487054/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0544","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función IMG_LoadLBM_RW en IMG_lbm.c de SDL_image anteriores a 1.2.7 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de un fichero IFF ILBM manipulado. \r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sdl:sdl_image:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"36BAAE61-E0CE-4C97-B2FE-D1CD72D6190D"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207933","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28752","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29542","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0061","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1493","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml","source":"cve@mitre.org"},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?r1=3341&r2=3521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?revision=3521&view=markup","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:040","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488079/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27435","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-595-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0266","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39899","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2206","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=207933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?r1=3341&r2=3521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?revision=3521&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488079/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-595-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0545","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) uri parameter to (a) yui-menu.tpl.php, (b) simple.tpl.php, and (c) advanced.tpl.php in dispatcher/framework/; and the (2) page parameter to (d) yui-menu.php, (e) simple.php, and (f) advanced.php in dispatcher/framework/, different vectors than CVE-2008-0521."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Bubbling Library 1.32, permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro (1) uri de (a) yui-menu.tpl.php, (b) simple.tpl.php, y (c) advanced.tpl.oho en dispatcher/framework/; y el parámetro (2) page de (d) yui-menu.php, (e) simple.php, y (f) advanced.php en dispatcher/framework/, vectores diferentes de CVE-2008-0521."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bubbling_library:bubbling_library:1.32:*:*:*:*:*:*:*","matchCriteriaId":"B42C1F6E-78BC-4993-8CCD-4F127348C006"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27466","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0347","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39969","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0546","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SLQ en CandyPress (CP) 4.1.1..26 y versiones anteriores, permiten a atacantes remotos ejecutar comandos SQL a su elección a través de  los parámetros (1) idProduct y (2) options de (a) ajax/ajax_optInventory.asp, o el parámetro (2) recid de (b)ajax/ajax_getBrands.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1CEA1621-AC7C-4BE1-9DD8-9F3E11A1D75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"CD318873-47E6-4A53-BC63-5F8D9B5F3E5B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3600","source":"cve@mitre.org"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39939","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0547","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and probably earlier 4.x and 3.x versions, allows remote attackers to inject arbitrary web script or HTML via the helpfield parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/utilities_ConfigHelp.asp en CandyPress (CP) 4.1.1.26 y versiones anteriores, permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro helpfield."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1CEA1621-AC7C-4BE1-9DD8-9F3E11A1D75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"CD318873-47E6-4A53-BC63-5F8D9B5F3E5B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3600","source":"cve@mitre.org"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39940","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0548","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails."},{"lang":"es","value":"Steamcast 0.9.75 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de un entero largo en una cabecera http Content-Length, lo cual dispara un puntero a referencia NULL cuando malloc falla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radio_toolbox:steamcast:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.75","matchCriteriaId":"460ADEB7-4C1A-4675-9722-621960FE3C7D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/steamcazz-adv.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39927","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/steamcazz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0549","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the OggHeaderParse function in Steamcast 0.9.75 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via a long Ogg tag."},{"lang":"es","value":"Desbordamiento de entero en la función OggHeaderParse en Steamcast 0.9.75 y anteriores permite a atacantes remotos autenticados provocar una denegación de servicio (caída de demonio) a través de una etiqueta larga Ogg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radio_toolbox:steamcast:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.75","matchCriteriaId":"460ADEB7-4C1A-4675-9722-621960FE3C7D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/steamcazz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/steamcazz.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39929","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/steamcazz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/steamcazz.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0550","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header."},{"lang":"es","value":"Error de superación de límite (off-by-one) en Steamcast 0.9.75 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída de demonio) o ejecutar código de su elección a través de una determinada petición HTTP que llega a producir un desbordamiento de búfer, tal y como se demuestra por una cabecera larga User-Agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radio_toolbox:steamcast:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.75","matchCriteriaId":"460ADEB7-4C1A-4675-9722-621960FE3C7D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/steamcazz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/steamcazz.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39928","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/steamcazz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/steamcazz.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0551","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El control ActiveX NamoInstaller.NamoInstall.1 de NamoInstaller.dll 3.0.0.1 y anteriores en Namo Web Editor en Sejoong Namo ActiveSquare 6 permite a atacantes remotos ejecutar código de su elección a través de un URL en el argumento del método Install. \r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:activex:*:*:*:*:*:*:*:*","matchCriteriaId":"EDEF84E6-3C24-4B73-96A4-467F5C03DB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:sejoong_namo:activesquare:6:*:*:*:*:*:*:*","matchCriteriaId":"3F004818-8920-4063-8565-38038C559CAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/28649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27453","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27580","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0299","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39974","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4986","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0552","sourceIdentifier":"cve@mitre.org","published":"2008-02-01T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de eTicket 1.5.6-RC4 permite a atacantes remotos inyectar web script o HMTL de su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.6_rc4:*:*:*:*:*:*:*","matchCriteriaId":"C6D2F4DC-2C18-4618-B2C2-070E5ED131D9"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3601","source":"cve@mitre.org"},{"url":"http://www.lonerunners.net/users/jekil/pub/hack-eticket/hack-eticket.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487133/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27473","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019278","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39968","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lonerunners.net/users/jekil/pub/hack-eticket/hack-eticket.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487133/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0553","sourceIdentifier":"secalert@redhat.com","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en la función ReadImage en el archivo tkImgGIF.c en Tk (Tcl/Tk) versiones anteriores a 8.5.1, permite a los atacantes remotos ejecutar código arbitrario por medio de una imagen GIF diseñada, un problema similar a CVE-2006-4484."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:*:*:*:*:*:*:*:*","versionEndIncluding":"8.4.17","matchCriteriaId":"4DF6AAA4-A3BD-4436-B5A5-070AC79F260D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5F06FEF3-A290-4256-ADB7-BC6E59A57852"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8F451113-3A1C-455C-A328-149121C8C204"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:4.0p1:*:*:*:*:*:*:*","matchCriteriaId":"13A85D7C-DF70-4AF6-94F0-881D35082E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.1:*:*:*:*:*:*:*","matchCriteriaId":"E131184A-BD9E-41CF-B3D0-AB9E87834C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.1p1:*:*:*:*:*:*:*","matchCriteriaId":"546DC29B-2A50-420A-AECD-EF526363AF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.2:*:*:*:*:*:*:*","matchCriteriaId":"25B5AC3C-9F3E-499F-9EA7-5A0F9A889934"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.4:*:*:*:*:*:*:*","matchCriteriaId":"9819E03A-8A9E-4483-BBEB-4B3708798960"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.5:*:*:*:*:*:*:*","matchCriteriaId":"57D7BBC1-70C7-4509-B9A7-4B08615B1BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8CCF8D59-9712-4C55-A680-7DD7C17EE8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:6.7:*:*:*:*:*:*:*","matchCriteriaId":"EF4B0EEA-735E-4BB6-96E4-133F293A7295"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E2545F45-2F35-442B-84BA-DC7649E55672"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.1:*:*:*:*:*:*:*","matchCriteriaId":"77D4364D-9BB0-47A2-BFA6-37C369C3E6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A799BDBF-A56B-4125-A385-5FF87A0B069A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.4:*:*:*:*:*:*:*","matchCriteriaId":"FD4DCB1D-DD71-4C85-97E6-55AB467A8CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.5:*:*:*:*:*:*:*","matchCriteriaId":"509225EF-4423-45AE-AC86-5CF7188DF7B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.5p1:*:*:*:*:*:*:*","matchCriteriaId":"7B924063-CD33-44ED-BBB6-42FC6A12BD8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.6:*:*:*:*:*:*:*","matchCriteriaId":"0C9F9F96-DE6F-4B77-8715-360543E95E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:7.6p2:*:*:*:*:*:*:*","matchCriteriaId":"F297D4B0-40DE-4728-B840-584441AB809B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.0:*:*:*:*:*:*:*","matchCriteriaId":"65C60D84-229A-43CA-8481-5634A3CFBF1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"05182123-3F45-4936-A7F1-5B1328C81C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F9583698-C566-40DF-912F-325454C74F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"92E514C1-574A-41B3-84AB-50014CDAEE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.0p2:*:*:*:*:*:*:*","matchCriteriaId":"A43DF20C-5EE3-45AC-A4B9-8C0DC9EC1840"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.1:*:*:*:*:*:*:*","matchCriteriaId":"6A3CFE21-4641-4982-9791-ABD3FE1311BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F5FFF507-18EE-4C64-BB86-48C97D7C9CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C64F535C-A346-456F-AD99-8B135121390C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F4B6F5E4-CE71-4359-8F05-4DF63E31BF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49767838-28BB-4B95-B70C-CD945B3E6559"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2CEA597D-65CA-43B4-9742-F8FA7EB1CDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1734A66C-D961-4740-82F4-F93B6D502C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"78F9AD15-E604-4048-97C2-480AF00BE3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1C10E232-F532-4F2E-9DA7-44C10719CAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"7A9E15B7-5018-4941-8DC9-A6FC84262F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6BB3FDAD-D0AD-410B-9FB3-001978DA0AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4793F51C-293F-4A56-8789-B04FE3CBA958"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"270A67C9-96BC-4B36-8B66-2EFFB7708C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"955AA2E1-9B15-431C-8A24-DC2A06E24715"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"03F55BFF-E9E1-4C97-A0DB-5F905406C55E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8536661B-E5A9-4D08-BC0E-0770A37E0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"574D7E14-49CE-478F-BD12-804F13146E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5165B956-F82A-4500-8B04-ADA0A100C4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.6:*:*:*:*:*:*:*","matchCriteriaId":"37CB2CB3-BBC6-4F69-BDEB-53377444BD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.7:*:*:*:*:*:*:*","matchCriteriaId":"56710692-2D3A-4FB1-A3FD-8875946B7130"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.8:*:*:*:*:*:*:*","matchCriteriaId":"219B6B61-C2CE-418B-81A0-C9CEE6B9474A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.9:*:*:*:*:*:*:*","matchCriteriaId":"18EA39DD-B688-420B-A0EC-CE6F99DE2BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.10:*:*:*:*:*:*:*","matchCriteriaId":"6103F8D2-277F-4ECF-B72C-90E97896758B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.11:*:*:*:*:*:*:*","matchCriteriaId":"85C5C1CF-6DAF-4521-AFE9-606A5436C40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.12:*:*:*:*:*:*:*","matchCriteriaId":"B70C2629-E2C1-422D-BDFA-1E0495A5ED4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.13:*:*:*:*:*:*:*","matchCriteriaId":"89651A15-A000-42A8-9268-4014BF34410A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.14:*:*:*:*:*:*:*","matchCriteriaId":"A4B54926-8A20-4743-9F9B-D255A84FE6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.15:*:*:*:*:*:*:*","matchCriteriaId":"39901A5E-7CB4-42C8-90A1-25487BA0FC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4.16:*:*:*:*:*:*:*","matchCriteriaId":"DA3ECB75-5962-4362-98CF-CC31F72ED021"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4a2:*:*:*:*:*:*:*","matchCriteriaId":"E0689AA7-2B44-4202-B782-E47612115700"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4a3:*:*:*:*:*:*:*","matchCriteriaId":"BC2BA9A0-AE55-4F30-B27D-E48F2371F29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4a4:*:*:*:*:*:*:*","matchCriteriaId":"EC8A3AA4-2236-40BA-99BB-A215B69230A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4b1:*:*:*:*:*:*:*","matchCriteriaId":"2D892065-8B50-48FE-8716-09F351104FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.4b2:*:*:*:*:*:*:*","matchCriteriaId":"0EDEEDB4-DA0A-45EF-A8BA-079671E10F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1EE930FC-E77F-4EB8-A3B8-E4B1A6433BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5_a3:*:*:*:*:*:*:*","matchCriteriaId":"DA27B876-A7F8-4805-B653-21D31D06CFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5a1:*:*:*:*:*:*:*","matchCriteriaId":"E2872DCD-CD4E-4341-BE3F-0CED3F06B934"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5a2:*:*:*:*:*:*:*","matchCriteriaId":"6D3DE5A6-F00A-4AA5-9974-B8D2B1DE1084"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5a3:*:*:*:*:*:*:*","matchCriteriaId":"514AD04E-39AE-49FB-AB26-B425F1D5B34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5a4:*:*:*:*:*:*:*","matchCriteriaId":"7FE837C2-2C20-4F8B-A92C-0F5D97974522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5a5:*:*:*:*:*:*:*","matchCriteriaId":"DA678572-F6AE-4CC3-AE58-D420D695A297"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5a6:*:*:*:*:*:*:*","matchCriteriaId":"C8D643E2-5344-4B34-AD4B-20B4870E40F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5b1:*:*:*:*:*:*:*","matchCriteriaId":"41FEC657-2316-45B6-B9DC-1F87C9A74CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5b2:*:*:*:*:*:*:*","matchCriteriaId":"DCEDEAA3-3EA8-4BF4-8A27-4F485AD60E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcl_tk:tcl_tk:8.5b3:*:*:*:*:*:*:*","matchCriteriaId":"7D387207-B013-4D8A-82C4-F4B6FB004E09"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28784","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28807","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28848","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28857","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28867","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28954","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29069","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29070","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30129","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30188","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30535","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30717","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30783","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32608","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019309","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-664-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0054","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1490","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1491","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1598","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:041","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0134.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0135.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0136.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488069/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27655","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0430","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1456/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431518","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2215","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-664-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0134.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1456/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0554","sourceIdentifier":"secalert@redhat.com","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484."},{"lang":"es","value":"Desbordamiento de Buffer en la función readImageData en giftopnm.c de netpbm en versiones anteriores a 10.27 y de netpbm en versiones anteriores a 10.27 permite a atacantes remotos con la intervención del usuario provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de imágenes GIF manipuladas, similar a CVE-2006-4484."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:*:*:*:*:*:*:*:*","versionEndIncluding":"10.26","matchCriteriaId":"8CCFE3C4-89EC-4BCF-9DB8-02586857C1D4"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29079","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30280","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32607","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-665-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1579","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:039","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0131.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27682","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019358","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0460","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2216","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10975","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-665-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0131.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0555","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables."},{"lang":"es","value":"La función ExpandCert en Apache-SSL versiones anteriores apache_1.3.41+ssl_1.59 no gestiona correctamente los caracteres (1) '/' y (2) '=' en un Distinguished Name (DN) de un certificado de cliente, lo cual puede permitir a atacantes remotos evitar autenticarse a través de un DN manipulado que dispara la sobreescritura de variables de entorno."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.3.34_1.57:*:*:*:*:*:*:*","matchCriteriaId":"F97198C6-EE6A-43C2-B69B-7026505F7DC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3797","source":"cve@mitre.org"},{"url":"http://www.apache-ssl.org/advisory-cve-2008-0555.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cynops.de/advisories/CVE-2008-0555.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.klink.name/security/aklink-sa-2008-005-apache-ssl.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490386/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28576","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019784","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1079/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41618","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache-ssl.org/advisory-cve-2008-0555.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cynops.de/advisories/CVE-2008-0555.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.klink.name/security/aklink-sa-2008-005-apache-ssl.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490386/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1079/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0556","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en OpenCA PKI 0.9.2.5, y probablemente versiones anteriores, permite a atacantes remotos realizar acciones sin autorizar como usuarios autorizados a través de un link o una etiqueta IMG a RAServer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca_pki:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.2.5","matchCriteriaId":"4D39C262-2DC9-4221-944B-18F67BD0BCB7"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060300.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28951","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019426","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/264385","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40476","source":"cve@mitre.org"},{"url":"https://www.cynops.de/advisories/CVE-2008-0556.txt","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060300.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/264385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cynops.de/advisories/CVE-2008-0556.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0557","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the CatalogShop (com_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente CatalogShop (com_catalogshop) 1.0b1 para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mamboserver:catalogshop:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"5ED7BB15-ACCA-4B1D-B43C-25B5ADDB33E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27558","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40142","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0558","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Uniwin eCart Professional anterior a 2.0.16. Permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro rp a cartView.asp y otros componentes no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uniwin:ecart_professional:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5084695E-B65A-4289-B61B-641D448E7D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:uniwin:ecart_professional:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"BB53715B-00E4-4DFF-B26E-5B7906D11621"},{"vulnerable":true,"criteria":"cpe:2.3:a:uniwin:ecart_professional:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2159E9D7-430D-4D80-A130-539A83D0C052"},{"vulnerable":true,"criteria":"cpe:2.3:a:uniwin:ecart_professional:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3BBA2D36-6A09-40A4-9A49-2067953D9058"}]}]}],"references":[{"url":"http://secunia.com/advisories/28735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27560","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0559","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the permalink parameter in core.php, accessed through index.php; and (2) the thispost parameter in comments.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Nilson's Blogger 0.11. Permiten a atacantes remotos ejecutar archivos locales arbitrarios a través de .. (punto punto) en (1) el parámetro permalink en core.php, accediendo a través de index.php; y (2) el parámetro thispost en comments.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nilsons_blogger:nilsons_blogger:0.11:*:*:*:*:*:*:*","matchCriteriaId":"D6EAF21F-8419-4369-8EC1-3206A2883205"}]}]}],"references":[{"url":"http://secunia.com/advisories/28737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3604","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487384/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27559","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487384/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0560","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms (contactforms), a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a fatal error due to a call to an undefined function"},{"lang":"es","value":"**CUESTIONADA**Vulnerabilidad de inclusión de archivo PHP remoto en cforms-css.php de Oliver Seidel cforms (contactforms), un plugin de Wordpress. Permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro tm. NOTA: CVE cuestiona esto para 7.3, ya que no hay parámetro tb y el código sale con un error fatal debido a una llamada a una función no definida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:contact_forms:cforms:*:*:*:*:*:*:*:*","matchCriteriaId":"AB5C013D-45CC-4A97-833A-417DB2A7873A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3605","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001895.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487347/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40143","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001895.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487347/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0561","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en  el componente Arthur Konze AkoGallery (com_akogallery) 2.5 beta para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arthur_konze_webdesign:akogallery:2.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"90E3C1C8-7A8E-4129-B36A-DC95C056511E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27557","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40141","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0562","sourceIdentifier":"cve@mitre.org","published":"2008-02-04T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Restaurant (com_restaurant) 1.0 para Mambo and Joomla!. Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mamboserver:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4FA182A7-98B0-4FA2-97A8-0C01E3411DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mamboserver:mambo:1.0:*:*:*:*:*:*:*","matchCriteriaId":"363F6567-E83B-4912-81BB-CFC862BC79AB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27551","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40144","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0563","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en service/impl/UserLocalServiceImpl.java de Liferay Portal 4.3.6. Permite a atacantes remotos realizar acciones sin especificar como usuarios autenticados sin especificar a través de la cabecera User-Agent HTTP, la cual se usa redactando e-mails de Olvido de Contraseña en formato HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C86D1BEF-DDC0-4622-8399-A23F7EFDE0F2"}]}]}],"references":[{"url":"http://support.liferay.com/browse/LEP-4737","source":"cve@mitre.org"},{"url":"http://support.liferay.com/browse/LEP-4737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0564","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's \"info attribute\" in the web administrator interface, a different vulnerability than CVE-2006-3636."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS)en Mailman en versiones anteriores a 2.1.10b1. Permiten a atacantes remotos inyectar scripts wet y HTMLs arbitrarios por medio de vectores sin especificar relacionados con (1)editar plantillas y (2) la lista \"info atribute\" en la interfaz del administrador web, una vulnerabilidad distinta a CVE-2006-3636."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=431526\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n","lastModified":"2008-03-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailman:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.10b","matchCriteriaId":"66416D43-5E21-4153-A603-9D6A314EF494"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28966","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29249","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43549","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0056","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0307.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488236/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27630","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-586-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0422","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0542","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431526","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2207","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0565","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en vote.php de DeltaScripts PHP Links 1.3 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_links:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"2089E5BB-3C94-4F1B-B900-1531C8631AA4"}]}]}],"references":[{"url":"http://osvdb.org/40840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27530","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5021","source":"cve@mitre.org"},{"url":"http://osvdb.org/40840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0566","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_public_program parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/smarty.php de DeltaScripts PHP Links 1.3 y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro full_path_to_public_program.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_links:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5292E0A2-61E0-45C3-8F13-5770BADFA3AE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5022","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0567","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) PPS/File.php, (2) Writer.php, and (3) PPS.php in excelwriter/; and (4) BIFFwriter.php, (5) Workbook.php, (6) Worksheet.php, and (7) Format.php in excelwriter/Writer/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos PHP remotos en  la componente ChronoEngine ChronoForms (com_chronocontact) 2.3.5 para Joomla!. Permiten a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro mosConfig_absolute_path hacia (1) PPS/File.php, (2) Writer.php y (3) PPS.php en excelwriter/; y (4) BIFFwriter.php, (5) Workbook.php, (6) Worksheet.php y (7) Format.php en excelwriter/Writer/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chronoengine:chronoforms:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"35F4D378-5334-44EE-8B5F-C08CBE7EA7C8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27531","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5020","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0568","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated from behind the same proxy server as the attacker."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica IP-authentication del módulo Secure Site 5.x-1.0 y 4.7.x-1.0 de Drupal, permite a atacantes remotos conseguir privilegios de un usuario que ha sido autenticado por el mismo servidor proxy que el atacante.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:secure_site_module:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B2A1B1A0-8A02-4D43-982E-C7E0D2372107"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:secure_site_module:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE704640-0126-4D4C-BF94-576B12CA4C9D"}]}]}],"references":[{"url":"http://drupal.org/node/216019","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0377/references","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0377/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0569","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors."},{"lang":"es","value":"El módulo Comment Upload 4.7.x antes de 4.7.x-0.1 y 5.x antes de 5.x-0.1 para Drupal no utiliza las funciones correctamente en el módulo upload (actualizar), que permite a atacantes remotos evitar la validación del upload y actualizar archivos arbitrarios y posiblemente ejecutar código arbitrario a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:comment_upload_module:4.7:*:*:*:*:*:*:*","matchCriteriaId":"3AE90D55-2062-4D8B-841B-B57EABF24B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:comment_upload_module:5.0:*:*:*:*:*:*:*","matchCriteriaId":"857EE6FC-1DF2-4DC7-BF8D-EE81B08E3FA7"}]}]}],"references":[{"url":"http://drupal.org/node/216024","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216035","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216036","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27544","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0374/references","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/216035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/216036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0374/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0570","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with other providers."},{"lang":"es","value":"El módulo OpenID 5.x-1.0 y anteriores de Drupal no verifica correctamente el claimed_id devuelto por un proveedor OpenID, lo cual permite a proveedores remotos OpenID falsificar autenticaciones OpenID en dominios asociados con otros proveedores.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:openid:5:*:*:*:*:*:*:*","matchCriteriaId":"B6BDFAFE-0B9B-4476-AF06-FE6FCB35D7F3"}]}]}],"references":[{"url":"http://drupal.org/node/216022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28717","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27542","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0373/references","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0373/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0571","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and manipulate points."},{"lang":"es","value":"El formulario point moderation en el módulo Userpoints 4.7.x antes de 4.7.x-2.3, 5.x-2 antes de 5.x-2.16 y 5.x-3 antes de 5.x-3.3 para Drupal, no sigue el modelo de presentación de los formularios API de Drupal. Esto permite que atacantes remotos puedan hacer ataques de falsificación de petición en sitios cruzados (CSRF) y manipular puntos (points)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:userpoints_module:4.7:*:*:*:*:*:*:*","matchCriteriaId":"2B8ACD78-BD74-4084-9646-CBF43C56E62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:userpoints_module:5.0:*:*:*:*:*:*:*","matchCriteriaId":"79EF4D94-2A34-4D01-AED6-6C51B213657C"}]}]}],"references":[{"url":"http://drupal.org/node/216023","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0375/references","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0375/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0572","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MM_GLOBALS[home] parameter to (1) acweb/admin_index.php; and (2) ask.inc.php, (3) learn.inc.php, (4) manage.inc.php, (5) mind.inc.php, and (6) sensory.inc.php in include/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Mindmeld 1.2.0.10 permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro MM_GLOBALS[home] de (1) acweb/admin_index.php; y (2) ask.inc.php, (3) learn.inc.php, (4) manage.inc.php, (5) mind.inc.php, y (6) sensory.inc.php en include/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mindmeld:mindmeld:1.2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"9A267261-B49B-494E-8F53-8E7C2040EB53"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27538","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5026","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0573","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafted IPSECDRV_IOCTL IOCTL request."},{"lang":"es","value":"IPSecDrv.sys 10.4.0.12 en SafeNET HighAssurance Remote y SoftRemote. Permite a usuarios locales ganar privilegios a través de peticiones IPSECDRV_IOCTL IOCTL manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safenet:ipsecdrv.sys:10.4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"791F998D-89BF-4DF3-B9BF-EC922CE80E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet:safenet_highassurance_remote:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"9A784704-A62C-4652-8670-D846E84CE98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet:softremote_vpn_client:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"726FC734-87A0-44E8-8D43-CAFFAA7AAC32"}]}]}],"references":[{"url":"http://secunia.com/advisories/28701","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27496","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019282","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0333","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5004","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0574","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort parameter in a whoisonline action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de webSPELL 4.01.02 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro sort en una acción whoisonline."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.01.02:*:*:*:*:*:*:*","matchCriteriaId":"5EF027B3-CC1B-48C1-9EED-E5A3A2CD585A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28684","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3606","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487312/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40084","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487312/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0575","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an \"update member\" action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF)en admin/admincenter.php de webSPELL 4.01.02. Permite a atacantes remotos asignar el nivel de privilegios de superadmin a cuentas arbitrarias como administradores a través de una acción \"update member\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.01.02:*:*:*:*:*:*:*","matchCriteriaId":"5EF027B3-CC1B-48C1-9EED-E5A3A2CD585A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28684","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3606","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487312/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487312/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0576","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors that write to summary table pages."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Project Issue Tracking 5.x-2.x-dev antes 20080130 en las series 5.x-2.x, 5.x-1.2 y anteriores en las  series 5.x-1.x, 4.7.x-2.6 y anteriores en las series 4.7.x-2.x, y 4.7.x-1.6 y anteriores en las series 4.7.x-1.x de Drupal, permite a usuarios remotos autenticados inyectar web script o HTML de su elección a través de vectores no especificados que escribe resúmenes de páginas de tablas.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:project_issue_tracking_module:4.7:*:*:*:*:*:*:*","matchCriteriaId":"80E74B2F-1EB1-462D-B970-339C8817C229"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:project_issue_tracking_module:5:*:*:*:*:*:*:*","matchCriteriaId":"AD5B6916-8A14-4D72-8AEB-FDB224101D49"}]}]}],"references":[{"url":"http://drupal.org/node/216062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0376/references","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0376/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0577","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal (1) does not restrict the extensions of attached files when the Upload module is enabled for issue nodes, which allows remote attackers to upload and possibly execute arbitrary files; and (2) accepts the .html extension within the bundled file-upload functionality, which allows remote attackers to upload files containing arbitrary web script or HTML."},{"lang":"es","value":"El módulo Project Issue Tracking 5.x-2.x-dev antes del 2008-01-30 en las series 5.x-2.x, 5.x-1.2 y anteriores, en las series 5.x-1.x, 4.7.x-2.6 y anteriores, en las series 4.7.x-2.x, y 4.7.x-1.6 y anteriores en las series 4.7.x-1.x para Drupal. (1) No restringe las extensiones de archivos adjuntos cuando el módulo Upload (actualizar) está activado para nodos issue (emitidos), lo que permite a atacantes remotos actualizar y posiblemente ejecutar archivos arbitrarios; y (2) acepta la extensión .html dentro de la funcionalidad de actualización de archivos empaquetados, lo que permite a atacantes remotos actualizar archivos que contengan scripts web o HTMLs arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:project_issue_tracking_module:4.7:*:*:*:*:*:*:*","matchCriteriaId":"80E74B2F-1EB1-462D-B970-339C8817C229"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:project_issue_tracking_module:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2206A14-1C6A-4762-8E3A-0A75C6F30836"}]}]}],"references":[{"url":"http://drupal.org/node/216063","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0376/references","source":"cve@mitre.org"},{"url":"http://drupal.org/node/216063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0376/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0578","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página de login de administración web de Tripwire Enterprise 7.0. Permite a atacantes remotos inyectar scripts web o HTMLs arbitrarios a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire_enterprise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E48D70BD-791E-415D-A0CA-8103DF8F752A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3610","source":"cve@mitre.org"},{"url":"http://www.liquidmatrix.org/blog/2008/01/29/advisory-tripwire-enterprise-xss-vulnerability","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487229/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27486","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019279","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0372/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.liquidmatrix.org/blog/2008/01/29/advisory-tripwire-enterprise-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487229/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0372/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0579","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente buslicense (com_buslicense)para Joomla! Permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro aid en una acción list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_buslicense:*:*:*:*:*:*:*:*","matchCriteriaId":"79C4CC66-60AB-4BA8-B3AD-FE147C228E9F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27508","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0359/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0359/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0580","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering."},{"lang":"es","value":"Geert Moernaut LSrunasE y Supercrypt usan una clave de encriptación compuesta por un hash SHA1 de una cadena fija embebida en el archivo ejecutable, lo que facilita que los usuarios locales puedan obtener esta clave sin ingeniería inversa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geert_moernaut:lsrunase:*:*:*:*:*:*:*:*","matchCriteriaId":"BC997E02-5B99-4195-83BA-505903D6145A"},{"vulnerable":true,"criteria":"cpe:2.3:a:geert_moernaut:supercrypt:*:*:*:*:*:*:*:*","matchCriteriaId":"8520B808-FC38-4659-BB93-D3764DF901C1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487269/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27500","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487269/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0581","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modified batch file that specifies this password in the /password switch and specifies an arbitrary program in the /command switch."},{"lang":"es","value":"Geert Moernaut LSrunasE permite a usuarios locales ganar privilegios obteniendo la contraseña encriptada de un archivo por lotes y construyendo un archivo por lotes modificado que especifica esta contraseña en la opción /password y especifica un programa arbitrario en la opción /command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moernaut:lsrunase:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0482BA34-F085-4EB3-810B-5ACD34529828"},{"vulnerable":true,"criteria":"cpe:2.3:a:moernaut:supercrypt:1.0:*:*:*:*:*:*:*","matchCriteriaId":"099A6BF7-E809-458B-B267-D0222207B1F3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487269/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487269/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0582","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Full Name field of a reviewer of a business item entry, accessible through (1) the SkypeFind dialog and (2) a skype:?skypefind URI for the skype: URI handler."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en zonas cruzadas en el control web Internet Explorer en Skype 3.1 hasta 3.6.0.244 en Windows permite a atacantes remotos inyectar web script o HTML de su elección en Local Machine Zone mediante el campo Full Name de un revisor de una entrada de negocios, accesible a través de (1) el diálogo SkypeFind y (2) un skype:?URI de skypefind para el skype: URI handler.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DE256FC0-DDAD-48E3-A5EF-C1DC7C65825C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DC3B8FD1-C61B-45E5-B8E0-3CEFA92A6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D09CC031-8F8F-4BC4-AEFF-4FD98411B272"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6:*:*:*:*:*:*:*","matchCriteriaId":"AD01462B-281F-4299-8D85-3FC6E6D392A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.244:*:*:*:*:*:*:*","matchCriteriaId":"95648140-386E-4D8B-BE7E-9542333F0A8C"}]}]}],"references":[{"url":"http://aviv.raffon.net/2008/01/31/AttackersCanSkypeFindYou.aspx","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/794236","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487370/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27338","source":"cve@mitre.org"},{"url":"http://aviv.raffon.net/2008/01/31/AttackersCanSkypeFindYou.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/794236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/487370/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0583","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata fields of a Metacafe movie submitted by Metacafe Pro to the Skype video gallery, accessible through a search within the (1) \"Add video to chat\" or (2) \"Add video to mood\" dialog, a different vector than CVE-2008-0454."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en zonas cruzadas en el control web de Internet Explorer en Skype 3.6.0.244 y las versiones anteriores 3.5.x y 3.6.x. En Windows permite que atacantes remotos con la intervención del usuario puedan inyectar secuencias de comandos web o HTMLs de su elección en la Zona de la Máquina Local a través de Description (descripción) y otros campos metadata sin especificar de una película Metacafe enviada por Metacafe Pro a la galería de vídeo de Skype. Lo hace accesible a través de una búsqueda dentro de el diálogo (1) \"Add video to chat (Añadir el vídeo al chat)\" o (2) \"Add video to mood (Añadir vídeo al modo)\" , un vector distinto a CVE-2008-0454."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D09CC031-8F8F-4BC4-AEFF-4FD98411B272"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6:*:*:*:*:*:*:*","matchCriteriaId":"AD01462B-281F-4299-8D85-3FC6E6D392A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.216:*:*:*:*:*:*:*","matchCriteriaId":"AC06202D-D53C-4BC7-9FB6-0C35B0E6DEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.244:*:*:*:*:*:*:*","matchCriteriaId":"6E246DFC-5427-496D-9791-FD8B1C408D61"}]}]}],"references":[{"url":"http://aviv.raffon.net/2008/01/22/NoMoreVideosForYouComeBackWhenPatchAvailable.aspx","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://skype.com/security/skype-sb-2008-001-update1.htm","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/794236","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27338","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39754","source":"cve@mitre.org"},{"url":"http://aviv.raffon.net/2008/01/22/NoMoreVideosForYouComeBackWhenPatchAvailable.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://skype.com/security/skype-sb-2008-001-update1.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/794236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0584","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) swap, (2) swapoff, and (3) swapon programs."},{"lang":"es","value":"Múltiples desbordamientos de búfer en bos.rte.contro. en IBM AIX 5.2 y 5.3 permiten a usuarios locales conseguir privilegios a través de vector no especificados relativos a los programas (1)swap, (2) swapoff, y (3) swapon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY96095","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY96101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27432","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY96095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY96101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0585","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to \"alter the behavior of\" this client by overwriting these files."},{"lang":"es","value":"sysmgt.websm.webaccess en IBM AIX 5.2 y 5.3 tiene permisos de escritura para ficheros no espedificados del cliente remoto WebSM, lo cual permite a usuarios locales \"cambiar el comportamiento\" de este cliente sobrescribiendo esos ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY97257","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27433","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4066","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39906","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY97257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0586","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4) lvaryoffvg, and (5) lvgenminor programs in bos.rte.lvm; and the (6) tellclvmd program in bos.clvm.enh."},{"lang":"es","value":"Múltiples desbordamientos de búfer en IBM AIX 5.2 y 5.3. Permiten a usuarios locales conseguir priviledios por medio de vectores no especificados relacionados con los programas (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4) lvaryoffvg y (5) lvgenminor en bos.rte.lvm; y el programa tellclvmd en bos.clvm.enh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc","source":"cve@mitre.org"},{"url":"http://osvdb.org/40427","source":"cve@mitre.org"},{"url":"http://osvdb.org/40428","source":"cve@mitre.org"},{"url":"http://osvdb.org/40429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY98448","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY98450","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY98331","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY98340","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY99537","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ00559","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ10828","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27431","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39907","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5704","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/lvm_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY98448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY98450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY98331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY98340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IY99537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ00559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ10828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0587","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en el programa uspchrp en devices.chrp.base.diag en IBM AIX 5.2 y 5.3 permite a usuarios locales ganar privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06261","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06489","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27429","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39910","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5686","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0588","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en el programa utape en devices.scsi.tape.diag de IBM AIX 5.2 y 5.3 permite a usuarios locales conseguir privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06260","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06488","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06620","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27430","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39909","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5572","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0589","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T03:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ps program in bos.rte.control in IBM AIX 5.2, 5.3, and 6.1 allows local users to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El programa ps en bos.rte.control de IBM AIX 5.2, 5.3 y 6.1. Permite a usuarios locales obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019265","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11242","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11243","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11244","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ12745","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27434","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ12745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0590","sourceIdentifier":"cve@mitre.org","published":"2008-02-05T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long opendir command."},{"lang":"es","value":"Desbordamiento de búfer en Ipswitch WS_FTP Server con SSH 6.1.0.0. Permite a usuarios remotamente autentificados provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de un comando opendir largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1886ECC8-BF8B-4CD6-93BA-39409DD05AE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3609","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487441/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27573","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0400/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487441/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0400/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0591","sourceIdentifier":"secalert@redhat.com","published":"2008-02-09T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the \"dialog refocus bug\" or \"ffclick2\"."},{"lang":"es","value":"Mozilla Firefox versiones anteriores a 2.0.0.12 y Thunderbird versiones anteriores a 2.0.0.12, no administra apropiadamente un temporizador de retardo utilizado en los diálogos de confirmación, que podría permitir a atacantes remotos engañar a los usuarios para que confirmen una acción no segura, como la ejecución remota de archivos, mediante el uso de un temporizador para cambiar el enfoque de ventana, también conocido como el \"dialog refocus bug\" o \"ffclick2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"25E3F549-B010-49E4-B8F6-B22727D57AA6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lcamtuf.coredump.cx/ffclick2/","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28808","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29164","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/2781","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-08.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/470446/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/24293","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019339","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=376473","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lcamtuf.coredump.cx/ffclick2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/2781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-08.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/470446/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/24293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0454/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=376473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0592","sourceIdentifier":"secalert@redhat.com","published":"2008-02-09T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a \"Content-Disposition: attachment\" and an invalid \"Content-Type: plain/text,\" which prevents Firefox from rendering future plain text files within the browser."},{"lang":"es","value":"Mozilla Firefox antes de 2.0.0.12 y SeaMonkey antes de 1.1.8. Permite a atacantes remotos ayudados por el usuario  provocar una denegación de servicio a través del archivo plain .txt con un \"disposición de contenido: adjunto\" (Content-Disposition attachment) y un \"Tipo de contenido: texto/plano\" (Content-Type: plain/text) no válido, lo que impide a Firefox interpretar futuros archivos de texto plano en el navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"DBB527B8-3829-4C2E-8A46-F4D4EA5C5060"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-09.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019340","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=387258","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-09.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=387258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0593","sourceIdentifier":"secalert@redhat.com","published":"2008-02-09T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems."},{"lang":"es","value":"Los navegadores basados en Gecko, incluyendo Mozilla Firefox versiones anteriores a 2.0.0.12 y SeaMonkey versiones anteriores a 1.1.8, modifican la propiedad .href de los nodos DOM de la hoja de estilo al URI final de un redireccionamiento 302, que podría permitir a los atacantes remotos omitir la Política del Mismo Origen y leer información confidencial de la dirección URL original, como con los sistemas de Single-Signon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.17","matchCriteriaId":"E133F505-4D8A-464B-A6EC-1FD367D3D88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28754","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28815","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-10.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019341","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=397427","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0104.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=397427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0594","sourceIdentifier":"secalert@redhat.com","published":"2008-02-09T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks."},{"lang":"es","value":"Versiones anteriores a Mozilla Firefox 2.0.0.12, nunca muestran una advertencia de falsificación de web si el contenido completo de una página web se encuentra entre una etiqueta DIV lo que permite a atacantes remotos realizar ataques de phishing"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.\n\nThis does not affect the versions of Firefox or SeaMonkey shipped in Red Hat Enterprise Linux.","lastModified":"2008-02-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.11","matchCriteriaId":"B3E4F934-1CC7-475C-B425-BEEF29AED912"}]}]}],"references":[{"url":"http://browser.netscape.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28877","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28924","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28958","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29086","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-11.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27683","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019342","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408164","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"secalert@redhat.com"},{"url":"http://browser.netscape.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-576-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0595","sourceIdentifier":"secalert@redhat.com","published":"2008-02-29T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface."},{"lang":"es","value":"dbus-daemon en D-Bus anterior a 1.0.3 y 1.1.x anterior a 1.1.20, reconoce atributos de send_interface en directivas de permiso en la política de seguridad sólo para llamadas a métodos completamente cualificados, esto permite a usuarios locales evitar las restricciones de acceso pretendidas mediante llamadas a métodos con una interfaz NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*","matchCriteriaId":"02362C25-B373-4FB1-AF4A-2AFC7F7D4387"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.0_x86_64:*:*:*:*:*:*:*","matchCriteriaId":"DC4784E4-24D1-4E22-B880-846F21F52F73"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*","matchCriteriaId":"19D64247-F0A0-4984-84EA-B63FC901F002"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"316AA6EB-7191-479E-99D5-40DA79E340E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"CB7AD2F3-451D-4F37-A6F3-DE676804BBA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"5FE8C9E7-15C3-4F89-8E54-C9691FAD4E4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.3","matchCriteriaId":"53965B9B-5A2C-4899-9DDD-8995BFED40BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.20","matchCriteriaId":"B1C1F814-9430-464F-9376-B23363473BF9"}]}]}],"references":[{"url":"http://lists.freedesktop.org/archives/dbus/2008-February/009401.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29148","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29160","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29171","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29173","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29281","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29323","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30869","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32281","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1019512","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0099","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1599","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:054","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0159.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489280/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28023","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-653-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0694","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://issues.rpath.com/browse/RPL-2282","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9353","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00893.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00911.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.freedesktop.org/archives/dbus/2008-February/009401.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1019512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0159.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489280/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-653-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://issues.rpath.com/browse/RPL-2282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00893.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00911.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0596","sourceIdentifier":"secalert@redhat.com","published":"2008-02-26T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers."},{"lang":"es","value":"Fuga de memoria en CUPS versiones anteriores a 1.1.22 y posiblemente otras versiones, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del demonio) a través de un gran número de peticiones para añadir y eliminar impresoras compartidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6C8CB34E-02FE-4F90-9642-B56D3B3ACEF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2AB2579A-2BC9-4E16-9641-248222301660"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*","matchCriteriaId":"6BF1F027-C9FF-4583-AB40-E0B757F9EE41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_3:*:*:*:*:*:*:*","matchCriteriaId":"6EA8914F-DB6D-4C21-A727-8B94BE0424BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*","matchCriteriaId":"B18EBE6E-482D-435D-851C-73EC301F0A26"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"B1512A96-B8E7-4DB7-A4CB-8FD3773BFC97"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29087","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29189","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29251","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29420","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0091","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:050","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0161.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488966/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27988","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019497","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40842","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2283","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10857","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488966/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0597","sourceIdentifier":"secalert@redhat.com","published":"2008-02-26T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación (use-after-free) en CUPS antes de 1.1.22 y posiblemente otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída) a través de paquetes IPP manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6C8CB34E-02FE-4F90-9642-B56D3B3ACEF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2AB2579A-2BC9-4E16-9641-248222301660"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*","matchCriteriaId":"6BF1F027-C9FF-4583-AB40-E0B757F9EE41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_3:*:*:*:*:*:*:*","matchCriteriaId":"6EA8914F-DB6D-4C21-A727-8B94BE0424BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*","matchCriteriaId":"B18EBE6E-482D-435D-851C-73EC301F0A26"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"B1512A96-B8E7-4DB7-A4CB-8FD3773BFC97"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29087","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29189","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29251","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0091","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:050","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0161.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488966/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27988","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019497","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40845","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2283","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9492","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488966/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0598","sourceIdentifier":"secalert@redhat.com","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary."},{"lang":"es","value":"Vulnerabilidad no especificada en el emulador 32-bit y 64-bit del núcleo de Linux 2.6.9, 2.6.18, y posiblemente otras versiones permite a usuarios locales leer memoria sin inicializar a través de vectores desconocidos involucrados en un binario manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30849","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30850","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31107","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32103","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32104","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33201","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33586","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0519.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29942","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020367","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433938","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43554","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10721","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6201","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0599","sourceIdentifier":"secalert@redhat.com","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI."},{"lang":"es","value":"La función init_request_info en sapi/cgi/cgi_main.c en PHP en versiones anteriores a 5.2.6 no considera correctamente la precedencia del operador cuando calcula la longitud de PATH_TRANSLATED, lo que podrían permitir a atacantes remotos ejecutar código arbitrario a través de una URI manipulada."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PHP as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5, and Red Hat Application Stack v1.\n\nFor Red Hat Application Stack v2, issue was addressed via: https://rhn.redhat.com/errata/RHSA-2008-0505.html","lastModified":"2008-08-07T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.6","matchCriteriaId":"AB713389-B8D4-459B-8DA4-43F9DEB44B8A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.4","matchCriteriaId":"468860AA-9D7D-400F-8E53-1100EE8C269B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.4","matchCriteriaId":"190009BB-163F-4D60-AC03-98BECBA13B2D"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30048","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30083","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30345","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30616","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30757","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30828","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31200","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31326","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32746","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35650","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/147027","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29009","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019958","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1810/references","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42137","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5510","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/147027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1810/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-0600","sourceIdentifier":"secalert@redhat.com","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010."},{"lang":"es","value":"La función vmsplice_to_pipe en el Kernel linux de la versión 2.6.17 a la 2.6.24.1 no valida ciertos espacios de memoria antes de referenciarlos, lo que permite a usuarios locales obtener privilegios de root/administrador a través de argumentos manipulados en una llamada al sistema del tipo vmsplice. Esta es una vulnerabilidad distinta de CVE-2008-0009 y CVE-2008-0010."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4.  Updated kernel packages are available to correct this issue for Red Hat Enterprise Linux 5:\nhttps://rhn.redhat.com/errata/RHSA-2008-0129.html","lastModified":"2008-02-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*","matchCriteriaId":"3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=linux-kernel&m=120263652322197&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120264520431307&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120264773202422&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120266328220808&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120266353621139&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28835","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28858","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28875","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28889","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28896","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28912","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28925","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28933","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28937","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29245","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30818","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019393","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0052","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0052","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1494","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:043","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:044","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0129.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488009/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27704","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27801","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-577-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0487/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432229","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432517","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2237","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11358","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/5092","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00270.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00485.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=120263652322197&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120264520431307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120264773202422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120266328220808&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120266353621139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-577-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0487/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00485.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0601","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en All Club CMS (ACCMS) 0.0.1f y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección  a través del  parámetro name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:all_club_cms:all_club_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.1f","matchCriteriaId":"5269AC64-18D9-4144-AFD6-45B47D57DE43"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27624","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5064","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0602","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the class_name parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en All Club CMS (ACCMS) 0.0.1f y versiones anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro class_name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:all_club_cms:all_club_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.1f","matchCriteriaId":"5269AC64-18D9-4144-AFD6-45B47D57DE43"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5061","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0603","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en index.php en el componente amazOOP Awesom! (com_awesom) 0.3.2 para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro listid en una tarea viewlist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amazoop:awesom:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E0BF9F01-B2FC-4963-9062-685253811EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_awesom:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BBB23B7D-687E-4BEE-913C-C05A7F7549EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_awesom:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"331DCEB4-694D-410C-9545-13851B53718D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27607","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0604","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions."},{"lang":"es","value":"La característica de autentificación LDAP en XLight FTP Server en versiones anteriores a 2.83. Cuando se usa con algunos servidores LDAP no especificados, no comprueba que haya contraseñas en blanco, lo que permite a atacantes remotos evitar las pretendidas restricciones de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.82","matchCriteriaId":"F79C2E38-B1A0-44AF-821A-E9400EE5381F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28755","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27602","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.xlightftpd.com/whatsnew.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.xlightftpd.com/whatsnew.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0605","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inject arbitrary web script or HTML via the (1) txtSearch parameter to operator/article/article_search_results.asp and the (2) Attach_Id parameter to operator/article/article_attachment.asp.  NOTE: for vector 2, the XSS occurs in a forced SQL error message."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en AstroSoft HelpDesk versiones anteriores a 1.95.228, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio del (1) parámetro txtSearch en el archivo operator/article/article_search_results.asp y (2) parámetro Attach_Id en el archivo operator/article/article_attachment.asp. NOTA: para el vector 2, el ataque de tipo XSS ocurre en un mensaje de error SQL forzado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astrosoft:astrosoft_helpdesk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.95.227","matchCriteriaId":"9B768D63-3FB3-4288-8E43-FAE435DBFD46"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3612","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488107/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27610","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488107/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0606","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Shambo2 (com_shambo2) para Mambo y Joomla!. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Itemid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_shambo2:*:*:*:*:*:*:*:*","matchCriteriaId":"3BB4515B-80BB-4F31-9BBE-BB46FBD00FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_shambo2:*:*:*:*:*:*:*:*","matchCriteriaId":"18724FED-4C4E-4CE0-B9DB-12A85AF6979C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phil_taylor:shambo2:*:*:*:*:*:*:*:*","matchCriteriaId":"80E6EF82-690B-4DD4-AB81-F933A6C2E84E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27609","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40238","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5059","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0607","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 para Joomla! y Mambo. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid. NOTA: el origen de esta información es desconocido; los detalles se ha obtenido solamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_sobi2:*:*:*:*:*:*:*:*","matchCriteriaId":"ABCB1BC6-19FD-4ACC-8F97-E119CBF321F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_sobi2:*:*:*:*:*:*:*:*","matchCriteriaId":"87FAD8D4-2AFD-49EA-8604-8E1190401DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sigsiu.net:sobi2:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B83AC1E1-E9A9-4CBB-B08A-4B1E0D4F17E4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27617","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0608","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823."},{"lang":"es","value":"El Logging Server (ftplogsrv.exe) 7.9.14.0 y versiones anteriores en IPSwitch WS_FTP 6.1. Permite a atacantes remotos provocar una denegación de servicio (pérdida de receptividad) a través de un gran número de paquetes grandes al puerto 5151/udp, lo que provoca que el socket que está a la escucha termine y evite que comandos de log se guarden, una vulnerabilidad distinta a CVE-2007-3823."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:6.1:*:*:*:*:*:*:*","matchCriteriaId":"393C0E38-2520-48CC-9484-1264B37BD0C2"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487506/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27612","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0408","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487506/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0609","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en DivideConcept VHD Web Pack 2.0. Permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:divideconcept:vhd_web_pack:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD07FEC0-1D2E-474B-8160-0EDC210BE84E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28712","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3613","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487485/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27621","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5060","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487485/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0610","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función ClientConnection::NegotiateProtocolVersion en vncviewer/ClientConnection.cpp de vncviewer para UltraVNC 1.0.2 y 1.0.4 antes de 01252008. Cuando se está en modo ESCUCHA (LISTENING) o cuando se utiliza el plugin DSM, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída) a través de un valor de tamaño modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C556A1A6-30ED-4988-B66B-CF823B297CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"700DA1B0-33D3-43A0-8080-733AD68CB903"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc6:*:*:*:*:*:*:*","matchCriteriaId":"FD272834-2BA4-446F-9851-8369FE620A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc7:*:*:*:*:*:*:*","matchCriteriaId":"FD36B455-5039-483A-B025-9FFB23844179"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc8:*:*:*:*:*:*:*","matchCriteriaId":"26A7E323-FA94-450A-B5E3-DB2C65244215"}]}]}],"references":[{"url":"http://forum.ultravnc.info/viewtopic.php?t=11850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28747","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887","source":"cve@mitre.org"},{"url":"http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/ClientConnection.cpp?sortby=date&r1=169&r2=168&pathrev=169","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/18666","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/721460","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27561","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019293","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0392","source":"cve@mitre.org"},{"url":"http://forum.ultravnc.info/viewtopic.php?t=11850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/ClientConnection.cpp?sortby=date&r1=169&r2=168&pathrev=169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/18666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/721460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0611","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rmgs/images.php del módulo RMSOFT Gallery System 2.0 para XOOPS. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rmsoft:gallery_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A9BF96F4-4B71-4C35-BE43-9743E1B7CBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27623","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0612","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en htdocs/install/index.php de XOOPS 2.0.18. Permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"541822E2-B233-4128-902A-3A3ACFCC1EBC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3614","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487484/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27622","source":"cve@mitre.org"},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/branches/2.0.x/2.0.18.1/docs/changelog.txt?r1=1283&r2=1282&pathrev=1283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1283","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5057","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487484/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/branches/2.0.x/2.0.18.1/docs/changelog.txt?r1=1283&r2=1282&pathrev=1283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0613","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the xoops_redirect parameter."},{"lang":"es","value":"Vulnerabilidad de redirección libre en htdocs/user.php de XOOPS 2.0.18. Permite a atacantes remotos redireccionar usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro xoops_redirect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"541822E2-B233-4128-902A-3A3ACFCC1EBC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3614","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&atid=430840&aid=1881236&group_id=41586","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487484/100/0/threaded","source":"cve@mitre.org"},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1282","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5057","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&atid=430840&aid=1881236&group_id=41586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487484/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0614","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Photokorn Gallery 1.543. Permite a atacantes remotos ejecutar comandos SQL de su elección a tavés del parámetro pic en una acción showpic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photokorn:gallery:1.543:*:*:*:*:*:*:*","matchCriteriaId":"CDDAB36B-4439-41C9-9B9F-2CB3683E9482"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27627","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5065","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0615","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en wp-admin/admin.php en el plugin DMSGuestbook 1.8.0 y 1.7.0 para WordPress. Permite a usuarios autentificados remotamente leer archivos de su elección a través de .. (punto punto) en (1) la carpeta y (2) los parámetros del archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmsguestbook_project:dmsguestbook:1.7.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"6F59AA6B-7033-42EA-B66A-EA67E4B002E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dmsguestbook_project:dmsguestbook:1.8.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"E2DD6F12-A5D0-4F56-9156-5643AE71851A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3615","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487437/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27575","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5035","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487437/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0616","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.  NOTE: it is not clear whether this issue crosses privilege boundaries."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el panel de administración en el plugin DMSGuestbook 1.7.0 para WordPress. Permite a administradores autentificados remotamente ejecutar comandos SQL de su elección a través de vectores no especificados. NOTA: no está claro si esta cuestión cruza los límites de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmsguestbook_project:dmsguestbook:1.7.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"6F59AA6B-7033-42EA-B66A-EA67E4B002E3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3615","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487437/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40196","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5035","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/3615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487437/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0617","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter to wp-admin/admin.php, or the (2) messagefield parameter in the guestbook page, and the (3) title parameter in the messagearea."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el plugin  MSGuestbook 1.7.0 para WordPress. Permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del (1) parámetro file a wp-admin/admin.php, o (2) parámetro messagefield en la página guestbook y el (3) parámetro title en messagearea."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmsguestbook_project:dmsguestbook:1.7.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"6F59AA6B-7033-42EA-B66A-EA67E4B002E3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3615","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487437/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27575","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5035","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/3615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487437/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0618","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) gbname, (2) gbemail, (3) gburl, and (4) gbmsg parameters to unspecified programs.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el plugin DMSGuestbook 1.8.0 y 1.7.0 para WordPress. Permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) gbname, (2) gbemail, (3) gburl y (4) gbmsg programas sin especificar. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmsguestbook_project:dmsguestbook:1.7.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"6F59AA6B-7033-42EA-B66A-EA67E4B002E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dmsguestbook_project:dmsguestbook:1.8.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"E2DD6F12-A5D0-4F56-9156-5643AE71851A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28759","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0619","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (persistent crash) via a long URI in a .M3U file."},{"lang":"es","value":"Desbordamiento de búfer en NeroMediaPlayer.exe de Nero Media Player 1.4.0.35 y versiones anteriores. Permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída persistente) a través de una URI larga en un archivo .M3U."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nero:mediaplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0.35","matchCriteriaId":"6AD597F5-5E14-4E43-8603-EB4142B59647"}]}]}],"references":[{"url":"http://secunia.com/advisories/28765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3616","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487578/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27615","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0405","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5063","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487578/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0620","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate."},{"lang":"es","value":"SAPLPD 6.28 y anteriores incluidas en SAP GUI 7.10 y SAPSprint antes de 1018. permite a atacantes remotos provocar una denegación de servicio (caída) a través de un comando 0x53 LPD, lo que provoca que el servidor termine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:7.10:*:*:*:*:*:*:*","matchCriteriaId":"BCEAAEEF-62DE-4BDD-846A-EA746FC4AADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saplpd:*:*:*:*:*:*:*:*","versionEndIncluding":"6.28","matchCriteriaId":"7F9C73A3-56A4-41C3-895A-4D49608B2946"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapsprint:*:*:*:*:*:*:*:*","matchCriteriaId":"ADF65E3D-45F1-4491-8532-B5BE4F6CD2E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/28786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28811","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27613","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019300","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0409","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0438","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0621","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands."},{"lang":"es","value":"Desbordamiento de búfer en SAPLPD 6.28 y anteriores incluidas en SAP GUI 7.10 y SAPSprint antes de 1018. Permite a atacantes remotos ejecutar código de su elección a través de argumentos largos a los comandos 1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04 y (5) 0x05 LPD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:7.10:*:*:*:*:*:*:*","matchCriteriaId":"BCEAAEEF-62DE-4BDD-846A-EA746FC4AADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saplpd:*:*:*:*:*:*:*:*","versionEndIncluding":"6.28","matchCriteriaId":"7F9C73A3-56A4-41C3-895A-4D49608B2946"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapsprint:*:*:*:*:*:*:*:*","matchCriteriaId":"ADF65E3D-45F1-4491-8532-B5BE4F6CD2E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/28786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28811","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27613","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019300","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0409","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0438","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5079","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0622","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en RaidenHTTPD 2.0.19 y versiones anteriores permite a atacantes remotos inyectar a su elección secuencias de comandos web o HTML mediante vectores no especificados relacionadas con el parámetro  ulang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raidenhttpd:raidenhttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.19","matchCriteriaId":"1B72E2D1-CF0E-47C6-A200-FAE61F049183"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2391868305/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28770","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.raidenhttpd.com/jp/security.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27628","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0411","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2391868305/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.raidenhttpd.com/jp/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0623","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control YMP Datagrid ActiveX (datagrid.dll) de Yahoo! Music Jukebox 2.2.2.056. Permite a atacantes remotosd ejecutar código de su elección a través de argumentos largos al método AddImage method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:music_jukebox:2.2.2.056:*:*:*:*:*:*:*","matchCriteriaId":"4150BEB2-A503-4B14-81AC-C1E32765E981"}]}]}],"references":[{"url":"http://secunia.com/advisories/28757","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/101676","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27590","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019301","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0396/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5043","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5046","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5048","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/101676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0396/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0624","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623."},{"lang":"es","value":"Un desbordamiento de búfer en el control ActiveX YMP Datagrid (datagrid.dll) en Yahoo! JukeBox versión 2.2.2.56, permite a los atacantes remotos ejecutar código arbitrario por medio de un argumento largo para el método AddButton, una vulnerabilidad diferente de CVE-2008-0623."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:music_jukebox:2.2.2.56:*:*:*:*:*:*:*","matchCriteriaId":"FF66CC59-CAF7-4668-A267-311CAF7FC674"}]}]}],"references":[{"url":"http://secunia.com/advisories/28757","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/101676","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27579","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0396/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5051","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/101676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0396/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0625","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX MediaGrid (mediagrid.dll) de Yahoo! Music Jukebox 2.2.2.56. Permite a atacantes remotos ejecutar código de su elección a través de argumentos largos al método AddBitmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:music_jukebox:2.2.2.56:*:*:*:*:*:*:*","matchCriteriaId":"FF66CC59-CAF7-4668-A267-311CAF7FC674"}]}]}],"references":[{"url":"http://secunia.com/advisories/28757","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/340860","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019298","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0396/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5052","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/340860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0396/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0626","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2023-11-07T02:01:46.540","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6303.  Reason: This candidate is a duplicate of CVE-2007-6303.  Notes: All CVE users should reference CVE-2007-6303 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0627","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2023-11-07T02:01:46.573","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6304.  Reason: This candidate is a duplicate of CVE-2007-6304.  Notes: All CVE users should reference CVE-2007-6304 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0628","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the \"external general entities\" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources."},{"lang":"es","value":"El código de análisis sintáctico de XML en Sun Java Runtime Environment JDK y JRE 6 actualización 3 y anteriores. Procesa  referencias a entidades externas incluso cuando la propiedad \"external general entities (entidades generales externas)\" es falsa, lo que permite a atacantes remotos llevar a cabo ataques de entidades externas XML (XXE) y provocar una denegación de servicio o acceso restringido a recursos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6:*:*:*:*:*:*:*","matchCriteriaId":"8502A8C5-0219-406B-8DAA-BF35BCD6DC94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update3:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"EAB2C9C2-F685-450B-9980-553966FC3B63"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2007-002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28746","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3621","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231246-1","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487434/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27553","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019292","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0371","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9847","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2007-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231246-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0629","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title."},{"lang":"es","value":"Desbordamiento de búfer en stream_cddb.c de MPlayer 1.0rc2 y SVN antes de r25824. Permite a atacantes remotos con la intervención del usuario ejecutar código de su elección a través de una entrada a base de datos CDDB que contiene un título de álbum largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.02rc2:*:*:*:*:*:*:*","matchCriteriaId":"9395B548-2F82-4543-A100-86B56A52B394"}]}]}],"references":[{"url":"http://secunia.com/advisories/28955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28956","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29307","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"cve@mitre.org"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0630","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code."},{"lang":"es","value":"Desbordamiento de búfer en url.c de MPlayer 1.0rc2 y SVN antes de r25823. Permite a atacantes remotos ejecutar código de su elección a través de de una URL manipulada que previene que el código de análisis sintáctico IPv6 coloque un puntero a NULL, lo que provoca que el búfer se reutilice por el código de unescape (no escape)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.02rc2:*:*:*:*:*:*:*","matchCriteriaId":"9395B548-2F82-4543-A100-86B56A52B394"}]}]}],"references":[{"url":"http://secunia.com/advisories/28955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28956","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29307","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"cve@mitre.org"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mplayerhq.hu/design7/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0631","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk method, or (2) modify files via the AddStringToFile method."},{"lang":"es","value":"Múltiples controles ActiveX en MailBee.dll de MailBee Objects 5.5. Permiten a atacantes remotos (1) sobreescribir archivos de su elección a través del método SaveToDisk method o (2) modificar archivos a través del método AddStringToFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:afterlogic:mailbee_objects:5.5:*:*:*:*:*:*:*","matchCriteriaId":"E8F5980D-4849-48B5-9C23-616CFFDE42C9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40011","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0632","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory."},{"lang":"es","value":"Vulnerabilidad de actualización de archivos sin restringir en cp_upload_image.php de LightBlog 9.5. Permite a atacantes remotos ejecutar código de su elección actualizando un archivo con una extensión ejecutable, después accediendo a él a través de una petición directa al archivo en el directorio raíz del blog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightblog:lightblog:9.5:*:*:*:*:*:*:*","matchCriteriaId":"72C112EC-616F-4467-A6F3-44351CEB2A06"}]}]}],"references":[{"url":"http://omni.netsons.org/blog/?p=11","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3617","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487398/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27562","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5033","source":"cve@mitre.org"},{"url":"http://omni.netsons.org/blog/?p=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487398/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0633","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service (exception) via a user name with a large number of quotes, which triggers the overflow during escaping."},{"lang":"es","value":"Desbordamiento de búfer en Anon Proxy Server 0.102 y versiones anteriores. Cuando la autentificación de usuario está activada, permite a atacantes remotos provocar una denegación de servicio (excepción) a través de un nombre de usuario con un número grande de comillas, lo que dispara el desbordamiento cuando se sale."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anon_proxy_server:anon_proxy_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.102","matchCriteriaId":"0102ECB7-9981-484F-A242-7FB143866AB1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487446/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27593","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://sourceforge.net/project/shownotes.php?group_id=138780&release_id=571924","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487446/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://sourceforge.net/project/shownotes.php?group_id=138780&release_id=571924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0634","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX NamoInstaller.NamoInstall.1 en NamoInstaller.dll 3.0.0.1, del modo que se usa en Sejoong Namo ActiveSquare6. Permite a atacantes remotos ejecutar código de su elección a través de un argumento largo al método Install, una vulnerabilidad distinta a CVE-2008-0551."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sejoong_namo:activesquare:6:*:*:*:*:*:*:*","matchCriteriaId":"3F004818-8920-4063-8565-38038C559CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sejoong_namo:namoinstall.1_activex_control:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D61B095-DC00-4FBF-A5CB-78B1B30BED0E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28649","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40199","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5045","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0635","sourceIdentifier":"cve@mitre.org","published":"2008-02-06T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el motor de envío de Openads desde la versión 2.4.0 a la 2.4.2. Permite a atacantes remotos ejecutar código PHP de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openads:openads:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B0CAC7D8-4C32-4E25-BC92-9DE99558E35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openads:openads:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9839C24C-EE1C-4FAB-9D8A-53FDE845FECC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28790","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487486/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27603","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/28790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487486/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-0636","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information."},{"lang":"es","value":"Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x y 6.x permite a atacantes remotos obtener información sensible a través de una solicitud directa a About/SC_About.htm, lo que proporciona información sobre la versión y parches."}],"vendorComments":[{"organization":"Level Platforms","comment":"Level Platforms clarifies that this issue is an Exposure and not a Vulnerability with Managed Workplace 6.0 Service Pack 2. \n\nThe Exposure is of non-sensitive information as defined by commonly accepted security standards. I.E. The definition of the term “sensitive” is limited to designate all those types and forms of information that, by law or regulation, require some form of protection but are outside the formal system for classifying national security information. Managed Workplace is not used by customers to process classified information and this Exposure does not reveal non-classified sensitive information. \n\nThe Exposure is eliminated in Managed Workplace 6.0 Service Pack 3. This Service Pack is currently in Beta and will be generally available within the next 20 days. \n","lastModified":"2008-02-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:level_platforms:managed_workplace_service_center:4:*:*:*:*:*:*:*","matchCriteriaId":"881241B5-006C-48D1-BD90-5EA4E1FED3D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:level_platforms:managed_workplace_service_center:5:*:*:*:*:*:*:*","matchCriteriaId":"BE6CD7AD-DA8E-4BD8-B826-A785BA1C775F"},{"vulnerable":true,"criteria":"cpe:2.3:a:level_platforms:managed_workplace_service_center:6:*:*:*:*:*:*:*","matchCriteriaId":"EF7F94BD-9C50-4A81-A637-81F695CC6358"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487811/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488201/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496074/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27702","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487811/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488201/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496074/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0638","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual buffer size."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria libre  para la reserva dinámica (heap) en el servicio Veritas Enterprise Administrator (VEA)(también conocido como vxsvc.exe) de Symantec Veritas Storage Foundation 5.0 permite a atacantes remotos ejecutar código de su elección a través de un paquete con valores manipulados de un campo de determinado tamaño, lo cual no es comprobado para la consistencia con el tamaño real del búfer.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:aix:*:*:*:*:*","matchCriteriaId":"53BB0646-9ED9-452D-83E8-C27D76C745BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:hp_ux:*:*:*:*:*","matchCriteriaId":"6F93497D-05F3-4116-A000-23C3660EDFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"D5FFFC60-E024-43C2-B467-E8DA696B81CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"A845D088-83FC-4C78-80E7-2BBEADFB464E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B4A744D6-2237-4FD8-9E8E-43377F0C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:32bit:windows_2003:*:*:*:*:*","matchCriteriaId":"B4435E63-96A0-4B9D-A2C6-4827A61B4E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:64bit:windows_2003:*:*:*:*:*","matchCriteriaId":"3ED4489C-97C0-41E5-9F0F-129C2D008674"}]}]}],"references":[{"url":"http://secunia.com/advisories/29050","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019459","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488420/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25778","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.20a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488420/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.20a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0639","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854.  NOTE: this issue exists because of an incomplete fix for CVE-2007-6701."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función EnumPrinters del servicio Spooler en Novell Client 4.91 SP2, SP3 y SP4 para Windows, permite a atacantes remotos ejecutar código de su elección mediante una petición RPC manipulada, también conocida como Novell bug 353138, una vulnerabilidad diferente a la CVE-2006-5854. NOTA: este problema se produce debido a un parche incompleto para CVE-2007-6701."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp2:*:*:*:*:*:*","matchCriteriaId":"78A17422-1FFE-4942-A6F1-01F99E4D42F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp3:*:*:*:*:*:*","matchCriteriaId":"F0CBDEB2-98CF-4C6A-A45A-F5B61803E449"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp4:*:*:*:*:*:*","matchCriteriaId":"EDDFB0E9-EF4C-4E9E-9369-453AF2A8481F"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=SszG22IIugM~","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=full-disclosure&m=120276962211348&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28895","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487980/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27741","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019366","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0496","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.novell.com/Download?buildid=SszG22IIugM~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=full-disclosure&m=120276962211348&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487980/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0640","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing."},{"lang":"es","value":"Symantec Ghost Solution Suite versión 1.1 anterior a 1.1 parche 2, versiones 2.0.0 y 2.0.1 no autentica las conexiones entre la consola y Ghost Management Agent, lo que permite a los atacantes remotos ejecutar comandos arbitrarios por medio de peticiones RPC no especificadas en conjunto con suplantación de ARP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:ghost_solutions_suite:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A66AA7A-B410-45E8-8BB0-1F349BB30422"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:ghost_solutions_suite:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"27FA37CC-D408-4213-8A3F-C46C97008E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:ghost_solutions_suite:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFEA8748-EE69-4803-96B1-9359F45022C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/28853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27644","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019356","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.07.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.02.07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0642","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T01:00:00.000","lastModified":"2025-04-23T16:15:19.113","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en archivos creados por Adobe RoboHelp 6 and 7,  y posiblemente las extensiones (1) WebHelp5 (WebHelp5Ext) o (2) WildFire (WildFireExt), permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores no especificados. Vulnerabilidad distinta de CVE-2007-1280."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*","matchCriteriaId":"3817D773-F9A8-4738-B159-93CCA297348D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*","matchCriteriaId":"113EFB69-D3FD-43DC-8AE9-300443F4FEF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/28945","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019397","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-05.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27763","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-05.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0643","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe ColdFusion MX 7 y ColdFusion 8 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"}]}]}],"references":[{"url":"http://secunia.com/advisories/29332","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-06.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28205","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019589","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0862/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0862/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0644","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function."},{"lang":"es","value":"Adobe ColdFusion MX 7 y ColdFusion 8 permiten a atacantes remotos eludir el mecanismo de protección para aplicaciones contra secuencias de comandos en sitios cruzados (XSS) mediante vectores de ataque desconocidos relativos a la función setEncoding."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"}]}]}],"references":[{"url":"http://secunia.com/advisories/29332","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-07.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28205","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019590","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0862/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41145","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0862/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0645","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and (4) system/login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Portail Web Php 2.5.1.1 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro Site_Path de (1) config/conf-activation.php, (2) menu/item.php, y (3) modules/conf_modules.php en admin/system/; y (4) system/login.php.  NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portail_web_php:portail_web_php:2.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DBD0F878-59F0-4C63-B463-7A3E717E186C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27616","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0646","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service (stack exhaustion and crash) via a crafted bencoded message."},{"lang":"es","value":"La función recursiva bdecode en include/libtorrent/bencode.hpp en Rasterbar Software libtorrent versiones anteriores a 0.12.1, usado en Deluge versiones anteriores a 0.5.8.3 y en otros productos, permite a atacantes según contexto provocar una denegación de servicio (agotamiento de pila y caída) a través de un mensaje bencoded manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluge_team:deluge:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.8.2","matchCriteriaId":"F203334A-55B8-44EA-9AA4-B58A264A0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"0.12","matchCriteriaId":"BF27B258-6566-4E94-B81E-D40575FDA915"}]}]}],"references":[{"url":"http://deluge-torrent.org/Changelog.php","source":"cve@mitre.org"},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?r1=956&r2=1968&pathrev=1968","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?view=log&pathrev=1968#rev1968","source":"cve@mitre.org"},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_13/include/libtorrent/bencode.hpp?view=log&pathrev=1968","source":"cve@mitre.org"},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/trunk/include/libtorrent/bencode.hpp?view=log&pathrev=1968","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28781","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27597","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0383","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0384","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00001.html","source":"cve@mitre.org"},{"url":"http://deluge-torrent.org/Changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?r1=956&r2=1968&pathrev=1968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_12/include/libtorrent/bencode.hpp?view=log&pathrev=1968#rev1968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/branches/RC_0_13/include/libtorrent/bencode.hpp?view=log&pathrev=1968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://libtorrent.svn.sourceforge.net/viewvc/libtorrent/trunk/include/libtorrent/bencode.hpp?view=log&pathrev=1968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0647","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el ActiveX HanGamePluginCn18.HanGamePluginCn18.1 en HanGamePluginCn18.dll de Ourgame GLWorld 2.6.1.29 (también conocido como Lianzong Game Platform) permite a atacantes remotos ejecutar código de su elección  a través de argumentos largos en los métodos (1) hgs_startGame y (2) hgs_startNotify, tal y como se realiza en exploits públicos desde Febrero del 2008. NOTA: alguno de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ourgame.com:glworld:2.6.1.29:*:*:*:*:*:*:*","matchCriteriaId":"2D79D063-2064-4051-B625-880DCA7CBC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ourgame.com:hangameplugincn18_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"F6BC51D6-5ECB-45B2-B819-E62613A26483"}]}]}],"references":[{"url":"http://secunia.com/advisories/28809","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27626","source":"cve@mitre.org"},{"url":"http://www.symantec.com/enterprise/security_response/weblog/2008/02/zeroday_exploit_for_lianzong_g.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0427","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5153","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/enterprise/security_response/weblog/2008/02/zeroday_exploit_for_lianzong_g.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0648","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) indexFooter.php; and (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php, and (8) Filters/SingleFilter.php in scripts/classes/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en OpenSiteAdmin 0.9.1.1 y versiones anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro path en (1) indexFooter.php; y (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php y (8) Filters/SingleFilter.php en scripts/classes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensiteadmin:opensiteadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.1.1","matchCriteriaId":"A178847D-10A4-4FDC-9648-BF3B79EF08D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27640","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0649","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.php en Astanda Directory Project (ADP) 1.2 y 1.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro link_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adp:astanda_directory_project:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF07927D-7974-4022-B011-7A376EF4663A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adp:astanda_directory_project:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C1B73F1A-928E-4CA8-83E9-C28E4AB038B1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27646","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0650","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the username field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Simple OS CMS 0.1c versión beta permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo username. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_os_cms:simple_os_cms:0.1c_beta:*:*:*:*:*:*:*","matchCriteriaId":"DCBEED7F-5CF5-4BEF-A4AF-DD7A5E20DAD5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27589","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0651","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the username field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Pedro Santana Codice CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo username. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pedro_santana_codice:cms:*:*:*:*:*:*:*:*","matchCriteriaId":"E7140918-4E70-42DF-A39B-C8D0FB1E8797"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0652","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Downloads (com_dowlnloads) para Mambo and Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro filecatid en la acción selectfolder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_downloads:*:*:*:*:*:*:*:*","matchCriteriaId":"F90BE2C1-4784-4FA6-A65F-DB85E8F9A853"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_downloads:*:*:*:*:*:*:*:*","matchCriteriaId":"2DB2D210-8D68-46A4-A406-85AC5F39B877"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27648","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5073","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0653","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Ynews (com_ynews) 1.0.0 de Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del id parameter en una acción showYNews."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_ynews:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"89D905F9-C7A2-4454-AD31-9EDB66E08893"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27649","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5072","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0654","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _VIEW (view) parameter to (1) index.php, (2) html/sitio/index.php, or (3) src/sistema/vistas/template/tpl_inicio.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Azucar CMS 1.3 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro _VIEW (view) en (1) index.php, (2) html/sitio/index.php, o (3) src/sistema/vistas/template/tpl_inicio.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:azucar_cms:azucar_cms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5997C031-C4F1-45CB-B310-DF9F95D367D6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3622","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487595/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487595/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0655","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-11-12T15:15:34.093","vulnStatus":"Deferred","cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Adobe Acrobat and Reader Unspecified Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Adobe Reader y Acrobat anterior a la versión 8.1.2 tienen vectores de impacto y ataque desconocidos."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndExcluding":"8.1.2","matchCriteriaId":"B1BF2209-B59C-497A-AEA7-154C1A140157"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndExcluding":"8.1.2","matchCriteriaId":"AC62F510-1939-40B4-A219-84FE2C1F7CCA"}]}]}],"references":[{"url":"http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28802","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28851","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28983","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29065","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019346","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27641","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0425","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://blogs.adobe.com/acroread/2008/02/adobe_reader_812_for_linux_and.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-0655","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2008-0656","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute."},{"lang":"es","value":"Vulnerabilidad de actualización de archivos sin restringir en dmclTrace.jsp en Documentum Administrator 5.3.0.313 y Webtop 5.3.0.317 permite a atacantes remotos sobrescribir archivos no especificados a través del atributo filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"3B830D50-91F4-40D7-8886-0355A5AD4FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6B666EFE-3B3D-400E-A792-BB037D120BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:5.2.5_sp2:*:*:*:*:*:*:*","matchCriteriaId":"9BBCBD37-E635-4B26-B18B-2665CC01EFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_administrator:5.3.0.313:*:*:*:*:*:*:*","matchCriteriaId":"269728EC-2AC7-4543-9D83-10AE44F85041"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_webtop:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7FB76F58-E214-4275-91B2-3ABBCA94DCA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_webtop:5.2.5_sp2:*:*:*:*:*:*:*","matchCriteriaId":"FBF739EC-CBE5-4EA7-A793-12C53F51E53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_webtop:5.3.0.317:*:*:*:*:*:*:*","matchCriteriaId":"4ACB957D-EDE7-4DAF-A010-7EDE45BD0B24"}]}]}],"references":[{"url":"http://secunia.com/advisories/28810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3626","source":"cve@mitre.org"},{"url":"http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487603/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27632","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019305","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0439","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487603/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0657","sourceIdentifier":"cve@mitre.org","published":"2008-02-07T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el  Java Runtime Environment en Sun JDK y JRE 6 Update 1 y versiones anteriores y 5.0 Update 13 y versiones anteriores, permite a atacantes según contexto conseguir privilegios a través de (1) aplicación o (2) applet  no confiables, como se demostró por una aplicación o applet que garantiza de por sí privilegios de (a) lectura en archivos locales (b) escritura en archivos locales, o (c) ejecución de programas locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update13:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"0284CD7F-4BF7-47EE-A27B-A7A12AD6553D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update1:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"2CE4D7F3-A393-40E7-A08D-60527A1658DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0_update13","matchCriteriaId":"0346781D-3289-47BB-8D82-D6634F05315F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update1:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"2CE4D7F3-A393-40E7-A08D-60527A1658DA"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28795","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28888","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29214","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0123.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0156.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27650","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019308","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0429","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0123.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0658","sourceIdentifier":"secalert@redhat.com","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698."},{"lang":"es","value":"slapd/back-bdb/modrdn.c en el motor interno BDB para slapd de OpenLDAP 2.3.39. Permite a usuarios autentificados remotamente provocar una denegación de servicio (caída del demonio) a través de una operación modrdn con un control NOOP (LDAP_X_NO_OPERATION), un tema relacionado con CVE-2007-6698."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.39:*:*:*:*:*:*:*","matchCriteriaId":"1F11D98D-F23D-45B4-9733-B3C0C781ADCC"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28926","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28953","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29068","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29225","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29256","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29461","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29682","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29957","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200803-28.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0059","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1541","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:058","source":"secalert@redhat.com"},{"url":"http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=h","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0110.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488242/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27778","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019481","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-584-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0536/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40479","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9470","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488242/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-584-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0536/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0659","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX de Aurigma Image Uploader (ImageUploader4.ocx) versiones 4.5.70 y anteriores, como se usa en MySpace MySpaceUploader.ocx 1.0.0.4, permite a atacantes remotos ejecutar código arbitrario a través de una propiedad larga Action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aurigma:image_uploader_activex_control:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.70","matchCriteriaId":"86384A26-0BD8-4AC6-B0FA-5229B760CED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:myspace:myspaceuploader:1.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"37386A64-3894-478D-B0DB-EFB032ACE60F"}]}]}],"references":[{"url":"http://blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Jan/0593.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28715","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28733","source":"cve@mitre.org"},{"url":"http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/776931","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27533","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0344/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0345/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40118","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5025","source":"cve@mitre.org"},{"url":"http://blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Jan/0593.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/776931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0344/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0345/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0660","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control ActiveX de Aurigma Image Uploader (ImageUploader4.ocx) versiones 4.6.17.0, 4.5.70.0 y 4.5.126.0 y en ImageUploader5 5.0.10.0, tal y como se usa en Facebook PhotoUploader 4.5.57.0, permiten a atacantes remotos ejecutar código de su elección mediante valores largos en las propiedades (1) ExtractExif y (2) ExtractIptc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aurigma:image_uploader_activex_control:4.5.70.0:*:*:*:*:*:*:*","matchCriteriaId":"0556F443-8B5D-46E4-A6D1-B3C2233F12B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aurigma:image_uploader_activex_control:4.5.126.0:*:*:*:*:*:*:*","matchCriteriaId":"862FFE86-B759-420B-A3A4-BBBAE22229A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:aurigma:image_uploader_activex_control:4.6.17.0:*:*:*:*:*:*:*","matchCriteriaId":"20F7FBFB-24AA-4CCB-8CEC-E1BC8682574B"},{"vulnerable":true,"criteria":"cpe:2.3:a:aurigma:image_uploader_activex_control:5.0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"F15B9A9B-3218-4E5F-ABFA-0D6BF1DBD926"},{"vulnerable":true,"criteria":"cpe:2.3:a:facebook:facebook:*:*:*:*:*:*:*:*","matchCriteriaId":"0D21D43B-793C-4D67-A6EE-EEE7471920D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:facebook:photouploader:4.5.57.0:*:*:*:*:*:*:*","matchCriteriaId":"6FA99512-97A0-453D-A142-5C743DD9D8D0"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2008/Feb/0023.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28707","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/776931","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27576","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27577","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0391/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0394/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5049","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/776931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0391/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0394/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0661","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file with a long URI. NOTE: this might be the same issue as CVE-2004-1569."},{"lang":"es","value":"Desbordamiento de búfer en dBpowerAMP Audio Player Release 2 permite a atacantes remotos ejecutar código de su elección a través de un archivo .M3U con una URI larga. NOTA: este podría ser el mismo problema que CVE-2004-1569."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:illustrate:dbpoweramp_audio_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6B332E49-CF82-44E1-8086-42CEA6CE5EA8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487605/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27639","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5067","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5069","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487605/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0662","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials."},{"lang":"es","value":"La característica Auto Local Logon en Check Point VPN-1 SecuRemote/SecureClient NGX R60 y R56 para las credenciales de caché de Windows bajo la clave de registro Checkpoint\\SecuRemote, que tiene permisos Everyone/Full Control, lo que permite a usuarios locales conseguir privilegios leyendo y reutilizando credenciales."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_secureclient:ngai_r56:*:*:*:*:*:*:*","matchCriteriaId":"3ED03425-BC02-49CA-A5A8-1C53CAE9BE89"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_secureclient:ngx_r60:*:*:*:*:*:*:*","matchCriteriaId":"7BA98C3D-2AC0-41A7-BE14-F0C654D06CA2"}]}]}],"references":[{"url":"http://digihax.com/","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28820","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3627","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487735/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27675","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019317","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0475","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://digihax.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/28820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/3627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487735/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/27675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://usercenter.checkpoint.com/usercenter/portal/user/anon/page/supportCenter.psml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-0663","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access to a locked system to obtain contents of the clipboard by pasting the contents into the Challenge Question field."},{"lang":"es","value":"Novell Challenge Response Client (LCM) 2.7.5 y versiones anteriores, como el usado en Novell Client 4.91 SP4 para Windows, permite a usuarios con acceso físico a un sistema bloqueado obtener contenidos del porta-papeles pegando los contenidos en el campo Challenge Question."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:challenge_response_client:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.5","matchCriteriaId":"5AE4D752-5335-4764-8BF7-F59BF9690C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_client_for_windows:4.91_sp4:*:*:*:*:*:*:*","matchCriteriaId":"442CEF97-79B8-46D8-9B41-15E9F344516C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27631","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019304","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0423/references","source":"cve@mitre.org"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0423/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0664","sourceIdentifier":"cve@mitre.org","published":"2008-02-08T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors."},{"lang":"es","value":"La implementación XML-RPC (xmlrpc.php) en versiones anteriores a WordPress 2.3.3, cuando el registro está activado, permite a atacantes remotos editar mensajes de otros usuarios del blog a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"}]}]}],"references":[{"url":"http://secunia.com/advisories/28823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30960","source":"cve@mitre.org"},{"url":"http://wordpress.org/development/2008/02/wordpress-233/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1601","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27669","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019316","source":"cve@mitre.org"},{"url":"http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0448","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431547","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00349.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00416.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/development/2008/02/wordpress-233/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00349.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00416.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0665","sourceIdentifier":"cve@mitre.org","published":"2008-02-11T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file."},{"lang":"es","value":"wml_backend/p1_ipp/ipp.src en Website META Language (WML) 2.0.11. Permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlace simbólico en el archivo temporal ipp.$$.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:website_meta_language:website_meta_language:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A73805AE-85CF-44A0-B8CE-C108925A1692"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28856","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29353","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-23.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1492","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27685","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0666","sourceIdentifier":"cve@mitre.org","published":"2008-02-11T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c."},{"lang":"es","value":"Website META Language (WML) 2.0.11. Permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlaces simbólicos en 1) el archivo temporal /tmp/pe.tmp.$$ utilizado por wml_contrib/wmg.cgi y (2) archivos temporales utilizados por wml_backend/p3_eperl/eperl_sys.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:website_meta_language:website_meta_language:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A73805AE-85CF-44A0-B8CE-C108925A1692"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28856","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29353","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-23.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1492","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27685","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0667","sourceIdentifier":"cve@mitre.org","published":"2008-02-11T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document.  NOTE: this issue might be subsumed by CVE-2008-0655."},{"lang":"es","value":"La función DOC.print de la API Adobe JavaScript, utilizada por Adobe Acrobat y Reader en versiones anteriores a 8.1.2, permite a atacantes remotos configurar una impresión silenciosa no interactiva, y disparar la impresión de un número arbitrario de copias de un documento.\r\nNOTA: esta cuestión podría ser subsumida en CVE-2008-0655."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"82321E60-2553-41E2-A4F4-375CFF011C0A"}]}]}],"references":[{"url":"http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28802","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28851","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3625","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-04.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487760/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27641","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0425/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9731","source":"cve@mitre.org"},{"url":"http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487760/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-043A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0425/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0668","sourceIdentifier":"cve@mitre.org","published":"2008-02-11T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"La función excel_read_HLINK  en plugins/excel/ms-excel-read.c de Gnome Office Gnumeric antes de 1.8.1. Permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un archivo XLS manipulado que contiene opcodes XLS HLINK, posiblemente debido a un desbordamiento de integer. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.91","matchCriteriaId":"325E60CA-9D69-4D35-AD9B-54F0596C537B"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=208356","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=505330","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28725/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28799","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29896","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31339","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-05.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1546","source":"cve@mitre.org"},{"url":"http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:056","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27536","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-604-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0462","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00227.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=208356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=505330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28725/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-604-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00227.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0669","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web script or HTML via the qt parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.cgi de Sift Unity. Permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro qt. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sift:unity:*:*:*:*:*:*:*:*","matchCriteriaId":"3F9EA40D-A660-4231-8730-BA48A596FB8A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0670","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detalhe action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente Noticias 1.0 (com_noticias) para Joomla!. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro de id en una acción \"detalhe\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_noticias:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB6191DF-7C50-43EF-B2BA-C24F5C58AF62"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27691","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0671","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función add_line_buffer de TinTin++ 1.97.9 y WinTin++ 1.97.9 permite a atacantes remotos ejecutar código de su elección a través de un mensaje de chat, relacionado con la conversación de LF a CRLF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tintin:tintin\\+\\+:1.97.9:*:*:*:*:*:*:*","matchCriteriaId":"DE9FDF3F-CB50-4F04-BC93-C2DFCDDA7732"},{"vulnerable":true,"criteria":"cpe:2.3:a:tintin:wintin\\+\\+:1.97.9:*:*:*:*:*:*:*","matchCriteriaId":"58E0F62F-A394-4CF7-913F-4CC9D4D53D5C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/rintintin-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-07.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487687/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0449","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/rintintin-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487687/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0672","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference."},{"lang":"es","value":"Vulnerabilidad en process_chat_input función de TinTin++ 1.97.9 y WinTin++ 1.97.9. Permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un mensaje YES (sí) sin carácter de nueva línea, lo que dispara una referencia NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tintin:tintin\\+\\+:1.97.9:*:*:*:*:*:*:*","matchCriteriaId":"DE9FDF3F-CB50-4F04-BC93-C2DFCDDA7732"},{"vulnerable":true,"criteria":"cpe:2.3:a:tintin:wintin\\+\\+:1.97.9:*:*:*:*:*:*:*","matchCriteriaId":"58E0F62F-A394-4CF7-913F-4CC9D4D53D5C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/rintintin-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-07.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487687/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0449","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/rintintin-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487687/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0673","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory."},{"lang":"es","value":"TinTin 1.97.9 y WinTin 1.97.9 abre ficheros sobre la base de una solicitud de fichero de transferencia, antes de que el usuario tenga la oportunidad de rechazar la petición, lo que permite a atacantes remotos truncar archivos arbitrarios en el nivel superior de un directorio raíz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tintin:tintin\\+\\+:1.97.9:*:*:*:*:*:*:*","matchCriteriaId":"DE9FDF3F-CB50-4F04-BC93-C2DFCDDA7732"},{"vulnerable":true,"criteria":"cpe:2.3:a:tintin:wintin\\+\\+:1.97.9:*:*:*:*:*:*:*","matchCriteriaId":"58E0F62F-A394-4CF7-913F-4CC9D4D53D5C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/rintintin-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-07.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487687/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0449","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/rintintin-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487687/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0674","sourceIdentifier":"secalert@redhat.com","published":"2008-02-18T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255."},{"lang":"es","value":"Desbordamiento de búfer en PCRE antes de 7.6 permite a atacantes remotos ejecutar código de su elección a través de una expresión regular que contiene un carácter class con un número grande de caracteres con puntos de código Unicode mayores de 255."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PCRE as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-02-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pcre:pcre:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"7F951194-3ECA-4CDA-8363-010C9E1D9785"}]}]}],"references":[{"url":"http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"secalert@redhat.com"},{"url":"http://pcre.org/changelog.txt","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28923","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28957","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28960","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28985","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28996","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29027","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29048","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29175","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29267","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29282","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30048","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30345","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31326","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32746","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36096","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200803-24.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3757","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0086","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1499","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:053","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488927/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/27786","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29009","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022674","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0570","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0592","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431660","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40505","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2223","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/581-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html","source":"secalert@redhat.com"},{"url":"http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pcre.org/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488927/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/581-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0675","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cms/index.pl de The Everything Development Engine en The Everything Development System Pre-1.0 y anteriores. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro node_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_everything_development_company:the_everything_development_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"pre-1.0","matchCriteriaId":"D759C218-DAE3-4FC4-805A-58E44E19E189"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487436/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27569","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5037","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487436/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0676","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de A-Blog 2. Permite a atacantes remotos inyectar secuencias de comandos web HTML se su elección a través del parámetro words."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a-blog:a-blog:2:*:*:*:*:*:*:*","matchCriteriaId":"63D5FAA8-77C6-412A-B206-27A4CC865882"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27594","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0677","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en blog.php de A-Blog 2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una nueva acción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a-blog:a-blog:2:*:*:*:*:*:*:*","matchCriteriaId":"63D5FAA8-77C6-412A-B206-27A4CC865882"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27594","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0678","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de BlogPHP 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogphp:blogphp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B791B20C-7AE9-41C2-9C90-1E3A01EA9998"}]}]}],"references":[{"url":"http://secunia.com/advisories/28756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27591","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5042","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0679","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de BlogPHP 2.0. Permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogphp:blogphp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B791B20C-7AE9-41C2-9C90-1E3A01EA9998"}]}]}],"references":[{"url":"http://secunia.com/advisories/28756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27591","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5042","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0680","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP SET request."},{"lang":"es","value":"SNMPd en MikroTik RouterOS versión 3.2 y anterior, permite a los atacantes remotos causar una denegación de servicio (bloqueo de demonio) por medio de una petición SET SNMP  diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:microtik:routeros:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"454C5880-8318-4F8E-8169-4382203228B0"}]}]}],"references":[{"url":"http://hellknights.void.ru/shados/snmp_sploit.c","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27599","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5054","source":"cve@mitre.org"},{"url":"http://hellknights.void.ru/shados/snmp_sploit.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0681","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id parameter, as demonstrated by a shop/flypage action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de PHPShop 0.8.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro product_id parameter, tal y como se demostró en una acción shop/flypage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpshop:phpshop:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"CBB60ED2-2776-4F7A-96F0-D2417BD9E913"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487435/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27570","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5041","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487435/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0682","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo wordspew-rss.php en el plugin Wordspew versiones anteriores a 3.72 para Wordpress, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:*:*:*:*:*:*:*:*","versionEndIncluding":"3.71","matchCriteriaId":"CD08DF3D-7E32-4B81-BCDF-8159A55C231B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:1.6:*:*:*:*:*:*:*","matchCriteriaId":"4F806B4D-3107-43D9-B843-8909EE4BDA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:1.7:*:*:*:*:*:*:*","matchCriteriaId":"F04E9C2E-FC4B-4FE9-ADF3-D208E2CC0569"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:1.8:*:*:*:*:*:*:*","matchCriteriaId":"5D87B34D-B00D-42BD-84DA-5BE13029C9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8870FF50-567C-4FAD-9646-154B65F943DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D674AFDF-8325-4F54-811B-56ABEB380DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9E0EAB-C3FC-4FD3-AF01-90DE52A29E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8B11D067-68DB-4152-97FA-A05812C8EBAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.5:*:*:*:*:*:*:*","matchCriteriaId":"07ACFBC4-0BFD-47DD-8CFE-0855685975E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.6:*:*:*:*:*:*:*","matchCriteriaId":"AE13D621-C452-44E1-9F60-877C94B633D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2555C237-7E54-47E4-BE8D-FFB7DABBB901"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.8:*:*:*:*:*:*:*","matchCriteriaId":"98C23360-EC17-45FE-8201-C8FBD6CFADF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.9:*:*:*:*:*:*:*","matchCriteriaId":"BC93864E-AE1B-4122-B774-7AC18C8F1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.31:*:*:*:*:*:*:*","matchCriteriaId":"0958810F-599F-48D0-985D-8237CF1383A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.32:*:*:*:*:*:*:*","matchCriteriaId":"EAC0BDAC-9B31-4363-A9DC-B94E1CAB89EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.85:*:*:*:*:*:*:*","matchCriteriaId":"78B526A3-65B1-4F3E-A1F3-D983D38B3027"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.91:*:*:*:*:*:*:*","matchCriteriaId":"60822A32-86A5-42D0-AF18-19777DF22EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.92:*:*:*:*:*:*:*","matchCriteriaId":"7C748AE9-335A-4099-A783-8C4589C15C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.93:*:*:*:*:*:*:*","matchCriteriaId":"38491D2E-8F3C-4AF9-938C-8A09FFBED146"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.94:*:*:*:*:*:*:*","matchCriteriaId":"370177EF-D9B8-47D4-B802-1D2031D5BD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:2.95:*:*:*:*:*:*:*","matchCriteriaId":"EC71EDDA-6C3F-4759-9C2E-AB8846FC34F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.0:*:*:*:*:*:*:*","matchCriteriaId":"028F61A4-6385-4A78-9426-46CC09C0FC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.01:*:*:*:*:*:*:*","matchCriteriaId":"962A6E85-C606-432A-B735-F3B330BC4CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2F81D1B3-8D25-4296-A2FF-86894622233B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44EA83AF-7323-4D18-BF7B-0460DAE420FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.02:*:*:*:*:*:*:*","matchCriteriaId":"248D33B1-2651-4331-A8C8-A80B3E1FF3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.3:*:*:*:*:*:*:*","matchCriteriaId":"F5E26B87-A8BF-4432-952A-1D867F7AB2CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.6:*:*:*:*:*:*:*","matchCriteriaId":"5DBE390B-A51B-4ED6-ADA8-65825BF8CDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.7:*:*:*:*:*:*:*","matchCriteriaId":"50A1B31E-638B-4EB0-B762-923C0EDE51A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.15:*:*:*:*:*:*:*","matchCriteriaId":"82148B97-88ED-4193-8A1C-79425799B896"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.16:*:*:*:*:*:*:*","matchCriteriaId":"7688BB29-26C2-4D03-97F0-B42DCE335B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.021:*:*:*:*:*:*:*","matchCriteriaId":"E6124A31-1CB7-4A02-95E0-8CCF3AEA277E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.022:*:*:*:*:*:*:*","matchCriteriaId":"C80D0958-CDE3-42E0-882C-69D202216F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.31:*:*:*:*:*:*:*","matchCriteriaId":"E6F9A39F-048F-4B5D-9997-9EA53CFC0F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.32:*:*:*:*:*:*:*","matchCriteriaId":"BD73FD43-CCB4-4F93-B6C8-9A923FE5FF31"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.33:*:*:*:*:*:*:*","matchCriteriaId":"D33CDBC7-1C15-46C5-820A-FA894B559238"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.34:*:*:*:*:*:*:*","matchCriteriaId":"CF88C4F6-38A8-4D19-B160-1A78563D367C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.51:*:*:*:*:*:*:*","matchCriteriaId":"BEA61373-6FD8-48C2-9DDD-55A39E4DD9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordspew:3.52:*:*:*:*:*:*:*","matchCriteriaId":"96B2544B-D7FD-4C88-8409-26B8AF4342E2"}]}]}],"references":[{"url":"http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27583","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5039","source":"cve@mitre.org"},{"url":"http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0683","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo shiftthis-preview.php en el plugin ShiftThis Newsletter (st_newsletter) para WordPress, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro newsletter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:st_newsletter_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"8621AC3E-4D04-47EF-B05D-51421E1727B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27586","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0684","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter."},{"lang":"es","value":"Vulnerabilidad en ViewCat.php de secuencias de comandos en sitios cruzados (XSS) en iTechClassifieds 3.0, permite a atacantes remotos inyectar scripts web de su elección o HTML a través del parámetro CatID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechclassifieds:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6D36EB92-9B28-4984-8F51-7AC63CCEB0B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120197273611835&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27574","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120197273611835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0685","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ViewCat.php de iTechClassifieds 3.0. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro CatID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechclassifieds:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6D36EB92-9B28-4984-8F51-7AC63CCEB0B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120197273611835&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28773","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27574","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120197273611835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0686","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente NeoReferences (com_neoreferences) 1.3.1 y 1.3.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_neoreferences:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE50D06F-07ED-4048-AC0F-987AFDB05867"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_neoreferences:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B8E0D078-EDDD-4955-9880-D45F3AD93B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_neoreferences:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2CD49CED-A877-4DAA-8ACE-BEE99F016629"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_neoreferences:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"93BA018C-E7CE-4E55-8A5C-C8256767766D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28736","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27564","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40167","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5034","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0687","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en siteadmin/editor_files/includes/load_message.php de Youtube Clone Script. Permite a atacantes remotos inyectar secuencuas de comandos web o HTML de su elección a través del parámetro lang[please_wait]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youtube:clone_script:*:*:*:*:*:*:*:*","matchCriteriaId":"87700319-2F4A-43B7-AE9A-0B6EF4462A0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487432/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487432/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0688","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action."},{"lang":"es","value":"Vulnerabilidad de secuencias de sitios cruzados (XSS)en catalog.php de Smartscript Domain Trader 2.0 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro id en una acción viewcategory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartscript:domain_trader:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8F8E75-9C70-4302-BE47-FB82246C04CC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28774","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487433/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27571","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487433/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0689","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Marketplace (com_marketplace) 1.1.1 y 1.1.1-pl1 para Joomla!. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid en una acción show_category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_marketplace:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C445BD9C-F4EB-46F5-9301-7DB28BD9ADA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_marketplace:1.1.1-pl1:*:*:*:*:*:*:*","matchCriteriaId":"C85EEC87-8AF0-4C39-97D8-B8BE30415F12"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27600","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0690","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewcat action."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en el componente mosDirectory (com_directory) 2.3.2 para Joomla! que permite a atacantes remotos ejecutar código SQL de su elección a través del  parámetro catid en una acción de viewcat"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_directory:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1CE72559-232C-4487-9B36-FDB1BED5D17E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27585","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5047","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0691","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], and (4) wp_footnotes_current_settings[post_footnotes] parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de sitios cruzados (XSS) en admin_panel.php de la extensión Simon Elvery WP-Footnotes 2.2 para WordPress permiten a atacantes remoros inyectar web script o HTML de su elección a través de los parámetros (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], y (4) wp_footnotes_current_settings[post_footnotes]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simon_elvery:wp-footnotes:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6564486B-D0E0-40EB-B06F-7238BE3D561C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wp-footnotes:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FD380FCB-7236-4171-9C12-E2B1ACE6094F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28772","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3634","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487430/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27572","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487430/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0692","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bidhistory.php de iTechBids 3 Gold y 5.0. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro item_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:3_gold:*:*:*:*:*:*:*","matchCriteriaId":"09F0C51F-BAB1-4774-B08E-ABFEDB4FA13A"},{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF8DFA5-9B97-4D57-9F5B-26928E7AA1F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28780","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27601","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5056","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0693","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service (service outage) via a series of long packets to TCP port 48101."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en PQCore.exe de Print Manager Plus 2008 Client Billing y Authentication 7.0.127.16 permite a atacantes remotos causar una denegación de servicio (parada del servicio) a través de una serie de paquetes largos al puerto TCP 48101."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:print_manager_plus:client_billing_and_authentication:7.0.127.16:*:*:*:*:*:*:*","matchCriteriaId":"BE6FB31A-E170-43B4-A66E-B983A597568F"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/pqcorez-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27604","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0407","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/pqcorez-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0694","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en HTTP Server de IBM OS/400 V5R3M0 y V5R4M0. permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cabecera Expect HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v5r3m0:*:*:*:*:*:*:*","matchCriteriaId":"ECEEF07F-0482-49B7-848E-206D02E81C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v5r4m0:*:*:*:*:*:*:*","matchCriteriaId":"F448C696-3FC9-442F-8F01-F1103287274F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=nas22f5a0f082f6821c4862573e10041f7bd","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27595","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0397","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=nas22f5a0f082f6821c4862573e10041f7bd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0695","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de  la secuencia de comandos de BookmarkX 2007, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro topicid en una acción showtopic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookmarkx:script:2007:*:*:*:*:*:*:*","matchCriteriaId":"9348036A-4580-4206-BD6D-BC6D969D76CE"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5040","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0696","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors."},{"lang":"es","value":"IBM DB2 UDB antes de 8.2 Fixpak 16 no comprueba la autorización correctamente para la sentencia ALTER TABLE, lo que tiene un impacto desconocido y vectores de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2_fixpack15:*:*:*:*:*:*:*","matchCriteriaId":"17408C42-FAC0-4F2A-9534-A9590BC256CA"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0697","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en DB2PD de IBM DB2 UDB anteriores 8.2 Fixpak 16 permite a usuarios locales conseguir privilegios de root a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2_fixpack15:*:*:*:*:*:*:*","matchCriteriaId":"17408C42-FAC0-4F2A-9534-A9590BC256CA"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0698","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving \"invalid memory access.\""},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer en BM DB2 UDB anterior a la v8.2 Fixpak 16 tiene un vector de ataque desconocido, y un impacto probablemente relacionado con un \"acceso inválido a memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2_fixpack15:*:*:*:*:*:*:*","matchCriteriaId":"17408C42-FAC0-4F2A-9534-A9590BC256CA"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05496","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27681","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0699","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors."},{"lang":"es","value":"Vulnerabilidad no específica en el procedimiento ADMIN_SP_C (SYSPROC.ADMIN_SP_C) en DB2 UDB de IBM en versiones anteriores a la 8.2 Fixpak 16, versión 9.1 en versiones anteriores a la FP4a y versión 9.5 en versiones anteriores a laFP1 permite a usuarios autenticados remotamente ejecutar un código arbitrario por medio de vectores de ataque no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*","matchCriteriaId":"55ABF9A3-7776-4C0B-A6CC-45955E42DA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp10:*:*:*:*:*:*","matchCriteriaId":"68B64CBF-7A11-4AA9-8C44-77E891DD2446"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp11:*:*:*:*:*:*","matchCriteriaId":"9AEB3163-D0D0-4E43-AF64-479D4AEE90C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp12:*:*:*:*:*:*","matchCriteriaId":"0E3BC415-D3D2-48FC-9B6A-34596A371ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp13:*:*:*:*:*:*","matchCriteriaId":"BA84C4CF-D486-4D21-A909-C311BF70CE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp14:*:*:*:*:*:*","matchCriteriaId":"4BC02E85-73EC-408B-A31E-F2DDFEA8EF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp15:*:*:*:*:*:*","matchCriteriaId":"B7CB2C4F-A038-461E-9FAB-FA4186F83817"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp16:*:*:*:*:*:*","matchCriteriaId":"6DA81141-A4CF-42AD-AFE4-6336AF77ED9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:*","matchCriteriaId":"9DF77950-22DE-4BA2-A10F-10953F6119E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:*","matchCriteriaId":"57F66472-61EC-4467-ACF6-2893BF9E4050"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:*","matchCriteriaId":"403EF6EC-9EEF-40F1-BA5C-F6211AADC9A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*","matchCriteriaId":"2CE8E119-58C7-4BF0-9C74-93F44E4FC732"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:*","matchCriteriaId":"2F16D689-D091-47AA-96EC-6B419D4A6CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp7:*:*:*:*:*:*","matchCriteriaId":"AAEFCEBE-4CBC-4301-BEC6-9D9C9C3E0539"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp8:*:*:*:*:*:*","matchCriteriaId":"B7130E8C-3D8D-4AAF-9D42-55236131989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp9:*:*:*:*:*:*","matchCriteriaId":"496D052A-CD28-4888-A59C-4F45E9F1471F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*","matchCriteriaId":"A39759EE-5166-4122-8EFD-93CD79909403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/41795","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28771","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29022","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29784","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491075/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/41795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/28771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0700","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de Crux Software CruxCMS 3.0 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro search. \r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:cruxcms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C5509FDD-9190-44E8-8BBD-196312FA7CA7"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27588.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27588","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27588.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0701","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content."},{"lang":"es","value":"ActivationHandler en Magnolia CE 3.5.x antes de 3.5.4. No comprueba permisos mientras importa, lo que permite a atacantes remotos tener un impacto desconocido a través de la activación de un nuevo elemento, que posiblemente implique un nuevo contenido de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magnolia:ce:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CBC1BDFD-6FFC-403C-A77C-9932EB33B091"},{"vulnerable":true,"criteria":"cpe:2.3:a:magnolia:ce:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"563C5080-4137-4979-A020-95F2A24A7314"},{"vulnerable":true,"criteria":"cpe:2.3:a:magnolia:ce:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3F7CA68C-354D-4816-8EE9-3051FCF9E8E8"}]}]}],"references":[{"url":"http://jira.magnolia.info/browse/MAGNOLIA-2021","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=573088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27608","source":"cve@mitre.org"},{"url":"http://jira.magnolia.info/browse/MAGNOLIA-2021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=573088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0702","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641."},{"lang":"es","value":"Múltiples desbordamientos basados en montículo en Titan FTP Server 6.03 y 6.0.5.549, que permite a atacantes remotos causar una denegación de servicio (cuelgue o caída de demonio) y la posibilidad de ejecutar código de  su elección a través de un argumento largo a los comandos (1) USER o (2) PASS, diferentes vectores que el id. CVE-2004-1641."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:6.0.5.549:*:*:*:*:*:*:*","matchCriteriaId":"D4F5F991-5BE2-43D7-9A1B-69E44F976D73"},{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:6.03:*:*:*:*:*:*:*","matchCriteriaId":"06DD9C92-3838-4515-B584-CE7BC160BF05"}]}]}],"references":[{"url":"http://secunia.com/advisories/28760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487431/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27568","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0393","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5036","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487431/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0703","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) permalink or (2) section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en sflog! 0.96 permiten a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en los parámetros (1) permalink o (2) section de index.php, posiblemente implicando includes/entries.inc.php y otros ficheros incluidos en index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sflog:sflog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.96","matchCriteriaId":"3C6C1483-F0EE-476E-950E-DCF6AA88026F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3629","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487368/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27541","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40115","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5027","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487368/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0704","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha platform with 5.4 before ECO 7, and on the Integrity and Alpha platforms with 5.5 before ECO 3 and 5.6 before ECO 2, allows remote attackers to obtain unspecified access via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor SSH en HP OpenVMS TCP/IP Services de OpenVMS \r\nen la plataforma Alpha con 5.4 anterior a ECO 7, y en las plataformas Integrity y Alpha con 5.5 anterior a ECO 3 y 5.6 anterior a ECO 2, permite a atacantes remotos obtener acceso no especificado mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:alpha:*:*:*:*:*:*:*:*","matchCriteriaId":"CCD9CDF3-069B-4384-835B-666196EA0EDD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:open_vms_tcp-ip_services:*:eco_6:*:*:*:*:*:*","versionEndIncluding":"5.4","matchCriteriaId":"21058ECD-5802-46A9-AF7D-6E52AFDFCCCE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:alpha:*:*:*:*:*:*:*:*","matchCriteriaId":"CCD9CDF3-069B-4384-835B-666196EA0EDD"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:integrity:*:*:*:*:*:*:*:*","matchCriteriaId":"53E84FCD-C546-4F51-986E-BD27C484BCF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:open_vms_tcp-ip_services:*:eco_2:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"9A29B67F-22B0-48D6-8EC9-611AEE90CCFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:open_vms_tcp-ip_services:*:eco_1:*:*:*:*:*:*","versionEndIncluding":"5.6","matchCriteriaId":"493C8BAE-C96B-42E0-918C-74870D52ABED"}]}]}],"references":[{"url":"http://secunia.com/advisories/29566","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28486","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019727","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1009","source":"cve@mitre.org"},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01414022","source":"cve@mitre.org"},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01414022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41519","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01414022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01414022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0706","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password."},{"lang":"es","value":"Vulnerabilidad sin especificar en la BIOS F.26 y anteriores para HP Compaq Notebook PC permite a atacantes próximos físicamente obtener acceso privilegiado a través de vectores no especificados, posiblemente implicando una evitación de autentificación de la contraseña de encendido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:presario_a900:*:*:*:*:*:*:*:*","matchCriteriaId":"AC986C82-F00F-4085-AD6A-4EB68832015D"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:presario_c700:*:*:*:*:*:*:*:*","matchCriteriaId":"9E40A612-DE6B-45CD-96EF-5DC6B54A1492"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:g7000:*:*:*:*:*:*:*:*","matchCriteriaId":"907FB045-384C-4EA3-9C75-97371D596FBA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.2a:*:*:*:*:*:*:*","matchCriteriaId":"F32023B2-F4E5-40D4-BDA9-B342299100CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.2b:*:*:*:*:*:*:*","matchCriteriaId":"F05F2228-E19F-4A96-A46D-1F1C93C8D108"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.2e:*:*:*:*:*:*:*","matchCriteriaId":"57707EFF-BD5E-4E6F-A8D6-92D507CC0AC8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.2f:*:*:*:*:*:*:*","matchCriteriaId":"B5E58984-3F71-4A07-B021-851B0C3D256F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.18:*:*:*:*:*:*:*","matchCriteriaId":"420B0800-B443-404C-AC21-690CF7645FC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.21:*:*:*:*:*:*:*","matchCriteriaId":"8048BA54-E5FF-4C7F-8891-A9B3E69525F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.26:*:*:*:*:*:*:*","matchCriteriaId":"41929CF9-DB76-4655-8942-FB21EFBB7F92"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.28:*:*:*:*:*:*:*","matchCriteriaId":"95905686-346D-4138-83FA-06DEE09C8DE9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:hpqflash_for_hp_notebook_system_bios:f.30:*:*:*:*:*:*:*","matchCriteriaId":"EF53E901-30E9-4B66-BF1A-F68F45027039"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120672270224094&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120672270224094&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019730","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28495","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1043/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41521","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120672270224094&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120672270224094&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1043/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0707","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Link 1015143 requires login","cveTags":[],"descriptions":[{"lang":"en","value":"HP StorageWorks Library and Tape Tools (LTT) before 4.5 SR1 on HP-UX B.11.11 and B.11.23 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Versiones anteriores a 4.5 SR1 de HP StorageWorks Library y Tape Tools (LTT) en HP-UX B.11.11 y B.11.23 permite a usuarios locales conseguir privilegios utilizando vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_library_and_tape_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5_sr1","matchCriteriaId":"9E04CF1E-25F0-42C5-A08F-D60860F46387"}]}]}],"references":[{"url":"http://secunia.com/advisories/29442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019651","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0926/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41337","source":"cve@mitre.org"},{"url":"https://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01399648","source":"cve@mitre.org"},{"url":"https://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01399648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0926/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01399648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01399648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0708","sourceIdentifier":"cve@mitre.org","published":"2008-04-06T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection."},{"lang":"es","value":"Las opciones de producto (1) 442084-B21 y (2) 442085-B21 de HP USB 2.0 Floppy Drive Key para ciertos servidores HP ProLiant contienen los gusanos (a) W32.Fakerecy y (b) W32.SillyFDC, que podrían ser lanzados si el servidor no tiene detección actualizada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:442084-b21:*:*:*:*:*:*:*:*","matchCriteriaId":"911E1E40-FCA7-4431-ADCD-B67C71182F8E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:442085-b21:*:*:*:*:*:*:*:*","matchCriteriaId":"A9E050B0-48CA-4402-BD9B-C53FEE996ADE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl20pg4:*:*:*:*:*:*:*","matchCriteriaId":"C9462A08-E268-4E4F-B515-A978341FC8B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl25pg2:*:*:*:*:*:*:*","matchCriteriaId":"2DA51F7A-3EB1-4019-84E2-16613ACF21C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl45pg2:*:*:*:*:*:*:*","matchCriteriaId":"9DF9881D-DE4F-498F-8769-4ECEB4D32B22"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl260c:*:*:*:*:*:*:*","matchCriteriaId":"46C8CE49-3EC1-4567-BE75-80F7E0846959"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl460c:*:*:*:*:*:*:*","matchCriteriaId":"EA9B5B93-F169-42A8-B51F-D87BB7D86B8A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl465c:*:*:*:*:*:*:*","matchCriteriaId":"ECC0171E-9D87-4A1D-9143-AAC4C4F96964"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl465cg5:*:*:*:*:*:*:*","matchCriteriaId":"EADA3B24-B3B1-445D-9D8A-D95D57A51244"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl480c:*:*:*:*:*:*:*","matchCriteriaId":"0EC9A593-FD9A-4349-8CE3-ABCE17A3082A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl680cg5:*:*:*:*:*:*:*","matchCriteriaId":"BF400674-C9D0-4121-9820-7D62405C5126"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl685c:*:*:*:*:*:*:*","matchCriteriaId":"9A247F6B-FE91-476E-9B87-600F35CF23CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:bl685cg5:*:*:*:*:*:*:*","matchCriteriaId":"51994C69-BAF3-454D-9DC2-9C5F6C537A7C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl120g5:*:*:*:*:*:*:*","matchCriteriaId":"E2F18645-84C2-4AB2-85DE-EEBA2C5FE9A6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl140g3:*:*:*:*:*:*:*","matchCriteriaId":"CF1D35A9-F7FC-4E72-AA8B-41B98492B59B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl145g3:*:*:*:*:*:*:*","matchCriteriaId":"847A30AC-D88A-4398-8867-287F6A30C87E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl160g5:*:*:*:*:*:*:*","matchCriteriaId":"F6B31AAD-5A01-4F6A-92DE-BD838334377C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl165g5:*:*:*:*:*:*:*","matchCriteriaId":"7E67677D-D9A1-438A-9879-34ECC9C0469C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl180:*:*:*:*:*:*:*","matchCriteriaId":"B753B765-1D3A-4949-B780-C5E69A9751E0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl180g5:*:*:*:*:*:*:*","matchCriteriaId":"F47E634D-DCFC-4B18-A949-D18F621C31DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl185g5:*:*:*:*:*:*:*","matchCriteriaId":"C2CDF28F-C03E-484F-B429-34601ABCA823"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl320g5:*:*:*:*:*:*:*","matchCriteriaId":"A9E47A7F-406D-48DE-AC19-76A695CA0FF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl365g5:*:*:*:*:*:*:*","matchCriteriaId":"81E6408B-0710-4962-B1EE-2499387376E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl380g5:*:*:*:*:*:*:*","matchCriteriaId":"115C39A0-3CE0-4203-9530-B708930F7C83"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl385g2:*:*:*:*:*:*:*","matchCriteriaId":"2C1F0F74-0F1A-43FF-85C1-5A5265D88031"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl385g5:*:*:*:*:*:*:*","matchCriteriaId":"316123FB-2831-4787-AC7D-0431130BF749"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:dl580g4:*:*:*:*:*:*:*","matchCriteriaId":"8C843FAE-BDC6-435F-95D9-6F4EEAF286E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml110g5:*:*:*:*:*:*:*","matchCriteriaId":"3D1AF135-ACFE-4AC4-AA20-090F9591E1DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml115:*:*:*:*:*:*:*","matchCriteriaId":"2A3E643E-8444-457A-8199-A078D120FE2E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml115g5:*:*:*:*:*:*:*","matchCriteriaId":"BFAE3508-C362-49DB-B65C-36141641C552"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml150g3:*:*:*:*:*:*:*","matchCriteriaId":"8731D9F1-5310-431D-9FF0-A26D83BB733F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml150g5:*:*:*:*:*:*:*","matchCriteriaId":"B404F300-C379-48A7-8062-8863748C8B2A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml310g4:*:*:*:*:*:*:*","matchCriteriaId":"97D1CB38-7E3A-407E-A911-F9FD492154E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml310g5:*:*:*:*:*:*:*","matchCriteriaId":"D6E97D00-18F9-4FB5-BE67-6D886834564F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml350g5:*:*:*:*:*:*:*","matchCriteriaId":"F905BA44-74FF-4489-9D73-BFCA91D244C5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml370g5:*:*:*:*:*:*:*","matchCriteriaId":"C4C7EDA8-011B-4158-AC6C-809D8C31F578"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant:ml570g4:*:*:*:*:*:*:*","matchCriteriaId":"4023EA96-660E-4058-86A4-53B919C3AB8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120732648630458&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120732648630458&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019785","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41648","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120732648630458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120732648630458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0709","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to access other user accounts via unknown vectors, a different issue than CVE-2008-0214."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13 y 4.20 permiten a usuarios remotos autenticados acceder a otras cuentas de usuario a través de vectores no conocidos, un problema diferente al de la CVE-2008-0214"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_as3:*:*:*:*:*:*:*:*","matchCriteriaId":"3082691A-0926-41D4-8D1C-65300BC5DF70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.00:*:*:*:*:*:*:*","matchCriteriaId":"89ECFF6F-B4C6-46AA-879C-358D8E8125CE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_as3:*:*:*:*:*:*:*:*","matchCriteriaId":"3082691A-0926-41D4-8D1C-65300BC5DF70"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.01:*:*:*:*:*:*:*","matchCriteriaId":"5529BDF3-99C7-4873-8598-294EA902BF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.12:*:*:*:*:*:*:*","matchCriteriaId":"9317B31B-12A6-4F52-B3AA-8F028D9D0D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.13:*:*:*:*:*:*:*","matchCriteriaId":"7AA5FBBF-CD0E-4118-B90C-6148BFB450E9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_as3:*:*:*:*:*:*:*:*","matchCriteriaId":"3082691A-0926-41D4-8D1C-65300BC5DF70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.11:*:*:*:*:*:*:*","matchCriteriaId":"68A69466-FAFB-42FC-A2C5-83E662822519"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_as4:*:*:*:*:*:*:*:*","matchCriteriaId":"2767F53C-E88F-44ED-81F4-334D4363BE07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_identity:4.20:*:*:*:*:*:*:*","matchCriteriaId":"72C2880E-27BB-4A74-815F-A988971A8D4D"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28558","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1072/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41583","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1072/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0711","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in Integrity Servers rx2660, rx3600, and rx6600, and Integrity Blade Server model bl860c, allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la consola de gestión embebida en HP iLO-2 Management Processors (iLO-2 MP), usados en Integrity Servers rx2660, rx3600, y rx6600, y Integrity Blade Server modelo bl860c, permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:bl860c:*:*:*:*:*:*:*:*","matchCriteriaId":"1E77850C-AD71-42D3-8A7C-915503981887"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:rx2660:*:*:*:*:*:*:*:*","matchCriteriaId":"142DFEB7-3746-48C6-8A21-8AA1F8304812"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:rx3600:*:*:*:*:*:*:*:*","matchCriteriaId":"10890A9B-39B6-48C5-B36B-6B712EE24511"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:rx6600:*:*:*:*:*:*:*:*","matchCriteriaId":"4B785085-4E6C-4D92-84B7-53038250A3D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120766789901792&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120766789901792&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3804","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28673","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019795","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1132/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41696","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120766789901792&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120766789901792&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1132/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0712","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.  NOTE: this might overlap CVE-2007-6513."},{"lang":"es","value":"Vulnerabilidad no especificada en el control ActiveX HP HPeDiag (también conocido como eSupportDiagnostics) en hpediag.dll de HP Software Update 4.000.009.002 y versiones anteriores permite a atacantes remotos ejecutar código de su elección u obtener información sensible a través de vectores no especificados.\r\nNOTA: esto puede solaparse con CVE-2007-6513."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:software_update:*:*:*:*:*:*:*:*","versionEndIncluding":"4.000.009.002","matchCriteriaId":"0A451839-45B9-4313-A526-D7101F9B2495"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29966","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28929","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019922","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1356/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1356/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0713","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users to cause a denial of service (FTP server outage) via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor FTP de HP-UX B.11.11, B.11.23, y B.11.31 permite a usuarios remotos autenticados provocar una denegación de servicio (parada del servicio FTP) a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01446326","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01446326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30195","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29160","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020005","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1475/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42357","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5289","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01446326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01446326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1475/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0714","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en users.php de Mihalism Multi Host permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro username en una acción de lost_password_go."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mihalism:multi_host:3.0:*:*:*:*:*:*:*","matchCriteriaId":"94C06986-2A36-4C7E-A474-5A1932C11C63"}]}]}],"references":[{"url":"http://secunia.com/advisories/28803","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40289","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0715","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file.  NOTE: this might be the same as CVE-2007-6009."},{"lang":"es","value":"Desbordamiento de búfer en ACDSee Photo Manager 8.1, 9.0 y 10.0. Permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un archivo XBM malformado. NOTA: podría ser la misma que CVE-2007-6009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acdsee:photo_manager:8.1:*:*:*:*:*:*:*","matchCriteriaId":"315EF47A-CB66-4AA1-A1C1-0E907174E580"},{"vulnerable":true,"criteria":"cpe:2.3:a:acdsee:photo_manager:9.0:*:*:*:*:*:*:*","matchCriteriaId":"A1314657-3C3E-468E-8E69-BFA4EB9B1A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:acdsee:photo_manager:10.0:*:*:*:*:*:*:*","matchCriteriaId":"65785160-356A-45CA-BE51-B3C15B450C43"}]}]}],"references":[{"url":"http://secunia.com/advisories/28797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+AcdSee+Photo+Manager","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0443","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+AcdSee+Photo+Manager","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0716","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a \"Shatter\" style attack."},{"lang":"es","value":"El agente de Symantec Altiris Notification Server en versiones anteriores a la 6.0 SP3 R7 permite a usuarios locales obtener privilegios a través de un ataque estilo \"destrozar\" (Shatter)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0_sp3","matchCriteriaId":"CA0A3B9D-9399-4120-A3EB-3BCD1010058C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28832","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27645","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019313","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0717","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Caching Proxy (CP) de 5.1 a 6.1 en IBM WebSphere Edge Server, cuando las reglas de mapeo están activadas. Permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través de vectores sin especificar que disparan la inyección a una respuesta de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"08801EB3-65CB-4C51-9AD0-6C0D673EAEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1AA9C622-E53C-4A4F-9E5D-3FC8FFF1BA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"715D4F1E-D987-4F4A-BAD2-CEDA473A8D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59D58504-D784-4571-B1B9-2B1E9B27BCB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A88AE0E9-6DAC-4DF4-8064-9744252AFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6484BEC4-E15B-4C8D-A241-55FD5DE9E7DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21294776","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27665","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019315","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0446","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21294776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0718","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el USB Mouse STREAMS module (usbms)en Sun Solaris 9 y 10, cuando el modo 64-bits está activado, permite a usuarios locales provocar una denegación de servicio (error irrecuperable del sistema) mediante vectores sin identificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201316-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27773","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0451","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5474","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201316-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0719","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonial_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en customer_testimonials.php de Customer Testimonials 3 y 3.1 Addon para osCommerce Online Merchant 2.2. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro testimonial_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:customer_testimonials:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6CDDBB77-7FCE-4F11-A220-BB849509A213"},{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B19A5485-0FFE-4284-9630-9F379C1223F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27664","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0720","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webmin_search.cgi (aka the search section), and possibly other components accessed through a \"search box\" or \"open file box.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Webmin 1.370 y 1.390 y Usermin 1.300 y 1.320. Permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro de búsqueda a webmin_search.cgi (también conocido como la sección de búsqueda) y posiblemente otros componentes accedidos a través de una \"caja de búsqueda\" o \"caja de archivo abierto\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:usermin:1.3:*:*:*:*:*:*:*","matchCriteriaId":"74E28AB1-D60A-4CFC-9133-552B7AA12D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:usermin:1.32:*:*:*:*:*:*:*","matchCriteriaId":"06EBBDAA-05C2-4CFD-AC36-A24E5A768B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.370:*:*:*:*:*:*:*","matchCriteriaId":"E948F223-D365-4D5B-9C2B-FB064F8DC00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.390:*:*:*:*:*:*:*","matchCriteriaId":"2B767E9C-D321-4972-BF7A-B5E62956D6CD"}]}]}],"references":[{"url":"http://forum.aria-security.net/showthread.php?t=511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487656/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487678/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27662","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0450","source":"cve@mitre.org"},{"url":"http://forum.aria-security.net/showthread.php?t=511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487656/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487678/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0721","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Sermon (com_sermon) 0.2 para Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_sermon:0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D628E01-56A1-40A0-849A-B70972004735"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27673","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0722","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter in a pagetool_search action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos de sitios cruzados (XSS) en index.php de Pagetool 1.0.7 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro search_term en una acción pagetool_search. \r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagetool:pagetool:1.07:*:*:*:*:*:*:*","matchCriteriaId":"D13134A3-132D-4FD9-BD22-259DAF160612"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27653","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4983","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0723","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows remote attackers to inject arbitrary web script or HTML via the hash parameter in an admin action to index.php, a different vulnerability than CVE-2006-2208.1."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en mynews.inc.php de MyNews 1.6.4 y otras versiones anteriores a 1.6.x. Permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro hash en una acción admin a index.php, una vulnerabilidad distinta a CVE-2006-2208.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:planetluc:mynews:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.4","matchCriteriaId":"1D6051C3-AA7C-4F90-9FEB-C9920136E3FE"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120232523420188&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=120235668406688&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27652","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=120232523420188&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=120235668406688&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0724","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts."},{"lang":"es","value":"El motor de desarrollo Everything en The Everything Development System Pre-1.0 y anteriores almacena contraseñas en texto llano en una base de datos, lo cual facilita a atacantes locales o remotos dependiendo del contexto obtener acceso a las cuentas de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_everything_development_company:the_everything_development_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"pre-1.0","matchCriteriaId":"D759C218-DAE3-4FC4-805A-58E44E19E189"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487436/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5037","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487436/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0725","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service (daemon hang) and possibly execute arbitrary code via a long command.  NOTE: the USER and PASS commands for the FTP service are covered by CVE-2008-0702."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en la memoria libre para la reserva dinámica (heap) en el (1) servicio FTP  y (2) servicio de administración de Titan FTP Server 6.0.5.549. Permiten a atacantes remotos provocar una denegación de servicio (cuelgue del demonio) y posiblemente ejecutar código de su elección a través de un comando largo. NOTA: los comandos USUARIO y CONTRASEÑA para el servicio FTP están cubiertos por CVE-2008-0702."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:titan:ftp_server:6.0.5.549:*:*:*:*:*:*:*","matchCriteriaId":"982D0D11-B4C9-44D9-A13D-0486C2BA9AD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0726","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption."},{"lang":"es","value":"Desbordamiento de tipo integer en Adobe Reader y Acrobat 8.1.1 y anteriores. Permite a atacantes remotos ejecutar código de su elección a través de argumentos manipulados a los printSepsWithParams, lo que dispara corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"3A068220-ADFE-46F0-AE35-3355BEFEECD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"82321E60-2553-41E2-A4F4-375CFF011C0A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488000/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-004.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10957","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488000/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0727","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"All IBM links require software support sign in to view.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value."},{"lang":"es","value":"Múltiples Desbordamientos de búfer en oninit.exe de IBM Informix Dynamic Server (IDS) de la versión 7.x a la 11.x, permite (1)a atacantes remotos ejecutar código de su elección a través de una contraseña larga (2) y usuarios autenticados remotamente, pueden ejecutar código de su elección a través de una variable DBPATH larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:7.3:*:*:*:*:*:*:*","matchCriteriaId":"9390D1EA-DB0A-40BB-BBA5-061DA17A2745"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:7.31.xd8:*:*:*:*:*:*:*","matchCriteriaId":"14BA6483-76C0-4BE2-AE99-97B1AD555704"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:7.31.xd9:*:*:*:*:*:*:*","matchCriteriaId":"E3D9652D-4383-40EE-950F-67794F4D52C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.3:*:*:*:*:*:*:*","matchCriteriaId":"7A565470-B4A3-40FA-B691-1DB484FEC764"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*","matchCriteriaId":"58A9F81C-C618-435D-9912-0E61EAB02560"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*","matchCriteriaId":"CE9B0C17-2D85-4729-85EF-2F5C750BF51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*","matchCriteriaId":"910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*","matchCriteriaId":"1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*","matchCriteriaId":"B2CD7B84-2861-4542-8A08-C668065C8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*","matchCriteriaId":"E64D85E2-AA7E-4704-A2FA-BD69744423CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.xd8:*:*:*:*:*:*:*","matchCriteriaId":"EBFD2127-16EA-49F1-9023-F22A68F4EE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40_xc7:*:*:*:*:*:*:*","matchCriteriaId":"3480BAB7-4D5B-44F2-8E8D-0062DD205D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"1716E256-B186-442F-8C4C-9305E0953081"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*","matchCriteriaId":"C7931542-8DB8-4BC3-A319-9352EBC62158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4:*:*:*:*:*:*:*","matchCriteriaId":"795E3755-48D3-4A70-9AFB-1B3B9F3B8F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc7w1:*:*:*:*:*:*:*","matchCriteriaId":"1061A1A7-579D-4222-A31D-F34F8A11EA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*","matchCriteriaId":"539DE4E7-8531-43E8-AE75-178BFC4324F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/29272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3749","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489547/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489548/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28198","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0860","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-011/","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-012/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41202","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41203","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489547/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-011/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-012/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0728","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger \"heap corruption.\""},{"lang":"es","value":"La función unmew11 en el archivo libclamav/mew.c en libclamav en ClamAV versiones anteriores a 0.92.1, presenta un impacto desconocido y vectores de ataque que desencadenan \"heap corruption\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.92","matchCriteriaId":"89BB58DD-7EA7-4C52-9791-902026B054A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*","matchCriteriaId":"68EC0AEB-91CF-4A79-AF40-A475E896FB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*","matchCriteriaId":"5935EDE0-9203-4150-9B7A-AB10B377F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*","matchCriteriaId":"59C2680C-C187-487A-B6C4-F509E0C52436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*","matchCriteriaId":"A796E5E1-6481-49EF-8D97-9EC2A01C712B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*","matchCriteriaId":"03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.8:rc3:*:*:*:*:*:*","matchCriteriaId":"812B11BD-344F-40DC-9996-0CBB4BB143B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.9:rc1:*:*:*:*:*:*","matchCriteriaId":"4E951B4D-F244-43A4-9593-B8B975D16C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*","matchCriteriaId":"22958219-46D6-4868-B324-BFC2F2C893F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*","matchCriteriaId":"4543DDEE-C1D1-428F-91C7-98B8985A5931"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*","matchCriteriaId":"1FED760C-7106-49CE-B4FE-CA53A1092C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.14:*:*:*:*:*:*:*","matchCriteriaId":"821EF522-A058-4509-A4CB-E9B800E83EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*","matchCriteriaId":"CABA4177-6B24-4364-BC34-D5ED171E60FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"F488ACB2-A013-4BF3-B5AC-897E40BA87F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"2D5799FA-DD99-4A35-BC56-B2FBEB747226"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"F32EA99F-088E-499E-9DCE-EFA9A64D1673"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"F8B04C5B-316D-4C6A-96CF-F145F7C9E636"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"20769174-C51F-47D5-A34F-EB772F542A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"721B8B46-DFD9-4937-96A3-8D731304415B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"CDF18A59-FB30-45C6-B28E-4499DCD78F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"0B28E0BE-1E2D-45D2-B483-2D81326BF482"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"F47FD5DF-F22E-4B78-9B92-A9C41950F836"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"C1F9571F-9192-414F-B680-10A22C71CFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"F7CAC876-9AAC-407C-A34E-98AA6801D25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*","matchCriteriaId":"470FC8FE-785A-4934-8989-D17C1796870E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"79A6C0FE-2EED-447D-9F62-12CFF1E0918A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*","matchCriteriaId":"0928E05F-92E7-4451-AC11-4E6A014E1154"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"B2E7A70A-3584-4259-80CA-03AE290ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"D27D70A0-EC82-4DC7-A66D-60D263B76E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*","matchCriteriaId":"28C9C5AD-97A9-42C8-917C-2787785F5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"F4AB3389-1C30-47BB-9DAE-0F744E7F8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"4DA837A0-C8CB-486B-845E-A370E3137697"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"235A144A-4AB1-4756-AFB1-58AFFE02649E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"767BBE7F-6CC4-42D4-9730-6E617D36AAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"4EA7CD6A-133F-48E4-87BC-77CF21A25940"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"F65A7930-A913-4C3D-95A3-E629D6A468C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc:*:*:*:*:*:*","matchCriteriaId":"05D1FAF4-B4F8-446F-88C3-01289C01DB8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc1:*:*:*:*:*:*","matchCriteriaId":"342A854F-0942-4A3E-AF08-BD41D8F453DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc2:*:*:*:*:*:*","matchCriteriaId":"B4DA6E00-8126-4B62-9E7F-1E3BFC827BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc3:*:*:*:*:*:*","matchCriteriaId":"BB0958CD-187F-4DD0-A31B-5002861F6326"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"9C24942D-7AD6-4391-8F05-2827AB6A751E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*","matchCriteriaId":"BABA6024-1769-44D9-BF20-215602980A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"DA719FE4-04E0-4664-8EEC-70CD613408DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81:rc1:*:*:*:*:*:*","matchCriteriaId":"9F7364D6-36F6-4615-95F0-E0B56722DAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"C859F864-B68F-4805-B804-E50F2C3FFE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"B5CAFEA5-C062-43EA-A302-38887DA6768C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"525DC218-308C-4A0E-96A7-DC74B8973B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*","matchCriteriaId":"A4969C16-F67D-4C30-A537-FE64F4CFC3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:*","matchCriteriaId":"B0D72B20-1F61-4499-9ADE-88AF98C3C19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"72C71B82-8F84-4855-A138-7E7436788D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"039341D8-8E2B-4901-BFA6-9CCC46A18C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"C048A75E-6587-485C-9F2B-E12BED34FF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:*","matchCriteriaId":"97DAD83E-F14F-4B87-B5D8-7BCAD8F446BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"5B003639-3228-4AC1-AB46-73481BB5DDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"6D6A495D-F9BB-41B9-A912-670D837EA278"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"45F5E6B4-88DD-4426-9FB6-D9009F6B8740"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DB1EB857-D417-49EB-89FD-04733C872EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"4551D5ED-6C72-4C9B-A556-491042A6113A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"01859947-09D4-417E-92A4-FA4F1625C60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"797B7A3B-BAEA-4868-BC3E-CE629FE151F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"30337B76-E552-431F-B49C-A418E5B851A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"53027413-3353-4051-88FA-A46859AD747A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"970D5900-7F83-4140-A3E4-FF4E710DBD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*","matchCriteriaId":"AA0D4F76-258B-4E5D-AA4D-8231E846C76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*","matchCriteriaId":"F2A669CC-C10F-4E74-ACD0-DF933D723EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:rc1:*:*:*:*:*:*","matchCriteriaId":"B5180162-81FA-4605-B5B6-E01B312341EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:rc1.1:*:*:*:*:*:*","matchCriteriaId":"A9915D81-4A7C-4B22-86F7-369CF68A0F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:rc2:*:*:*:*:*:*","matchCriteriaId":"7F2E0386-6A8E-4416-A4C6-139EB2CAD57D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:rc3:*:*:*:*:*:*","matchCriteriaId":"613E8544-7B2B-4FC5-AC60-190EC2D8025A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"13E8E7E7-E29A-4539-8D8C-45B9C39B0146"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*","matchCriteriaId":"A966F2C4-47A0-445F-8927-0F0222A48FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"7681419E-5125-40D6-BE61-57CE9C8F3DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"2CE0D056-B84F-4331-832C-5D1703A15A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"96A13543-D7E2-41D6-8E8E-BE150ECDAA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*","matchCriteriaId":"27310591-C883-4929-824A-AE99E7592D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*","matchCriteriaId":"2964A047-0277-4DA4-BDBE-3F5FC3C1F68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"E891471A-A0B8-4251-A6D3-60E947A18F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91:rc1:*:*:*:*:*:*","matchCriteriaId":"1A3340E5-36AF-4BFC-B6E8-13213EA6969F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91:rc2:*:*:*:*:*:*","matchCriteriaId":"0D520BB1-7863-42B2-88D7-23C543A8F13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"D0E6A5E0-66E0-4EA7-9007-2389179500C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"ED827D10-C862-4BC7-AB33-06E040DAE161"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"51DC9827-D7D1-4D34-AA35-6A7BDB92907D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*","matchCriteriaId":"A06278C4-328D-4D14-9BC1-DCA697EC9EDD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209915","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-19.txt","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200802-09.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575703","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40474","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-19.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200802-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0729","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Mobile Safari en Apple iPhone en versiones 1.1.2 y 1.1.3 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del dispositivo) a través de cierto código JavaScript que crea una cadena larga y un array que contiene elementos de cadena larga. Probablemente esté relacionado con CVE-2006-3677. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mobile_safari:*:*:*:*:*:*:*:*","matchCriteriaId":"CCD5284D-8404-4211-BA9B-7E7F9466CBAD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487607/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492225/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27442","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39998","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4978","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487607/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492225/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0730","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users."},{"lang":"es","value":"Los métodos de entrada de (1) Chino Simplicado, (2) Chino Tradicional , (3) Coreano y (4) Tailandés en Sun Solaris 10 crean archivos y directorios con permisos débiles bajo a) .iiim/le y (b) .Xlocale en los directorios home, que podrían permitir a usuarios locales escribir en, o leer de los directorios home de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:*:ko:*:*:sparc:*","matchCriteriaId":"05D6D611-4F94-4383-8264-46B195EA1123"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:*:ko:*:*:x86:*","matchCriteriaId":"AC3E9D8D-E72B-4B24-9609-4F3BA9367500"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:*:th:*:*:sparc:*","matchCriteriaId":"5DA2809A-9D7D-4632-B6BF-E34A826D36AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:*:th:*:*:x86:*","matchCriteriaId":"480E252A-C941-4334-8F0C-395D38E47AEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:*:zh:*:*:sparc:*","matchCriteriaId":"EF7C7909-8AEA-4DA4-A30B-42C66D106BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:*:zh:*:*:x86:*","matchCriteriaId":"EBB4B53A-353D-4C24-8CA5-78A126D66629"}]}]}],"references":[{"url":"http://secunia.com/advisories/28931","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27770","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0452","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5545","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0731","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task."},{"lang":"es","value":"El núcleo de Linux versiones anteriores a 2.6.18.8-0.8 de SUSE openSUSE 10.2 no maneja apropiadamente los fallos del sistema llamado AppArmor change_hat, lo cual permite a atacantes disparar el no limitamiento de una tarea apparmored."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.18.8","matchCriteriaId":"CCB29D83-F0C2-4638-AEAF-7839C33494EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"A876EFC5-50DC-4A6A-A9F2-24D8AC773E7D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:apparmor:*:*:*:*:*:*:*:*","matchCriteriaId":"CA24139A-5AF5-4BED-ADE8-8C7F927B3B9B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0732","sourceIdentifier":"cve@mitre.org","published":"2008-02-12T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories."},{"lang":"es","value":"La secuencia de comandos init de Apache Geronimo sobre SUSE Linux sigue enlaces simbólicos cuando realiza una operación de cambio en la propiedad de ficheros o directorios, que permite a usuarios locales obtener acceso a ficheros y directorios no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"67527281-81FA-4068-9E0A-7B19FB6A208A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:*:*:*:*:*:*:*:*","matchCriteriaId":"67517877-5475-4CDA-A634-4CDE447D41D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28838","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0733","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page."},{"lang":"es","value":"Vulnerabilidad de inyeccción SQL en index.php de CS Team Counter Strike Portals. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id, como se demostró utilizando la página de descargas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cs_team:counter_strike_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"3C52B233-4B9D-4CC5-AD30-563A328C24E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/487988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27747","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0734","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en class_auth.php de Limbo CMS 1.0.4.2, y posiblemente versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cuid cookie de admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4.2","matchCriteriaId":"598E2FCD-D74E-4386-B18F-E50E1898990C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27710","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40415","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0735","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mod/gallery/ajax/gallery_data.php de AuraCMS 2.2. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro albums."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7506B9A2-A20E-48D3-9809-8E4B34CB243E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27764","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0736","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attackers to obtain the path via a certain value of the FedExAccount parameter."},{"lang":"es","value":"admin/SA_shipFedExMeter.asp de CandyPress (CP) 4.1.1.26, y posiblemente otras veriones 4.x y 3.x, permite a atacantes remotos obtener el path a través de ciertos valores del parámetro FedExAccount."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1CEA1621-AC7C-4BE1-9DD8-9F3E11A1D75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"CD318873-47E6-4A53-BC63-5F8D9B5F3E5B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3600","source":"cve@mitre.org"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39941","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4988","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0737","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/utilities_ConfigHelp.asp de CandyPress (CP) 4.1.1.26 y otras versiones 4.x y 3.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro helpfield."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1CEA1621-AC7C-4BE1-9DD8-9F3E11A1D75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"CD318873-47E6-4A53-BC63-5F8D9B5F3E5B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3600","source":"cve@mitre.org"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0738","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idcust parameter to (a) ajax_getTiers.asp and (b) ajax_getCust.asp in ajax/, and the (2) tableName parameter to (c) ajax/ajax_tableFields.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en CandyPress (CP) 4.1.1.26, y versiones previas a la 4.1.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) idcust de (b) ajax_getTiers.asp y (b) ajax_getCust.asp en ajax/, y del parámetro tableName de (c) ajax/ajax.tableFields.asp. NOTA:el origen de esta información es desconocido; los detalles se han obtenido únicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"5744F569-7E96-47D9-BFBE-85B36049792D"},{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"CD318873-47E6-4A53-BC63-5F8D9B5F3E5B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0739","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/SA_shipFedExMeter.asp de CandyPress (CP) 4.1.1.26 y versiones anteriores 4.x y 3.x. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro FedExAccount."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"5744F569-7E96-47D9-BFBE-85B36049792D"},{"vulnerable":true,"criteria":"cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"CD318873-47E6-4A53-BC63-5F8D9B5F3E5B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0740","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes unspecified cleartext information to http_plugin.log, which might allow local users to obtain sensitive information by reading this file."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) versiones anteriores a 6.0.2 Fix Pack 25 (6.0.2.25) escribe información sin especificar en texto claro en http_plugin.log, lo cual permite a usuarios locales obtener información sensible leyendo ese fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.24","matchCriteriaId":"B6D01526-995E-4861-9A65-D71C6317872C"}]}]}],"references":[{"url":"http://osvdb.org/42878","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27400","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0241","source":"cve@mitre.org"},{"url":"http://osvdb.org/42878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK48785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0741","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la utilidad PropFilePasswordEncoder de IBM WebSphere Application Server (WAS) antes de 6.0.2 Fix Pack 25 (6.0.2.25). El impacto y los vectores de ataque son desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.24","matchCriteriaId":"B6D01526-995E-4861-9A65-D71C6317872C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28588","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019254","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK52709&uid=swg1PK58871&loc=en_US&cs=utf-8&lang=","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27400","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0241","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB550&q1=PK52709&uid=swg1PK58871&loc=en_US&cs=utf-8&lang=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0742","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. (dot dot) in the (1) subpage parameter in (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php, and (f) users.inc.php in pnadmin/; and (2) the page parameter to (g) pnadmin/index.php.  NOTE: vector 2 is only exploitable by administrators."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en PowerScripts PowerNews 2.5.6. Permiten a atacante remotos leer e incluir archivos de su elección a traavés de .. (punto punto) en (1) el parámetro subpage de (a) categories.inc.php, (b) news.inc.php, (c) other.inc.php, (d) permissions.inc.php, (e) templates.inc.php y (f) users.inc.php en pnadmin/ y 2) el parámetro page a (g) pnadmin/index.php. NOTA: el vector 2 es explotable solamente por administradores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerscripts:powernews:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"12C6A41A-A7B6-49F4-88EB-237B6E653FB3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3647","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487773/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27688","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5082","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487773/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0743","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP remoto en members_help.php de Joovili 2.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro hlp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"38117346-C7C6-4888-B536-7357AF2FFA6E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3640","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487779/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27693","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487779/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0744","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote attackers to execute arbitrary SQL commands via the login page."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en user_login.asp de PreProjects.com Pre Hotels & Resorts Management System permite a atacantes remotos ejecutar comandos SQL de su elección a través de la página de identificación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects.com:pre_hotels_\\&_resorts_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"CF26C6D9-B786-4FB0-AC90-6A8142E1C61F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3644","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487053/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27450","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39935","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487053/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0745","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en aides/index.php de DomPHP 0.82. Permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:domphp:domphp:0.82:*:*:*:*:*:*:*","matchCriteriaId":"49DD8194-C05B-42E3-8C60-C33F7EB445BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27712","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5089","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0746","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php\r\ndel componente Gallery (com_gallery) de Mambo y Joomla! permite a atacantes remotos\r\nejecutar comandos SQL de su elección a través del parámetro id en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_gallery:*:*:*:*:*:*:*:*","matchCriteriaId":"193B8DB0-93C0-4070-B403-63847DAD1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_gallery:*:*:*:*:*:*:*:*","matchCriteriaId":"9E6C3502-AA82-48C5-97BC-E1108CFA39C5"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2008-February/001901.html","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-February/001902.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27695","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5084","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-February/001901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-February/001902.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0747","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en COWON America jetAudio 7.0.5 y versiones anteriores permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un URL en un fichero .asx, una vulnerabilidad diferente a CVE-2007-5487."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cowon_america:jetaudio_basic:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.5","matchCriteriaId":"F6349CDA-3159-488D-A495-D569053D316C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28855","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3642","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487806/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27698","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0502","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487806/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0748","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en Sony AxRUploadServer.AxRUploadControl.1 control ActiveX en AxRUploadServer.dll 1.0.0.38 en SonyISUpload.cab 1.0.0.38 de Sony ImageStation, permite a atacantes remotos ejecutar código de elección mediante argumentos largos en el método SetLogging. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sony:axruploadserver_activex_control:1.0.0.38:*:*:*:*:*:*:*","matchCriteriaId":"5B1DB099-13EC-461B-BDED-A7C62DD6F7FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sony:imagestation:*:*:*:*:*:*:*:*","matchCriteriaId":"B0E91618-A989-4A14-BEF7-97A0FBEBBBAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487802/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487805/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0483","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5086","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5100","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487802/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487805/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0749","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a calimero_webpage action."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site-scripting (XSS) en el archivo index.php en Calimero.CMS versión 3.3 permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro id en una acción calimero_webpage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calimero.cms:calimero.cms:3.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAF5B7-142C-4F40-AF1B-366765BDA22B"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27690.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/ref/41/41573-calimero.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/41573","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27690","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27690.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/ref/41/41573-calimero.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/41573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0750","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in philboard_forum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en philboard_forum.asp de Husrev BlackBoard 2.0.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro forumid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:husrev:blackboard:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8FE9DC3C-ED15-4E8F-81EF-A60C8AA54A64"}]}]}],"references":[{"url":"http://secunia.com/advisories/28842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3641","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487780/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487781/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27714","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487780/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487781/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0751","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/."},{"lang":"es","value":"Vulnerabilidad de Sitios cruzados en Freetag previa a la v2.96 para S9Y Serendipity, usado con Internet explorer 6 o 7, permite a atacantes remotos inyectar código web o HTML de su elección a través del PATH_INFO a plugin/tag/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity_event_freetag:*:*:*:*:*:*:*:*","versionEndExcluding":"2.96","matchCriteriaId":"F8651A7A-B968-4C4A-AA0B-F49C362B0C0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060122.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28852","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.bitsploit.de/uploads/Code/200802080000/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27697","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40376","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://blog.s9y.org/archives/190-Freetag-plugin-updated-to-prevent-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.bitsploit.de/uploads/Code/200802080000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0752","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente Neogallery (com_neogallery) 1.1   para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid en una acción show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_neogallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E7E9B957-6527-43A2-A01F-886C31CDC3D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_neogallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D3688758-74F7-4C91-ABA1-F4D87DEA5A75"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27692","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40357","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0753","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL commands via the month parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en calendar.php de Virtual War (VWar) 1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro month (mes)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vwar:virtual_war:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2604BF9F-711A-4423-B325-48A9BBE96A0C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3643","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487900/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27722","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487900/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0754","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a showuser action or (2) the category_id parameter in a viewcategorysrecipes action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el archivo index.php en el componente Rapid Recipe (com_rapidrecipe) versión 1.6.5 para Joomla!, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de (1) el parámetro user_id en una acción showuser o (2) el parámetro category_id en una acción viewcategorysrecipes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_rapidrecipe:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"DDC24E1D-D6F2-43D1-A8DE-9421092A072E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3649","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487901/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487901/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0755","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función ReportSysLogEvent del LPD server en cyan soft Opium OPI Server 4.10.1028 y anteriores; cyanPrintIP Easy OPI, Professional, y Basic 4.10.1030 y anteriores; Workstation 4.10.836 y anteriores; y Standard 4.10.940 y anteriores; podría permitir a atacantes remotos    ejecutar código de su elección a través de especificadores de formato de cadena en una petición de queue name (nombre de cola)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_basic:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1030","matchCriteriaId":"991EE979-F40C-4F1B-BAB0-0A2DB7557ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_easy_opi:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1030","matchCriteriaId":"EDDC746D-4271-4D38-9A5D-113D47FF9FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1030","matchCriteriaId":"F4D2BBA5-170F-494A-AC52-376FE1243A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_standard:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.940","matchCriteriaId":"68343171-B4B8-43A0-AC81-D162AFE97CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_workstation:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.836","matchCriteriaId":"763840D0-D5C4-4BA4-8AD8-2602587DBA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:opium4_opi_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1028","matchCriteriaId":"5C8FC423-B5E0-4BC0-BE0C-6BE148819766"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/cyanuro-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487955/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27734","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0498","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/cyanuro-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487955/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0756","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T20:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service (daemon crash) via a connection that begins with (1) a \"Send queue state\" LPD command 3 or (2) a \"Send queue state\" LPD command 4."},{"lang":"es","value":"El servidor LPD en cyan Soft Opium OPI Server 4.10.1028 y anteriores; cyanPrintIP Easy OPI, Professional, y Basic 4.10.1030 y anteriores; Workstation 4.10.836 y anteriores; y Standard 4.10.940 y anteriores; permite a atacantes remoteos causar una denegación de servicio (caída de demonio) a través de una conexión que comienza con (1) un comando 3 LPD \"Send queue state\" o (2) un comando 4 LPD \"Send queue state\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_basic:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1030","matchCriteriaId":"991EE979-F40C-4F1B-BAB0-0A2DB7557ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_easy_opi:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1030","matchCriteriaId":"EDDC746D-4271-4D38-9A5D-113D47FF9FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1030","matchCriteriaId":"F4D2BBA5-170F-494A-AC52-376FE1243A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_standard:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.940","matchCriteriaId":"68343171-B4B8-43A0-AC81-D162AFE97CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:cyanprintip_workstation:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.836","matchCriteriaId":"763840D0-D5C4-4BA4-8AD8-2602587DBA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyan_soft:opium4_opi_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.1028","matchCriteriaId":"5C8FC423-B5E0-4BC0-BE0C-6BE148819766"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/cyanuro-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487955/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27734","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0498","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/cyanuro-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487955/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0757","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de MercuryBoard 1.1.5. Permite a atacantes remotos    inyectar secuencias de comandos web o HTML de su elección a través del parámetro message (también conocido como el área del texto del mensaje), que lleva a una inyección en el messenger en una vista previa durante un mensaje privado (PM). NOTA: algunos de estos detalles se han obtenido solamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mercuryboard:mercuryboard_message_board:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"B23CBB3C-DF9D-4080-9312-D1391C0969CA"}]}]}],"references":[{"url":"http://forum.aria-security.net/showthread.php?t=522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28899","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487913/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27730","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019371","source":"cve@mitre.org"},{"url":"http://forum.aria-security.net/showthread.php?t=522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487913/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0758","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a \"..\\\" (dot dot backslash) sequence in the filename."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en el Servidor embebido http Zidget/HTTP de ExtremeZ -IP File and Print Server 5.1.2x15 y versiones anteriores, permiten a un atacante remoto leer ficheros de su elección (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip y (7) HTML a traves de una secuencia “..\\.” (punto punto contrabarra punto) en el nombre de archivo."}],"vendorComments":[{"organization":"Group Logic","comment":"Group Logic has fixed this issue in the ExtremeZ-IP 5.1.3x03 hotfix released on February 20, 2008. The update is free for all customers with active service contracts who own a version 5.x license and can be downloaded from http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","lastModified":"2008-02-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:group_logic:extremez-ip_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"0A49B207-5051-4BC8-821B-8BB4380C7B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:group_logic:extremez-ip_print_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"5702E66B-8AA5-4E53-BF77-2BC24C266C20"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ezipirla-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ezipirla.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487952/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27718","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0485","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ezipirla-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ezipirla.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487952/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0759","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548."},{"lang":"es","value":"ExtremeZ-IP File y Print Server 5.1.2x15 y versiones previas, permiten a atacantes remotos causar una denegación de servicio (Caída de demonio) a través de un campo UAM inválido por medio de una petición al servicio TCP de Apple Filing Protocol (AFP) por el puerto 548."}],"vendorComments":[{"organization":"Group Logic","comment":"Group Logic has fixed this issue in the ExtremeZ-IP 5.1.3x03 hotfix released on February 20, 2008. The update is free for all customers with active service contracts who own a version 5.x license and can be downloaded from http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","lastModified":"2008-02-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:group_logic:extremez-ip_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"0A49B207-5051-4BC8-821B-8BB4380C7B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:group_logic:extremez-ip_print_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"5702E66B-8AA5-4E53-BF77-2BC24C266C20"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ezipirla-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ezipirla.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28862","source":"cve@mitre.org"},{"url":"http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487952/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27718","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0485","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ezipirla-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ezipirla.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487952/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0760","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\\ (dot dot backslash) in the URI.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en SafeNet Sentinel Protection Server 7.4.1.0 y anteriores y Sentinel Keys Server 1.0.4.0 y anteriores, permite a atacantes remotos leer ficheros de su elección mediante un ..\\ (punto punto barra invertida) en el URI. NOTA: este problema existe debido a una modificación inicial incompleta de CVE-2007-6483."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safenet:sentinel_keys_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4.0","matchCriteriaId":"1042B3FD-D9DA-4F09-B3B3-9EBA26D2AEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet:sentinel_protection_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.1","matchCriteriaId":"CADDB493-DC77-4D39-8F78-A7A8E5E37C90"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/sentinella-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3646","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487954/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0499","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/sentinella-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487954/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0761","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Prince Clan Chess Club (com_pcchess) 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a players action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Prince Clan Chess Club (com_pcchess) 0.8 y anteriores para Joomla! Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user_id en una acción players."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_pcchess:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"77C301C4-51CF-438B-A795-5ABE162D1DF4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40436","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5104","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0762","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the com_iomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente com_iomezun de Joomla! permite a atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro id en una acción de editar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_iomezun:*:*:*:*:*:*:*:*","matchCriteriaId":"9453F53D-2959-4BB5-A95B-05081651B9E3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/487989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40447","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0763","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long argument in a LICENSE command on TCP port 3114."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Larson Network Print Server (LstNPS) 9.4.2 build 105 y versiones previas, que permite a atacantes remotos ejecutar código de su elección a través de un argumento largo en un comando LICENSE sobre TCP por el puerto 3114"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:larson_software_technology:network_print_server:*:build_105:*:*:*:*:*:*","versionEndIncluding":"9.4.2","matchCriteriaId":"98192C41-B6A9-489F-B468-93CCE5811BF8"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/lstnpsx-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487956/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40421","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/lstnpsx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487956/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0764","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en versiones para windows de Larson Network Print Server (LstNPS) 9.4.2 build 105 y anteriores, que pueden permitir a atacantes remotos ejecutar código de su elección a través de especificadores de cadena de formato mediante el comando USEP sobre TCP por el puerto 3114"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:larson_software_technology:network_print_server:*:build_105:*:*:*:*:*:*","versionEndIncluding":"9.4.2","matchCriteriaId":"98192C41-B6A9-489F-B468-93CCE5811BF8"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/lstnpsx-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487956/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40420","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/lstnpsx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487956/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0765","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to artmedic_print.php and the (2) jahrneu parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en artmedic webdesign weblog. Permiten a atacantes remotos    inyectar secuencias de comandos web o HTML de su elección a través del (1) parámetro date a   artmedic_print.php y (2) parámetro jahrneu a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artmedic_webdesign:artmedic_weblog:*:*:*:*:*:*:*:*","matchCriteriaId":"B5FEE96F-C5E0-4849-991C-615FD3EDAE8C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0152.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28927","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488223/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488262/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488223/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488262/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0766","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a \"Receive data file\" LPD command.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en RpmSrvc.exe de Brooks Remote Print Manager (RPM) 4.5.1.11 y versiones anteriores (Elite and Select) para Windows permite a atacantes remotos ejecutar código de su elección a través de un nombre de fichero largo en el comando \"Receive data file\" LPD.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"vendorComments":[{"organization":"Brooks Internet Software, Inc.","comment":"RPM Remote Print Manager version 4.5.1.12 resolves the issue found in this security advisory. The latest software can be downloaded from http://lpd.brooksnet.com.","lastModified":"2008-02-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brooks_internet_software:rpm_remote_print_manager_elite:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1.11","matchCriteriaId":"4B328B5B-360E-41D3-9250-26D0C9302FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:brooks_internet_software:rpm_remote_print_manager_select:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1.11","matchCriteriaId":"C7810D6D-EE7C-4652-9F3A-561DFB240D50"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28905","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488010/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27742","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40432","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488010/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0767","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain \"number of URLs\" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read."},{"lang":"es","value":"ExtremeZ-IP.exe en ExtremeZ-IP File y Print Server 5.1.2x15 y anteriores no verifican que un determinado campo \"number of URLs\" sea consistente con el tamaño del paquete. Esto permite a atacantes remotos causar una denegación de servicio (caída de demonio) a través de un entero largo en dicho campo mediante un paquete en el servicio Service Location Protocol (SLP) sobre UDP en el puerto 427, disparando una lectura fuera de límite."}],"vendorComments":[{"organization":"Group Logic","comment":"Group Logic has fixed this issue in the ExtremeZ-IP 5.1.3x03 hotfix released on February 20, 2008. The update is free for all customers with active service contracts who own a version 5.x license and can be downloaded from http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","lastModified":"2008-02-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extremez:print_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"0A2B0587-F5B7-46C2-9BD9-311255A468BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremez-ip:file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.2","matchCriteriaId":"42666F97-FDF1-43F6-922B-ECE0589BBCE1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ezipirla-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ezipirla.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487952/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27718","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0485","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ezipirla-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ezipirla.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.grouplogic.com/files/ez/hot/hotFix51.cfm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487952/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0768","sourceIdentifier":"cve@mitre.org","published":"2008-02-13T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila y en montículo en los componentes Windows RPC para IBM Informix Storage Manager (ISM), como se utilizan en Informix Dynamic Server (IDS) 10.00.xC8 y anteriores y 11.10.xC2 y anteriores. Permiten a atacantes ejecutar código de su elección a través de peticiones XDR manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndIncluding":"10.00.xc8","matchCriteriaId":"53BCF01B-A64E-4161-8E6E-F0BD0FBB3D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:*:*:*:*:*:*:*:*","versionStartIncluding":"11.10","versionEndIncluding":"11.10.xc2","matchCriteriaId":"8625CD11-E4A8-484C-9F35-FBCFC0D290A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_storage_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"B5838FCA-32C4-4DB3-9B83-5BF40916CBBE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://secunia.com/advisories/28689","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21294211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27485","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019281","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0317","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40018","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21294211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0769","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Livelink ECM versiones de la 9.0.0 a 9.7.0 y posiblemente anteriores, no asigna un conjunto de caracteres, que permite a atacantes remotos inyectar secuencias de comandos web o HTMLa través de entradas codificadas UTF-7."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0B034E30-DC85-434F-92DE-C36D6D151F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD235BC-97B7-43C4-A731-45C2971A97FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.2:*:*:*:*:*:*:*","matchCriteriaId":"AACAF8AB-1F44-4F08-B33D-4F3EED3B7FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.3:*:*:*:*:*:*:*","matchCriteriaId":"6CAA9185-BB41-49A0-BAE8-6359B628DD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.4:*:*:*:*:*:*:*","matchCriteriaId":"923F0981-3CC9-4950-B097-F06D68E26302"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.5:*:*:*:*:*:*:*","matchCriteriaId":"7920AF1A-361D-4A4C-8946-CBD7F76B95D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.6:*:*:*:*:*:*:*","matchCriteriaId":"C15BA1C4-5343-4D5C-BD60-A6A8C612562D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:livelink_ecm:9.7:*:*:*:*:*:*:*","matchCriteriaId":"6CE01C9D-273D-4057-BEED-E2D3EEAF2F29"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28723","source":"cve@mitre.org"},{"url":"http://withdk.com/archives/livelink-utf7-xss-advisory.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27537","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40123","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://withdk.com/archives/livelink-utf7-xss-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0770","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the g_display_order cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en arcade.php de ibProArcade versiones 3.3.0 y anteriores permite a los atacantes ejecutar comandos SQL de su elección utilizando el parámetro cookie g_display_order."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibproarcade:ibproarcade:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.0","matchCriteriaId":"7187739B-6EB7-4DA8-A53D-DD7E9DC36983"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/0366","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0771","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txtUserName and (2) txtPassword parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en default.asp de Site2Nite, permiten a atacantes remotos ejecutar comandos SQL de su elcción mediante los parámetros (1)  txtUserName y (2) txtPassword. NOTA: alguno de estos detalles se han obtenido de información de terceros"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:site2nite:real_estate_web:*:*:*:*:*:*:*:*","matchCriteriaId":"02DA53AC-8D44-49BB-B78F-33AD17E3DF59"}]}]}],"references":[{"url":"http://secunia.com/advisories/28531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3650","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486414/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27330","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486414/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0772","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the sid parameter in a view task."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en index.php del componente com_doc de Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sid en una tarea view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_doc:*:*:*:*:*:*:*:*","matchCriteriaId":"7EE017CD-96FB-4BD8-AD82-922F7C9988A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_doc:*:*:*:*:*:*:*:*","matchCriteriaId":"C5E136B6-6ADF-4F73-9739-4253126AB855"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27679","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5080","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0773","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Phil Taylor Comments (com_comments, también conocido como Review Script) 0.5.8.5g y anteriores para Mambo. Permite a atacantes remotos  ejecutar comandos SQL de su elección  a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_comments:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.8.5g","matchCriteriaId":"5A765F27-BB37-4334-9D01-A3C107620574"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_comments:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.8.5g","matchCriteriaId":"AA65828D-0B2D-405E-A306-926B60222FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phil_taylor:comments:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.8.5g","matchCriteriaId":"92883099-1E48-4BC4-B4C8-522C6CA5E378"},{"vulnerable":true,"criteria":"cpe:2.3:a:phil_taylor:review_script:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.8.5g","matchCriteriaId":"9A7ABA9E-666D-4BB4-91D7-8AE3D00F284C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27731","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0774","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotel_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.cgi de Loris Hotel Reservation System 3.01 y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro  hotel_name parameter. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:loris:hotel_reservation_system:*:*:*:*:*:*:*:*","versionEndIncluding":"3.01","matchCriteriaId":"187792A8-E9B6-4289-817E-845F78D94FC7"}]}]}],"references":[{"url":"http://secunia.com/advisories/28881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0775","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with \"&#\", contain the desired script, and end with \";\"."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en sboxDB.php de Simple Machines Forum (SMF) Shoutbox de 1.14 a 1.16b. Permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de cadenas al formulario shoutbox que comienza con \"&#\", contiene la secuencia de comandos deseada y acaba con \";\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf_shoutbox:1.14:*:*:*:*:*:*:*","matchCriteriaId":"AAC28A2D-70AD-472A-934E-FBC8B2701CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf_shoutbox:1.15:*:*:*:*:*:*:*","matchCriteriaId":"01635134-3DBC-4CFA-B184-DD8FD9F946AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf_shoutbox:1.16b:*:*:*:*:*:*:*","matchCriteriaId":"EBD57BE7-6F82-49F0-A769-F181C9108B19"}]}]}],"references":[{"url":"http://secunia.com/advisories/28900","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3651","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487912/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489964/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491357/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27727","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487912/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489964/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491357/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0776","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.php de iTechBids Gold 6.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro item_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:6.0:*:*:*:*:*:*:*","matchCriteriaId":"22EA5125-4433-4B01-BB6F-E0218557F449"}]}]}],"references":[{"url":"http://secunia.com/advisories/28887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27717","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5096","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0777","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files."},{"lang":"es","value":"La llamada al sistema de envío de ficheros (sendfile) en FreeBSD 5.5 hasta 7.0 no comprueba los indicadores de acceso del descriptor del fichero utilizado para enviar un archivo, esto permite a usuarios locales leer los contenidos de los ficheros de sólo-escritura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*","matchCriteriaId":"7752D43D-64AF-474F-BFBB-2625A29C1B88"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"}]}]}],"references":[{"url":"http://secunia.com/advisories/28928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:03.sendfile.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019416","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27789","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/28928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:03.sendfile.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-0778","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods."},{"lang":"es","value":"Múltiples  vulnerabilidades de desbordamiento de búfer basado en pila en ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 y anteriores, permite a atacantes remotos causar una denegación de servicio y la posibilidad de ejecutar código de su elección a través de argumentos largos a los métodos: (1) setBgColor, (2) SetHREF, (3) SetMovieNAme, (4) SetTarget, y SetMatrix."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.1","matchCriteriaId":"E67EC53A-3D2E-4C85-9AB6-B4F736883C5E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27769","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40475","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5110","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0779","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T12:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request."},{"lang":"es","value":"El controlador de dispositivo fortimon.sys en Fortinet FortiClient Host Security versión 3.0 MR5 Parche 3 y versiones anteriores, no inicializa apropiadamente su DeviceExtension, lo que permite a los usuarios locales acceder a la memoria del kernel y ejecutar código arbitrario por medio de una petición diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:forticlient_host_security:*:mr5_patch_3:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"E466C571-AE00-42C5-BC6F-8F57CC453748"}]}]}],"references":[{"url":"http://kc.forticare.com/default.asp?id=3618","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3660","source":"cve@mitre.org"},{"url":"http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=47&Itemid=15","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488071/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27776","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019415","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0541/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40512","source":"cve@mitre.org"},{"url":"http://kc.forticare.com/default.asp?id=3618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=47&Itemid=15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0541/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0780","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados en MoinMoin v1.5.x a la 1.5.8 y 1.6.x  anterior a 1.6.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través de una acción de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6B44C24B-013E-4769-A200-D59752E0A041"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB8DB90E-BEE5-447E-9F78-A96634343815"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"84317439-A287-4897-9608-65095860AB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2FB70477-B0F2-44D6-92A8-0F42F890CF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"013FBB75-8B01-4249-9C6C-5E27964ED2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"361C37DC-CB43-4E6A-A198-313A9D62CD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3D66C-3D24-41D0-9E4B-BB458DD5517D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"0A4C9F85-C5EF-4991-A005-5839951B9843"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"690F09A1-6195-404D-BDC3-5F02A4A201C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*","matchCriteriaId":"F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57003BFE-8FB2-480A-AFA1-63817B608F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B0FD9248-1E4B-46DC-9F78-20787F56D50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"23539FCA-FF83-46E5-A9E2-5051D975DC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03FBCD1B-2D05-4C17-B41C-CF8DA75BB05D"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27904","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0569/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432747","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0569/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0781","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py de MoinMoin 1.5.8 y anteriores, permiten a atacantes remotos inyectar comandos web o HTML de su elección mediante (1) message, (2) pagename, y (3) target filenames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D2866E-A684-4EB7-A127-5FEC934945E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BDC4AB6-39BF-4444-9CFE-B654A19814C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD78CAE-9A9D-40AA-AD1F-C124A8315714"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8673FFE8-349E-4412-9913-1145DFA1EC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"24271A6D-21D9-4E8D-997F-0EC132518FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3072B82-3D5C-46DF-8869-08FAAC5C70DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*","matchCriteriaId":"93508FCF-7852-4CB9-AD91-AB0FCD61BE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83ACA6-5C3C-46E3-805C-EE1E759B7331"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2354B8-9A1A-4E75-92AC-F16CFDF91761"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6B44C24B-013E-4769-A200-D59752E0A041"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB8DB90E-BEE5-447E-9F78-A96634343815"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"84317439-A287-4897-9608-65095860AB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2FB70477-B0F2-44D6-92A8-0F42F890CF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"013FBB75-8B01-4249-9C6C-5E27964ED2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"361C37DC-CB43-4E6A-A198-313A9D62CD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3D66C-3D24-41D0-9E4B-BB458DD5517D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"0A4C9F85-C5EF-4991-A005-5839951B9843"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"690F09A1-6195-404D-BDC3-5F02A4A201C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*","matchCriteriaId":"F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57003BFE-8FB2-480A-AFA1-63817B608F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B0FD9248-1E4B-46DC-9F78-20787F56D50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"23539FCA-FF83-46E5-A9E2-5051D975DC12"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27904","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0569/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432748","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0569/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0782","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T21:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action.  NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en MoinMoin versión 1.5.8 y anteriores, permite a los atacantes remotos sobrescribir archivos arbitrarios por medio de un .. (punto punto) en el ID de usuario MOIN_ID de una cookie para una acción userform. NOTA: este problema puede ser aprovechado para la ejecución de código PHP por medio del parámetro quicklinks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D2866E-A684-4EB7-A127-5FEC934945E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BDC4AB6-39BF-4444-9CFE-B654A19814C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD78CAE-9A9D-40AA-AD1F-C124A8315714"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8673FFE8-349E-4412-9913-1145DFA1EC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"24271A6D-21D9-4E8D-997F-0EC132518FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3072B82-3D5C-46DF-8869-08FAAC5C70DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*","matchCriteriaId":"93508FCF-7852-4CB9-AD91-AB0FCD61BE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83ACA6-5C3C-46E3-805C-EE1E759B7331"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2354B8-9A1A-4E75-92AC-F16CFDF91761"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6B44C24B-013E-4769-A200-D59752E0A041"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB8DB90E-BEE5-447E-9F78-A96634343815"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"84317439-A287-4897-9608-65095860AB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2FB70477-B0F2-44D6-92A8-0F42F890CF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"013FBB75-8B01-4249-9C6C-5E27964ED2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"361C37DC-CB43-4E6A-A198-313A9D62CD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3D66C-3D24-41D0-9E4B-BB458DD5517D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"0A4C9F85-C5EF-4991-A005-5839951B9843"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"690F09A1-6195-404D-BDC3-5F02A4A201C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*","matchCriteriaId":"F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57003BFE-8FB2-480A-AFA1-63817B608F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B0FD9248-1E4B-46DC-9F78-20787F56D50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"23539FCA-FF83-46E5-A9E2-5051D975DC12"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001890.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27404","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0569/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39837","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4957","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-January/001890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0569/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0783","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the action parameter to the draw_navigation_text function in lib/functions.php, reachable through index.php (aka the login page) or data_input.php; or (4) the login_username parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en Cacti versión 0.8.7 anterior a 0.8.7b y versión 0.8.6 anterior a 0.8.6k, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de (1) el parámetro view_type en el archivo graph.php; (2) el parámetro filter en el archivo graph_view.php; (3) el parámetro action en la función draw_navigation_text en el archivo lib/functions.php, accesible por medio del archivo index.php (también conocido como la página de inicio de sesión) o el archivo data_input.php; o (4) el parámetro login_username en el archivo index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B4611FB4-7B8D-4DCA-9BFC-87585E16129B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B44E0187-3577-4770-8D76-10F64F6400B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E6282B-B403-45AD-B1EC-82257EEA1A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0936E4B2-D89C-44B3-9082-77FA369BA280"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*","matchCriteriaId":"A1257552-9117-45EE-B77C-00879E1FC67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BA380DC2-2392-413E-AC7A-F8B854EA3108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*","matchCriteriaId":"B530A944-0A71-4F88-AAE6-3844364FB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"62C554AE-AE7A-48B1-A1FF-E8E7691EA344"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"25541421-4A87-43BF-86D7-E1377CE3C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"301E2B13-D410-4B26-9A47-F90343F47C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"EE910AB1-7D04-4743-9963-BBA191EE4078"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*","matchCriteriaId":"DB41A3C5-D03A-4B1F-B841-A9F5021A59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"8D62D429-7BDE-47DE-B466-0732DAC3F70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6j:*:*:*:*:*:*:*","matchCriteriaId":"6893355E-2F64-416D-9AED-898E6D1123F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*","matchCriteriaId":"7A8C1715-DCA1-4C83-B817-9366172CFC1D"}]}]}],"references":[{"url":"http://bugs.cacti.net/view.php?id=1245","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30045","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3657","source":"cve@mitre.org"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1569","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27749","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34991","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50575","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"cve@mitre.org"},{"url":"http://bugs.cacti.net/view.php?id=1245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0784","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors."},{"lang":"es","value":"Graph.php en Cacti 0.8.7 anterior a 0.8.7b y  0.8.6 anterior a 0.8.6k, permite a atacantes remotos obtener la ruta completa a través de un parámetro local_graph_id inválido y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B4611FB4-7B8D-4DCA-9BFC-87585E16129B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B44E0187-3577-4770-8D76-10F64F6400B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E6282B-B403-45AD-B1EC-82257EEA1A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0936E4B2-D89C-44B3-9082-77FA369BA280"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*","matchCriteriaId":"A1257552-9117-45EE-B77C-00879E1FC67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BA380DC2-2392-413E-AC7A-F8B854EA3108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*","matchCriteriaId":"B530A944-0A71-4F88-AAE6-3844364FB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"62C554AE-AE7A-48B1-A1FF-E8E7691EA344"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"25541421-4A87-43BF-86D7-E1377CE3C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"301E2B13-D410-4B26-9A47-F90343F47C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"EE910AB1-7D04-4743-9963-BBA191EE4078"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*","matchCriteriaId":"DB41A3C5-D03A-4B1F-B841-A9F5021A59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"8D62D429-7BDE-47DE-B466-0732DAC3F70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6j:*:*:*:*:*:*:*","matchCriteriaId":"6893355E-2F64-416D-9AED-898E6D1123F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*","matchCriteriaId":"7A8C1715-DCA1-4C83-B817-9366172CFC1D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29274","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3657","source":"cve@mitre.org"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27749","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0785","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1) graph_list parameter to graph_view.php, (2) leaf_id and id parameters to tree.php, (3) local_graph_id parameter to graph_xport.php, and (4) login_username parameter to index.php/login."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Cacti 0.8.7 anterior a 0.8.7b y  0.8.6 anterior a 0.8.6k. que permite a usuarios autentificados remotamente ejecutar comandos SQL de su elección a través de los parámetros: (1) graph_list a graph_view.php, (2) leaf_id e id a tree.php, (3) local_graph_id a graph_xport.php y (4) login_username a index.php/login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B4611FB4-7B8D-4DCA-9BFC-87585E16129B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B44E0187-3577-4770-8D76-10F64F6400B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E6282B-B403-45AD-B1EC-82257EEA1A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0936E4B2-D89C-44B3-9082-77FA369BA280"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*","matchCriteriaId":"A1257552-9117-45EE-B77C-00879E1FC67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BA380DC2-2392-413E-AC7A-F8B854EA3108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*","matchCriteriaId":"B530A944-0A71-4F88-AAE6-3844364FB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"62C554AE-AE7A-48B1-A1FF-E8E7691EA344"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"25541421-4A87-43BF-86D7-E1377CE3C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"301E2B13-D410-4B26-9A47-F90343F47C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"EE910AB1-7D04-4743-9963-BBA191EE4078"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*","matchCriteriaId":"DB41A3C5-D03A-4B1F-B841-A9F5021A59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"8D62D429-7BDE-47DE-B466-0732DAC3F70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6j:*:*:*:*:*:*:*","matchCriteriaId":"6893355E-2F64-416D-9AED-898E6D1123F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*","matchCriteriaId":"7A8C1715-DCA1-4C83-B817-9366172CFC1D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30045","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3657","source":"cve@mitre.org"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1569","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27749","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0786","sourceIdentifier":"cve@mitre.org","published":"2008-02-14T23:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Cacti 0.8.7 anterior a 0.8.7b y 0.8.6 anterior a 0.8.6k, cuando se ejecuta en intérpretes PHP antiguos, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de división de respuesta HTTP a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B4611FB4-7B8D-4DCA-9BFC-87585E16129B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B44E0187-3577-4770-8D76-10F64F6400B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E6282B-B403-45AD-B1EC-82257EEA1A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0936E4B2-D89C-44B3-9082-77FA369BA280"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*","matchCriteriaId":"A1257552-9117-45EE-B77C-00879E1FC67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BA380DC2-2392-413E-AC7A-F8B854EA3108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*","matchCriteriaId":"B530A944-0A71-4F88-AAE6-3844364FB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"62C554AE-AE7A-48B1-A1FF-E8E7691EA344"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"25541421-4A87-43BF-86D7-E1377CE3C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"301E2B13-D410-4B26-9A47-F90343F47C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"EE910AB1-7D04-4743-9963-BBA191EE4078"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*","matchCriteriaId":"DB41A3C5-D03A-4B1F-B841-A9F5021A59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"8D62D429-7BDE-47DE-B466-0732DAC3F70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6j:*:*:*:*:*:*:*","matchCriteriaId":"6893355E-2F64-416D-9AED-898E6D1123F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*","matchCriteriaId":"7A8C1715-DCA1-4C83-B817-9366172CFC1D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29274","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3657","source":"cve@mitre.org"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27749","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cacti.net/release_notes_0_8_7b.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00570.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0787","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en inc/datahandlers/pm.php en MyBB anterior a v1.2.12, permite a usuarios autentificados remotamente ejecutar comandos SQL de su eleccion a través del parámetro \"options\"[disablesmilies] del private.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"858E3AD8-8A7C-4B33-A2AA-3C543D46E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0F3B187F-D0C5-4001-B877-3B0122784BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D04152D8-60BE-4362-BF68-688DE53A066C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"98789943-2C7D-404E-B61E-04C436C1681C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"678B50B3-D151-40ED-8CAA-C12FC5BA4520"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*","matchCriteriaId":"6DB91E8F-52F1-4514-88DC-F2749973CB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F1079E0F-7B89-45A9-83AD-F72470A63B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"59C3A929-B608-42FC-BB31-7599146E8CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4409B6-9F4D-4136-BA74-43736215A122"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D70B64CF-6EF1-487A-9617-68F904ACE727"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"94EC0E67-111A-4989-A311-6B051D37CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"7F962969-76AF-4CB2-BD20-A02D703B01C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D6942A9C-55E6-4A87-903F-3C8314EA4EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"1DC39A88-9F34-4119-8404-8495735290DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7A15A18B-E4DB-4622-977B-3AA495E2F39A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4494C452-BB14-4180-A26E-572752FA6111"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6FD3E97-2E37-4FE3-83A7-13E489BDFF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A8C6BC25-C1BB-4640-9CC5-F10C0C119C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"04247BE7-8EF5-4A9C-AD27-F29611FA4A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.10:*:*:*:*:*:*:*","matchCriteriaId":"0846A9BC-9FFC-4C93-911D-431688A6FB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*","matchCriteriaId":"794B59C3-0318-49F5-A409-E258E4D322C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*","matchCriteriaId":"14F3D49D-C89A-44FB-B254-4F8BAA20BFF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*","matchCriteriaId":"EDCAC700-1448-4BD4-97F4-8CC06F518524"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*","matchCriteriaId":"BCE181AB-C597-48A3-A5DA-135E601968AB"}]}]}],"references":[{"url":"http://community.mybboard.net/showthread.php?tid=27675","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28572/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486763/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27378","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019257","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0238","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-64.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5070","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/showthread.php?tid=27675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28572/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486763/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-64.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0788","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hijack the authentication of moderators or administrators for requests that delete threads via a do_multideletethreads action to moderation.php and (2) hijack the authentication of arbitrary users for requests that delete private messages (PM) via a delete action to private.php."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en MyBB versión 1.2.11 y anteriores, permiten a los atacantes remotos (1) secuestrar la autenticación de moderadores o administradores para las peticiones que eliminan hilos (subprocesos) por medio de una acción do_multideletethreads para el archivo moderation.php y (2) secuestran la autenticación de usuarios arbitrarios para peticiones que eliminan mensajes privados (PM) por medio de una acción delete en private.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.11","matchCriteriaId":"584748F9-2F9A-4FC8-8C4B-0C30E54F6FED"}]}]}],"references":[{"url":"http://community.mybboard.net/showthread.php?tid=27675","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28572/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3656","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486663","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://community.mybboard.net/showthread.php?tid=27675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28572/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0789","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el fichero countdown.php en LI-Scripts LI-Countdown, que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"years\" (edad)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:li-scripts:li-countdown:*:*:*:*:*:*:*:*","matchCriteriaId":"E539057A-93F3-444F-9A04-4A45C436F9C6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488017/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27753","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488017/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0790","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo ipdsserver.exe en ntermate WinIPDS 3.3 G52-33-021 que permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intermate:winipds:3.3revg52-33-021:*:*:*:*:*:*:*","matchCriteriaId":"34144328-8506-4070-B3D2-37A5370651A9"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/winipds-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488015/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489499/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27757","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.altervista.org/adv/winipds-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488015/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489499/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0791","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumption) via short packets on TCP port 5001 with the 3, 5, 7, 13, 14, or 15 packet types."},{"lang":"es","value":"ipdsserver.exe en Intermate WinIPDS 3.3 G52-33-021 permite a atacantes remotos provocar una denegación de servicio (consumo de la CPU) mediante paquetes cortos en el puerto TCP 5001 con los tipos de paquetes 3, 5, 7, 13, 14 o 15."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intermate:winipds:3.3revg52-33-021:*:*:*:*:*:*:*","matchCriteriaId":"34144328-8506-4070-B3D2-37A5370651A9"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/winipds-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488015/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489499/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27757","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.altervista.org/adv/winipds-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488015/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489499/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0792","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive."},{"lang":"es","value":"Múltiples productos antivirus F-Secure, incluyendo Internet Security 2006 hasta 2008, Anti-Virus 2006 hasta 2008, F-Secure Protection Service y otros, permiten a los atacantes remotos omitir la detección de malware por medio de un archivo CAB diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*","matchCriteriaId":"9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*","matchCriteriaId":"1106DE08-DE9A-488B-8C5D-28E353CDEEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:second_edition:*:*:*:*:*:*","matchCriteriaId":"C8609465-1436-4F50-B7EE-0DF9DA7AA4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"B47EC4EB-268A-4BB9-820D-AA3DB8D1A655"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.03:*:*:*:*:*:*:*","matchCriteriaId":"85517B0C-8C1A-4306-8466-2C138AD0709A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.04:*:*:*:*:*:*:*","matchCriteriaId":"F0657810-2CB9-4887-8AA2-3E0927937820"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.01:*:*:*:*:*:*:*","matchCriteriaId":"59FA86FF-A114-44EB-884A-766BEE17FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5CD2B3CE-78CC-4BE7-80EB-25675371B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:4.65:*:*:*:*:*:*:*","matchCriteriaId":"04102648-2C1C-420E-BBF7-5C948F0EE479"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:5.44:*:*:*:*:*:*:*","matchCriteriaId":"9848B969-A0A4-4F38-9C6C-79395EFF8254"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.00:*:*:*:*:*:*:*","matchCriteriaId":"605AB820-8069-430A-89AC-3E0122EB3B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*","matchCriteriaId":"7D9F9488-8DA8-48A9-9A11-B5E0D7AA9A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*","matchCriteriaId":"E77AB622-B899-46FD-9DFA-1964B57A9458"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*","matchCriteriaId":"F8DB2DD7-86DC-440A-B8D9-0A84034E808F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C788A5AB-C847-476C-9767-C6711F2D4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"3972C7F1-8B78-4A5D-8A75-C6CA01E997DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:second_edition:*:*:*:*:*:*","matchCriteriaId":"C0DCADF7-B044-4646-B215-52685609ED49"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"08ED9945-DC9F-4F4F-B2EB-B63986BCC7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*","versionEndIncluding":"3.00","matchCriteriaId":"A097721B-9CBA-4E2D-B5E5-B7AAD938E61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*","versionEndIncluding":"7.00","matchCriteriaId":"604EFE23-657D-406F-81BF-17BA524E8423"}]}]}],"references":[{"url":"http://secunia.com/advisories/28919","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2008-1.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019405","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019412","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019413","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0544/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2008-1.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0544/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0793","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) searchtext, (3) jobcategoryid, (4) contactcompany, and unspecified other parameters.  NOTE: some of these details are obtained from third party information.  NOTE: it is not clear whether this affects Tendenci Enterprise Edition in addition to the product's deployment on Tendenci's own server farm. If only the latter was affected, then this issue should not be included in CVE."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en search.asp en Tendenci CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) category, (2) searchtext, (3) jobcategoryid, (4) contactcompany y otros parámetros no especificados. NOTA: Algunos de estos detalles se han obtenido de información de terceros. NOTA: No está claro si esto afecta a Tendenci Enterprise Edition incluidos en el desarrollo de productos de la propia granja de servidores de Tendenci. Si sólo lo último es lo que resulta afectado, esta vulnerabilidad no debería estar incluida en el CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tendenci:cms:*:*:*:*:*:*:*:*","matchCriteriaId":"A7123A5B-F8EC-46CB-AE6E-6AFE17D0B50F"}]}]}],"references":[{"url":"http://blog.tendenci.com/2008/02/cross-site-scri.html","source":"cve@mitre.org"},{"url":"http://holisticinfosec.blogspot.com/2008/02/fastest-fix-in-west-vendors-excellent.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27782","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40477","source":"cve@mitre.org"},{"url":"http://blog.tendenci.com/2008/02/cross-site-scri.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://holisticinfosec.blogspot.com/2008/02/fastest-fix-in-west-vendors-excellent.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0794","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en user/header.php en Affiliate Market 0.1 BETA, que permite a atacantes remotos incluir y ejecutar código de su elección a través de .. (punto punto) en el parámetro \"languaje\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:affiliate_market:affiliate_market:0.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"798BE280-644E-4C06-A915-E423337E068B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27777","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40472","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0795","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en en index,php en el componente MGFi XfaQ (com_xfaq) 1.2 de Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro aid en una acción de respuesta.\r\n\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5:*:*:*:*:*:*:*","matchCriteriaId":"EBF4585E-26D9-434D-998C-AD4F0E2FB91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mgfi:xfaq:1.2:*:*:*:*:*:*:*","matchCriteriaId":"32DFF20C-944A-4039-9C9D-6778458D01DD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27784","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40494","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0796","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via the ssid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en threads.php en Nuboard 0.5 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ssid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nuboard:nuboard:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A15238A2-CD20-4F6D-8C6D-3D1558C41052"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5115","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0797","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en lib/download.php de iTheora 1.0 rc1 permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en el parámetro url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itheora:itheora:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7154CA36-5B66-4C00-8C3D-0A02F0D146A6"}]}]}],"references":[{"url":"http://en.wikipedia.org/wiki/Talk:Itheora","source":"cve@mitre.org"},{"url":"http://menguy.aymeric.free.fr/theora/news.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27788","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40506","source":"cve@mitre.org"},{"url":"http://en.wikipedia.org/wiki/Talk:Itheora","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://menguy.aymeric.free.fr/theora/news.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0798","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ta parameter to artmedic_index.php, reached through index.php; and the (2) date parameter to artmedic_print.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en artmedic webdesign weblog 1.0, cuando magic_quotes_gpc no esta habilitado, permiten a atacantes remotos leer archivos de su elección mediante un .. (punto punto)  en el (1) parámetro ta en artmedic_index.php, reached through index.php; y el (2) parámetro date en artmedic_print.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artmedic_webdesign:artmedic_weblog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C3835C7E-B9FB-4C60-8323-C31D7AFEFBC8"}]}]}],"references":[{"url":"http://secunia.com/advisories/28927","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488115/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40522","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5116","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488115/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0799","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el componente Quiz (com_quiz) 0.81 y anteriores para Mambo and Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro tid en una acción user_tst_shw."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_quiz:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"9FFBCCD7-8954-412E-A066-9C8D61BA55A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_quiz:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"DE01F645-6CE4-4CAA-9E3A-75575695E048"}]}]}],"references":[{"url":"http://secunia.com/advisories/28980","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27808","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5119","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0800","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el McQuiz (com_mcquiz) 0.9 Final component para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro tid en la acción user_tst_shw."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mcquiz:0.9:*:*:*:*:*:*:*","matchCriteriaId":"51C01224-A4FF-494F-996E-B19123D220DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/28940","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27809","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5118","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0801","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the iid parameter in a view action, and possibly (2) the userid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo index.php en el componente PAXXGallery (com_paxxgallery) versión 0.2 para Mambo y Joomla!, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de (1) el parámetro iid en una acción view, y posiblemente (2) el parámetro userid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paxxgallery:com_paxxgallery:0.2:*:*:*:*:*:*:*","matchCriteriaId":"C240440B-8CC4-4FCD-A49A-60B984A5C1EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27811","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40497","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0802","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the albumnum parameter in a contact action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo index.php en el componente MediaSlide (com_mediaslide) versión 0.5 para Joomla!, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro albumnum en una acción contact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mediaslide:*:*:*:*:*:*:*:*","matchCriteriaId":"3D1C950B-DE45-4B5D-A721-4E4DDDE35702"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediaslide:com_mediaslide:*:*:*:*:*:*:*:*","matchCriteriaId":"24559157-BEA9-4F10-A593-F6423D2D1DB2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28962","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40517","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0803","sourceIdentifier":"cve@mitre.org","published":"2008-02-15T22:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sys_conf[path][real] parameter to (1) modules\\class\\Table.php; (2) db_admins.php, (3) db_alert.php, (4) db_double.php, (5) db_games.php, (6) db_matches.php, (7) db_match_teams.php, (8) db_news.php, (9) db_platform.php, (10) db_players.php, (11) db_server_group.php, (12) db_server_ip.php, (13) db_teams.php, (14) db_team_players.php, (15) db_tournaments.php, (16) db_tournament_teams.php, and (17) db_trees.php in modules\\class\\db\\; and (18) Match.php, (19) MatchTeam.php, (20) Rule.php, (21) RuleBuilder.php, (22) RulePool.php, (23) RuleSingle.php, (24) RuleTree.php, (25) Tournament.php, (26) TournamentTeam.php, (27) Tree.php, and (28) TreeSingle.php in modules\\class\\tournament\\.  NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en LookStrike Lan Manager 0.9 permite ejecutar código PHP de su elección mediante un URL en el parámetro sys_conf[path][real] para (1) modules\\class\\Table.php; (2) db_admins.php, (3) db_alert.php, (4) db_double.php, (5) db_games.php, (6) db_matches.php, (7) db_match_teams.php, (8) db_news.php, (9) db_platform.php, (10) db_players.php, (11) db_server_group.php, (12) db_server_ip.php, (13) db_teams.php, (14) db_team_players.php, (15) db_tournaments.php, (16) db_tournament_teams.php, and (17) db_trees.php en modules\\class\\db\\; y (18) Match.php, (19) MatchTeam.php, (20) Rule.php, (21) RuleBuilder.php, (22) RulePool.php, (23) RuleSingle.php, (24) RuleTree.php, (25) Tournament.php, (26) TournamentTeam.php, (27) Tree.php, and (28) TreeSingle.php en modules\\class\\tournament\\.  NOTA: esto puede ser aprovechado para incluir y ejecutar archivos permite a usuarios locales de su elección mediante secuencias de salto de directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lookstrike:lan_manager:0.9:*:*:*:*:*:*:*","matchCriteriaId":"DAEB5747-D271-4ED2-BD6A-E0EBC1692578"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40519","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0804","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en usrgetform.html de Thecus N5200Pro NAS Server permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro name (nombre)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thecus:n5200pro_nas_server_control_panel:*:*:*:*:*:*:*:*","matchCriteriaId":"EB515C35-F938-429B-AE28-D73DD4CAB2EF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5150","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0805","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures."},{"lang":"es","value":"Vulnerabilidad de subidas de archivos sin restringir en image.php de PHPizabi 0.848b C1 HFP1 permite a atacantes remotos ejecutar código de su elección subiendo un archivo con extensión ejecutable de la página de eventos, después accede a él a través de una petición directa al archivo en system/cache/pictures."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reality:medias_phpizabi:0.848b:*:*:*:*:*:*:*","matchCriteriaId":"0B043F05-71D3-469A-A80B-DDF6672994D0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27847","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0585","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5136","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0806","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T00:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file."},{"lang":"es","value":"wyrd 1.4.3b permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlaces simbólicos en el archivo temporal wyrd-tmp.[USERID]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_pelzl:wyrd:1.4.3b_3:*:*:*:*:*:*:*","matchCriteriaId":"C0A643CF-C94E-4B5E-BF12-F696B0EDB80B"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466382","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29113","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27848","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433719","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00825.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00841.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00825.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00841.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0807","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify address data via a modified object_id parameter to edit.php, as demonstrated by modifying a personal address book entry when there is write access to a shared address book."},{"lang":"es","value":"lib/Driver/sql.php en Turba 2 (turba2) Contact Manager H3 2.1.x antes de 2.1.7 y 2.2.x antes de 2.2-RC3, como se usa en productos como Horde Groupware antes de 1.0.4 y Horde Groupware Webmail Edition antes de 1.0.5, no comprueba correctamente los privilegios de acceso, lo que permite a usuarios autentificados remotamente modificar datos de dirección a través de un parámetro object_id modificado a edit.php, como se demostró modificando una entrada personal en la libreta de direcciones cuando hay un acceso de escritura a una libreta de direcciones compartida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D59C23FB-E223-4EED-8F69-3CC1EE7DF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"989D5040-13B3-4D76-A516-81CAB112FE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_contact_manager:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"6476A5E9-779F-4CBC-9C49-42AADD427B91"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464058","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000378.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000379.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000380.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000381.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28982","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29184","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29186","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27844","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019433","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0593/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432027","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00888.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00927.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000379.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000380.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000381.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0593/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=432027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00888.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00927.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0808","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script or HTML via meta tags."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el meta plugin de Ikiwiki antes de 1.1.47 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de meta tags (etiquetas)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.46","matchCriteriaId":"A0A633FE-8142-46FE-A189-F9D8D50D7528"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:1.33.3:*:*:*:*:*:*:*","matchCriteriaId":"BDC5DFC4-DA1B-49B7-AFD5-57977D75FED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31:*:*:*:*:*:*:*","matchCriteriaId":"356A3B66-637B-4429-A201-EAB0A8FD9DB5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465110","source":"cve@mitre.org"},{"url":"http://ikiwiki.info/security/#index30h2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29369","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27760","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ikiwiki.info/security/#index30h2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0809","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T01:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el htmlscrubber de Ikiwiki antes de 1.1.46 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los contenidos del título."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.45","matchCriteriaId":"65EC4321-9CD5-43CE-A25A-0DB6210D5579"}]}]}],"references":[{"url":"http://ikiwiki.info/security/#index27h2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29369","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27760","source":"cve@mitre.org"},{"url":"http://ikiwiki.info/security/#index27h2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0810","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo com_scheduling para Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_scheduling_component:*:*:*:*:*:*:*:*","matchCriteriaId":"984D9B55-873B-4492-9EF9-BA2C93432D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_scheduling_component:*:*:*:*:*:*:*:*","matchCriteriaId":"33ACAF9E-B838-4104-94AB-C9C1E33D5DA6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3662","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488269/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27830","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488269/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0811","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (a) mod/dl.php or (b) mod/links.php, and (2) the query parameter to search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en AuraCMS 1.62 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de 1) el parámetro kid a (a) mod/dl.php o (b) mod/links.php y (2) el parámetro query a search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:1.62:*:*:*:*:*:*:*","matchCriteriaId":"0C93C4BB-2CC5-48AA-9440-A2C2199F6B06"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27841","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019430","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0812","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the action parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en DMS/index.php de BanPro DMS 1.0 permite a atacantes remotos incluir y ejecutar archivos de su elección a través de un .. (punto punto) en el parámetro action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:banpro:net_banpro_dms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"850CB5BA-C64D-4A10-9B9B-053B186B69B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/28992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27831","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0813","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Download.php de XPWeb 3.0.1, 3.3.2 y posiblemente otras versiones, permite a atacantes remotos leer archivos de su elección  a través de un .. (punto punto) en el parámetro url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpweb:xpweb:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"93EE336C-FD59-4ED1-9EAC-53AE3509BEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xpweb:xpweb:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1C9BB0D6-5DBB-4A0F-BAFB-87F5347514F1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27838","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0584","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0814","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the upload_filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php de Tracking Requirements & Use Cases (TRUC) 0.11.0 permite a atacantes remotos   leer archivos de su elección a través de .. (punto punto) en el parámetro upload_filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:truc:truc:0.11:*:*:*:*:*:*:*","matchCriteriaId":"6661EEB6-5772-4D3B-B432-AEBD8F7CFA75"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27839","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0815","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente com_mezun para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una tarea edit (de edición)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egitimhost:com_mezun:*:*:*:*:*:*:*:*","matchCriteriaId":"03F1A398-D568-4E17-8F29-6F392697D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mezun:*:*:*:*:*:*:*:*","matchCriteriaId":"B7414160-12AA-40DC-B8FA-69A1DC88F7A2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3663","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487992/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27755","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40448","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487992/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0816","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the pid parameter in an order task."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente com_sg para Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid en una tarea order (petición)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:com_sg:com_sg:*:*:*:*:*:*:*:*","matchCriteriaId":"EAABF44A-0E87-4248-BDFF-2B92580FE7CB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488272/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27821","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488272/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0817","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T02:00:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente com_filebase para Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro filecatid en una acción selectfolder (elegir carpeta)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_filebase_component:*:*:*:*:*:*:*:*","matchCriteriaId":"8C2B451D-BBA2-409E-9B0C-2A9D8BE7D0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_filebase_component:*:*:*:*:*:*:*:*","matchCriteriaId":"670F1509-8765-4C0F-8E40-BB43CAC0AF8F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488268/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488284/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27829","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40616","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488268/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488284/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0818","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie to (1) comment.php, (2) index.php, and (3) show.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en freePHPgallery 0.6, permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en la cookie lang (lenguaje) de (1) comment.php, (2) index.php y (3) show.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freephpgallery:freephpgallery:0.6:*:*:*:*:*:*:*","matchCriteriaId":"30117EEC-82E5-473D-9D96-75FA0E05C5A8"}]}]}],"references":[{"url":"http://secunia.com/advisories/28972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=785794","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27806","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0589","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=785794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0819","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"The security focus bid link states that this is a local file include vulnerability.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de PlutoStatus Locator 1.0 pre alpha, permite a atacantes remotos incluir y ejecutar ficheros locales a través de .. (punto a punto) en el parámetro page (página)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plutostatus:plutostatus_locator:1.0pre_alpha:*:*:*:*:*:*:*","matchCriteriaId":"E9268AD2-16DD-40B5-BD80-6461C37988DF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3667","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488141/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488141/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0820","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $_SERVER['PHP_INFO'].  NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $_SERVER['PHP_SELF'], and \"This is not an Etomite specific exploit and I would like the report rescinded."},{"lang":"es","value":"**CUESTIONADA**  Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Etomite 0.6.1.4 Final, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de $_SERVER['PHP_INFO']. NOTA: el vendedor impugna este asunto en una investigación, afirmando que la variable afectada es $_SERVER['PHP_SELF'] y que “Este no es un exploit específico de Etomite y querríamos anular el informe”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etomite:etomite:0.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E9920A50-2D21-4A08-B9BB-73BFF2D2E3A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28964","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3669","source":"cve@mitre.org"},{"url":"http://www.etomite.com/forums/index.php?showtopic=7647","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488122/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488304/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27794","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.etomite.com/forums/index.php?showtopic=7647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488122/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488304/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0821","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expand_question action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en admin/traffic/knowledge_searchm.php de OSI Codes Inc. PHP Live! 3.2.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro questid en una acción expand_question."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osi_codes_inc.:phplive:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C037E15E-3E09-4C22-AC5F-CAA5D62EC99B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27807","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5125","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0822","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Security focus bid link notes that this is a local file include vulnerability.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidades de salto de directorio en index.php de Scribe 0.2, permite a atacantes remotos leer ficheros locales de su elección a través de .. (punto punto) en el parámetro page (página)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scribe:scribe:0.2:*:*:*:*:*:*:*","matchCriteriaId":"F953520D-2E7C-4D88-951D-995982D97A88"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488140/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27803","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5123","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488140/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0823","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Módulo Header Image versiones posteriores a la 5.x-1.1 para Drupal, permite a atacantes remotos acceder a las páginas de administración a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:header_image:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF63CF3E-0601-4963-BDA7-8223EE37DF94"}]}]}],"references":[{"url":"http://drupal.org/node/221359","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27787","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0571","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40510","source":"cve@mitre.org"},{"url":"http://drupal.org/node/221359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0824","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la función php2phps de Claroline versiones posteriores a la 1.8.9 de impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"06912134-5EED-41EE-AB81-F4F0CABB0895"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"612310E0-95CA-4708-9AFB-640C5C910C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"BE0BC024-0E42-45EE-B6CA-57777D1B36BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"36B46A8C-240C-45BD-9268-F2FA71461D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"4EC0334A-06CF-4DCE-AC64-311751629CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"19622D93-2E40-45D1-99C5-443DF20669B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.9","matchCriteriaId":"035A8E85-DB7D-4362-8A4A-30FB55072833"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"2FF6AA48-77CE-4C34-A9E4-9F6A8CE77C2F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575934","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0825","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Claroline versiones posteriores a la 1.8.9, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"06912134-5EED-41EE-AB81-F4F0CABB0895"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"612310E0-95CA-4708-9AFB-640C5C910C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"BE0BC024-0E42-45EE-B6CA-57777D1B36BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"36B46A8C-240C-45BD-9268-F2FA71461D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"4EC0334A-06CF-4DCE-AC64-311751629CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"19622D93-2E40-45D1-99C5-443DF20669B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.9","matchCriteriaId":"035A8E85-DB7D-4362-8A4A-30FB55072833"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"2FF6AA48-77CE-4C34-A9E4-9F6A8CE77C2F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575934","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27846","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0826","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Claroline versiones posteriores a la 1.8.9, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"06912134-5EED-41EE-AB81-F4F0CABB0895"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"612310E0-95CA-4708-9AFB-640C5C910C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"BE0BC024-0E42-45EE-B6CA-57777D1B36BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"36B46A8C-240C-45BD-9268-F2FA71461D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"4EC0334A-06CF-4DCE-AC64-311751629CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"19622D93-2E40-45D1-99C5-443DF20669B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.9","matchCriteriaId":"035A8E85-DB7D-4362-8A4A-30FB55072833"},{"vulnerable":true,"criteria":"cpe:2.3:a:caroline:caroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"2FF6AA48-77CE-4C34-A9E4-9F6A8CE77C2F"}]}]}],"references":[{"url":"http://secunia.com/advisories/28942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575934","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27846","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0827","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el módulo Books de PHP-Nuke, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:book:*:*:*:*:*:*:*:*","matchCriteriaId":"D1EFC979-1293-44FA-AC6F-03D07D1CA113"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27863","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40857","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5147","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0828","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en ATutor versión 1.5.5 y anteriores, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de (1) atributos como style y onmouseover en (a) forum post o (b) email ; o (2) el campo website del perfil."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.5","matchCriteriaId":"4A91B9E7-35E2-4EEF-9445-6FE85C6F882F"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"29578CEF-9EC3-4A3D-ADB0-528B7AFA592F"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"5F2D8D00-F509-49BB-8594-D0FD2C8A5011"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1D4F1FB2-F35E-444F-8A7F-77C6FDCE9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FED293AE-94FD-444B-85A6-3ABCC7C97654"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ECE4E6E1-0B9B-4EBE-8727-AD04E1BB5C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3:*:*:*:*:*:*:*","matchCriteriaId":"827CD64E-2E84-422A-A405-16FCB4E80863"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE05B757-B3B2-47DE-AFB6-073D5C639D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3D97A1FF-B3B4-406C-814A-F7504B9EE290"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1A3D3293-3761-46BE-B581-8B8447FB5059"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4:*:*:*:*:*:*:*","matchCriteriaId":"31C48DDB-B334-499A-9C1B-122D6942BD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E682277-2B37-4C0B-98F5-52A4427B8853"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"341B04AA-926D-400E-9A47-D2F183E26AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"05E50596-38A3-4C7A-9561-99950DA33A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7BA98319-09F3-4AE9-AF14-B1BE424AB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.1:pl1:*:*:*:*:*:*","matchCriteriaId":"DD94D6E8-4DA1-48C9-8708-43D1BEDB6CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.1:pl2:*:*:*:*:*:*","matchCriteriaId":"0AD5C011-1B1C-4DC2-AA01-81B14EF2B8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1C60745C-ECC2-41AD-8795-6D274F269F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2765EAFB-6663-4F16-B285-6DA8D26E6CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3:rc2:*:*:*:*:*:*","matchCriteriaId":"3849980E-F74A-4C85-B3A1-FECAF888546F"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D5B36A11-B728-468A-802E-A7C8362D154A"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"189D9776-C554-4084-8C31-21935F83A416"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"54D08E87-E4BC-449F-93B6-D567926BCE84"}]}]}],"references":[{"url":"http://secunia.com/advisories/29015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3670","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488293/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27855","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488293/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0829","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail task."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jooget.php del componente Joomlapixel Jooget! (com_jooget) 2.6.8 para Joomla! y Mambo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id  en una tarea detail (de detalle)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlapixel:jooget:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"AAF94489-BFA4-4ADB-9B28-33D17F3F8964"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://forum.joomlaitalia.com/index.php?topic=388.0","source":"cve@mitre.org"},{"url":"http://members.joomlapixel.eu/download/componenti/patch-jooget-2.6.8-sql-injection/details.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28998","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27836","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5132","source":"cve@mitre.org"},{"url":"http://forum.joomlaitalia.com/index.php?topic=388.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://members.joomlapixel.eu/download/componenti/patch-jooget-2.6.8-sql-injection/details.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0830","sourceIdentifier":"cve@mitre.org","published":"2008-02-19T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI, a different vulnerability than CVE-2008-0043."},{"lang":"es","value":"El protocolo ‘Digital Photo Access Protocol (DPAP) server’ para iPhoto 4.0.3 permite a atacantes remotos provocar una denegación de servicio (caída) mediante un dpap mal formado: URI, una vulnerabilidad diferente a la CVE-2008-0043."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:iphoto:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"460FDDDF-B92C-48A0-988E-5BF1FF1389FC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27867","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019488","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0831","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) user_id or (2) category_id parameter.  NOTE: this might overlap CVE-2008-0754."},{"lang":"es","value":"múltiples vulnerabilidades de inyección SQL en el componente Rapid Recipe (com_rapidrecipe) 1.6.5 y anteriores para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) user_id o (2) category_id. NOTA: esto podría solapar CVE-2008-0754."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:rapid_recipe:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.5","matchCriteriaId":"E5F96DAF-9586-4EE6-9FE5-7B66FB1F4E29"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5103","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0832","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente Kemas Antonius com_quran 1.1 y versiones anteriores para Mambo and Joomla!, permie a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro surano en una acción viewayat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:kemas_antonius_com_quran:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"76C8A1B4-C895-4B0F-A71E-9536D0569B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:kemas_antonius_com_quran:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"9837E409-133C-4C63-95BA-A24018527CDA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0399.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27842","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40573","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5128","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0833","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el componente com_galeria para Joomla!, que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_galeria:*:*:*:*:*:*:*:*","matchCriteriaId":"D9F09302-DE14-4530-8978-C989717863E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488285","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27833","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0834","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Lotus Quickr para i5/OS antes de 8.0.0.2 Hotfix 11, cuando está deshabilitado el acceso anónimo en los puertos HTTP permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.0:*:*:*:*:*:*:*","matchCriteriaId":"980401D7-AAF3-4AE4-9006-83D99170F5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0547A9F7-5E82-413E-8102-DADFB63B4E1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24016411","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27840","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019431","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0590","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24016411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0835","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the area parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en Simple CMS 1.0.3 y anteriores, que permite a atacantes remotos ejecutar comandos Vulnerabilidad de Inyección SQL de su elección a través del parámetro \"area\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_cms:simple_cms:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E9051F4C-A7B1-4955-AAD6-60E5EFEF1B18"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488288/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27843","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5131","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488288/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0836","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service (panic) via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319."},{"lang":"es","value":"Vulnerabilidad no especificada en los módulos vuidmice STREAMS de Sun Solaris 9 y 10 en arquitecturas x86 permite a usuarios locales provocar una denegación de servicio (error irrecuperable del sistema) a través de vectores no especificados que inducen una referencia a un puntero nulo en el módulo vuid3ps2, este es un problema diferente de CVE-2007-5319."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/28990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200635-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019429","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0582","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200635-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0837","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Plugin John Godley Search Unleashed 0.2.10 para  WordPress, que permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través del parámetro \"s\", que no se encuentra manejado adecuadamente cuando el administrador revisa el fichero de logs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_godley:search_unleashed:0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C64A8270-EE78-4B6F-8D12-0AEA2CE0BD77"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:search_unleashed_plugin:0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9723B9CA-FD1C-4148-9763-DFE03AD52D8B"}]}]}],"references":[{"url":"http://secunia.com/advisories/28968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3674","source":"cve@mitre.org"},{"url":"http://urbangiraffe.com/tracker/issues/show/60","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488109/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27791","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40513","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://urbangiraffe.com/tracker/issues/show/60","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488109/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0838","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) error and (2) go parameters to the login page."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la interfaz de administración web de Sophos ES1000 y ES4000 Email Security Appliance 2.1.0.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) error y (2) go a la página de validación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:es1000:2.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3861A46C-8232-40A6-B2A8-478609609F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:es4000:2.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1ED78684-051E-4052-B251-E241CC53C6B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/28961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3673","source":"cve@mitre.org"},{"url":"http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-02-13","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488206/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27813","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019427","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/34733.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-02-13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488206/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sophos.com/support/knowledgebase/article/34733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0839","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en refer.php del componente astatsPRO (com_astatspro) 1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astats:astatspro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BDAD0061-577E-4174-9A05-504CCF21FB0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_astatspro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"14C85428-D841-43CC-9F25-7EB019336DC3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27850","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40611","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0840","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the username parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en view_member.php de Public Warehouse LightBlog 9.6 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:publicwarehouse:lightblog:9.6:*:*:*:*:*:*:*","matchCriteriaId":"31A99362-72BC-4855-9D54-A7DB92D5F49F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488283/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27837","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0621","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488283/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0841","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el Componente Giorgio Nordo Ricette (com_ricette) 1.0 para Joomla! y Mambo, que permite a atacantes remotos ejecutar comandos Vulnerabilidad de Inyección SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_ricette_component:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E62FD9A-0CD3-4C58-9DA6-9DC7929B3ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_ricette_component:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F67A2EA0-0CD6-466E-ACBC-4A392664902C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27834","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5133","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0842","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente Classifier (com_clasifier) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_clasifier:*:*:*:*:*:*:*:*","matchCriteriaId":"70157D03-A43E-4376-A6BC-116D666DDF2C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27917","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0620","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40629","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5146","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0843","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp."},{"lang":"es","value":"StatCounteX 3.0 y 3.1 permite a atacantes remotos obtener información sensible y editar secuencias de comandos de configuración a través de una petición directa a admin.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:statcountex:statcountex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7051C1-C280-4A25-A658-E70932D90FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:statcountex:statcountex:3.1:*:*:*:*:*:*:*","matchCriteriaId":"9236D350-768F-4AE7-AE51-A54106A6B16B"}]}]}],"references":[{"url":"http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28984","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3675","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/11434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488200/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27814","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/11434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488200/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0844","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL  en el Componente PccookBook (com_pccookbook) para Joomla!, que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"user_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_pccookbook:*:*:*:*:*:*:*:*","matchCriteriaId":"41AF98B2-364F-436D-B299-172E324C150B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27864","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40620","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5145","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0845","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en wp-people-popup.php de Dean Logan WP-People plugin 1.6.1 para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro person."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:dean_logan_wp-people_plugin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"41264E7A-5D1F-4F00-B43B-527DDCC1E2DC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3672","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488282/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40860","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488282/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0846","sourceIdentifier":"cve@mitre.org","published":"2008-02-20T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el Componente com_profile para Joomla!, que permite a atacantes remotos ejecutar código SQL de su elección a través del parámetro \"oid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_profile:*:*:*:*:*:*:*:*","matchCriteriaId":"BC8F40E6-8CD7-4101-B0AA-9AE7ED101A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_profile:*:*:*:*:*:*:*:*","matchCriteriaId":"E8E31870-5B17-4BD8-BD77-A76F24772CF8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120335361520072&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27851","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120335361520072&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0847","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en print.php del módulo myTopics para XOOPS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro articleid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:mytopics:*:*:*:*:*:*:*:*","matchCriteriaId":"238E62FC-A8E2-4CF5-B1B5-35F57282CAFC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488315/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27861","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40627","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5148","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488315/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0848","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in lostsheep.php in Crafty Syntax Live Help (CSLH) before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the versions claimed by the original researcher are probably incorrect."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo lostsheep.php en Crafty Syntax Live Help (CSLH) versiones anteriores a 2.14.16, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores de ataque no especificados. NOTA: las versiones afirmadas por el investigador original son probablemente incorrectas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.15","matchCriteriaId":"223AFC84-D544-4C12-BC84-C16BCE32FB9C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3688","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=580994","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488286/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489016/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27859","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=580994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488286/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489016/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0849","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente Downloads (com_downloads) para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat en la función selectcat, un vector diferente que CVE-2008-0652."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_downloads:*:*:*:*:*:*:*:*","matchCriteriaId":"F90BE2C1-4784-4FA6-A65F-DB85E8F9A853"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_downloads:*:*:*:*:*:*:*:*","matchCriteriaId":"2DB2D210-8D68-46A4-A406-85AC5F39B877"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3676","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488291/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40621","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488291/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0850","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonline.php, (2) tracking_list_coaches_column parameter to main/mySpace/index.php, (3) tutor_name parameter to main/create_course/add_course.php, the (4) Referer HTTP header to index.php, and the (5) X-Fowarded-For HTTP header to main/admin/class_list.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Inyección SQL en Dokeos 1.8.4, permite a atacantes remotos ejecutar secuencias de comandos SQL de su elección a través de los parámetros (1) id de whoisonline.php, (2)tracking_list_coaches_column de main/mySpace/index.php, (3)tutor_name del main/create_course/add_course.php, (4) Referer HTTP header de index.php y (5)X-Fowarded-For HTTP header de main/admin/class_list.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"644AA10C-A929-4844-8A7A-B4C14FA88744"}]}]}],"references":[{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28974","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3687","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488314/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27792","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019425","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0587","source":"cve@mitre.org"},{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488314/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0851","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to inscription.php, (2) courseCode parameter to main/calendar/myagenda.php, (3) category parameter to main/admin/course_category.php, (4) message parameter to main/admin/session_list.php in a show_message action, and (5) an avatar image to main/auth/profile.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Dokeos 1.8.4 permite a atacantes remotos ejecutar secuencias de comandos web o HTML mediante (1) el parámetro username de inscription.php, (2) el parámetro courseCode de main/calendar/myagenda.php, (3) el parámetro category de main/admin/course_category.php, (4) el parámetro message de main/admin/session_list.php en una acción show_message, y (5) una imagen de avatar de main/auth/profile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:e-learning_system:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"36BEAF3A-3979-4DC3-9107-A1E0EBE45CC7"}]}]}],"references":[{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28974","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3687","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488314/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27792","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019425","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0587","source":"cve@mitre.org"},{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488314/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0852","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which triggers a NULL pointer dereference."},{"lang":"es","value":"freeSSHd 1.2 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete SSH2_MSG_NEWKEYS al puerto TCP 22, lo que dispara una referencia a un puntero NULL (nulo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freesshd:freesshd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"35785F54-71B1-4F23-868D-0CE789D40B1D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/freesshdnull-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488363/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27845","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0591","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/freesshdnull-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488363/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0853","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.  NOTE: this issue might be site-specific.  If so, it should not be included in CVE."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el componente com_detail para Joomla! y Mambo, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id en el archivo index.php. NOTA: este problema puede ser específico del sitio. Si es así, no debe incluirse en CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_detail:*:*:*:*:*:*:*:*","matchCriteriaId":"4D2690FE-46CA-487A-8515-64B324B95E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_detail:*:*:*:*:*:*:*:*","matchCriteriaId":"89DB95EF-B63D-4052-8455-45FF96AE2EFA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3677","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488278/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488325/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27853","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488278/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488325/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0854","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL del componente com_salesrep de Joomla! and Mambo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro rid en una acción showrep en el index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_salesrep:*:*:*:*:*:*:*:*","matchCriteriaId":"B96AD293-A20C-4DB9-B224-8A8296EA5342"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_salesrep:*:*:*:*:*:*:*:*","matchCriteriaId":"C02B07C3-0C93-49E3-9F7D-7FF33605475F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488267/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40619","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488267/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0855","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Facile Forms (com_facileforms) de Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_facileforms:*:*:*:*:*:*:*:*","matchCriteriaId":"68227E90-5FB3-443C-9946-20BF0A1464B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_facileforms:*:*:*:*:*:*:*:*","matchCriteriaId":"9BFBF6F8-EE52-4B95-97D8-4D2A178FC728"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3679","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27880","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0856","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) iframe.php and (2) print.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en e-Vision CMS 2.02 permiten a atacantes remotos    ejecutar comandos SQL de su elección a través del parámetro id a (1) iframe.php y (2) print.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-vision:e-vision_cms:2.02:*:*:*:*:*:*:*","matchCriteriaId":"4D78FF92-950C-463C-BB20-DDB9F9C33A60"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0857","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de WoltLab Burning Board 3.0.3 PL 1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro sortOrder en la página PMList.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:3.0.3_pl1:*:*:*:*:*:*:*","matchCriteriaId":"7E034AD6-11C8-4245-BCC3-FBA8A7D4EAEE"}]}]}],"references":[{"url":"http://secunia.com/advisories/29020","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3680","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488345/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27885","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488345/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0858","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer en el Plugin Visnetic anti-virus en Kerio MailServer anterior a la v6.5.0, podría permitir a atacantes remotos ejecutar código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4.2","matchCriteriaId":"B58A0E98-988A-470B-9B1D-F0AE1743ED8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:visnetic:visnetic_antivirus_plug-in_for_mail_server:*:*:*:*:*:*:*:*","matchCriteriaId":"F3C16C34-2AF7-436D-9E2E-60FD50147799"}]}]}],"references":[{"url":"http://secunia.com/advisories/29021","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27868","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019428","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0859","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption."},{"lang":"es","value":"Vulnerabilidad sin especificar en Kerio MailServer vesiones anteriores a 6.5.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados relacionados con la decodificación de una entrada UUencoded, lo cual dispara una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B7D26DCD-85B0-4908-A414-119862437C28"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8B58BAF1-CF68-4F8C-8BCD-FF3C015FE72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B9C9084-B518-44F2-9F65-032A644FEC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F55CFA68-E07E-46CE-87F6-00AE9A268CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"58ECCE69-EAB9-427E-8922-F463E184C9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"20E50A0F-7AFF-4F17-8833-839DDBD538C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"9063B23B-E585-41E4-98FF-DF18602C6E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"6CB993B9-0CF5-4E71-A612-F3033F4F202B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2B079207-FAF3-4FE2-B420-342440958C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"8A82C0BC-50D5-4FAC-A654-387B49CB7047"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"9BC1748E-32F0-4144-A597-89E8B8705FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.5:*:*:*:*:*:*:*","matchCriteriaId":"39C92F3B-23E3-4978-89AA-FC17B8EDF580"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.6:*:*:*:*:*:*:*","matchCriteriaId":"7B1FA201-CBCF-4D61-9848-F661A16EBEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.7:*:*:*:*:*:*:*","matchCriteriaId":"0A2154DF-2306-4E8B-B78A-1BF20E697157"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.8:*:*:*:*:*:*:*","matchCriteriaId":"79C4389A-4BF4-4C38-8FF5-72B92548EFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.9:*:*:*:*:*:*:*","matchCriteriaId":"67230E76-2C30-4038-BC5B-BAC02EDDFAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.10:*:*:*:*:*:*:*","matchCriteriaId":"FAEA1EB3-5F4F-40D6-833C-225AC348760D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EC515E75-119E-4CB9-985E-00E6A9349178"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"937A6092-48C9-4721-B069-0B46D3520E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F38A0AAC-ACA8-44D3-B36A-741D01BE166F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E9AC0D46-2096-4006-8FED-A67AFCE2ED98"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A8ADC9C-F49D-4CD2-B6DC-63552480646F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"991FC66F-B9F7-4E67-9D90-E56DE26FD85F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B88E6A90-0433-493B-9E68-D0809F8A7B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A75F2BE-8D1A-4022-823E-16BA42DA02DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC7A299-CD9D-4159-A6C5-40F72DA158B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"45649E00-F6B4-4782-A989-D9D5E20FA75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"178E27A1-7A68-4298-96D8-540E0E77CDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F30234CC-D865-4F1D-A4C7-FE6D050D2158"}]}]}],"references":[{"url":"http://secunia.com/advisories/29021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27868","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019428","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0860","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs."},{"lang":"es","value":"Vulnerabilidad no especificada en el Plugin AVG en Kerio MailServer anterior 6.5.0, tiene un impacto no especificado a través de vetores de ataque remotos relacionados con las DACLs vacías."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:avg_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"935F6D7F-5AE2-4429-B510-3BA881444F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4.2","matchCriteriaId":"B58A0E98-988A-470B-9B1D-F0AE1743ED8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27868","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019428","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0861","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script or HTML via an h_SearchString sub-parameter in the PreSetFields parameter of an EditDocument action."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en leg/Main.nsf en IBM Lotus Quickplace 7.0, permite a atacantes remotos inyectar  secuencias de comandos web o HTML de su elección a través del sub-parámetro h_SearchString en el parámetro PreSetFields en una acción EditDocument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickplace:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FBC1600E-0797-41FF-BC08-705BB5A101D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29025","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5AP0B2KNFM.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27871","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019432","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0841/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5AP0B2KNFM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0841/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0862","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (ECL) protection."},{"lang":"es","value":"IBM Lotus Notes 6.0, 6.5, 7.0, y 8.0 firma un applet sin asignación cuando un usuario reenvía un correo a otro, que permite a atacantes remotos asistidos por el usuario evitar la protección Execution Control List (ECL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"692E295E-E650-42D5-AF7A-D6276C3D76E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29031","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21257250","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0600/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21257250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0600/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0863","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks."},{"lang":"es","value":"BEA WebLogic Server y WebLogic Express 9.0 y 9.1 muestra el servicio web WSDL y políticas de seguridad, esto permite a atacantes remotos obtener información sensible y potencialmente lanzar ataques adicionales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:express:*:*:*:*:*","matchCriteriaId":"0EDB38AA-CAC4-4C89-8484-7C2A75F8038F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:express:*:*:*:*:*","matchCriteriaId":"17280B97-D499-434E-BD89-FD348E9E2E0C"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/260","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019455","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0864","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Admin Tools en BEA WebLogic Portal 8.1 SP3 al SP6, involuntariamente puede eliminar los derechos para páginas cuando un administrador edita la etiqueta de definición de página, que podría permitir a atacantes remotos evitar las restricciones de acceso planeadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:8.1_sp6:*:*:*:*:*:*:*","matchCriteriaId":"087F8B60-E48C-4DC8-8EBC-EFB614ACBDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"BF066EF7-82D6-42A4-97AC-C3A71A042152"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"22257A94-EB2C-432E-A9ED-224D8AB9527F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019454","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0865","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en BEA WebLogic Portal 8.1 hasta SP6 permite a atacantes remotos evitar los derechos para las instancias de un portlet WLP flotable mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:8.1_sp6:*:*:*:*:*:*:*","matchCriteriaId":"087F8B60-E48C-4DC8-8EBC-EFB614ACBDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D2C72232-7D9A-43BF-9018-6D51EA35BF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"BCAB0CC7-DB7F-401B-8E9C-E3A33BD18F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"EA0A3F3F-F960-4418-B520-3AECCA0DDB43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"5DA2A8E6-1BEF-430B-85FD-AFFA44B891CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"BF066EF7-82D6-42A4-97AC-C3A71A042152"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"22257A94-EB2C-432E-A9ED-224D8AB9527F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019451","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0866","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecucion de comandos en sitios cruzados en BEA WebLogic Workshop, que permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una acción URI no válida que no está manejada correctamente por el NetUI en el flujo de la página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AD6F9694-259F-4631-BC93-B1136F08E77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"77624161-7740-4162-9C83-C0DFEA2BBCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"E785D039-3426-4C1F-BBA8-7C6D32FB141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"D4B2A474-B6C4-47B6-8B20-8722A8C25238"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019441","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0611","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0867","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web script or HTML via the name parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo portal/server.pt en BEA AquaLogic Interaction versión 6.1 hasta MP1 y Plumtree Foundation versión 6.0 hasta SP1, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:aqualogic_interaction:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6B192BE8-A0E9-4B58-9A67-C4718F417648"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:aqualogic_interaction:6.1:mp1:*:*:*:*:*:*","matchCriteriaId":"8D9474FD-20A1-4AB2-A426-54BB9ECF8C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:plumtree_foundation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A87594C6-5FCD-430F-A21F-06332FF24EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:plumtree_foundation:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E91F5AD2-0177-44FD-88D1-6831AC33E7C6"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR06-12.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488346/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019440","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0610","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR06-12.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488346/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0868","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en BEA WebLogic Portal 10.0 y 9.2  desde el Maintenance Pack 1, que permite a usuarios autentificados remotamente inyectar secuencias de comandos web o HTML de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DD825443-FB5F-466A-B059-3546D8F71411"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*","matchCriteriaId":"B04835B2-7FE9-462B-B989-4031D43C9670"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019452","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0869","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a \"framework defined request parameter\" when using WebLogic Workshop or Apache Beehive NetUI framework with page flows."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en BEA WebLogic Workshop de 8.1 a SP6 y Workshop para WebLogic de 9.0 a 10.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de un \"parámetro de petición de marco de trabajo definido\" cuando se utiliza WebLogic Workshop o el marco de trabajo Apache Beehive NetUI con flujos de página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AD6F9694-259F-4631-BC93-B1136F08E77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"77624161-7740-4162-9C83-C0DFEA2BBCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"E785D039-3426-4C1F-BBA8-7C6D32FB141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"D4B2A474-B6C4-47B6-8B20-8722A8C25238"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_workshop:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"2FDBD7AF-51AC-48B9-A465-0C13B9230EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic:10.0:*:*:*:*:*:*:*","matchCriteriaId":"66DD06E2-B659-4927-9DEA-8B88CA56D75D"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/263","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019438","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0611","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0870","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session."},{"lang":"es","value":"BEA WebLogic Portal 10.0 y 9.2  desde el Maintenance Pack 2, bajo determinadas circunstancias, puede redireccionar a un usuario desde la URI https:// de la consola del  Portal de Administración a una URI http://, que permitiría a atacantes remotos capturar la sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"25C589AB-11C3-45E4-9E12-6151C9B2A5F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:9.2:mp2:*:*:*:*:*:*","matchCriteriaId":"0C4F2325-0D65-4324-9B71-C6118D79D568"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DD825443-FB5F-466A-B059-3546D8F71411"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*","matchCriteriaId":"B04835B2-7FE9-462B-B989-4031D43C9670"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/264","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019442","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0871","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en  Now SMS/MMS Gateway 2007.06.27 y versiones anteriores permiten a atacantes remotos ejecutar código de su elección a través de (1) una contraseña larga en una cabecera Authorization de un servicio HTTP o (2) un paquete largo de un servicio SMPP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:now:sms_mms_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"2007.06.27","matchCriteriaId":"729D0DD1-FDB8-4490-9F31-86AD27E9F0A1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/nowsmsz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488365/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27896","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0615","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5695","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/nowsmsz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488365/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0872","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SmarterTools SmarterMail Enterprise 4.3 permite a atacantes remotos inyectar web script o HTML de su elección a través de un atributo STYLE de un elemento en el campo Subject de un mensaje de correo eletrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail_enterprise:4.3:*:*:*:*:*:*:*","matchCriteriaId":"0DC88D82-2727-4828-8A5B-74113ACF0D68"}]}]}],"references":[{"url":"http://es.geocities.com/jplopezy/SmarterMailXSS.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3686","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488313/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27878","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019461","source":"cve@mitre.org"},{"url":"http://es.geocities.com/jplopezy/SmarterMailXSS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488313/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0873","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo jlmZone Classifieds para XOOPS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción Adsview."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jlmzone:classifieds:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73BD9315-EE4A-4A6D-A7A2-3DFCD6BEC477"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488357/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27895","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5158","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488357/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0874","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information was found while analyzing this vulnerability.\r\n\r\nhttp://www.securityfocus.com/bid/27905","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo eEmpregos de XOOPS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:eempregos_module:*:*:*:*:*:*:*:*","matchCriteriaId":"815C4350-29F1-4110-851D-33155AD3A814"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3682","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488358/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27905","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5157","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488358/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0875","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service (service hang or termination) via unspecified vectors related to \"unexpected data.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Hitachi EUR Print Manager, y productos relacionado Client and Local Server, 5-06 hasta 05-06-/B y 05-08 permite a atacantes remotos provocar una denegación de servicio (cuelgue o terminación del servicio) a través de vectores no especificados relacionados con \"datos inesperados\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:eur_print_manager:05-06:*:*:*:*:*:*:*","matchCriteriaId":"D2973063-3A26-4774-AC03-6679C551445F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:eur_print_manager:05-06-_b:*:*:*:*:*:*:*","matchCriteriaId":"DB3EA6A0-F557-4D71-9F0B-556493548D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:eur_print_manager:05-08:*:*:*:*:*:*:*","matchCriteriaId":"8105B03A-21AE-4947-A57A-F16122AA6140"}]}]}],"references":[{"url":"http://secunia.com/advisories/29030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS08-001_e/index-e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27899","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS08-001_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0876","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remote attackers to cause a denial of service (service outage) via \"invalid data.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el servicio de mensajería SEWB3 de Hitachi SEWB3/PLATFORM y SEWB3/MI-PLATFORM 01-00 hasta 02-14-/A permite a atacantes remotos provocar una denegación de servicio (parada del servicio) a través de \"datos inválidos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-00:*:hi-ux_we2\\(3050_risc\\):*:*:*:*:*","matchCriteriaId":"685A07A0-06BB-4F28-95EB-95B50D79BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-00:*:hi-ux_we2\\(3050_sisc\\):*:*:*:*:*","matchCriteriaId":"736BEFF9-851D-4BD9-8E58-D390695BE1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-00:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"CD70E6C2-04C4-4391-A1FA-CA2692E35373"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-00:*:hp-ux\\(9.x\\):*:*:*:*:*","matchCriteriaId":"76A8DBF9-452F-472E-994D-15760531423A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-04:*:solaris:*:*:*:*:*","matchCriteriaId":"3B429AD2-B10F-46A6-940F-7686F3736599"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-06-_a:*:hi-ux_we2\\(3050_risc\\):*:*:*:*:*","matchCriteriaId":"B9AF09FE-2E8E-4A2E-B041-FBEF37AD6D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-06-_a:*:hi-ux_we2\\(3050_sisc\\):*:*:*:*:*","matchCriteriaId":"A070754C-4E53-4318-8803-C3B43C3501DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-07:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"967515C2-1B45-4CFA-B539-6E8B29CA7B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-10:*:aix:*:*:*:*:*","matchCriteriaId":"48A34EBE-F89E-4163-B164-997C3AA6F098"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-10-_a:*:hp-ux\\(9.x\\):*:*:*:*:*","matchCriteriaId":"103AD6E9-004D-4AE8-8843-48B49B98D9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-11:*:hp-ux\\(10.x\\):*:*:*:*:*","matchCriteriaId":"2151A7B1-A211-4BDE-8B00-E564D472BDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-16-_b:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"7F7882A6-4CE9-4160-9594-C2902025EDE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-16-_b:*:hp-ux\\(10.x\\):*:*:*:*:*","matchCriteriaId":"EAECB25A-AB1E-40CC-96D0-826C683EEF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-16-_c:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"B58E9AA9-B4A9-4EE9-8930-64432F639437"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-16-_f:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"EF7FEE1A-AD45-41E7-BB9A-A881FD0AA235"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-16-_f:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"EF4152B3-A94A-422E-9DA6-261DD6BC2C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-17:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"90E1F887-1F9C-4B9E-85D6-8BC42F4CA089"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:01-17-_f:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"CC489BDE-1B8D-4350-A4DD-16DA519D05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:02-13:*:aix:*:*:*:*:*","matchCriteriaId":"D92CB596-5C4C-495A-A13D-34051641FD66"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_mi-platform:02-14-_a:*:solaris:*:*:*:*:*","matchCriteriaId":"D525C50D-665B-4A5F-910D-F701D4BDEDEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-00:*:hi-ux_we2\\(3050_risc\\):*:*:*:*:*","matchCriteriaId":"DB62EC67-6A1C-4CC7-A97D-CEA7F601C3F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-00:*:hi-ux_we2\\(3050_sisc\\):*:*:*:*:*","matchCriteriaId":"95C5F47E-153B-446C-8979-78EB29400C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-00:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"AE0CD7E6-FF8D-4B5D-BF41-62BF47F60884"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-00:*:hp-ux\\(9.x\\):*:*:*:*:*","matchCriteriaId":"43ED5EA8-8537-4C93-B023-F5F116FC8A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-04:*:solaris:*:*:*:*:*","matchCriteriaId":"226D352E-E199-422E-AF3B-CBC344173203"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-06:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"977B7972-2E98-4CEB-80CD-92E2C2A7FAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-06-_a:*:hi-ux_we2\\(3050_risc\\):*:*:*:*:*","matchCriteriaId":"E9F0005D-810A-4FD7-9BF9-A0B055C31BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-06-_a:*:hi-ux_we2\\(3050_sisc\\):*:*:*:*:*","matchCriteriaId":"84ED6B87-6E5B-42EB-A6A9-E933D8941767"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-10:*:aix:*:*:*:*:*","matchCriteriaId":"0BA3C583-2552-47E2-AC8E-82063458C6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-10-_a:*:hp-ux\\(9.x\\):*:*:*:*:*","matchCriteriaId":"2C839C0A-8C6A-421A-AA6D-14D753FDD4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-11:*:hp-ux\\(10.x\\):*:*:*:*:*","matchCriteriaId":"53B0FD08-97B0-4114-955D-E2C600A17CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-16-_b:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"8259B3E5-58A4-494C-BCCF-A6113F0EF9E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-16-_b:*:hp-ux\\(10.x\\):*:*:*:*:*","matchCriteriaId":"3E0DC216-83A8-4B18-AF20-C50346E22A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-16-_c:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"EBB067FD-4EBE-41C5-90ED-37A60490DFE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-16-_f:*:hi-ux_we2\\(3050rx\\):*:*:*:*:*","matchCriteriaId":"D832FE9E-BE18-412B-8DF9-D402001B82C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-16-_f:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"9EB9412E-8859-43AB-860B-4C413DB15CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-17:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"E12A7C3E-2C0F-4869-B2AE-8BA03F31367B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:01-17-_f:*:hp-ux\\(11.x\\):*:*:*:*:*","matchCriteriaId":"75C22CD2-9D57-4AD1-9903-15A95ACD38CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:02-13:*:aix:*:*:*:*:*","matchCriteriaId":"C693D3EC-1764-4089-9C19-1FF873F87B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:sewb3_platform:02-14-_a:*:solaris:*:*:*:*:*","matchCriteriaId":"D379286F-12F9-4712-BCFB-E9B2F53BC9A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS08-002_e/index-e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27900","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS08-002_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0877","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"During analysis additional information was found for this vulnerability.\r\n\r\nhttp://www.securityfocus.com/bid/27876/info","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) frontend, (2) set_frontend, (3) jz_path, (4) theme, and (5) set_theme parameters to (a) index.php; the frontend, theme, and (6) language parameters to (b) ajax_request.php; the jz_path parameter to (c) slim.php; the frontend, theme, and jz_path parameters to (d) popup.php; the (13) PATH_INFO to index.php and (e) slim.php; and the (14) query parameter in a playlistedit action and (15) siteNewsData parameter in a sitenews action to (f) popup.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Jinzora Media Jukebox 2.7.5 permiten a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) frontend, (2) set_frontend, (3) jz_path, (4) theme, y (5) set_theme de (a) index.php; los parámetros frontend, theme, y (6) language de (b) ajax_request.php; el parámetro jz_path de (c) slim.php; los parámetros frontend, theme, y jz_path de (d) popup.php; el parámetro (13) PATH_INFO de index.php y (e) slim.php; y el parámetro (14) query de una acción playlistedit y el parámetro(15) siteNewsData de una acción sitenews de (f) popup.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:media_jukebox:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD6A3A-4EF7-478B-873B-9C513925C3B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/29023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3683","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488326/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488326/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0878","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information is available at the following securityfocus bid link: http://www.securityfocus.com/bid/27902/info","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo MyAnnonces 1.7 y versiones anteriores para RunCMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:myannonces:*:*:*:*:*:*:*:*","matchCriteriaId":"0F0104E3-1F81-47F3-956C-127EB39FB9A7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27902","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0619","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40861","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5156","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0879","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules.php del módulo Web_Links para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción viewlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:web_links_module:*:*:*:*:*:*:*:*","matchCriteriaId":"41DAFCAB-B236-41EB-A844-4825CE587E7A"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/126697/PHP-Nuke-Web-Links-SQL-Injection.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3684","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488356/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27894","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/67463","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40862","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/126697/PHP-Nuke-Web-Links-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488356/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/67463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0880","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the page_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules.php del módulo EasyContent para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:easycontent_module:*:*:*:*:*:*:*:*","matchCriteriaId":"99B9DEC9-3D0A-4AB4-9FF2-CBC09DFBC4E4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27897","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5155","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0881","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"More information is available at the following securityfocus bid link: http://www.securityfocus.com/bid/27909/info","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid parameter in an okullar action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules.php del módulo Okul 1.0 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro okulid en una acción okullar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:okul_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2876DC3-5F56-4E03-8611-DEC779209EAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27909","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5159","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0882","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de doble liberación en la función process_browse_data en CUPS versión 1.3.5, permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) y posiblemente ejecutar código arbitrario por medio de paquetes Browse UDP diseñados hacia el puerto cupsd (631/udp), relacionado con una manipulación no especificada de una impresora remota. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cups:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3EB2B6EB-FA2F-46FA-8086-F025722693A4"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29120","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29251","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29634","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L2656","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1530","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:050","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:051","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0157.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27906","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019473","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0623","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433758","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00792.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00832.html","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00792.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0883","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling."},{"lang":"es","value":"acroread en Adobe Acrobat Reader 8.1.2 permite a usuarios locales sobrescribir ficheros de su elección mediante un ataque de enlaces simbólicos en ficheros temporales relativos al manejo de certificados SSL."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: \nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0883\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-03-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.1:*:*:*:*:*:*:*","matchCriteriaId":"34074FA4-A9C8-430D-98EB-A0A880E2DF67"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"A876EFC5-50DC-4A6A-A9F2-24D8AC773E7D"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"D71E02A6-5F83-46EC-88C1-687E6EB88F5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10:*:enterprise_desktop:*:*:*:*:*","matchCriteriaId":"DC55429E-B607-402D-A491-0EFE7D522F2A"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"C69ED2AB-9E0D-43B3-90F3-E2E10A5B1773"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_desktop:*:*:*:*:*","matchCriteriaId":"C4F119BA-1FCA-41DF-B834-62F14CA8816E"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.0:*:ppc:*:*:*:*:*","matchCriteriaId":"96F0EAC3-9AC5-4575-80BB-00485619AE51"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"CF733F56-9793-4C72-AB61-3A4AA9C468C7"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"3FBC151E-D478-43FA-B5BD-1D8B25C703E9"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.1:*:ppc:*:*:*:*:*","matchCriteriaId":"84B05DB5-3BF9-4576-970B-A1701FC369AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.1:*:x86:*:*:*:*:*","matchCriteriaId":"F15CDDE2-BA9E-4B8D-8B01-21494360290E"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:10.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"5B367EE1-EB53-4DC6-B154-FFA99060DA47"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux_desktop:10:*:*:*:*:*:*:*","matchCriteriaId":"0CD7A1DA-1ABA-45B1-A067-3953C761177E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31352","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1","source":"cve@mitre.org"},{"url":"http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-02.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-26.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0641.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28091","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019539","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0765/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2289","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40987","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0765/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0884","sourceIdentifier":"secalert@redhat.com","published":"2008-04-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux (RHEL) 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable permissions for the /etc/pam.d/system-auth-ac file, which allows local users to gain privileges by modifying this file."},{"lang":"es","value":"La función Replace en la secuencia de comandos capp-lspp-config de los paquetes (1) lspp-eal4-config-ibm y (2) capp-lspp-eal4-config-hp versiones anteriores 0.65-2 de Red Hat Enterprise Linux (RHEL) 5 utiliza lstat en vez de stat para determinar los permisos del fichero /etc/pam.d/system-auth, conduciendo al cambio de los permisos world-writable para el fichero /etc/pam.d/system-auth-ac, lo cual permite a usuarios locales conseguir privilegios modificando este fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2008-0193.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29642","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1019740","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28557","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435442","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41584","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1019740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0886","sourceIdentifier":"secalert@redhat.com","published":"2008-02-29T19:44:00.000","lastModified":"2023-11-07T02:01:49.563","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0882.  Reason: This candidate is a duplicate of CVE-2008-0882.  Notes: All CVE users should reference CVE-2008-0882 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0887","sourceIdentifier":"secalert@redhat.com","published":"2008-04-06T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859."},{"lang":"es","value":"El salvapantallas de gnome antes de 2.22.1, se cae durante un intento de desbloqueo, cuando está habilitado un servidor de autentificación remota debido a una parada de la red, lo que permite a atacantes físicamente próximos obtener acceso a la sesión bloqueada, un problema relacionado con CVE-2007-1859."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:screensaver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.20.0","matchCriteriaId":"239CF522-5275-48F2-854F-A6A3E8B21A55"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/35531","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0197.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29595","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29606","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29742","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29759","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30967","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32691","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-12.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1019749","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:132","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0218.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28575","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-669-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435773","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10813","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00163.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00206.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/35531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-669-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00206.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0888","sourceIdentifier":"secalert@redhat.com","published":"2008-03-17T21:44:00.000","lastModified":"2025-05-01T15:33:00.470","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data."},{"lang":"es","value":"La macro NEEDBITS en la función inflate_dynamic en el archivo inflate.c para unzip puede ser invocada usando búferes no válidos, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de vectores desconocidos que activan una liberación de datos no inicializados o previamente liberados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.3","matchCriteriaId":"04C722E3-68B2-4E05-BFE0-1F2139151165"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unzip_project:unzip:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0","matchCriteriaId":"35DEE12E-4FBC-4641-A3A2-88E5EF0B1F32"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29392","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29406","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29415","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29427","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29432","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29440","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29495","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29681","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/30535","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/31204","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-06.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0116","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1522","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:068","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0196.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489967/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28288","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1019634","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-589-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0913/references","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"secalert@redhat.com","tags":["Vendor Advisory","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41246","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2317","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/29681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/30535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","Broken Link"]},{"url":"http://secunia.com/advisories/31204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0196.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1019634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-589-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0913/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-0889","sourceIdentifier":"secalert@redhat.com","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script."},{"lang":"es","value":"Red Hat Directory Server 8.0, ejecutado en Red Hat Enterprise Linux, usa permisos no seguros para la secuencia de comandos redhat-idm-console lo que permite a usuarios locales ejecutar código de su elección mediante la modificación de la secuencia de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4CECD221-9715-4ECD-88E5-3252EFCA784F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:el4:*:*:*:*:*:*","matchCriteriaId":"26DC5453-A850-4BC8-A9B2-272F9993FD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*","matchCriteriaId":"B06C0597-0694-4B0F-BD82-19E2C6B63095"}]}]}],"references":[{"url":"http://secunia.com/advisories/29482","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0191.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28327","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019677","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0191.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0890","sourceIdentifier":"secalert@redhat.com","published":"2008-03-12T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors."},{"lang":"es","value":"Red Hat Directory Server 7.1 anterior al SP4 usa permisos inseguros para ciertos directorios, lo que permite a usuarios locales modificar archivos JAR y ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:*:sp3:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"70B1EBD6-ACA5-41E7-B1C8-BA8D13F44E82"}]}]}],"references":[{"url":"http://secunia.com/advisories/29350","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0173.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28204","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019577","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41152","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0173.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0891","sourceIdentifier":"secalert@redhat.com","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de doble liberación en OpenSSL 0.9.8f y 0.9.8g, cuando las extensiones de nombre de servidor TLS están habilitadas, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete manipulado. NOTA: Algunos de estos detalles se han obtenido de fuentes de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"}]}]}],"references":[{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30405","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30825","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30852","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30868","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31228","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31288","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"secalert@redhat.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/661475","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29405","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020121","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42666","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"secalert@redhat.com"},{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/661475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0892","sourceIdentifier":"secalert@redhat.com","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands."},{"lang":"es","value":"Las secuencias de comandos CGI Replication Monitor (monitor de duplicación) en Red Hat Administration Server, como lo usan Red Hat Directory Server 8.0 EL4 y EL5, permite a atacantes remotos ejecutar comandos de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"ABADB3F7-AD65-4E62-BEA5-782539911B6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:directory_server:8:el4:*:*:*:*:*:*","matchCriteriaId":"1C61BA21-1EC5-412D-83E1-AF939169D702"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:directory_server:8:el5:*:*:*:*:*:*","matchCriteriaId":"E4C96B58-E323-4609-BC88-5D5BFA9D3E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_directory_server:*:*:*:*:*:*:*:*","matchCriteriaId":"A6DB2E5A-9A1C-4A29-BCB7-A7E8C661D394"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29761","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29826","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30114","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0199.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0201.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28802","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019856","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1449/references","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437301","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41840","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0199.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1449/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-0893","sourceIdentifier":"secalert@redhat.com","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions."},{"lang":"es","value":"Red Hat Administration Server, tal como se utiliza por Red Hat Directory Server 8.0 EL4 and EL5, no restringe el acceso correctamente a scripts CGI, lo cual permite a atacantes remotos llevar a cabo acciones administrativas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:el4:*:*:*:*:*:*","matchCriteriaId":"26DC5453-A850-4BC8-A9B2-272F9993FD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*","matchCriteriaId":"B06C0597-0694-4B0F-BD82-19E2C6B63095"}]}]}],"references":[{"url":"http://secunia.com/advisories/29761","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29826","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0201.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28802","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019857","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437320","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41843","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0894","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file, a related issue to CVE-2008-0420."},{"lang":"es","value":"Apple Safari puede permitir a atacantes remotos obtener contenidos de memoria potencialmente sensible o provocar una denegación de servicio (caída) a través de un fichero manipulado (1) bitmap (BMP) o (2) GIF, un caso relacionado con CVE-2008-0420."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3685","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488264/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27947","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019487","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408076","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488264/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0895","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers."},{"lang":"es","value":"BEA WebLogic Server y WebLogic Express de 6.1 a 10.0 permite a atacantes remotos evitar la autentificación para servlets de aplicación a través de cabeceras de petición modificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*","matchCriteriaId":"C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*","matchCriteriaId":"16E3F943-D920-4C0A-8545-5CF7D792011F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B46A3EBE-B268-427E-AAB5-62DDF255F1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9429D939-FCC4-4BA7-90C4-BBEECE7309D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0653ACAC-B0D9-4381-AB23-11D24852A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/265","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019443","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0896","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions."},{"lang":"es","value":"BEA WebLogic Portal 10.0 y de 9.2 a MP1, cuando un administrador elimina una instancia única de un portlet de contenido, elimina las políticas de derechos para otros portlets de contenido, lo que permite a atacantes evitar las restricciones de acceso previstas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"25C589AB-11C3-45E4-9E12-6151C9B2A5F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DD825443-FB5F-466A-B059-3546D8F71411"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/266","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019453","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0897","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without \"receive\" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions."},{"lang":"es","value":"Vulnerabilidad no especificada en BEA WebLogic Server de 9.0 a 10.0 permite a usuarios autentificados remotamente sin los permisos \"receive (recibir)\" evitar las restricciones de acceso previstas y recibir mensajes de un JMS Topic independiente o un destino de miembro Distributed Topic seguro, relacionados a subscripciones duraderas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.9},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"321BC193-5FBF-4F25-996D-1FE74779F34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/267","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019444","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0898","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected distributed queues."},{"lang":"es","value":"La característica de cola distribuida en JMS de BEA WebLogic Server de 9.0 a 10.0, en ciertas configuraciones, no manipula correctamente cuando un cliente no puede enviar un mensaje a un miembro de una cola distribuida, lo que permite a usuarios autentificados remotamente evitar las restricciones de acceso previstas para colas distribuidas protegidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*","matchCriteriaId":"98F632B9-0572-4563-BA41-262628A5CB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E758AF8B-B47F-4CE7-B73E-3638180C9D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"6AC47FAA-AB16-4728-AE0B-C0C90861D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*","matchCriteriaId":"10E284B8-4EBE-459D-87BA-401BC2AE29C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*","matchCriteriaId":"05E4CCAC-8E99-49DE-8E90-18F5C03BBC94"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*","matchCriteriaId":"A585B339-442B-4408-9A44-E872FF4406A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"321BC193-5FBF-4F25-996D-1FE74779F34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp2:*:*:*:*:*:*","matchCriteriaId":"E23EB6FE-EA07-426F-9781-87630BC76FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/268","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019447","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0899","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la Administration Console de BEA WebLogic Server y Express  de 9.0 a 10.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de URLs modificados que no se manipulan correctamente por Unexpected Exception Page (Excepción de Página no Esperada)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"321BC193-5FBF-4F25-996D-1FE74779F34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/269","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019448","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0900","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en BEA WebLogic Server y Express de 8.1 SP4 a SP6, de 9.2 a MP1 y 10.0 permite a usuarios autentificados remotamente secuestrar sesiones web a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0653ACAC-B0D9-4381-AB23-11D24852A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*","matchCriteriaId":"107C2FC6-BC60-4817-8A21-14C81DA6DEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*","matchCriteriaId":"24E0BA12-971C-4DC4-8ED2-9B7DCD6390E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp6:express:*:*:*:*:*","matchCriteriaId":"715D1DD4-A736-4F55-9369-71C232AB14CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"321BC193-5FBF-4F25-996D-1FE74779F34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_express:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"FF045092-39D3-4598-99DA-D1B35F0DDC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_express:10.0:*:*:*:*:*:*:*","matchCriteriaId":"61231482-5CC5-4C23-AA48-11E24FB6C94F"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/270","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019439","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0901","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not."},{"lang":"es","value":"BEA WebLogic Server y Express de 7.0 a 10.0 permite a atacantes remotos llevar a cabo ataques para adivinar contraseñas mediante fuerza bruta, incluso cuando se ha activado el cierre de cuenta, a través de URLs manipulados que indican si la contraseña supuesta es buena o no."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*","matchCriteriaId":"16E3F943-D920-4C0A-8545-5CF7D792011F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B46A3EBE-B268-427E-AAB5-62DDF255F1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9429D939-FCC4-4BA7-90C4-BBEECE7309D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0653ACAC-B0D9-4381-AB23-11D24852A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"321BC193-5FBF-4F25-996D-1FE74779F34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp2:*:*:*:*:*:*","matchCriteriaId":"E23EB6FE-EA07-426F-9781-87630BC76FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_server:10.0_mp1:*:*:*:*:*:*:*","matchCriteriaId":"5D4B4A86-A381-4DB1-AA9D-57DBEC2466CF"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/271","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/avisos/s21sec-040-en.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488686/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019449","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/avisos/s21sec-040-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488686/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0902","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples.  NOTE: this might be the same issue as CVE-2007-2694."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BEA WebLogic Server y Express de 6.1 a 10.0 MP1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de muestras no especificadas. NOTA: podría ser la misma vulnerabilidad que CVE-2007-2694."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*","matchCriteriaId":"C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*","matchCriteriaId":"16E3F943-D920-4C0A-8545-5CF7D792011F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B46A3EBE-B268-427E-AAB5-62DDF255F1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9429D939-FCC4-4BA7-90C4-BBEECE7309D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0653ACAC-B0D9-4381-AB23-11D24852A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*","matchCriteriaId":"98F632B9-0572-4563-BA41-262628A5CB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*","matchCriteriaId":"A585B339-442B-4408-9A44-E872FF4406A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_server:10.0_mp1:*:*:*:*:*:*:*","matchCriteriaId":"5D4B4A86-A381-4DB1-AA9D-57DBEC2466CF"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/273","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0612/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0903","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL."},{"lang":"es","value":"Vulnerabilidad no especificada en el plugin BEA WebLogic Server y Express proxy, como se distribuyó antes de Noviembre de 2007 y antes de 9.2 MP3 y 10.0 MP2, permite a atacantes remotos provocar una denegación de servicio (caída del servidor web) a través de un URL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_express:*:mp2:*:*:*:*:*:*","versionEndIncluding":"10.0","matchCriteriaId":"82FCBBDB-7E42-47AF-9D65-EF664E9A6EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_server:*:mp2:*:*:*:*:*:*","versionEndIncluding":"10.0","matchCriteriaId":"B28CB76C-94CF-4A58-B11A-2108FB602B41"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/275","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019450","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0608/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0608/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0904","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL."},{"lang":"es","value":"Vulnerabilidad sin especificar en el servlet download de BEA Plumtree Collaboration de 4.1 a SP2 y AquaLogic Interaction de 4.2 a MP1 permite a atacantes remotos leer archivos de su elección a través de un URL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:aqualogic_interaction:4.2:*:*:*:*:*:*:*","matchCriteriaId":"17544871-59C8-4B2D-A46F-C04DDE72C88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:aqualogic_interaction:4.2_mp1:*:*:*:*:*:*:*","matchCriteriaId":"A6D053AE-4DC2-4CF9-A948-ED2548859F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:plumtree_collaboration:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD330C8-04CF-4119-AEE6-7F6F2BC856FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:plumtree_collaboration:4.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"37A22B27-E12F-48D6-8722-8F14C4FDCDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:plumtree_collaboration:4.1_sp2:*:*:*:*:*:*:*","matchCriteriaId":"40976EFA-958E-4BFB-AF3A-99A2749C221B"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/276","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/41881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28991","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019437","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0607/references","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/41881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0607/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0905","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en globsy_edit.php de Globsy 1.0 permite a atacantes remotos leer archivos de su elección a través de .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:meo:globsy:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A06F8264-DA3A-4E8D-A76E-91CB858A9D77"}]}]}],"references":[{"url":"http://secunia.com/advisories/29047","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27910","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0906","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Docum de PHP-Nuke permite a atacantes remotos    ejecutar comandos SQL de su elección a través del parámetro artid en una operación viewarticle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:php-nuke_module_docum:*:*:*:*:*:*:*:*","matchCriteriaId":"08529B4A-3414-436C-B507-E458823AB120"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27912","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40720","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0907","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Inhalt para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:inhalt_module:*:*:*:*:*:*:*:*","matchCriteriaId":"89C779CA-F3C0-424F-8F04-FE26CC28F233"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0908","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browse.asp de Schoolwires Academic Portal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro c. NOTA: el origen de estos datos es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schoolwires:academic_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"CFEEAE6C-2984-4EE8-9C43-EA190DB89100"}]}]}],"references":[{"url":"http://secunia.com/advisories/29034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0909","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en browse.asp de Schoolwires Academic Portal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro c. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schoolwires:academic_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"CFEEAE6C-2984-4EE8-9C43-EA190DB89100"}]}]}],"references":[{"url":"http://secunia.com/advisories/29034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27903","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0910","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted RAR archive.  NOTE: this might be related to CVE-2008-0792."},{"lang":"es","value":"Múltiples productos antivirus de F-Secure, incluyendo Internet Security de 2006 a 2008, Anti-Virus de 2006 a 2008, F-Secure Protection Service y otros, permiten a atacantes remotos evitar las detecciones del malware a través de un archivo RAR manipulado. NOTA: podría estar relacionado con CVE-2008-0792."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*","matchCriteriaId":"9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*","matchCriteriaId":"1106DE08-DE9A-488B-8C5D-28E353CDEEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:second_edition:*:*:*:*:*:*","matchCriteriaId":"C8609465-1436-4F50-B7EE-0DF9DA7AA4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"B47EC4EB-268A-4BB9-820D-AA3DB8D1A655"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.03:*:*:*:*:*:*:*","matchCriteriaId":"85517B0C-8C1A-4306-8466-2C138AD0709A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:6.04:*:*:*:*:*:*:*","matchCriteriaId":"F0657810-2CB9-4887-8AA2-3E0927937820"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.01:*:*:*:*:*:*:*","matchCriteriaId":"59FA86FF-A114-44EB-884A-766BEE17FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5CD2B3CE-78CC-4BE7-80EB-25675371B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:4.65:*:*:*:*:*:*:*","matchCriteriaId":"04102648-2C1C-420E-BBF7-5C948F0EE479"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:5.44:*:*:*:*:*:*:*","matchCriteriaId":"9848B969-A0A4-4F38-9C6C-79395EFF8254"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.00:*:*:*:*:*:*:*","matchCriteriaId":"605AB820-8069-430A-89AC-3E0122EB3B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*","matchCriteriaId":"7D9F9488-8DA8-48A9-9A11-B5E0D7AA9A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*","matchCriteriaId":"E77AB622-B899-46FD-9DFA-1964B57A9458"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*","matchCriteriaId":"F8DB2DD7-86DC-440A-B8D9-0A84034E808F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C788A5AB-C847-476C-9767-C6711F2D4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"3972C7F1-8B78-4A5D-8A75-C6CA01E997DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:second_edition:*:*:*:*:*:*","matchCriteriaId":"C0DCADF7-B044-4646-B215-52685609ED49"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"08ED9945-DC9F-4F4F-B2EB-B63986BCC7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*","versionEndIncluding":"3.00","matchCriteriaId":"A097721B-9CBA-4E2D-B5E5-B7AAD938E61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*","versionEndIncluding":"7.00","matchCriteriaId":"604EFE23-657D-406F-81BF-17BA524E8423"}]}]}],"references":[{"url":"http://secunia.com/advisories/28919","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2008-1.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019405","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019412","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019413","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0544/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2008-1.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0544/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0911","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en productdetails.php de iScripts MultiCart 2.0 permite a usuarios autentificados remotamente ejecutar comandos SQL de su elección a través del parámetro productid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iscripts:multicart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"11DD19C8-AC74-4BDE-A9AA-75129FAD5039"}]}]}],"references":[{"url":"http://secunia.com/advisories/29018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27916","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0912","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10.0.1.3415 and probably other products, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long (1) username, (2) version, or (3) remote ID.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en mlsrv10.exe de Sybase MobiLink 10.0.1.3629 y anteriores, del modo que se usa en SQL Anywhere Developer Edition 10.0.1.3415 y probablemente otros productos, permiten a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída del demonio) a través de 1) nombre de usuario, (2) versión o (3) ID remota largos. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:mobilink:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.1.3629","matchCriteriaId":"9980ED6E-53D3-43C1-9E2D-1F022D264132"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:sql_anywhere:10.0.1.3415:*:developer_edition:*:*:*:*:*","matchCriteriaId":"4E90A41A-DBC6-4CF2-AFE7-F81AE0055FBC"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/mobilinkhof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29045","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488409/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490259/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27914","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019469","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0626","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/mobilinkhof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488409/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490259/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0913","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Invision Power Board (IPB or IP.Board) 2.3.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de BBCodes manipulados en un contexto no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BE147DA9-9482-45E4-BDBC-6BBFF1D5B902"}]}]}],"references":[{"url":"http://forums.invisionpower.com/index.php?showtopic=269961","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://forums.invisionpower.com/index.php?showtopic=269961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0914","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el servidor Mediation de IPdiva SSL VPN Server 2.2 antes de 2.2.8.84 y 2.3 antes de 2.3.2.14 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipdiva:ipdiva:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8FD0D7B1-A897-4655-BF4F-5A7C5F0D340A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipdiva:ipdiva:2.3:*:*:*:*:*:*:*","matchCriteriaId":"0540F193-E67F-4622-B37B-407893F1EFEC"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3690","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488143/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488204/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27800","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488143/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488204/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0915","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value."},{"lang":"es","value":"El servidor Mediation de IPdiva SSL VPN Server 2.2 antes de 2.2.8.84 y 2.3 antes de 2.3.2.14 almacena el número de intentos de validación permitidos en una cookie, lo que facilita a atacantes remotos llevar a cabo ataques de fuerza bruta manipulando el valor de la cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipdiva:ipdiva:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.8","matchCriteriaId":"AAD2596F-8ECD-422F-B5EF-8C236901C76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipdiva:ipdiva:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.2","matchCriteriaId":"F2DF56B1-8165-4652-A643-F94B248FF1B6"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060314.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3692","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488133/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27800","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488133/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0916","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha component for Joomla!  allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a viewcategory action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id en una acción viewcategory a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:highwood_design:hwdvideoshare:*:*:*:*:*:*:*:*","matchCriteriaId":"0D6B079E-B18E-441B-84CB-27B8408C6552"}]}]}],"references":[{"url":"http://secunia.com/advisories/29044","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40711","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5160","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0917","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi (aka Quotes of the Day) 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier, Simple Vote 1.1 and earlier, and Com Vote 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Tor World Tor Search 1.1 y anteriores, I-Navigator 4.0, Mobile Frontier 2.1 y anteriores, Diary.cgi (también conocido como Quotes of the Day) 1.5 y anteriores, Tor News 1.21 y anteriores, Simple BBS 1.3 y anteriores, Interactive BBS 1.3 y anteriores, Tor Board 1.1 y anteriores, Simple Vote 1.1 y anteriores y Com Vote 1.2 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:com_vote:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF561E7A-A089-4958-BC48-73E3B354054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:i-navigator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2F49A46A-71DD-4490-A456-EC14F19AF0F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:interactive_bbs:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EBFDCC17-F51F-4322-9EC7-2B434C920282"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:mobile_frontier:2.1:*:*:*:*:*:*:*","matchCriteriaId":"00BA5058-E737-442A-97AC-446E0453FDB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:quotes_of_the_day:1.5:*:*:*:*:*:*:*","matchCriteriaId":"79ABA747-8BC3-4830-B4AD-5946062C8A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:simple_bbs:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C65B72C5-9C2A-49B4-9292-09B58DD7496E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:simple_vote:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8264C7DB-A1D9-4072-A252-3E089521442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_board:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3D7C4FD4-9402-479C-9986-6C34362F056F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_news:1.21:*:*:*:*:*:*:*","matchCriteriaId":"7187B8E0-ACBE-4543-9A5C-BCB68114483C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_search:1.1:*:*:*:*:*:*:*","matchCriteriaId":"015AB9BB-7EAC-4E22-9331-C72D409D8D0B"}]}]}],"references":[{"url":"http://download.torworld.com/bug/20080221.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2354593414/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27919","source":"cve@mitre.org"},{"url":"http://download.torworld.com/bug/20080221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/jp/JVN%2354593414/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0918","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to getfile.php, a different vector than CVE-2008-0839. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en includes/count_dl_or_link.inc.php del componente astatsPRO (com_astatspro) 1.0.1 para Joomla! permite a atacantes remotos ejecutar secuencias SQL de su elección a través del parámetro id a getfile.php, un vector distinto al de CVE-2008-0839. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astats:astatspro:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF6F90F1-3483-4B91-93E5-4899B2FD797D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_astatspro:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AACEB713-9858-464F-B493-2C0D2C1810B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29008","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0919","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en session/login.php de Open Source Security Information Management (OSSIM) 0.9.9 rc5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro dest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.1alpha:*:*:*:*:*:*:*","matchCriteriaId":"3E16B158-5048-4D9F-9F96-2F90F18D2A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.2alpha:*:*:*:*:*:*:*","matchCriteriaId":"F8678F48-C6AE-489A-ABE4-8973AE2D0528"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.3.1alpha:*:*:*:*:*:*:*","matchCriteriaId":"38F4DD65-7304-45D8-8048-A9623BCBB345"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.3alpha:*:*:*:*:*:*:*","matchCriteriaId":"3BFB7817-CD04-4B87-94EA-4E983B90C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7700800E-4233-4A2E-931A-27D422038FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2C722C33-FFA9-4504-BA32-E7E0B6CB7770"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B7426A1A-B848-46AA-B7F2-78EE6F6A1D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D224F4BC-B496-4420-8CD8-1087762A45D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"01BB57BA-688C-4861-B5DA-BCC5BFDDAD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.7:*:*:*:*:*:*:*","matchCriteriaId":"F345620C-70EA-4C12-B57F-427803C6D329"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"02B939C5-8B8E-4149-BC95-0008ADDADE71"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.8:*:*:*:*:*:*:*","matchCriteriaId":"FF81D931-FB46-4E89-902B-056D46236499"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9:*:*:*:*:*:*:*","matchCriteriaId":"3D34B5AC-409B-458A-A362-8D40910B24AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"D7C765AF-0EE7-47DE-90B2-EC55F4068701"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"5B6F4F4C-5928-4C4C-909D-D14CC7666C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"748B9952-16AD-4155-8DC3-3C6B6CD3D1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"5F129E24-D979-4A88-957D-7223D0F6ED50"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B0700773-C01B-4E64-8400-24E7607B039C"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"010A54AA-FE4D-416F-963B-3284F3A9E1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"39C8C663-73F0-4BB1-B9EB-C05DC8E90727"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"DCFCE184-8BC0-40C6-B98E-F9D5D16AE1A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"90F91742-AC5A-4C42-B164-F7529D5C1807"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.9_rc2:*:*:*:*:*:*:*","matchCriteriaId":"FE9B4F5B-0C6F-4C17-A595-32B00C2FD5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.9_rc3:*:*:*:*:*:*:*","matchCriteriaId":"0D397078-33C0-418E-9E41-4F41B22AA043"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:0.9.9_rc4:*:*:*:*:*:*:*","matchCriteriaId":"C291BD54-5213-435C-A8D2-28C028145917"}]}]}],"references":[{"url":"http://osvdb.org/42006","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29046","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3689","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488450/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488617/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488697/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27929","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/5171","source":"cve@mitre.org"},{"url":"http://osvdb.org/42006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488450/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488617/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488697/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/5171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0920","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en port/modifyportform.php de Open Source Security Information Management (OSSIM) 0.9.9 rc5 permite a usuarios auntentificados remotamente ejecutar comandos SQL de su elección a través del parámetro portname, lo que no es manipulado correctamente por una expresión regular de validación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_security_information_management:os-sim:*:rc5:*:*:*:*:*:*","versionEndIncluding":"0.9.9","matchCriteriaId":"ED9C7171-DB09-4BA8-934D-E54383B5A45C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29046","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3689","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488450/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488617/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27927","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5171","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488450/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488617/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0921","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo news.php en beContent versión 0.3.1, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:becontent:becontent:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"75E0B056-FF4A-41F0-86FB-566A48855240"}]}]}],"references":[{"url":"http://secunia.com/advisories/29061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27928","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5170","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0922","sourceIdentifier":"cve@mitre.org","published":"2008-02-22T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Manuales 0.1 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción viewdownload a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:manuales:0.1:*:*:*:*:*:*:*","matchCriteriaId":"D03B0876-5BFD-44FE-9657-221CA6983FDD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27933","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5168","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0923","sourceIdentifier":"cve@mitre.org","published":"2008-02-26T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing .. (dot dot) sequences, which bypasses the protection mechanism, as demonstrated using a \"%c0%2e%c0%2e\" string."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la característica de Archivos Compartidos de VMWare ACE 1.0.2 y 2.0.2, Player 1.0.4 y 2.0.2, y Workstation 5.5.4 y 6.0.2 permite a usuarios de SO invitados leer y escribir archivos de su elección en el SO anfitrión a través de una cadena multibyte que produce una cadena de caracteres ancha que contiene secuencias de .. (punto punto), lo que evita el mecanismo de protección, como se demostró usando una cadena \"%c0%2e%c0%2e\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9D22E40D-C362-49FD-924C-262A64555934"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A48CEB4-5864-4A0F-B14C-CFE4699C3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.1_build_19317:*:*:*:*:*:*:*","matchCriteriaId":"7764D48A-2D43-413F-9214-AE754DDCF68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"65DD6966-72EA-4C4D-BC90-B0D534834BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBFC9B7A-8A40-467B-9102-EE5259EC4D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AD0FE7C5-2C46-4B59-9242-A03B986C07DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29117","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3700","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488725/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019493","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0679","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40837","source":"cve@mitre.org"},{"url":"http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060457.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488725/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0924","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"During analysis the following related page was found.\r\n\r\nhttp://www.zerodayinitiative.com/advisories/ZDI-08-013/","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field."},{"lang":"es","value":"El desbordamiento del búfer en la región stack de la memoria en la función DoLBURPRequest en libnldap en ndsd en Novell eDirectory versión 8.7.3.9 y anterior, y versión 8.8.1 y anterior en la serie 8.8.x, permite que los atacantes remotos causen una denegación de servicio (bloque del demonio o consumo de CPU)  o ejecute un código arbitrario por medio de un largo mensaje de petición extendida delRequest LDAP, que probablemente incluya un campo largo Distinguished Name (DN)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7","versionEndIncluding":"8.7.3.9","matchCriteriaId":"2934CE3D-592D-4D6E-B008-65261AA7AF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8","versionEndIncluding":"8.8.1","matchCriteriaId":"B6B93861-635A-4260-9620-098585FABDCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490117/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28434","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019692","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0987/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-013/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/411/3382120_f.SAL_Public.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490117/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0987/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-013/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/411/3382120_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0925","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within \"error messages of the HTTP stack.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el interfaz iMonitor de Novell eDirectory 8.7.3.x anterior a  8.7.3 sp10, y 8.8.x anterior a 8.8.2 ftf2; permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de parámetros no especificados que se utilizan en los \"mensajes de error de la pila HTTP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*","matchCriteriaId":"6658D417-B666-400A-89BD-C74A84E4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*","matchCriteriaId":"A5286A48-E77F-4D5F-8B8C-D701B9DC1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A18AD730-2782-4BC3-8B2E-D35D29EBC699"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*","matchCriteriaId":"36699D76-090F-4ED3-9C02-A09EB68F5CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*","matchCriteriaId":"9775274E-21A5-466E-B792-54F53ECCD8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*","matchCriteriaId":"1CE0CDA6-DFF5-45F7-A641-180AED4F074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B490E624-9A8E-4AD2-9B6F-BFDA431CD77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*","matchCriteriaId":"4747583B-125F-423F-863F-5CBC4CB46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*","matchCriteriaId":"F2AD4208-DD3E-427E-ADF8-5C59C59EDC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*","matchCriteriaId":"BEE923F3-28AB-4C29-A920-F363F415CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"F4DB1610-FDB3-432C-8AD7-C667DCAA29D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*","matchCriteriaId":"30ABEC83-326A-4888-BFC7-3A40BC2E2CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*","matchCriteriaId":"762D694C-7942-4265-BF99-1DE9F3BC9128"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*","matchCriteriaId":"20851E26-511C-41B2-A3BF-4E4A083A73F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*","matchCriteriaId":"57A9A26E-0FB6-4766-9C7E-CB82551BC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*","matchCriteriaId":"7CD4DD41-AD88-4AB2-BAC2-2B59AECA16BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30748","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020321","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3460217&sliceId=1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29782","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1863/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43151","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3460217&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1863/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0926","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected."},{"lang":"es","value":"La interfaz SOAP en el módulo eMBox en Novell eDirectory versión 8.7.3.9 y anteriores, y versiones 8.8.x anteriores a 8.8.2, depende de la autenticación del lado del cliente, que permite a los atacantes remotos omitir la autenticación por medio de peticiones para los URI /SOAP y causar una denegación de servicio (apagado del demonio) o leer archivos arbitrarios. NOTA: más tarde se reportó que la versión 8.7.3.10 (también se conoce como versión 8.7.3 SP10) también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7.3.10","matchCriteriaId":"ABCFB5DD-D24D-4C3B-9188-C264D9AC0B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*","matchCriteriaId":"D27AAA23-21E1-4C35-97FA-7F038E2C8923"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"}]}]}],"references":[{"url":"http://secunia.com/advisories/29527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491621/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28441","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019691","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0988/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41426","source":"cve@mitre.org"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/876/3866911_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491621/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0988/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/876/3866911_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0927","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values.  NOTE: this might be similar to CVE-2008-1777."},{"lang":"es","value":"El archivo dhost.exe en Novell eDirectory versión 8.7.3 anterior a las versiones sp10 y 8.8.2 permite a los atacantes remotos provocar una denegación de servicio (consumo de CPU) por medio de una petición HTTP con (1) varios encabezados de conexión o (2) un encabezado de conexión con varios valores separados por comas. NOTA: esta vulnerabilidad podría ser similar a CVE-2008-1777."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7.3.9","matchCriteriaId":"5B50CE5C-1108-405A-8FE9-C12542F774A2"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8","versionEndExcluding":"8.8.2","matchCriteriaId":"4CC8C64B-A5E6-4022-B55A-F2E80AB3D8F3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2000:*:*:*:*:*:*:*","matchCriteriaId":"4EA9CCBA-D930-4EC2-9C51-C44B52A2B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:*:*:*:*:*:*:*","matchCriteriaId":"CADAB8CD-9972-4535-9963-80A3EDB57925"}]}]}],"references":[{"url":"http://secunia.com/advisories/29805","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491622/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28757","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019836","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1217/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41787","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5547","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491622/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1217/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0928","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine."},{"lang":"es","value":"Qemu 0.9.1 y versiones anteriores no realiza comprobaciones de rango para leer o escribir peticiones en dispositivos bloqueados, lo cual permite a usuarios host invitados con privilegios de root acceder a memoria de su elección y escapar de la máquina virtual.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC82CD08-F151-489C-9BC4-50C8C9583718"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"75D04344-C6CE-40D5-97ED-42B3DBA1AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"71CC4D45-66BE-4C23-B541-DD4604ACC9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2E41058D-380C-4098-96FB-53CC158ED420"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BFE12226-C599-45A2-8CFD-32753F94204B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C06F8832-B32F-4352-B048-A4ADCE85373E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5278C685-988B-40D7-9AE9-B4FB8AF41C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C6C6B20B-2E5D-4D25-885A-227A4BE5EEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F2FF7251-031D-4A9B-9AF0-1FFE556456D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D942D17-1AA9-4D5A-8F5E-0F4F762522D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5A2519BF-5F68-4096-8DE2-2C7BCF7200D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6B00BD71-2AE5-47BA-999A-7E89590B86C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CA6701A9-78CC-49D0-A40A-CB1C774400AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"40B5A7F2-B5B2-46CF-BBD0-AB986A8E55EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DBEBD56F-EFBC-4620-A77C-E215A7AFDAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5C45EA44-ECD1-40A7-89CE-D770BDC9DB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"83088B0F-A6F8-4F47-99C0-09FEA234272F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"17E948D4-6C1A-43D2-B128-1A728FD61703"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"6470915C-CA3C-42CA-B69B-0FC40A33D02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"759505BA-6F19-4BAE-8297-D8F30EEC8D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0A98CC34-2DB7-46CD-AA60-A7C08DDF22B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E424B63B-DCD8-4209-A4CB-84C1EDF5B255"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F9576AA2-2FDD-4063-8D84-DE8DB063AC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"544368B2-37BE-41DD-8DC2-F04B6A394696"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"14A6B570-09CE-4AFF-AC8C-51F37FC79811"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"EC5670FB-B9EA-4B9C-BB7B-575494F12CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"27650033-1C9F-4175-A26F-D9082A36F079"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F1D35E0-2033-4ADE-9ADA-3B45996B53B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6205775B-4A83-498F-A60E-54473F5D5704"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=debian-security&m=120343592917055&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29081","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35031","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1799","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:162","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00830.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00850.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28001","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433560","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9706","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00852.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00857.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00900.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00957.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=debian-security&m=120343592917055&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00830.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00850.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00852.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00900.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00957.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0929","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T22:44:00.000","lastModified":"2023-11-07T02:01:50.257","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0930","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"w_editeur.c de XWine 1.0.1 para Debian GNU/Linux permite a usuarios locales sobreescribir o imprimir ficheros de su elección a través de un ataque symlink en el fichero temporal temporaire. \r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freshmeat:xwine:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77EBC954-F4AA-499F-811B-C15D6B59E988"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29452","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1526","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28049","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0931","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file."},{"lang":"es","value":"w_export.c de XWine 1.0.1 en Debian GNU/Linux establece permisos no seguros (0666) para /etc/wine/config, lo cual puede permitir a usuarios locales ejecutar comandos de su elección o provocar una denegación de servicio modificando el fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xwine:xwine:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9AFFE14E-D476-4224-A3AE-253A594B5E54"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29452","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1526","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28369","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0932","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter."},{"lang":"es","value":"El archivo diatheke.pl en SWORD Project Diatheke versión 1.5.9 y anteriores, permite a los atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres shell en el parámetro range."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*","matchCriteriaId":"5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*","matchCriteriaId":"AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*","matchCriteriaId":"5EACF214-FA27-44FF-A431-927AB79377A1"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*","matchCriteriaId":"E2B58895-0E2A-4466-9CB2-0083349A83B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*","matchCriteriaId":"03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*","matchCriteriaId":"2311919C-7864-469D-B0F6-9B11D8D0A1C3"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*","matchCriteriaId":"19876495-4C1A-487C-955A-C5AA46362A1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*","matchCriteriaId":"D75286DD-50BC-4B72-8AC8-E20730124DC2"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*","matchCriteriaId":"1998C972-497E-4916-B50E-FB32303EEA8E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*","matchCriteriaId":"A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*","matchCriteriaId":"6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"08E90AFA-C262-46D0-B60E-26B67C9602D5"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:r1:*:*:*:*:*:*","matchCriteriaId":"E3047C7D-E114-4CF2-A42E-A660C8DB22AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_sword_project:diatheke_front_end:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.9","matchCriteriaId":"CE74DCC9-9A81-48D6-A0AC-72DDD360F5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_sword_project:sword:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.9","matchCriteriaId":"8EB8909D-8B4C-4075-9788-71E5FB1F8970"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29181","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-06.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27874","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27987","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0670/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433723","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00806.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0670/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=433723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00806.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0933","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service (panic) via unspecified vectors related to kcpc_unbind and kcpc_restore."},{"lang":"es","value":"Múltiples condiciones de carrera en el subsistema CPU Performance Counters (cpc) del núcleo de Sun Solaris 10 permiten a usuarios locales provocar una denegación de servicio (kernel panic) a través de vectores no especificados relacionados con kcpc_unbind y kcpc_restore."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86_sparc:*:*:*:*:*","matchCriteriaId":"AD642D32-1E04-45B3-B799-0440E9EEED9D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231466-1","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/27941","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019490","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0642","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5476","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231466-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/27941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0934","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo modules.php de NukeC 2.1 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id_catg en una acción ViewCatg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nukec:nukec:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FEFAC54D-367E-42B4-A631-E7889D3FFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:nukec_module:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A2045E7-832F-454C-95CB-D00A7A5B199B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27937","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5172","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0935","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attackers to execute arbitrary code via a long argument to the ExecuteRequest method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control Novell iPrint Control ActiveX de ienipp.ocx en Novell iPrint Client antes de 4.34 permite a atacantes remotos ejecutar código de su elección a través de un argumento largo al método ExecuteRequest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*","versionEndIncluding":"4.32","matchCriteriaId":"01725CB1-8E95-40EB-BF15-5547E3E3353E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:4.26:*:*:*:*:*:*:*","matchCriteriaId":"56815A72-7CEA-41D2-9823-6E2A56F28A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:4.32:*:*:*:*:*:*:*","matchCriteriaId":"619AF5D5-6E9D-4B9A-A499-7203B2AAAF22"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=prBBH4JpImA~","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/27994","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27939","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019489","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0639","source":"cve@mitre.org"},{"url":"http://download.novell.com/Download?buildid=prBBH4JpImA~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/27994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0936","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo the Prayer List (prayerlist) 1.04 para XOOPS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:prayer_list_module:1.04:*:*:*:*:*:*:*","matchCriteriaId":"BCD1268D-B0F8-44AC-A571-4B31467FFE6F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120362358919492&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29063","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27934","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120362358919492&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0937","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo the Tiny Event (tinyevent) 1.01 para XOOPS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción print, un vector distinto a CVE-2007-1811."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyevent:tinyevent:1.01:*:*:*:*:*:*:*","matchCriteriaId":"6480BA7E-7C01-4797-B595-8036E8078F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:tiny_event_module:1.01:*:*:*:*:*:*:*","matchCriteriaId":"8D84268B-AB44-45F3-87DD-0B4DB8CC912D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120361694407815&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27931","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120361694407815&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0938","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126."},{"lang":"es","value":"Vulnerabilidad no especificada en el marco de trabajo de traza dinámica (DTrace) de Sun Solaris 10 permite a usuarios locales con privilegios PRIV_DTRACE_USER o PRIV_DTRACE_PROC obtener información sensible del núcleo a través de vectores no especificados, una vulnerabilidad distinta a CVE-2007-4126."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29037","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231803-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27942","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019483","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0640","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231803-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0939","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el plugin wppa.php de WP Photo Album (WPPA) antes de 1.1 para WordPress permiten a atacantes remotos ejecutar comandos SQL de su elección a través de 1) el parámetro photo a index.php, utilizado por la función wppa_photo_name; o (2) el parámetro album a index.php, utilizado por la función wppa_album_name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:photo_album_plugin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6135531F-0346-434B-9CA6-925CD572AD29"}]}]}],"references":[{"url":"http://me.mywebsight.ws/web/wppa/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28988","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3693","source":"cve@mitre.org"},{"url":"http://weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488290","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27832","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0586","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40599","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5135","source":"cve@mitre.org"},{"url":"http://me.mywebsight.ws/web/wppa/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0940","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CVE-2007-0407."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Plain Black WebGUI antes de 7.4.24 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección cuando se crea un nombre de usuario, una vulnerabilidad distinta a CVE-2007-0407."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F9C9099E-5BF3-432E-8F8C-0E30E6E88B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2697D591-553B-4183-B890-98A1C3FDE80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"2228E124-980F-4AF6-B7C5-7173B921487B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"371C0312-D203-4E7D-9A36-57770222E459"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"87A79FC3-A1AB-4F04-9D00-97801A5183D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"C79D2667-ED6E-457A-B1AF-69B8D027F0AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6DACB4C4-8F7C-476B-B6C3-70C85B2CE8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"415DEEE6-1F80-43EB-9C4D-F215A4475B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"7D6747BF-11E1-41BD-A73E-9151740CA6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"D61CFDF7-8438-4201-A53D-7CDD7CEC7A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"8E44D6BD-50D7-4A90-9C5F-647FA31F4C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"AB48AEDC-1F37-4CEE-98AC-1D0509FC00CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C2FEC347-08CC-4C60-94AB-23A3CE1971CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"3A9A1984-91C9-4A57-88DD-673AE49C1250"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.15:*:*:*:*:*:*:*","matchCriteriaId":"7262F96B-A760-45EA-AD88-CF7E42D0085F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"49227629-92BD-49A1-9C51-90DF0B40365C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"2363AA20-0467-414E-B7A1-64F6B9867B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"AB553BEA-4120-431D-A946-F990C931E102"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.23:*:*:*:*:*:*:*","matchCriteriaId":"9AA5199D-E38A-4114-A2C5-B8AC5A9DDB9D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.plainblack.com/getwebgui/advisories/webgui-7_4_24-stable-released","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27869","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.plainblack.com/getwebgui/advisories/webgui-7_4_24-stable-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-0941","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 permite a usuarios autentificados remotamente inyectar secuencias de comandos web o HTML de su elección a través de un evento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"982E379E-6784-4914-9B39-7398BD46F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"67AEF538-9296-498D-AC7C-869C65D6F91C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29053","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3694","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488430/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488430/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0942","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en GradebookStuScores.asp de Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro GrdBk."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"982E379E-6784-4914-9B39-7398BD46F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"67AEF538-9296-498D-AC7C-869C65D6F91C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488456/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40847","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488456/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0943","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 permiten a atacantes remotos ejecutar comandos SQL de su elección a través (1) del parámetro FC a Comments.asp, o del parámetro Term a (2) Labels.asp o (3) ClassList.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"982E379E-6784-4914-9B39-7398BD46F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"67AEF538-9296-498D-AC7C-869C65D6F91C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29053","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3696","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488428/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40757","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488428/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0944","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero."},{"lang":"es","value":"Ipswitch Instant Messaging (IM) 2.0.8.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (referencia nula y caída de aplicación) a través de un campo de versión cuyo valor es cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:instant_messaging:2.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C6599CE6-018F-4FDA-80C7-573605DBA609"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ipsimene-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487748/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27677","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.altervista.org/adv/ipsimene-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487748/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0945","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función de inicio de sesión de IM Server (también conocido como IMserve or IMserver) en Ipswitch Instant Messaging (IM) 2.0.8.1 y anteriores permite a usuarios autentificados remotamente provocar una denegación de servicio (caída del demonio) y posiblemente tener otros impactos sin identificar a través de especificadores de formato de cadena en un campo de una dirección IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8.1","matchCriteriaId":"37107C28-9B74-4C67-8A0D-E746647C34FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:instant_messaging:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8.1","matchCriteriaId":"063110BD-F65A-48F8-BD75-54CA1E370D24"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ipsimene-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ipsimene.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487748/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27677","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ipsimene-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ipsimene.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487748/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0946","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IM Server (también conocido como IMserve o IMserver) de Ipswitch Instant Messaging (IM) 2.0.8.1 y anteriores permite a usuarios autentificados remotamente crear archivos vacíos de su elección a través de .. (punto punto) en el campo receptor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8.1","matchCriteriaId":"37107C28-9B74-4C67-8A0D-E746647C34FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:instant_messaging:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8.1","matchCriteriaId":"063110BD-F65A-48F8-BD75-54CA1E370D24"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ipsimene-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/ipsimene.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487748/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27677","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ipsimene-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/ipsimene.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487748/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0947","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors."},{"lang":"es","value":"Desbordamiento de búfer en la librería RPC utilizada por libgssrpc y kadmind en MIT Kerberos 5 (krb5) de 1.4 a 1.6.3 permite a atacantes remotos ejecutar código de su elección disparando una gran cantidad de descriptores de archivo abierto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*","matchCriteriaId":"52F0EECF-7787-442B-9888-D22F7D36C3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"567406CA-58D8-453E-B36E-6D1D2EFC8EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7830E03F-A813-4E35-893E-BF27395CEFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7764411E-C056-4696-822E-235F2620FAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4DD315AE-868B-4061-BF01-CDBF59B02499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B639DD5F-71C7-4D9B-BA5C-51CAF64140B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2B904DCE-D59F-45C7-A814-DE42CF02792D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9957FE9E-1E89-4C27-852C-44F866A1834E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2C382DAA-68D2-4DD9-BE29-8EEB0BAF1A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"73BB258E-51CF-4D12-836B-BCEA587A3F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F81DE01C-BA3B-40B4-BD85-17692F0AF8A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"40563B3B-4AC7-4419-AB6A-72BDE484DB66"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29428","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29435","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29438","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29457","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29516","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29663","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-31.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3752","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0112","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1524","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/374121","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0164.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489762/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489784/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489883/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28302","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019631","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-587-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41273","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10984","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-31.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/374121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489762/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489784/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489883/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-587-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0948","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors."},{"lang":"es","value":"Un desbordamiento de búfer en la biblioteca RPC (lib/rpc/rpc_dtablesize.c) utilizada por libgssrpc y kadmind en MIT Kerberos 5 (krb5) versión 1.2.2, y probablemente otras versiones anteriores a 1.3, cuando se ejecuta en sistemas cuyo unistd.h no define la macro FD_SETSIZE, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario mediante la activación de un gran número de descriptores de archivos abiertos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B363A4-BB7A-48A2-AE6B-BD2DDD46E7CB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29423","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29428","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30535","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3752","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/374121","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0181.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489762/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489784/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28302","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019631","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41274","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9209","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/374121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489762/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489784/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0922/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1102/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0949","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"IBM links require software support sign in to access information.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM Informix Dynamic Server (IDS) 7.x hasta 11.x permite a atacantes remotos ganar privilegios mediante paquetes de petición de conexión mal formados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:7.3:*:*:*:*:*:*:*","matchCriteriaId":"9390D1EA-DB0A-40BB-BBA5-061DA17A2745"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:7.31.xd8:*:*:*:*:*:*:*","matchCriteriaId":"14BA6483-76C0-4BE2-AE99-97B1AD555704"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:7.31.xd9:*:*:*:*:*:*:*","matchCriteriaId":"E3D9652D-4383-40EE-950F-67794F4D52C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.3:*:*:*:*:*:*:*","matchCriteriaId":"7A565470-B4A3-40FA-B691-1DB484FEC764"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*","matchCriteriaId":"58A9F81C-C618-435D-9912-0E61EAB02560"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*","matchCriteriaId":"CE9B0C17-2D85-4729-85EF-2F5C750BF51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*","matchCriteriaId":"910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*","matchCriteriaId":"1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*","matchCriteriaId":"B2CD7B84-2861-4542-8A08-C668065C8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*","matchCriteriaId":"E64D85E2-AA7E-4704-A2FA-BD69744423CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.xd8:*:*:*:*:*:*:*","matchCriteriaId":"EBFD2127-16EA-49F1-9023-F22A68F4EE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40_xc7:*:*:*:*:*:*:*","matchCriteriaId":"3480BAB7-4D5B-44F2-8E8D-0062DD205D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"1716E256-B186-442F-8C4C-9305E0953081"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*","matchCriteriaId":"C7931542-8DB8-4BC3-A319-9352EBC62158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4:*:*:*:*:*:*:*","matchCriteriaId":"795E3755-48D3-4A70-9AFB-1B3B9F3B8F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc7w1:*:*:*:*:*:*:*","matchCriteriaId":"1061A1A7-579D-4222-A31D-F34F8A11EA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*","matchCriteriaId":"539DE4E7-8531-43E8-AE75-178BFC4324F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/29272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55224&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55225&apar=only","source":"cve@mitre.org"},{"url":"http://www.informixmag.com/content/view/11143/27/","source":"cve@mitre.org"},{"url":"http://www.informixmag.com/content/view/11144/27/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28198","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0860","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55224&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IC55225&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.informixmag.com/content/view/11143/27/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.informixmag.com/content/view/11144/27/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0951","sourceIdentifier":"cret@cert.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions."},{"lang":"es","value":"Windows Vista de Microsoft no refuerza correctamente el valor del registro NoDriveTypeAutoRun, lo que permite a atacantes remotos ayudados por el usuario y probablemente a atacantes que están próximos físicamente, ejecutar código de su elección introduciendo 1) un dispositivo CD-ROM o (2) un dispositivo U3-enabled USB que contenga un filesystem con un archivo Autorun.inf y posiblemente otros vectores relacionados con acciones (a) AutoRun y (b) AutoPlay."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:business:*:*:*:*:*","matchCriteriaId":"BDDE7F1B-768A-4A53-8765-E48DEB0EF3D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"8FF0D88B-821D-4E45-A2EC-5279B9190356"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:home_basic:*:*:*:*:*","matchCriteriaId":"1A9CAA2B-947F-47E8-A032-DFA2D1F05B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:home_premium:*:*:*:*:*","matchCriteriaId":"4C17A747-EF5C-4852-89F7-DE45DDD6EB60"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*","matchCriteriaId":"F0257B7A-A8D1-4AC9-98C8-324B5B810877"}]}]}],"references":[{"url":"http://secunia.com/advisories/29458","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/889747","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28360","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020446","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/0954/references","source":"cret@cert.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-038","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41349","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/29458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/889747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0954/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0952","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, posee un impacto y vectores remotos de ataque desconocidos. Vulnerabilidad distinta de CVE-2007-5608 y CVE-2008-0953."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/190939","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29535","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42834","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/190939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0953","sourceIdentifier":"cret@cert.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953."},{"lang":"es","value":"Vulnerabilidad sin especificar en ciertos controles ActiveX en HPISDataManager.dll en HP Instant Support anterior a 1.0.0.24, posee un impacto y vectores remotos de ataque desconocidos. Vulnerabilidad distinta de CVE-2007-5608 yCVE-2008-0952."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.23","matchCriteriaId":"0D31BE8F-9701-4D9A-B58D-E44E5691E7B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30516","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/998779","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29533","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020165","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42851","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/998779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1740/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0955","sourceIdentifier":"cret@cert.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el Control Creative Software AutoUpdate Engine ActiveX en CTSUEng.ocx, permite a atacantes remotos ejecutar código de su elección a través de un  valor largo en \"CacheFolder\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:creative:creative_software_autoupdate_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"5A3F4672-E984-44F3-8D59-14A8CE998E62"}]}]}],"references":[{"url":"http://secunia.com/advisories/30403","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/501843","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29391","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1668","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42673","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/5681","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/501843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0956","sourceIdentifier":"cret@cert.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control ActiveX BackWeb Lite Install Runner en el objeto BackWeb Web Package ActiveX en LiteInstActivator.dll en  BackWeb antes de 8.1.1.87, tal como es utilizado en Logitech Desktop Manager (LDM) antes de 2.56, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:backweb:backweb:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1.86","matchCriteriaId":"1F6C64B4-5C70-4407-85C5-9C378D9C6C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:logitech:desktop_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.55","matchCriteriaId":"390E21E8-0B91-40E7-9D1F-5FDB30BFDAE1"}]}]}],"references":[{"url":"http://backweb.com/news_events/press_releases/051608.php","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30598","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30625","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/216153","source":"cret@cert.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29558","source":"cret@cert.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1791","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1792","source":"cret@cert.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42991","source":"cret@cert.org"},{"url":"http://backweb.com/news_events/press_releases/051608.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/216153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0957","sourceIdentifier":"cret@cert.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx) allow remote attackers to execute arbitrary code via unspecified initialization parameters."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control PhotoStockPlus Uploader Tool ActiveX (PSPUploader.ocx), permiten a atacantes remotos ejecutar código de su elección a través de una inicialización de parámetros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photostockplus:photostockplus_uploader_tool:*:*:*:*:*:*:*:*","matchCriteriaId":"FF2106E0-5325-4F3D-8CAF-9BAAC1AC1AB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30305","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/406937","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29279","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1571","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42534","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/406937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0958","sourceIdentifier":"cret@cert.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX en NCTAudioGrabber2.dll permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nctsoft:nctaudioeditor_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"79A9D79B-C192-42DE-8109-9E76A4A8AC07"}]}]}],"references":[{"url":"http://secunia.com/advisories/30414","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30451","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30452","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30453","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30454","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30458","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/656593","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1669","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42678","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/656593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0959","sourceIdentifier":"cret@cert.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de bufer basados en pila en el control ActiveX Online Media Technologies NCTSoft NCTAudioInformation2 en NCTAudioInformation2.dll, permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alivemedia:alive_mp3_wav_converter:3.9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"25BC6A2A-67DE-4918-B6ED-E1B636559D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:online_media_technologies:nctaudioeditor_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"09278FE6-820B-4D31-9665-DB539BB23BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:online_media_technologies:nctaudiostudio_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"9F7078A0-94D6-42F4-B413-AFA7C966AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:orion_studios:cinematicmp3:1.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0D92263D-7282-427F-8C93-EAF55990493D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ussun:power_audio_cd_burner:1.02:*:*:*:*:*:*:*","matchCriteriaId":"E5442CA4-4185-414D-BADF-659FDC157B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ussun:power_audio_cd_grabber:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DDDACACA-B499-435F-AB3A-97545B082A98"}]}]}],"references":[{"url":"http://secunia.com/advisories/30395","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30415","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30418","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30419","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30421","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30445","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30451","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30452","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30453","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30454","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30456","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30457","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30458","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/669265","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1669","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/669265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0960","sourceIdentifier":"cret@cert.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte."},{"lang":"es","value":"Una comprobación SNMPv3 HMAC en (1) Net-SNMP versión 5.2.x anterior a  5.2.4.1,  versión  5.3.x anterior a  5.3.2.1 y  versión 5.4.x anterior a  5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) C-series  versión 1.0.0 hasta 2.0.0 de Juniper Session and Resource Control (SRC); (5) Data de NetApp (también se conoce como Network Appliance) ONTAP  versiones 7.3RC1 y 7.3RC2; (6) SNMP Research versión anterior a 16.2; (7) múltiples productos Cisco IOS, CatOS, ACE y Nexus; (8) Ingate Firewall  versión  3.1.0 y posterior y SIParator  versión  3.1.0 y posterior; (9) HP OpenView SNMP Emanate Master Agent  versión 15.x; y posiblemente otros productos dependen del cliente para especificar la longitud del HMAC, lo que facilita que los atacantes remotos omitan la autenticación SNMP por medio de un valor de longitud de 1, que solo comprueba el primer byte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:catos:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CAC7FBF-2493-42CA-9B23-20AF09F0DDA8"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:catos:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DE64E4C4-BACE-404F-966D-415976781DC4"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:catos:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"377F951F-C2D8-441D-A532-F62E23937F94"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:catos:8.3:*:*:*:*:*:*:*","matchCriteriaId":"34A3A284-36A9-4E8C-815D-6E2FE4C158DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:s:*:*:*:*:*:*","matchCriteriaId":"A5823F33-7FB3-465B-8017-1866D9EF3AA6"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sy:*:*:*:*:*:*","matchCriteriaId":"94870E9E-C883-4051-8854-CDE0AE7A64B6"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:e:*:*:*:*:*:*","matchCriteriaId":"85C2FF9C-7730-4DBF-8C86-1EF0F1E71D8C"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ewa:*:*:*:*:*:*","matchCriteriaId":"4A4AFC06-85C5-4AD0-A409-27F9AF398D7D"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:jk:*:*:*:*:*:*","matchCriteriaId":"EB593071-BB5A-47AD-B9C6-59D2010F6280"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sb:*:*:*:*:*:*","matchCriteriaId":"74382B2D-E9A6-453D-9C07-F959EAB4C075"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sg:*:*:*:*:*:*","matchCriteriaId":"B3D93383-BD5A-4052-B724-055F6FCFC314"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sga:*:*:*:*:*:*","matchCriteriaId":"6B1E3C39-163D-4A99-AC96-2EE388305000"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sra:*:*:*:*:*:*","matchCriteriaId":"90710000-F963-4F36-9EE1-C3CE1CECDCA2"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:srb:*:*:*:*:*:*","matchCriteriaId":"5F4F8B9E-B2AB-4545-8ACF-8F03E636E842"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:src:*:*:*:*:*:*","matchCriteriaId":"6E2D6402-D2AF-4817-8A46-1FA9B17B720C"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sxb:*:*:*:*:*:*","matchCriteriaId":"79BB5494-735D-424B-8B41-2FAECE1A7AD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sxd:*:*:*:*:*:*","matchCriteriaId":"FD6178BC-9741-4FC1-87DA-A5407B3A4F40"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sxf:*:*:*:*:*:*","matchCriteriaId":"2A419BD7-6345-43D8-B69C-2255E2EF6FD7"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zl:*:*:*:*:*:*","matchCriteriaId":"B472DEEE-148A-46B4-BCBC-0A9F62F38B31"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zy:*:*:*:*:*:*","matchCriteriaId":"23305EBA-11D5-417E-823E-39D0D052839D"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*","matchCriteriaId":"95418AD2-FB85-4E20-B874-D82DDF88BC91"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*","matchCriteriaId":"14D1B81D-95E4-4945-94F2-C36FD7C0DC55"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*","matchCriteriaId":"452FF154-F6C0-4BC4-969E-1D49AA3CCE49"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*","matchCriteriaId":"3AB6C57C-8805-443F-8ACE-83DAA48878CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*","matchCriteriaId":"554C9611-55F1-40AF-9862-7E902D5CE1D1"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*","matchCriteriaId":"F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*","matchCriteriaId":"EEB0B55E-3579-4929-862F-C5FF9F796AE1"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*","matchCriteriaId":"8E8E34D3-0BCB-4D19-A41C-0375941E1B21"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*","matchCriteriaId":"09CBD68E-2A5C-43DF-9AD6-DE07815821B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*","matchCriteriaId":"01393D91-ED1D-460D-8621-10260F0CBDD0"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*","matchCriteriaId":"8AB2FF53-5991-4264-B5CC-D1E45460BFCE"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*","matchCriteriaId":"1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*","matchCriteriaId":"1BE94EA2-E0CC-4760-94A8-DE56C8181F74"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*","matchCriteriaId":"929836AD-8128-4174-872D-B9638B54611C"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*","matchCriteriaId":"5ED5B53D-930D-477E-A0F6-76167AE67641"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*","matchCriteriaId":"84983F6A-64F6-4720-9291-FC84CA10EE25"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*","matchCriteriaId":"156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*","matchCriteriaId":"C9E90E83-1732-4BEF-BC5B-401769DC8880"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*","matchCriteriaId":"51679B26-DF28-4E41-9801-E1599F250FFD"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*","matchCriteriaId":"E989900F-BE66-47E4-9A1B-11B9785F89BB"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*","matchCriteriaId":"95A01B7E-8231-4001-A340-31CE66474FDA"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*","matchCriteriaId":"3CC62D3B-A287-4DED-A44D-3351452D4A55"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xw:*:*:*:*:*:*","matchCriteriaId":"687E91FF-957E-449F-BDD6-85AA59E1E0D5"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:10.0:*:*:*:*:*:*:*","matchCriteriaId":"79528F96-FD42-4A76-82EE-4B1324D53B5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D626B494-6210-4F74-8D17-BA480B6665C3"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9FB31FAC-D720-4BF1-BFCC-0A9B714E292A"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.0:*:*:*:*:*:*:*","matchCriteriaId":"904CA41E-8168-41DE-AE84-941962A7BB71"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8D69F8FA-D58A-4F53-86D8-A20C73E9B299"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AD331C50-DB93-4001-B56A-C1012F894CDF"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*","matchCriteriaId":"75538529-611A-43B5-AC4D-089C4E2E2ACC"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*","matchCriteriaId":"F992D03D-1DB8-44C1-B59D-1C09A32A2C91"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A8BC298-4AF9-4281-9AD9-0D8F621E46B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7:*:*:*:*:*:*:*","matchCriteriaId":"F2FE436B-2117-4FB4-B550-8454848D1D58"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:nx_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"69D2BD63-C110-4E89-B239-4A59E20AB78E"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:nx_os:4.0.1:a:*:*:*:*:*:*","matchCriteriaId":"43E5FFB6-861D-4F91-B3C9-C5E57DDD25C3"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:nx_os:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD3BD3D-767D-483D-9FFE-D23AA2E228E6"},{"vulnerable":false,"criteria":"cpe:2.3:o:ecos_sourceware:ecos:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6762126F-55E4-4963-99F5-206A46979E7C"},{"vulnerable":false,"criteria":"cpe:2.3:o:ecos_sourceware:ecos:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1945B97A-8276-4EE2-8F76-5F0C0956DF18"},{"vulnerable":false,"criteria":"cpe:2.3:o:ecos_sourceware:ecos:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7C8CA81F-2AB6-45F8-8AAE-BF6A7EDA73D5"},{"vulnerable":false,"criteria":"cpe:2.3:o:ecos_sourceware:ecos:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2452913-0513-46BB-A52E-8FA12D77B570"},{"vulnerable":false,"criteria":"cpe:2.3:o:ecos_sourceware:ecos:2.0:b1:*:*:*:*:*:*","matchCriteriaId":"5D967624-23B1-48BB-91DB-1E1C18AAAD85"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"18CCF3B9-CA7D-4D37-BD2C-1B74586B98A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5A0AB8C2-EE95-48AA-98B7-B6ED40494A0A"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77930529-89BE-463D-8259-3D67D153284A"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"743DEB17-3BE3-4278-A54B-2CE547DB9F31"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0DCAF8C2-0E4E-4474-BD1E-F28A6EAEF8F8"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D2BCA127-F5F3-418F-890D-6B1C03019590"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA5A2C2F-ABF4-46B0-80AB-867B97AE5237"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BE83150C-456E-462A-A0F1-ED8EAD60D671"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"BF5B2431-335C-461B-B07F-88267EA71DCD"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9DBA8E67-021A-4D07-94B9-943A8E1C4468"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"905D1F04-CDFD-4BAD-8939-5ABC70A874E6"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00878E69-2721-43E3-A853-D3DCFE5C258D"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C51799BB-D931-436C-8C94-558956AC880A"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1ACC549-B5AF-4F5C-A3FE-257AA6D80C7A"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D498D406-A453-4119-BBA1-4709CF5862AE"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8D68555E-BEB9-4F1E-8D6D-C313FB501523"},{"vulnerable":false,"criteria":"cpe:2.3:o:net-snmp:net_snmp:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7B44A0D4-3020-414B-81D7-679E8441E182"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10.0:unkown:x86:*:*:*:*:*","matchCriteriaId":"B76A8BD4-E53F-49A6-946B-6E672DD0419C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_10_6504_bundle_with_4_gbps_throughput:*:*:*:*:*:*:*:*","matchCriteriaId":"E1C6B46B-13E2-4DA4-9EF2-007893034269"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_10_6509_bundle_with_8_gbps_throughput:*:*:*:*:*:*:*:*","matchCriteriaId":"F1C501EB-CF9F-437D-A7C0-2A12F1D5E171"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_10_service_module:*:*:*:*:*:*:*:*","matchCriteriaId":"538FE81A-2FD9-4A7C-AEC7-8FCE98DADBE0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_20_6504_bundle_with__4gbps_throughput:*:*:*:*:*:*:*:*","matchCriteriaId":"15D3471D-6267-4481-8BBD-BFC106E8F30B"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_20_6509_bundle_with_8gbps_throughput:*:*:*:*:*:*:*:*","matchCriteriaId":"13FB3C8A-87D3-4601-BD97-2B9F9FA8CA47"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_20_service_module:*:*:*:*:*:*:*:*","matchCriteriaId":"F0292228-80D8-4BA4-8662-698D7003D7D0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","matchCriteriaId":"DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_xml_gateway:5.2:*:*:*:*:*:*:*","matchCriteriaId":"522C9080-86A6-40A8-905C-73187DAF83F7"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ace_xml_gateway:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1C1B7A18-F230-44D4-801E-8284085CA1DF"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:mds_9120:*:*:*:*:*:*:*:*","matchCriteriaId":"8E62CC4C-89A7-4594-BDD8-394211889220"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:mds_9124:*:*:*:*:*:*:*:*","matchCriteriaId":"E152F995-BCD2-4725-A47C-1A5E7D6B9005"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:mds_9134:*:*:*:*:*:*:*:*","matchCriteriaId":"51E38404-ED69-4B0E-A035-2AF5E0649CC1"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:mds_9140:*:*:*:*:*:*:*:*","matchCriteriaId":"A90F0A06-A634-4BD0-A477-90BD3384B7D0"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"346E0D1B-CF9E-48BC-AE7A-F8CEF09F6741"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0123D2ED-3983-45D3-B54A-3E75FCE99C6D"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"66CA6C29-1DF1-46E3-BDCA-9ED72D3E6731"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E50E974E-87F5-45A2-88BA-B1E4913E3DAD"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D4AB25CC-BB96-4675-98D7-C5FF30C24014"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9C7C95AD-3D5F-458B-A761-5D7779FEA327"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E9E4A3F6-5D89-47D0-84AD-601682399D8B"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C700A36D-5FB4-475D-BE85-74511830870A"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"02060365-1D67-4611-8D79-B9FC354EBF99"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"194BD880-F672-4492-8356-B14C8DA8C2DB"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B1D769FC-3081-48F8-BBF1-3964F3F8B569"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A966DB26-8A52-4F4D-9C0E-8A8719A195AE"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E6675DF0-963A-4091-9786-7CE3337EE47E"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"77A94931-8584-4021-A5BB-83FF22D54955"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F06FB120-9BB3-4363-B2A2-A3475993FDFD"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8229DE3A-B9CB-44FF-8409-51E09DDED479"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1AAD7A89-294A-45DA-B5F5-C69F7FCC4A5E"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2699E7A6-7B3A-4C4C-9472-B8B6B547624D"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D913348F-351C-4D78-A0AA-27B355D52235"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C3E88A46-CEC7-46D5-9697-232E18531FD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5F16B8D0-81F5-4ECE-8276-EC30DDCCE1A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECFBAFE-9267-469A-A97F-F716969B247C"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"48F839C7-7B33-4BF6-9ACF-76F32F5D7C72"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"AE1559E6-E7B6-4B5B-8841-CF502E05BA46"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F041246F-5B7F-4F63-9E81-02465C9062C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"ADB78013-DEE9-438E-ABD1-5E3D932177BB"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D77447C3-AA72-4CAB-A0B1-0883D41AD064"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"473038C0-1644-4FF2-A1DA-BCB8A7CD1CA2"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C9C3F04F-7581-4DCA-970D-9FCBB56EA724"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7ABF04A7-8230-4AB9-8D66-DF1463037823"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_firewall:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EC205E36-7027-4A9B-8574-9BB9C68007A5"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"69C55DD7-986A-4AB6-8F61-5A5D26531011"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"84DDD7E4-D5D7-4341-9482-2B918306578D"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"14A3C59C-6A3D-477B-B425-1C085D6951E3"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"31AA57F4-5023-4333-9F19-C9D362E8E495"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"063034FF-0AB8-4D78-9822-0DCA9657C853"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"67477EC7-363E-45B5-BA53-1A4E9FB20CDE"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"78E11F95-E635-465C-BD7F-5F7E9192DEAC"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"74F145F0-573E-4CBC-AB69-3B77D6F9A540"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"49DA7D86-8845-43CA-80DC-3D794322CB28"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"ABD34FEB-7956-44AE-A510-2E5F9EF61651"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DEF5098-3791-4CEB-A436-2809A4385D27"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D895880-FB98-4472-A164-458CE086F339"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D7912AA3-0469-479E-9C5A-53F20E504956"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8677C6C8-39CA-492A-A196-9DFAF892120C"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"51FA6F2A-8444-4BB2-B7F2-B97AEFFF9E27"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"60E46CAD-0032-4CD6-AA2A-871E1DFC3A35"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"22CE55DE-00CA-4F87-9CA0-80A360E332FA"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"63DC81FA-A6B4-41DC-8097-8944D06A2451"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB87853E-CAFF-48D8-9C56-A2DE325235D5"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"61E35451-BEE3-412A-8706-5522C00BE1DD"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E599E0CE-CCB7-4A30-8AA9-45BBC11AFEC2"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F45326B3-CC4E-4C3A-9819-28936A0432F4"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CDBF1A78-7190-4326-84BD-C18CC354DA38"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D97FFBA0-2E80-40EF-A4AC-F26D3490371E"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5A442F5B-5A1A-4CD0-B693-851FFB917E5D"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"074BCB70-AD66-4141-9DD3-9DE73BDCB0F3"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"646BF70F-CB7B-48E3-8563-E089E1CECD11"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD34A7B-508C-45F2-8725-FE42398D3652"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D2785732-A5C7-434E-B45D-13138B574F45"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"989A4E8A-F23D-4BF5-B860-FB7B04A1CE56"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A07E1241-24BE-48D3-B737-56B2AAA3AF64"},{"vulnerable":false,"criteria":"cpe:2.3:h:ingate:ingate_siparator:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EFB751FD-CCCA-4131-A24F-65DEF1128B26"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:session_and_resource_control:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D106F4E4-4B41-4002-8C34-6A9C3A0FF640"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:session_and_resource_control:2.0:*:*:*:*:*:*:*","matchCriteriaId":"863583DC-DD93-46DC-BA06-0B838CDB2565"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:src_pe:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D50E1B4-A64E-45D5-8A44-947DE7B8AAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:src_pe:2.0:*:*:*:*:*:*:*","matchCriteriaId":"ED5F1A8F-5ED9-4ED0-A336-A0E4A439E6F2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cret@cert.org"},{"url":"http://lists.ingate.com/pipermail/productinfo/2008/000021.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=127730470825399&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=127730470825399&w=2","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0528.html","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30574","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30596","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30612","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30615","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30626","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30647","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30648","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30665","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31334","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31351","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31467","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31568","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32664","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33003","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35463","source":"cret@cert.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-02.xml","source":"cret@cert.org"},{"url":"http://securityreason.com/securityalert/3933","source":"cret@cert.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=833770","source":"cret@cert.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1989089&group_id=12694&atid=456380","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238865-1","source":"cret@cert.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cret@cert.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm","source":"cret@cert.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1663","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/878044","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CTAR-7FBS8Q","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ETS5Z","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ETS87","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:118","source":"cret@cert.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-006.html","source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/09/1","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0529.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/493218/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/29623","source":"cret@cert.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020218","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/usn-685-1","source":"cret@cert.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162A.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"cret@cert.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1787/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1788/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1797/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1800/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1801/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1836/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/1612","source":"cret@cert.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447974","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10820","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5785","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6414","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/5790","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html","source":"cret@cert.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.ingate.com/pipermail/productinfo/2008/000021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127730470825399&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127730470825399&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0528.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=833770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1989089&group_id=12694&atid=456380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238865-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/878044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CTAR-7FBS8Q","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ETS5Z","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ETS87","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0529.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493218/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-685-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1787/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1788/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1797/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1800/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1801/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1836/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0961","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface."},{"lang":"es","value":"EMC DiskXtender 6.20.060 tiene un login y contraseña fijos (“hard-coded”), lo cual permite a atacantes remotos saltarse la autenticación a través del interfaz RPC."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:diskxtender:6.20.060:*:*:*:*:*:*:*","matchCriteriaId":"5A393C02-3961-4472-8A0F-11A71741E9D5"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=683","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29778","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/44419","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28727","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019827","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1198/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41772","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/44419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1198/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-0962","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface."},{"lang":"es","value":"Desbordamiento de búfer basado en pila del File System Manager para EMC DiskXtender 6.20.060, permite a usuarios remotos autenticados, ejecutar código arbitrario mediante una petición manipulada al interfaz RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:diskxtender:6.20.060:*:*:*:*:*:*:*","matchCriteriaId":"5A393C02-3961-4472-8A0F-11A71741E9D5"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28728","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019828","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1198/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41774","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1198/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0963","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface."},{"lang":"es","value":"Vulnerabilidad de Formato de Cadena en EMC DiskXtender MediaStor 6.20.060, permite a usuarios remotos autenticados ejecutar código de su elección a través de un mensaje manipulado al interfaz RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:diskxtender:6.20.060:*:*:*:*:*:*:*","matchCriteriaId":"5A393C02-3961-4472-8A0F-11A71741E9D5"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28727","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28729","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019829","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1198/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41773","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1198/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0964","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en Snoop en Sun Solaris versión 8 hasta 10 y OpenSolaris anterior a la versión snv_96, cuando se omite la opción -o, permiten a los atacantes remotos ejecutar código arbitrario por medio de un paquete SMB creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","matchCriteriaId":"19FE69F8-3726-4B21-9B78-E9920B046564"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","matchCriteriaId":"097D3A0C-8C75-4951-94C7-4C444DE2B0D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"build_snv_95","matchCriteriaId":"DE677B04-9FF1-4BE6-A64A-980E9B651F01"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*","matchCriteriaId":"65C717D1-2192-415E-AF6F-7F9619A3C98A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*","matchCriteriaId":"56451D1E-E5F2-473E-8995-94890AD72685"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*","matchCriteriaId":"10F2BBC6-DF15-4DEF-AACF-6F570A23733C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*","matchCriteriaId":"32C315C7-9204-40DB-9730-4138069679CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*","matchCriteriaId":"A19A54E9-403E-4051-A120-D588BE399F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*","matchCriteriaId":"1E8BFE03-135B-4E3E-B993-7C37C0EF2286"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*","matchCriteriaId":"86003B47-A3DF-4119-85ED-FEEAB4F4F034"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_89:*:*:*:*:*:*:*","matchCriteriaId":"7D43FC1E-E0B3-40AF-BA5E-610559312741"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_91:*:*:*:*:*:*:*","matchCriteriaId":"449EF9CD-7247-4D80-80B4-15B03F8532A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_92:*:*:*:*:*:*:*","matchCriteriaId":"4E751068-98F5-4FA1-A61F-3C6F23EF778F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30556","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020633","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44222","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6328","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0965","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet."},{"lang":"es","value":"Múltiples vulnerabilidades de cadena de formato en snoop sobre Sun Solaris versión 8 hasta 10 y OpenSolaris anterior a la versión snv_96, cuando se omite la opción -o, permiten a los atacantes remotos ejecutar código arbitrario por medio de especificadores de cadena de formato en un paquete SMB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","matchCriteriaId":"19FE69F8-3726-4B21-9B78-E9920B046564"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","matchCriteriaId":"097D3A0C-8C75-4951-94C7-4C444DE2B0D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"build_snv_95","matchCriteriaId":"DE677B04-9FF1-4BE6-A64A-980E9B651F01"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*","matchCriteriaId":"65C717D1-2192-415E-AF6F-7F9619A3C98A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*","matchCriteriaId":"56451D1E-E5F2-473E-8995-94890AD72685"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*","matchCriteriaId":"10F2BBC6-DF15-4DEF-AACF-6F570A23733C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*","matchCriteriaId":"32C315C7-9204-40DB-9730-4138069679CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*","matchCriteriaId":"A19A54E9-403E-4051-A120-D588BE399F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*","matchCriteriaId":"1E8BFE03-135B-4E3E-B993-7C37C0EF2286"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*","matchCriteriaId":"86003B47-A3DF-4119-85ED-FEEAB4F4F034"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_89:*:*:*:*:*:*:*","matchCriteriaId":"7D43FC1E-E0B3-40AF-BA5E-610559312741"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_91:*:*:*:*:*:*:*","matchCriteriaId":"449EF9CD-7247-4D80-80B4-15B03F8532A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_92:*:*:*:*:*:*:*","matchCriteriaId":"4E751068-98F5-4FA1-A61F-3C6F23EF778F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30556","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020633","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44222","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44415","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0967","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/426.html \r\n'CWE-426: Untrusted Search Path'","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en vmware-authd en VMware Workstation versión 5.x anterior a 5.5.7 build 91707 y versión 6.x anterior a 6.0.4 build 93057, VMware Player versión 1.x anterior a 1.0.7 build 91707 y versión 2.x anterior a 2.0.4 build 93057, y VMware Server anterior a 1.0.6 build 91891 en Linux, y VMware ESXi versión 3.5 y VMware ESX versión 2.5.4 hasta 3.5, permite a los usuarios locales obtener privilegios por medio de una opción de path library en un archivo de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"8ADCA876-2B69-4267-8467-E7E470428D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DB4346ED-5837-4784-8D87-6C148BA4AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"15063D48-B55F-41C4-8AE3-CB96F1F1BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D40A48BB-A2E5-4D27-8E11-DE9D1CF08FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"16EFF4E2-CA32-4FA4-AC4B-82D8C50769D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E76D03A3-DB55-48A2-B5A5-64002D28B95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA35C066-90A9-4DE2-A97A-38A6CFC59A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1D3F9D4D-2116-49A7-9292-AF6B4456E175"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8230EFE6-8AB6-41DF-9A46-CAE4E5BB7F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B2C792F-48DA-46B5-B42E-9A045B393531"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6E6F9A4A-41B0-48D9-B60C-EBF4EF899953"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"270D5FAD-A226-4F6F-BF0B-2C6D91C525D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"504CD24F-2EC6-45C0-8E46-69BAE8483521"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"6B32C157-020F-400B-970C-B93CF573EB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02EBBFDD-AC46-481A-8DA7-64619B447637"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"294B621F-6C1A-4571-AE13-49495680D255"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA47458-E783-4A6A-ABF1-59E8D87E9B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"974D84A6-F5AB-4F0A-B9B5-9095A0E4733C"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C3613B7-CA1B-4C9A-9076-A2894202DDA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE7ECF1C-285C-4AA3-8B66-28EDAB0763E8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3922","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29557","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42878","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0971","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or HTML via (1) the Policy Name field in Search Based Retention Policy in Message Archiver; unspecified parameters in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (6) GroupWise Sync components in Message Archiver; (7) input to search operations in Web Filter; and (8) input used in error messages and (9) hidden INPUT elements in (a) Spam Firewall, (b) IM Firewall, and (c) Web Filter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.cgi en Barracuda Spam Firewall (BSF) anterior a 3.5.12.007, Message Archiver anterior a 1.2.1.002, Web Filter anterior a 3.3.0.052, IM Firewall anterior a 3.1.01.017, y Load Balancer anterior a 2.3.024 permiten a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarias a través de:\r\n(1) El campo nombre de política en la opción Buscar Política de Retención en Message Archiver\r\n\r\nY a través de parámetros sin especificar en el (2) la configuración de la IP, (3) Administración (4), Journal Accounts (5), política de retención, y (6) Componentes GroupWise Sync en Message Archiver\r\n\r\nTambién a través de (7) la introducción de datos en operaciones de búsqueda en Web Filter, y (8) la entrada utilizada en los mensajes de error y (9) en los elementos INPUT escondidos en (a) Spam Firewall, (b) IM Firewall, y (c) Web Filter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_im_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.01.008","matchCriteriaId":"A73223D5-9008-473D-BDE6-607244E9ACD1"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_load_balancer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.006","matchCriteriaId":"F85513F1-4F33-48E9-9DDF-83DB1935EAE3"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_message_archiver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.010","matchCriteriaId":"C8C88084-AD8E-49F1-8B29-45949EE445FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.11.020","matchCriteriaId":"BD01511D-F23B-4C4C-9CB6-BC8483DCAC96"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_web_filter:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.0.038","matchCriteriaId":"D9CDB650-6528-4D39-8016-BF9B8CC1005C"}]}]}],"references":[{"url":"http://dcsl.ul.ie/advisories/03.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4792","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021454","source":"cve@mitre.org"},{"url":"http://www.barracudanetworks.com/ns/support/tech_alert.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://dcsl.ul.ie/advisories/03.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.barracudanetworks.com/ns/support/tech_alert.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0973","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field."},{"lang":"es","value":"Desbordamiento de Buffer en Double-Take (también conocido como HP StorageWorks Storage Mirroring) 4.5.0.1629 y otras  versiones 4.5.0.x, permite a atacantes remotos provocar un impacto desconocido a través de paquete de cadena larga en el campo username."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July  11, 2008","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:5.0.0.2865:*:*:*:*:*:*:*","matchCriteriaId":"36F54C9F-55AA-4171-80E1-3B7F978B51AF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0974","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a \"vector<T> too long\" exception; or (2) a certain packet that raises an ospace/time/src\\date.cpp exception."},{"lang":"es","value":"Double-Take versión  5.0.0.0.2865 y anteriores, distribuida bajo el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos causar una denegación de servicio (terminación del demonio) por medio  de (1) un valor vector(T) largo, que genera una excepción \"vector(T) too long\"; o (2) un paquete determinado que genera una excepción de ospace/time/src\\date.cpp."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July  11, 2008","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.2865","matchCriteriaId":"7CAE56F4-BE8E-4C4D-8FEE-BCBC85151427"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_double-take:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.2865","matchCriteriaId":"774A4ECB-35CC-4D62-815E-55B5D25670C1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0975","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (CPU consumption) via a -1 value in the field that specifies the size of the vector<T> value."},{"lang":"es","value":"Double-Take 5.0.0.2865 y anteriores, distribuido con el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU) a través de un valor -1 en el campo que especifica el tamaño del valor de vector<T>."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July  11, 2008","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:5.0.0.2865:*:*:*:*:*:*:*","matchCriteriaId":"36F54C9F-55AA-4171-80E1-3B7F978B51AF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0976","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed packet, as demonstrated by a packet of type (1) 0x2722 or (2) 0x272a."},{"lang":"es","value":"Double-Take 5.0.0.2865 y anteriores, distribuido con el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos provocar una denegación de  servicio (referencia a puntero nulo o caída del demonio) a través de un paquete mal formado, como se demostró por un paquete de los tipos (1) 0x2722 o (2) 0x272a."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July  11, 2008\n","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.2865","matchCriteriaId":"7CAE56F4-BE8E-4C4D-8FEE-BCBC85151427"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_double-take:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.2865","matchCriteriaId":"774A4ECB-35CC-4D62-815E-55B5D25670C1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0977","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory."},{"lang":"es","value":"Double-Take 5.0.0.2865 y anteriores, distribuido con el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un determinado paquete largo que dispara un intento de reservar una gran cantidad de memoria."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July  11, 2008","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:5.0.0.2865:*:*:*:*:*:*:*","matchCriteriaId":"36F54C9F-55AA-4171-80E1-3B7F978B51AF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0978","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries."},{"lang":"es","value":"Double-Take 5.0.0.2865 y anteriores, distribuido con el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos obtener información sensible a través de un paquete del tipo 1) 0x2728, que proporciona información del sistema operativo y de la ruta; (2) 0x274e, que lista los adaptadores Ethernet; (3) 0x2726, que proporciona información del sistema de archivos (filesystem); (4) 0x274f, que especifica el controlador de la impresora; o (5) 0x2757, que proporciona entradas del log recientes."}],"vendorComments":[{"organization":"Double-Take","comment":"These findings indicate risk only in a situation where a customer’s network security infrastructure has been breached. Double-Take is committed to continually improving the security of our products, and these findings will be addressed in a future release.","lastModified":"2009-06-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:5.0.0.2865:*:*:*:*:*:*:*","matchCriteriaId":"36F54C9F-55AA-4171-80E1-3B7F978B51AF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0979","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function."},{"lang":"es","value":"Vulnerabilidad de agotamiento de pila en Double-Take 5.0.0.2865 y anterioers, distribuido con el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un determinado paquete que dispara la llamada recursiva de una función."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July  11, 2008","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.2865","matchCriteriaId":"7CAE56F4-BE8E-4C4D-8FEE-BCBC85151427"},{"vulnerable":true,"criteria":"cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F178F692-773F-4D8A-BA9C-78D448126649"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_double-take:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.2865","matchCriteriaId":"774A4ECB-35CC-4D62-815E-55B5D25670C1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/doubletakedown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/doubletakedown.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0980","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en Spyce - Python Server Pages (PSP) versión 2.1.3, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de (1) el parámetro url o type en le archivo docs/examples/redirect.spy; (2) el parámetro x en el archivo docs/examples/handlervalidate.spy; (3) el parámetro Name en el archivo spyce/examples/request.spy; (4) el parámetro Name en el archivo spyce/examples/getpost.spy; (5) el parámetro mytextarea, el parámetro mypass, o un parámetro vacío en el archivo spyce/examples/formtag.spy; (6) el parámetro newline en el URI predeterminado bajo demos/chat/; (7) el parámetro text1 en el archivo docs/examples/formintro.spy; o (8) el parámetro mytext o mydate en el archivo docs/examples/formtag.spy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spyce:spyce:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"77B53AFC-5C42-4BDE-BFFB-DEFF9D702357"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3699","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR08-01.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488336/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR08-01.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488336/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0981","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter."},{"lang":"es","value":"Vulnerabilidad de redirección libre en spyce/examples/redirect.spy de Spyce - Python Server Pages (PSP) 2.1.3 permite a atacantes remotos redireccionar usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de un URL en el parámetro url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spyce:spyce:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"77B53AFC-5C42-4BDE-BFFB-DEFF9D702357"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3699","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR08-01.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488336/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27898","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR08-01.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488336/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0982","sourceIdentifier":"cve@mitre.org","published":"2008-02-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message."},{"lang":"es","value":"Spyce - Python Server Pages (PSP) 2.1.3 permite a atacantes remotos conseguir información sensible a través de una petición directa de spyce/examples/automaton.spy, lo que muestra la ruta en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spyce:spyce:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"77B53AFC-5C42-4BDE-BFFB-DEFF9D702357"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3699","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR08-01.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488336/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR08-01.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488336/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-0983","sourceIdentifier":"cve@mitre.org","published":"2008-02-26T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access."},{"lang":"es","value":"lighttpd 1.4.18 y posiblemente otras versiones anteriores a la 1.5.0, no calcula correctamente el tamaño del array descriptor de archivos, lo que permite a atacantes remotos provocar una denegación de servicio (caída) a través de un gran número de conexiones, lo cual dispara un acceso fuera de límite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B4F8F89B-5A10-4EE3-A035-1CEA44B1691A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"F89FCD49-0C73-4E73-9D99-38700B622A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"FFA9AF51-F423-4167-88AB-5BF916BCC273"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A21B3F82-1C1D-46EE-92EF-46F7F590957E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"482312DE-D483-42EC-B8B3-C71CE088C7B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"D5549E74-A7A7-4D99-B08B-C6ACFB3917FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"72ABD4D8-8AD9-45E5-8FF5-FA947AC07F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"0EC04CE1-4C31-42B7-A92D-38393F549014"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"F79EED03-A95B-4636-A0AA-1F9E72DEF930"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"176D53A7-A81C-4C1F-A7B8-90604A9545F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"8372FF7B-CF9B-4963-AB53-704E87AF3540"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"DA46E89A-565E-439D-BCB2-6CEE44EFDFAC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29066","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29209","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31104","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-10.xml","source":"cve@mitre.org"},{"url":"http://trac.lighttpd.net/trac/ticket/1562","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0084","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1609","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488926/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27943","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0659/references","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2284","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.lighttpd.net/trac/ticket/1562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488926/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0659/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0984","sourceIdentifier":"cve@mitre.org","published":"2008-02-26T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file."},{"lang":"es","value":"El demultiplexor MP4 (mp4.c) para el reproductor multimedia VLC versión 0.8.6d y anterior, tal y como es usado en Miro Player versión 1.1 y anteriores, permite a los atacantes remotos sobrescribir la memoria arbitraria y ejecutar código arbitrario por medio de un archivo MP4 malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miro:miro_player:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"D3716EED-983F-4088-8CF0-18EF18D4A9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6d","matchCriteriaId":"A14F15BC-28B2-4DCF-86CC-8213DD66402C"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29153","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/?action=item&id=2147","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488841/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28007","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019510","source":"cve@mitre.org"},{"url":"http://www.videolan.org/security/sa0802.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/?action=item&id=2147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488841/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa0802.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0985","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la librería GIF del marco de trabajo WebKit en Google Android SDK m3-rc37a y versiones anteriores permite a atacantes remotos la ejecución de código de su elección mediante un archivo GIF manipulado cuyas dimensiones lógicas (alto y ancho) son diferentes a las reales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:android_sdk:m3-rc37a:*:*:*:*:*:*:*","matchCriteriaId":"88A04F4E-A182-4072-94BA-D6A0D1B5CCF7"}]}]}],"references":[{"url":"http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3727","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2148","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489135/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40998","source":"cve@mitre.org"},{"url":"http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/3727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489135/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0986","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field."},{"lang":"es","value":"Desbordamiento de entero en el método BMP::readFromStream de la librería libsgl.so de Google Android SDK m3-rc37a y versiones anteriores, y m5-rc14, permite a atacantes remotos la ejecución de código de su elección a través de un fichero BMP manipulado con una cabecera que contiene un campo desplazamiento (offset) negativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:android_sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"m3-rc37a","matchCriteriaId":"4CFDC8D8-0524-4046-8302-DB190D77AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:android_sdk:m5-rc14:*:*:*:*:*:*:*","matchCriteriaId":"BCAFED86-4D2B-404C-BC33-C47A38126464"}]}]}],"references":[{"url":"http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3727","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489135/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28006","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40999","source":"cve@mitre.org"},{"url":"http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489135/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0987","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Image Raw en Apple Mac OS X versión 10.5.2, y Digital Camera RAW Compatibility anteriores al Update 2.0 para Aperture versión 2 y iPhoto versión 7.1.2, permite a los atacantes remotos ejecutar código arbitrario por medio de una  imagen Adobe Digital Negative (DNG)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:aperture:2:*:*:*:*:*:*:*","matchCriteriaId":"28B43F6A-8F0F-4827-B0D6-FA256B1F6969"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:iphoto:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B758ED45-A628-421D-8710-ABC532BCE781"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29469","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT1232","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28363","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019659","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019683","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019684","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0957/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41294","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT1232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0957/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0988","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read."},{"lang":"es","value":"Error de superación del límite (off-by-one) en la API Libsystem strnstr de libc en Apple Mac OS X 10.4.11 permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) a través de aregumentos manipulados que disparan una sobre-lectura del búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28374","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019661","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0989","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en mDNSResponderHelper en Apple Mac OS X 10.5.2, permite a usuarios locales ejecutar código de su elección a través de especificadores de formatos de cadena en el hostname local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28339","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019662","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41292","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0990","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications."},{"lang":"es","value":"notifyd en Apple Mac OS X 10.4.11 no verifica que las notificaciones death (muerte) del puerto Mach sean originadas desde el kernel, lo que permite a usuarios locales provocar una denegación de servicio a través de notificaciones death falsas que evitan que otras aplicaciones reciban notificaciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28345","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019663","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41289","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0992","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value."},{"lang":"es","value":"Error en el índice de matriz de pax en Apple Mac OS X 10.5.2 permite a atacantes remotos dependientes del contexto ejecutar código de su elección a través de un archivo con un valor de tamaño manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of pax as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n","lastModified":"2008-03-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28365","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019673","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41288","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0993","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings."},{"lang":"es","value":"Podcast Capture en Podcast Producer de Apple Mac OS X 10.5.2, invoca una subtarea con contraseñas en argumentos de línea de comandos, esto permite a usuarios locales leer las contraseñas mediante listados de procesos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:podcast_producer:*:*:*:*:*:*:*:*","matchCriteriaId":"00F207B2-9203-4E2A-8B55-3B1AABB7D77A"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28372","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019664","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0994","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods."},{"lang":"es","value":"Preview en Apple Mac OS X 10.5.2 utiliza RC4 de 40 bits cuando guarda un archivo PDF encriptado, lo que facilita que atacantes remotos puedan descifrar el archivo a través de métodos de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28386","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019665","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41276","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0995","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods."},{"lang":"es","value":"El componente Printing (Impresión) en Apple Mac OS X 10.5.2 utiliza un RC4 de 40 bits cuando imprime un archivo PDF encriptado, lo que facilita a los atacantes descifrar el archivo a través de métodos de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28387","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019667","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41287","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0996","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials."},{"lang":"es","value":"El componente Printing en Apple Mac OS X 10.5.2 puede guardar las credenciales de autenticación en el disco cuando empieza una tarea en una cola de impresión autenticada, esto puede permitir a los usuarios locales obtener estos credenciales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28344","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019667","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41284","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0997","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted PostScript Printer Description (PPD) file that is not properly handled when querying a network printer."},{"lang":"es","value":"Desbordamiento de búfer basado en pila de AppKit en Apple Mac OS X 10.4.11, permite a atacantes remotos ayudados por el usuario provocar una denegación de servicio (caída de aplicación) y ejecutar código de su elección a través de un archivo PostScript Printer Description (PPD) manipulado que no se encuentra manejado adecuadamente en una petición de una impresora de red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28364","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019648","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41282","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0998","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allows local users to bypass authorization and execute arbitrary code via crafted distributed objects."},{"lang":"es","value":"Vulnerabilidad sin especificar de NetCfgTool en el componente de configuración de sistema en Apple Mac OS X 10.4.11 y 10.5.2, permite a usuarios locales saltarse la autorización y ejecutar código de elección a través de objetos distribuidos manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28385","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019674","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41281","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0999","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference."},{"lang":"es","value":"Apple Mac OS X 10.5.2 permite a atacantes con la ayuda del usuario provocar una denegación de servicio (caída) a través de una imagen de disco manipulada de un Formato de Disco Universal (Universal Disc Format - UDF) que induce una referencia a un puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28389","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019669","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41280","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1000","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via \"..\" sequences in file attachments."},{"lang":"es","value":"Vulnerabilidad de salto de directorio deContentServer.py en the Wiki Server en Apple Mac OS X 10.5.2 (Leopard), permite a usuarios autenticados remotamente escribir ficheros de su elección a través de secuencias \"..\" en los ficheros adjuntos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29420","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=2189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/489786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28278","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41278","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=2189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/489786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1001","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Apple Safari anterior  a 3.1,  ejecutado sobre Windows XP o Vista, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección   a través de una URL manipulada que no está correctamente manejada en la página de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28321","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41333","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1002","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Apple Safari antes de 3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un javascript: URL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/766019","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28328","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41335","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/766019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1003","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebCore, usado en  Apple Safari anterior a 3.1, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección  a través de vectores desconocidos en relación a sitios que han establecido la propiedad document.domain o que tienen el mismo document.domain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28330","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41334","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1004","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebCore, como el utilizado en Apple Safari anterior a 3.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores desconocidos relacionados con Web Inspector."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28347","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41331","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1005","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password."},{"lang":"es","value":"Webcore, usado en Apple Safaru anterior a 3.1, no oculta adecuadamente el campo de contraseña cuando una conversión inversa es usada con el método Kotoeri, puede permitir que atacantes que se encuentren cerca del ordenador lean la contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28326","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019656","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41329","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1006","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Webcore, usado en Apple Safari anterior a 3.1, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección empleando la función windows.open para cambiar el contexto de seguridad de una página web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28332","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41326","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1007","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks."},{"lang":"es","value":"WebCore, como es usado en Apple Safari versiones anteriores a 3.1, no aplica la política de navegación de tramas para applets de Java, que permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.4","matchCriteriaId":"E804E6B0-BF27-48B7-91BB-00EF3E01E402"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28335","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41324","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1008","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en WebCore, usado en Apple Safari versiones anteriores a la 3.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la propiedad document.domain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28336","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41323","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1009","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebCore, como se usa en Apple Safari antes de 3.1, permite a atacantes remotos inyectar Javascript de su elección modificando el objeto history."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28337","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41322","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1010","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript."},{"lang":"es","value":"Desbordamiento de búfer en WebKit, usado en Apple Safari anterior a 3.1, permite a atacantes remotos ejecutar secuencias de comandos de su elección a través de expresiones regulares Javascript manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29924","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28338","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019654","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41321","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00402.html","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00402.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1011","sourceIdentifier":"cve@mitre.org","published":"2008-03-19T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via a frame that calls a method instance in another frame."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit, como se usa en Apple Safari antes de 3.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un marco que llama a una instancia de un método en otro marco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29924","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28342","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019653","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41320","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00402.html","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=307563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-079A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0920/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00402.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1012","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request, related to \"input validation.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Apple AirPort Extreme Base Station Firmware 7.3.1 permite a atacantes remotos provocar una denegación de servicio (caída del intercambio de ficheros) mediante la utilización de una petición AFP especialmente construida, relacionada con la validación de entrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:apple_airport_extreme_base_station:*:*:7.3.1_firmware:*:*:*:*:*","matchCriteriaId":"9D6188D9-BEB0-49CE-A545-F949F2069036"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29447","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1226","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28348","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019678","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0955/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41325","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0955/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1013","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet."},{"lang":"es","value":"Apple QuickTime antes de 7.4.5 habilita la deserialización de objetos QTJava por applets de Java no confiables, lo que permite a atacantes remotos ejecutar código de su elección a través de un applet manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019757","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1014","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information."},{"lang":"es","value":"Apple QuickTime antes de 7.4.5 no maneja adecuadamente URLs externas en películas, lo que permite a atacantes remotos obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019758","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1015","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie."},{"lang":"es","value":"Desbordamiento de búfer en el tratamiento de datos de referencia Atom en Apple QuickTime antes de 7.4.5 permite a atacantes remotos ejecutar código de su elección a través de una película manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019759","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41604","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1016","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a crafted movie that triggers memory corruption."},{"lang":"es","value":"Apple QuickTime antes de 7.4.5 no maneja adecuadamente las pistas de video, lo que permite a atacantes remotos ejecutar código de su elección a través de una película manipulada lo que provoca corrupción de la memoria"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019760","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1017","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el manejo atom de la región de saturación (aka crgn) en quicktime.qts en Apple QuickTime antes de 7.4.5 permite a atacantes remotos ejecutar código de su elección a través de una película manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019761","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490460/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41607","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490460/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1018","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apple QuickTime antes de 7.4.5 permite a atacantes remotos ejecutar código de su elección a través de una película MP4A con un átomo canal Compositor (aka chan) mal formado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019762","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490467/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41606","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490467/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1019","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en quickTime.qts de Apple QuickTime antes de 7.4.5 permite ejecutar código de su elección a través de un archivo de imagen PICT manipulado, relacionado con un copy loop (bucle de copia) fr memoria terminado incorrectamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019763","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490459/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-014","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490459/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1020","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en quickTime.qts de Apple QuickTime antes de 7.4.5 en Windows permite a atacantes remotos ejecutar código de su elección a través de un archivo de imagen PICT manipulado con codificación Kodak, relacionado con comprobaciones y mensajes de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019764","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490468/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41610","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490468/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1021","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el controlador de contenido Animation codec de Apple QuickTime antes de 7.4.5 en Windows permite a atacantes remotos ejecutar código de su elección a través de una película manipulada con codificación de longitud de ejecución."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019765","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490462/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41612","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490462/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1022","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an obji atom of zero size."},{"lang":"es","value":"Desbordamiento de búfer en Apple QuickTime antes de 7.4.5 permite a atacantes remotos ejecutar código de su elección a través de una película VR manipulada con un átomo obji de tamaño cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019766","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490461/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41613","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490461/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1023","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file."},{"lang":"es","value":"Desbordamiento de búfer en el opcode de análisis sintáctico Clip de Apple QuickTime antes de 7.4.5 en Windows permite a atacantes remotos ejecutar código de su elección a través de un archivo de imagen PICT manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"}]}]}],"references":[{"url":"http://secunia.com/advisories/29650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019767","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28583","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-094A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1024","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption."},{"lang":"es","value":"Apple Safari versiones anteriores a 3.1.1, cuando se está ejecutando en Windows XP o Vista, permite a atacantes remotos provocar una denegación de servicio (caída) y posíblemente ejecutar código de su elección a través de un fichero descargado con un nombre de fichero manipulado, lo cual dispara una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1467","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/529441","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28813","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019868","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0979/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41864","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/529441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0979/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1025","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Apple WebKit, como el que se utiliza en Safari anterior a 3.1.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante una URL manipulada con una coma en la sección del nombre de máquina (hostname)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*","matchCriteriaId":"461EFB63-7933-488C-BB4E-7C913364F5A9"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1467","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/705529","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28814","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019869","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1250/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41862","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/705529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1250/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1026","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en el compilador de expresiones regulares PCRE (JavaScriptCore/pcre/pcre_compile.cpp) en Apple WebKit, como se utiliza en Safari en versiones anteriores a 3.1.1, permite a atacantes remotos ejecutar código arbitrario a través de expresiones regulares con grandes conteos de repetición anidados, lo que desencadena un desbordamiento de búfer basado en memoria dinámica."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of pcre as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-04-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3815","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1467","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/490990/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28815","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019870","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1250/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-022","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41859","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/490990/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1250/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1027","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 does not verify that requested files and directories are inside shared folders, which allows remote attackers to read arbitrary files via unspecified AFP traffic."},{"lang":"es","value":"Apple Filing Protocol (AFP) Server en Apple Mac OS X versiones anteriores a 10.5.3, no comprueba que los archivos y directorios solicitados estén dentro de carpetas compartidas, lo que permite a los atacantes remotos leer archivos arbitrarios por medio de tráfico AFP no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29490","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42703","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1028","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document file, as demonstrated by opening the document with TextEdit."},{"lang":"es","value":"Una vulnerabilidad no especificada en AppKit en Apple Mac OS X versiones anteriores a 10.5, permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo de documento especialmente diseñado, como es demostrado al abrir el documento con TextEdit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020131","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29487","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42705","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1030","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent attackers to execute arbitrary code or cause a denial of service (crash) via an invalid length argument, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en la función CFDataReplaceBytes en la API CFData en CoreFoundation en Apple Mac OS X versiones anteriores a 10.5.3, permite a los atacantes dependiendo del contexto ejecutar código arbitrario o causar una denegación de servicio (bloqueo) por medio de un argumento de longitud no válida, lo que desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020135","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29491","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42709","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1031","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document, related to an uninitialized variable."},{"lang":"es","value":"CoreGraphics en Apple Mac OS X versiones anteriores a 10.5.3, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un documento PDF especialmente diseñado, relacionado con una variable no inicializada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020136","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29480","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42710","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1032","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/184.html\r\n'CWE-184: Incomplete Blacklist'","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an (1) Automator, (2) Help, (3) Safari, or (4) Terminal content type for a downloadable object, which does not trigger a \"potentially unsafe\" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5."},{"lang":"es","value":"Una vulnerabilidad de lista negra incompleta en CoreTypes en Apple Mac OS X versiones anteriores a 10.5.3, permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de un tipo de contenido de (1) Automator, (2) Help, (3) Safari o (4) Terminal para un objeto descargable, que no activa un mensaje de advertencia \"potentially unsafe\" en (a) la funcionalidad Download Validation en Mac OS X versión 10.4 o (b) la funcionalidad Quarantine en Mac OS X versión 10.5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29481","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42711","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1033","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information (credentials) by reading the log data, related to \"authentication environment variables.\""},{"lang":"es","value":"El planificador en CUPS en Apple Mac OS X versiones 10.5 anteriores a 10.5.3, cuando el registro de depuración está habilitado y una impresora requiere una contraseña, permite a los atacantes obtener información confidencial (credenciales) mediante la lectura los datos de registro, relacionados con \"authentication environment variables.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of cups as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2008-06-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","matchCriteriaId":"772C32A8-A958-47B3-855D-116B0A7E9E5D"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020145","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29484","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42713","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1034","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted help:topic URL that triggers a buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en Help Viewer en Apple Mac OS X versiones anteriores a 10.5, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una URL help:topic que desencadena un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.4","matchCriteriaId":"F30B3CC1-A94C-4C6F-85EB-A432168E812F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020138","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/566875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29483","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42716","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/566875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1035","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an \"ATTACH;VALUE=URI:S=osumi\" line in a .ics file, which triggers a \"resource liberation\" bug.  NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier."},{"lang":"es","value":"Una vulnerabilidad de uso de la memoria previamente liberada en Apple iCal versión 3.0.1 en Mac OS X, permite a los servidores CalDAV remotos y atacantes remotos asistidos por el usuario activar una corrupción de memoria o posiblemente ejecutar un código arbitrario mediante una línea \"ATTACH;VALUE=URI:S=osumi\" en un archivo .ics, que desencadena un bug de \"resource liberation\". NOTA: CVE-2008-2007 fue usado originalmente para este problema, pero este es el identificador apropiado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ical:3.0.1:*:os_x:*:*:*:*:*","matchCriteriaId":"14F2AD70-926E-443A-8355-25A1F0F7C776"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2219","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492414/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492638/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492682/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29486","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020095","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1601","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492414/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492638/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492682/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1036","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks."},{"lang":"es","value":"La biblioteca International Components for Unicode (ICU) en Apple Mac OS X versiones anteriores a 10.5.3, Red Hat Enterprise Linux versión 5 y otros sistemas operativos, omite algunas secuencias de caracteres no válidas durante la conversión de algunas codificaciones de caracteres, lo que podría permitir a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020139","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0064","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1762","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0296.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29488","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-747-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42717","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10824","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-747-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1037","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCenter 8.2.2 allows remote attackers to inject arbitrary web script or HTML via the FILELIST parameter to an arbitrary component, which triggers injection into an Error Report page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función file listing en la interfaz del gestor web en Packeteer PacketShaper y PolicyCenter 8.2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro FILELIST en un componente de su elección, el cual dispara una inyección dentro de una página de Error Report."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:packeteer:packetshaper:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"11E3252C-7FA7-4B7B-BAC2-3B150F04393A"},{"vulnerable":true,"criteria":"cpe:2.3:a:packeteer:policycenter:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D6FF2BE2-6733-4073-AC75-5003878EC74E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29119","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3701","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488712/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27982","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488712/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1038","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the extmanager_install parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en mod/mod.extmanager.php de DBHcms 1.1.4 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el párametro extmanager_install."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drbenhur.com:dbhcms:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"38EEA0F4-D094-4613-A65B-A82EFBD68013"},{"vulnerable":true,"criteria":"cpe:2.3:a:drbenhur.com:dbhcms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"86357441-F26A-478A-9529-B8713805E523"}]}]}],"references":[{"url":"http://secunia.com/advisories/29110","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40835","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5189","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1039","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en question.asp de PORAR WEBBOARD permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro QID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:porar:webboard:*:*:*:*:*:*:*:*","matchCriteriaId":"776E8F9A-4D05-4D4A-BF8E-4753C347EE5A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29102","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27989","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40839","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1040","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI."},{"lang":"es","value":"Desbordamiento de búfer en la función Single Sign-On de Fujitsu Interstage Application Server 8.0.0 hasta 8.0.3 y 9.0.0, Interstage Studio 8.0.1 y 9.0.0, y Interstage Apworks 8.0.0 permite a atacantes remotos ejecutar código de su elección a través de una URI larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:rehl_as4_x86:*:*:*:*:*","matchCriteriaId":"A49EB67A-128E-4E57-B006-FBF3FF455B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"959E460F-9636-4928-85D4-D70603C5CA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:solaris:*:*:*:*:*","matchCriteriaId":"9EA2C8A3-AA4D-4D5B-A39D-F66C778A435F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"8E3C9365-2C44-4D25-9989-245B01BBB53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"291BA695-3C4B-45DA-822F-C29BA20A944C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"0452FDD0-AEA1-4B18-8127-0AC146476693"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"FB4FB650-20EA-4470-BFE0-724AE5EAD6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:solaris:*:*:*:*:*","matchCriteriaId":"29B1443E-2140-4694-8210-E6943AB5169F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"A81443A2-36E2-4012-86D2-77B77F528A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.3:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"7FC529E7-8B7D-4EC6-BD56-AB3DBBB169C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.3:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"E4508B8D-D9E3-406B-B4EB-BC1A4CD0BB5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.3:*:solaris:*:*:*:*:*","matchCriteriaId":"C19EC095-26F9-486C-A766-F4BC9490F292"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"4CBB9B01-8AE0-49F7-A4D5-DFBE8AB94848"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"F4DA2183-EDAA-416C-AE5F-5E225B2A0C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:rhel_as4_ipf:*:*:*:*:*","matchCriteriaId":"20283241-C99C-4D7E-9688-65115E3373F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"B1288BB4-4DCB-4841-8BCD-1B34A05FE87F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:rhel5_intel64:*:*:*:*:*","matchCriteriaId":"7048DB3A-70BD-4DDF-A202-AC62BE51F702"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:rhel5_ipf:*:*:*:*:*","matchCriteriaId":"5A2B5979-4023-470C-945C-352635C8FCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:rhel5_x86:*:*:*:*:*","matchCriteriaId":"13A7F441-0AA2-484B-8D99-7ADBC2737232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:solaris:*:*:*:*:*","matchCriteriaId":"62A86AB2-E2E1-426D-9F07-F5414255D3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"EE963A4D-F0F1-41CF-AE5A-8B83AEBC9900"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0a:*:rhel_as4_ipf:*:*:*:*:*","matchCriteriaId":"4CBFE59F-1E31-4FAB-9A27-CFE1FBD51AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0a:*:rhel5_ipf:*:*:*:*:*","matchCriteriaId":"905C8771-C808-4A94-97F8-C9894C851FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0a:*:windows:*:*:*:*:*","matchCriteriaId":"97C88CF5-AF38-45DA-AC00-068672B72E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"28D725A0-4DBD-4E77-8BB3-3BF15DF70CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"13A4721C-467E-4918-AFB8-A53B8B2523D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:solaris:*:*:*:*:*","matchCriteriaId":"2148CE49-09CC-4200-9DB6-856E1F666799"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"3C6F6E7A-C304-42EB-AF72-DB1F0FA3DA9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"E4A5BA36-4204-4ED1-A557-FAC0826D37A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"66D55AAA-B3B7-422E-B73B-67379697B4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:solaris:*:*:*:*:*","matchCriteriaId":"C4350A87-DC8D-4FB4-A2F2-0B3613FA1F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"EBA07D82-CA9F-4F8F-9764-10AF9D5A4781"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.3:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"27D054FE-8AB7-49C2-95DB-38C9287CEECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.3:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"B6A79CF6-77DC-45A5-80D3-6951E5E1F39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.3:*:solaris:*:*:*:*:*","matchCriteriaId":"FBA25F39-19A4-4A88-8BB6-0A918F862378"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"02B71A36-178F-4160-B3EE-A727FE235EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:rhel_as4_em64t:*:*:*:*:*","matchCriteriaId":"56C1E41F-2AE1-4C3E-A296-F3DF0535C954"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:rhel_as4_ipf:*:*:*:*:*","matchCriteriaId":"22AEA0ED-0DBB-4F69-BEA4-DB222C3E784E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:rhel_as4_x86:*:*:*:*:*","matchCriteriaId":"84364B08-FF26-480D-ACFF-9A05E34D204C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:rhel5_intel64:*:*:*:*:*","matchCriteriaId":"B587944D-8198-4745-B0E4-F0A76235935D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:rhel5_ipf:*:*:*:*:*","matchCriteriaId":"9C0D3782-2F9A-4E56-BE00-ECE0CE24B42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:rhel5_x86:*:*:*:*:*","matchCriteriaId":"40175C5D-71FF-4832-BACD-E125DB67FC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:solaris:*:*:*:*:*","matchCriteriaId":"64CA4B6C-C180-4742-89DA-A30D0B8AD565"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"CF82E26A-AF70-4160-A649-80E8EA5E708E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0a:*:windows:*:*:*:*:*","matchCriteriaId":"2A11BB25-F3FA-4C64-A48F-497E7CCB8C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_enterprise:8.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"9AAE4A17-F4DC-461B-9C8A-0954C6A8CCF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_standard_j:8.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"A3BAF3B4-ED0E-46E9-885D-8F8940ED2F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_enterprise:8.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"820222D1-179E-4B58-98E1-24E18032EC6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_enterprise:v9.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"DF60DC81-9A28-41A2-9BCE-951ADD41288C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_standard_j:8.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"2E78B04C-C02E-4CDE-BD9B-FC7500FFB7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_standard_j:v9.0.0:*:windows:*:*:*:*:*","matchCriteriaId":"C5355E6C-7A46-452A-910E-AAA9D5BEA597"}]}]}],"references":[{"url":"http://secunia.com/advisories/29088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27966","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200804e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1041","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to inject arbitrary web script or HTML via the domain parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en mwhois.php de Matt Wilson Matt's Whois (MWhois) permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro domain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matts_whois:matts_whois:*:*:*:*:*:*:*:*","matchCriteriaId":"23765B00-5A33-4EC9-8C39-BC8918A471C2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29093","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0802-exploits/mattswhois-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0802-exploits/mattswhois-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1042","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/body.inc.php de Linux Web Shop (LWS) php Download Manager 1.0 y 1.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux_web_shop:php_download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"BCE84FB2-6A2C-4297-82E8-833D7B6F6083"}]}]}],"references":[{"url":"http://secunia.com/advisories/29089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27961","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40795","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5183","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1043","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en templates/default/header.inc.php de Linux Web Shop (LWS) php User Base 1.3 BETA permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro menu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux_web_shop:php_user_base:1.3:beta:*:*:*:*:*:*","matchCriteriaId":"50D03733-E629-47FE-86F7-6D0F1E02F758"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/494140/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27963","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494140/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1044","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.QSP2IE) in qsp2ie07076007.dll 7.7.6.7 and qsp2ie07074039.dll 7.7.4.39 in Move Media Player allows remote attackers to execute arbitrary code via a long argument to the UploadLogs method, a different vector than CVE-2007-4722.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX Quantum Streaming Player (Quantum Streaming IE Player)(también conocido como QSP2IE.QSP2IE) de qsp2ie07076007.dll 7.7.6.7 y qsp2ie07074039.dll 7.7.4.39 en Move Media Player permite a atacantes remotos ejecutar código de su elección a través de un argumento largo del método UploadLogs, un vector diferente a CVE-2007-4722.\r\nNOTA: alguno de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:move_networks_inc:move_media_player:*:*:*:*:*:*:*:*","matchCriteriaId":"881304CC-9DCA-4FCF-A8AB-4C8F673A7568"},{"vulnerable":true,"criteria":"cpe:2.3:a:move_networks_inc:qunatum_streaming_player:7.7.4_39:*:*:*:*:*:*:*","matchCriteriaId":"903D471C-C03B-4FAC-89F9-81C1F067075E"},{"vulnerable":true,"criteria":"cpe:2.3:a:move_networks_inc:qunatum_streaming_player:7.7.6.7:*:*:*:*:*:*:*","matchCriteriaId":"2322829B-51BF-46B5-A79D-E0BF7C1F0DE4"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060460.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27995","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0684","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5190","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060460.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1045","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función de navegación del árbol de ficheros de system/workplace/views/explorer/tree_files.jsp en Alkacon OpenCMS 7.0.3 permite a atacantes remotos inyectar web script o HMTL de su elección a través del parámetro resource.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"77C1DA6A-037E-4EA6-B18A-774D365E5E07"}]}]}],"references":[{"url":"http://secunia.com/advisories/29121","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3702","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488708/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27986","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488708/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1046","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en Quinsonnas Mail Checker 1.55 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro op[footer_body]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quinsonnas:quinsonnas_mail_checker:1.55:*:*:*:*:*:*:*","matchCriteriaId":"D366989D-CA8A-4D08-86F2-9614A5ECE5B6"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5176","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1047","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en tiki-edit_article.php de TikiWiki before 1.9.10.1 permite a atacantes  remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"E4003F93-8AE6-461B-BDB9-D55A1683B6B9"}]}]}],"references":[{"url":"http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=1498","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29092","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/ReleaseNotes1910","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27968","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0661","source":"cve@mitre.org"},{"url":"http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=1498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/ReleaseNotes1910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1048","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the dir parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en manager/xmedia.php de Plume CMS 1.2.2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plume-cms:plume_cms:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"99901636-80ED-4F0E-9DC1-CCE280A6CBD0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29116","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-plume-cms.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27999","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019507","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-plume-cms.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1049","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Parallels SiteStudio en versiones anteriores a 1.7.2, y 1.8.x en versiones anteriores 1.8b, como lo utilizado en Parallels H-Sphere 3.0 en versiones anteriores a Patch 9 y 2.5 en versiones anteriores a Patch 11, tiene un efecto y vectores de ataque desconocidos.\r\n\r\n\t\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:positive_software:h-sphere:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5_patch_10","matchCriteriaId":"656B3F30-7DDC-423C-A749-5BEE8B675CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:positive_software:h-sphere:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0_patch_8","matchCriteriaId":"C2BC0CFD-D6A0-4197-82CE-4D923EB6C31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:positive_software:sitestudio:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"E6DA2104-F3C2-4116-8136-FF3D8295EE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:positive_software:sitestudio:1.8:*:*:*:*:*:*:*","matchCriteriaId":"8300C18A-B43D-4F7C-AFAD-3DAD41651EDE"}]}]}],"references":[{"url":"http://secunia.com/advisories/29084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.psoft.net/misc/hs_ss_technical_update.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28002","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019506","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.psoft.net/misc/hs_ss_technical_update.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1050","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Softbiz Jokes & Funny Pics Script permite a atacantes remotos ejecutar comandos SLQ de su elección a través del parámetro sbcat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbiz:jokes_and_funny_pictures_script:*:*:*:*:*:*:*:*","matchCriteriaId":"6C494F8A-6561-44B0-9C66-746E08FA7B48"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488706/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27973","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488706/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1051","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en include/body_comm.inc.php de phpProfiles 4.5.2 BETA permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phpprofiles:phpprofiles_:4.5.2:beta:*:*:*:*:*:*","matchCriteriaId":"DFFDA9D9-6FBB-4647-B2BC-C1B9E9328699"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1052","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails."},{"lang":"es","value":"La interface de administración web de NetWin SurgeFTP 2.3a2 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través un entero largo en la cabecera Content-Length HTT, lo cual dispara un puntero a referencia NULL cuando la asignación de memoria falla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.3a2:*:*:*:*:*:*:*","matchCriteriaId":"6ECEB4F1-48B7-495C-9FF6-ACEDD15B0D0D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/surgeftpizza-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3704","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40843","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/surgeftpizza-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1053","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1) viewarticle or (2) printpage action to modules.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el módulo Kose_Yazilari de PHP-Nuke permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro artid en una acción (1)viewarticle o (2) printpage de modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:kose_yazilari_module:*:*:*:*:*:*:*:*","matchCriteriaId":"59B3FD49-C1B6-41A3-BFFA-59619AA70DBC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27991","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40848","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1054","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función _lib_spawn_user_getpid de (1) swatch.exe y (2) surgemail.exe en NetWin SurgeMail 38k4 y versiones anteriores, y beta 39a, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su elección a través de una petición HTTP con múltiples cabeceras largas de webmail.exe y otros ejecutables CGI no especificados, lo cual dispara un desbordamiento cuando asignan valores a variables de entorno.\r\nNOTA: parte de esta información ha sido obtenida a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"06B04968-6115-48D0-A315-D0445234DA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*","matchCriteriaId":"A3213555-A5AC-4722-B2A9-26726803F813"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:*","matchCriteriaId":"0EB5003E-B9BA-4DD0-98EE-C3AAFBF7BFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*","matchCriteriaId":"96563C20-642A-47EA-8A4B-1DE9C1DD7377"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"439847AC-0ACD-4BDB-A935-3CE645366DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*","matchCriteriaId":"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*","matchCriteriaId":"90487000-A5DA-463B-82B2-5F83DBEC7154"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"8B654A1F-01A3-4F18-A1E6-9D924BF34397"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"4FDB3E97-547C-4531-81E9-B280E3DF39D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:*","matchCriteriaId":"61DA6241-B456-4721-BAB7-A857FAA4B41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"74F72E7E-9561-4F82-8AFC-DB0DA32F8221"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:*","matchCriteriaId":"BBBC4664-D561-4DDD-AC69-003D498FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:*","matchCriteriaId":"7324F0F8-6F15-4966-9589-7BDF502DA287"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2c9:*:*:*:*:*:*:*","matchCriteriaId":"67230924-EDC9-40CD-931E-71D0ED4F4E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:*","matchCriteriaId":"FAF4BCCC-8284-4EB2-B38B-06283E584F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:*","matchCriteriaId":"288E7531-50DA-4AE1-B152-F0FBE7CA88BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*","matchCriteriaId":"914D7AFB-007F-48C1-98C0-13B38F2C2D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:*","matchCriteriaId":"1ED629A5-B807-4856-AD71-DF5040463694"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:*","matchCriteriaId":"5470DC1D-DBE4-4C03-B831-42533DF08D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.1s:*:*:*:*:*:*:*","matchCriteriaId":"A697CF22-6FEF-4134-90D7-C000E891157D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:*","matchCriteriaId":"50C06B4F-1DEC-4622-B060-184762418112"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:*","matchCriteriaId":"19390313-1B1C-4388-AA3B-1A470416FADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:*","matchCriteriaId":"EB1FD0B1-DEE5-4765-9538-FBA20E8B1559"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:*","matchCriteriaId":"30495DFC-EC4F-4449-851A-3358C9BCBF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:38k:*:*:*:*:*:*:*","matchCriteriaId":"9E938F32-9C91-43C9-B8E9-8101AED6C713"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:38k4:*:*:*:*:*:*:*","matchCriteriaId":"6A613F99-9733-411B-A8F9-3A35AEE6B0DD"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/surgemailz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3705","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488741/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019500","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0678","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40834","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/surgemailz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488741/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1055","sourceIdentifier":"cve@mitre.org","published":"2008-02-27T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en webmail.exe de NetWin SurgeMail 38k4 y versiones anteriores y beta 39a, y WebMail 3.1s y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su elección a través de cadenas de formato especificadas en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:*:*:*:*:*:*:*:*","versionEndIncluding":"38k4","matchCriteriaId":"0338308B-54C6-4C2F-9A5F-A4D0AB34E091"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"06B04968-6115-48D0-A315-D0445234DA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*","matchCriteriaId":"A3213555-A5AC-4722-B2A9-26726803F813"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:*","matchCriteriaId":"0EB5003E-B9BA-4DD0-98EE-C3AAFBF7BFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*","matchCriteriaId":"96563C20-642A-47EA-8A4B-1DE9C1DD7377"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"439847AC-0ACD-4BDB-A935-3CE645366DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*","matchCriteriaId":"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*","matchCriteriaId":"90487000-A5DA-463B-82B2-5F83DBEC7154"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"8B654A1F-01A3-4F18-A1E6-9D924BF34397"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"4FDB3E97-547C-4531-81E9-B280E3DF39D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:*","matchCriteriaId":"61DA6241-B456-4721-BAB7-A857FAA4B41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"74F72E7E-9561-4F82-8AFC-DB0DA32F8221"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:*","matchCriteriaId":"BBBC4664-D561-4DDD-AC69-003D498FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:*","matchCriteriaId":"7324F0F8-6F15-4966-9589-7BDF502DA287"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2c9:*:*:*:*:*:*:*","matchCriteriaId":"67230924-EDC9-40CD-931E-71D0ED4F4E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:*","matchCriteriaId":"FAF4BCCC-8284-4EB2-B38B-06283E584F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:*","matchCriteriaId":"288E7531-50DA-4AE1-B152-F0FBE7CA88BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*","matchCriteriaId":"914D7AFB-007F-48C1-98C0-13B38F2C2D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:*","matchCriteriaId":"1ED629A5-B807-4856-AD71-DF5040463694"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:*","matchCriteriaId":"5470DC1D-DBE4-4C03-B831-42533DF08D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:*","matchCriteriaId":"50C06B4F-1DEC-4622-B060-184762418112"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:39a:*:*:*:*:*:*:*","matchCriteriaId":"F1616805-E66C-41AD-9D58-D15DE096597A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:beta_39a:*:*:*:*:*:*:*","matchCriteriaId":"EFE7385D-DD52-4E65-9514-84DD3217E2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webmail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1s","matchCriteriaId":"26B239D5-5741-40D0-8286-E946604056D3"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/surgemailz-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29137","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3705","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488741/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27990","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019500","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0678","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40833","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/surgemailz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488741/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1056","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh.  NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Symark PowerBroker de 2.8 a 5.0.1 permiten a usuarios locales obtener privilegios a través de una cadena argv[0] larga cuando se ejecuta 1) pbrun, (2) pbsh, o (3) pbksh. NOTA: el producto a veces se instala en entornos con relaciones de confianza que facilitan compromisos de subsecuencia remota."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F16E3B69-F425-4FAB-9201-2CF0590016B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:3.0:*:*:*:*:*:*:*","matchCriteriaId":"16AB3CBC-A6A6-487D-A530-9E45B4BFDD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:3.2:*:*:*:*:*:*:*","matchCriteriaId":"FD7ADE8D-CC82-4BB7-9BA1-90DCBE7DFC0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E587CF-6F19-4BB1-8C30-577D4F1D6DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2B255DD3-556A-4B77-8479-062E841EED10"},{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0131FCF9-69F4-46DA-8A6B-81FB722170BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symark:powerbroker:5.01:*:*:*:*:*:*:*","matchCriteriaId":"D8BED834-E613-423A-82F7-A2E0FF158641"}]}]}],"references":[{"url":"http://secunia.com/advisories/29111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mnin.org/advisories/2008_symarkpb.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28015","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.symark.com/support/PBFeb2008Announcement.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mnin.org/advisories/2008_symarkpb.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symark.com/support/PBFeb2008Announcement.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1057","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv6 routing headers."},{"lang":"es","value":"La función ip6_check_rh0hdr de netinet6/ip6_input.c en OpenBSD 4.2, permite a atacantes provocar una denegación de servicio (error irrecuperable del sistema) a través de cabeceras de enrutamiento IPv6 mal formadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]}]}],"references":[{"url":"http://secunia.com/advisories/29078","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata42.html#008_ip6rthdr","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27965","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019496","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata42.html#008_ip6rthdr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1058","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP packets.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de Denegación de servicio en netinet/tcp_subr.c en OpenBSD 4.1 y 4.2, que permite a atacantes remotos  causar una denegación de servicio (kernel panic) a través de paquetes TCP manipulados. NOTA: algunos d estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]}]}],"references":[{"url":"http://secunia.com/advisories/29078","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata41.html#013_tcprespond","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata42.html#007_tcprespond","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27949","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata41.html#013_tcprespond","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/errata42.html#007_tcprespond","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1059","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de ficheros PHP en modules/syntax_highlight.php en las extensiones para Wordpress Sniplets 1.1.2 y 1.2.2 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL el parámetro libpath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8543861B-A64B-4DAE-9DED-0DDDF830F93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:sniplets_plugin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0329D72F-46F6-4A6C-95B6-78D2265FA247"}]}]}],"references":[{"url":"http://secunia.com/advisories/29099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488734/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27985","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40829","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488734/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1060","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter."},{"lang":"es","value":"Vulnerabilidad de inyección Eval en modules/execute.php de Sniplets 1.1.2 y 1.2.2 plugin de WordPress, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8543861B-A64B-4DAE-9DED-0DDDF830F93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:sniplets_plugin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0329D72F-46F6-4A6C-95B6-78D2265FA247"}]}]}],"references":[{"url":"http://secunia.com/advisories/29099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488734/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27985","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40831","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488734/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1061","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) notice.php, and (c) inset.php in view/sniplets/, and possibly (d) modules/execute.php; the (2) url parameter to (e) view/admin/submenu.php; and the (3) page parameter to (f) view/admin/pager.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el plugin Sniplets 1.1.2 y 1.2.2 para WordPress, permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de  (1) parametro text en (a) warning.php, (b) notice.php y (c) inset.php en view/sniplets/ y posiblemente (d) modules/execute.php; el (2) parámetro  url de (e) view/admin/submenu.phpy el (3) parámetro page en (f) view/admin/pager.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8543861B-A64B-4DAE-9DED-0DDDF830F93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:sniplets_plugin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0329D72F-46F6-4A6C-95B6-78D2265FA247"}]}]}],"references":[{"url":"http://secunia.com/advisories/29099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488734/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27985","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40830","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488734/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1062","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted packet with two CRLF sequences.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"InterVideo IMC Server (también conocido como IMCSvr.exe) e InterVideo Home Theater (también conocido como IHT.exe) en InterVideo WinDVD Media Center 2.11.15.0, permite a atacantes remotos causar una denegación de servicio (caída de aplicación y referencia a NULL) a través de un paquete manipulado con dos secuencias CRLF. NOTA: el origen de esta información es desconocida. Los detalles se han obtenido a través de información por parte de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intervideo:windvd_media_center:2.11.15.0:*:*:*:*:*:*:*","matchCriteriaId":"A0487CD5-578A-4368-9599-92AE4BD0EA14"}]}]}],"references":[{"url":"http://secunia.com/advisories/28910","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1063","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comando en sitios cruzados (XSS) en el módulo XM-Memberstats (xmmemberstats) para XOOPS permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro sortby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xm-memberstats:2.0:*:*:*:*:*:*:*","matchCriteriaId":"86D0B35B-FAFC-4095-9E82-8BE3EAD36833"}]}]}],"references":[{"url":"http://www.xssing.com/index.php?x=3&y=12","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41001","source":"cve@mitre.org"},{"url":"http://www.xssing.com/index.php?x=3&y=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1064","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en images.php del módulo Red Mexico RMSOFT Gallery System (GS) 2.0 module (también conocido como rmgs) para XOOPS permite a atacantes remotos inyectar web script o HMTL de su elección a través del parámetro q."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops_rmsoft_gallery_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4241F0-7B5E-49F7-A73D-567957812673"}]}]}],"references":[{"url":"http://www.xssing.com/index.php?x=3&y=12","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41013","source":"cve@mitre.org"},{"url":"http://www.xssing.com/index.php?x=3&y=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1065","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the (1) letter or (2) sortby parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples Vulnerabilidades de Inyección SQL en  XM-Memberstats (xmmemberstats) 2.0e modulo para XOOPS, que permite a atacantes remotos   ejecutar comandos SQL de su elección   a través de los parámetros (1)letter o (2) sortby. NOTA: el origen de esta información es desconocido; los detalles se han obtenido a través de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xm_memberstats:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"BA94929A-9322-40BD-86AB-8228316A96A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27979","source":"cve@mitre.org"},{"url":"http://www.xssing.com/index.php?x=3&y=12","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xssing.com/index.php?x=3&y=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1066","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\\0' character in a search string."},{"lang":"es","value":"La extensión modifier.regex_replace.php de Smarty before 2.6.19,utilizado como Serendipity (S9Y) y otros productos, permite a atacantes llamar a funciones PHP de su elección a través de plantillas, relacionado con un carácter '\\0' en una cadena de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.18","matchCriteriaId":"B305BAAF-5CF8-4A5C-8E59-B308A754A3A8"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29241","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29398","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29562","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-04.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1520","source":"cve@mitre.org"},{"url":"http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28105","source":"cve@mitre.org"},{"url":"http://www.smarty.net/misc/NEWS","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41002","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00298.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00358.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00551.html","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201111-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpinsider.com/smarty-forum/viewtopic.php?p=47652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.smarty.net/misc/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00298.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1067","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/update_translations.php."},{"lang":"es","value":"Múltiples inclusiones remotas de ficheros php en phpQLAdmin 2.2.7, que permite a atacantes remotos ejecutar código php de su elección a través de una URL  del parámetro _SESSION[path] al (1) ezmlm.php y (2)tools/update_translations.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpqladmin:phpqladmin:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3F1A5A61-62AF-473D-BC77-2F3521891E11"}]}]}],"references":[{"url":"http://secunia.com/advisories/29076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1068","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) Vert/index.php, (2) Noir/index.php, and (3) Bleu/index.php in template/, different vectors than CVE-2008-0645."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de ficheros PHP en Portail Web 2.5.1.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro site_path a (1)Vert/index.php, (2) Noir/index.php y (3) Bleu/index.php en template/. Estos son vectores diferentes de CVE-2008-0645."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portail_web_php:portail_web_php:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1.1","matchCriteriaId":"6BF6C81A-E9DE-489F-8738-DC3D3C855E58"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27962","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5182","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1069","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request.php and (2) qlib/smarty.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos PHP remotos en Quantum Game Library 0.7.2c permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro CONFIG[gameroot] a (1) server_request.php y (2) qlib/smarty.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quantum_game_library:quantum_game_library:0.7.2c:*:*:*:*:*:*:*","matchCriteriaId":"2F908AC4-E732-4E1B-8CE7-F616FA900771"}]}]}],"references":[{"url":"http://secunia.com/advisories/29077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27945","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40776","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5174","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1070","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet."},{"lang":"es","value":"El analizador SCTP de Wireshark (anteriormente Ethereal) de 0.99.5 a 0.99.7 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete mal formado."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-32.xml","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:057","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488967/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28025","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019515","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0704","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2296","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11378","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14995","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1071","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet."},{"lang":"es","value":"El analizador SNMP de Wireshark (anteriormente Ethereal) 0.99.6 hasta 0.99.7, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete mal formado."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-32.xml","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:057","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488967/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28025","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019515","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0704","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-01.html","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2296","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11633","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14784","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1072","sourceIdentifier":"cve@mitre.org","published":"2008-02-28T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug."},{"lang":"es","value":"El TFTP dissector en Wireshark (antes Ethereal) de la  v.0.6.0 a la v.0.99.7 ejecutado sobre Ubuntu 7.10, permite a atacantes remotos   causar una denegación de servicio (caída o consumo de memoria) a través de un paquete defectuoso, posiblemente en relación al bug de la biblioteca Cairo."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-32.xml","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:057","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488967/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28025","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019515","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0704","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-01.html","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2296","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10188","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1073","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems (ISS) Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en el interface de informes en Internet Scanner 7.0 Service Pack 2 Build 7.2.2005.52 del IIS, que permite a atacantes remotos   inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet_security_systems:internet_scanner:7.0_sp2:*:*:*:*:*:*:*","matchCriteriaId":"90E01EB5-6956-4CA8-B65A-687A42A6A58A"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2342381549/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29038","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28014","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019508","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0681","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2342381549/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1074","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[PREPEND_FILE] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en lib/head_auth.php de GROUP-E 1.6.41 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro CFG[PREPEND_FILE]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:group_e:group_e:1.6.41:*:*:*:*:*:*:*","matchCriteriaId":"2D84A3F0-949F-45F0-8AB2-68FDD889BA4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29134","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=196032&release_id=581434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28024","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0766","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5197","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=196032&release_id=581434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1075","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Maian Cart 1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro keywords en un comando de búsqueda. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_cart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DD9701D1-40E7-49C5-A80F-79B720B0F4E1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28028","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1076","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Interspire Shopping Cart 1.x, permite a atacantes remotos inyectar secuencias de códigos Web de su elección o HTML a través del parámetro search_query. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interspire:shopping_cart:1:*:*:*:*:*:*:*","matchCriteriaId":"A878FE71-1326-4E3C-9C85-FCF2AD02E0FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/29150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28029","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40906","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1077","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el index.php del componente Mambo y Joomla! Simpleboard (com_simpleboard) 1.0.3 Stable, que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid en una acción de muestra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mamboportal.com:simpleboard:1.0.3_stable:*:*:*:*:*:*:*","matchCriteriaId":"43BC8B23-7269-4EA6-B676-F9099C233670"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28018","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5195","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1078","sourceIdentifier":"secalert@redhat.com","published":"2008-02-29T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file.  NOTE: this is the same issue as CVE-2003-0308.1."},{"lang":"es","value":"expn en los paquetes am-utils y net-fs para Gentoo, rPath Linux y otras distribuciones, permite a usuarios locales sobrescribir archivos arbitrarios mediante un ataque de tipo symlink en el archivo temporal expn[PID]. NOTA: este es el mismo problema de CVE-2003-0308.1."}],"vendorComments":[{"organization":"Red Hat","comment":"The risks associated with fixing this bug are greater than the low severity security risk.We therefore currently have no plans to fix this flaw in Red HatEnterprise Linux.\n\nFor more information please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=435420","lastModified":"2008-03-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:rpath:rpath_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"745FEF27-20CE-4508-8373-421092A8C8A8"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=210158","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29144","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29187","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29694","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33400","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-09.xml","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/488931/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28044","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2255","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00273.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=210158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488931/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00273.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1079","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges."},{"lang":"es","value":"La función outboxWriteUnsent  enSendFile.jar para el software Beehive  SendFile.NET usa una contraseña fija para un servidor FTP, que permite a atacantes remotos obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beehive_software:sendfile.net:*:*:*:*:*:*:*:*","matchCriteriaId":"368E0B02-ADCC-4FFC-8AA5-8D159693E71A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29197","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3711","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488947/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488947/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1080","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input."},{"lang":"es","value":"Opera antes de 9.26 permite a atacantes remotos   asistidos por el usuario leer archivos de su elección engañando al usuario para que escriba los caracteres de nombre de archivo objetivo en un fichero de entrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.25","matchCriteriaId":"FC9E214E-0347-4D05-BFB7-EE2B3983F372"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29029","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29152","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29178","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-09.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/926/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/877/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27901","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0622","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/926/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/877/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1081","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties."},{"lang":"es","value":"Opera en versiones anteriores a 9.26 permite a atacantes remotos con la complicidad del usuario ejecutar secuencias de comandos de su elección a través de imágenes que contienen comentarios personalizados, las cuales son tratadas como una secuencia de comandos cuando el usuario muestra las propiedades de una imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.25","matchCriteriaId":"FC9E214E-0347-4D05-BFB7-EE2B3983F372"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29152","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29178","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-09.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/926/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/879/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27901","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0622","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/926/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/879/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1082","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.26 allows remote attackers to \"bypass sanitization filters\" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation."},{"lang":"es","value":"Opera versiones anteriores a 9.26 permite a atacantes remotos \"evitar los filtos de limpieza\" y realizar un ataque se secuencias de comandos en sitios cruzados (XSS) a través de valores de atributos manipulados en un documento XML, lo cual no son propiedades manejadas durante una presentación DOM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.25","matchCriteriaId":"FC9E214E-0347-4D05-BFB7-EE2B3983F372"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29152","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29178","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-09.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/926/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/880/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27901","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0622","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/926/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/880/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1083","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la función CreateDIBPatternBrushPt en GDI en Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 y SP2, Vista y Server 2008 permite a atacantes remotos ejecutar código arbitrario a través de un archivo de imagen EMF o WMF con una cabezera mal formada que desencadena un desbordamiento de entero, vulnerabilidad también conocida como \"GDI Heap Overflow Vulnerability\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*","matchCriteriaId":"DBE4A4EA-A0DE-4FDE-B9EC-D8729E17A1F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:x64:*:*:*:*:*","matchCriteriaId":"E8000F58-DF1C-464C-A14B-783CDC00E781"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29704","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/948590","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/632963","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/44213","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.osvdb.org/44214","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/490584/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28571","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30933","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019798","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1145/references","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-020/","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41471","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/5442","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6330","source":"secure@microsoft.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/948590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/632963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/44213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/44214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/490584/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1145/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1084","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation.  NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys."},{"lang":"es","value":"Una vulnerabilidad no especificada en el kernel de Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 y SP2, hasta Vista SP1 y Server 2008 permite a los usuarios locales ejecutar código arbitrario por medio de vectores de ataque desconocidos relacionados con la comprobación de entrada inapropiada. NOTA: más tarde se reportó que una función afectada es NtUserFnOUTSTRING en el archivo win32k.sys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://milw0rm.com/sploits/2008-ms08-25-exploit.zip","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29720","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28554","source":"secure@microsoft.com","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019803","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1149/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/5518","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://milw0rm.com/sploits/2008-ms08-25-exploit.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1149/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1085","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en Microsoft Internet Explorer 5.01 SP4, 6 hasta SP1, y 7, permite a atacantes remotos ejecutar código de su elección a través de una cadena de datos manipulada que provoca una corrupción de memoria, tal como se ha demostrado utilizando un MIME-type no válido que no contenía un manejador registrado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:*","matchCriteriaId":"B054A26A-7414-41B2-A46D-49E798D7A346"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:*","matchCriteriaId":"181D0FA2-79E1-4422-9810-D7A557805872"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"81C4C1ED-AC7D-4970-8B34-62D304A83FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:*:windows_server_2003:*:*:*:*:*","matchCriteriaId":"5B5F31E2-2060-45BC-9724-A447544905E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"574EE6CB-7AF4-4DE2-B668-36BBCB19FCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"BE2858A5-C9BF-40D8-B3D2-056562BF1C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2:*:*:*:*:*","matchCriteriaId":"75234062-241B-421A-B7BC-610A5B0D8EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2_itanium:*:*:*:*:*","matchCriteriaId":"82D6ABD4-C607-44E8-8D84-25406AE0F3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition:*:*:*:*:*","matchCriteriaId":"379FE901-58AC-4F47-9B3B-9A40D723CC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"EC18DBBB-9C9E-4532-B390-92C35E52943A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition:*:*:*:*:*","matchCriteriaId":"49C8060E-CFB9-4EEA-B5B9-B7607B046AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"FB17CABD-21BE-454F-9602-19DB444A574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2:*:*:*:*:*","matchCriteriaId":"3994AE83-EC42-4893-AF51-BC98F35A53CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2_itanium:*:*:*:*:*","matchCriteriaId":"33F4B074-7BA5-4A36-A866-945D771D2EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition:*:*:*:*:*","matchCriteriaId":"491333D2-FDB1-4FC8-B54C-19E06B57FC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"E8453618-EDD7-41F4-840E-AA323A873B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2008_itanium_edition:*:*:*:*:*","matchCriteriaId":"35B0471D-79F8-4DB8-B777-57054CE11B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2008_x32_edition:*:*:*:*:*","matchCriteriaId":"DE97ECE1-417A-4E5D-A4A6-730C10694397"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2008_x64_edition:*:*:*:*:*","matchCriteriaId":"DCD51C3D-0A76-4552-A292-448C65859ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista:*:*:*:*:*","matchCriteriaId":"E5E8CC5B-B8E9-4B54-AE32-4632E77F0320"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista_x64:*:*:*:*:*","matchCriteriaId":"EA7D9655-718E-42D6-9752-64BA3AAC5546"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition:*:*:*:*:*","matchCriteriaId":"8E5B894F-6E15-46DA-93B4-EAB9468D37A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:*","matchCriteriaId":"CCE0AF0B-DF2A-4F3F-8F5C-0E4056A34229"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/27707","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-100/advisory/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490840/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28552","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019801","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1148/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-100/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490840/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1148/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1086","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption."},{"lang":"es","value":"El HxTocCtrl ActiveX control (hxvz.dll), usado en Microsoft Internet Explorer 5.01 SP4 y 6 SP1, en Windows XP SP2, Server 2003 SP1 y SP2, Vista SP1 y Server 2008, permite a atacantes remotos ejecutar código de su elección a través de argumentos mal formados, lo que dispara una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*","matchCriteriaId":"59F8A83B-899C-47CE-B444-E8B4AC7723C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*","matchCriteriaId":"7AF8B188-A5E0-4D53-9FE1-C72BD956191B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29714","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28606","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019800","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1147/references","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41464","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1147/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1087","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka \"GDI Stack Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en GDI de Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 y SP2, Vista, y Server 2008, permite a atacantes remotos ejecutar código de su elección a través de un fichero de imagen EMF con los parámetros del nombre del fichero manipulados, también conocido como \"Vulnerabilidad de desbordamiento de pila en GDI\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*","matchCriteriaId":"59F8A83B-899C-47CE-B444-E8B4AC7723C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*","matchCriteriaId":"7AF8B188-A5E0-4D53-9FE1-C72BD956191B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29704","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44215","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28570","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019798","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1145/references","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/5442","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6656","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1145/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1088","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of \"memory resource allocations.\""},{"lang":"es","value":"Microsoft Project 2000 Service Release 1, 2002 SP1, y 2003 SP2, permite a atacantes remotos con la ayuda del usuario local ejecutar código de su elección a través de un fichero Project manipulado. Relacionado con la no correcta  validación de \"ubicación de recursos de memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"6F0EF69E-52BA-4D7C-B470-CB4A92DA7EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"BEF93972-D171-4873-91C1-0CB884D58206"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29690","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/155563","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28607","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019797","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1142/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-018","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41447","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5384","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/155563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1142/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1089","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka \"Visio Object Header Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Visio 2002 SP2, 2003 SP2 y SP3, y 2007  SP1, permite a atacantes asistidos por el usuario ejecutar código de su elección a través de un archivo Visio que contiene  datos del objeto de cabecera manipulados, también conocida como \"Vulnerabilidad de Objeto de Cabecera de Visio\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"4142D44F-26F2-467B-A7DE-00239C0013D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*","matchCriteriaId":"9D02D769-061D-44A5-B019-F4E653DF615A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"6FBEFBED-72F3-447B-8164-9E5C16828484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003_sp3:*:*:*:*:*:*:*","matchCriteriaId":"70415FAE-E313-4F76-961D-A259651CFC5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007:*:*:*:*:*:*:*","matchCriteriaId":"C27CD3D6-9893-4522-B70F-F69A6E4A9CDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"344E501A-B7A4-4309-AD7A-CA7A8A05D82D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29691","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28555","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019804","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1143/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-019","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41451","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5496","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1143/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1090","sourceIdentifier":"secure@microsoft.com","published":"2008-04-08T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka \"Visio Memory Validation Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Visio 2002 SP2, 2003 SP2 y SP3, y 2007 hasta SP1, que permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un un archivo .DXF manipulado. También conocida como \"Vulnerabilidad de Validación de Memoria en Visio\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"4142D44F-26F2-467B-A7DE-00239C0013D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*","matchCriteriaId":"9D02D769-061D-44A5-B019-F4E653DF615A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"6FBEFBED-72F3-447B-8164-9E5C16828484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003_sp3:*:*:*:*:*:*:*","matchCriteriaId":"70415FAE-E313-4F76-961D-A259651CFC5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007:*:*:*:*:*:*:*","matchCriteriaId":"C27CD3D6-9893-4522-B70F-F69A6E4A9CDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"344E501A-B7A4-4309-AD7A-CA7A8A05D82D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29691","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28556","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019804","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1143/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-019","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41452","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5344","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120845064910729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1143/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1091","sourceIdentifier":"secure@microsoft.com","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a \"memory calculation error\" and a heap-based buffer overflow, aka \"Object Parsing Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada de Microsoft Word en Office 2000 y XP SP3, 2003 SP2 y SP3, y 2007 Office System SP1 y anteriores, permite a atacantes remotos ejecutar código arbitrariamente a través de un archivo de Formato de Texto Enriquecido (.rtf) con una cadena mal formada que provoca un “error de cálculo en memoria” y un desbordamiento de búfer basado en el montículo (heap), también conocido como “Vulnerabilidad de análisis sintáctico de Objeto.”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"4142D44F-26F2-467B-A7DE-00239C0013D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:sp1:*:*:*:*:*","matchCriteriaId":"5E8B5977-31FA-4018-80E1-908016F3C224"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:sp3:*:*:*:*:*","matchCriteriaId":"79EEAE40-5791-41F5-A35D-2388480B3843"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30143","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/543907","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492020/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/29104","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020013","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1504/references","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-023","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5494","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/543907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492020/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1504/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1092","sourceIdentifier":"secure@microsoft.com","published":"2008-03-25T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008.  NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026."},{"lang":"es","value":"Un desbordamiento de búfer en la biblioteca msjet40.dll anterior a la versión 4.0.9505.0 en el Motor de Base de datos de Microsoft Jet permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Word creado, tal y como se explotó “in the wild” en marzo de 2008. NOTA: a partir de 20080513, Microsoft ha declarado que este es el mismo problema que el CVE-2007-6026."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*","matchCriteriaId":"644E2E89-F3E3-4383-B460-424D724EE62F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C426AFDD-870F-4CAD-9E93-636714984259"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F02894C4-57A7-45FE-B9D2-1A0EE3ABA455"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A4182673-402A-4801-9A0F-2516EE923DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003_sp3:*:*:*:*:*:*:*","matchCriteriaId":"EA77105B-D33D-44D1-BBB0-98EC8A59F69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2007:*:*:*:*:*:*:*","matchCriteriaId":"A9B12493-4287-4AAD-9A18-D3FC3FCBE172"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"1A89CC23-C0B7-4050-AA21-CF74FE9ADE1B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://www.kb.cert.org/vuls/id/936529","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/950627.mspx","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019686","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41380","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/936529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/950627.mspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1093","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules."},{"lang":"es","value":"Acresso InstallShield Update Agent verifica adecuadamente la autenticidad de \"Rule Scripts\" (Regla de Secuencias de comandos) obtenida de las páginas GetRules.asp sobre servidores FLEXnet Connect, lo que permite a atacantes remotos de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código VBScript de su elección a través de las reglas de un troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acresso:flexnet_connect:*:*:*:*:*:*:*:*","matchCriteriaId":"CB0E0E5C-DD84-4F11-B643-1FA49B21F6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:acresso:intallshield_update_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"75218D2E-F247-4240-B94E-33965FE9979B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31896","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4268","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/837092","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/496389/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31204","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020893","source":"cve@mitre.org"},{"url":"http://www.simplicity.net/vuln/CVE-2008-1093.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2613","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/837092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/496389/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.simplicity.net/vuln/CVE-2008-1093.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1094","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:02.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.cgi en la página de visión de cuentas en Barracuda Spam Firewall (BSF) antes de 3.5.12.007, permite a administradores remotos autenticados ejecutar comandos arbitrarios SQL a través de un parámetro pattern_x en la acción search_count_equals, como lo demuestra el parámetro pattern_0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.11.020","matchCriteriaId":"BD01511D-F23B-4C4C-9CB6-BC8483DCAC96"}]}]}],"references":[{"url":"http://dcsl.ul.ie/advisories/02.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4793","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021455","source":"cve@mitre.org"},{"url":"http://www.barracudanetworks.com/ns/support/tech_alert.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499293/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7496","source":"cve@mitre.org"},{"url":"http://dcsl.ul.ie/advisories/02.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.barracudanetworks.com/ns/support/tech_alert.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499293/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1095","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T11:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly."},{"lang":"es","value":"La vulnerabilidad no especificada en la implementación del Protocolo de Internet (IP) en Sun Solaris versiones 8, 9 y 10 permite a los atacantes remotos omitir las políticas de firewall previstas o causar una denegación de servicio (pánico) por medio de vectores desconocidos, posiblemente relacionados con los paquetes ICMP y el reensamblaje de fragmentos IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200183-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-119.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27967","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40473","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200183-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-119.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1096","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function."},{"lang":"es","value":"La función load_tile en el codificador XCF de coders/xcf.c en (1) ImageMagick 6.2.8-0 y (2) GraphicsMagick (también conocido como gm) 1.1.7 permite a atacantes remotos asistidos por usuarios provocar una denegación de servicio (caída) o prosiblemente ejecutar código de su elección a través de un archivo .xcf manipulado que dispara una escritura en el montículo fuera de rango, posiblemente relacionada con la función ScaleCharToQuantum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AAB9E1C7-BCB2-43FF-8CAB-D48EFE723763"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E32122CF-7871-479D-8C7E-BE5851C31898"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5CF70195-5B78-4DA9-9EF4-2E39C03D8DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D742E790-2ED6-4EBB-8C49-277EB1D73EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"B0D10F27-B453-4550-9B63-57D2CEB8F65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DAF8A137-C144-427A-897E-5C3A3C2D5DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C2796AA1-61E5-46E4-B28F-358A49E0B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C38A3C0A-0A0A-4433-82BA-AE4D3943E25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C82A613A-1973-434E-81C5-C2A546C48A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"72E2AF1B-85A6-4109-83D9-76A44E8DD6E0"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414370","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/43212","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36260","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1858","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:099","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0145.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28821","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019880","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-681-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=286411","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41194","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10843","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0145.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-681-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=286411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1097","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función ReadPCXImage del codificador PCX de coders/pcx.c en (1) ImageMagick 6.2.4-5 y 6.2.8-0 y (2) GraphicsMagick (también conocido  como gm) 1.1.7 permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección a través del fichero .pcx que dispara una asignación incorrecta de memoria para el array scanline, provocando corrupción de memoria.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AAB9E1C7-BCB2-43FF-8CAB-D48EFE723763"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E32122CF-7871-479D-8C7E-BE5851C31898"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5CF70195-5B78-4DA9-9EF4-2E39C03D8DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D742E790-2ED6-4EBB-8C49-277EB1D73EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"B0D10F27-B453-4550-9B63-57D2CEB8F65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DAF8A137-C144-427A-897E-5C3A3C2D5DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C2796AA1-61E5-46E4-B28F-358A49E0B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C38A3C0A-0A0A-4433-82BA-AE4D3943E25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C82A613A-1973-434E-81C5-C2A546C48A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"72E2AF1B-85A6-4109-83D9-76A44E8DD6E0"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/43213","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36260","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/55721","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201311-10.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1858","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:099","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0145.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0165.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28822","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019881","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=285861","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41193","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11237","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201311-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0145.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0165.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=285861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1098","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails because of a duplicate name.  NOTE: the AttachFile XSS issue is already covered by CVE-2008-0781, and the login XSS issue is already covered by CVE-2008-0780."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MoinMoin 1.5.8 y anteriores permiten a atacantes remotos   inyectar secuencias de comandos web o HTML de su elección a través de (1) ciertas entradas procesadas por formatter/text_gedit.py (también conocido como el gui editor formatter); (2) un  nombre de página, que dispara una inyección en PageEditor.py cuando la página se borra exitosamente por una víctima en una acción DeletePage; (3) el nombre de la página destino para una acción RenamePage, lo que dispara una inyección en PageEditor.py cuando un intento de cambiar el nombre de la víctima falla debido a un nombre duplicado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.8","matchCriteriaId":"C3A2FDB5-6C57-43E2-AA1B-D083D93C5679"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499","source":"cve@mitre.org"},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30031","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41037","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1099","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages."},{"lang":"es","value":"_macro_Getval en wikimacro.py de MoinMoin 1.5.8 y anteriores no hace cumplir correctamente ACLs, lo que permite a atacantes remotos leer páginas protegidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.8","matchCriteriaId":"C3A2FDB5-6C57-43E2-AA1B-D083D93C5679"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.5/rev/4a7de0173734","source":"cve@mitre.org"},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30031","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28177","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41038","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.5/rev/4a7de0173734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1100","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file."},{"lang":"es","value":"Desbordamiento de búfer en la función cli_scanpe de libclamav (libclamav/pe.c) para ClamAV 0.92 y 0.92.1, permite a atacantes remotos ejecutar código de su elección a través de un archivo Upack PE manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29000","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29863","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29886","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29891","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29975","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30253","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30328","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31882","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-11/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1549","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.kb.cert.org/vuls/id/858595","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28756","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28784","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1019837","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1218/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41789","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=878","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-11/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/858595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1218/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1101","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to execute arbitrary code via a long pathname, as demonstrated by a long SRC attribute of an IMG element in an HTML document."},{"lang":"es","value":"Desbordamiento de búfer en el motor del visor de documentos KeyView de Autonomy (anteriormente Verity) KeyView, usado por IBM Lotus Notes 7.0.2 y 7.0.3, permite a atacantes remotos  ejecutar código de su elección a través de un nombre de ruta largo, como se ha demostrado usando un atributo SRC largo en una etiqueta IMG de un documento HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E6634684-2416-4A5C-A5C7-B1E946B33419"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:10.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"589D3BC2-ED1F-4C5B-8F94-67AE1909580D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28140","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-12/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/490826/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28454","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41725","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-12/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1102","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función imb_loadhdr de Blender 2.45 permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un fichero .blend que contiene imágenes Radiance RGBE manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:2.45:*:*:*:*:*:*:*","matchCriteriaId":"E25B260E-190C-4FE3-B706-3F56EE6ECAB6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29818","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30097","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30151","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30272","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-16/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1567","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:204","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28870","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1308/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41917","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00225.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00237.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-16/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1308/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00237.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1103","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to \"temporary file issues.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Blender tienen un impacto y vectores de ataque desconocidos, relacionado con \"temas de ficheros temporales\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:*:*:*:*:*:*:*:*","matchCriteriaId":"8B447B78-8D5A-4695-9E88-333DE42005D4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29842","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30151","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:204","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/28936","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42153","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1104","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings."},{"lang":"es","value":"Desbordamiento de búfer basado en Pila en Foxit Reader versiones anteriores a la 2.3 build 2912 permite a atacantes remotos asistidos por el usuario ejecutar código arbitrariamente a través de ficheros PDF manipulados, relacionado con la función JavaScript util.printf y los especificadores de punto flotante en las cadenas de formato."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"0D7112EB-E4C7-464F-8EC8-4E2714A137BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*","matchCriteriaId":"42134F7D-ED60-4815-BADD-542BBEFE7A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:2.2:*:*:*:*:*:*:*","matchCriteriaId":"67A1AA94-407E-421E-8BFE-4C0FBB9CD0E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29941","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-18/advisory/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/3899","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/119747","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492289/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29288","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020050","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1572","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42531","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-18/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/119747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492289/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1105","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función receive_smb_raw de util/sock.c en Samba 3.0.0 hasta 3.0.29, permite a atacantes remotos ejecutar código de su elección a través de una respuesta SMB manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.29","matchCriteriaId":"34616141-BB06-4F74-8B48-7C9575386FAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30228","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30385","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30396","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30442","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30449","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30478","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30489","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30543","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30736","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30835","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31246","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31911","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33696","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/secunia_research/2008-20/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-23.xml","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020123","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951","source":"PSIRT-CNA@flexerasoftware.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT2163","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0180","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1590","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:108","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0288.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0289.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0290.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2008-1105.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492683/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/492737/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/492903/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29404","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31255","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-617-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-617-2","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1681","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1908","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2639","source":"PSIRT-CNA@flexerasoftware.com","tags":["Permissions Required"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42664","source":"PSIRT-CNA@flexerasoftware.com","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45251","source":"PSIRT-CNA@flexerasoftware.com","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/5712","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/secunia_research/2008-20/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0289.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2008-1105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/492737/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/492903/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-617-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-617-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/5712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1106","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-09T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files."},{"lang":"es","value":"La interfaz de administración de Akamai Client (formerly Red Swoosh) 3322 y versiones anteriores permite a atacantes remotos evitar la autenticación a través de una petición HTTP que contiene (1) la cabecera Referer , o (2) una cabecera envenenada Referer que coincide con un dominio válido, lo cual permite a atacantes remotos llevar a cabo un ataque de falsificación de petición en sitios cruzados (CSRF) y forzar al cliente a descargar y ejecutar ficheros de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:client:*:*:*:*:*:*:*:*","versionEndIncluding":"3322","matchCriteriaId":"788B4A79-AD9D-4622-8706-4DA457A58BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:red_swoosh:client:*:*:*:*:*:*:*:*","versionEndIncluding":"3322","matchCriteriaId":"97803775-8BB2-4BA7-AC5D-A8A9B877237F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30135","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-19/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3930","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/493169/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/493170/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020208","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1761/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42895","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-19/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493170/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1761/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1108","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment."},{"lang":"es","value":"Desbordamiento de búfer en Evolution 2.22.1, cuando el plugin ITip Formates está desactivado, permite a atacantes remotos ejecutar código arbitrario a través de una cadena \"timezone\" larga en un adjunto iCalendar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"47D66360-0009-4D6D-B04B-A2A1366AD614"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30298","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30527","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30536","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30564","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30571","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30702","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30716","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-22/advisory/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-06.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:111","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0514.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0515.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0516.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0517.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29527","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020169","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/usn-615-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1732/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42824","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10471","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-22/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0514.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0515.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0516.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0517.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-615-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1732/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1109","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window)."},{"lang":"es","value":"Desbordamiento de Búfer basado en montículo en Evolution 2.22.1 permite a atacantes remotos asistidos por el usuario, ejecutar código arbitrariamente mediante una propiedad DESCRIPTION larga en un adjunto iCalendar, que no es gestionado correctamente durante una respuesta en la vista de calendario (también conocida como ventana de Calendarios)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"DFFCC802-9313-4B56-97A8-9A18F04799DE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30298","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30527","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30564","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30571","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30702","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30716","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-23/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-06.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:111","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0514.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0515.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29527","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020170","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/usn-615-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1732/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42826","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10337","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-23/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0514.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0515.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-615-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1732/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1110","sourceIdentifier":"cve@mitre.org","published":"2008-02-29T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header.  NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664."},{"lang":"es","value":"Desbordamiento de búfer en demuxers/demux_asf.c (también conocido como ASF demuxer) en  la extensión xineplug_dmx_asf.so de xine-lib before 1.1.10 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída) a través de una cabecera ASF manipulada.\r\nNOTA: esta cuestión provoca una caída cuando un atacante utiliza el código del exploit CVE-2006-1664, pero esto es diferente a CVE-2006-1664."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"7A3884A0-FDCE-4AB1-993E-835BD5897A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"A2FD9EFC-8213-4543-B57E-5BCD4929487A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=208100","source":"cve@mitre.org"},{"url":"http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=fb6d089b520dca199ef16a046da28c50c984c2d2%3Bstyle=gitweb","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200802-12.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://xinehq.de/index.php/news","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://xinehq.de/index.php/security","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41019","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/1641","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=208100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=fb6d089b520dca199ef16a046da28c50c984c2d2%3Bstyle=gitweb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200802-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xinehq.de/index.php/news","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://xinehq.de/index.php/security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/1641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1111","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information."},{"lang":"es","value":"El mod_cgi en lighttpd versión 1.4.18, envía el código fuente de los scripts CGI en lugar de un error 500 cuando ocurre un fallo de bifurcación, lo que podría permitir a los atacantes remotos obtener información confidencial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"DA46E89A-565E-439D-BCB2-6CEE44EFDFAC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29275","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-10.xml","source":"cve@mitre.org"},{"url":"http://trac.lighttpd.net/trac/changeset/2107","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489465/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28100","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=211956","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41008","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2326","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.lighttpd.net/trac/changeset/2107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489465/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=211956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00180.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1112","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T18:44:00.000","lastModified":"2023-11-07T02:01:52.803","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0928.  Reason: This candidate is a duplicate of CVE-2008-0928.  Notes: All CVE users should reference CVE-2008-0928 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"references":[]}},{"cve":{"id":"CVE-2008-1113","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks."},{"lang":"es","value":"Cisco Unified Wireless IP Phone 7921, cuando utiliza Protected Extensible Authentication Protocol (PEAP), no valida certificados de servidor, lo cual permite a los puntos de acceso inalámbricos remotos robar el resumen digital (hash) de contaseñas y dirigir ataques man-in-the-middle (MITM)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:7921_wireless_ip_phone:*:*:*:*:*:*:*:*","matchCriteriaId":"BB60B368-94E0-4A32-86B2-46BA076ADF3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vocera_communications:vocera_communications_badge:*:*:*:*:*:*:*:*","matchCriteriaId":"3A5DD0E9-3ECC-443C-9EA3-077D0CFF5358"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=896","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=901","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0402.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0449.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29082","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019494","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27935","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.zdnet.com/security/?p=901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0449.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1114","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks."},{"lang":"es","value":"Vocera Communications wireless handsets, cuando utiliza Protected Extensible Authentication Protocol (PEAP), no valida certificados de servidor, lo cual permite a puntos de acceso inalámbricos remotos robar el resumen digital (hashed) de contraseñas y dirigir un ataque man-in-the-middle (MITM)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:vocera:wireless_handset:-:*:*:*:*:*:*:*","matchCriteriaId":"AC1DA38C-E8CD-4388-961B-9C4EF41BFA16"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=896","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=901","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0402.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27935","source":"cve@mitre.org"},{"url":"http://www.vocera.com/downloads/InfrastructureGuide.pdf","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.zdnet.com/security/?p=901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Feb/0402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vocera.com/downloads/InfrastructureGuide.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1115","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands."},{"lang":"es","value":"Vulnerabilidad no especificada de Sun Solaris 8   en el directorio de funciones permite a usuarios locales provocar una denegación de servicio (error irrecuperable del sistema) a través de una secuencia no especificada de llamadas al sistema o comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29217","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200163-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28069","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0644/references","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200163-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0644/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1116","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnarbilidad de métodos no seguros en el control ActiveX de Web Scan Object (OL2005.dll) en Rising Antivirus Online Scanner permite a atacantes remotos forzar la descarga y ejecución de código de su elección mediante el establecimiento de la propiedad BaseURL e invocando el método UpdateEngine.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rising_antivirus_international:rising_web_scan_object:18.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B44E1BDE-E6E8-4805-8475-C39FC08F6B26"}]}]}],"references":[{"url":"http://secunia.com/advisories/29109","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27997","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0683/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40838","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0683/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1117","sourceIdentifier":"cve@mitre.org","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \\ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la utilidad de notas (también conocido como Flash Notes o mensajes intantáneos) en el módulo tb2ftp.dll de Timbuktu Pro 8.6.5 para Windows, y posiblemente en la versión 8.7 para Mac OS X, permite a atacantes remotos cargar ficheros en localizaciones arbitrarias mediante la utilización de un fichero de destino con un carácter \\ (barra invertida) seguido de la secuencia de caracteres ../ (punto, punto y barra). NOTA: esto puede ser utilizado para ejecutar código al escribir el fichero en la carpeta \"Inicio\". NOTA: esta vulnerabilidad reportada está causada por una reparación incompleta de VE-2007-4220."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:8.6.5:*:windows:*:*:*:*:*","matchCriteriaId":"7C97B7A9-5647-436E-9C24-B1F144BC511D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/timbuto-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/timbuto.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3741","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2166","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489360/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489382/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489414/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28081","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0840","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4455","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5238","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/timbuto-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/timbuto.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489360/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489382/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489414/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1118","sourceIdentifier":"cve@mitre.org","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields."},{"lang":"es","value":"Timbuktu Pro 8.6.5 para Windows, y posiblemente la versión 8.7 para Mac OS X, no efectúa la validación de parámetros de entrada previos a los campos de registro de información que aparecen en paquetes enviados desde otro servicio remoto, permite a atacantes remotos generar entradas de registro falseadas y posiblemente evitar la detección de ataques mediante la modificación de los campos nombre de ordenador, nombre de usuario y dirección IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:8.6.5:*:windows:*:*:*:*:*","matchCriteriaId":"7C97B7A9-5647-436E-9C24-B1F144BC511D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3742","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2166","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489414/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28081","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41330","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489414/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1119","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo include/doc/get_image.php en Centreon versión 1.4.2.3 y anteriores, permite a atacantes remotos leer archivos arbitrarios por medio de un .. (punto punto) en el parámetro img."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.3","matchCriteriaId":"D5712C73-E08B-4AC9-AA0A-4A434C40C6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4:*:*:*:*:*:*:*","matchCriteriaId":"AE85AAA1-7FF0-4AEA-A43A-18954F78080D"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"25A10AA5-F76F-4DB5-A2A2-6A0C76565AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"96B507D5-D2AC-4DD2-8FB1-B84C2EAA5998"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8D21C5EB-EA82-422D-8CEB-32544B369680"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E268C921-B9D5-4423-A935-79089DA53826"}]}]}],"references":[{"url":"http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28022","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5204","source":"cve@mitre.org"},{"url":"http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1120","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service (crash) via unspecified vectors related to HTML code generation."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en el componente embebido Internet Explorer para Mirabilis ICQ 6 build 6043 permite a servidores remotos ejecutar código de su elección o provocar una denegación de servicio (caída) a través de vectores no especificados relacionados con generación de código HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:mirabilis_icq:6:build_6043:*:*:*:*:*:*","matchCriteriaId":"644E3D38-A221-4257-99B7-860EA99008FB"}]}]}],"references":[{"url":"http://board.raidrush.ws/showthread.php?t=386983","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29138","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28027","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0701","source":"cve@mitre.org"},{"url":"http://board.raidrush.ws/showthread.php?t=386983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1121","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the session_vars cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de eazyPortal 1.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cookie session_vars."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eazyportal:eazyportal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"A16C3F85-AA7D-492D-8FA6-D308CE500654"}]}]}],"references":[{"url":"http://secunia.com/advisories/29123","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5196","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1122","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php.  NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el módulo de descargas en Koobi Pro versión 5.7, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro categ en el archivo index.php. NOTA: más tarde se reportó que esto también afecta a Koobi CMS versiones 4.2.4, 4.2.5, y 4.3.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dream4:koobi_pro:5.7:*:*:*:*:*:*:*","matchCriteriaId":"AD5FE5EC-BEF6-4816-9FE5-3D80E6F6286E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490886/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40903","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5198","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5447","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490886/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1123","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to (1) files/carprss.php and (2) files/amazon-bestsellers.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos en PHP en SiteBuilder Elite 1.2 permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro CarpPath de (1) files/carprss.php y (2) files/amazon-bestsellers.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitebuilder:sitebuilder_elite:1.2:*:*:*:*:*:*:*","matchCriteriaId":"89F14890-7551-444D-83A5-7633966D3B48"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28036","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5199","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1124","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to (1) components/xmlparser/loadparser.php; (2) admin.php, (3) categories.php, (4) categories_add.php, (5) categories_remove.php, (6) edit.php, (7) editdel.php, (8) ftpfeature.php, (9) login.php, (10) pgRSSnews.php, (11) showcat.php, and (12) upload.php in core/admin/; and (13) archive_cat.php, (14) archive_nocat.php, and (15) recent_list.php in core/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos en PHP en Podcast Generator 1.0 BETA 2 y versiones anteriores permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro absoluteurl de (1) components/xmlparser/loadparser.php; (2) admin.php, (3) categories.php, (4) categories_add.php, (5) categories_remove.php, (6) edit.php, (7) editdel.php, (8) ftpfeature.php, (9) login.php, (10) pgRSSnews.php, (11) showcat.php, y (12) upload.php en core/admin/; y (13) archive_cat.php, (14) archive_nocat.php, y (15) recent_list.php en core/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:*:beta_2:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"CC0815F4-4168-4145-BF72-A6C5A37A1D80"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28038","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1125","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) theme_path parameter to core/themes.php and the (2) filename parameter to download.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Podcast Generator 1.0 BETA 2 y versiones anteriores permiten a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro (1) theme_path de core/themes.php y el parámetro (2) filename de download.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:*:beta_2:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"CC0815F4-4168-4145-BF72-A6C5A37A1D80"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28038","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1126","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"More information available at:\r\nhttp://www.securityfocus.com/bid/28035/info","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en main.php de Barryvan Compo Manager 0.3 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro pageURL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:barryvan_compo:barryvan_compo_manager:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D6337021-50F6-4D29-BB6F-7C7D07CE24B2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28035","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1127","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función cryactio en Crysis 1.1.1.5879 permite a usuarios remotos autenticados ejecutar código de su elección a través de cadenas de formato especificadas en el nombre de usuario, lo cual es disparado cuando el carácter game es eliminado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crytek:crysis:1.1.1.5879:*:*:*:*:*:*:*","matchCriteriaId":"950C6FBF-59CF-4C2C-B515-6DEBAEA241CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29155","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28039","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0735","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5201","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1128","sourceIdentifier":"cve@mitre.org","published":"2008-03-03T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en tourney/index.php de phpMyTourney 2 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmytourney:phpmytourney:2:*:*:*:*:*:*:*","matchCriteriaId":"A5D653F5-F33A-4B38-B126-5744555B387D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3708","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488951/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488951/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1129","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en admin/users/self.php de XRMS CRM permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro msg.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrms_crm:xrms:1.99.2:*:*:*:*:*:*:*","matchCriteriaId":"4109C110-A575-4549-B422-64BE16C53DD5"}]}]}],"references":[{"url":"http://secunia.com/advisories/29177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488925/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28041","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488925/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1130","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN (MQ client) channel."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM WebSphere MQ 6.0.x versiones anteriores a 6.0.2.2 y 5.3 versiones anteriores Fix Pack 14 permite a atacantes evitar restricciones de acceso para un gestor de colas a través un canal SVRCONN (MQ client)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.3:*:*:*:*:*:*:*","matchCriteriaId":"36650BB9-861B-42B5-BCC1-492F84A64951"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6:*:*:*:*:*:*:*","matchCriteriaId":"548ED888-1255-456C-88FD-2884539C157F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29170","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg1IZ01272","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28046","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019527","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg1IZ01272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1131","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles in content edit forms."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Drupal 6.0 permite a usuarios remotos autenticados inyectar web script o HTML de su elección a través de los títulos contenidos en los formularios editados.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"}]}]}],"references":[{"url":"http://drupal.org/node/227608","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28026","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/227608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-1132","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en src/mainwindow.c de Net Activity Viewer 0.2.1 permite a usuarios locales con privilegios Net Activity Viewer ejecutar código de su elección a través de un programa malicioso gksu, lo cual es invocado durante una acción Restart As Root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:C/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net_activity_viewer:net_activity_viewer:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"60E43941-E695-4827-9D0B-D5FE6441CC08"}]}]}],"references":[{"url":"http://secunia.com/advisories/29097","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=579181","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=579181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-1133","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks."},{"lang":"es","value":"La función Drupal.checkPlain  en Drupal 6.0 escapa únicamente a la primera instancia del carácter en ECMAScript, lo que permite a atacantes remotos dirigir ataques de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"}]}]}],"references":[{"url":"http://drupal.org/node/227608","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29118","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28026","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/227608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1134","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie."},{"lang":"es","value":"OMEGA (también conocido como Omegasoft) INterneSErvicesLosungen (INSEL) 7 soporta autenticación mediante una cookie que carece de secreto compartido. Esto puede permitir a atacantes remotos loguearse como un usuario de su elección a través de una cookie modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omegasoft:interneserviceslosungen:7:*:*:*:*:*:*:*","matchCriteriaId":"2D7B3FFB-EB73-42BC-B539-859ED71829BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/28410","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27210","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39575","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1135","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"OMEGA (también conocido como Omegasoft) INterneSErvicesLosungen (INSEL) 7 genera diferentes respuestas dependiendo de si un nombre de usuario es válido o no en un intento fallido de login, permite a atacantes remotos el listar nombres de usuarios válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omegasoft:interneserviceslosungen:7:*:*:*:*:*:*:*","matchCriteriaId":"2D7B3FFB-EB73-42BC-B539-859ED71829BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/28410","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27210","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1136","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679."},{"lang":"es","value":"La función Utils::runScriptr src/utils.cpp en vdccm 0.92 a la v0.10.0 in SynCE (SynCE-dccm, permite a atacantes remotos ejecutar comandos de su elección a través de meta caracteres en cierta cadena TCP al puerto 5679."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synce:synce:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"AE47B905-5FAF-45B8-857B-35D0A6862260"},{"vulnerable":true,"criteria":"cpe:2.3:a:synce:synce:0.92:*:*:*:*:*:*:*","matchCriteriaId":"44A74CED-D98C-4286-84E8-40FBBBF6F02F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29285","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3710","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=766440","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2070","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27178","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28141","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39506","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=766440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1137","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el componente Garys Cookbook (com_garyscookbook) 1.1.1 y anteriores para Mambo y Joomla!, que permite a atacantes remotos ejecutar comandos SQL de su elección  a través del parámetro id en una acción de detalle al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_garyscookbook:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2020B02B-A0F8-4EFC-A9EA-F69E23C53B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_garyscookbook:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"267681BF-7DCB-4528-9A5E-4CD38224BAFB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29090","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488696/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27972","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40803","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488696/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1138","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\\\.\\DLKPFSD_Device, aka the \"ring0 link list zero\" vulnerability."},{"lang":"es","value":"DLMFENC.sys 1.0.0.26 en DESlock+ 3.2.6 y anteriores, permite a usuarios locales causar una denegación de servicio (caída de sistema) a través de cierta petición ZERO_MEM DLMFENC_IOCTL a \\\\.\\DLKPFSD_Device, también conocida como \"Vulnerabilidad ring0 link list zero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deslock:deslock:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.6","matchCriteriaId":"DA666BE7-63AB-4EA7-B8FD-ABCEB742B16A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29005","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41204","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5142","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1139","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENC_IOCTL request to \\\\.\\DLKPFSD_Device that overwrites a pointer, aka the \"ring0 link list zero SYSTEM\" vulnerability."},{"lang":"es","value":"DESlock+ 3.2.6 y versiones anteriores, cuando DLMFENC.sys 1.0.0.26 y DLMFDISK.sys 1.2.0.27 están presentes, permite a usuarios locales obtener privilegios a través de ciertas peticiones DLMFENC_IOCTL a \\\\.\\DLKPFSD_Device que sobrescriben un puntero, también conocido como la \"vulnerabilidad ring0 link list zero SYSTEM\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deslock:deslock:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.6","matchCriteriaId":"DA666BE7-63AB-4EA7-B8FD-ABCEB742B16A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29005","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1140","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL request to \\\\.\\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-filesystem, aka the \"ring0 SYSTEM\" vulnerability."},{"lang":"es","value":"DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 y anteriores permiten a usuarios locales obtener  privilegios a través de ciertas peticiones DLKFDISK_IOCTL a \\\\.\\DLKFDisk_Control que sobrescribe una estructura de datos asociada con un pseudo-sistema de ficheros montado. también conocida como \"Vulnerabilidad ring0 SYSTEM\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deslock:deslock:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.6","matchCriteriaId":"DA666BE7-63AB-4EA7-B8FD-ABCEB742B16A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29005","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1141","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kernel memory consumption) via a series of DLMFENC_IOCTL requests to \\\\.\\DLKPFSD_Device that allocate \"link list structures.\""},{"lang":"es","value":"Fuga de memoria en DLMFENC.sys 1.0.0.26 de DESlock+ 3.2.6 y anteriores, permite a usuarios locales causar una denegación de servicio (consumo de memoria del kernel) a través de una serie de peticiones de DLMFENC_IOCTL a \\\\.\\DLKPFSD_Device que ubica una \"lista de estructuras enlazadas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deslock:deslock:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.6","matchCriteriaId":"DA666BE7-63AB-4EA7-B8FD-ABCEB742B16A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29005","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1142","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine."},{"lang":"es","value":"Rxvt versión 2.6.4 abre una ventana terminal en :0 si no se establece la variable de entorno DISPLAY, lo que podría permitir a los usuarios locales secuestrar conexiones X11. NOTA: más tarde se informó que rxvt-unicode, mrxvt, aterm, multi-aterm y wterm también se ven afectados. NOTA: escenarios de ataque realistas requieren que la víctima ingrese un comando en la máquina incorrecta"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1142\n\nThis issue does not affect Red Hat Enterprise Linux 3, 4, or 5.\n\nThe Red Hat Security Response Team has rated this issue as having low security impact.  Due to the minimal security consequences of this issue, we do not intend to fix this in Red Hat Enterprise Linux 2.1.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-04-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"906079C8-6164-4E15-A171-759A9C2D33CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CBFE971D-9704-411B-89EC-2BE46D7E4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"65887C4E-3B44-4AA6-919B-88D987C440E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"07EF6773-1416-444A-9CCB-00459BBF30DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3EB4F3E9-B8C3-4DBB-8686-AEB36D0D7A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A9CDB7D2-1EB3-4E08-BFEC-572720079B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A65ADF9D-8591-4046-809E-090B13098E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"06C17CD8-84FA-4A07-A5B3-C3D3CFD701DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"8C6E8374-C6AF-4BF0-8F08-1DFB788FB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"438FCC6C-14F7-4E09-A83D-CB09A4C087F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"65DE72EB-BCB3-44D7-84B8-25C098D79ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7237B6AB-CA2C-4F4E-812F-5A5B466E946A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"48413ADC-4E8B-4030-919F-06DDB10FEB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1FDB25A3-56B5-4C4C-83CA-8CAB21E03371"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:1.00:beta1:*:*:*:*:*:*","matchCriteriaId":"0EB2756B-E373-475A-AC3F-0D4357BB7410"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:1.00:beta2:*:*:*:*:*:*","matchCriteriaId":"6814E277-848C-4B8B-83A7-7E72B0EBC906"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:1.00:beta3:*:*:*:*:*:*","matchCriteriaId":"E13A6D13-157C-4A9C-9D79-D4C3418A3867"},{"vulnerable":true,"criteria":"cpe:2.3:a:aterm:aterm:1.00:beta4:*:*:*:*:*:*","matchCriteriaId":"5CE84A43-27D4-41AB-BFD0-3986137E2748"},{"vulnerable":true,"criteria":"cpe:2.3:a:eterm:eterm:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.3","matchCriteriaId":"2367DBAD-54A6-4ADA-83A1-F7DBC3813500"},{"vulnerable":true,"criteria":"cpe:2.3:a:eterm:eterm:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"2CF3630F-CE7F-4A04-8094-1E692D32DF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrxvt:mrxvt:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.2","matchCriteriaId":"EDEA3F78-F92B-45E2-9406-FDB58FA43021"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrxvt:mrxvt:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0C1645E2-E752-4D1B-887D-61A54E165C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:multi-aterm:multi-aterm:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2","matchCriteriaId":"60168674-59D0-42E9-AF75-59E1D67C392D"},{"vulnerable":true,"criteria":"cpe:2.3:a:multi-aterm:multi-aterm:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"36C575E5-6D9B-48A1-A756-304D8EC480C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:multi-aterm:multi-aterm:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A6B4F027-019B-4C38-BD32-FDC6CF6F27F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:multi-aterm:multi-aterm:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"019BA414-15C4-46F5-830F-1EC910C65B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:multi-aterm:multi-aterm:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CEE85183-4BD5-45CA-9723-4EE635D61EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:multi-aterm:multi-aterm:0.1:*:*:*:*:*:*:*","matchCriteriaId":"51D5D44E-8936-4B6D-8A83-839F3A0FBE59"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.9","matchCriteriaId":"8BB2370B-7366-4291-B602-26342194094C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E5CE4F28-5C30-4A54-8A4B-3FA6B01F1467"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5BA71D83-EA61-4B68-9D71-40E660C8E9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"EB750075-F614-40BA-B26D-CA3826A1B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"31FE05CF-F5F3-4F11-853A-36D4A4CA8FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"16BC9337-A01B-402D-A9A0-AAE0B49355BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"ED803842-E280-4998-BD7C-CF8048304FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"779E9DE5-58AC-4441-8925-3ADC1E042A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"287104DA-18C9-400C-B23C-CD569E5F11C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:*:*:*:*:*:*:*:*","versionEndIncluding":"9.01","matchCriteriaId":"02EDF05C-DE07-4C0C-878B-76DD7CFE0C28"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8CB9BC7D-3ABE-4262-A705-DAA17A527257"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E86C5E10-4E22-4E5C-A2E5-575D291301BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFA17952-574A-48C3-BC45-B7B8242D89CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.3:*:*:*:*:*:*:*","matchCriteriaId":"765462C7-1EE5-43BE-AD1E-4FEB74C486F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.4:*:*:*:*:*:*:*","matchCriteriaId":"499B59D2-8535-4A07-B221-AA26EAACAB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B87E8504-8CF7-4AB4-A437-8D15D623EE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2EF5A78E-1CA2-47C3-AF35-0F4024F8C57D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FB280BBD-663C-4F72-86F6-D67B65F14D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.8:*:*:*:*:*:*:*","matchCriteriaId":"FEEF3E4C-0014-4062-BD27-11649D6DC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.9:*:*:*:*:*:*:*","matchCriteriaId":"8AE654A2-DC0C-4764-92E9-45B1890ED9A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:1.91:*:*:*:*:*:*:*","matchCriteriaId":"263D8B7E-046C-4C68-8FE0-6FE56DCC6140"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.0:*:*:*:*:*:*:*","matchCriteriaId":"54383B98-264B-4C5C-9E0F-F06CFC200827"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.1:*:*:*:*:*:*:*","matchCriteriaId":"550ED2B1-0273-407A-B9E2-8B219ECF5F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ECC2A517-FFFF-4266-A900-36F09D2A0B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.3:*:*:*:*:*:*:*","matchCriteriaId":"01B30E8A-FD5B-473D-AEDD-96CB8533CE91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.4:*:*:*:*:*:*:*","matchCriteriaId":"898BFA6D-1874-4DC0-8A23-196011EA6AB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.5:*:*:*:*:*:*:*","matchCriteriaId":"542D823A-6321-4EC8-B580-27AC0FABA07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.6:*:*:*:*:*:*:*","matchCriteriaId":"A78B12DC-F538-48B8-9097-A5B6E35190BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.7:*:*:*:*:*:*:*","matchCriteriaId":"13E67E56-F415-46E5-A147-19B18EC0CB47"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.8:*:*:*:*:*:*:*","matchCriteriaId":"1263E928-4629-4627-9C48-3BEF8EA6A8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:2.9:*:*:*:*:*:*:*","matchCriteriaId":"DC8A8C74-F783-4460-95B0-0F70DAAF1214"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60169CC8-A154-4250-BCE1-BCF05EDDE840"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6CCD73D1-AEDE-4775-A242-B37078088577"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C8BE74E8-AAE2-45B0-A27B-425130E94BB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C76CAB9D-C5E5-452C-9C0B-E5415AB650F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.4:*:*:*:*:*:*:*","matchCriteriaId":"81F5C9D0-F4B4-448D-930C-17B037C4AE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.5:*:*:*:*:*:*:*","matchCriteriaId":"830E5352-49B6-4941-91C2-03FF48AE6654"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.6:*:*:*:*:*:*:*","matchCriteriaId":"2E7B3932-0C64-4F0D-9C27-31F823958FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.7:*:*:*:*:*:*:*","matchCriteriaId":"CF8C6532-DE29-4071-9156-ABEFACA02BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.8:*:*:*:*:*:*:*","matchCriteriaId":"CA0AFAF1-F061-4C0E-9550-206824C19466"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:3.9:*:*:*:*:*:*:*","matchCriteriaId":"5B410B3D-D43A-4A62-9CDB-69C4E16062DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C25C6C41-3CD6-4FA8-8223-996B010A40E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.1:*:*:*:*:*:*:*","matchCriteriaId":"BADC5D37-AAB3-4709-A156-D2CDA3AB2D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B96FCB-ABC8-4FBE-B386-4612B3FFF5D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E4014961-4950-4C2D-9FE8-EBB089F2D080"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.4:*:*:*:*:*:*:*","matchCriteriaId":"C939A580-A0CA-4FC9-BCC0-1C7BAB6AB6F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.5:*:*:*:*:*:*:*","matchCriteriaId":"542D14EE-F1FD-4E1D-BB5E-0E71C3A79186"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.6:*:*:*:*:*:*:*","matchCriteriaId":"BEAF5AC0-C9F3-4096-8071-FDE918291C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E090BEAD-535D-4CC0-8AEF-C66F6C57657F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.8:*:*:*:*:*:*:*","matchCriteriaId":"9727CD66-4D54-4B80-843D-67BF421125A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:4.9:*:*:*:*:*:*:*","matchCriteriaId":"BCD5EBFB-B2B6-4E71-A2F7-2ECADFC99DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.0:*:*:*:*:*:*:*","matchCriteriaId":"931F6A8E-AC22-49A7-ABC8-F9E685C5DB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1BD68C4D-47E0-4325-9B7F-A73F455CD7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.2:*:*:*:*:*:*:*","matchCriteriaId":"13C292CB-B53B-4E86-A994-D53154558E20"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.3:*:*:*:*:*:*:*","matchCriteriaId":"07793F4F-477E-4606-B262-F8216DEEA8D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.4:*:*:*:*:*:*:*","matchCriteriaId":"37FD7AAA-D27C-4B16-995A-AEC044C9E7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.5:*:*:*:*:*:*:*","matchCriteriaId":"F175B9E5-999F-4BBC-9B2C-AF71992ABE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.6:*:*:*:*:*:*:*","matchCriteriaId":"E73C64A4-5353-43D2-8E60-9222B5C2403D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.7:*:*:*:*:*:*:*","matchCriteriaId":"C262FB71-D4D4-4F1F-9D5A-5F948273EF73"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.8:*:*:*:*:*:*:*","matchCriteriaId":"AB4F5155-562F-4923-8D21-B99A2E31BA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:5.9:*:*:*:*:*:*:*","matchCriteriaId":"99D71BA3-1491-46F7-B684-30BE37ED79C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.0:*:*:*:*:*:*:*","matchCriteriaId":"045C0948-0D5C-4A91-B62A-5DA97A7CBCAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3F406B34-FFEE-4DF6-8720-C6CD0C786694"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.2:*:*:*:*:*:*:*","matchCriteriaId":"E2AF031D-8BE0-4D26-98B2-B4484A5F1657"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:6.3:*:*:*:*:*:*:*","matchCriteriaId":"DACCD55F-C3DC-4AE4-80F4-C873DCA3F763"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6485D96D-95FE-4980-A476-922DBCCB362A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4D867F5A-639B-4B4C-87F9-377869D925DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.2:*:*:*:*:*:*:*","matchCriteriaId":"2A906623-8A36-4211-98C4-4646A0489936"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.3:*:*:*:*:*:*:*","matchCriteriaId":"4FFF2C26-2B05-4949-B87A-E1EC1D4A8FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.4:*:*:*:*:*:*:*","matchCriteriaId":"EA4F3780-BBEB-4355-AFAD-7F69176ECF8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.5:*:*:*:*:*:*:*","matchCriteriaId":"380F457A-E570-437E-8F23-B354C8BB15A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.6:*:*:*:*:*:*:*","matchCriteriaId":"F3FCEEC1-7917-4A33-A7DF-6FB35065E8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.7:*:*:*:*:*:*:*","matchCriteriaId":"713FF10E-813F-4089-88CF-AB1368CDE376"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.8:*:*:*:*:*:*:*","matchCriteriaId":"7CB6F305-E6A6-4D74-BEF7-668FE6000529"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:7.9:*:*:*:*:*:*:*","matchCriteriaId":"8484147E-0054-4819-940C-FBDF533D6422"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.0:*:*:*:*:*:*:*","matchCriteriaId":"12B02585-2315-4143-BE33-47C509CE0D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.1:*:*:*:*:*:*:*","matchCriteriaId":"B0EBB720-9AC9-42B4-80F7-2FF61020E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA0D966-9748-4B03-9EA9-63CD3B6990F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.3:*:*:*:*:*:*:*","matchCriteriaId":"C7475AFA-46FB-4035-97CB-0F37BCB7DD55"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.4:*:*:*:*:*:*:*","matchCriteriaId":"A12095D3-CB90-4EEF-B265-AE899BF0BCEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.5:*:*:*:*:*:*:*","matchCriteriaId":"D91F0089-CBE6-4588-9BC0-E7947A050CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.5a:*:*:*:*:*:*:*","matchCriteriaId":"4F7DC56B-C888-4111-A000-27E34166EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.6:*:*:*:*:*:*:*","matchCriteriaId":"4A730D6E-327B-4E6C-9F38-6AC117EAED8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.7:*:*:*:*:*:*:*","matchCriteriaId":"7521C5A1-0441-4132-92BB-0F4DD93C0BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.8:*:*:*:*:*:*:*","matchCriteriaId":"2ADB59B3-5C43-463B-B714-43264052134B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:8.9:*:*:*:*:*:*:*","matchCriteriaId":"D98F8B98-71CB-421E-B2B5-4AF2C9B4BA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt-unicode:rxvt-unicode:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3347E60D-297F-425F-9644-9933650081BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wterm:wterm:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.8a2","matchCriteriaId":"3F5A2D96-4DD9-43C8-BC2B-BF0C65820F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wterm:wterm:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"398586ED-E758-4D7A-B4D7-EDE57A044AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wterm:wterm:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"21101465-3B77-441C-BC85-5E63E75A8D4B"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.security.oss.general/122","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29576","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-03.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:161","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:221","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28512","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://article.gmane.org/gmane.comp.security.oss.general/122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-1144","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse EAPoL-Key packets, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a malformed EAPoL-Key packet with a crafted \"advertised length.\""},{"lang":"es","value":"El driver Marvell para el punto de acceso Wi-Fi Netgear WN802T con firmware 1.3.16 en el chipset Marvell 88W8361P-BEM1, no realiza un análisis sintáctico correcto de los paquetes EAPoL-Key, lo cual provoca una denegación de servicio (reinicio de sistema o cuelgue) o posiblemente ejecución de código arbitrariamente mediante un paquete EAPoL-Key mal formado con una \"longitud de aviso\" manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:marvell:88w8361w-bem1:*:*:*:*:*:*:*:*","matchCriteriaId":"B62CD8FD-EEBE-484F-BE0F-6075C93E657E"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wn802t:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"E1B46C9B-BC8C-4291-87E2-7FA39A287866"}]}]}],"references":[{"url":"http://secunia.com/advisories/31770","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4227","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495982/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44919","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495982/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1145","sourceIdentifier":"secalert@redhat.com","published":"2008-03-04T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) \"..%5c\" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en WEBrick en Ruby versiones 1.8 anteriores a 1.8.5-p115 y 1.8.6-p114, y versiones 1.9 hasta 1.9.0-1, cuando se ejecuta en sistemas que admiten separadores de ruta de barra invertida (\\) o nombres de archivo sin distinción entre mayúsculas y minúsculas, permite a atacantes remotos acceder a archivos arbitrarios por medio  de secuencias o (1) \"..%5c\" (barra invertida codificada) o (2) nombres de archivo que coinciden con los patrones de la opción :NondisclosureName."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed in affected versions of Ruby as shipped in Red Hat Enterprise Linux 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2008-0897.html","lastModified":"2008-12-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:webrick:-:*:*:*:*:ruby:*:*","matchCriteriaId":"8D531565-E826-4586-8A8A-B2C0206498D4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.0","versionEndExcluding":"1.8.5.115","matchCriteriaId":"3F33562B-11B4-4362-81EB-6A5181CA236C"},{"vulnerable":false,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.6","versionEndExcluding":"1.8.6.114","matchCriteriaId":"6D2EA115-6DE0-4633-A1AE-3069AC947973"},{"vulnerable":false,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"52179EC7-CAF0-42AA-A21A-7105E10CA122"},{"vulnerable":false,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"75AFC571-21D8-40F5-A0CF-20D3EC4E5FC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29232","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29357","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29536","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30802","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31687","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32371","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://support.apple.com/kb/HT2163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0123","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0123","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/404515","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/","source":"secalert@redhat.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489205/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489218/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/490056/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28123","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019562","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0787","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41010","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2338","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10937","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/5215","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00338.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00354.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/404515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489205/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489218/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/490056/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/5215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00354.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1146","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka \"Algorithm X3\"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values.  NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND."},{"lang":"es","value":"Cierto algoritmo generador de números pseudo-aleatorios(PRNG) que usa XOR y alterna en saltos de 3-bit (también conocido com o\"algoritmo X3\"), usado en OpenBSD de la v2.8 a la 4.2, permite a atacantes remotos adivinar datos sensibles como los IDs de una transacción DNS, observando una secuencia de datos generada previamente. NOTA: esta cuestión puede ser aprovechado por ataques como el envenenamiento de la caché DNS contra la modificación BIND en OpenBDS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFBE8937-E1BD-4601-AF1C-6DD20BB132AF"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D676C769-17D1-48B2-98F4-AC3BDF2C882B"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"DEBD3CB7-D88A-4868-A6AD-0717A8A989EE"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C79071BA-D3FB-4FDF-96A1-477BA88C3E6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p7:*:*:*:*:*:*","matchCriteriaId":"B19BEAB3-8BED-422F-B228-240269CB0704"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"A8ED2959-64AA-487E-AA11-72595A6FAA04"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"860BABDE-4266-4476-96F9-397DAD23C841"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*","matchCriteriaId":"6E21E50A-A368-4487-A791-87366CC5C86E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*","matchCriteriaId":"43E84296-9B5C-4623-A2C4-431D76FC2765"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"5A9CA0AC-29ED-4C86-AB6C-DCAE28FC1BB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*","matchCriteriaId":"E18328E2-3CB5-4D36-8EA3-77DD909B46A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*","matchCriteriaId":"EF73D76B-FBB8-4D10-8393-9FAF53392A4B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*","matchCriteriaId":"F177AE1C-58C2-4575-807C-ABFFC5119FA8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11_p20_release:*:*:*:*:*:*:*","matchCriteriaId":"C3EFFC9A-016A-496B-A109-919189A9C808"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11_release:*:*:*:*:*:*:*","matchCriteriaId":"73E6E5C5-F80A-423D-BD93-BA837E808A70"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8A80E6A-6502-4A33-83BA-7DCC606D79AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*","matchCriteriaId":"0D6428EB-5E1A-41CB-979C-4C9402251D8B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*","matchCriteriaId":"2DCA9879-C9F5-475A-8EC9-04D151001C8D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*","matchCriteriaId":"0A94132F-4C47-49CC-B03C-8756613E9A38"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*","matchCriteriaId":"3F629879-66F0-427B-86D8-D740E0E3F6E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*","matchCriteriaId":"C89129C5-A1DB-4018-B43A-C60C8E650080"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*","matchCriteriaId":"60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5_release:*:*:*:*:*:*:*","matchCriteriaId":"AFA9754D-773C-432E-8E74-52FDC83FF279"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5_stable:*:*:*:*:*:*:*","matchCriteriaId":"E8812D60-F669-4EA3-AF4E-6329EF625E38"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*","matchCriteriaId":"CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*","matchCriteriaId":"C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0_p5_release:*:*:*:*:*:*:*","matchCriteriaId":"67FDB43C-84D1-4B45-BFB9-340F3687A22F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"F4416CBA-76B9-4051-B015-F1BE89517309"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*","matchCriteriaId":"8C64EE9C-18E1-49C6-96DE-7E6F1607C0D7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release_p10:*:*:*:*:*:*","matchCriteriaId":"B36B3805-8A85-4357-ABC1-AB22C61E3381"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*","matchCriteriaId":"231B70A8-890A-4790-A33A-64228656BF0E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2_releng:*:*:*:*:*:*:*","matchCriteriaId":"589B62B4-FAA3-4F58-8104-EF84FEAFFB65"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*","matchCriteriaId":"72C2BE9D-91E1-48E9-9326-39CF583A57E0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F06B831E-D8F2-4380-B279-559CE103210F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*","matchCriteriaId":"3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D18C95A3-15E3-41B8-AC28-ACEA57021E24"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"28BD9F91-2384-4557-9648-25FC00D04677"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3ECF9E5F-AF38-42B9-8B49-6C254394CDFB"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9432E9-AACA-4242-BDAB-8792ACF72C12"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29C02C6B-AAFD-4594-94A4-F26BA3648CB0"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E59D3682-22E1-40C4-AC65-079005FB6194"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3D95D05C-4FE1-4408-B8B8-5C5932800385"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"FCB9E9F8-7C6B-4BC7-A593-A11B9D6F0B35"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2F4B6E29-B74F-45FF-AEB1-A118753F8E3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AEAE2873-0028-4744-B64E-8E2EA30447F6"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*","matchCriteriaId":"783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*","matchCriteriaId":"F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77812C-D84E-493E-9D21-1BA6C2129E70"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cosmicperl:directory_pro:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9D9D185E-D235-4731-A092-B667DC6FCBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:darwin:darwin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"80D58C3E-4F5D-42A0-95AA-25E0EAEBFCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darwin:darwin:9.1:*:*:*:*:*:*:*","matchCriteriaId":"A4268605-39FE-49E0-ABC9-27DEA359779E"},{"vulnerable":true,"criteria":"cpe:2.3:a:navision:financials_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9B70D3E5-924C-4AB7-ABF7-6273DE325007"}]}]}],"references":[{"url":"http://secunia.com/advisories/28819","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securityreviews/5PP0H0UNGW.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27647","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securityreviews/5PP0H0UNGW.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1147","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka \"Algorithm X2\"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values.  NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting."},{"lang":"es","value":"Cierto algoritmo generador de números pseudo-aleatorios(PRNG) que usa XOR y alterna en saltos de 2-bit (también conocido com o\"algoritmo X2\"), usado en OpenBSD de la v2.6 a la 3.4, Mac OS X de la v10 a a 10.5.1, FreeBSD 4.4 a la 7.0 y DragonFlyBSD 1.0 a la 1.10.1, permite a atacantes remotos adivinar datos sensibles como los IDs de una fragmentación IP observando una secuencia generada previamente. NOTA: este fallo puede ser aprovechado por ataques como la inyección de paquetes TCP y OS fingerprinting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFBE8937-E1BD-4601-AF1C-6DD20BB132AF"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D676C769-17D1-48B2-98F4-AC3BDF2C882B"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"DEBD3CB7-D88A-4868-A6AD-0717A8A989EE"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C79071BA-D3FB-4FDF-96A1-477BA88C3E6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p7:*:*:*:*:*:*","matchCriteriaId":"B19BEAB3-8BED-422F-B228-240269CB0704"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"A8ED2959-64AA-487E-AA11-72595A6FAA04"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"860BABDE-4266-4476-96F9-397DAD23C841"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*","matchCriteriaId":"6E21E50A-A368-4487-A791-87366CC5C86E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*","matchCriteriaId":"43E84296-9B5C-4623-A2C4-431D76FC2765"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"5A9CA0AC-29ED-4C86-AB6C-DCAE28FC1BB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*","matchCriteriaId":"E18328E2-3CB5-4D36-8EA3-77DD909B46A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*","matchCriteriaId":"EF73D76B-FBB8-4D10-8393-9FAF53392A4B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*","matchCriteriaId":"F177AE1C-58C2-4575-807C-ABFFC5119FA8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11_p20_release:*:*:*:*:*:*:*","matchCriteriaId":"C3EFFC9A-016A-496B-A109-919189A9C808"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11_release:*:*:*:*:*:*:*","matchCriteriaId":"73E6E5C5-F80A-423D-BD93-BA837E808A70"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8A80E6A-6502-4A33-83BA-7DCC606D79AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*","matchCriteriaId":"0D6428EB-5E1A-41CB-979C-4C9402251D8B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*","matchCriteriaId":"2DCA9879-C9F5-475A-8EC9-04D151001C8D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*","matchCriteriaId":"0A94132F-4C47-49CC-B03C-8756613E9A38"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*","matchCriteriaId":"3F629879-66F0-427B-86D8-D740E0E3F6E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*","matchCriteriaId":"C89129C5-A1DB-4018-B43A-C60C8E650080"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*","matchCriteriaId":"60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5_release:*:*:*:*:*:*:*","matchCriteriaId":"AFA9754D-773C-432E-8E74-52FDC83FF279"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5_stable:*:*:*:*:*:*:*","matchCriteriaId":"E8812D60-F669-4EA3-AF4E-6329EF625E38"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*","matchCriteriaId":"CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*","matchCriteriaId":"C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0_p5_release:*:*:*:*:*:*:*","matchCriteriaId":"67FDB43C-84D1-4B45-BFB9-340F3687A22F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"F4416CBA-76B9-4051-B015-F1BE89517309"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*","matchCriteriaId":"8C64EE9C-18E1-49C6-96DE-7E6F1607C0D7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release_p10:*:*:*:*:*:*","matchCriteriaId":"B36B3805-8A85-4357-ABC1-AB22C61E3381"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*","matchCriteriaId":"231B70A8-890A-4790-A33A-64228656BF0E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2_releng:*:*:*:*:*:*:*","matchCriteriaId":"589B62B4-FAA3-4F58-8104-EF84FEAFFB65"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*","matchCriteriaId":"72C2BE9D-91E1-48E9-9326-39CF583A57E0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F06B831E-D8F2-4380-B279-559CE103210F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*","matchCriteriaId":"3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D18C95A3-15E3-41B8-AC28-ACEA57021E24"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"28BD9F91-2384-4557-9648-25FC00D04677"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3ECF9E5F-AF38-42B9-8B49-6C254394CDFB"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9432E9-AACA-4242-BDAB-8792ACF72C12"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29C02C6B-AAFD-4594-94A4-F26BA3648CB0"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E59D3682-22E1-40C4-AC65-079005FB6194"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3D95D05C-4FE1-4408-B8B8-5C5932800385"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"FCB9E9F8-7C6B-4BC7-A593-A11B9D6F0B35"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2F4B6E29-B74F-45FF-AEB1-A118753F8E3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AEAE2873-0028-4744-B64E-8E2EA30447F6"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*","matchCriteriaId":"783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*","matchCriteriaId":"F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77812C-D84E-493E-9D21-1BA6C2129E70"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cosmicperl:directory_pro:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9D9D185E-D235-4731-A092-B667DC6FCBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:darwin:darwin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"80D58C3E-4F5D-42A0-95AA-25E0EAEBFCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darwin:darwin:9.1:*:*:*:*:*:*:*","matchCriteriaId":"A4268605-39FE-49E0-ABC9-27DEA359779E"},{"vulnerable":true,"criteria":"cpe:2.3:a:navision:financials_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9B70D3E5-924C-4AB7-ABF7-6273DE325007"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2008/Feb/0052.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Feb/0063.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c?rev=1.10%3Bcontenttype=","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securityreviews/5PP0H0UNGW.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27647","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40329","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41155","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Feb/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2008/Feb/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c?rev=1.10%3Bcontenttype=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securityreviews/5PP0H0UNGW.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1148","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka \"Algorithm A0\"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values.  NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting."},{"lang":"es","value":"Cierto algoritmo generador de números pseudo-aleatorios(PRNG) que usa ADD con 0 saltos aleatorios(también conocido como \"algoritmo A0\"), usado en OpenBSD de la v3.5 a la 4.2 y NetBSD v1.6.2 a la 4.0, permite a atacantes remotos adivinar datos sensibles como (1)los IDs de una transacción DNS, (2)IDs de una fragmentación IP observando una secuencias generadas previamente. NOTA: este fallo puede ser aprovechado por ataques como el envenenamiento de la cachés DNS, la inyección de paquetes TCP y OS fingerprinting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFBE8937-E1BD-4601-AF1C-6DD20BB132AF"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D676C769-17D1-48B2-98F4-AC3BDF2C882B"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"DEBD3CB7-D88A-4868-A6AD-0717A8A989EE"},{"vulnerable":false,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C79071BA-D3FB-4FDF-96A1-477BA88C3E6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p7:*:*:*:*:*:*","matchCriteriaId":"B19BEAB3-8BED-422F-B228-240269CB0704"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"A8ED2959-64AA-487E-AA11-72595A6FAA04"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"860BABDE-4266-4476-96F9-397DAD23C841"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:*","matchCriteriaId":"6E21E50A-A368-4487-A791-87366CC5C86E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*","matchCriteriaId":"43E84296-9B5C-4623-A2C4-431D76FC2765"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10_prerelease:*:*:*:*:*:*:*","matchCriteriaId":"5A9CA0AC-29ED-4C86-AB6C-DCAE28FC1BB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:*","matchCriteriaId":"E18328E2-3CB5-4D36-8EA3-77DD909B46A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:*","matchCriteriaId":"EF73D76B-FBB8-4D10-8393-9FAF53392A4B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:*","matchCriteriaId":"F177AE1C-58C2-4575-807C-ABFFC5119FA8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11_p20_release:*:*:*:*:*:*:*","matchCriteriaId":"C3EFFC9A-016A-496B-A109-919189A9C808"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11_release:*:*:*:*:*:*:*","matchCriteriaId":"73E6E5C5-F80A-423D-BD93-BA837E808A70"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8A80E6A-6502-4A33-83BA-7DCC606D79AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*","matchCriteriaId":"0D6428EB-5E1A-41CB-979C-4C9402251D8B"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*","matchCriteriaId":"2DCA9879-C9F5-475A-8EC9-04D151001C8D"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*","matchCriteriaId":"0A94132F-4C47-49CC-B03C-8756613E9A38"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*","matchCriteriaId":"3F629879-66F0-427B-86D8-D740E0E3F6E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*","matchCriteriaId":"C89129C5-A1DB-4018-B43A-C60C8E650080"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*","matchCriteriaId":"60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5_release:*:*:*:*:*:*:*","matchCriteriaId":"AFA9754D-773C-432E-8E74-52FDC83FF279"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5_stable:*:*:*:*:*:*:*","matchCriteriaId":"E8812D60-F669-4EA3-AF4E-6329EF625E38"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*","matchCriteriaId":"CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*","matchCriteriaId":"C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0_p5_release:*:*:*:*:*:*:*","matchCriteriaId":"67FDB43C-84D1-4B45-BFB9-340F3687A22F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"F4416CBA-76B9-4051-B015-F1BE89517309"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*","matchCriteriaId":"8C64EE9C-18E1-49C6-96DE-7E6F1607C0D7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:release_p10:*:*:*:*:*:*","matchCriteriaId":"B36B3805-8A85-4357-ABC1-AB22C61E3381"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*","matchCriteriaId":"231B70A8-890A-4790-A33A-64228656BF0E"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2_releng:*:*:*:*:*:*:*","matchCriteriaId":"589B62B4-FAA3-4F58-8104-EF84FEAFFB65"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*","matchCriteriaId":"72C2BE9D-91E1-48E9-9326-39CF583A57E0"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F06B831E-D8F2-4380-B279-559CE103210F"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*","matchCriteriaId":"3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D18C95A3-15E3-41B8-AC28-ACEA57021E24"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"28BD9F91-2384-4557-9648-25FC00D04677"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3ECF9E5F-AF38-42B9-8B49-6C254394CDFB"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9432E9-AACA-4242-BDAB-8792ACF72C12"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29C02C6B-AAFD-4594-94A4-F26BA3648CB0"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E59D3682-22E1-40C4-AC65-079005FB6194"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3D95D05C-4FE1-4408-B8B8-5C5932800385"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"FCB9E9F8-7C6B-4BC7-A593-A11B9D6F0B35"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2F4B6E29-B74F-45FF-AEB1-A118753F8E3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AEAE2873-0028-4744-B64E-8E2EA30447F6"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*","matchCriteriaId":"783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*","matchCriteriaId":"F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77812C-D84E-493E-9D21-1BA6C2129E70"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cosmicperl:directory_pro:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9D9D185E-D235-4731-A092-B667DC6FCBA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:darwin:darwin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"80D58C3E-4F5D-42A0-95AA-25E0EAEBFCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darwin:darwin:9.1:*:*:*:*:*:*:*","matchCriteriaId":"A4268605-39FE-49E0-ABC9-27DEA359779E"},{"vulnerable":true,"criteria":"cpe:2.3:a:navision:financials_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9B70D3E5-924C-4AB7-ABF7-6273DE325007"}]}]}],"references":[{"url":"http://secunia.com/advisories/28819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/securityreviews/5PP0H0UNGW.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27647","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40329","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41157","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/securityreviews/5PP0H0UNGW.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1149","sourceIdentifier":"cve@mitre.org","published":"2008-03-04T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies."},{"lang":"es","value":"phpMyAdmin anterior a la v2.11.5, accesos a $_REQUEST para obtener algún parámetro en vez de usar $_GET y $_POST, puede permitir a atacantes remotos del mismo dominio sobrescribir variables, inyectar código SQL y realizar ataques de falsificación de petición en sitios cruzados (CSRF) usando cookies manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"},{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.4","matchCriteriaId":"5B22BF32-DC77-4EB1-9DD8-0B2189039F0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*","matchCriteriaId":"346DF9C7-40BE-44FD-BB5A-23F60616E97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B00F4D78-34C3-4934-8AFA-B7283388B246"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*","matchCriteriaId":"BDA3305E-CBC2-4469-923F-29EDA0402CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*","matchCriteriaId":"40CE5E7C-A965-492F-AE85-535C3E5F1B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"52F3DA64-2099-4A4F-9F38-F28255F47BD1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-15.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28068","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40968","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00069.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00100.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00100.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1150","sourceIdentifier":"psirt@cisco.com","published":"2008-03-27T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP sessions, related to the persistence of interface descriptor block (IDB) data structures after process termination, aka bug ID CSCdv59309."},{"lang":"es","value":"La componente red privada virtual dial-up (VPDN) de Cisco IOS versiones anteriores a 12.3 permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos) a través de una serie de sesiones PPTP, en relación con la persistencia de las estructuras de datos de la interfaz de descriptor de bloque (BID) después de la terminación proceso, también conocido como bug CSCdv59309 ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.2","matchCriteriaId":"2E12D45E-5FF2-4794-AF72-29F388B67E8E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29507","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1019714","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080969862.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28460","source":"psirt@cisco.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41484","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5598","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080969862.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1151","sourceIdentifier":"psirt@cisco.com","published":"2008-03-27T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series of PPTP sessions, related to \"dead memory\" that remains allocated after process termination, aka bug ID CSCsj58566."},{"lang":"es","value":"Fugas de memoria en la componente de red privada virtual dial-up (VPDN) en Cisco IOS versiones anteriores a 12.3 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de una serie de sesiones PPTP, en relación a \"dead memory\" que permanece asignado después de la finalización del proceso, también conocido como bug ID CSCsj58566."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.2","matchCriteriaId":"2E12D45E-5FF2-4794-AF72-29F388B67E8E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29507","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1019714","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080969862.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/28460","source":"psirt@cisco.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41483","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5287","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080969862.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1152","sourceIdentifier":"psirt@cisco.com","published":"2008-03-27T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets."},{"lang":"es","value":"El componente data-link switching (DLSw) en Cisco IOS 12.0 hasta 12.4 permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo o consumo de memoria) a través de 91 paquetes manipulados del (1) puerto UDP 2067 o (2) protocolo IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:da:*:*:*:*:*:*","matchCriteriaId":"225C93BF-8749-46AB-BAE7-9A67C7B99552"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:db:*:*:*:*:*:*","matchCriteriaId":"AD6138B2-1F13-4D98-B389-496E1F50FCFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:dc:*:*:*:*:*:*","matchCriteriaId":"33D056B2-CB1C-4287-A3E0-E0F985304969"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:s:*:*:*:*:*:*","matchCriteriaId":"A5823F33-7FB3-465B-8017-1866D9EF3AA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sc:*:*:*:*:*:*","matchCriteriaId":"EB1A7A2E-265F-4322-A6ED-4DD761497D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sl:*:*:*:*:*:*","matchCriteriaId":"D2E8E311-8E6C-42FC-A662-799CC78E22FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sp:*:*:*:*:*:*","matchCriteriaId":"2B02125C-1132-4748-9495-60BACFA2164D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:st:*:*:*:*:*:*","matchCriteriaId":"0FE78CB4-3CF1-4F0A-B4CA-6B6E33D1991D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sx:*:*:*:*:*:*","matchCriteriaId":"B6680190-2688-48E2-BE31-A186A82AF79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sy:*:*:*:*:*:*","matchCriteriaId":"94870E9E-C883-4051-8854-CDE0AE7A64B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:sz:*:*:*:*:*:*","matchCriteriaId":"BB4F46A5-7561-4C17-BB15-F9A704DB1E66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:t:*:*:*:*:*:*","matchCriteriaId":"ACC2FCAE-6A56-4D45-A35F-CA2C2C7A4372"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:wc:*:*:*:*:*:*","matchCriteriaId":"8D10302E-76CE-4D65-9068-2657C1834215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:wt:*:*:*:*:*:*","matchCriteriaId":"48BABA92-17D7-419D-B25D-2DE914F12D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xa:*:*:*:*:*:*","matchCriteriaId":"607E42A0-D5BA-4B59-812F-44DC970202D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xb:*:*:*:*:*:*","matchCriteriaId":"AA54B6EB-CA03-4209-ACA6-7AE6455B764A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xc:*:*:*:*:*:*","matchCriteriaId":"DC811D5E-A2D1-4098-990F-06DEC9080276"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xd:*:*:*:*:*:*","matchCriteriaId":"9C1A32C0-0809-4242-9D23-7F8887D8AFE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xe:*:*:*:*:*:*","matchCriteriaId":"9048DB68-228A-4496-9FEC-514A65130DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xf:*:*:*:*:*:*","matchCriteriaId":"6D2435B9-EFE4-4CA6-9E55-C9C050D579DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xg:*:*:*:*:*:*","matchCriteriaId":"2929498A-BB56-48B2-9089-E6B602B81929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xh:*:*:*:*:*:*","matchCriteriaId":"73BA6E1B-B6DC-404A-BF1D-5059EB2F7C16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xi:*:*:*:*:*:*","matchCriteriaId":"B385E45E-FCBD-4574-88FD-E000F320BE6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xj:*:*:*:*:*:*","matchCriteriaId":"2FC95E36-024E-487B-8190-E96745B590EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xk:*:*:*:*:*:*","matchCriteriaId":"6A006524-45C0-4B11-82A3-0AF69374BD29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xl:*:*:*:*:*:*","matchCriteriaId":"518AAECA-0455-4688-8937-2D4248962C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xm:*:*:*:*:*:*","matchCriteriaId":"6EE54B6B-99F0-40B2-990C-950E08E05FBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xn:*:*:*:*:*:*","matchCriteriaId":"F740871A-7E8C-4077-8DB0-9D54B18D4037"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xo:*:*:*:*:*:*","matchCriteriaId":"7D0B5D1A-016B-4017-B476-F66F6A82ABCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xq:*:*:*:*:*:*","matchCriteriaId":"A7897C03-2EE4-42D5-9A70-9FD9DD025708"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xr:*:*:*:*:*:*","matchCriteriaId":"BA0D5F4E-21CC-464C-930A-4DB1C25DDA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xs:*:*:*:*:*:*","matchCriteriaId":"54348563-5740-4EF0-AADA-B864F3A47277"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xv:*:*:*:*:*:*","matchCriteriaId":"A091E988-DA6B-4FC9-9899-86F97AA29C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.0:xw:*:*:*:*:*:*","matchCriteriaId":"39C863BC-B042-41C7-A15D-4D29CA8933CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:aa:*:*:*:*:*:*","matchCriteriaId":"0AE43587-46FE-4930-84FB-689AFCC122E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ax:*:*:*:*:*:*","matchCriteriaId":"A0D676A9-7110-4446-9503-73BA2A4F49BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:az:*:*:*:*:*:*","matchCriteriaId":"437F70FE-58DD-4F92-8219-4B09AAFA6F85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:b:*:*:*:*:*:*","matchCriteriaId":"EC1D82C4-AA1B-492C-81A7-7D579687C684"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:c:*:*:*:*:*:*","matchCriteriaId":"02045A97-7AF6-4308-95A1-F4AC47A75AAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:cx:*:*:*:*:*:*","matchCriteriaId":"0B560BA9-D8EF-4618-A909-1B779829E4DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:d:*:*:*:*:*:*","matchCriteriaId":"5CB10E53-3177-4502-88DA-CA935403DADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:da:*:*:*:*:*:*","matchCriteriaId":"A61E033B-EFDD-4ECC-A370-F85A8D8161D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:db:*:*:*:*:*:*","matchCriteriaId":"90F4AB09-46FE-47F7-831D-863F5C296A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:dc:*:*:*:*:*:*","matchCriteriaId":"22723E8E-18E9-45A4-A216-D7D2B4EC8A93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:e:*:*:*:*:*:*","matchCriteriaId":"85C2FF9C-7730-4DBF-8C86-1EF0F1E71D8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ea:*:*:*:*:*:*","matchCriteriaId":"4B2F42F9-1760-4A97-ADAE-66E5FC0B81FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:eb:*:*:*:*:*:*","matchCriteriaId":"E92ACC7B-EB0E-4142-8397-3AF58C3E7406"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ec:*:*:*:*:*:*","matchCriteriaId":"EAC665EA-CFAF-4F69-B8F6-BBC7D869CA42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:eo:*:*:*:*:*:*","matchCriteriaId":"365D4890-2676-4C0D-9D64-95A07B10DA8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:eu:*:*:*:*:*:*","matchCriteriaId":"1B1705DD-7DA2-4203-96FD-2344BBF99A17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ew:*:*:*:*:*:*","matchCriteriaId":"660ED401-2B7F-477F-99BA-DC553D47A9D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ex:*:*:*:*:*:*","matchCriteriaId":"D5F66FC9-7BBB-460A-9D50-E971F8F489AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ey:*:*:*:*:*:*","matchCriteriaId":"83A2B33B-BD96-42D6-B455-C6877F8C5BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ez:*:*:*:*:*:*","matchCriteriaId":"946C08B8-DB52-41F0-8963-FD865FDE4462"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ga:*:*:*:*:*:*","matchCriteriaId":"F4F4AC3A-F2B8-40FB-A11D-9B2F8F81F699"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:gb:*:*:*:*:*:*","matchCriteriaId":"5A7CEA79-0B95-4EA4-B07C-AE93A75BF7A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xa:*:*:*:*:*:*","matchCriteriaId":"F6A42922-F82A-4F7E-AF58-CAC0FD3402BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xb:*:*:*:*:*:*","matchCriteriaId":"11BD3E2A-45B6-4A50-81C0-5089138434C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xc:*:*:*:*:*:*","matchCriteriaId":"C62A96DA-2A55-4B7B-9D66-19583B4FD63A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xd:*:*:*:*:*:*","matchCriteriaId":"DCE34BEA-83F6-4908-A71B-7850D2B964ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xe:*:*:*:*:*:*","matchCriteriaId":"07B63B0A-1D38-4E5A-8D6E-5DE8F961E0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xf:*:*:*:*:*:*","matchCriteriaId":"3E856620-FF4D-48B6-BAD6-F85744185593"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xg:*:*:*:*:*:*","matchCriteriaId":"6D78F36C-02EF-4839-B361-999F0445F20B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xh:*:*:*:*:*:*","matchCriteriaId":"9EEB9ED5-A623-46F0-8386-35DA38BD5FA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xi:*:*:*:*:*:*","matchCriteriaId":"E2F6E880-FDB3-4888-95FC-8709444530E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xj:*:*:*:*:*:*","matchCriteriaId":"27E31864-DE6C-48AF-A7B3-A66F63575ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xk:*:*:*:*:*:*","matchCriteriaId":"48572A1B-3696-4C47-9E59-30BC221FDEFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xl:*:*:*:*:*:*","matchCriteriaId":"C1AE04CB-E03D-4C29-A257-BFB9468F86CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xm:*:*:*:*:*:*","matchCriteriaId":"78F6FFF6-F5B9-4539-A189-6EA4C2D122CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xp:*:*:*:*:*:*","matchCriteriaId":"D8D5EFEF-F27A-429D-B005-BFC8D1D39FA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xq:*:*:*:*:*:*","matchCriteriaId":"D8A3B7BF-D52A-487E-ADCA-C2537CB5F36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xr:*:*:*:*:*:*","matchCriteriaId":"35F77E17-F109-4CB7-8333-E0651FF2B5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xs:*:*:*:*:*:*","matchCriteriaId":"9AAD994B-C227-4D5A-B21A-51C44EEB4798"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xt:*:*:*:*:*:*","matchCriteriaId":"FD3ABECA-25E5-4D10-B319-354F1C202C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xv:*:*:*:*:*:*","matchCriteriaId":"D50BD3AD-BCDC-4271-BFE1-D81DCE4106BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xw:*:*:*:*:*:*","matchCriteriaId":"91A12162-E442-4FA4-9CCA-67F910582D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xx:*:*:*:*:*:*","matchCriteriaId":"92EF445D-F19B-44F6-A878-6409D4E28FC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xy:*:*:*:*:*:*","matchCriteriaId":"A0FD7E21-2C42-49B8-98A1-CB2E6DC6B3CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:xz:*:*:*:*:*:*","matchCriteriaId":"05E1A96A-D29D-4D57-B40A-EB12A40116A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ya:*:*:*:*:*:*","matchCriteriaId":"59EE8734-9650-4B38-B62B-6A0ADF6E7BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yb:*:*:*:*:*:*","matchCriteriaId":"65351CCD-C47C-4035-88FB-616E05398C1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yc:*:*:*:*:*:*","matchCriteriaId":"A28DF3F1-6788-4F7D-87CC-DEEA8D8F3205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yd:*:*:*:*:*:*","matchCriteriaId":"FA52C637-B9B1-4B3F-924F-A7D5286F816C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:ye:*:*:*:*:*:*","matchCriteriaId":"81CF042A-391D-496B-8317-65CA10FEED03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yf:*:*:*:*:*:*","matchCriteriaId":"5C010477-1440-4B0F-937B-399D3A4535A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yh:*:*:*:*:*:*","matchCriteriaId":"675A9670-F046-4840-9B0B-E384046C4324"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yi:*:*:*:*:*:*","matchCriteriaId":"C67EBC40-4D6E-4126-B044-BC1F215E868C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.1:yj:*:*:*:*:*:*","matchCriteriaId":"FD317149-C33D-4139-AAA1-878005806645"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:b:*:*:*:*:*:*","matchCriteriaId":"91844D86-1C49-4FBE-8D8E-84A75586B1A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:bc:*:*:*:*:*:*","matchCriteriaId":"A31E1599-C1D0-40C6-B18A-D0604BD109F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:bw:*:*:*:*:*:*","matchCriteriaId":"64B4036B-5BDF-4D1C-A0B2-7252F24742E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:by:*:*:*:*:*:*","matchCriteriaId":"C6CB71F1-6092-48C7-B715-7349F044360C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:bz:*:*:*:*:*:*","matchCriteriaId":"D86ED994-3F96-4380-A2BE-71FDD3CAE4A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:cx:*:*:*:*:*:*","matchCriteriaId":"74BFFADB-27F2-4C35-B5FC-9BAE1227EB51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:cy:*:*:*:*:*:*","matchCriteriaId":"EA13518D-B17B-4531-B0E5-866120506116"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:da:*:*:*:*:*:*","matchCriteriaId":"4BE495A4-E66B-4710-A554-D0FE9023E69D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:dd:*:*:*:*:*:*","matchCriteriaId":"B13A02F5-65F2-4DB5-8EB3-8A0B9F7884D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:dx:*:*:*:*:*:*","matchCriteriaId":"95224EB1-BD20-4AA4-AD35-7ADDD3049359"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:eu:*:*:*:*:*:*","matchCriteriaId":"1AFEA3F7-D9AD-4817-9F75-864221C88DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ew:*:*:*:*:*:*","matchCriteriaId":"3013C05E-3A15-4FD8-943A-AAB36EB4FB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ewa:*:*:*:*:*:*","matchCriteriaId":"4A4AFC06-85C5-4AD0-A409-27F9AF398D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ex:*:*:*:*:*:*","matchCriteriaId":"0CE16131-2E4C-49F5-91A0-820AACC6683C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ey:*:*:*:*:*:*","matchCriteriaId":"D7BAF29F-1EB4-44F9-92C1-D3322D7C0B81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ez:*:*:*:*:*:*","matchCriteriaId":"DAB50CF9-9392-425C-B56E-3576CF0F6989"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:fz:*:*:*:*:*:*","matchCriteriaId":"EA697982-AF54-432F-8CCA-481678DE56D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ixa:*:*:*:*:*:*","matchCriteriaId":"4DA9B310-0E8E-4BCD-8254-5B8835413D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ixb:*:*:*:*:*:*","matchCriteriaId":"1D3B1EB1-E066-42D3-A623-8FBBF42220F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ixc:*:*:*:*:*:*","matchCriteriaId":"D9631E85-B8BC-4F0A-AD9B-0DB668C1ED98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ixd:*:*:*:*:*:*","matchCriteriaId":"25EA7E2F-8C5C-486A-B03D-D0A2A6BB5B69"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ja:*:*:*:*:*:*","matchCriteriaId":"9215D716-E6F6-4AEE-8808-9398A4826F04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:mb:*:*:*:*:*:*","matchCriteriaId":"7B70078D-2F0E-4B00-8AF9-E2641A37A59E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:mc:*:*:*:*:*:*","matchCriteriaId":"06F481C2-4714-4995-9ED6-766BF5EA5738"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:s:*:*:*:*:*:*","matchCriteriaId":"BFE5AEBE-EB53-43F0-857E-7B4EDC1A0ED9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sb:*:*:*:*:*:*","matchCriteriaId":"74382B2D-E9A6-453D-9C07-F959EAB4C075"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sbc:*:*:*:*:*:*","matchCriteriaId":"1D64DA55-828B-40B4-9320-423121B5F8CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:se:*:*:*:*:*:*","matchCriteriaId":"04D4ED20-A74A-4553-8FAC-3DA57A6E7423"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sea:*:*:*:*:*:*","matchCriteriaId":"AFD7C0D7-FE22-4EAA-A21E-D393DD73C5C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:seb:*:*:*:*:*:*","matchCriteriaId":"2270E882-0B30-4948-B4E7-BA3E87DD7E7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sec:*:*:*:*:*:*","matchCriteriaId":"D1A0DD83-80AB-4B1C-A267-2CCC2D37D57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sed:*:*:*:*:*:*","matchCriteriaId":"ED52280F-D956-4617-9AFC-2928CF8F93F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:see:*:*:*:*:*:*","matchCriteriaId":"A2C0605F-4FC6-43AC-A349-F1BB0572304F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sef:*:*:*:*:*:*","matchCriteriaId":"224BD2C9-6213-416F-88D2-5FAECC005802"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:seg:*:*:*:*:*:*","matchCriteriaId":"5CB5F125-9124-4C37-8FC9-CC63CFE20AE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sg:*:*:*:*:*:*","matchCriteriaId":"B3D93383-BD5A-4052-B724-055F6FCFC314"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sga:*:*:*:*:*:*","matchCriteriaId":"6B1E3C39-163D-4A99-AC96-2EE388305000"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sm:*:*:*:*:*:*","matchCriteriaId":"5C0F2D29-F6E6-440E-B08C-8EED785878CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:so:*:*:*:*:*:*","matchCriteriaId":"C04488E3-F13F-4CA5-B8AF-6951FB510086"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sra:*:*:*:*:*:*","matchCriteriaId":"90710000-F963-4F36-9EE1-C3CE1CECDCA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:srb:*:*:*:*:*:*","matchCriteriaId":"5F4F8B9E-B2AB-4545-8ACF-8F03E636E842"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:st:*:*:*:*:*:*","matchCriteriaId":"80FB05B8-8BE5-4AE9-B018-DAB58034DC7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:su:*:*:*:*:*:*","matchCriteriaId":"69DC7D98-2B14-425F-8F93-A8BEBD9D1AE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sv:*:*:*:*:*:*","matchCriteriaId":"90D0875E-837B-4F8A-92F8-1D2DD219570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sw:*:*:*:*:*:*","matchCriteriaId":"CF6A17FF-49C2-489A-AD7B-FD1B014A3EB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sxa:*:*:*:*:*:*","matchCriteriaId":"C3E2ACD9-8623-4B0E-807A-CFC2900497E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sxb:*:*:*:*:*:*","matchCriteriaId":"79BB5494-735D-424B-8B41-2FAECE1A7AD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sxd:*:*:*:*:*:*","matchCriteriaId":"FD6178BC-9741-4FC1-87DA-A5407B3A4F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sy:*:*:*:*:*:*","matchCriteriaId":"764FEE81-E2BD-4E46-92D8-48FEC6A1B249"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:sz:*:*:*:*:*:*","matchCriteriaId":"59E8E365-8A31-48EE-BE20-7FBE7E9B54B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:t:*:*:*:*:*:*","matchCriteriaId":"9C3E10F8-62D6-4159-B883-C886FD0B63DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:tpc:*:*:*:*:*:*","matchCriteriaId":"FABE7C54-B03B-4D1E-BF40-C0F357567543"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:uz:*:*:*:*:*:*","matchCriteriaId":"9E4E6DF2-61BB-46AE-9B69-CCC899C9A38D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xa:*:*:*:*:*:*","matchCriteriaId":"B260F027-B463-490A-A067-D8324FE4871A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xb:*:*:*:*:*:*","matchCriteriaId":"C4644F2D-A4F4-42D3-931B-EB3B0AC15D72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xc:*:*:*:*:*:*","matchCriteriaId":"FB43EBD8-3517-4399-B532-5B84BE96B2A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xd:*:*:*:*:*:*","matchCriteriaId":"F4C59703-BB87-459F-BA79-D22541CB73A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xe:*:*:*:*:*:*","matchCriteriaId":"71F5830A-D8FA-4A21-B7CB-E8A1E6746E67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xf:*:*:*:*:*:*","matchCriteriaId":"114E0B28-5AD8-4FEC-A089-79017AAB33C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xg:*:*:*:*:*:*","matchCriteriaId":"6C4B4250-6044-43CF-84B1-53C4AE4ECC8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xh:*:*:*:*:*:*","matchCriteriaId":"E1C04A14-709B-44B3-B189-F50A41AA4C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xi:*:*:*:*:*:*","matchCriteriaId":"2C0EA3E0-6BFC-4A4A-ACFF-C38C3948B7E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xj:*:*:*:*:*:*","matchCriteriaId":"1C911936-17C0-43BE-A956-3F60D9606DAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xk:*:*:*:*:*:*","matchCriteriaId":"E1C06F44-E4A4-400B-AF91-7A4209733569"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xl:*:*:*:*:*:*","matchCriteriaId":"E5B2FACC-2958-4E2D-BADD-51550F1FA63A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xm:*:*:*:*:*:*","matchCriteriaId":"582B03D7-57A4-4E00-9B67-4DC2B4320DFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xn:*:*:*:*:*:*","matchCriteriaId":"8038D0FA-30FB-4BC1-A33D-6BE76C248D21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xq:*:*:*:*:*:*","matchCriteriaId":"F5B5177C-98A7-42FF-83A8-8DFE33B28595"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xr:*:*:*:*:*:*","matchCriteriaId":"19C09D13-4124-461C-9976-F7B141563532"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xs:*:*:*:*:*:*","matchCriteriaId":"EE8EBF0C-7C7B-4C12-8135-0AB9957B7E19"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xt:*:*:*:*:*:*","matchCriteriaId":"09C89AB4-7060-401D-B8B1-A5969D843558"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xu:*:*:*:*:*:*","matchCriteriaId":"A365C1C0-B014-42C9-A8B3-9D0C967DC9E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xv:*:*:*:*:*:*","matchCriteriaId":"0A56B6C5-C50D-44CF-BF43-4EDEBDA19581"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:xw:*:*:*:*:*:*","matchCriteriaId":"D5AE6379-25CE-44A1-BA61-2461DB0C0E89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ya:*:*:*:*:*:*","matchCriteriaId":"907A6B20-721D-4756-840F-8A2EE776BDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yb:*:*:*:*:*:*","matchCriteriaId":"DBD1A8F1-73AD-41A0-8426-158402875952"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yc:*:*:*:*:*:*","matchCriteriaId":"0D431519-F500-408D-A79D-DAE2DF2F3A5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ye:*:*:*:*:*:*","matchCriteriaId":"880952B0-E796-4C8A-9D28-900338B3C629"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yj:*:*:*:*:*:*","matchCriteriaId":"B5D19A29-3500-4D69-B55F-16F6AF04CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yk:*:*:*:*:*:*","matchCriteriaId":"ECD7F135-CFC7-42D4-A223-02D69B905E4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yl:*:*:*:*:*:*","matchCriteriaId":"AE54DF91-7757-4676-A497-2FDE4B039367"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ym:*:*:*:*:*:*","matchCriteriaId":"65F91BB4-5721-46B8-97D7-98467F7E1172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yn:*:*:*:*:*:*","matchCriteriaId":"582D94B0-5980-492A-A8BB-4C107521573C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yo:*:*:*:*:*:*","matchCriteriaId":"A6DCA5A2-7CE2-4273-B548-AA63E8EBCA2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yp:*:*:*:*:*:*","matchCriteriaId":"5A3625CC-B081-41DF-9C18-921C67FB4D95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yq:*:*:*:*:*:*","matchCriteriaId":"59DBDE9C-1898-4D8C-B63F-0F962FDEA23C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yr:*:*:*:*:*:*","matchCriteriaId":"C072D406-81E6-4FA8-82AC-47033F3229D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ys:*:*:*:*:*:*","matchCriteriaId":"06193800-DE6B-4014-99A2-AE9AAFC11F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yt:*:*:*:*:*:*","matchCriteriaId":"A7ED5BF0-BC3A-467A-BF14-8FE3529FD6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yu:*:*:*:*:*:*","matchCriteriaId":"AC94BEC7-F050-4679-9331-9B7F679B2196"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yv:*:*:*:*:*:*","matchCriteriaId":"9D21DF3F-4793-4F4A-94E7-C174EEC7CF61"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yx:*:*:*:*:*:*","matchCriteriaId":"FD47D76A-7F35-4B38-B479-FDA1EB09C35D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:yy:*:*:*:*:*:*","matchCriteriaId":"A82F0863-9143-4390-A9C0-19DDB06C176E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:za:*:*:*:*:*:*","matchCriteriaId":"D86A8DA9-D114-4BBE-90DE-F643C12EFB1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zb:*:*:*:*:*:*","matchCriteriaId":"DF7E107F-4805-4832-A013-A35D374FF07C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zc:*:*:*:*:*:*","matchCriteriaId":"2223DB0D-E7DA-488A-96C2-8845946CEDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zd:*:*:*:*:*:*","matchCriteriaId":"5779F924-F313-427F-82F4-571E657B57F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:ze:*:*:*:*:*:*","matchCriteriaId":"9783B2B3-F735-4E96-8FAA-679D753CDC90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zf:*:*:*:*:*:*","matchCriteriaId":"748B610B-7659-431E-BCB9-B7B5E72C0E89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zg:*:*:*:*:*:*","matchCriteriaId":"98798701-533E-4255-9450-C6354B779EF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zh:*:*:*:*:*:*","matchCriteriaId":"F69E5442-C31F-46C8-8911-F5B77437754A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zj:*:*:*:*:*:*","matchCriteriaId":"E1D75842-3328-49A3-AC0E-C508CACE5C71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zl:*:*:*:*:*:*","matchCriteriaId":"B472DEEE-148A-46B4-BCBC-0A9F62F38B31"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zp:*:*:*:*:*:*","matchCriteriaId":"FA06B835-2324-47D4-A04D-D01FFA069A59"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.2:zy:*:*:*:*:*:*","matchCriteriaId":"23305EBA-11D5-417E-823E-39D0D052839D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*","matchCriteriaId":"95418AD2-FB85-4E20-B874-D82DDF88BC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*","matchCriteriaId":"D8FC7948-B922-486E-9E5F-069B930EB1E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*","matchCriteriaId":"475EABCF-7404-4B65-9B29-E35C7D673B47"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*","matchCriteriaId":"7D99C07D-4EE3-4057-8E76-3468C45B4A4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*","matchCriteriaId":"14D1B81D-95E4-4945-94F2-C36FD7C0DC55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*","matchCriteriaId":"372582DB-DAB8-4B57-A778-5E2BC35B8233"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*","matchCriteriaId":"452FF154-F6C0-4BC4-969E-1D49AA3CCE49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*","matchCriteriaId":"36CF94C8-D6FE-4229-86F4-AF503F950151"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*","matchCriteriaId":"554C9611-55F1-40AF-9862-7E902D5CE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*","matchCriteriaId":"F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*","matchCriteriaId":"EEB0B55E-3579-4929-862F-C5FF9F796AE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*","matchCriteriaId":"A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*","matchCriteriaId":"CBC11203-84FD-4F6C-8597-573FD784C68E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*","matchCriteriaId":"8E8E34D3-0BCB-4D19-A41C-0375941E1B21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*","matchCriteriaId":"0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*","matchCriteriaId":"39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*","matchCriteriaId":"5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*","matchCriteriaId":"A0515E7C-E3A5-44F4-866F-283E43AE8654"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*","matchCriteriaId":"1A74B4D0-939B-4FF1-9163-86FF64DB368E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*","matchCriteriaId":"09CBD68E-2A5C-43DF-9AD6-DE07815821B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*","matchCriteriaId":"463C3A96-F8B7-4117-8CB3-D15B44119AB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*","matchCriteriaId":"01393D91-ED1D-460D-8621-10260F0CBDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*","matchCriteriaId":"48ABA40D-DE49-4B20-AFA1-302EB93719FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*","matchCriteriaId":"8AB2FF53-5991-4264-B5CC-D1E45460BFCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*","matchCriteriaId":"0B0B18B6-FF50-48BE-8250-14E57FB73AE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*","matchCriteriaId":"1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*","matchCriteriaId":"0ED386B6-3C75-41C3-8206-9CBA14E20B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*","matchCriteriaId":"989581B0-FC28-457B-BDD2-72ED65BBE51E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*","matchCriteriaId":"EF8A8C95-2DC3-47AB-BED3-7D33902440C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*","matchCriteriaId":"B8920235-87C6-41D6-9497-CC12D18A6536"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*","matchCriteriaId":"9752CFFC-F1DA-4122-ACD8-79CB963F485F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*","matchCriteriaId":"7012F8E0-2256-448A-9C4D-E2DB5AB9852B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*","matchCriteriaId":"1BE94EA2-E0CC-4760-94A8-DE56C8181F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*","matchCriteriaId":"5B44691F-A47B-4953-BAC9-B2D43F4BCC06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*","matchCriteriaId":"8910F02B-DF61-443B-A4B5-2C0C04484519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*","matchCriteriaId":"929836AD-8128-4174-872D-B9638B54611C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*","matchCriteriaId":"045B4782-6CE2-40DD-A9F0-16E0C25768FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*","matchCriteriaId":"9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*","matchCriteriaId":"5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*","matchCriteriaId":"9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*","matchCriteriaId":"416B8D2F-0B11-4074-B6BD-2E97F79B5520"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*","matchCriteriaId":"5ED5B53D-930D-477E-A0F6-76167AE67641"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*","matchCriteriaId":"29B39978-3BD0-40A8-93AE-EF40042EB7CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*","matchCriteriaId":"84983F6A-64F6-4720-9291-FC84CA10EE25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*","matchCriteriaId":"4A2784C6-588A-4CAC-9362-515FB070D21E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*","matchCriteriaId":"93580300-6B1F-4D21-A51E-B781E234217D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*","matchCriteriaId":"28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*","matchCriteriaId":"DB3BA487-727D-416C-80C6-C2F90D52E149"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*","matchCriteriaId":"A73738DE-E81B-4226-ABA3-B54A5AD96389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*","matchCriteriaId":"F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*","matchCriteriaId":"EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*","matchCriteriaId":"8E2376E9-D7F4-4483-AB13-8840EA9A63E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*","matchCriteriaId":"473A31DD-A0DC-4716-B98E-D2926A26DAF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*","matchCriteriaId":"C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*","matchCriteriaId":"156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*","matchCriteriaId":"C9E90E83-1732-4BEF-BC5B-401769DC8880"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*","matchCriteriaId":"68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*","matchCriteriaId":"51679B26-DF28-4E41-9801-E1599F250FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*","matchCriteriaId":"E989900F-BE66-47E4-9A1B-11B9785F89BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*","matchCriteriaId":"95A01B7E-8231-4001-A340-31CE66474FDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*","matchCriteriaId":"3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*","matchCriteriaId":"B7368529-518E-4DB2-B291-1F0009445D01"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*","matchCriteriaId":"3CC62D3B-A287-4DED-A44D-3351452D4A55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*","matchCriteriaId":"EA2F5D70-6790-4756-9A6A-F1865DCD4D10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xl:*:*:*:*:*:*","matchCriteriaId":"57C8EB63-52B5-4B16-8EA1-621790F70B7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xm:*:*:*:*:*:*","matchCriteriaId":"61C80F8B-ADE8-4289-8D87-02C6284D5A8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xn:*:*:*:*:*:*","matchCriteriaId":"3CBBBBD1-496B-4C31-80B8-C217E915F077"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xt:*:*:*:*:*:*","matchCriteriaId":"07ED91C2-B8ED-4AE7-8A37-82DB94EE28A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xv:*:*:*:*:*:*","matchCriteriaId":"CBDA82BB-93D1-436C-9598-0AF3FAC8CD26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xw:*:*:*:*:*:*","matchCriteriaId":"687E91FF-957E-449F-BDD6-85AA59E1E0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xy:*:*:*:*:*:*","matchCriteriaId":"8049D059-2A09-4820-A4F0-6B8D794606BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"}]}]}],"references":[{"url":"http://secunia.com/advisories/29507","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28465","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019712","source":"psirt@cisco.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41482","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1153","sourceIdentifier":"psirt@cisco.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device."},{"lang":"es","value":"Cisco IOS versiones 12.1, 12.2, 12.3 y 12.4, con servicios UDP de IPv4 y el protocolo IPv6 habilitado, permite a los atacantes remotos causar una denegación de servicio (bloqueo del dispositivo y posible interfaz bloqueada) por medio de un paquete IPv6 diseñado para el dispositivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"}]}]}],"references":[{"url":"http://secunia.com/advisories/29507","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml","source":"psirt@cisco.com","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/936177","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28461","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019713","source":"psirt@cisco.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41475","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5860","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/936177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1154","sourceIdentifier":"psirt@cisco.com","published":"2008-04-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"El Disaster Recovery Framework (DRF) Master Server en productos Cisco Unified Communications, incluyendo Unified Communications Manager (CUCM) 5.x y 6.x, Unified Presence 1.x y 6.x, Emergency Responder 2.x, y Mobility Manager 2.x, no requiere autenticación para las peticiones recibidas desde la red, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:emergency_responder:2.0:*:*:*:*:*:*:*","matchCriteriaId":"984570AA-2517-440D-9A2F-8EBAEB022602"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:mobility_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6BFAA32C-6AEC-490A-9514-BA5B10E9B0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AF68FA-433F-46F2-B309-B60A108BECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"640BFEE2-B364-411E-B641-7471B88ED7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:1.0:*:*:*:*:*:*:*","matchCriteriaId":"53DFD5A1-33C9-45E5-B7B9-2B1FAA840ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9C9B1A89-6A54-4BA7-9980-3EB46C650FFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29670","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1019768","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008096fd9a.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28591","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1093","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41632","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008096fd9a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1155","sourceIdentifier":"psirt@cisco.com","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs."},{"lang":"es","value":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x anterior a v3.6.4.4, 4.0.x anterior a v4.0.6, y 4.1.x anterior4.1.2, permite a atacantes remotos obtener el secreto compartido para Clean Access Server (CAS) y Clean Access Manager (CAM) a través de la escucha de red de los logs de errores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.4.3","matchCriteriaId":"7BFAE963-6E84-4712-A628-6240D97C200A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.5.1","matchCriteriaId":"432F7177-A43A-463A-B663-9181B0506545"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"9174F08C-55B7-4985-9964-732088051BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.5:*:*:*:*:*:*:*","matchCriteriaId":"0051F9BB-0315-4541-95A5-CAAC6A3FC9A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6:*:*:*:*:*:*:*","matchCriteriaId":"57F000C2-5343-41CE-81EF-D26D7E884798"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1849F3F6-834E-4C3A-B1B2-4B0C360FE03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1898068E-41B8-4C25-B240-2779206FB0A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ED68FC7E-A6A6-49AB-AEDB-CE70C1139BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FAE93C0F-D240-47D7-B638-6E7AB65C8ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"300CE692-9161-4866-96CD-C865000FA481"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE6DF16-6846-4246-AF33-58FD02038D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:3.6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"4DA5D3A7-6B5B-4699-8FBE-6DC36F8C350F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BD36F046-CCBF-467D-9522-81307A47D7F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EC29AD92-F6B6-4CF3-9471-EAE70284C9B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"22FD214D-4176-4388-A837-21DAFE62D502"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BBAD29D5-0C9F-44DC-9574-793DE4C90316"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8A77575E-9676-48DA-A28D-85D3D8C1EAD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"86E65BA0-55E6-4D6E-BAED-26769B1671D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"42A5102C-86F2-4194-BAEA-7EAD5CAC5ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F31B7941-03B8-430E-AA23-B105138FC5F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E76E6DCE-93DE-4522-BD35-82440B4EE635"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"83407842-77E2-417D-9355-6CFDADB62EEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29822","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28807","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019859","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1248/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41849","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1248/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1156","sourceIdentifier":"psirt@cisco.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create \"extra multicast states on the core routers\" via a crafted Multicast Distribution Tree (MDT) Data Join message."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación de la Red Privada Virtual Multicast (MVPN) en Cisco IOS 12.0, 12.2, 12.3, y 12.4 permite a atacantes remotos crear \"estados multicast extra en los routers core\" a través de mensajes Multicast Distribution Tree (MDT) Data Join manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"}]}]}],"references":[{"url":"http://secunia.com/advisories/29507","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28464","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1019715","source":"psirt@cisco.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"psirt@cisco.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41468","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1006/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1157","sourceIdentifier":"psirt@cisco.com","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands."},{"lang":"es","value":"Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 crea un proceso que ejecuta una consola de comandos y escucha en un puerto TCP elegido de forma aleatoria, que permite a atacantes remotos ejecutar comandos de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_internetwork_performance_monitor:2.6:*:*:*:*:*:*:*","matchCriteriaId":"D9EF0FAB-A8CD-4F1E-804E-E1FBE152E9A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/29376","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080313-ipm.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28249","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019611","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/0876/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41208","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/29376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20080313-ipm.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1158","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164."},{"lang":"es","value":"El servicio Presence Engine (PE) de Cisco Unified Presence versiones anteriores a 6.0(1) permite a atacantes remotos provocar una denegación de servicio (core dump e interrupción del servicio) a través de paquetes malformados, también conocido como Bug ID CSCsh50164."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9C9B1A89-6A54-4BA7-9980-3EB46C650FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F897DA4-E313-45C8-A4FB-52404D6541BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"22B299D9-A18B-41D9-B976-57AFDAA751DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"CDA3BA5D-2CEB-4AAC-8CB4-4A2CDC574076"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"9465A4F0-44C0-4A43-962E-0CCEADA05533"}]}]}],"references":[{"url":"http://secunia.com/advisories/30240","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020023","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29219","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1534","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42412","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1159","sourceIdentifier":"psirt@cisco.com","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1) CSCsk42419, (2) CSCsk60020, and (3) CSCsh51293."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el servidor SSH en Cisco IOS 12.4, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de vectores desconocidos, también conocido como Bug ID(1) CSCsk42419, (2) CSCsk60020 y (3) CSCsh51293."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ios_s:12.4:*:*:*:*:*:*:*","matchCriteriaId":"A65237AF-ACD9-4AA1-BB2B-97176B19A8C5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ios_t:12.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D41571-3121-4AB2-902F-06DD59423055"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ios_xr:12.4:*:*:*:*:*:*:*","matchCriteriaId":"528131B4-B605-47A7-B235-A63EB8E3CF56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*","matchCriteriaId":"3C15E168-11DA-4219-B689-78BC48935263"}]}]}],"references":[{"url":"http://secunia.com/advisories/30322","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020073","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099567f.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29314","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1605/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42563","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5486","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099567f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1605/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1160","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges."},{"lang":"es","value":"ZyXEL ZyWALL 1050 tiene una contraseña fija para los procesos Quagga y Zebra que no se cambia cuando se establece por un usuario, lo que permite a atacantes remotos obtener privilegios."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:zywall_1050_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"12CA66DC-CD33-4EBA-8762-2F0D3591F3D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:zywall_1050:-:*:*:*:*:*:*:*","matchCriteriaId":"51AF5F07-6FE1-4080-817B-55E63D62753A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29237","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-%28default-pass%29-remote-root-vulnerability-2008032143791/","source":"cve@mitre.org","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28184","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0990/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41424","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5289","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-%28default-pass%29-remote-root-vulnerability-2008032143791/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0990/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1161","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes."},{"lang":"es","value":"Un desbordamiento de búfer en el demultiplexor de Matroska (archivo demultiplexor/demux_matroska.c) en xine-lib versiones anteriores a 1.1.10.1,  permite a atacantes remotos causar una denegación de servicio (bloqueo de aplicación) y posiblemente ejecutar código arbitrario por medio de un archivo Matroska con tamaños de tramas no válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matroska:demuxer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.10","matchCriteriaId":"86D678A1-3772-46B9-A855-D8D917D31FE1"}]}]}],"references":[{"url":"http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=a62d6f482a69%3Bstyle=gitweb","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1536","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28543","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41172","source":"cve@mitre.org"},{"url":"http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=a62d6f482a69%3Bstyle=gitweb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1162","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en album.php de PHP WEB SCRIPT Dynamic Photo Gallery 1.02 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro albumID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_web_scripts:dynamic_photo_gallery:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"35AA9C8C-69EE-4C89-B274-B06AD9E14B99"}]}]}],"references":[{"url":"http://forum.aria-security.net/showthread.php?p=1521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29212","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489017/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28067","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5211","source":"cve@mitre.org"},{"url":"http://forum.aria-security.net/showthread.php?p=1521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489017/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1163","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de phpArcadeScript 1.0 hasta 3.0 RC2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetor userid en una acción profile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phparcadescript:phparcadescript:1.0:*:*:*:*:*:*:*","matchCriteriaId":"530B1D8F-982A-4C85-8A4A-5AF1303E3B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparcadescript:phparcadescript:2.0:*:*:*:*:*:*:*","matchCriteriaId":"60D663D5-F3D6-4AC9-952E-D3450F8F87C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparcadescript:phparcadescript:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65238A56-ADD1-4F62-891A-37FC08541660"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparcadescript:phparcadescript:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"2D77A1A1-1015-4D8C-8EA5-9059E841D484"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28065","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5208","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1164","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod_project_id parameter in a project_detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en phpComasy 0.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro mod_project_id en una acción project_detail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcomasy:phpcomasy:0.8:*:*:*:*:*:*:*","matchCriteriaId":"245AB137-6FE4-4204-B27D-BA0EE0A57948"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1165","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script or HTML via (1) a forced SQL error message or (2) old_value and new_value database fields in task summaries, related to the item_summary parameter in a details action in index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Flyspray de 0.9.9 a 0.9.9.4 permiten a atacantes remotos   inyectar secuencias de comandos web o HTML de su elección a través de 1) un mensaje forzado de error SQL o (2) los campos old_value y new_value database en task summaries, relacionados con el parámetro item_summary  en una acción details en index.php. NOTA: algunos de estos detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"3A3B6A62-B941-49CC-820B-2E8AF21438EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.1:*:*:*:*:*:*:*","matchCriteriaId":"467BEC81-7F89-40DD-8194-45C1978A43DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.2:*:*:*:*:*:*:*","matchCriteriaId":"3593A1D6-B4EE-40A3-A807-3BE34290C4F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.3:*:*:*:*:*:*:*","matchCriteriaId":"04ABFF20-F663-416B-B3C3-00B12F6FDE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8BFF89F6-911C-46CD-BD2E-D1498A0C8E8E"}]}]}],"references":[{"url":"http://flyspray.org/fsa:3","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40963","source":"cve@mitre.org"},{"url":"http://flyspray.org/fsa:3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1166","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames."},{"lang":"es","value":"Flyspray versión 0.9.9.9.4, genera diferentes mensajes de error dependiendo de si el nombre de usuario es válido o no válido, lo que permite a los atacantes remotos enumerar los nombres de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"3A3B6A62-B941-49CC-820B-2E8AF21438EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.1:*:*:*:*:*:*:*","matchCriteriaId":"467BEC81-7F89-40DD-8194-45C1978A43DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.2:*:*:*:*:*:*:*","matchCriteriaId":"3593A1D6-B4EE-40A3-A807-3BE34290C4F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.3:*:*:*:*:*:*:*","matchCriteriaId":"04ABFF20-F663-416B-B3C3-00B12F6FDE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:flyspray:flyspray:0.9.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8BFF89F6-911C-46CD-BD2E-D1498A0C8E8E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489020/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489020/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1167","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en una función useragent de useragent.c en Squid Analysis Report Generator (Sarg) permite a atacantes remotos ejecutar código de su elección a través una cabecera User-Agent en un servidor proxy de Squid. \r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sarg:squid_analysis_report_generator:2.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"89AECBC9-C73E-4112-AD0D-30805E4EEDE0"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28668","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29500","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581212","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489018/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28077","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019536","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0749","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40970","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1168","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Squid Analysis Report Generator (Sarg) 2.2.3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cabecera User-Agent, la cual no se manipula correctamente cuando se muestra el log del proxy de Squid. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sarg:squid_analysis_report_generator:2.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"89AECBC9-C73E-4112-AD0D-30805E4EEDE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/28668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29309","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29500","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581509","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28077","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0750/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0750/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1169","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) or \"../\" (dot dot forward slash) in the GET command."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servido HTTP embebido de SCI Photo Chat Server 3.4.9 y versiones anteriores permite a atacantes remotos leer fichero de su elección a  través de \"..\\\" (punto punto barra invertida) en un comando GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simm-comm:sci_photo_chat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.9","matchCriteriaId":"C35F0DF5-195B-436A-B1F9-2ACEF82F2B74"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/scichatdt-adv.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27872","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40655","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/scichatdt-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1170","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to (1) minimal/wiki.php and (2) simplest/wiki.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos PHP remotos en KCWiki 1.0 permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro page a (1) minimal/wiki.php y (2) simplest/wiki.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kcwiki:kcwiki:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BEB4E7BC-BCBE-4AE8-A28E-CEDC9BB9CD61"}]}]}],"references":[{"url":"http://secunia.com/advisories/29218","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1171","sourceIdentifier":"cve@mitre.org","published":"2008-03-05T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php.  NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to \"./\" in both programs"},{"lang":"es","value":"** CUESTIONADA ** Múltiples vulnerabilidades de inclusión remota de archivo en PHP en el módulo 123 Flash Chat para phpBB permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro phpbb_root_path de (1) 123flashchat.php y (2) phpbb_login_chat.php. \r\nNOTA: CVE cuestiona esta cuestión porque $phpbb_root_path es explícitamente establecido en \"./\" en ambos programas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:123_flash_chat_module:*:*:*:*:*:*:*:*","matchCriteriaId":"F3A3A631-F338-4F1C-B65E-68F3E889E99A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3716","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-March/001913.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488914/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488922/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-March/001913.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488914/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488922/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1172","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en account-inbox.php en TorrentTrader Classic 1.08 permite a atacantes remotos realizar ciertas acciones como otros usuarios, como se ha demostrado enviando mensajes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.08:*:*:*:*:*:*:*","matchCriteriaId":"39EA56B3-9336-4EB0-9D5F-8672DDBFB7EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.08:*:*:*:*:*:*:*","matchCriteriaId":"DACD4754-4637-42CD-B188-5FBF24EBCC90"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489039/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40981","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489039/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1173","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo account-inbox.php en TorrentTrader Classic versión 1.08, permite a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.08:*:*:*:*:*:*:*","matchCriteriaId":"39EA56B3-9336-4EB0-9D5F-8672DDBFB7EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.08:*:*:*:*:*:*:*","matchCriteriaId":"DACD4754-4637-42CD-B188-5FBF24EBCC90"}]}]}],"references":[{"url":"http://secunia.com/advisories/29220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489039/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28082","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40980","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489039/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1174","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en editUser.asp de AuthentiX 6.3b1 Trial permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flicks_software:authentix:6.3b1:*:trial:*:*:*:*:*","matchCriteriaId":"0BB51392-B9D1-4229-82C3-FC6B8BD6DA92"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120410229721185&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28040","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=120410229721185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1175","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AuthentiX 6.3b1 Trial, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través del parámetro username a aspAdmin/deleteUser.asp, vector diferente al CVE-2008-1174. NOTA: el origen de esta información es desconocida.  Los detalles se han obtenido a través de información por parte de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flicks_software:authentix:6.3b1:*:trial:*:*:*:*:*","matchCriteriaId":"0BB51392-B9D1-4229-82C3-FC6B8BD6DA92"}]}]}],"references":[{"url":"http://secunia.com/advisories/29142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1176","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to inject arbitrary web script or HTML via the sideblock4 parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en function/sideblock.php de Affiliate Market (affmarket) 0.1 BETA, permite atacantes remotos inyectar secuencias de comandos web o html de su elección a través del parámetro sideblock4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:affiliate_market:affiliate_market:0.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"798BE280-644E-4C06-A915-E423337E068B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40514","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1177","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en shop/detail.php de Affiliate Market (affmarket) 0.1 BETA permite a atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:affiliate_market:affiliate_market:0.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"798BE280-644E-4C06-A915-E423337E068B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40515","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1178","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2008-1119."},{"lang":"es","value":"Vulnerabilidad de salto de directorio de include/doc/index.php en Centreon 1.4.2.3 y anteriores, que permite a atacantes remotos leer archivos de su elección a través de la secuencia .. (punto punto) en la página. Vector diferente del CVE-2008-1119."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.3","matchCriteriaId":"D5712C73-E08B-4AC9-AA0A-4A434C40C6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4:*:*:*:*:*:*:*","matchCriteriaId":"AE85AAA1-7FF0-4AEA-A43A-18954F78080D"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"25A10AA5-F76F-4DB5-A2A2-6A0C76565AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"96B507D5-D2AC-4DD2-8FB1-B84C2EAA5998"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8D21C5EB-EA82-422D-8CEB-32544B369680"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E268C921-B9D5-4423-A935-79089DA53826"}]}]}],"references":[{"url":"http://secunia.com/advisories/29158","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3715","source":"cve@mitre.org"},{"url":"http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488956/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40950","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488956/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1179","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) title parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) de include/common/javascript/color_picker.php en Centreon 1.4.2.3, que permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través de los parámetros (1) name y (2) title. NOTA: Los detalles se han obtenido a través de información por parte de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.3","matchCriteriaId":"D5712C73-E08B-4AC9-AA0A-4A434C40C6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4:*:*:*:*:*:*:*","matchCriteriaId":"AE85AAA1-7FF0-4AEA-A43A-18954F78080D"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"25A10AA5-F76F-4DB5-A2A2-6A0C76565AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"96B507D5-D2AC-4DD2-8FB1-B84C2EAA5998"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8D21C5EB-EA82-422D-8CEB-32544B369680"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon:1.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E268C921-B9D5-4423-A935-79089DA53826"}]}]}],"references":[{"url":"http://secunia.com/advisories/29158","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40924","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1180","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the delivery_mode parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)de dana-na/auth/rdremediate.cgi en Juniper Networks Secure Access 2000 5.5 R1 build 11711, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través del parámetro delivery_mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:secure_access_2000:5.5:r1:build_11711:*:*:*:*:*","matchCriteriaId":"9DAE5C3B-FF5D-4399-B5D5-D4B3266B3495"}]}]}],"references":[{"url":"http://secunia.com/advisories/29165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3720","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-41.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488918/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28034","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0762","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-41.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488918/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1181","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the path in an \"Execute failed\" error message."},{"lang":"es","value":"Juniper Networks Secure Access 2000 5.5 R1 (build 11711) permite a atacantes remotos obtener información sensible a través de una petición directa para remediate.cgi sin ciertos parámetros, lo cual muestra la ruta en un mensaje de error \"Execute failed\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:secure_access_2000:5.5:r1:build_11711:*:*:*:*:*","matchCriteriaId":"9DAE5C3B-FF5D-4399-B5D5-D4B3266B3495"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488919/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28037","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019526","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488919/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1182","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BSD Perimeter pfSense before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en BSD Perimeter pfSense antes de 1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bsd_perimeter:pfsense:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E24A767F-3D99-4591-AC60-8006E086E924"},{"vulnerable":true,"criteria":"cpe:2.3:a:bsd_perimeter:pfsense:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"60DD2241-799E-4684-9B1B-EC39474E56AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bsd_perimeter:pfsense:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"EB0F429E-00B9-41A0-A371-7E9E8B82464F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bsd_perimeter:pfsense:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C4F339F0-3709-474A-B335-BC078369EEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bsd_perimeter:pfsense:1.2:rc4:*:*:*:*:*:*","matchCriteriaId":"E94C9BAC-4E86-42EB-ADD0-6B437234DBCC"}]}]}],"references":[{"url":"http://blog.pfsense.org/?p=170","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40967","source":"cve@mitre.org"},{"url":"http://blog.pfsense.org/?p=170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1183","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) livehelp.php, (2) user_questions.php, and (3) leavemessage.php.  NOTE: the lostsheep.php vector is covered by CVE-2008-0848."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Crafty Syntax Live Help (CSLH) versiones anteriores a 2.14.6 permiten a atacantes remotos inyectar web script o HTML de su elección a través de parámetros no especificados de (1) livehelp.php, (2) user_questions.php, y (3) leavemessage.php.\r\nNOTA: el vector lostsheep.php está cubierto por CVE-2008-0848."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"A2C5D562-2748-4C02-9F8C-BF8EC30712AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"A9FF5A42-F041-4EBE-A33B-465A6295D0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"7C88B291-9D39-4646-88BE-5377CCF9857A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=580994","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28071","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=580994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1184","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks."},{"lang":"es","value":"La librería de validación DNSSEC (libval) en dnssec-tools antes de 1.3.1 no comprueba correctamente que la clave de firmado es el identificador de confianza APEX, el cual podría permitir a atacantes llevar a cabo ataques sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dnssec-tools:dnssec-tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1","matchCriteriaId":"302278CF-AD65-4506-9CCB-662D2AD65B09"}]}]}],"references":[{"url":"http://secunia.com/advisories/29095","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29127","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=sdlk5lolzj.fsf%40wes.hardakers.net&forum_name=dnssec-tools-users","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27998","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0673/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40836","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00820.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00845.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=sdlk5lolzj.fsf%40wes.hardakers.net&forum_name=dnssec-tools-users","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0673/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00820.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00845.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1185","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1186, aka \"the first issue.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en la Máquina Virtual para Sun Java Runtime Environment (JRE) y JDK versión 6 Update 4 y anteriores, versión 5.0 Update 14 y anteriores, y SDK/JRE versión 1.4.2_16 y anteriores, permite a atacantes remotos alcanzar privilegios por medio de una aplicación o applet no confiable, un problema diferente de CVE-2008-1186, también se conoce como \"the first issue.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019555","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233321-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41025","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41138","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9672","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233321-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1186","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka \"the second issue.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en la Máquina Virtual para Sun Java Runtime Environment (JRE) y JDK versión 5.0 Update 13 y anteriores, y SDK/JRE versión 1.4.2_16 y anteriores, permite a atacantes remotos alcanzar privilegios por medio de una aplicación o applet no confiable, un problema diferente de CVE-2008-1185, también se conoce como  \"the second issue.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019555","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233321-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41025","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41138","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9585","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233321-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1187","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms."},{"lang":"es","value":"Una vulnerabilidad no especificada en Sun Java Runtime Environment (JRE) y JDK versión 6 Update 4 y anteriores, versión 5.0 Update 14 y anteriores, y SDK/JRE versión 1.4.2_16 y anteriores, permite a atacantes remotos causar una denegación de servicio (bloqueo de JRE) y posiblemente ejecutar código arbitrario por medio  de vectores desconocidos relacionados con las transformaciones XSLT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_14:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DD34FF81-708D-4A20-A82E-3C3CCEA3CEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_4:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"6BDC1F4C-7C0C-466E-8387-1A3C2C34B4DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_14","matchCriteriaId":"20FF32DD-8690-4BC5-974A-553C848A8851"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_14:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"CCFD9A4D-D395-4316-A565-25410E7C0747"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_4:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"1B134C98-9D71-413C-9589-A376AADBEC5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_16","matchCriteriaId":"E7480E57-F5D4-4729-B8EF-73E84ED126D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"cve@mitre.org"},{"url":"http://download.novell.com/Download?buildid=q5exhSqeBjA~","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN04032535/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000016.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233322-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0243.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0555.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019548","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41025","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10278","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.novell.com/Download?buildid=q5exhSqeBjA~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN04032535/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233322-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0555.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1188","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka \"The first two issues.\""},{"lang":"es","value":"Múltiples desbordamientos de búfer en la función useEncodingDecl en Java Web Start en JDK y JRE de Sun versión 6 Update 4 y anteriores, y versión 5.0 Update 14 y anteriores, permiten a los atacantes remotos ejecutar código arbitrario por medio de un archivo JNLP con (1) un nombre de clave largo en el encabezado xml o (2) un valor de juego de caracteres largo, problemas diferentes del CVE-2008-1189, también se conoce como \"The first two issues\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019549","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-009/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-010/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11209","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1189","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the \"third\" issue."},{"lang":"es","value":"El desbordamiento de búfer en Java Web Start en JDK y JRE versión 6 Update 4 y anteriores, versión 5.0 Update 14 y anteriores, y SDK/JRE versión 1.4.2_16 y anteriores, de Sun, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos, un problema diferente del CVE-2008-1188, también se conoce como el problema \"third\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019549","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41133","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41135","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1190","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the \"fourth\" issue."},{"lang":"es","value":"Una vulnerabilidad no especificada en Java Web Start en Sun JDK y JRE versión 6 Update 4 y versiones anteriores, versión 5.0 Update 14 y versiones anteriores, y SDK/JRE versión 1.4.2_16 y versiones anteriores, permite a atacantes remotos alcanzar privilegios por medio de una aplicación que no es de confianza, un problema diferente de CVE-2008-1191, también se conoce como el problema \"fourth\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019549","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9914","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1191","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka \"The fifth issue.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en Java Web Start en Sun JDK y JRE versión 6 Update 4 y anteriores, permite a atacantes remotos crear archivos arbitrarios por medio de una aplicación no confiable, un problema diferente de CVE-2008-1190, también se conoce como \"The fifth issue\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*","versionEndIncluding":"6_update_4","matchCriteriaId":"D0523081-E30F-4659-9F2D-DC257212D48D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"6_update_4","matchCriteriaId":"0C82C2E2-216C-4FE3-A682-EE3BD69F1414"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019549","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41136","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10167","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1192","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass the same origin policy and \"execute local applications\" via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el Plug-in de Java para Sun JDK y JRE versión 6 Update 4 y anteriores, y versión 5.0 Update 14 y anteriores; y SDK y JRE versión 1.4.2_16 y anteriores, y versión 1.3.1_21 y anteriores; permite a atacantes remotos omitir la política del mismo origen y \"execute local applications\" por medio de  vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233324-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019550","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41031","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11813","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233324-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1193","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application."},{"lang":"es","value":"Vulnerabilidad sin especificar en Java Runtime Environment Image Parsing Library de Sun JDK y JRE 6 Actualización 4 y anteriores, y 5.0 Actualización 14 y anteriores, permite a atacantes remotos obtener privilegios a través de una aplicación no confiable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30003","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0244.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28125","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019551","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41028","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0244.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1194","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en la librería de gestión del color en Sun JDK y JRE 6 Actualización 4 y anteriores, y 5.0 Actualización 14 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30003","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0244.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019551","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41132","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9542","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://dev2dev.bea.com/pub/advisory/277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0244.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1195","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs."},{"lang":"es","value":"Vulnerabilidad sin especificar en Sun JDK y Java Runtime Environment (JRE) 6 Actualización 4 y anteriores y 5.0 Update 14 y anteriores; y SDK y JRE 1.4.2_16 y anteriores; permite a atacantes remotos acceder a servicios de red de su elección en el host local a través de vectores no especificados relacionados con JavaScript y APIs de Java."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*","matchCriteriaId":"23E304C9-F780-4358-A58D-1E4C93977704"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29526","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29541","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29547","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29560","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29645","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-18.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019553","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41030","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1196","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Java Web Start (javaws.exe) en Sun JDK y JRE 6 Actualización 4 y anteriores y 5.0 Actualización 14 y anteriores; y SDK y JRE 1.4.2_16 y anteriores; permite a atacantes remotos ejecutar código de su elección a través de un archivo JNLP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=q5exhSqeBjA~","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31067","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31580","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31586","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233327-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/223028","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0555.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019552","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41026","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10412","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=q5exhSqeBjA~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233327-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5033642.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/223028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1019552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-066A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0770/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1197","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a \"Null SSID.\""},{"lang":"es","value":"El controlador Marvell para el punto de acceso Netgear WN802T Wi-Fi con software empotrado (firmware) 1.3.16 en el conjunto de chips (chipset) Marvell 88W8361P-BEM1, no valida de forma correcta la información del elemento SSID en una solicitud de asociación; esto permite a usuarios autenticados en remoto provocar una denegación de servicio (reinicio del dispositivo o cuelgue) o puede que ejecutar código de su elección mediante un \"SSID Nulo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:marvell:88w8361w-bem1:*:*:*:*:*:*:*:*","matchCriteriaId":"B62CD8FD-EEBE-484F-BE0F-6075C93E657E"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wn802t:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"E1B46C9B-BC8C-4291-87E2-7FA39A287866"}]}]}],"references":[{"url":"http://secunia.com/advisories/31770","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4215","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495983/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30976","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495983/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1198","sourceIdentifier":"secalert@redhat.com","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash."},{"lang":"es","value":"La secuencia de comandos por defecto IPSec ifup en Red Hat Enterprise Linux de 3 a 5 configura racoon para utilizar el modo agresivo de IKE en vez del modo principal de IKE, lo que facilita a atacantes remotos llevar a cabo ataques de fuerza bruta husmeando una clave hash que no ha sido compartida sin encriptar (PSK)."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1198\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-03-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6847B7-2D5A-496A-A177-41164D4DE9E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/48045","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ernw.de/download/pskattack.pdf","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019563","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435274","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41053","source":"secalert@redhat.com","tags":["VDB Entry"]},{"url":"http://secunia.com/advisories/48045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ernw.de/download/pskattack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=435274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1199","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack."},{"lang":"es","value":"Dovecot antes de 1.0.11, cuando se configura para utilizar mail_extra_groups para permitir a Dovecot crear dotlocks en /var/mail, podría permitir a usuarios locales leer archivos de mail sensibles para otros usuarios, o modificar archivos o directorios que sean escribibles por el grupo, a través de un ataque de enlaces simbólicos."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1199\n\nThis issue does not affect the default configuration of Dovecot as shipped in Red Hat Enterprise Linux.\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw. \n\nAn update to Red Hat Enterprise Linux 5 was released to correct this issue:\nhttps://rhn.redhat.com/errata/RHSA-2008-0297.html\n","lastModified":"2008-05-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*","matchCriteriaId":"D0616CCF-D278-4B6D-A58B-393BCA128CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:0.99.14:*:*:*:*:*:*:*","matchCriteriaId":"D3C7BE64-7C1E-4043-A1C5-D0A7377C01A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4240BD98-3C31-42CE-AF8F-045DD4BFC084"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05ACA0-ED87-4DDF-94B6-8D25BE1790F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8C0C4A-F9DB-4BB7-BFC5-BEC22C3FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7E00B56-A1E5-4261-8349-37654AA9FB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E66427AA-A9D4-413F-8354-EA61407307C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D74BE6C7-114D-4885-8472-FFE71C817B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4A349510-4D00-4978-93D9-3F9F5E0CD8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B65B9EFD-1531-463C-992E-F0F16AABF9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"34BA7146-5793-44F4-9569-9D868FE6E325"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B5078363-6B42-491B-A219-F8D8A86132BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta2:*:*:*:*:*:*:*","matchCriteriaId":"9D680474-C329-4DD0-B4EA-2406E27EC474"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta3:*:*:*:*:*:*:*","matchCriteriaId":"165A0D0B-C6B0-431F-BF36-223A27CD6A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta7:*:*:*:*:*:*:*","matchCriteriaId":"99268D48-CF82-450B-A033-D87AF4109531"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta8:*:*:*:*:*:*:*","matchCriteriaId":"B2E09737-8107-45C0-BFF1-FB4CF81564CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc1:*:*:*:*:*:*:*","matchCriteriaId":"91E74D81-DF10-423A-8549-3BB5ED02B5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc2:*:*:*:*:*:*:*","matchCriteriaId":"07D6853E-7E81-443D-8806-C8469217F55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc3:*:*:*:*:*:*:*","matchCriteriaId":"D1BE4B6A-47A2-457B-B6B8-8FE5C2026A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc4:*:*:*:*:*:*:*","matchCriteriaId":"7382F655-9B27-443D-9397-346FBEADEFDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc5:*:*:*:*:*:*:*","matchCriteriaId":"6F180045-A0DA-40A3-AD3E-F3402FB6456A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc6:*:*:*:*:*:*:*","matchCriteriaId":"C1A2FFE7-D008-47B4-80E7-AEC176918E06"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc7:*:*:*:*:*:*:*","matchCriteriaId":"8C840337-7B31-476B-BBCD-65F4899925E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc8:*:*:*:*:*:*:*","matchCriteriaId":"545EF2F5-9BAE-4612-9958-70A5413818A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc9:*:*:*:*:*:*:*","matchCriteriaId":"E80096F8-46D9-42E3-8CDB-99ADA2CBD970"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc10:*:*:*:*:*:*:*","matchCriteriaId":"9E504866-3429-4A4C-8278-5C2753D356C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc11:*:*:*:*:*:*:*","matchCriteriaId":"30857130-636F-4719-9F1E-8F6369F40DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc12:*:*:*:*:*:*:*","matchCriteriaId":"9843D7CE-4723-4200-AFD4-5B31545A287E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc13:*:*:*:*:*:*:*","matchCriteriaId":"54AF1D92-D89B-4DE4-9D47-72466873A4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc14:*:*:*:*:*:*:*","matchCriteriaId":"64A8FCA5-1666-48F7-9689-37D9315813F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc15:*:*:*:*:*:*:*","matchCriteriaId":"D4D517F3-F0A8-4362-89B9-0ED63515283F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0_rc29:*:*:*:*:*:*:*","matchCriteriaId":"3AAE9E7C-49CC-48C3-B47C-CDC5802356A7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29385","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29396","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29557","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32151","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-25.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1516","source":"cve@mitre.org"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-March/000061.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0297.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489133/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28092","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41009","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10739","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/593-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-March/000061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489133/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/593-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1200","sourceIdentifier":"cve@mitre.org","published":"2008-03-06T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll).  NOTE: this is probably a different issue than CVE-2007-6026."},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Access permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un archivo .MDB manipulado, posiblemente relacionado con Jet Engine (msjet40.dll). NOTA: probablemente este sea un problema diferente a CVE-2007-6026."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*","matchCriteriaId":"90D7BA07-3BCA-41CF-B5D3-341E912650A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D19C4A6-8BDB-4397-9C51-8C9AC2B5D4FE"}]}]}],"references":[{"url":"http://pandalabs.pandasecurity.com/archive/New-MS-Access-exploit.aspx","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28087","source":"cve@mitre.org"},{"url":"http://pandalabs.pandasecurity.com/archive/New-MS-Access-exploit.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1201","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el análisis sintáctico FLA de Adobe Flash CS3 Professional, Flash Professional 8 y Flash Basic 8 en Windows permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un archivo .FLA manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash:basic:8:*:*:*:*:*:*","matchCriteriaId":"AE84A707-495C-4690-9E37-60D8DED51342"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash:professional:8:*:*:*:*:*:*","matchCriteriaId":"81CE77EB-2050-4EC5-957F-90F4F96230A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash:professional:cs3:*:*:*:*:*:*","matchCriteriaId":"5845F66C-214D-48AE-BE8B-28A19F2D757C"}]}]}],"references":[{"url":"http://ruder.cdut.net/blogview.asp?logID=241","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29455","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-03.html","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-07.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28349","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019681","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0948/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41327","source":"cve@mitre.org"},{"url":"http://ruder.cdut.net/blogview.asp?logID=241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0948/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1202","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe LiveCycle Workflow 6.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:livecycle_workflow:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7AD8640-B5CD-4D8F-9580-F98A360BD753"}]}]}],"references":[{"url":"http://secunia.com/advisories/29331","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3729","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-10.html","source":"cve@mitre.org"},{"url":"http://www.liquidmatrix.org/blog/2008/03/11/advisory-adobe-livecycle-workflow-xss-vulnerability/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489413/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28209","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019588","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0864/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.liquidmatrix.org/blog/2008/03/11/advisory-adobe-livecycle-workflow-xss-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489413/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0864/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1203","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection."},{"lang":"es","value":"El interfaz de administración para Adobe ColdFusion 8 y ColdFusion MX7 no registra los intentos de conexión fallidos, lo que provoca que que ataques de fuerza bruta de atacantes remotos no sean detectados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"}]}]}],"references":[{"url":"http://secunia.com/advisories/29332","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-08.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28207","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019600","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0862/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41150","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0862/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1204","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la Consola de Administración en Sun Java System Access Manager 7.1 y 7 2005Q4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su eleccción a través de vectores no especificados relacionados con las ventanas de (1) Ayuda y (2) Versión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"DB0E6D4B-724D-4724-82A7-F2C2A966FB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:hp-ux:*:*:*:*:*","matchCriteriaId":"2807FF5E-F638-4F08-B34C-4532C1BC9908"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:solaris_sparc:*:*:*:*:*","matchCriteriaId":"0320DBC3-7512-42EA-92C0-75D918BF27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:solaris_x86:*:*:*:*:*","matchCriteriaId":"7D31D3F6-0621-47FA-8F36-7A6ACF75F655"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*","matchCriteriaId":"B7821A43-2549-4B75-A201-95A3AC58E8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"589D3B3E-4F22-42B5-ADF1-C0537F85C4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"4CCDA95C-0EFF-4CF4-8CC6-EF110F0DAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_sparc:*:*:*:*:*","matchCriteriaId":"F73D1848-D765-46B8-9B61-4A7A351CA6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_x86:*:*:*:*:*","matchCriteriaId":"51834E30-6780-433E-9146-C4B8DEFF7CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*","matchCriteriaId":"36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29252","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201251-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28113","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0784","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41024","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201251-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1205","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service (panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo del núcleo ipsecah de Sun Solaris 10, cuando un demonio de administración de clave para asociaciones de seguridad IPsec se está ejecutando, permite a usuarios locales provocar una denegación de servicio (pánico) a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233761-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28112","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0783","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233761-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1206","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mode is disabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in an invalid command."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función log_message en lks.c de Linux Kiss Server 1.2, cuando el modo segundo plano (demonio) está deshabilitado, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de especificadores de formato de cadena en un comando no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux_kiss_server:linux_kiss_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E1F56D57-A74B-415D-AA1F-6F5EECA53189"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120468901813326&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28099","source":"cve@mitre.org"},{"url":"http://www.vashnukad.com/","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/0785","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41018","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=120468901813326&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vashnukad.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/0785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1207","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service (daemon crash) via (1) an invalid request or (2) a large amount of data sent to the registered attribute value."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Fujitsu Interstage Smart Repository, como se utiliza en múltiples productos Fujitsu Interstage, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de (1) una petición no válida  o (2) una cantidad grande de datos enviados al valor de atributo registrado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7F96658B-B045-4EF6-9213-956925E92959"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC713B96-0880-44BD-80BD-9DB3DBE74D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5F38322D-0458-4E4C-8E0D-F3F3D4282F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA9D9EC2-91E3-463D-A878-AECAC40B2C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EC957D11-2D52-4EBC-9AB9-41A2259B0185"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:7.0:*:*:*:*:*:*:*","matchCriteriaId":"99321461-7570-48B8-9D08-B5D5F1B758C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"819D76BD-9405-4B30-B15D-A312DDFF8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A8B45A-3D51-4013-A23D-E9A5F44CCA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"43090F55-4B64-43FC-AE2C-6272C3DE4E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4FCFE64D-676C-4716-8478-61C04B8365BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_enterprise:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9320240E-6A2B-4FDD-8802-0FA75F3A8A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_modelers_j:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E28F8057-175E-4B8E-8FDA-D75A823CAEAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_standard_j:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2B68AB9B-617D-49D8-A3D6-1EA41CEF8581"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_business_application_server:8.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"49DE1BE9-14CF-4BFD-9E8D-4C9F5399A992"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_smart_repository:*:*:*:*:*:*:*:*","matchCriteriaId":"B1847A77-A520-422F-9547-F9EBA85AB31C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29250","source":"cve@mitre.org"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200801e.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200802e.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28114","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0786","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41041","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200801e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200802e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1208","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to inject arbitrary web script or HTML via the user parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página de entrada de usuarios de Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámentro useCheck Point VPN-1 UTM r (usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_utm_edge_w_embedded_ngx:7.0.48:*:*:*:*:*:*:*","matchCriteriaId":"22503F9A-452D-467B-B8F8-E5928FF0C3E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.louhi.fi/advisory/checkpoint_080306.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489203/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28116","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019554","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0788","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41032","source":"cve@mitre.org"},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk34520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.louhi.fi/advisory/checkpoint_080306.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489203/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk34520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1209","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in redirect.do in Xitex WebContent M1 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en redirect.do de Xitex WebContent M1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro sid. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xitex:xitex_webcontent_m1:*:*:professional:*:*:*:*:*","matchCriteriaId":"6B90DAAE-0E69-4CAE-B41C-0CB0462340DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xitex:xitex_webcontent_m1:*:*:standard:*:*:*:*:*","matchCriteriaId":"53DB7B28-CAD1-40E1-A4AE-99633A7FE655"},{"vulnerable":true,"criteria":"cpe:2.3:a:xitex:xitex_webcontent_m1:*:*:start:*:*:*:*:*","matchCriteriaId":"4A8729DC-7C18-4E62-BAA7-4FB37A3FADD8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28115","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41021","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1210","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted .c file, when the victim selects the Jump To dialog.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el código de análisis sintáctico ctags de Programmer's Notepad before 2.0.8.718 permite a atacantes remotos ayudados por el usuario provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de un archivo .c manipulado, cuando la víctima selecciona el diálogo Jump To (Saltar A). NOTA: algunos de estos detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pnotepad:programmers_notepad:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.6.1","matchCriteriaId":"2C2A7FF8-0AF9-4C4C-9EDB-F01D2AF30CD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29233","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581499&group_id=45545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28119","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581499&group_id=45545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1211","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via (1) the type parameter in calendar.php and (2) the category parameter in calendar_search.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en BosDates 3.x y 4.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro type en calendar.php y (2) el parámetro category en calendar_search.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D797B5A-D235-4CDD-8E90-51BCA4B62173"},{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:3.1:*:*:*:*:*:*:*","matchCriteriaId":"EFBF0B76-1C90-4B98-A92E-628AEE74A7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:3.2:*:*:*:*:*:*:*","matchCriteriaId":"E77A19F9-4400-4AE1-B163-6F49A040570F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:4.0:*:*:*:*:*:*:*","matchCriteriaId":"610BF53A-AF03-4E22-957B-D37032EA8A08"}]}]}],"references":[{"url":"http://secunia.com/advisories/29255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41020","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1212","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in set_permissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en set_permissions.php de Podcast Generator 0.96.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro scriptlang. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*","matchCriteriaId":"D543A430-EFFA-470D-80F3-30016852E4A8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28106","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1213","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary web script or HTML via the Title form field when setting an appointment.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Numara FootPrints para Linux 8.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del campo Title form (forma del título) cuando se fija una cita. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:numara:footprints:8.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7B5577-BF66-44D0-B74E-637D5F2D6120"}]}]}],"references":[{"url":"http://secunia.com/advisories/28659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1214","sourceIdentifier":"cve@mitre.org","published":"2008-03-08T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to execute arbitrary code via shell metacharacters in the PROJECTNUM parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"MRcgi/MRProcessIncomingForms.pl en Numara FootPrints 8.1 para Linux permite a atacantes remotos ejecutar código de su elección a través de metacaracteres de consola en el parámetro PROJECTNUM. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:numara:footprints:8.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7B5577-BF66-44D0-B74E-637D5F2D6120"}]}]}],"references":[{"url":"http://secunia.com/advisories/28659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41005","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1215","sourceIdentifier":"cve@mitre.org","published":"2008-03-09T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing \"~\" characters."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función command_Expand_Interpret de command.c en ppp (aka user-ppp), como se distribuyó en FreeBSD 6.3 y 7.0, OpenBSD 4.1 y 4.2, y el paquete net/userppp para NetBSD, permite a usuarios locales obtener privilegios a través de comandos largos que contienen los caracteres \"~\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"}]}]}],"references":[{"url":"http://secunia.com/advisories/29234","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/errata41.html#014_ppp","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata42.html#009_ppp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/82/488980/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/82/489031/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28090","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41034","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/errata41.html#014_ppp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html#009_ppp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/82/488980/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/82/489031/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1216","sourceIdentifier":"cve@mitre.org","published":"2008-03-09T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting (XSS) attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a JavaScript event in a malformed element, as demonstrated by an onload event in an IFRAME element."},{"lang":"es","value":"El servidor IBM Lotus Quickr 8.0 y posiblemnte QuickPlace 7.x, no identifica correctamente URIs que contienen cadenas de ataque de secuencias de comandos en sitios cruzados (XSS), lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una acción Calendar OpenDocument a main.nsf con un parámetro Count que contiene un evento JavaScript en un elemento mal formado, como se demostró por un un evento onload en un elemento IFRAME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"253389C3-549A-4D54-BBDE-DA6A1FADE06D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29072","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488620/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27925","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488620/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1217","sourceIdentifier":"cve@mitre.org","published":"2008-03-09T02:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706."},{"lang":"es","value":"Una vulnerabilidad no especificada en la biblioteca nlnotes.dll en el cliente en IBM Lotus Notes versiones 6.5, 7.0.x anterior a 7.0.2 CCH y versión 8.0.x anterior a 8.0.1, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo adjunto creado en un mensaje de correo electrónico enviado por medio de SMTP, esta es una variante del CVE-2007-6706."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1E25625-8570-4744-A2A2-4A4FB4D8AC6A"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019464","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21271957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21271957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1218","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified."},{"lang":"es","value":"Vulnerabilidad de inyección de argumentos en Dovecot 1.0.x anterior a 1.0.13, y 1.1.x anterior a 1.1.rc3, cuando se utiliza passdbs con bloqueo, permite a atacantes remotos evitar la comprobación de contraseña a través de una contraseña que contenga caracteres TAB, los cuales son tratados como delimitadores de los argumentos que permiten que el fichero skip_password_check sea especificado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of Dovecot as shipped with Red Hat Enterprise Linux 4 or 5.","lastModified":"2008-03-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.12","matchCriteriaId":"B61FA0DF-B597-448D-9274-F881D3DF2372"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"88124DE0-578C-4E06-8E80-E59F18B7C1D3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29295","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29364","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29385","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29396","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29557","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32151","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-25.xml","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1516","source":"cve@mitre.org"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-March/000064.html","source":"cve@mitre.org"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-March/000065.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28181","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41085","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2341","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/593-1/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5257","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-March/000064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-March/000065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/593-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1219","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el Modulo Kutub-i Sitte (KutubiSitte) 1.1 para PHP-Nuke, que permite a atacantes remotos ejecutar comandos SQL de su elección   a través del parámetro kid en una acción \"hadisgoster\" hacia modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:kutubisitte_component:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DF6D601D-ADCD-43E3-890B-122A07BAC975"}]}]}],"references":[{"url":"http://secunia.com/advisories/29279","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3722","source":"cve@mitre.org"},{"url":"http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3058","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/489219/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489258/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28126","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41036","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/489219/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489258/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1220","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el Módulo 4nChat 0.91 para PHP-Nuke, que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro roomid en una acción index a modules.php. NOTA: el origen de esta información es desconocida. Los detalles se han obtenido a través de información por parte de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:4nchat:0.91:*:*:*:*:*:*:*","matchCriteriaId":"72403C79-EFC7-4595-B08E-CB791DDB287A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28128","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1221","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en el servidor FTP de MicroWorld eScan Corporate Edition 9.0.742.98 y eScan Management Console (también conocido como eScan Server) 9.0.742.1, permite a atacantes remotos leer ficheros de su elección mediante un nombre de ruta absoluto en el comando RETR (get)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:escan:9.0.742.98:*:corporate:*:*:*:*:*","matchCriteriaId":"E907C054-C11D-4615-94A8-7B62F53F55FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:escan_management_console:9.0.742.1:*:*:*:*:*:*:*","matchCriteriaId":"C0D2471F-45F6-4D2F-8DB2-DE33A3223ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:escan_server:9.0.742.1:*:*:*:*:*:*:*","matchCriteriaId":"135425E9-78BB-4858-8D76-91F7D5159254"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/escaz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29246","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489228/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41033","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/escaz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489228/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1222","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Dokeos 1.8.4 anterior a SP3, permite a atacantes remotos inyectar comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"B9983F6F-4090-4943-8603-E4035F4371FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:sp1:*:*:*:*:*:*","matchCriteriaId":"12CB84F8-85DC-466C-A7F8-53C148F88E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:sp2:*:*:*:*:*:*","matchCriteriaId":"9FB81D06-BB18-44FB-A7CE-2C510F90842F"}]}]}],"references":[{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28121","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41046","source":"cve@mitre.org"},{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1223","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Dokeos 1.8.4 anterior a SP3, permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"B9983F6F-4090-4943-8603-E4035F4371FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:sp1:*:*:*:*:*:*","matchCriteriaId":"12CB84F8-85DC-466C-A7F8-53C148F88E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.8.4:sp2:*:*:*:*:*:*","matchCriteriaId":"9FB81D06-BB18-44FB-A7CE-2C510F90842F"}]}]}],"references":[{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28121","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41048","source":"cve@mitre.org"},{"url":"http://projects.dokeos.com/index.php?do=details&task_id=2312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1224","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) de account.php en BosClassifieds Classified Ads System 3.0, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección  a través del parámetro returnTo. NOTA: el origen de esta información es desconocida. Los detalles se han obtenido a través de información por parte de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosclassifieds_classified_ads:3.0:*:*:*:*:*:*:*","matchCriteriaId":"55562192-A519-4640-AD9B-E739167FC744"}]}]}],"references":[{"url":"http://secunia.com/advisories/29261","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28140","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41045","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1225","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when \"Don't wrap text\" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a (1) mail message or (2) discussion board message.  NOTE: this might overlap CVE-2005-1076."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WebCT Campus Edition 4.1.5.8, cuando \"Don't wrap text\" está habilitado, permite a usuarios autenticados en remoto inyectar secuencias de comandos web o HTML de su elección a través de un (1) mensaje de correo o (2) mensaje en el panel de discusión. NOTA: Puede que esto se solape con CVE-2005-1076."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:4.1.5.8:*:campus_edition:*:*:*:*:*","matchCriteriaId":"91CBA351-B067-4F68-9740-46B4318057DB"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=120471944119467&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.balupton.com/blogs/dev?title=webct_session_stealer_exploit","source":"cve@mitre.org"},{"url":"http://www.balupton.com/documents/webct_exploits.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28107","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=120471944119467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.balupton.com/blogs/dev?title=webct_session_stealer_exploit","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.balupton.com/documents/webct_exploits.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1226","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6, and possibly other versions before 4.5.10 allow remote attackers to inject arbitrary web script or HTML via an e-mail attachment, possibly involving a (1) .jpg or (2) .gif image attachment."},{"lang":"es","value":"Múltiples Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS)en Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6 y posiblemente otras versiones anteriores a 4.5.10, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través de un adjunto de e-mail usando ficheros (1) .jpg o (2) .gif."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zimbra:collaboration_suite:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E2AA50-97D9-44A4-8D67-08B19D3E1DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zimbra:collaboration_suite:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"163776B4-9D54-4307-9FF5-92FF01E429D6"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2395014590/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29263","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28134","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zimbra.com/jp/products/vulnerability.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41044","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2395014590/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zimbra.com/jp/products/vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1227","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función silc_fingerprint en lib/silcutil/silcutil.c de Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, y versiones anteriores no especificadas, permite a atacantes remotos causar una denegación de servicio (caída) o la posibilidad de ejecutar código de su elección a través de datos de entrada largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"2976C62F-7634-4C5B-8FF6-DF7695E7D072"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:1.1:*:*:*:*:*:*:*","matchCriteriaId":"63D881BA-F3E0-4405-B1B8-67711A33BA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16798C55-A677-49EE-9B56-7EDE37B3C677"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D81CC5DC-ACBD-4B9C-9F2C-0179679CE344"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"850BFE54-530E-42D9-AF68-69D17AE52A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"AEB51D8F-1F16-44DB-9CA0-163F66240349"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29946","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-27.xml","source":"cve@mitre.org"},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.6","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:158","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28101","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0769","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=372021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41012","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=372021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1228","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitrary web script or HTML via the list parameter in an import action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php en MG2 (anteriormente Minigal) permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro list en una acción import."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minigal:mg2:*:*:*:*:*:*:*:*","matchCriteriaId":"566738BD-A241-4152-A9CD-FFBC4B8C35FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120467196623452&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28098","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120467196623452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1229","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Reference links suggest possible solution upgrade to latest version (2.6.1) at:\r\nhttp://www.jspwiki.org/wiki/JSPWikiDownload","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script or HTML via the editor parameter, a different vector than CVE-2007-5120.b."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Edit.jsp en JSPWiki 2.4.104 y 2.5.139, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro editor. Es un vector diferente de CVE-2007-5120.b."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.4.104:*:*:*:*:*:*:*","matchCriteriaId":"16A83901-3F2B-47D1-8D6E-A88A4F5427CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.5.139:*:*:*:*:*:*:*","matchCriteriaId":"6F4F141F-86C3-4A32-BC12-10BCB25501C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.5.139_beta:*:*:*:*:*:*:*","matchCriteriaId":"0AAE134F-D5A8-4E2B-8EF4-6113867D63D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120300554011544&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27785","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40507","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5112","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120300554011544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1230","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Reference links suggest possible solution upgrade to latest version (2.6.1) at:\r\nhttp://www.jspwiki.org/wiki/JSPWikiDownload","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an \"entry page.\""},{"lang":"es","value":"Vulnerabilidad de subidas de archivos sin restringir en JSPWiki 2.4.104  y 2.5.139, permite a atacantes remotos subir y ejecutar archivos .jsp a través de una manipulación no especificada que adjunta el archivo .jsp a una \"entry page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.4.104:*:*:*:*:*:*:*","matchCriteriaId":"16A83901-3F2B-47D1-8D6E-A88A4F5427CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.5.139:*:*:*:*:*:*:*","matchCriteriaId":"6F4F141F-86C3-4A32-BC12-10BCB25501C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.5.139_beta:*:*:*:*:*:*:*","matchCriteriaId":"0AAE134F-D5A8-4E2B-8EF4-6113867D63D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120300554011544&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27785","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40511","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5112","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120300554011544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1231","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Reference links suggest possible solution upgrade to latest version (2.6.1) at:\r\nhttp://www.jspwiki.org/wiki/JSPWikiDownload","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio  en Edit.jsp de JSPWiki 2.4.104  y 2.5.139, que permite a atacantes remotos incluir y ejecutar archivos locales .jsp de su elección y obtener información sensible, a través de .. (punto punto) en el editor de parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.4.104:*:*:*:*:*:*:*","matchCriteriaId":"16A83901-3F2B-47D1-8D6E-A88A4F5427CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.5.139:*:*:*:*:*:*:*","matchCriteriaId":"6F4F141F-86C3-4A32-BC12-10BCB25501C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.5.139_beta:*:*:*:*:*:*:*","matchCriteriaId":"0AAE134F-D5A8-4E2B-8EF4-6113867D63D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120300554011544&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27785","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40508","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5112","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120300554011544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1232","sourceIdentifier":"secalert@redhat.com","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Apache Tomcat 4.1.0 hasta la 4.1.37, 5.5.0 hasta la 5.5.26 y 6.0.0 hasta la 6.0.16, permite a atacantes remotos inyectar arbitrariamente secuencias de comandos web o HTML a través de una cadena manipulada usada en el argumento message del método HttpServletResponse.sendError."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.37","matchCriteriaId":"458FD040-A592-486C-A20B-4EADDEF11548"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.26","matchCriteriaId":"23442E8F-FB06-4198-91A3-B98DD56124D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"AC0B6510-25D7-406A-B6F2-25AB6C3EBB67"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31379","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31381","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31639","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31865","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31891","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32120","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32266","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33797","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33999","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34013","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35474","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36108","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/4098","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495021/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504351/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505556/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30496","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020622","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2305","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/0503","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/1609","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/2194","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44155","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11181","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5985","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/4098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495021/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504351/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505556/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/0503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/1609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/2194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1233","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via \"XPCNativeWrapper pollution.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Mozilla Firefox versiones anteriores a 2.0.0.13, Thunderbird versiones anteriores a 2.0.0.13, y SeaMonkey versiones anteriores a 1.1.9 permite a atacantes remotos ejecutar código de su elección a través de \"XPCNativeWrapper pollution.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"0E85318C-5DC5-4DF4-945A-B3AB06B0F3F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29548","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30016","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30094","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30105","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30192","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/466521","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-14.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019694","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41443","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11078","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/466521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-14.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1234","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka \"Universal XSS using event handlers.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mozilla Firefox versiones anteriores a 2.0.0.13, Thunderbird versiones anteriores a 2.0.0.13, y SeaMonkey versiones anteriores a 1.1.9 permite a atacantes remotos inyectar web script o HTML de su elección a través de gestores de eventos, también conocido como \"Universal XSS using event handlers.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"0E85318C-5DC5-4DF4-945A-B3AB06B0F3F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29548","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30016","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30094","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30105","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30192","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/466521","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-14.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019694","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41455","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/466521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-14.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1235","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka \"Privilege escalation via incorrect principals.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Mozilla Firefox en versiones anteriores a 2.0.0.13, Thunderbird en versiones anteriores a 2.0.0.13 y SeaMonkey en versiones anteriores a 1.1.9 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos que provoca que JavaScript se ejecute con el principal equivocado, vulnerabilidad también conocida como \"Escalado de privilegios a través de principales incorrectos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"0E85318C-5DC5-4DF4-945A-B3AB06B0F3F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29548","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30016","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30094","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30105","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30192","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30370","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/466521","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-14.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019694","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41457","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/466521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1236","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Mozilla Firefox versiones anteriores a 2.0.0.13, Thunderbird versiones anteriores a 2.0.0.13, y SeaMonkey versiones anteriores a 1.1.9 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de vectores desconocidos en relación al motor de diseño."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"0E85318C-5DC5-4DF4-945A-B3AB06B0F3F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29548","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30016","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30094","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30105","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30192","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-15.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019695","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41445","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11788","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1237","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Mozilla Firefox versiones anteriores a 2.0.0.13, Thunderbird versiones anteriores a  2.0.0.13, y SeaMonkey versiones anteriores a 1.1.9 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de vectores desconocidos en relación al motor JavaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"0E85318C-5DC5-4DF4-945A-B3AB06B0F3F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29548","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30016","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30094","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30105","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30192","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31043","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-15.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019695","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41446","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9651","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-605-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0999/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2091/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1238","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms."},{"lang":"es","value":"Mozilla Firefox versiones anteriores a 2.0.0.13 y SeaMonkey versiones anteriores a 1.1.9, cuando generan las cabeceras HTTP Referer, no listan la URL entera cuando contienen credenciales de autenticación básicas sin un nombre de usuario, lo cual hace más fácil a atacantes remotos evitar los mecanismos de protección de aplicaciones que dependen de la cabecera Referer, como con algunos mecanismos de falsificación de petición en sitios cruzados (CSRF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sla.ckers.org/forum/read.php?10%2C20033","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-16.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019703","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41449","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9889","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sla.ckers.org/forum/read.php?10%2C20033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1240","sourceIdentifier":"secalert@redhat.com","published":"2008-03-28T01:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine.  NOTE: this is closely related to CVE-2008-1195."},{"lang":"es","value":"LiveConnect de Mozilla Firefox versiones anteriores a 2.0.0.13 y SeaMonkey versiones anteriores a 1.1.9 no analiza sintácticamente de forma correcta el contenido original de URIs jar antes de enviarlas a la extensión de Java, lo cual permite a atacantes remotos acceder a puertos de su elección en la máquina local.\r\nNOTA: esto está relacionado con CVE-2008-1195\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-18.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41458","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-18.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1241","sourceIdentifier":"secalert@redhat.com","published":"2008-03-27T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab."},{"lang":"es","value":"Vulnerabilidad GUI overlay Mozilla Firefox versiones anteriores a 2.0.0.13 y SeaMonkey versiones anteriores a 1.1.9 permite a atacantes remotos falsificar los elementos form y redireccionar entradas de los usuarios a través de una ventana emergente borderless XUL de un tab de fondo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.12","matchCriteriaId":"D70186C3-B3C9-48A7-B282-37A9AB6F7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"DABC3E49-34F7-4748-B83F-6CF307230067"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29391","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29526","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29541","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29558","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29607","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29616","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-19.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28448","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019700","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41454","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11163","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-19.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-592-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-087A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1242","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than CVE-2005-3802."},{"lang":"es","value":"El panel de control del router Belkin F5D7230-4 con firmware 9.01.10 mantiene el estado de validación a través de una dirección IP que, puede permitir a atacantes remotos saltarse la identificación estableciendo una sesión desde una dirección IP de un usuario que se ha identificado previamente. Vulnerabilidad distinta de CVE-2005-3802."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:f5d7230-4:*:*:9.01.10:*:*:*:*:*","matchCriteriaId":"9B43725B-81D9-4F1E-9B1A-F85D8FBE1AAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29345","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28317","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1243","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndns_domain parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el router Linksys WRT300N con software empotrado (firmware) 2.00.20, cuando se utiliza Mozilla Firefox o Apple Safari, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro dyndns_domain en el URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt300n:*:*:2.00.20:*:*:*:*:*","matchCriteriaId":"6E509B0B-EA59-4833-8589-4EB60FFAD0A7"}]}]}],"references":[{"url":"http://code.bulix.org/cx46qa-65489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://code.bulix.org/koom78-65490","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41121","source":"cve@mitre.org"},{"url":"http://code.bulix.org/cx46qa-65489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://code.bulix.org/koom78-65490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1244","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns1_1, dns1_2, dns1_3, and dns1_4 parameters.  NOTE: it was later reported that F5D7632-4V6 with firmware 6.01.08 is also affected."},{"lang":"es","value":"En el archivo cgi-bin/setup_dns.exe en el enrutador Belkin F5D7230-4 con versión de firmware 9.01.10, no requiere autenticación, lo que permite a los atacantes remotos realizar acciones administrativas, como es demostrado mediante el cambio de un servidor DNS por medio  de los parámetros dns1_1, dns1_2, dns1_3 y dns1_4. NOTA: más tarde se reportó que también está afectado el modelo F5D7632-4V6 con versión de firmware 6.01.08."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:f5d7230-4:*:*:9.01.10:*:*:*:*:*","matchCriteriaId":"9B43725B-81D9-4F1E-9B1A-F85D8FBE1AAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29345","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28319","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=371598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=371598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1245","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a \"Connection: Keep-Alive\" header."},{"lang":"es","value":"cgi-bin/setup_virtualserver.exe del router  Belkin F5D7230-4 con firmware 9.01.10, permite atacantes remotos  causar una denegación de servicio (parada del centro de control) a través de una petición con datos inválidos en el POST y una cabecera \"Connection: Keep-Alive\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:f5d7230-4:*:*:9.01.10:*:*:*:*:*","matchCriteriaId":"9B43725B-81D9-4F1E-9B1A-F85D8FBE1AAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29345","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28322","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41116","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1246","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties, including one who works for the vendor, have been unable to reproduce the flaw unless the enable password is blank"},{"lang":"es","value":"** DISPUTADA ** Cisco PIX/ASA Finesse Operation System 7.1 y 7.2 permite a usuarios locales ganar privilegios mediante la introducción de caracteres en el intérprete de comandos, borrando estos caracteres a través de la tecla de retroceso (Backspace) y posteriormente manteniendo pulsada la tecla de retroceso durante un segundo después de borrar el último caracter. NOTA: terceras partes, incluyendo una que trabaja para el proveedor, no han podido reproducir el fallo a no ser que la contraseña de habilitar esté en blanco."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_asa_finesse_operation_system:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0ABC60F3-FFE4-4748-91DA-79AE2D3513FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_asa_finesse_operation_system:7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DA769D-9961-444A-80C1-39B43EFD5C87"}]}]}],"references":[{"url":"http://hackathology.blogspot.com/2008/01/pixasa-finesse-71-72-privilege.html","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486959","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487579","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27457","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41129","source":"cve@mitre.org"},{"url":"http://hackathology.blogspot.com/2008/01/pixasa-finesse-71-72-privilege.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1247","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri.  NOTE: the Security.tri vector is already covered by CVE-2006-5202."},{"lang":"es","value":"El interfaz web del Router Linksys WRT54g con firmware 1.00.9 no requiere credenciales  al invocar secuencias de comandos. Esto, permite a atacantes remotos realizar acciones administrativas a través de peticiones directas a (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri.  NOTA: El vector estSecurity.tri está tratado en CVE-2006-5202."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:*:*:1.00.9:*:*:*:*:*","matchCriteriaId":"DB6556B1-9984-42CB-B056-215543E13D96"}]}]}],"references":[{"url":"http://kinqpinz.info/lib/wrt54g/own.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29344","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28381","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41118","source":"cve@mitre.org"},{"url":"https://kinqpinz.info/lib/wrt54g/","source":"cve@mitre.org"},{"url":"https://kinqpinz.info/lib/wrt54g/own2.txt","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5926","source":"cve@mitre.org"},{"url":"http://kinqpinz.info/lib/wrt54g/own.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kinqpinz.info/lib/wrt54g/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kinqpinz.info/lib/wrt54g/own2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1248","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the \"Call a number\" field.  NOTE: this might overlap CVE-2007-3440."},{"lang":"es","value":"La interfaz Web del servidor central del teléfono para Snom 320 SIP Phone, permite a atacantes remotos realizar las llamadas que deseen a través del campo \"Call a number\". NOTA: Puede que se solape con CVE-2007-3440."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:snom:320_sip_phone:*:*:*:*:*:*:*:*","matchCriteriaId":"756F9732-B2CC-4CB5-82A0-405A8FF0D67E"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41171","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1249","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crash and corruption of call logs) via a \"'); (double quote, quote, close parenthesis, semicolon) sequence in the \"Call a number\" field."},{"lang":"es","value":"snomControl.swf en el servidor central phone para teléfonos SIP Snom 320, permite a atacantes remotos causar una denegación de servicio (caída de aplicación y corrupción de logs de llamada) a través de la siguiente secuencia en el campo \"call a number\"v(doble comilla, comilla, cierre de paréntesis, punto y coma)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:snom:320_sip_phone:*:*:*:*:*:*:*:*","matchCriteriaId":"756F9732-B2CC-4CB5-82A0-405A8FF0D67E"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1250","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en el interfaz web del servidor central del teléfono en Snom 320 SIP Phone, permiten a atacantes remotos realizar acciones como si fuesen el usuario del teléfono, como se ha demostrado insertando una entrada en la libreta de direcciones que contenía una secuencia XSS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:snom:320_sip_phone:*:*:*:*:*:*:*:*","matchCriteriaId":"756F9732-B2CC-4CB5-82A0-405A8FF0D67E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28938","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27767","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40500","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1251","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el Interfaz web del servidor central de  telefonía para los teléfonos SIP Snom 320, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección  a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:snom:320_sip_phone:*:*:*:*:*:*:*:*","matchCriteriaId":"756F9732-B2CC-4CB5-82A0-405A8FF0D67E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28938","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27767","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1252","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source."},{"lang":"es","value":"b_banner.stm (también conocido como la página de registro) en el router Deutsche Telekom Speedport W500 DSL, permite a atacantes remotos obtener la contraseña de registro leyendo el campo pwd en el HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:deutsche_telekom:speedport_w500_dsl_router:*:*:*:*:*:*:*:*","matchCriteriaId":"873EB4A8-FB88-437B-96EF-E837CC2AAAD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29414","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41128","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1253","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el cgi-bin/webcm del router D-Link DSL-G604T, que permite a atacantes remotos inyectar secuencias de comandos web o html de su elección a través del parámetro var:category como se ha demostrado mediante una petición para advanced/portforw.htm a la página \"fwan\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dsl-g604t:*:*:*:*:*:*:*:*","matchCriteriaId":"70A13C0C-C808-41AC-8AB2-E04DF1669086"}]}]}],"references":[{"url":"http://secunia.com/advisories/29530","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1254","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the \"bannedlist\" via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en los routers de las series ZyXEL P-660HW, permiten a atacantes remotos (1) modificar los servidores DNS y (2) añadir palabras claves a \"bannedlist\" a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw:*:*:*:*:*:*:*:*","matchCriteriaId":"782AC894-6AC2-4327-8275-DD751EEA9C6D"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41111","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1255","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user."},{"lang":"es","value":"Los Router ZyXEL P-660HW  mantienen el estado de autenticación mediante la dirección IP. Esto  permite a atacantes remotos evitar la validación estableciendo una sesión desde el origen de una dirección IP de un usuarios autenticados previamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw:*:*:*:*:*:*:*:*","matchCriteriaId":"782AC894-6AC2-4327-8275-DD751EEA9C6D"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41114","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1256","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ZyXEL P-660HW series router has \"admin\" as its default password, which allows remote attackers to gain administrative access."},{"lang":"es","value":"El router de las series ZyXEL P-660HW tiene como contraseña por defecto \"admin\", esto permite a atacantes remotos tener acceso como administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw:*:*:*:*:*:*:*:*","matchCriteriaId":"782AC894-6AC2-4327-8275-DD751EEA9C6D"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41108","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1257","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter."},{"lang":"es","value":"vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Forms/DiagGeneral_2 del router ZyXEL P-660HW series permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro PingIPAddr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw:_t1:-:*:*:*:*:*:*","matchCriteriaId":"FF56F788-1143-4B88-826D-27B7AF8E629B"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw:_t1:v2:*:*:*:*:*:*","matchCriteriaId":"918195BD-67A3-4AC2-9426-F7F77EAAA4CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw_d1:-:*:*:*:*:*:*:*","matchCriteriaId":"1D13FB1A-637D-4E69-B84F-05531DCA5769"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw_d1:v2:*:*:*:*:*:*:*","matchCriteriaId":"8345A967-7E5B-4E09-B21A-A722FC249102"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw_d3:-:*:*:*:*:*:*:*","matchCriteriaId":"465FD6ED-C294-49B2-8F2C-8EF0633DABFF"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw_t3:-:*:*:*:*:*:*:*","matchCriteriaId":"26E8D38B-1859-4DCE-A566-777432CB7E9D"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-660hw_t3:v2:*:*:*:*:*:*:*","matchCriteriaId":"4BC3F2BD-2E86-4EC3-A837-E9B862E74193"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41109","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1258","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en prim.htm del router D-Link DI-604 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro rf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-604:*:*:*:*:*:*:*:*","matchCriteriaId":"036BFC10-9508-4FC2-BA7F-2F59403354DE"}]}]}],"references":[{"url":"http://secunia.com/advisories/29531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41122","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1259","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes."},{"lang":"es","value":"El router Zyxel P-2602HW-D1A con el software empotrado (firmware) 3.40(AJZ.1) mantiene el estado de autenticación de dirección IP, lo cual permite a atacantes remotos evitar la autenticación por establecimiento de sesión de una dirección IP origen de un usuario el cual se ha autenticado previamente dentro de los 5 minutos anteriores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-2602hw-d1a:*:*:3.40\\(ajz.1\\):*:*:*:*:*","matchCriteriaId":"E5FBC3D7-D036-4BA3-AE5D-ECBB9CD8DE14"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41112","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1260","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware allow remote attackers to (1) make the admin web server available on the Internet (WAN) interface via the WWWAccessInterface parameter to Forms/RemMagWWW_1 or (2) change the IP whitelisting timeout via the StdioTimout parameter to Forms/rpSysAdmin_1."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en el router Zyxel P-2602HW-D1A con software empotrado (firmware) 3.40(AJZ.1) permite a atacantes remotos (1) hacerse el administrador del servidor web disponible en la interfaz Internet (WAN) a través del parámetro WWWAccessInterface de Forms/RemMagWWW_1 o (2) cambiar el tiempo de espera de listas blancas de IP a través del parámetro StdioTimout de Forms/rpSysAdmin_1.\r\n\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-2602hw-d1a:*:*:3.40\\(ajz.1\\):*:*:*:*:*","matchCriteriaId":"E5FBC3D7-D036-4BA3-AE5D-ECBB9CD8DE14"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41170","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1261","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI."},{"lang":"es","value":"El router Zyxel P-2602HW-D1A con el software emportado (firmware) 3.40(AJZ.1) proporciona diferentes respuestas para administrar peticiones de página en función de si un usuario está validado, lo cual permite atacantes remotos obtener el estado de acceso actual solicitando una URI admin de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-2602hw-d1a:3.40\\(ajz.1\\):*:*:*:*:*:*:*","matchCriteriaId":"18AA4A76-7C3A-43A5-A38B-8B5C7D275187"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41113","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1262","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/."},{"lang":"es","value":"El panel de administración de la antena Airspan WiMax ProST 4.1 con software  6.5.38.0 no verifica credenciales de autenticación, lo cual permite a atacantes remotos (1) subir software empotrado (firmware) malformado o (2) asociar la antena a diferentes estaciones base WiMAX a través de peticiones no especificadas de formularios bajo process_adv/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:airspan:wimax_prost:4.1:*:6.5.38.0:*:*:*:*:*","matchCriteriaId":"B2D3669F-A37D-4286-A96D-829C54F45DA9"}]}]}],"references":[{"url":"http://airspan4wimax.googlepages.com/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.0x000000.com/?i=524","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/248372","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28122","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0802/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41052","source":"cve@mitre.org"},{"url":"http://airspan4wimax.googlepages.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.0x000000.com/?i=524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/248372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0802/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1263","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI."},{"lang":"es","value":"El router Linksys WRT54G almacena contraseñas y claves en texto llano en el fichero Config.bin, lo cual permite a usuarios remotos autenticados obtener información sensible a través de una petición HTTP de la URI de nivel superior Config.bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:*:*:*:*:*:*:*:*","matchCriteriaId":"DBBECE9D-7805-4521-A0B1-15F2755312B8"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41115","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1264","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linksys WRT54G router has \"admin\" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file."},{"lang":"es","value":"El router Linksys WRT54G tiene \"admin\" como su contraseña FTP por defecto, lo cual permite a atacantes remotos acceder a ficheros sensibles incluido nvram.cfg, un fichero que lista todos los documentos HTML, y un fichero ejecutable ELF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:*:*:*:*:*:*:*:*","matchCriteriaId":"DBBECE9D-7805-4521-A0B1-15F2755312B8"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41126","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1265","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface."},{"lang":"es","value":"El router Linksys WRT54G permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de un nombre de usuario largo y contraseña de la interfaz FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:*:*:*:*:*:*:*:*","matchCriteriaId":"DBBECE9D-7805-4521-A0B1-15F2755312B8"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41127","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1266","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la interfaz web del router D-Link DI-524 permite a  atacantes remotos provocar una denegación de servicio (caída de dispositivo) o posiblemente tener otros impactos no especificados a través de (1) un nombre de usuario largo o (2) una cabecera HTTP con un nombre largo y un valor vacío."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:dlink:di-524:*:*:*:*:*:*:*:*","matchCriteriaId":"71AA4CB4-DE99-412C-B02E-57A5EC0802E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29366","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41125","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1267","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field."},{"lang":"es","value":"El router Siemens SpeedStream 6520 permite a atacantes remotos provoca una denegación de servicio (caída de la interfaz web) a través de una petición HTTP de basehelp_English.htm  con un entero largo en el campo Content-Length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:speedstream_6520:*:*:*:*:*:*:*:*","matchCriteriaId":"2FCCF14D-8540-416E-A36F-BF7E1679D235"}]}]}],"references":[{"url":"http://secunia.com/advisories/29325","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28490","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41123","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1268","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password."},{"lang":"es","value":"El servidor FTP en el router Linksys WRT54G 7 con software empotrado 7.00.1 no verifica credenciales de autenticación, lo cual permite a atacantes remotos establecer una sesión FTP enviando un nombre de usuario y contraseña de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:7:*:7.00.1:*:*:*:*:*","matchCriteriaId":"231D19C5-A3C6-4D54-873E-4D5D72F53547"}]}]}],"references":[{"url":"http://swbae.egloos.com/1701135","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41119","source":"cve@mitre.org"},{"url":"http://swbae.egloos.com/1701135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1269","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cp06_wifi_m_nocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request."},{"lang":"es","value":"cp06_wifi_m_nocifr.cgi en el panel de administración del router Alice Gate 2 Plus Wi-Fi no verifica las credenciales de autenticación, esto permite a atacantes remotos deshabilitar encriptación Wi-FI a través de una petición determinada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alice:gate2_plus_wi-fi:*:*:*:*:*:*:*:*","matchCriteriaId":"29442571-2C53-4410-BDE8-68BF6C1D9565"}]}]}],"references":[{"url":"http://vx.netlux.org/wargamevx/alice_gate2_pluswifi_PoC.zip","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41110","source":"cve@mitre.org"},{"url":"http://vx.netlux.org/wargamevx/alice_gate2_pluswifi_PoC.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1270","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory."},{"lang":"es","value":"mod_userdir en lighttpd 1.4.18 y anteriores, cuando no está establecido el userdir.path usa un $HOME por defecto, que podría permitir a atacantes remotos leer ficheros de su elección como se ha demostrado accediendo al directorio ~nobody."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.18","matchCriteriaId":"393AADC9-347D-46AB-AD28-BE297CC4691F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29403","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-08.xml","source":"cve@mitre.org"},{"url":"http://trac.lighttpd.net/trac/ticket/1587","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1521","source":"cve@mitre.org"},{"url":"http://www.lighttpd.net/2008/3/10/1-4-19-made-in-germany","source":"cve@mitre.org"},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_03.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489465/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28226","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0885/references","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=212930","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41173","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2344","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.lighttpd.net/trac/ticket/1587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lighttpd.net/2008/3/10/1-4-19-made-in-germany","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_03.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489465/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0885/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=212930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1271","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T21:44:00.000","lastModified":"2023-11-07T02:01:55.373","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1218.  Reason: This candidate is a duplicate of CVE-2008-1218.  Notes: All CVE users should reference CVE-2008-1218 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"references":[]}},{"cve":{"id":"CVE-2008-1272","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php."},{"lang":"es","value":"Múltiples Vulnerabilidades de Inyección SQL     BM Classifieds 20080309 y anteriores, que permiten a atacantes remotos  ejecutar comandos SQL de su elección a través de los parámetros (1) cat hacia showad.php y (2) ad hacia pfriendly.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmscripts:bm_classifieds:*:*:*:*:*:*:*:*","versionEndIncluding":"20080309","matchCriteriaId":"527EE0A4-8AA2-4113-BE76-0430A06E36B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29297","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28159","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41066","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1273","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4) dirxml.php in upload/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en imageVue 1.7 permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro path de (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, y (4) dirxml.php en upload/. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagevue:imagevue:1.7:*:*:*:*:*:*:*","matchCriteriaId":"A2D29940-AE7F-4AC4-99BF-E55AF0751B7C"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28138.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28138","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41169","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28138.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1274","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/426.html \r\n'CWE-426: Untrusted Search Path'","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory."},{"lang":"es","value":"Una vulnerabilidad de ruta (path) de búsqueda no confiable en man en IBM AIX versión 6.1.0, permite a usuarios locales ejecutar código arbitrario por medio  de un programa malicioso en el directorio man."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF417123-CCB6-48AF-A21B-1974173D516B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ17177&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28180","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019572","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0805/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41067","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5169","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IZ17177&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0805/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1275","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el servicio SMTP de MailEnable Standard Edition 1.x, Professional Edition 3.x y anteriores, y Enterprise Edition 3.x y anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída) mediante los comandos manipulados (1) EXPN o (2) VRFY."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"2DDBCAC5-9215-487B-BFC1-A55982352714"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"77ED3854-23DD-4153-8A40-F26F975CAE72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_standard:*:*:*:*:*:*:*:*","matchCriteriaId":"B924438E-5E77-43D5-873C-70F1B2FE4191"}]}]}],"references":[{"url":"http://secunia.com/advisories/29300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mailenable.com/hotfix/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28154","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0800/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41083","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mailenable.com/hotfix/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0800/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1276","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer en el Servicio IMAP  (MEIMAPS.EXE) de MailEnable Professional Edition y Enterprise Edition 3.13 y anteriores, permite a atacantes autenticados remotamente ejecutar código de su elección a través de argumentos largos hacia los comandos (1) FETCH, (2) EXAMINE y (3) UNSUBSCRIBE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13","matchCriteriaId":"E6496BBB-BF66-4CA5-B1E1-BF65D58DEB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13","matchCriteriaId":"46C4F770-9BCC-42AB-B04C-3ACD60357472"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/maildisable-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489270/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019565","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0799/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41058","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5249","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/maildisable-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489270/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0799/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1277","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference."},{"lang":"es","value":"El servicio IMAP (MEIMAPS.exe) en MailEnable Professional Edition y Enterprise Edition 3.13 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de los comandos (1) SEARCH y (2) APPEND que no tengan los argumentos requeridos, esto induce a una referencia a puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13","matchCriteriaId":"E6496BBB-BF66-4CA5-B1E1-BF65D58DEB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13","matchCriteriaId":"46C4F770-9BCC-42AB-B04C-3ACD60357472"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/maildisable-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489270/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019565","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0799/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41059","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/maildisable-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489270/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0799/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1278","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference.  NOTE: the service is automatically restarted."},{"lang":"es","value":"El servicio RemotelyAnywhere.ese en Remotely Anywhere Server y Workstation 8.0.668 y anteriores, permite a atacantes remotos causar una denegación de servicio (caída) a través de un encabezado Accept-Charset inválido que dispara una referencia de puntero a NULL. NOTA: el servicio se reinicia automáticamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:remotelyanywhere:remotelyanywhere:*:*:server:*:*:*:*:*","versionEndIncluding":"8.0.668","matchCriteriaId":"CD763867-44BB-429D-87A7-BEC9B3BFA0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:remotelyanywhere:remotelyanywhere:*:*:workstation:*:*:*:*:*","versionEndIncluding":"8.0.668","matchCriteriaId":"A791CC35-899C-4C2F-8CC5-F0E4E70FBE63"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/remotelynowhere-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489354/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28175","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0816/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41077","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/remotelynowhere-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0816/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1279","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read."},{"lang":"es","value":"Acronis True Image Group Server 1.5.19.191 y anteriores, incluídos en Acronis True Image Enterprise Server 9.5.0.8072 y los otros paquetes True Image, permiten a atacantes remotos causar una denegación de servicio (caída) a través de un paquete con un tamaño de campo inválido que causa una lectura fuera de límite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:true_image:*:*:group_server:*:*:*:*:*","versionEndIncluding":"1.5.19.191","matchCriteriaId":"0368A045-C9E2-4B33-9617-85F632624DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:true_image:*:*:enterprise_server:*:*:*:*:*","versionEndIncluding":"9.5.0.8072","matchCriteriaId":"E50A07EE-946C-42F4-9F4E-E95C5330DD41"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/acrogroup-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489353/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28169","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0813/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41071","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/acrogroup-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489353/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0813/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1280","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference."},{"lang":"es","value":"Acronis True Image Windows Agent 1.0.0.54 y anteriores, incluídos en Acronis True Image Enterprise Server 9.5.0.8072 y los otros paquetes True Image, permite a atacantes remotos causar una denegación de servicio (caída) a través de un paquete mal formado hacia el puerto 8976 que dispara una referencia a un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:true_image:*:*:*:*:*:*:*:*","versionEndIncluding":"9.5.0.8072","matchCriteriaId":"583DBEEA-1CCE-4CDF-B1F9-06FD696E2AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:true_image_windows_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.54","matchCriteriaId":"F11427B3-83A0-4C7C-92DB-37E9F7605793"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/acroagent-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489362/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28169","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0812/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41070","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/acroagent-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489362/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0812/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1281","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Services (CMS) 1.31 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en TFTPsrvs.exe 2.5.3.1 y anteriores, como el utilizado en Argon Technology Client Management Services (CMS) 1.31 y anteriores, permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro del nombre del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argontechnology:client_management_services:*:*:*:*:*:*:*:*","versionEndIncluding":"1.31","matchCriteriaId":"66893727-0EF5-4DC8-B69E-368E3DF5BA29"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/argonauti-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29302","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489363/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28160","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0815/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41076","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5230","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/argonauti-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489363/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0815/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1282","sourceIdentifier":"cve@mitre.org","published":"2008-03-10T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the BFup ActiveX control (BFup.dll) in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer de BFup ActiveX control (BFup.dll) en B21Soft BFup anterior a 1.0.802.29, permite a atacantes remotos ejecutar código de su elección a través de un parámetro FilePath largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:b21soft:bfup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.308_19","matchCriteriaId":"DF22B77D-8049-4204-AB3B-7DF14FD82BC0"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2310606373/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29260","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hi-ho.ne.jp/babaq/bfupinfo.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28131","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0797/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41050","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2310606373/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hi-ho.ne.jp/babaq/bfupinfo.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0797/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1283","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Neptune WebServer 3.0, permite a atacantes remotos inyectar secuencias de comandos web o html de su elección  que no están manejadas correctamente en la página con error 404."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silver-forge:neptune_web_server:3.0:*:professional:*:*:*:*:*","matchCriteriaId":"44AB6FB7-5988-4D94-BE8A-D6103BDDB086"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3725","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489282/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41089","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489282/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1284","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via \"..\" sequences and a null byte in the theme name."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Horde 3.1.6, Groupware anterior 1.0.5, y Groupware Webmail Edition anterior 1.0.6, cuando ejecuta ciertas configuraciones, pertmite a usuarios autenticados remotamente leer y ejecutar ficheros de su elección a través de secuencias \"..\" y de byte nulo en el mismo \"theme name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"1FCA87DD-0549-4B2F-B1F4-46632258A059"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"77138B08-A680-4FEC-873F-6E25B05D44CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"93944D77-B65B-48F4-9334-8FC9B1D96F53"}]}]}],"references":[{"url":"http://lists.horde.org/archives/announce/2008/000382.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000383.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000384.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3726","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1519","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489239/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489289/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28153","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0822/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41054","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00253.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00301.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000382.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000383.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489239/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489289/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0822/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00253.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00301.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1285","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java Server Faces (JSF) 1.2 anteriores a 1.2_08 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jsf:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2_07","matchCriteriaId":"7371EDE1-6FD3-4329-BB6D-01E37FD71E30"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2008-0825.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0826.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0827.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0828.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29327","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233561-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28192","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020628","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0808/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41081","source":"cve@mitre.org"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-682","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0825.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0826.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0827.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0828.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233561-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0808/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1286","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java Web Console 3.0.2, 3.0.3 y 3.0.4 permite a atacantes remotos evitar las restricciones de acceso planeadas y determinar la existencia de ficheros o directorios mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E0D3747-9ACD-40F4-9433-823489249416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DD7786C0-4367-4224-BDA9-C5A0F466A6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C77A7094-D272-4A30-B79A-FE9D0301FA88"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E0D3747-9ACD-40F4-9433-823489249416"}]}]}],"references":[{"url":"http://secunia.com/advisories/29290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28155","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019574","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0806/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0806/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1287","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames."},{"lang":"es","value":"IBM Rational ClearQuest versiones 7.0.1.1.1 y 7.0.0.0.2, genera diferentes mensajes de error dependiendo de si el nombre de usuario es válido o no válido, lo que permite a los atacantes remotos enumerar los nombres de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29280","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28132","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019566","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0804/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41042","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0804/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1288","sourceIdentifier":"cve@mitre.org","published":"2008-03-11T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies."},{"lang":"es","value":"IBM Rational ClearQuest 7.0.1.1 y 7.0.0.2 podrían permitir a atacantes locales o remotos obtener información sensible sobre usuarios mediante la lectura de las cookies de los usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29280","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28133","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019567","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0804/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41043","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0804/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1289","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels/chan_sip.c."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Asterisk Open Source 1.4.x antes de 1.4.18.1 y 1.4.19-rc3, Open Source 1.6.x antes de 1.6.0-beta6, Business Edition C.x.x antes de C.1.6.1, AsteriskNOW 1.0.x antes de 1.0.2, Appliance Developer Kit antes de 1.4 revisión 109386 y s800i 1.1.x antes de 1.1.0.2 permite a atacantes remotos (1) escribir un cero en una posición de memoria de su elección a través de un número de carga útil (payload) RTP grande, relacionada con la función ast_rtp_unset_m_type en main/rtp.c; o (2) escribir ciertos enteros en una posición de memoria de su elección a través de un número grande de cargas útiles RTP, relacionadas con la función process_sdp en channels/chan_sip.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:1.4:*:*:*:*:*:*:*","matchCriteriaId":"7E2D0508-C418-48CE-BF83-39F893688D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c.1.0-beta8","matchCriteriaId":"1A80C0F3-F3F0-4BC6-92F8-131F3F875E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c.1.0beta7","matchCriteriaId":"526991C1-D07E-465C-A609-704C19F8096A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"B7C58E6B-AECC-48AF-8059-61772690776A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.18","matchCriteriaId":"E7F13399-5084-40FA-A4AB-D78ED588E434"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:rc-2:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"F4AB8D8F-15AC-4516-85A2-B5D2B5B3DF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0_beta5","matchCriteriaId":"53B339C1-272B-4A7E-A342-8BBD9DC82826"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.1","matchCriteriaId":"6D1E04DC-AE6A-4536-8E45-36494E51B036"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-002.html","source":"cve@mitre.org"},{"url":"http://labs.musecurity.com/advisories/MU-200803-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29470","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3763","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019628","source":"cve@mitre.org"},{"url":"http://www.asterisk.org/node/48466","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489817/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28308","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0928","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41302","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41305","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.musecurity.com/advisories/MU-200803-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.asterisk.org/node/48466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489817/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1290","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ViewVC before 1.0.5 includes \"all-forbidden\" files within search results that list CVS or Subversion (SVN) commits, which allows remote attackers to obtain sensitive information."},{"lang":"es","value":"ViewVC antes de 1.0.5 incluye archivos \"all-forbidden\" (todo prohibido) dentro de resultados de búsqueda que listan asignaciones CVS o Subversion (SVN), lo que permite a atacantes remotos obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"793F6DB3-A6C2-4813-BD2D-AF34D85F6CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B6F2BC5-D099-427C-9513-75551ABF1997"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=212288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-29.xml","source":"cve@mitre.org"},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28055","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0734/references","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=212288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0734/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1291","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder."},{"lang":"es","value":"ViewVC before 1.0.5 almacena información sensible bajo la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos leer archivos y listar carpetas bajo la carpeta oculta CVSROOT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"793F6DB3-A6C2-4813-BD2D-AF34D85F6CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B6F2BC5-D099-427C-9513-75551ABF1997"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=212288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-29.xml","source":"cve@mitre.org"},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28055","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0734/references","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=212288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0734/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1292","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters."},{"lang":"es","value":"ViewVC before 1.0.5 proporciona revisión de metadatos sin comprobar correctamente si el acceso fue intencionado, lo que permite a atacantes remotos obtener información sensible leyendo (1) rutas prohibidas en la vista de revisión, (2)el historial del log que sólo se puede alcanzar saltando un objeto prohibido, o (3)parámetros de ruta de vista diff prohibidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"793F6DB3-A6C2-4813-BD2D-AF34D85F6CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B6F2BC5-D099-427C-9513-75551ABF1997"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=212288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-29.xml","source":"cve@mitre.org"},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28055","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0734/references","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=212288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0734/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1293","sourceIdentifier":"cve@mitre.org","published":"2008-04-29T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6)."},{"lang":"es","value":"ldm en Linux Terminal Server Project (LTSP) versiones 0.99 y 2 pasa la opción -ac al servidor X en cada cliente LTSP, lo que permite a los atacantes remotos conectarse a este servidor por medio  del puerto TCP 6006 (alias display :6)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:N","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.8},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ltsp:linux_terminal_server_project:0.99:*:*:*:*:*:*:*","matchCriteriaId":"48E0891A-D162-4254-B8CF-56088D2774FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ltsp:linux_terminal_server_project:2:*:*:*:*:*:*:*","matchCriteriaId":"24FBE4DA-D316-42A6-A900-63E33FF2F1D6"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1561","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/03/11/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/03/12/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28960","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42080","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/610-1/","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/03/11/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/03/12/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/610-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1294","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits."},{"lang":"es","value":"El Kernel  de Linus 2.6.17 y otras versiones anteriores a la 2.6.22 no comprueba cuándo un usuario intenta establecer el RLIMIT_CPU a 0 hasta después de que se realice el cambio, lo que permite a los usuarios locales evitar los límites a recursos establecidos."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0612.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:*","versionEndIncluding":"2.6.21","matchCriteriaId":"14D781AD-0F7E-45B6-A553-884486F26E5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*","matchCriteriaId":"E55F2549-F813-4BD6-8933-6788D898ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=215000","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9926e4c74300c4b31dee007298c6475d33369df0","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30769","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31341","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0612.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29004","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42145","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10974","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=215000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9926e4c74300c4b31dee007298c6475d33369df0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1295","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earlier allows remote attackers to execute arbitrary SQL commands via the msg_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en archives.php de Gregory Kokanosky (también conocido como Greg's Place) phpMyNewsletter 0.8 beta 5 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro msg_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gregory_kokanosky:phpmynewsletter:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8_beta_5","matchCriteriaId":"D741E39E-074C-4BFF-B379-2A3BC48443F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28189","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41197","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5231","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1296","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to (1) watermark.php and (2) catalog_watermark.php in core/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en EncapsGallery 1.11.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro file a (1) watermark.php y (2) catalog_watermark.php en core/. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:encaps:encapsgallery:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"8D3058A5-03CE-4E91-8EC5-4C7FCA674309"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/28178.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/28178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1297","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo the eWriting (com_ewriting) 1.2.1 para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat en una acción selectcat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ewriting:ewriting:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDE71009-5AC8-47DD-BF4C-E96149918B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_ewriting:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F5A5B9ED-472E-45DD-8472-5B7742979EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_ewriting:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9C7B914F-5E2E-43D1-B9B9-FFF25B03B97D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41072","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1298","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Hadith para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat en una acción viewcat a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyantonius:hadith_module:*:*:*:*:*:*:*:*","matchCriteriaId":"AF8CBB08-0C2E-4F06-819F-47F030C1BC5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:hadith_module:*:*:*:*:*:*:*:*","matchCriteriaId":"5C02FF85-2558-44D1-B74F-DC9115C1BDDC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3730","source":"cve@mitre.org"},{"url":"http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/489323/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28171","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41092","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/489323/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1299","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SolutionSearch.do de ManageEngine ServiceDesk Plus 7.0.0 Build 7011 para Windows permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro searchText. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:servicedesk_plus:7.0.0:build_7011:*:*:*:*:*:*","matchCriteriaId":"014B2AD4-C9C7-4034-A0C1-C0DFC069CF5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29310","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1300","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función Logfile Viewer Settings de system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp en Alkacon OpenCms 7.0.3 y 7.0.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro filePath.0 en una acción save, un vector diferente a CVE-2008-1045."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"77C1DA6A-037E-4EA6-B18A-774D365E5E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E9C2CC48-C3ED-4DEA-8895-89EE7754EFD6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489291/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28152","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41095","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489291/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1301","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp de Alkacon OpenCms 7.0.3 y 7.0.4 permite a administradores autentificados remotamente leer archivos de su elección a través de un nombre de ruta completo (pathname) en el parámetro filePath.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"77C1DA6A-037E-4EA6-B18A-774D365E5E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E9C2CC48-C3ED-4DEA-8895-89EE7754EFD6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489291/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28152","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41096","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489291/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1302","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invalid memory access."},{"lang":"es","value":"El servicio Perforce (p4s.exe) en Perforce Server 2007.3/143793 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de los comandos (1) server-DiffFile o (2) server-ReleaseFile con un valor entero grande, el cual es utilizado en un cálculo de inicialización de array y lleva a un acceso a memoria no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2007.3_143793","matchCriteriaId":"0396CDF3-115D-4BE3-8C83-3D2AEA983422"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/perforces-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/perforces.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3735","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489179/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41363","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/perforces-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/perforces.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489179/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1303","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference."},{"lang":"es","value":"El servicio Perforce (p4s.exe) en Perforce Server 2007.3/143793 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un parámetro faltante a los comandos (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, y posiblemente otros sin especificar, lo que dispara una referencia a un puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2007.3_143793","matchCriteriaId":"0396CDF3-115D-4BE3-8C83-3D2AEA983422"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2000.1:*:*:*:*:*:*:*","matchCriteriaId":"B932AD96-4B03-4919-9EAF-8FDDF509A602"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2000.2:*:*:*:*:*:*:*","matchCriteriaId":"84CB6C38-B27B-489E-97B9-782B662B6ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2001.1:*:*:*:*:*:*:*","matchCriteriaId":"29E8D049-152E-4CE1-8C85-867A7270C597"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2001.2:*:*:*:*:*:*:*","matchCriteriaId":"982D9A67-BD40-4C94-AF54-A8FB7CC0D124"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2002.1:*:*:*:*:*:*:*","matchCriteriaId":"12193659-D610-455A-B06D-AE7110BD542D"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2002.2:*:*:*:*:*:*:*","matchCriteriaId":"80DD2893-F5C7-47E3-AE4D-0158446ABFD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2003.1:*:*:*:*:*:*:*","matchCriteriaId":"C16D88BA-7A96-4777-818D-36DE5DF099C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2003.2:*:*:*:*:*:*:*","matchCriteriaId":"377C2F66-74CA-4F2A-8E36-8ED38F7C7772"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2004.2:*:*:*:*:*:*:*","matchCriteriaId":"F8446356-AE2A-45A8-9BD5-FFE6F27B3583"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2005.1:*:*:*:*:*:*:*","matchCriteriaId":"415CC8EA-3A14-4CCF-96AC-3DC40D59AD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2005.2:*:*:*:*:*:*:*","matchCriteriaId":"70050D06-6477-4C6E-B623-6077A5FAFF78"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2006.1:*:*:*:*:*:*:*","matchCriteriaId":"64F41ABD-B632-4273-AF9B-678A3001D4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2006.2:*:*:*:*:*:*:*","matchCriteriaId":"5FC0E4BA-E45C-40E0-BFCA-3CF67A2F98CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2007.2:*:*:*:*:*:*:*","matchCriteriaId":"7A9A5A24-16C6-4A2C-B470-7A3396803B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:2007.3:*:*:*:*:*:*:*","matchCriteriaId":"5EF59CAD-F725-45F7-AA7B-F3434A84D012"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/perforces-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/perforces.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3735","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489179/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41015","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/perforces-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/perforces.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489179/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1304","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WordPress 2.3.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) inviteemail en una acción invite a wp-admin/users.php y (2) to en una acción sent a wp-admin/invites.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3732","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019564","source":"cve@mitre.org"},{"url":"http://www.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multiple-Cross-Site-Scripting-Vulnerabilities.html?id=114","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489241/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41055","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41056","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multiple-Cross-Site-Scripting-Vulnerabilities.html?id=114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489241/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1305","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en filebase.php en el módulo Filebase para phpBB permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chieminger:filebase_module:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4228B4B7-33FE-47B0-81DB-43799148C133"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","matchCriteriaId":"8370A82D-83E8-4A70-8D04-1FCC6D24CAFC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28194","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41137","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5236","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1306","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to (1) searchresults.cfm, (2) search_results.cfm, and (3) search_results/index.cfm.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Savvy Content Manager (CM) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro searchterms a (1) searchresults.cfm, (2) search_results.cfm y (3) search_results/index.cfm. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:besavvy:savvy_content_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"A993CE1C-3820-4251-A21E-1F2663145A20"}]}]}],"references":[{"url":"http://secunia.com/advisories/29298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.besavvy.com/blog/index.cfm/2008/3/11/Security-Patch","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28200","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.besavvy.com/blog/index.cfm/2008/3/11/Security-Patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1307","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el control KUpdateObj2 Class ActiveX de UpdateOcx2.dll en Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 pemrite a atacantes remotos ejecutar código de su elección a través de un argumento largo a el método SetUninstallName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kingsoft:antivirus_online_update_module:2007.12.29.29:*:*:*:*:*:*:*","matchCriteriaId":"90D9C655-5A4C-4ECC-867B-D55D3E5837E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28172","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0857/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41088","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5225","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0857/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1308","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Sudirman Angriawan NukeC30 3.0 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id_catg en una acción ViewCatg action a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sudirman_angriawan:nukec30:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A6F94D4-0E32-4169-8726-CE0EF8DDC163"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489387/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28197","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489387/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1309","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory."},{"lang":"es","value":"El control de ActiveX RealAudioObjects.RealAudio en rmoc3260.dll en RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 en versiones anteriores a build 6.0.12.1675 y RealPlayer 11 en versiones anteriores a 11.0.3 build 6.0.14.806 no gestiona adecuadamente la memoria para la propiedad (1) Console o (2) Controls, lo que permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (caída del navegador) a través de una serie de asignaciones de valores de cadena larga, lo que desencadena una sobrescritura de la memoria dinámica liberada."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of RealPlayer as shipped with Red Hat Enterprise Linux 3 Extras, 4 Extras, or 5 Supplementary.","lastModified":"2008-03-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"19BC5A59-BCBD-4859-8329-B4974D43DB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD49D16C-B0AC-4228-9984-010661596232"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*","matchCriteriaId":"72A94395-4F1A-4310-85A8-F46A76EE3A12"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29315","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/831457","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/494779/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28157","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019576","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020563","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-047/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41087","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5332","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/831457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/494779/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-047/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1310","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname."},{"lang":"es","value":"Vulerabilidad de salto de directorio en el servidor de TFTP en PacketTrap Networks pt360 Tool Suite 1.1.33.1.0 y otras versiones anteriores a 2.0.3900.0, permite a atacantes remotos leer y sobrescribir archivos de su elección a través de secuencias de salto de directorio en el nombre de ruta (pathname)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:packettrap:pt360_tool_suite:1.1.33.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01EDDF37-D1F7-47FB-AB77-EE1760AFD7C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120457602310315&w=2","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29207","source":"cve@mitre.org"},{"url":"http://www.emediawire.com/releases/2008/2/prweb731563.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40979","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120457602310315&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.emediawire.com/releases/2008/2/prweb731563.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1311","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '\"' (quotation mark), or (3) \"<>\" (less than, greater than); or (4) a file with a long name.  NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312."},{"lang":"es","value":"El servidor TFTP en PacketTrap pt360 Tool Suite PRO 2.0.3901.0 y anteriores permite a atacantes remotos provocar una denegación de servicio (cuelgue del demonio) actualizando un archivo llamado (1) '|' (tubería), (2) '\"' (comillas), o (3) \"<>\" (menor que, mayor que); o (4) un archivo con nombre largo. NOTA: el caso del vector 4 podría existir debido a una solución incompleta a CVE-2008-1312."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:packettrap:pt360_tool_suite_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3901.0","matchCriteriaId":"60733703-B8B8-4A7C-9CAD-862B289667C2"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/packettrash-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/testz/tftpx.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29308","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3734","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489355/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28187","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0811/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41073","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/packettrash-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/testz/tftpx.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489355/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0811/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1312","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service (daemon crash) via a long TFTP packet, a different vulnerability than CVE-2008-1311."},{"lang":"es","value":"Vulnerabilidad sin especificar en el servidor TFTP en PacketTrap Networks pt360 Tool Suite 1.1.33.1.0 y otras versiones anteriores a 2.0.3900.0, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un paquete TFTP largo, una vulnerabilidad diferente a CVE-2008-1311."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:packettrap:pt360_tool_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"51863DB1-98DC-4CC2-AE6C-4E6F02D4A3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:packettrap:pt360_tool_suite:1.1.33.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01EDDF37-D1F7-47FB-AB77-EE1760AFD7C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120457979416868&w=2","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.emediawire.com/releases/2008/2/prweb731563.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41267","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120457979416868&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.emediawire.com/releases/2008/2/prweb731563.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1313","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de Bloo 1.00 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) post_id, (2) post_category_id, (3) post_year_month, (4) static_page_id y otros vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bill_roberts:bloo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"E5D9F8BF-181B-4963-B1E1-C1E070E6EB91"}]}]}],"references":[{"url":"http://secunia.com/advisories/29338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41141","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1314","sourceIdentifier":"cve@mitre.org","published":"2008-03-12T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Johannes Hass gaestebuch 2.2 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción edit a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:johannes_hass:gaestebuch_module:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DB58F721-7C1D-4C30-82EE-67828CA9D5EB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]}]}],"references":[{"url":"http://cod3rz.helloweb.eu/exploits/gaestebuch.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120440053123054&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28063","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40975","source":"cve@mitre.org"},{"url":"http://cod3rz.helloweb.eu/exploits/gaestebuch.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120440053123054&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1315","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo ZClassifieds para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat de modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:zclassifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"D0145F3F-293D-4D2C-9009-87AB48B8B082"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3736","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3109","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/489416/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28211","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41149","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/489416/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1316","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en qtf_ind_search_ov.php de in QT-cute QuickTalk Forum versión 1.6 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qt-cute:quicktalk_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"A8B5C50F-FE98-406D-826C-273C3705C5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt-cute:quicktalk_forum:1.3:*:*:*:*:*:*:*","matchCriteriaId":"84C9BCEA-9079-474C-8FFB-76012B191F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt-cute:quicktalk_forum:1.4:*:*:*:*:*:*:*","matchCriteriaId":"550EEDBD-B3B3-487B-92E6-D53DC33D8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt-cute:quicktalk_forum:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"164695C8-43A7-45E7-8B9C-14414D16732B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29288","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28215","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41148","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5240","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1317","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service (reboot) via blocked I/O message queues."},{"lang":"es","value":"Vulnerabilidad no especificada en el subsistema de cola de mensajes de Inter-Process Communication (IPC) en Sun Solaris 10 permite a usuarios locales provocar una denegación de servicio (reinicio) mediante la utilización de colas de mensaje de E/S bloqueados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231403-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28214","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0858/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41146","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231403-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0858/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1318","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive \"cross-site\" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results."},{"lang":"es","value":"Una vulnerabilidad no especificada en MediaWiki versiones 1.11 en versiones anteriores a la 1.11.2, permite a los atacantes remotos obtener información confidencial de \"cross-site\" por medio del parámetro callback en una llamada de la API para resultados formateados JavaScript Object Notation (JSON)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8C54ADEF-F360-41C6-AE27-B6D12E5BAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4DB5EF0E-4E1B-4131-9142-5FBB59C235D5"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-March/000070.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29216","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28070","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019535","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0732/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40960","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-March/000070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0732/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1319","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field."},{"lang":"es","value":"Vulnerabilidad de búsqueda no permitida de directorio e inyección de argumentos en el servicio VersantD de Versant Object Database versión 7.0.1.3 y anteriores, usado en Borland CaliberRM y probablemente en otros productos, permite a atacantes remotos ejecutar comandos de su elección mediante una petición al puerto 5019 TCP con el campo VERSANT_ROOT modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:versant:versant_object_database:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1.3","matchCriteriaId":"AEB981B3-B3F8-420F-A0F6-FA82DB78E240"},{"vulnerable":true,"criteria":"cpe:2.3:a:versant:versant_object_database:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B69E87FF-8CBB-4BB1-9599-977925E0CBD7"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/versantcmd-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120468784112145&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29230","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3738","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489139/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28097","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0764/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40997","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5213","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/versantcmd-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120468784112145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489139/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0764/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1320","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (crash) via (1) a long request to FxIAList on TCP port 6162, or (2) an SNMP request with a long community string to FxAgent on UDP port 6161."},{"lang":"es","value":"Múltiples desbordamientos de búfer en ASG-Sentry Network Manager versión 7.0.0 y anteriores permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (fallo) mediante (1) una petición especialmente larga a FxIAList en el puerto 6162 TCP o (2) una petición SNMP con una cadena de comunidad especialmente larga a FxAgent en el puerto 6161 UDP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asg:asg-sentry:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.0","matchCriteriaId":"A5065286-B6BD-42E8-9246-E5FED510F917"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/asgulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3737","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489359/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28188","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0839/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41082","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41086","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5229","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/asgulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489359/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0839/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1321","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands."},{"lang":"es","value":"El servicio FxIAList de ASG-Sentry Network Manager versión 7.0.0 y anteriores implementa mecanismo de autenticación que permite a atacantes remotos provocar una denegación de servicio (finalización del servicio) mediante la utilización del comando exit en el puerto 6162 TCP y tiene otras consecuencias al utilizar otros comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asg-sentry:asg-sentry:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.0","matchCriteriaId":"B4F516E3-3352-406D-B838-23520B4A345B"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/asgulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3737","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489359/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0839/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41084","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5229","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/asgulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489359/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0839/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1322","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability."},{"lang":"es","value":"La utilidad de evaluación de ficheros (fcheck.exe) en ASG-Sentry Network Manager versión 7.0.0 y anteriores permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) o sobreescribir ficheros de su elección mediante una cadena de consulta que especifique la opción -b, probablemente debido a una vulnerabilidad de inyección de argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asg-sentry:asg-sentry:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.0","matchCriteriaId":"B4F516E3-3352-406D-B838-23520B4A345B"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/asgulo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3737","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489359/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0839/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41080","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5229","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/asgulo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489359/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0839/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1323","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en index.php de WoltLab Burning Board Lite (wBB) versión 2 Beta 1, permite a atacantes remotos borrar hilos de ejecución como otro usuario mediante la acción ThreadDelete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board_lite:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"8EA550DB-ABAD-4CBA-B481-E2A6C98F0913"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3739","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489294/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41098","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1324","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters.  NOTE: this might be the same issue as CVE-2008-1325."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en el archivo index.php en Travelsized CMS versión 0.4.1, permiten a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en los parámetros (1) page_id y (2) language. NOTA: este podría ser el mismo problema de CVE-2008-1325."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leinir:travelsized_cms:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"230185D3-8121-4AFF-8293-F20BA2091B93"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489457/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41168","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489457/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1325","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters.  NOTE: this might be the same issue as CVE-2008-1324."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en el archivo index.php en Uberghey CMS versión 0.3.1, permiten a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en los parámetros (1) page_id y (2) language. NOTA: este podría ser el mismo problema de CVE-2008-1324."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leinir_turthra:uberghey_cms:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4179516D-B102-4DED-96A0-E172F5F5BB6E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/489451/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28217","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489451/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1326","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de Gallarific permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro query. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallarific:gallarific:*:*:*:*:*:*:*:*","matchCriteriaId":"22010857-5B87-4E15-A615-3784DD22880E"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41105","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1327","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T14:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Gallarific no requiere autenticación al usar (1) users.php y (2) index.php, lo que permite a atacantes remotos añadir y editar tareas mediante peticiones directas. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallarific:gallarific:*:*:*:*:*:*:*:*","matchCriteriaId":"22010857-5B87-4E15-A615-3784DD22880E"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41106","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1328","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified \"command arguments.\""},{"lang":"es","value":"Desbordamiento de Búfer del Servicio LGServer de CA ARCserve Backup for Laptops and Desktops versiones de la r11.0 a la r11.5 y Suite 11.1 and 11.2, permite a atacantes remotos ejecutar código de su elección a través de argumentos de comando no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*","matchCriteriaId":"22268F99-2F38-481D-A0CC-B1FC96FDB953"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.0:*:*:*:*:*:*:*","matchCriteriaId":"0F0C2CF0-C4FA-45EA-8CE7-A6F26E74A82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA31980-E04A-4C5C-AD81-BBD2DC925B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:sp1:*:*:*:*:*:*","matchCriteriaId":"D8FDE4F2-A3E1-4DE3-8800-8E6D58116134"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:sp2:*:*:*:*:*:*","matchCriteriaId":"F14BBE21-4FB8-4E25-9437-DC215AE7C208"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"06109720-7926-4FC2-929B-0F16B1831739"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:11.2:*:english:*:*:*:*:*","matchCriteriaId":"815D1724-8E39-4941-A546-16B15E3C51E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:11.2:*:localized:*:*:*:*:*","matchCriteriaId":"BC2D63FF-149F-4F7A-9842-52E56818462A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490463/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28616","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019788","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1104/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41641","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490463/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1104/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1329","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to \"insufficient verification of file uploads.\""},{"lang":"es","value":"Vulnerabilidad no especificada del servicio NetBackup de CA ARCserve Backup for Laptops and Desktops versiones de la r11.0 a la r11.5 y Suite 11.1 and 11.2, permite a atacantes remotos ejecutar comandos de su elección, relacionado con “subidas de archivos sin suficiente verificacion”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*","matchCriteriaId":"22268F99-2F38-481D-A0CC-B1FC96FDB953"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.0:*:*:*:*:*:*:*","matchCriteriaId":"0F0C2CF0-C4FA-45EA-8CE7-A6F26E74A82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA31980-E04A-4C5C-AD81-BBD2DC925B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:sp1:*:*:*:*:*:*","matchCriteriaId":"D8FDE4F2-A3E1-4DE3-8800-8E6D58116134"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.1:sp2:*:*:*:*:*:*","matchCriteriaId":"F14BBE21-4FB8-4E25-9437-DC215AE7C208"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"06109720-7926-4FC2-929B-0F16B1831739"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:11.2:*:english:*:*:*:*:*","matchCriteriaId":"815D1724-8E39-4941-A546-16B15E3C51E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:11.2:*:localized:*:*:*:*:*","matchCriteriaId":"BC2D63FF-149F-4F7A-9842-52E56818462A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490463/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28616","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019788","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1104/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41642","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490463/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1104/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1330","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker."},{"lang":"es","value":"Vulnerabilidad sin especificar en Windows client API de Novell GroupWise 7 antes de SP3 y 6.5 antes de SP6 Update 3 permite a usuarios remotamente autentificados acceder a los emails no compartidos almacenados de otro usuario que haya compartido al menos una carpeta con el atacante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*","matchCriteriaId":"08A78BE7-6426-41CD-BBAF-9BB951726D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*","matchCriteriaId":"E50599E1-45E5-443F-AAEC-F91778CA4792"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F0BB62B7-C895-4AB6-9CEB-4B312E334953"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp4:*:*:*:*:*:*","matchCriteriaId":"A91EAC4C-8EEE-4050-B1AD-E677AD90327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp5:*:*:*:*:*:*","matchCriteriaId":"C7F65030-60A2-4EC2-A06D-EC5249FD9FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp6:*:*:*:*:*:*","matchCriteriaId":"8CB8A6AD-94E4-4871-9BCA-EC637161E70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"814CAE15-78D8-4205-AC95-E07385A7B3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"251EAE31-9799-453A-ABF7-F3D1C6602A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"32AFA45E-7EA4-4067-BDB5-AB4391B3FE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"5B8BA202-8147-4837-8C14-C7A60E70EFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3D61CB70-5B89-4D12-AA31-9C4BF9A41813"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5_sp6_update_1:*:*:*:*:*:*:*","matchCriteriaId":"7488A4DC-3A7E-4492-9EC7-2443CEB18E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*","matchCriteriaId":"422F4B8A-8133-4DE2-9749-41E3DE0031DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DD25DC76-F3BE-4A0E-86DC-D27F4948446E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019616","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28265","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0904","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41223","source":"cve@mitre.org"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-1331","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and \"obtain OXO resources\" via shell metacharacters in the id2 parameter."},{"lang":"es","value":"El archivo cgi-data/FastJSData.cgi en OmniPCX Office con servicios Internet Access OXO210 versiones anteriores a 210/091.001, OXO600 versiones anteriores a 610/014.001, y otras versiones, permite a los atacantes remotos ejecutar comandos arbitrarios y \"obtain OXO resources\" por medio de metacaracteres shell en el parámetro id2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatel-lucent:omnipcx_office:*:*:*:*:*:*:*:*","versionStartIncluding":"210","versionEndExcluding":"210\\/091.001","matchCriteriaId":"347A56D0-7C19-4D45-BB80-783A7897FF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:alcatel-lucent:omnipcx_office:*:*:*:*:*:*:*:*","versionStartIncluding":"610","versionEndExcluding":"610\\/014.001","matchCriteriaId":"C9CCA94C-CC8A-42EB-B0FA-D2CB7ED4901F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29798","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492383/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28758","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020082","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1057","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41560","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5662","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492383/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1332","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header."},{"lang":"es","value":"Vulnerabilidad no especificada en Asterisk Open Source versiones 1.2.x anteriores a 1.2.27, 1.4.x anteriores a 1.4.18.1 y 1.4.19-rc3; en Business Edition versiones A.x.x, B.x.x anteriores a B.2.5.1, y C.x.x anteriores a C.1.6.2; en AsteriskNOW versiones 1.0.x anteriores a 1.0.2; Appliance Developer Kit anteriores a 1.4 revisión 109393; y s800i versiones 1.0.x anteriores a 1.1.0.2 permite a atacantes remotos acceder al controlador del canal SIP mediante la utilización de una cabecera From especialmente construida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:a:*:business:*:*:*:*:*","matchCriteriaId":"C6702046-43CF-4C84-9F76-24716C9F7D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.2:*:business:*:*:*:*:*","matchCriteriaId":"524CF00B-1B36-4C1F-80B4-28349891669B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.3:*:business:*:*:*:*:*","matchCriteriaId":"2942FA48-42CE-4E67-A5BF-7852652EDE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.2.0:*:business:*:*:*:*:*","matchCriteriaId":"4160A834-9194-474C-819B-60627E470D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.2.1:*:business:*:*:*:*:*","matchCriteriaId":"D81F6E55-80F1-4770-9FF0-305EEEF3C4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.1:*:business:*:*:*:*:*","matchCriteriaId":"087DC9EC-0DF2-48AE-BB62-8DDF95C3EC56"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.2:*:business:*:*:*:*:*","matchCriteriaId":"471032A5-5EB6-44D1-91C8-BEA42C1E205A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.3:*:business:*:*:*:*:*","matchCriteriaId":"6FEB3FCA-065E-4C32-A4C7-F2C79F214F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.4:*:business:*:*:*:*:*","matchCriteriaId":"636D765F-C47B-4762-9419-D7B51FA38AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.5:*:business:*:*:*:*:*","matchCriteriaId":"36F29EE8-E05F-4F0A-B0FA-66C551856C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.6:*:business:*:*:*:*:*","matchCriteriaId":"CEAA72FE-E13C-4363-AF5C-7D1CEEE2FA77"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.0_beta7:*:business:*:*:*:*:*","matchCriteriaId":"D0A87D63-35F5-47D7-893B-E8B179B16C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.0_beta8:*:business:*:*:*:*:*","matchCriteriaId":"95C1809E-9031-483F-B873-160284FA71D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.6:*:business:*:*:*:*:*","matchCriteriaId":"E35C336A-A786-476B-8B9F-E682D999B6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.6.1:*:business:*:*:*:*:*","matchCriteriaId":"8121721B-EBC6-44EA-86D6-7B0FF1C8FF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"DEF22BFB-2B22-4FBE-AE35-D7BC2A461865"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05B437-C292-4AA0-8AFE-1CA07CD80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0102C4C0-1A7D-4AB7-9817-44E6B0DB761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4:*:*:*:*:*:*:*","matchCriteriaId":"81DDF486-4185-48EE-869E-0AA6726C31F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CF45A8E1-F6B1-42BD-9168-12062FA6EAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5757B9B-2759-439A-9A6D-CCDD6C8C8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E4548D39-0562-4946-AA51-A7C1A31AEE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FCD71268-EAA2-477B-8AC4-DE4853A262B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8:*:*:*:*:*:*:*","matchCriteriaId":"529B2115-A191-4F3F-8F8C-A38B7C45463A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B76EFDCA-20EC-4C62-A0AD-CBD317D69441"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"a","matchCriteriaId":"D4EC98BF-00C0-48F5-ADFA-DB8AC6E95F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"b.2.5.0","matchCriteriaId":"9E140B81-4528-4BCC-AE60-B91DD4B2C9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c.1.6.1","matchCriteriaId":"8E8CF6B9-050B-426B-86FC-8A32E8C09A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"B7C58E6B-AECC-48AF-8059-61772690776A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC6FE17C-3B08-4675-9F73-5DC0C2438BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.26","matchCriteriaId":"A66DC4A6-290C-48ED-A0F8-8DC05EA0AAC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.17","matchCriteriaId":"6CEDD6A3-13B1-4553-8BAD-93DB5203F3B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:rc-2:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"F4AB8D8F-15AC-4516-85A2-B5D2B5B3DF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*","matchCriteriaId":"678DB154-4363-42FF-8B28-367923FC6595"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F2C378-FF0E-4765-9F66-625C4064D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A55A9295-F632-4856-90A1-38371EB98589"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FAE6AF1-884D-41F7-B174-9E13C7719C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCA9E35B-9A6B-42F2-9315-9C7D09F62227"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"89B1F293-4F0F-48FD-A1F1-1230B94D87D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF7EC20-A424-45E5-B7E4-3CC86075858C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C790E105-55C8-4CDC-9FA8-E1FF6F130A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"44C860EF-2B29-4995-B942-000CC43FDD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADB80EF-C724-44BA-88FC-24087799D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"78B39BE8-7E2D-42DF-8633-44CAD5662777"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F39036E3-0027-4C72-9DEB-9A6E2B4512C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A037E6F9-3EF7-4EEB-AC16-081421BCE40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A7EC02A-9C9E-4589-BBB3-1908D3078A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6C70FA9C-6F3B-4BDF-97FB-81D06AB0EE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E62D108C-862D-4BDB-BE37-285AA4C9C59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"CF1422F3-829D-498C-83A6-02989DFB70A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBEB9D69-A404-4053-92F9-CAC3481AFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*","matchCriteriaId":"C7B2F43B-8B69-4BF6-86B7-A225175FF068"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"107DA2D8-FE7C-4B70-856D-43D58B988694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5C14614F-4E27-40A6-9E56-2B1DBB10330B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7A2F2F5A-66FD-4057-917C-66332A88D83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"399B0206-B48B-46EF-8CA6-A6E5A2550B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"26E9760F-C0EB-47BB-8DA4-CC7815099DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6BD915CD-A7D3-4305-A6C0-290C648A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"40850BF4-E252-4667-9B46-9B6FEF6E997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1BB01DD1-B29B-4210-88CC-9ADB3148A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc3:*:*:*:*:*:*","matchCriteriaId":"C4FF0F09-0268-480F-A2F3-6F8C3F323EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.1","matchCriteriaId":"6D1E04DC-AE6A-4536-8E45-36494E51B036"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C3A0A08-4107-4B8B-AE7E-DC23849A54DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9320928D-D83C-4258-AF62-AB2D1F50D972"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"569084D1-977D-41FC-A444-0B3F5199DDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02D182FB-761C-4F08-A776-B613FAC55230"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C9046D49-6878-4571-8B9E-2FBD5BA80D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B5EDAB-61DD-4864-A159-39292D339DA2"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29470","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29782","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-13.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019629","source":"cve@mitre.org"},{"url":"http://www.asterisk.org/node/48466","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1525","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489818/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28310","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0928","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41308","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.asterisk.org/node/48466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489818/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1333","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en Asterisk Open Source versiones 1.6.x anteriores a 1.6.0-beta6 permite a atacantes remotos ejecutar código de su elección mediante la utilización de mensajes de eventos que no son manejados adecuadamente por (1) la llamda al API de registro ast_verbose o (2) la función astman_append."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"0ABFFC6C-C814-49A4-872E-3B8DC8AB1E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"07532423-02E0-424A-B84A-4997BF152B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"916BC7DD-8EB8-4782-BE9C-9927EB3E66FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"A3F0FFA4-B9AD-4934-87BC-F765AD0A16B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7B842E24-58B3-4630-9FC2-9DC0BA356D07"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-004.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29426","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29456","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019630","source":"cve@mitre.org"},{"url":"http://www.asterisk.org/node/48466","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1525","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489823/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28311","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0928","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41301","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.asterisk.org/node/48466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489823/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1334","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATH_INFO, as demonstrated by (1) %5C (encoded backslash), (2) '%' (percent), and (3) '~' (tilde).  NOTE: the '/' (slash) vector is already covered by CVE-2007-5383."},{"lang":"es","value":"cgi/b en el router BT Home Hub permite a atacantes remotos saltarse la autenticación y leer o modificar la configuración de administración o realizar llamadas de telefonía VoIP de su elección, mediante la utilización de un carácter al final de PATH_INFO,como se ha comprobado con (1) %5C (codificación de la barra invertida), (2) '%' (porcentaje) y (3) '~' (tilde). NOTA: el vector utilizando el carácter '/' (barra) está ya recogido por CVE-2007-5383."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:bt:home_hub:*:*:*:*:*:*:*:*","matchCriteriaId":"C65E12D6-4738-44BD-8153-90A9570E175D"}]}]}],"references":[{"url":"http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-1/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41271","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1335","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905."},{"lang":"es","value":"La función ipsec4_get_ulp del kernel en las versiones 2.0 a 3.1 de NetBSD y NetBSD-current anterior a 20071028, cuando está habilitado el subsistema fast_ipsec, permite a atacantes remotos saltarse las restricciones de IPsec al enviar paquetes desde una máquina origen con diferente longitud de carácter que la máquina destino, siendo un vulnerabilidad diferente a CVE-2006-0905."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D18C95A3-15E3-41B8-AC28-ACEA57021E24"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"28BD9F91-2384-4557-9648-25FC00D04677"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3ECF9E5F-AF38-42B9-8B49-6C254394CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F9CABFAA-594C-45D7-A0C7-795872A0C68A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9432E9-AACA-4242-BDAB-8792ACF72C12"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29C02C6B-AAFD-4594-94A4-F26BA3648CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E59D3682-22E1-40C4-AC65-079005FB6194"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3D95D05C-4FE1-4408-B8B8-5C5932800385"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd_current:*:*:*:*:*:*:*:*","versionEndIncluding":"20071027","matchCriteriaId":"94777BA7-6528-4BE4-AE50-EA3C4A19C4E7"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2008-002.txt.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29180","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019533","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28045","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2008-002.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1336","sourceIdentifier":"cve@mitre.org","published":"2008-03-13T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands via the categ parameter in a links action to index.php, a different vector than CVE-2008-1122."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Koobi CMS versiones 4.2.3 hasta 4.3.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro categ en los link de acción de index.php, siendo un vector de ataque diferente que CVE-2008-112."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86AC55A3-FD1C-4120-BD53-771A258EDEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"16FF2BC0-4A0A-4243-9E42-64AC25F616CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EBFB53CF-798B-4DBB-B155-B943CBCD000A"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AD12728A-AF6A-4338-9917-460AE08871BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7AAF98E6-9A69-48B5-A6DF-D47CD87E2106"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"3029DF71-E514-4663-AC22-79F52DAFBE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"9B19ABEE-4E45-4739-B310-D3D775D686C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:koobi:koobi_cms:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C4FC8B26-3187-45E8-AE59-356537010D64"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488997/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490886/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41207","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5206","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5447","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488997/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490886/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1337","sourceIdentifier":"cve@mitre.org","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message."},{"lang":"es","value":"El servicio de mensajería instantánea Timbuktu Pro 8.6.5 RC 229 y versiones anteriores para Windows permite a atacantes remotos provocar una denegación de servicio (caida del servicio) mediante la utilización de un campo Version inválido o una denegación de servicio (consumo de CPU y finalización del programa) mediante la utilización de un mensaje inválido o parcial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:8.6.5:rc_229:*:*:*:*:*:*","matchCriteriaId":"CF44E015-6B32-4094-90F0-B391FEE56C9A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/timbuto-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/timbuto.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3741","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489360/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0840","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/timbuto-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/timbuto.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489360/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1338","sourceIdentifier":"cve@mitre.org","published":"2008-03-14T20:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range, which causes a loop until all memory is exhausted."},{"lang":"es","value":"El servicio Perforce (p4s.exe) de Perforce Server 2007.3/143793 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (parada del servicio) mediante la utilización de un comando server-DiffFile con un valor entero dentro de cierto rango, causando un bucle de ejecución hasta que toda la memoria es ocupada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2007.3_143793","matchCriteriaId":"0396CDF3-115D-4BE3-8C83-3D2AEA983422"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/perforces-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/perforces.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3735","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489179/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41361","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/perforces-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/perforces.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489179/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1340","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger \"memory exhaustion and memory corruption.\""},{"lang":"es","value":"Virtual Machine Communication Interface (VMCI) en VMware Workstation versiones 6.0.x anteriores a 6.0.3, VMware Player versiones 2.0.x anterirores a 2.0.3, y VMware ACE versiones 2.0.x anteriores a 2.0.1 permite a atacantes remotos provocar una denegación de servicio (caída del sistema operativo del servidor) mediante llamadas VMCI especialmente construidas que provocan el agotamiento y la corrupción de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*","matchCriteriaId":"DDEAB605-03F6-4968-8A48-126C7C711043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*","matchCriteriaId":"AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3755","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28289","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41250","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1341","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en SearchResults.aspx de LaGarde StoreFront 6 antes del SP8 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro CategoryId. NOTA: la proveniencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lagarde:storefront:6.0:*:*:*:*:*:*:*","matchCriteriaId":"92455915-5B93-459A-BE30-B89DF6702578"}]}]}],"references":[{"url":"http://secunia.com/advisories/29326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.storefront.net/Updates/60sp8/default.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.storefront.net/Updates/60sp8/default.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1342","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the (1) _q and (2) lucene_index_field_value parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la característica de búsqueda de Polymita BPM-Suite y CollagePortal permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) _q y (2) lucene_index_field_value. NOTA: se desconoce el origen de esta información; los detalles son obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:polymita_technologies:bpm_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"C287B5C8-D68E-41F2-BCAF-4E25D96EA27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:polymita_technologies:collageportal:*:*:*:*:*:*:*:*","matchCriteriaId":"4E10D726-AA8C-4A69-BE74-505436C5335B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1343","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en (1) pkgadd y (2) pkgrm en SCO UnixWare versión 7.1.4, permite a los usuarios locales alcanzar privilegios por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28236","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41200","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1344","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backend.php and the (2) page parameter to ajaxp_backend.php."},{"lang":"es","value":"Múliples vulnerabilidades de inyección SQL en MyioSoft EasyCalendar 4.0tr y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el (1) parámetro year de una acción dayview en plugins/calendar/calendar_backend.php y el (2) parámetro page de ajaxp_backend.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easycalendar:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"3D48B36D-7041-4C67-8CE8-FAFA090545BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489678/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28232","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41179","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5246","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489678/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1345","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayview action."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados de plugins/calendar/calendar_backend.php en MyioSoft EasyCalendar 4.0tr y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"day\" en una acción \"dayview\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easycalendar:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"3D48B36D-7041-4C67-8CE8-FAFA090545BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489678/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28232","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41180","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5246","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489678/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1346","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en staticpages/easygallery/index.php en MyioSoft EasyGallery 5.0tr y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catid en una acción category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easycalendar:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"3D48B36D-7041-4C67-8CE8-FAFA090545BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28233","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41185","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1347","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the q parameter in an about action to the help system."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en staticpages/easygallery/index.php en MyioSoft EasyGallery 5.0tr y anteriores, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) PATH_INFO o (2) el parámetro \"q\" en una acción \"about\" en el sistema de ayuda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easycalendar:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"3D48B36D-7041-4C67-8CE8-FAFA090545BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28233","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41186","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1348","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the chart parameter to modules.php."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) de index.php en los módulos eWebsite eWeather (Weather) para PHP-Nuke, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro chart en modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ewebsite:eweather:*:*:*:*:*:*:*:*","matchCriteriaId":"1965E4D4-0C9A-4476-84B7-4A829383BFEE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489504/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28241","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41205","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489504/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1349","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL de viewcat.php en bamaGalerie (Bama Galerie) 3.03 y 3.041 en los módulos  eXV2 2.0.6, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exv2:bamagalerie:3.03:*:*:*:*:*:*:*","matchCriteriaId":"8F879D74-EC88-4AE0-917D-A30855869F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:exv2:bamagalerie:3.041:*:*:*:*:*:*:*","matchCriteriaId":"B90FB4C5-5AC7-4E4C-AA60-FD1C716A9B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:exv2:exv2:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A23EB63C-AE87-4B1B-A8BC-6BFB57B47B1A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29359","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29362","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41188","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5244","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5340","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0804-exploits/runcms11a-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1350","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en kb.php en Fully Modded phpBB (phpbbfm) 80220, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"k\" en una acción article."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fully_modded_phpbb:fully_modded_phpbb:*:*:*:*:*:*:*:*","matchCriteriaId":"96822CFC-F699-47C9-B819-20FDC30BCCE1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3745","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489468/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28225","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41192","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5243","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489468/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1351","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Tutorials 2.1b para XOOPS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro tid de printpage.php que es directamente accesible, o a través de la acción printpage de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:tutoriais_module:2.1b:*:*:*:*:*:*:*","matchCriteriaId":"1F0BE47E-981A-4E4E-9B23-A58E5F250755"}]}]}],"references":[{"url":"http://secunia.com/advisories/29358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28230","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5245","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1352","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in search.php in EdiorCMS (ecms) 3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the _SearchTemplate parameter during a Title search."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo search.php en EdiorCMS (ecms) versión 3.0, permite a los atacantes remotos leer archivos arbitrarios por medio de un .. (punto punto) en el parámetro _SearchTemplate durante una búsqueda de Título."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hangzhou_network_technology_development:ediorcms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"70F40F8C-1096-46F0-B4C4-4E6A1DA7B6CA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489498/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28242","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41189","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489498/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1353","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero."},{"lang":"es","value":"zabbix_agentd en ZABBIX 1.4.4, permite a atacantes remotos causar una Denegación de Servicio (Consumo de CPU y conexión) a través de múltiples comandos vfs.file.cksum con un nodo de dispositivo como  /dev/urandom o /dev/zero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0FB47B1-330E-4ED4-A4AF-993DC613B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA7AA37E-2E1A-471D-95AE-83A2CABF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFABFF16-FD5E-4FCF-BDF8-AE8D654CEAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"03E211F0-2F61-4503-AE89-0F750C2848B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC3D41-DB27-4509-8908-0A7F0A19206E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96A266AD-7853-40D0-8D1B-6ECFF34A76AA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489506/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28244","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0878","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41196","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489506/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1354","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP (VSO-XP) allows remote attackers to execute arbitrary SQL commands via the Issue_ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en yIssuesView.asp de Advanced Data Solutions Virtual Support Office-XP (VSO-XP), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Issue_ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advanced_data_solutions:virtual_support_office_xp:2:*:*:*:*:*:*:*","matchCriteriaId":"DCEAEC74-F5D9-4B04-A8C0-8C9CCC03BDAC"}]}]}],"references":[{"url":"http://forum.aria-security.com/showthread.php?p=21","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120545152114985&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28247","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41206","source":"cve@mitre.org"},{"url":"http://forum.aria-security.com/showthread.php?p=21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120545152114985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1355","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attackers to inject arbitrary web script or HTML via the path parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados de index.php en Jeebles Technology Jeebles Directory 2.9.60, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro path. NOTA: El origen de esta información es desconocido; Los detalles se han obtenido de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jeeblestechnology:jeebles_directory:2.9.60:*:*:*:*:*:*:*","matchCriteriaId":"8424F729-C94F-4228-A17A-B635C6545614"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28221.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28221","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41183","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1356","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System (JDS), when using the GNOME On-Screen Keyboard (GOK), allows local users to bypass authentication via unknown vectors that cause the screen saver to crash."},{"lang":"es","value":"Vulnerabilidad no especificada en xscreensaver en Sun Solaris 10 Java Desktop System (JDS), usando el GNOME On-Screen Keyboard (GOK), permite a usuarios locales saltarse la autenticación mediante vectores no especificados que pueden provocar un fallo del salva pantallas (screen saver)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-234661-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28243","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019614","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0875/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-234661-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0875/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1357","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082.  NOTE: this issue only exists when the debug level is 8."},{"lang":"es","value":"Vulnerabilidad en el formato de cadena en la función logDetail de applib.dlld en McAfee Common Management Agent (CMA) 3.6.0.574 (Parche 3) y anteriores, como se utiliza en ePolicy Orchestrator 4.0.0 build 1015, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de formatos de especificadores de formatos de cadena en un fichero de envío en una solicitud AgentWakeup en el puerto 8082. NOTA: esta vulnerabilidad sólo sucede cuando se está en un nivel 8 de depuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:agent:4.0:*:*:*:*:*:*:*","matchCriteriaId":"43953695-9C35-4CC3-9591-D03866731F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:3.0.6.453:*:*:*:*:*:*:*","matchCriteriaId":"9B7D230B-845A-4E83-B86C-000CDBAC937F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:3.5.5.438:*:*:*:*:*:*:*","matchCriteriaId":"4A0590CC-B03B-472B-A5FF-F6A316DBE2DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:3.6.438:*:*:*:*:*:*:*","matchCriteriaId":"0BD368FB-2683-4321-9491-CB757511AD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:3.6.453:*:*:*:*:*:*:*","matchCriteriaId":"F64F9F3F-F835-4769-9A5B-A05ED2AE7850"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:3.6.546:*:*:*:*:*:*:*","matchCriteriaId":"3C0AE0A0-E56A-4B93-B45B-037C09EA69C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:3.6.574:*:*:*:*:*:*:*","matchCriteriaId":"CFF00F5B-4272-49CC-A9CE-4CCD20F5DB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"485DB16F-730A-44B2-A255-2583AB27DB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:mcafee_framework:3.6.569:*:*:*:*:*:*:*","matchCriteriaId":"6330056D-1DAF-4821-90E5-1E9E52594A25"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/meccaffi-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3748","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489476/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28228","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019609","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0866/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41178","source":"cve@mitre.org"},{"url":"https://knowledge.mcafee.com/article/234/615103_f.sal_public.html","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/meccaffi-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489476/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0866/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://knowledge.mcafee.com/article/234/615103_f.sal_public.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1358","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el servidor IMAP en Alt-N Technologies MDaemon versión 9.6.4, permite a los usuarios autenticados remotos ejecutar código arbitrario por medio de un comando FETCH con un CUERPO largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altn:mdaemon:9.6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CC487A4-14FB-4D88-B03C-1CF90687BDAD"}]}]}],"references":[{"url":"http://files.altn.com/MDaemon/Release/RelNotes_en.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.be4mind.com/?q=node/256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28245","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019615","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0877/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41195","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5248","source":"cve@mitre.org"},{"url":"http://files.altn.com/MDaemon/Release/RelNotes_en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.be4mind.com/?q=node/256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0877/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1359","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via nested BBCodes, a different vector than CVE-2008-0913."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados de Invision Power Board (IPB or IP.Board) 2.3.4 anterior a 2008-03-13, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de BBCodes anidados, Vulnerabilidad distinta a CVE-2008-0913."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.4","matchCriteriaId":"156E6300-7128-44B2-85A6-E961509A1CDA"}]}]}],"references":[{"url":"http://forums.invisionpower.com/index.php?showtopic=270637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29378","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0899/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41209","source":"cve@mitre.org"},{"url":"http://forums.invisionpower.com/index.php?showtopic=270637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0899/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1360","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts, a different issue than CVE-2007-5624."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Nagios versiones anteriores a la 2.11, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores desconocidos a secuencias de comandos CGI, un problema diferente al de la CVE-2007-5624."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E3F8DC3-2F34-4E11-A796-4EA7CB17FDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:*","matchCriteriaId":"7ADCBA8C-06DB-4D85-AEED-807E64A29DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D3EE2D7-BD17-4C37-ABA3-79FCE8328EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4C3374C3-9F57-4014-8712-DDDAB52998FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E5D4F00F-C732-477B-988A-25F8E8D32D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:067","source":"cve@mitre.org"},{"url":"http://www.nagios.org/development/changelog.php#2x_branch","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28250","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0900/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41210","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nagios.org/development/changelog.php#2x_branch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0900/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1361","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362."},{"lang":"es","value":"VMware Workstation versiones 6.0.x anteriores a 6.0.3 y 5.5.x anteriores a 5.5.6, VMware Player versiones 2.0.x anteriores a 2.0.3 y 1.0.x anteriores a 1.0.6, VMware ACE versiones 2.0.x anteriores a 2.0.1 y 1.0.x anteriores a 1.0.5, y VMware Server versiones 1.0.x anteriores a 1.0.5 para Windows permite a usuarios locales conseguir privilegios mediante una manipulación no específica que causa que el proceso authd conecte con un nombre de tubería de su elección, siendo una vulnerabilidad diferente que CVE-2008-1362."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8230EFE6-8AB6-41DF-9A46-CAE4E5BB7F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B2C792F-48DA-46B5-B42E-9A045B393531"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CA04700-CF35-43CA-AD4E-BB93E206FDD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*","matchCriteriaId":"DDEAB605-03F6-4968-8A48-126C7C711043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*","matchCriteriaId":"AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3755","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41257","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1362","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an \"insecurely created named pipe,\" a different vulnerability than CVE-2008-1361."},{"lang":"es","value":"VMware Workstation versiones 6.0.x anteriores a 6.0.3 y versiones 5.5.x anteriores a 5.5.6, VMware Player versiones 2.0.x anteriores a 2.0.3 y versiones 1.0.x anteriores a 1.0.6, VMware ACE versiones 2.0.x anteriores a 2.0.1 y versiones 1.0.x anteriores a 1.0.5, y VMware Server versiones 1.0.x anteriores a 1.0.5 para Windows permite a usuarios locales conseguir privilegios o provocar una denegación de servicio utilizando la suplantación del proceso authd a través de un uso no especificado de una \"tubería de nombres creada de forma no segura\", siendo una vulnerabilidad diferente que CVE-2008-1361."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*","matchCriteriaId":"DDEAB605-03F6-4968-8A48-126C7C711043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*","matchCriteriaId":"AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3755","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41259","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1363","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for \"hijacking the VMX process.\""},{"lang":"es","value":"VMware Workstation versiones 6.0.x anteriores a 6.0.3 y versiones 5.5.x anteriores a 5.5.6, VMware Player versiones 2.0.x anteriores a 2.0.3 y versiones 1.0.x anteriores a 1.0.6, VMware ACE versiones 2.0.x anteriores a 2.0.1 y versiones 1.0.x anteriores a 1.0.5, y VMware Server versiones 1.0.x anteriores a 1.0.5 para Windows permite a usuarios locales obtener privilegios mediante una modificación no especificada del fichero config.ini localizado en la carpeta de Datos de Aplicación, que puede ser usado para \"secuestrar el proceso VMX\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.5","matchCriteriaId":"E913C6E9-454D-4FE7-B22B-F24E194F5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.1","matchCriteriaId":"310A0A72-A709-407D-A68D-24EF59EEC553"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.6","matchCriteriaId":"841FDCE0-8D59-4AE6-8996-5BFD8736DA86"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.3","matchCriteriaId":"3D86484E-0D38-49BC-9C80-688A83F80345"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.5","matchCriteriaId":"517722B0-4E12-4A3B-A35B-2A88DA6D30A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.6","matchCriteriaId":"E6C0BDA4-C4AE-4C91-A8D3-A965CCCE3C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.3","matchCriteriaId":"76907A90-590B-4FBA-977E-CCF19F6F405F"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3755","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019622","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41252","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1364","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.1.1 allows attackers to cause a denial of service."},{"lang":"es","value":"Vulnerabilidad no especificada en el servicio DHCP en VMware Workstation versiones 5.5.x anteriores a 5.5.6, VMware Player versiones 1.0.x anteriores a 1.0.6, VMware ACE versiones 1.0.x anteriores a 1.0.5, VMware Server versiones 1.0.x anteriores a 1.0.5, y VMware Fusion versiones 1.1.x anteriores a 1.1.1 permite a atacantes provocar una denegación de servicio."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of dhcp as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n","lastModified":"2008-06-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*","matchCriteriaId":"DDEAB605-03F6-4968-8A48-126C7C711043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*","matchCriteriaId":"AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3755","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28289","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/fusion/doc/releasenotes_fusion.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41254","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/fusion/doc/releasenotes_fusion.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1365","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long encrypted password, which triggers the overflow in (1) cgiChkMasterPwd.exe, (2) policyserver.exe as reachable through cgiABLogon.exe, and other vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 y anteriores y 7.3 Patch 3 build 1314 y anteriores, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída) a través de una contraseña larga cifrada, la cual dispara el desbordamiento en (1) cgiChkMasterPwd.exe, (2) policyserver.exe alcanzable mediante cgiABLogon.exe y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3_patch3_build1314","matchCriteriaId":"73057C10-1EEC-4B01-890D-9B64691335AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0_patch2_build1189","matchCriteriaId":"9B37BA25-83D3-47B8-BC97-1E3527CA43D6"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/officescaz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28020","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019523","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0702","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/officescaz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1366","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers to cause a denial of service (process consumption) via (1) an HTTP request without a Content-Length header or (2) invalid characters in unspecified CGI arguments, which triggers a NULL pointer dereference."},{"lang":"es","value":"Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 y anteriores y 7.3 Patch 3 build 1314 y anteriores, permiten a atacantes remotos provocar una denegación de servicio (consumo de procesos) mediante (1) una petición HTTP sin una cabecera Content-Length o (2) caracteres inválidos en argumentos CGI no especificados, que disparan una referencia a un puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3_patch3_build1314","matchCriteriaId":"73057C10-1EEC-4B01-890D-9B64691335AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan_corporate_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0_patch2_build1189","matchCriteriaId":"9B37BA25-83D3-47B8-BC97-1E3527CA43D6"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/officescaz-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28020","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0702","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/officescaz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1367","sourceIdentifier":"cve@mitre.org","published":"2008-03-17T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Subscription required to access Link 1014774","cveTags":[],"descriptions":[{"lang":"en","value":"gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL."},{"lang":"es","value":"gcc 4.3.x no genera una instrucción cld mientras compila funciones usadas por cadenas manipuladas como memcpy y memmove en x86 y i386, lo que puede prevenir que el indicador de dirección (DF) sea reseteado en violación de las convenciones ABI y cause que datos sean copiados en la dirección equivocada durante el manejo de señales en el Kernel de Linux, lo que puede permitir a atacantes remotos dependiendo del contexto provocar corrupciones de memoria. NOTA: Originalmente reportada como consumo de CPU en SBCL"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E6A7A129-A720-4C4A-AC31-6602897884FA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469058","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00417.html","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00428.html","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00432.html","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00499.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40cd10ccff3d9fbffd57b93780bee4b7b9bff51","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/3/5/207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lwn.net/Articles/272048/#Comments","source":"cve@mitre.org"},{"url":"http://marc.info/?l=git-commits-head&m=120492000901739&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30110","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30116","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30818","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30890","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31246","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29084","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437312","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41340","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11108","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00417.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00428.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00499.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40cd10ccff3d9fbffd57b93780bee4b7b9bff51","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/3/5/207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lwn.net/Articles/272048/#Comments","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=git-commits-head&m=120492000901739&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1368","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF (%0D%0A) before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established earlier in the same browser session, as demonstrated using a DELE command, a variant or possibly a regression of CVE-2004-1166.  NOTE: a trailing \"//\" can force Internet Explorer to try to reuse an existing authenticated connection."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Microsoft Internet Explorer 5 y 6 permite a atacantes remotos ejecutar comandos FTP de su elección a través de una URL ftp:// codificada con los caracteres (%0D%0A) previa al comando FTP, que causa que los comandos sean insertados en una conexión FTP autenticada establecida previamente en la misma sesión de navegación, como se ha demostrado usando el comando DELE, una variante o posible regresión de la CVE-2004-1166.  NOTA: un resto como\"//\" puede forzar que Internet Explorer intente reutilizar una conexión autenticada existente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]}]}],"references":[{"url":"http://secunia.com/advisories/29346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3750","source":"cve@mitre.org"},{"url":"http://www.rapid7.com/advisories/R7-0032.jsp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489500/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28208","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rapid7.com/advisories/R7-0032.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489500/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1369","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Sun link will not execute.","cveTags":[],"descriptions":[{"lang":"en","value":"A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors."},{"lang":"es","value":"Alguna imagen incorrecta de Sun Solaris 10 sobre servidores SPARC Enterprise T5120 y T5220   tiene los ficheros /etc/default/login y /etc/ssh/sshd_config  que configuran los logins de root de una forma involuntaria por parte del fabricante, permite a atacantes remotos  obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server:t5120:*:*:*:*:*:*:*","matchCriteriaId":"249D6284-3527-4947-BE67-42A2897AF79E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server:t5220:*:*:*:*:*:*:*","matchCriteriaId":"E7668A99-3F78-4D35-A500-102D67FFB29D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29529","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28469","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019708","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0810/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41332","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0810/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1370","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en index.php de wildmary Yap Blog 1.1 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro page. NOTA: el origen de esta información es desconocido. Los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wildmary:yap_blog:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6D7E314-709C-4B5B-B91F-09B151589260"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28120","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1371","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"CVE description identifies vulnerability as remote attacker, but both links describe vulnerability as local-file inclusion.","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary files via a full pathname in the d_root parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en install/index.php de Drake CMS 0.4.11 RC8 permite a atacantes remotos leer y ejecutar archivos de su elección a través de un nombre de ruta completo en el parámetro d_root. NOTA: el origen de esta información es desconocido. Los detalles se ha obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:0.4.11_rc8:*:*:*:*:*:*:*","matchCriteriaId":"64FD7287-3B53-43FC-9072-0D3E3C36BC97"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28165","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28165/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28165/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1372","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats."},{"lang":"es","value":"El archivo bzlib.c en bzip2 versiones anteriores a 1.0.5, permite a los atacantes remotos asistidos por el usuario causar una denegación de servicio (bloqueo) por medio de un archivo diseñado que activa una lectura excesiva del búfer, como es demostrado por el conjunto de pruebas PROTOS GENOME para Formatos de Archivo."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat has re-evaluated the potential impact of this flaw and has released an update which corrects this behavior:\nhttp://rhn.redhat.com/errata/RHSA-2008-0893.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9:*:*:*:*:*:*:*","matchCriteriaId":"3852E705-516A-4A5E-8095-93DCF8DB15DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"D8AD6CE9-FCE5-4926-A1D1-0706DFE4A6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5b:*:*:*:*:*:*:*","matchCriteriaId":"D54DD36D-7A6C-4649-855A-D81F29FFB6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5c:*:*:*:*:*:*:*","matchCriteriaId":"0B87D623-6CF8-4BDB-A9FB-CF07589AF1CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5d:*:*:*:*:*:*:*","matchCriteriaId":"5FE3BFE7-75B6-4284-9EDC-78D452CD9174"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9_a:*:*:*:*:*:*:*","matchCriteriaId":"E3992967-645A-45E1-979E-6866B50AA642"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9_b:*:*:*:*:*:*:*","matchCriteriaId":"980AE5B2-11A7-4672-B221-DF660F20667F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9_c:*:*:*:*:*:*:*","matchCriteriaId":"1DC33019-390A-428F-B119-139CA5949AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B10B3BF9-BE42-468D-89E8-8D4A5FEDC734"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E55F00B1-D48B-40A6-872F-959598D7E6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CB5DBC5B-C1C4-487E-B40D-8925FDA13D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C02B0664-E473-4131-8228-96BB5FBC4F7F"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc","source":"cve@mitre.org"},{"url":"http://kb.vmware.com/kb/1006982","source":"cve@mitre.org"},{"url":"http://kb.vmware.com/kb/1007198","source":"cve@mitre.org"},{"url":"http://kb.vmware.com/kb/1007504","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29410","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29475","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29506","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29698","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29940","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-40.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241786-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0118","source":"cve@mitre.org"},{"url":"http://www.bzip.org/CHANGES","source":"cve@mitre.org"},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"cve@mitre.org"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-02.xml","source":"cve@mitre.org"},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/813451","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:075","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0893.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489968/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498863/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28286","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020867","source":"cve@mitre.org"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473263","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0915","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2557","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/attachment.cgi?id=146488&action=view","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41249","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10067","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6467","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/590-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00165.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00225.html","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.vmware.com/kb/1006982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.vmware.com/kb/1007198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.vmware.com/kb/1007504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-40.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241786-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bzip.org/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/813451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0893.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489968/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498863/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/attachment.cgi?id=146488&action=view","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/590-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00165.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00225.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1373","sourceIdentifier":"secalert@redhat.com","published":"2008-04-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484."},{"lang":"es","value":"Un desbordamiento de búfer en la función gif_read_lzw en CUPS versión 1.3.6, permite a los atacantes remotos tener un impacto desconocido por medio de un archivo GIF con un valor code_size grande, un problema similar a CVE-2006-4484."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"5E11F5A8-3BA8-4CC8-B26B-3E56AA60023B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29573","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29603","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29630","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29634","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29655","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29659","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29661","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29750","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31324","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0136","source":"secalert@redhat.com"},{"url":"http://www.cups.org/str.php?L2765","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1625","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:081","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0192.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0206.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490486/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28544","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019739","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1059/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41587","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11479","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490486/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-598-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1059/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1374","sourceIdentifier":"secalert@redhat.com","published":"2008-04-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: this issue is due to an incomplete fix for CVE-2004-0888."},{"lang":"es","value":"Desbordamiento de entero en el filtro pdftops de CUPS en Red Hat Enterprise Linux 3 y 4, cuando corren en plataformas de 64-bits, permite a atacantes remotos ejecutar código de su elección a través de ficheros PDF manipulados. \r\nNOTA: esta cuestión es debida a un parche incompleto para CVE-2004-0888."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.11","matchCriteriaId":"08916364-08F4-4416-B84E-2BDD2DC0A3EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29630","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31388","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0245","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495164/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41758","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2390","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9636","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495164/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1375","sourceIdentifier":"secalert@redhat.com","published":"2008-05-02T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors."},{"lang":"es","value":"Una condición de carrera en el subsistema directory notification (dnotify) en el Kernel de Linux versiones  2.6.x anteriores a 2.6.24.6, y versiones 2.6.25 anteriores a 2.6.25.1, permite a usuarios locales causar una denegación de servicio (OOPS) y posiblemente alcanzar privilegios por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.24.6","matchCriteriaId":"06D7E374-58DD-46D3-9C08-777C8E52DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"29184B59-5756-48DB-930C-69D5CD628548"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*","matchCriteriaId":"33EB57D5-DE8D-417C-8C00-AD331D61181C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=120967963803205&w=2","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=120967964303224&w=2","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30017","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30018","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30108","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30112","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30116","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30260","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30515","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30769","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30890","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30962","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31246","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0157","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:104","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:105","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491566/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/491732/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29003","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019959","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1406/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1452/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42131","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2501","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/614-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=120967963803205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=120967964303224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491566/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/491732/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1406/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1452/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/614-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1376","sourceIdentifier":"secalert@redhat.com","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Ciertas secuencias de comandos web usadas para \"construir\" nfs-utils anterior a 1.0.9-35z.el5_2 sobre Red Hat Enterprise Linux (RHEL) 5 omite soporte de paquetes TCP, los cuales permiten a atacantes remotos saltarse las restricciones de acceso previstas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*","matchCriteriaId":"3AA8F2EC-55E9-4529-A816-B5D495605F6B"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:nfs_utils:1.0.9:35z.el5_2:*:*:*:*:*:*","matchCriteriaId":"C6BEB267-7508-42E5-A557-241F437134A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31322","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35162","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0486.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0955.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30466","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020589","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44256","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0486.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1377","sourceIdentifier":"secalert@redhat.com","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption."},{"lang":"es","value":"Las funciones (1) SProcRecordCreateContext y (2) SProcRecordRegisterClients en la extensión Record y la función (3) SProcSecurityGenerateAuthorization en la extensión Security del servidor X 1.4 en X.Org X11R7.3 permite a atacantes dependientes de contexto ejecutar código de su elección a través de peticiones con longitud de valores manipuladas que especifica un número aleatorio de bytes a ser intercambiados en el montículo, lo cual dispara corrupción de montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*","matchCriteriaId":"1F156D71-455F-4B66-9E0C-E8A085B8206A"}]}]}],"references":[{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1377.diff","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=721","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0512.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30627","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30628","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30715","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31109","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32099","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32545","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020247","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10109","source":"secalert@redhat.com"},{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1377.diff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1379","sourceIdentifier":"secalert@redhat.com","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height."},{"lang":"es","value":"Desbordamiento de entero en la función fbShmPutImage de la extensión MIT-SHM en el X server 1.4 de X.Org X11R7.3, permite a atacantes dependientes del contexto leer la memoria de procesos de su elección mediante valores manipulados para el alto y ancho de un Pixmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*","matchCriteriaId":"1F156D71-455F-4B66-9E0C-E8A085B8206A"}]}]}],"references":[{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1379.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"secalert@redhat.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=722","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0512.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30627","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30628","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30715","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31109","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32099","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32545","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020246","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29669","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43016","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8966","source":"secalert@redhat.com"},{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1379.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1380","sourceIdentifier":"secalert@redhat.com","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page.  NOTE: this is due to an incorrect fix for CVE-2008-1237."},{"lang":"es","value":"El motor JavaScript de Mozilla Firefox versiones anteriores a 2.0.0.14, Thunderbird versiones anteriores a 2.0.0.14, y SeaMonkey versiones anteriores a 1.1.10 permite a atacantes remotos provocar una denegación de servicio (caída del colector de basura) y posiblemente tener otros impactos mediante un página web manipulada. NOTA: esto es debido a un parche incorrecto para el CVE-2008-1237."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.13","matchCriteriaId":"3D4805B3-C907-4886-B8DE-3ADBAB1D0750"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.13","matchCriteriaId":"571A360D-6702-4557-8BD5-E2B7DAAB8EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29787","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29793","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29828","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29860","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29883","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29908","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29911","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29912","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29947","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30029","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30192","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30717","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.391769","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1555","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1558","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1562","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/441529","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:110","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-20.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0222.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0223.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0224.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/491838/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28818","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019873","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-602-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1251/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425576","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41857","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10752","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00407.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.391769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/441529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0223.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491838/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-602-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1251/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1793/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00407.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1381","sourceIdentifier":"secalert@redhat.com","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"The following link contains patch information: http://www.zoneminder.com/wiki/index.php/1.23.2_Patches","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL."},{"lang":"es","value":"ZoneMinder anterior a la 1.23.3 permite a usuarios remotos autenticados, y posiblemente sin autenticar, ataques en algunas instalaciones, ejecutar comandos arbitrarios a través de metacaracteres shell en una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55FAB374-12A1-4620-9722-03905C546CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"39B0752F-DCB7-45F1-93AD-6B805B6927F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"B5C7E2CA-7928-40D0-8100-FF320519DAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"64AFD867-DE79-44E4-B8BD-A3608CBD202C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"13D3DB14-3B69-44D1-888B-88174B52ADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"EA76A659-38E9-4CD6-BE6A-33B9EF130B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"1ADCD02B-57F2-4399-BAC9-5523E8A2322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"09235F63-B967-4D9C-8151-E3788CC0B48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFB4385-25C1-4324-AE70-FBCA15D02285"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"C56A2FB6-A178-4068-AFFC-E9F8ED46A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"953301CE-46E3-466D-A9A1-CE6CB688B961"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.0:*:*:*:*:*:*:*","matchCriteriaId":"E3FA08AF-32EB-4281-923B-5606CC5AC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"9B515F99-A444-4854-B4AA-EEB278106189"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"EF03BD73-2F59-407C-8300-9D29412A2A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.0:*:*:*:*:*:*:*","matchCriteriaId":"45C6229F-CFF5-41FF-B5BC-B17F22102A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"58F43A66-B9E0-4275-91A8-603139C6C165"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"959BB7E6-1B5F-4E5C-83A0-55CC13DE0816"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6D208D11-2F7D-4909-A471-5035CC2D2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"250BDB5F-EF5A-41B6-A7B6-E2E4A27C8515"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8F80E304-C425-4FD7-BE86-668D78919D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.4:*:*:*:*:*:*:*","matchCriteriaId":"1C2BC07D-3F50-46F8-80DF-70BDAD4CA9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.5:*:*:*:*:*:*:*","matchCriteriaId":"91B7524A-40E9-4A1D-898D-670EF6FCF3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.0:*:*:*:*:*:*:*","matchCriteriaId":"805CCF7C-96B4-4668-8807-27F4A512E1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.1:*:*:*:*:*:*:*","matchCriteriaId":"A5788317-DC2E-45A5-A4F1-35C42DCCCEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.0:*:*:*:*:*:*:*","matchCriteriaId":"A0669377-E878-4330-B3CC-E7781D1637F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.1:*:*:*:*:*:*:*","matchCriteriaId":"F181E2C5-72D4-4A29-AFCC-B821D7B1FD7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.2:*:*:*:*:*:*:*","matchCriteriaId":"14C4792D-9A5F-407C-9ADE-88A2F31F628F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.3:*:*:*:*:*:*:*","matchCriteriaId":"5AFB8D6F-A90B-4D00-9E5E-6BF2899FF641"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.4:*:*:*:*:*:*:*","matchCriteriaId":"3B2ACD16-6C5B-40F1-8229-3E0BAC2C7EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.0:*:*:*:*:*:*:*","matchCriteriaId":"62EA0AE1-E57B-40E2-810E-7E6D7417BF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.1:*:*:*:*:*:*:*","matchCriteriaId":"ECA2BD13-6CFD-465D-BC12-C049C2A170BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.2:*:*:*:*:*:*:*","matchCriteriaId":"E2B7181B-7F4B-4097-8491-F92804A86E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.3:*:*:*:*:*:*:*","matchCriteriaId":"A36CC0FB-96CA-4B7C-8B47-DF209D16245E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.0:*:*:*:*:*:*:*","matchCriteriaId":"A75BA675-ACD1-4C95-9545-C0A8C60499D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"022EF0D9-EB9F-43C7-A2DB-1978C5E91601"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"7FED5734-F140-4360-A480-4DC590CE98EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29995","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30189","source":"secalert@redhat.com"},{"url":"http://www.awe.com/mark/blog/200804272230.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28968","source":"secalert@redhat.com"},{"url":"http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42046","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.awe.com/mark/blog/200804272230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1382","sourceIdentifier":"secalert@redhat.com","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length \"unknown\" chunks, which trigger an access of uninitialized memory."},{"lang":"es","value":"libpng versions de la 1.0.6 hasta la 1.0.32, 1.2.0 hasta la 1.2.26 y 1.4.0beta01 hasta la 1.4.0beta19, permiten a atacantes dependientes del contexto provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de un archivo PNG con fragmentos desconocidos de longitud cero, lo que dispara un acceso de memoria no inicializada."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1382\n\nThis issue does not affect the version of libpng as shipped with Red Hat Enterprise Linux 3.\n\nUpdates for affected versions of Red Hat Enterprise Linux can be found here:\nhttp://rhn.redhat.com/errata/RHSA-2009-0333.html","lastModified":"2009-03-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:a:*:*:*:*:*:*","matchCriteriaId":"4CF9C3AB-DE2A-485E-A7C6-442B239447B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:d:*:*:*:*:*:*","matchCriteriaId":"A8F3EAC4-FB4B-429B-8C9E-EA19C970B712"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:e:*:*:*:*:*:*","matchCriteriaId":"01B1755E-1F7A-4E8D-9726-63DC4FC4029A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:f:*:*:*:*:*:*","matchCriteriaId":"E4648C1A-13C1-4082-AFC1-EE9B7EBC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:g:*:*:*:*:*:*","matchCriteriaId":"EF340285-5195-445C-ADB2-F1EF2FF901CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:h:*:*:*:*:*:*","matchCriteriaId":"B64DD9BF-26E3-4BEE-BFE0-FFD523600CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:i:*:*:*:*:*:*","matchCriteriaId":"7F0C5F5B-96E1-41F5-A233-487A929B2590"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:j:*:*:*:*:*:*","matchCriteriaId":"5A0CCEEC-A625-4BF8-8696-BF6260AD8445"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta11:*:*:*:*:*:*","matchCriteriaId":"B2DF0E03-3EC6-400A-9AF6-B653053C17D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta12:*:*:*:*:*:*","matchCriteriaId":"5216F808-88C7-4E1A-9FCE-C8DE5680AAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta13:*:*:*:*:*:*","matchCriteriaId":"52C6D2E3-1617-4530-845D-40188526D238"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta14:*:*:*:*:*:*","matchCriteriaId":"6E17E296-E69C-48C7-9B7F-FC85BCB7FF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta15:*:*:*:*:*:*","matchCriteriaId":"36F3EFF1-08E9-42C0-ACC9-55A22BDEE978"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta16:*:*:*:*:*:*","matchCriteriaId":"E9D10792-38F4-488F-9E08-15FF15A9A3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta17:*:*:*:*:*:*","matchCriteriaId":"AA9ED9B2-D9D4-4200-B387-21A893453E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta18:*:*:*:*:*:*","matchCriteriaId":"3983C9FC-7546-41BE-8E22-B3471DF9F3AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"BFAB3DFB-58B7-4713-B88B-26424D639B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"2131F2BB-80E3-46A0-A0D8-4450C625A525"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta1:*:*:*:*:*:*","matchCriteriaId":"C686308E-1A71-40E5-BCDE-5144217D41A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta2:*:*:*:*:*:*","matchCriteriaId":"D1F37F93-8BE1-4716-B35D-1CB2629867A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta3:*:*:*:*:*:*","matchCriteriaId":"AF4127BB-2A91-4243-B3ED-10D945B6995A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta4:*:*:*:*:*:*","matchCriteriaId":"E09AAB1F-14FB-42E9-8983-30D2164EA0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:rc1:*:*:*:*:*:*","matchCriteriaId":"50190A04-5CF2-400E-BAE4-9C7F177ECFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta1:*:*:*:*:*:*","matchCriteriaId":"AFB264E6-1640-459C-8DD0-C9D72124F125"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta10:*:*:*:*:*:*","matchCriteriaId":"2A6E3454-14E2-43C8-8E71-1E800FCBE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta2:*:*:*:*:*:*","matchCriteriaId":"BA610E96-CE50-46B0-B695-F4A5FA77AB73"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta3:*:*:*:*:*:*","matchCriteriaId":"30459EAB-E65B-4487-A90F-389477F0BA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta4:*:*:*:*:*:*","matchCriteriaId":"E89FFA90-6AB5-4587-8F40-E7001E4DD470"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta5:*:*:*:*:*:*","matchCriteriaId":"A2FDACC8-7BFD-477E-A79A-C933CB5C8EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta6:*:*:*:*:*:*","matchCriteriaId":"9139F742-A946-4D2F-9C14-95216C06ED4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta7:*:*:*:*:*:*","matchCriteriaId":"0DBCDA70-BB1B-4408-A2F3-ADB7A7B77A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta8:*:*:*:*:*:*","matchCriteriaId":"AA4D368C-C167-4CF3-9013-FFC297D1D977"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta9:*:*:*:*:*:*","matchCriteriaId":"D3571DD2-5200-48AE-83C9-B1DFF3A1FEAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:rc1:*:*:*:*:*:*","matchCriteriaId":"782DFA55-BB92-41CD-A4DF-D986C387EB8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:rc2:*:*:*:*:*:*","matchCriteriaId":"2601CCF9-3A89-4EEF-9941-894AEAF89F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.10:beta1:*:*:*:*:*:*","matchCriteriaId":"BFE11FC5-8A49-434E-B828-AE7C011B03CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"265EC12C-6239-4367-9769-73AC999556F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:beta1:*:*:*:*:*:*","matchCriteriaId":"6DA772E3-B022-4F5E-8D43-C0BE64F187D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:beta2:*:*:*:*:*:*","matchCriteriaId":"C6589696-904B-4F7B-84F7-0E8D2F0ACFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:beta3:*:*:*:*:*:*","matchCriteriaId":"F5CF8EED-F09B-4AB8-A0F1-1F8DBB5385BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:rc1:*:*:*:*:*:*","matchCriteriaId":"C3909436-175A-4DC7-956F-C0905DA579FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"086C6335-7872-46A7-AEB1-9BE5AE5A788C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:beta1:*:*:*:*:*:*","matchCriteriaId":"CB0532A8-3F66-49D3-95BF-2E78DB6EC471"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:rc1:*:*:*:*:*:*","matchCriteriaId":"FED11C9F-4E2D-4364-AEEC-43E61531BA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"FF8233B1-04A0-4E25-97EE-CF466B48A12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"FA714E7E-05EF-4598-9324-887BC66C675E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"C5CF3B73-D3B9-4D76-B411-C837BCE0806E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:rc1:*:*:*:*:*:*","matchCriteriaId":"CEC7C52B-0D8D-4509-B9B5-B12E54EA3A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:rc2:*:*:*:*:*:*","matchCriteriaId":"AB0514ED-C8F8-4F15-A40F-04D643F3DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:rc3:*:*:*:*:*:*","matchCriteriaId":"D77DCDC0-29DD-4BC8-BE30-3A348963F821"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D1752D91-3468-4E22-B60F-6789B3CBD7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F433AA7E-A780-4D45-AD1A-5A4CE1F3FCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"93E210A7-489B-4EA7-A840-599523157DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"B37565FA-72F5-4063-8D7A-97BC269F020B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc1:*:*:*:*:*:*","matchCriteriaId":"434AED09-680D-43BC-B9CA-E78028035CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc2:*:*:*:*:*:*","matchCriteriaId":"009AF32A-19B9-4E56-B5D2-2D19082EF102"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2643AA61-AB01-4252-8E50-81D5C74F8707"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc5:*:*:*:*:*:*","matchCriteriaId":"02552E07-D9C8-4DF8-AD63-B3A7B5C2C2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"BC8FA821-818E-4BC7-834B-94EB5C042390"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F3FBF3D3-95A6-4869-8A69-F0E5ECA40220"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.21:rc1:*:*:*:*:*:*","matchCriteriaId":"425B207B-D11B-468B-A2C6-BDF276AE4264"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.21:rc2:*:*:*:*:*:*","matchCriteriaId":"F8B0055B-D0F1-4D8C-AE96-06315FFCC602"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"D07785D0-E995-4208-AB8C-43B320D291F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.22:rc1:*:*:*:*:*:*","matchCriteriaId":"A42AC8B9-BEB2-4495-8A42-2AEDB29A3DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"152DDD6E-CF56-4E1C-BE4D-C7BC0FD9B08C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:rc1:*:*:*:*:*:*","matchCriteriaId":"76C2D14E-FD1C-430A-AC08-D61F997D8BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:rc2:*:*:*:*:*:*","matchCriteriaId":"5B34C747-1D67-458A-B9D1-FA61954F7067"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:rc3:*:*:*:*:*:*","matchCriteriaId":"16E618FC-38AA-477A-8F8E-BC5BFB0713C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:rc4:*:*:*:*:*:*","matchCriteriaId":"0149BCA7-DCFC-449B-8AD5-DC6F9BBC80B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:rc5:*:*:*:*:*:*","matchCriteriaId":"31D2BD41-12CE-47F1-ABD5-BE7AFFABF96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"19BBA666-4473-4C6D-BF48-34EF3F09AD7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.24:rc1:*:*:*:*:*:*","matchCriteriaId":"75767F08-B52A-412D-ADA8-1E23777DA2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"B7DDF6CC-7997-47E7-96D3-8DC10F1D17F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"854C857C-762D-400D-AFB6-3353558D0D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"BB239211-BF7F-4357-B19F-221147CFC37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"A1926DD0-0A9B-4F9D-BB4F-AC7AB0B3F0E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:*","matchCriteriaId":"2763A6C7-DBBA-4E2A-917C-B6FF524B9891"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:rc1:*:*:*:*:*:*","matchCriteriaId":"D357DF0B-E6CB-4E24-9AE3-6A2C9A422AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:rc2:*:*:*:*:*:*","matchCriteriaId":"8C5BFEAD-9028-4F69-AB72-6004B0885A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:rc3:*:*:*:*:*:*","matchCriteriaId":"9277C1BB-81B7-4971-B68B-20672AEC1644"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:rc4:*:*:*:*:*:*","matchCriteriaId":"588913EA-69A8-4053-9181-37FB0E8DA273"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:rc5:*:*:*:*:*:*","matchCriteriaId":"D7D20090-A8E7-47D8-AD67-327B01315BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.27:rc6:*:*:*:*:*:*","matchCriteriaId":"896D47F2-4F84-4F32-9F94-90F9B5F36BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:*","matchCriteriaId":"E7DECDF8-7742-4D58-99FA-100A01748B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.28:rc2:*:*:*:*:*:*","matchCriteriaId":"01590CB5-4BAA-43CC-802F-3486EAD52BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.28:rc3:*:*:*:*:*:*","matchCriteriaId":"6DEAD5D0-7D13-4B46-AC43-3F0A5291A53B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.28:rc4:*:*:*:*:*:*","matchCriteriaId":"45E0E86E-3932-4EE2-B34C-D5861FD16187"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.28:rc5:*:*:*:*:*:*","matchCriteriaId":"C6435C47-5DC0-4EB6-984D-9231EB334AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.28:rc6:*:*:*:*:*:*","matchCriteriaId":"2DF231E5-CD60-4D4D-9A08-443C8CA500F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:*","matchCriteriaId":"CA4FD3B1-3A68-4122-AA50-31BFC6C50408"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.29:beta1:*:*:*:*:*:*","matchCriteriaId":"828BE0B5-8DF7-4C29-B55B-6AA01FBFD004"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.29:rc1:*:*:*:*:*:*","matchCriteriaId":"B654AFC2-0A1D-477F-A922-B235B9EF83D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.29:rc2:*:*:*:*:*:*","matchCriteriaId":"100CCE68-F893-441B-ABF4-DAF968BD623C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.29:rc3:*:*:*:*:*:*","matchCriteriaId":"B3E393C0-85F8-49E4-929C-A390E0F3D884"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:*","matchCriteriaId":"45790331-CE26-457F-8649-F027703E73EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.30:rc1:*:*:*:*:*:*","matchCriteriaId":"A840A036-BBE0-4DAC-A7D9-11A3C48FC131"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:*","matchCriteriaId":"0B0BFE2D-5C7B-42E0-B783-8C5907CA8635"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.31:rc01:*:*:*:*:*:*","matchCriteriaId":"6D366AD3-5FC2-4B75-8002-D966DC337261"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7CD993C1-70B6-4ACB-B958-94E7EF973A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F008946C-43E9-4ECD-AE9F-486A4686AE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6A4D6BB0-8E1A-49A4-BBC9-CBFA252C92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CFE1DB59-0A60-432B-9D88-906C4FE6D6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"C111BDD4-2A52-4FB7-8D21-6049A10BCDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"6B33807C-8E7B-4A04-BE92-59C1B845AD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B1614466-8EAC-4404-A674-EFFE0FFFBDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta1:*:*:*:*:*:*","matchCriteriaId":"FF2D5068-5BF3-425C-8B1A-E12E3D3CD8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta2:*:*:*:*:*:*","matchCriteriaId":"BF4F7833-4F88-4C54-AEC7-3C4FB797AE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta3:*:*:*:*:*:*","matchCriteriaId":"F2A973ED-CA5B-4A18-ACAB-1542E3866896"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta4:*:*:*:*:*:*","matchCriteriaId":"FA737702-6335-42F9-99B9-856D531B70F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8EAD9719-2736-40AE-BBEB-8BA627E8DF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"62693E5F-2EF6-49B5-9946-42CE61F4ACFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"65ACA253-BDE7-4CAE-8F74-71EBA4728358"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"9C776F58-A76E-4ED3-825B-52ADFB38D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta3:*:*:*:*:*:*","matchCriteriaId":"FF62B46E-37C4-426A-8854-E961BEB543E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta4:*:*:*:*:*:*","matchCriteriaId":"C5EDDB54-70C6-41D0-AC5C-C10F8D107964"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta5:*:*:*:*:*:*","matchCriteriaId":"CAEAB037-F146-444F-A867-D08BD48DA6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta6:*:*:*:*:*:*","matchCriteriaId":"4962A86F-C9F5-4F03-AFCD-D2E6FD08BD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"47CF2A43-2D15-4D70-A424-C12053D1A6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"6AF8999B-86FF-4EC2-8EF3-C7461A6EBF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"F79E13B4-A826-47E9-BE30-E5D9864E8681"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"C6577A0A-B689-424E-BAAE-BD5DF2615311"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc4:*:*:*:*:*:*","matchCriteriaId":"6FA7418E-2F52-4F24-8722-8CA9781943F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc5:*:*:*:*:*:*","matchCriteriaId":"BABFD5AE-95DD-478E-8E55-1541C4EF3D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc6:*:*:*:*:*:*","matchCriteriaId":"511E1319-C882-4761-ACD5-84617B78578E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:beta1:*:*:*:*:*:*","matchCriteriaId":"27A6EDED-CB33-4C80-B9C0-9774CC1455B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:beta2:*:*:*:*:*:*","matchCriteriaId":"0CB4A1D0-2360-4191-AE7C-0B1B4E0FB34B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:beta3:*:*:*:*:*:*","matchCriteriaId":"2D252442-7A38-4AD7-9CEA-DD5B090726DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"203E0B7E-7ED5-4F89-8E12-BDA590DC7DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:beta1:*:*:*:*:*:*","matchCriteriaId":"64DCD92E-792F-4A6F-AF83-1B04E3B9F62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:beta2:*:*:*:*:*:*","matchCriteriaId":"225CEEB5-1CE9-4818-A299-77516A26F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"1A4DD7CF-90BD-4DD3-9E1A-7D2F527CAC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6BA5FE79-5C4C-47E5-9DF2-CEF37F139389"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:rc3:*:*:*:*:*:*","matchCriteriaId":"A434DDF7-A9D4-42AE-8A92-41E45C42B683"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta1:*:*:*:*:*:*","matchCriteriaId":"1608ABE4-8EE7-4280-B8E0-D4518BA1D706"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta2:*:*:*:*:*:*","matchCriteriaId":"0AECC80A-1D17-4BFD-92D6-6CFBAF88BEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta3:*:*:*:*:*:*","matchCriteriaId":"F29E6D8C-3691-4451-AB5F-48574C98A551"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta4:*:*:*:*:*:*","matchCriteriaId":"D8C90D1A-B862-4B43-B5BB-67DE455DFC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"5C56374A-0D57-4545-B538-20964F392996"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc2:*:*:*:*:*:*","matchCriteriaId":"08722144-6645-4321-8340-6E68DF1AFE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc3:*:*:*:*:*:*","matchCriteriaId":"2C30D261-CBE2-4E3A-9ED0-9D2DFB04D465"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc4:*:*:*:*:*:*","matchCriteriaId":"665B34A9-4331-4FC4-BB78-D6EE89827D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc5:*:*:*:*:*:*","matchCriteriaId":"4B9D5E28-E8E0-47F6-8728-18F2DDE0DCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.7:beta1:*:*:*:*:*:*","matchCriteriaId":"093976B1-BC7C-4671-B4B1-0FB94D0F699A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.7:beta2:*:*:*:*:*:*","matchCriteriaId":"C248EEB8-1510-40A4-B37B-E8F9AAE8687C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta1:*:*:*:*:*:*","matchCriteriaId":"51C96068-1E81-430D-9C5F-A4273CA0BBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta2:*:*:*:*:*:*","matchCriteriaId":"243E4DB3-2553-48E9-9DA2-8AF955389EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta3:*:*:*:*:*:*","matchCriteriaId":"E85CE44F-46D0-46F4-B4AB-271A9BC271EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta4:*:*:*:*:*:*","matchCriteriaId":"2716FBF4-5BDB-4D76-AC79-AB9158DA1241"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta5:*:*:*:*:*:*","matchCriteriaId":"CFD6B80F-7574-4A9F-AC40-7E357EE3F50F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc1:*:*:*:*:*:*","matchCriteriaId":"244D10AC-1C34-4D18-AB06-F9C2C9F564BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc2:*:*:*:*:*:*","matchCriteriaId":"8DBEEA4A-8175-4E06-8346-93541868A6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc3:*:*:*:*:*:*","matchCriteriaId":"C3CC9D97-1C0F-4A48-9F2A-A74960A84D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc4:*:*:*:*:*:*","matchCriteriaId":"A692466A-6258-4D90-B362-9797B03CDB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc5:*:*:*:*:*:*","matchCriteriaId":"9BE92591-5AD8-47D0-BDDE-350C2BFB5736"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta1:*:*:*:*:*:*","matchCriteriaId":"B5E6F6A5-0844-4625-8AA4-E1CA8E15C1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta10:*:*:*:*:*:*","matchCriteriaId":"786B4160-C9E9-4EDD-83D9-741576FDDF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta2:*:*:*:*:*:*","matchCriteriaId":"039D87A3-49FA-4C02-B137-42D4407DD4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta3:*:*:*:*:*:*","matchCriteriaId":"FEEA0BB0-24E2-4D13-ACD6-BC4DD7878AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta4:*:*:*:*:*:*","matchCriteriaId":"D7981F07-C65C-4AA8-8653-786FD6A50BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta5:*:*:*:*:*:*","matchCriteriaId":"EE280017-8064-416B-AFA2-3DC8D2B1331B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta6:*:*:*:*:*:*","matchCriteriaId":"CA584B09-52A3-4D87-8B72-B704069766E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta7:*:*:*:*:*:*","matchCriteriaId":"A10C7AE8-85C0-4CD1-910B-320FE52AD542"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta8:*:*:*:*:*:*","matchCriteriaId":"6763A6C3-53E3-41AF-B5DF-4ACDC5371AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta9:*:*:*:*:*:*","matchCriteriaId":"1693150F-E485-47D9-A957-C0A8FEFC8844"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"7F08FBEB-3FA9-4C57-9CD7-717C41F352C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"9E83B68F-B0E2-4C37-A711-1714652AB961"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"4F17A4B7-99C2-407A-9536-4B54EDC02899"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"F854F244-78C9-46C6-8862-1DA58912FCE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta4:*:*:*:*:*:*","matchCriteriaId":"9A4C883A-A2A3-4D5F-8114-CE9220FFF7B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta5:*:*:*:*:*:*","matchCriteriaId":"3544F0FF-3EEE-4902-B412-EB57D6AE7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta6:*:*:*:*:*:*","matchCriteriaId":"5F428FF4-21A8-4605-AFCD-E78F43E46AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta7:*:*:*:*:*:*","matchCriteriaId":"7132AA21-DC2F-4493-9BCC-27E3D8F075AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"B65F8362-934F-452D-8E86-0DB2E3C7B43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc2:*:*:*:*:*:*","matchCriteriaId":"934D0AB5-62FB-4EC1-971A-A1BA8EEAD008"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc3:*:*:*:*:*:*","matchCriteriaId":"5891F237-D1DB-4CCE-8A8B-D10E7EDCB926"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta1:*:*:*:*:*:*","matchCriteriaId":"E114E18D-2882-4843-9356-279C69ABCBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta2:*:*:*:*:*:*","matchCriteriaId":"5E271694-B8C8-4BCF-8B4A-0425BA50EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta3:*:*:*:*:*:*","matchCriteriaId":"E36CC085-34FF-4B84-8628-74BEEC686C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta4:*:*:*:*:*:*","matchCriteriaId":"06793BE6-3370-4FCB-A400-C6AF95D1E66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc1:*:*:*:*:*:*","matchCriteriaId":"DE742D36-3A33-4316-8326-FA2F1B228E83"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc2:*:*:*:*:*:*","matchCriteriaId":"25D0C5E1-4D8D-42EE-8C94-12D442181DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc3:*:*:*:*:*:*","matchCriteriaId":"3326F984-8312-4E7F-A269-0A06FAC8BE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc5:*:*:*:*:*:*","matchCriteriaId":"290CF6FC-3BD6-4974-9DEC-188B79DC816A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:beta1:*:*:*:*:*:*","matchCriteriaId":"782ABB64-C2F2-4326-A69F-75E514055C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:rc1:*:*:*:*:*:*","matchCriteriaId":"0EF9CEE2-8DB6-480F-970C-E19FEF31D0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:rc2:*:*:*:*:*:*","matchCriteriaId":"28C13A65-C0D6-4904-8C92-E5233D7E5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:beta1:*:*:*:*:*:*","matchCriteriaId":"38993FC7-12DD-4D75-8EC6-719C0AD66191"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:beta2:*:*:*:*:*:*","matchCriteriaId":"0CAF82B9-020B-48FD-BE3D-70B8A7A8CDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"C43481DF-59C5-4E9B-8CB9-49E4873B7263"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta1:*:*:*:*:*:*","matchCriteriaId":"BFFC71CB-0B01-4A34-85B8-8A27C1E7D451"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta2:*:*:*:*:*:*","matchCriteriaId":"EC53C1C7-ED9C-44C2-B446-0426E4C92D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta3:*:*:*:*:*:*","matchCriteriaId":"B996835E-97DB-47B1-80B9-BE757680CAFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta4:*:*:*:*:*:*","matchCriteriaId":"AC7256E6-502A-47A5-A692-90162AA40AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta5:*:*:*:*:*:*","matchCriteriaId":"53E7BDBC-5BF8-4BA3-959D-1D16ACD558D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta6:*:*:*:*:*:*","matchCriteriaId":"79B6B4A0-9B7E-4835-9F82-2B1D1AF955AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc1:*:*:*:*:*:*","matchCriteriaId":"27BBC74C-51A3-48BB-B867-3A5F58AD8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc2:*:*:*:*:*:*","matchCriteriaId":"3DEDAB32-9D5C-4F12-B9E4-ABEA615DC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc3:*:*:*:*:*:*","matchCriteriaId":"C3DA5585-140C-4F27-8654-BCFCB12659B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc4:*:*:*:*:*:*","matchCriteriaId":"AA8F6085-9769-44DE-8E43-FAB7C7791A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc5:*:*:*:*:*:*","matchCriteriaId":"5A4D700F-AA36-4A5B-8BD3-3BD9A452D743"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:beta1:*:*:*:*:*:*","matchCriteriaId":"D6045135-54AF-4B83-9279-47BB1DB67172"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:beta2:*:*:*:*:*:*","matchCriteriaId":"DBB7D1F1-7959-4459-827C-90B193F58269"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"62A6F2F0-E088-458F-813F-5B45EA01B77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:beta1:*:*:*:*:*:*","matchCriteriaId":"96308F2E-E2DE-4C0F-B0A6-7FDFFF67A0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:beta2:*:*:*:*:*:*","matchCriteriaId":"7A21785C-989F-4E72-932B-E77892EF492A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc1:*:*:*:*:*:*","matchCriteriaId":"0D832C4A-0793-4B64-944D-086CF614CAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc2:*:*:*:*:*:*","matchCriteriaId":"7C8E2232-7077-4CE4-9141-80F2F744F0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc3:*:*:*:*:*:*","matchCriteriaId":"38CDA418-F580-4625-9D84-F01EA5D0FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc4:*:*:*:*:*:*","matchCriteriaId":"D0FB8DC5-ABD5-41BE-99EC-E610504D6F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta1:*:*:*:*:*:*","matchCriteriaId":"53B41406-956A-48C9-9CDA-D7257D19E6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta10:*:*:*:*:*:*","matchCriteriaId":"B100CFD4-788C-44BF-A55D-225F72314A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta11:*:*:*:*:*:*","matchCriteriaId":"7B6BFCBC-F3E9-4CDD-833F-01D51594B0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta12:*:*:*:*:*:*","matchCriteriaId":"589DC20E-E642-4BC7-83CD-01323D7F6236"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta13:*:*:*:*:*:*","matchCriteriaId":"6A9B81C1-EAF8-44B6-A4FD-2568FFBB6FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta14:*:*:*:*:*:*","matchCriteriaId":"22EBF19B-7E53-4627-AE87-6B7C4ACD88F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta15:*:*:*:*:*:*","matchCriteriaId":"43744C82-D271-4BF3-9AD8-A48C1B5BA33F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta16:*:*:*:*:*:*","matchCriteriaId":"FD68995C-816C-4E25-B8B3-0BC808490D73"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta17:*:*:*:*:*:*","matchCriteriaId":"6EDC3AE7-569F-4016-B35E-E8B8B3456959"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta18:*:*:*:*:*:*","matchCriteriaId":"17068432-BFE0-4BE1-A86B-7D6562D18103"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta19:*:*:*:*:*:*","matchCriteriaId":"A0F0F2AF-748A-411A-8B95-45A04800FF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta2:*:*:*:*:*:*","matchCriteriaId":"945C0B80-E562-4495-849E-23EE406D2EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta20:*:*:*:*:*:*","matchCriteriaId":"5E91B287-CDFC-4791-95D5-54AC847877D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta21:*:*:*:*:*:*","matchCriteriaId":"1F09C15E-E20C-473D-AF13-5509669DA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta22:*:*:*:*:*:*","matchCriteriaId":"36FD7096-C215-4CCA-B0BE-244E9708E947"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta23:*:*:*:*:*:*","matchCriteriaId":"4AC8DAFE-64A5-47C6-BE99-093E744181B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta24:*:*:*:*:*:*","matchCriteriaId":"C075C36D-D191-4165-A2A8-A8BA6AD93862"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta25:*:*:*:*:*:*","matchCriteriaId":"F7E9A4DE-C0B7-4951-97D2-26EFFE065A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta26:*:*:*:*:*:*","matchCriteriaId":"6B9FC583-AA79-4ED1-924B-DE58FBB88385"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta27:*:*:*:*:*:*","matchCriteriaId":"727FA534-FB49-4784-A56E-D709071FFEE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta28:*:*:*:*:*:*","matchCriteriaId":"17628553-688B-4574-9B2A-035937225DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta29:*:*:*:*:*:*","matchCriteriaId":"E96F2F5A-A881-4EDC-965F-43984EA06151"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta3:*:*:*:*:*:*","matchCriteriaId":"26E9442B-FCA7-42A3-9E73-343D9FF11985"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta30:*:*:*:*:*:*","matchCriteriaId":"1EB24053-49FC-488C-8DC4-12F5A485EC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta31:*:*:*:*:*:*","matchCriteriaId":"653700ED-B2E3-4DD1-99A1-ED0B4504E628"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta4:*:*:*:*:*:*","matchCriteriaId":"101240B5-FAC7-4D47-9C4A-840D06E082EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta5:*:*:*:*:*:*","matchCriteriaId":"608088FF-8EED-4F05-96EA-0E23F669C078"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta6:*:*:*:*:*:*","matchCriteriaId":"82401AB8-5432-4D75-ADC2-A310132EB9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta7:*:*:*:*:*:*","matchCriteriaId":"CECEDABC-F229-43F7-9795-9E87198424D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta8:*:*:*:*:*:*","matchCriteriaId":"712E5798-A0FC-44E7-972A-D2EF66F5C793"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta9:*:*:*:*:*:*","matchCriteriaId":"82690AE3-BFFA-4616-AE30-35A6D21DFC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4D0082F7-DDD3-4266-B604-D1E2958ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc2:*:*:*:*:*:*","matchCriteriaId":"00A32AD4-38C7-41BE-8042-9BCED336AA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc3:*:*:*:*:*:*","matchCriteriaId":"BC96DBDE-15A7-4C63-8C71-AA5CD158E306"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc4:*:*:*:*:*:*","matchCriteriaId":"834A6D33-2334-4361-92CE-8AECAF3614CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc5:*:*:*:*:*:*","matchCriteriaId":"AFC3A80A-4C35-419F-B576-40A3FAD37723"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc6:*:*:*:*:*:*","matchCriteriaId":"D0FCC174-9216-433D-A5CB-A7C275DD9D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta01:*:*:*:*:*:*","matchCriteriaId":"01EF52B3-BAD3-4E0C-B19C-3465A036B025"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta02:*:*:*:*:*:*","matchCriteriaId":"1685F3BF-635D-43DD-855D-7666D807AE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta03:*:*:*:*:*:*","matchCriteriaId":"BAA8FF97-98D2-425F-935C-36951DFEE029"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta04:*:*:*:*:*:*","matchCriteriaId":"1CEE9078-6B9F-4BA1-A6BE-25743B02FE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"BE1A8933-9958-458B-A511-D018B7CA7D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"100BF4B6-2A63-416A-B19F-722A9B44F126"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc3:*:*:*:*:*:*","matchCriteriaId":"4DD8FB59-2260-4343-B4D6-279ED7D7D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc4:*:*:*:*:*:*","matchCriteriaId":"FDDCE2DE-94B7-460D-8BBB-26ACA4847807"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc5:*:*:*:*:*:*","matchCriteriaId":"A812C450-8E1F-4667-99EC-7237E1E319E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc6:*:*:*:*:*:*","matchCriteriaId":"AD94AB7F-B7CF-42B0-AB71-23F42F3F1067"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc3:*:*:*:*:*:*","matchCriteriaId":"5460DA6B-6F81-4B8C-9D8F-DB946E3F33EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta1:*:*:*:*:*:*","matchCriteriaId":"45E92521-FE62-4940-B194-A8482538401B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta2:*:*:*:*:*:*","matchCriteriaId":"6DF7D5B4-A8BD-4F3B-8DB3-D5AB94086A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta2-1.2.21:*:*:*:*:*:*","matchCriteriaId":"B0A244FC-545E-4041-B922-B1B640E7E371"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta3:*:*:*:*:*:*","matchCriteriaId":"40F8973E-8150-4834-8D9B-370F3664E894"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta3-1.2.21:*:*:*:*:*:*","matchCriteriaId":"B9C93F2F-533D-4563-95F2-E94A2CCE9C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta4:*:*:*:*:*:*","matchCriteriaId":"73045C50-73FE-4162-8E8B-7721131E4396"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta4-1.2.21:*:*:*:*:*:*","matchCriteriaId":"C89DFAAD-279A-462D-BF72-D75CC24E72E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1879D7C8-ABF1-4ECE-BBC7-71978695D4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:rc1-1.2.21:*:*:*:*:*:*","matchCriteriaId":"1B27B3A2-04E1-4261-AA70-30EE2AA934F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta01:*:*:*:*:*:*","matchCriteriaId":"CA60D3F3-149B-4A76-9F35-4A0A127ADF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta02:*:*:*:*:*:*","matchCriteriaId":"3D625A71-5F2D-446A-BD69-1470B4127DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta03:*:*:*:*:*:*","matchCriteriaId":"00C85EF8-8D8A-4ED8-B55B-2182421626CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta04:*:*:*:*:*:*","matchCriteriaId":"6D65DCF8-D9A6-4A9E-8171-C52E12EB1476"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta05:*:*:*:*:*:*","matchCriteriaId":"C5114A9B-263F-4BBF-9A6A-F6E0900CDD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:rc01:*:*:*:*:*:*","matchCriteriaId":"4CD12B3A-27B6-4BD4-90B5-874B677689FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta01:*:*:*:*:*:*","matchCriteriaId":"27988956-B3F4-428A-B369-C5E01A2F9102"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta02:*:*:*:*:*:*","matchCriteriaId":"B4D45B16-C278-4ABF-8B91-CFA0AB384290"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta03:*:*:*:*:*:*","matchCriteriaId":"247153A0-CF83-4D6E-A657-5D8D217D8EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:rc01:*:*:*:*:*:*","matchCriteriaId":"53D03C1D-684A-4BA5-841B-C414AD244DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta01:*:*:*:*:*:*","matchCriteriaId":"9F89EDB5-A195-479B-BEFB-E0A186A4A9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta02:*:*:*:*:*:*","matchCriteriaId":"02BAC6A6-FBE9-48CD-9B4E-FC570684922B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta03:*:*:*:*:*:*","matchCriteriaId":"E695F515-AE7E-48AB-999C-75B62BEA0BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta04:*:*:*:*:*:*","matchCriteriaId":"D448D4A5-D827-4FF8-BAC1-E25FD8F01C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta05:*:*:*:*:*:*","matchCriteriaId":"935F2297-6CB4-4ABB-9F4D-F11708CDC069"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta06:*:*:*:*:*:*","matchCriteriaId":"25ED23F7-DF30-46B2-99EF-3924E22C1870"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:rc01:*:*:*:*:*:*","matchCriteriaId":"6FB56358-46E4-4999-A311-5E1819A6D5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:rc02:*:*:*:*:*:*","matchCriteriaId":"F508CFA5-5602-445C-9E18-71B6A625F9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta01:*:*:*:*:*:*","matchCriteriaId":"897D42F6-202B-425A-BF0D-76D1A74D8E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta02:*:*:*:*:*:*","matchCriteriaId":"50300181-3691-4EA2-B779-1C9CF59E08FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta03:*:*:*:*:*:*","matchCriteriaId":"CABA31D9-9EC0-4447-9C5E-8BC5DF5F431D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta04:*:*:*:*:*:*","matchCriteriaId":"D4568552-91F6-4E05-ADA5-4127CBD4D3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta05:*:*:*:*:*:*","matchCriteriaId":"D72D51C0-1044-4A74-823F-7123340FB9BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta06:*:*:*:*:*:*","matchCriteriaId":"BF7EE024-3E34-4452-A832-751BBC109086"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:rc01:*:*:*:*:*:*","matchCriteriaId":"947395DE-A911-47B3-983D-B5D23672068D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta1:*:*:*:*:*:*","matchCriteriaId":"DE24B381-8144-43C2-94EE-B5702B7B5EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta10:*:*:*:*:*:*","matchCriteriaId":"794EB3E2-2111-44A9-9980-417613450E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta11:*:*:*:*:*:*","matchCriteriaId":"A8C106DD-69E9-41FE-8642-74A1A6FF1123"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta12:*:*:*:*:*:*","matchCriteriaId":"953C2842-7F1D-4EF4-A2D2-4A3CA2D6D3D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta13:*:*:*:*:*:*","matchCriteriaId":"BB29C385-6A32-4857-AF7A-CA609C90C824"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta14:*:*:*:*:*:*","matchCriteriaId":"15B8C015-7E59-4B05-91E1-EA3EF2B22F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta15:*:*:*:*:*:*","matchCriteriaId":"0CA68AE1-6C85-4657-BA59-8C03E7C2B748"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta16:*:*:*:*:*:*","matchCriteriaId":"76940407-3D93-4528-ADC9-CE98F7C0FA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta17:*:*:*:*:*:*","matchCriteriaId":"04433179-590B-448E-8192-5661A95908DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta18:*:*:*:*:*:*","matchCriteriaId":"5D3F5172-3B73-4A90-A061-8F831785B6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta19:*:*:*:*:*:*","matchCriteriaId":"BAC754C3-8B70-48A8-9DB8-9336534633C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta2:*:*:*:*:*:*","matchCriteriaId":"6BF05CA3-1200-4789-B5B3-537F9756F322"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta3:*:*:*:*:*:*","matchCriteriaId":"A2AA4F92-A968-4F4D-AA74-375B425E271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta4:*:*:*:*:*:*","matchCriteriaId":"42A1CD34-107B-4B46-87A5-40B93CB3C612"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta5:*:*:*:*:*:*","matchCriteriaId":"8611DAC7-310F-44BD-B9DD-24C44F50ED62"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta6:*:*:*:*:*:*","matchCriteriaId":"C6CF21B5-43AB-4802-AEE5-944B32BB8AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta7:*:*:*:*:*:*","matchCriteriaId":"C0CA8A77-4558-4822-9F6A-9C11256E1241"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta8:*:*:*:*:*:*","matchCriteriaId":"404F62B4-6D97-4075-B127-F9E3905F49A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4:beta9:*:*:*:*:*:*","matchCriteriaId":"B91A59A4-71BF-4428-8036-E08091FA8663"}]}]}],"references":[{"url":"http://libpng.sourceforge.net/Advisory-1.2.26.txt","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29678","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29792","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29992","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30009","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30157","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30174","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30402","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30486","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31882","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33137","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34152","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34388","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35258","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35302","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-15.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-10.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-15.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:156","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-003.html","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/44364","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0333.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/490823/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/491424/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/503912/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28770","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019840","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0007.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1225/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1451","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1462","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1560","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41800","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10326","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6275","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00033.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00080.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00111.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00721.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00951.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00960.html","source":"secalert@redhat.com"},{"url":"http://libpng.sourceforge.net/Advisory-1.2.26.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0333.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490823/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491424/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503912/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1225/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00951.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00960.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1383","sourceIdentifier":"cve@mitre.org","published":"2008-03-18T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate."},{"lang":"es","value":"La función docert en el archivo ssl-cert.eclass, cuando es usada por src_compile o src_install en Gentoo Linux, almacena la clave SSL en un binpkg, lo que permite a los usuarios locales extraer la clave del binpkg, y causar que múltiples sistemas que utilizan este binpkg tengan la misma clave SSL y certificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"}]}]}],"references":[{"url":"http://osvdb.org/43479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29436","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-30.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28350","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=174759","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41336","source":"cve@mitre.org"},{"url":"http://osvdb.org/43479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200803-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=174759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1384","sourceIdentifier":"cve@mitre.org","published":"2008-03-27T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions)."},{"lang":"es","value":"Desbordamiento de entero en PHP 5.2.5 y versiones anteriores permite a atacantes dependientes del contexto provocar una denegación de servicio y posiblemente tener otros impactos no especificados a través de un parámetro de formato printf con un especificador de gran anchura, en relación a la  función php_sprintf_appendstring en formatted_print.c y posiblemente otras funciones para cadenas de formato (también conocido como funciones *printf)."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat do not consider this to be a security vulnerability:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-1384","lastModified":"2008-03-28T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.5","matchCriteriaId":"18255FF5-3F40-483F-85DC-21D9B6B4FE07"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2027.2.547.2.1120&view=markup","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30345","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/52","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1572","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489962/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492671/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28392","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41386","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"cve@mitre.org"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2027.2.547.2.1120&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/52","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489962/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492671/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1385","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en el plugin Top Referers (también conocido como referrer) de Serendipity (S9Y) anterior a 1.3.1 permite a atacantes remotos inyectar código web o HTML de su elección a través de una cabecera HTTP Referer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"37C68AE2-6841-4FF8-BECB-6381224C2C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*","matchCriteriaId":"62233D77-9838-48AB-9A2D-F4EAA9E237EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"F47E7512-FDB5-45F2-80B2-9BDAB856E856"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*","matchCriteriaId":"5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*","matchCriteriaId":"925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C739BCD2-1722-42E0-9560-752DBBF05BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B7515A9A-1FD0-484E-97CB-5969729804DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"40A451C0-D4D8-43FF-BFC9-E525138DCA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"9E1F8976-0691-4C47-9BA3-BC01BA808BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7B2FF146-8CEF-48C8-81A3-08B4736DC27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"5986FA95-D0F8-4E41-A445-F2F0EFEE872A"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"22A4B77F-67DC-4D25-8948-0C0B59C38E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.9:*:*:*:*:*:*:*","matchCriteriaId":"E24AD8E2-AEB7-4D73-9B15-AE0B293A0825"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"47CE7E31-9C42-434E-B1B7-F38966514405"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F5193D1-4BB6-4B2C-8361-BA1C7BE7524B"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B62B695-74A2-49AA-87EF-38F129A94755"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6D4ACB96-F32D-40E2-A9F3-A3CD78658C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B027CFC-5E0E-45D3-82BC-8F59F386D188"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3C6CB12-9D14-4D5C-8FC0-02179436B487"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1:*:*:*:*:*:*:*","matchCriteriaId":"23D55BCF-58D1-48D8-9BA2-2884F6126F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"707176E4-B735-4A6A-AC7D-01250663D25D"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0132EF3F-F9D8-4CEC-A774-4929B4DE6E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2217392-37F3-4CC6-85DE-33CB8841814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"706E7CF6-C396-4A19-B87C-05BA8C8D9EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D0C422BF-FBDE-4DD2-BB55-868B19890479"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A1E92848-05FA-45EE-BD8A-98E337131892"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.html","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/193-Serendipity-1.3.1-released.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://int21.de/cve/CVE-2008-1385-s9y.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491176/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28885","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019915","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1348/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41965","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.s9y.org/archives/193-Serendipity-1.3.1-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://int21.de/cve/CVE-2008-1385-s9y.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491176/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1348/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1386","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the installer in Serendipity (S9Y) 1.3 allow remote attackers to inject arbitrary web script or HTML via (1) unspecified path fields or (2) the database host field.  NOTE: the timing window for exploitation of this issue might be limited."},{"lang":"es","value":"Múltiples vulnerabilidad de ejecución de comandos en sitios cruzados en el instalador de Serendepity (S9Y) 1.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) campos de ruta sin especificar o (2) el campo \"host\" de la base de datos. NOTA: la ventana de tiempo para vulnerar esta característica podría estar limitada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.3:*:*:*:*:*:*:*","matchCriteriaId":"96AD0492-E4D4-4A43-80EF-5F38F62DFF25"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.html","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/193-Serendipity-1.3.1-released.html","source":"cve@mitre.org"},{"url":"http://int21.de/cve/CVE-2008-1386-s9y.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491176/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28885","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019915","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1348/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41967","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.s9y.org/archives/193-Serendipity-1.3.1-released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://int21.de/cve/CVE-2008-1386-s9y.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491176/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1348/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1387","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats."},{"lang":"es","value":"ClamAV en versiones anteriores a 0.93, permite a atacantes remotos provocar una denegación de servicio (consumo de la CPU) a través de un archivo ARJ manipulado, como se ha demostrado por el paquete de pruebas PROTOS GENOME para formatos de archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B116E9A-0646-4AD5-A531-C35124AB02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3F3C25BA-72EF-4588-A90A-B323A3407FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"01FDAEBC-0B2E-4F60-8B59-13A93B1AF206"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*","matchCriteriaId":"E021DD71-1845-4899-BB87-8445147AD93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"}]}]}],"references":[{"url":"http://int21.de/cve/CVE-2008-1387-clamav.html","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29975","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"cve@mitre.org"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"cve@mitre.org"},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490863/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28784","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41822","source":"cve@mitre.org"},{"url":"https://www.clamav.net/bugzilla/show_bug.cgi?id=897","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"cve@mitre.org"},{"url":"http://int21.de/cve/CVE-2008-1387-clamav.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490863/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.clamav.net/bugzilla/show_bug.cgi?id=897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1389","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an \"invalid memory access.\""},{"lang":"es","value":"libclamav/chmunpack.c en the chm-parser en ClamAV anterior a 0.94, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un archivo CHM mal formado, en relación con un \"acceso no válido a memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.93.3","matchCriteriaId":"D68C0C00-CE03-418F-BC77-7C38468E15BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.11:*:*:*:*:*:*:*","matchCriteriaId":"B03FC481-8143-411F-AF74-86433188346D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.12:*:*:*:*:*:*:*","matchCriteriaId":"7A6E1E0C-7240-47A7-8C35-2C48D1C56F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.13:*:*:*:*:*:*:*","matchCriteriaId":"057EEF4D-3101-4575-83E3-34BA2823DE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.14:*:*:*:*:*:*:*","matchCriteriaId":"F86DA3C9-C6D5-4B04-9EAA-54350BE8CB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.14:pre:*:*:*:*:*:*","matchCriteriaId":"FB031F8A-2D70-46F4-BA98-64CACCF5A394"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"06A9B47A-8FC3-4BD2-A55F-9150307619B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"7068873F-E45D-4471-B55E-BF7B0E3AFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"695F0967-1529-42DB-8978-8B9192F7F615"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"BB72ED94-7832-43CF-81CF-27F88CAC6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"802BFF6B-5D9F-49AE-B96A-86A85E0F1034"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"5F7B2943-BC22-4735-8AA5-AADBEA685FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C6257524-7FC5-40CA-9BDA-82B8565C5BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"35EBA938-DC66-40EA-8C66-38296AB57B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"659B4C39-0F0F-40C5-9B7E-0D00330611F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"508C140C-2F87-4270-85B0-00EA6678A344"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"3033A4A2-47E9-434F-BA0A-0F2476A67899"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"0C1EDFB4-B0C8-4832-BCA1-C35D28877581"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"4EF47B2A-4520-4872-987D-2EF88344ADB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc:*:*:*:*:*:*","matchCriteriaId":"5909491A-3D43-4648-B0F9-983BF2BE13B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc2:*:*:*:*:*:*","matchCriteriaId":"3DB0BD14-60D1-4482-A91E-AFA501DE1F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc3:*:*:*:*:*:*","matchCriteriaId":"FFFDE6BB-38A1-4074-A3E1-E59BB5E7ED74"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"79FC2D39-6F8E-4267-8D4B-0C59D28A0E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"FC31E071-6BB8-45FE-AA09-E7E459B549D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:rc1:*:*:*:*:*:*","matchCriteriaId":"89533C50-275D-440D-88B4-363B3DED39E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"53D884A1-305C-416A-9851-3A7D875FDC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"E58A6CBC-ED1C-430D-8F43-88694971A850"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"E330A535-A376-4BFF-BB1B-31E83370FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:rc1:*:*:*:*:*:*","matchCriteriaId":"E787E42E-3339-47FD-904E-5E3C73991CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:rc2:*:*:*:*:*:*","matchCriteriaId":"F21E03C7-0293-402C-ACAE-41E7F11B7AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"EDF94B1E-E8D4-4952-9081-1254F335445D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"8657268E-4C78-4565-9966-7329095A7905"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"8D20F0D5-2291-4F24-94DB-180CDF926B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:rc1:*:*:*:*:*:*","matchCriteriaId":"B8BD1ADF-C784-4E43-A6A5-09D416E96AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"A0E2884A-615F-4063-8FB7-EC157C3EC07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BC41B7-272F-44BB-BD48-6C9231402526"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"5F56722F-F61A-404B-B0B2-1C92C22D0436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"D00EBC44-B4AB-443F-A063-8C8CB64F5F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"FFFA6F1E-9F25-400C-B626-3B9EDA396913"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"2DB68680-FA6D-4235-90DA-E3DF0E5BB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"BC24A055-278C-4A78-8C68-AC7618EF3EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"8EFAC7BA-2A39-46A8-BF91-5537532F45D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"733CB165-98CD-4F8E-8A6D-07CF522634BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"40F14DB9-8437-4CEB-9D63-098FD9E604E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"A4C92175-5E97-4197-8495-25900134B652"}]}]}],"references":[{"url":"http://int21.de/cve/CVE-2008-1389-clamav-chd.html","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32699","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30994","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020805","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2484","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089","source":"cve@mitre.org"},{"url":"http://int21.de/cve/CVE-2008-1389-clamav-chd.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1390","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses."},{"lang":"es","value":"El servidor AsteriskGUI HTTP en Asterisk Open Source 1.4.x antes de 1.4.19-rc3 y 1.6.x antes de 1.6.0-beta6, Business Edition C.x.x antes de C.1.6, AsteriskNOW antes de 1.0.2, Appliance Developer Kit antes de la revisión 104704 y s800i 1.0.x antes de 1.1.0.2 genera valores ID de gestión no lo suficientemente aleatorios, lo que facilita a atacantes remotos secuestrar una sesión de gestión a través de una serie de adivinaciones de ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"593AA737-5AF3-4F7C-B74B-D3F37701C435"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D942B911-979A-4AC3-93D6-07E420171E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"84CB8C4A-F001-4DD7-8DFE-CB082B4BB969"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"96DB0240-E93D-4BDB-859B-B44C91996993"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0F4BA849-E092-404A-92CD-44C2D99AE971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2C7014B4-1860-49AD-9469-9954C3CC01C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"3D1F0056-0945-476C-982E-7B41EB420A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"A53DEC9D-B288-42CD-9387-57315AC98D72"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"89C1F33F-27B6-4C56-92FF-EB2861ABBC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"64E07CF3-073D-4705-96A6-13367D4F5CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"18D19CB0-E3D7-40DB-B0C0-B62BB6075267"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"77FB7CC1-BD0D-4F34-AB21-59CFD23C494C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"997FA3C7-1894-478A-ABF1-52DD2B0487E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"96E02BE0-BF4A-46C9-AFB5-47E8F18E3D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"292190EE-D9C8-4E3A-BB34-0ECD7B865482"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"7DAC55F9-1D43-4AA8-87C9-DB165442700B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"195B012E-0538-4140-9035-F5D1A442778B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"78AC03A7-41AB-45AF-AD89-291A7429B8A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"181C8E98-2138-4BFC-B6B0-1DA270AEE7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4_revision_95946:*:*:*:*:*:*:*","matchCriteriaId":"DB08F4FA-8600-4D21-A565-B3BF636634B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FEAE6729-D79A-49B8-9758-BA74A60A238A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05B437-C292-4AA0-8AFE-1CA07CD80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0102C4C0-1A7D-4AB7-9817-44E6B0DB761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4:*:*:*:*:*:*:*","matchCriteriaId":"81DDF486-4185-48EE-869E-0AA6726C31F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CF45A8E1-F6B1-42BD-9168-12062FA6EAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5757B9B-2759-439A-9A6D-CCDD6C8C8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FCD71268-EAA2-477B-8AC4-DE4853A262B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8:*:*:*:*:*:*:*","matchCriteriaId":"529B2115-A191-4F3F-8F8C-A38B7C45463A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:1.4:*:*:*:*:*:*:*","matchCriteriaId":"7E2D0508-C418-48CE-BF83-39F893688D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"5BC80EBD-14D3-44A6-A06F-0549722E0EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta8:*:*:*:*:*:*:*","matchCriteriaId":"7859797F-E9AD-4429-BD2C-A24EC24A5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC6FE17C-3B08-4675-9F73-5DC0C2438BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:beta_5:*:*:*:*:*:*:*","matchCriteriaId":"B12A09BE-1EE0-46D5-B3F0-E8847409A49A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:beta_6:*:*:*:*:*:*:*","matchCriteriaId":"7A5A734E-1DD3-4924-8AC1-97048FA3270F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:beta_7:*:*:*:*:*:*:*","matchCriteriaId":"3AE2F09E-4B5A-4EDF-A48A-BCBBAA80156B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C3A0A08-4107-4B8B-AE7E-DC23849A54DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9320928D-D83C-4258-AF62-AB2D1F50D972"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"569084D1-977D-41FC-A444-0B3F5199DDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02D182FB-761C-4F08-A776-B613FAC55230"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B5EDAB-61DD-4864-A159-39292D339DA2"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29449","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29470","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489819/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28316","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019679","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41304","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489819/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1391","sourceIdentifier":"cve@mitre.org","published":"2008-03-27T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec."},{"lang":"es","value":"Múltiples desbordamientos de entero en libc de NetBSD 4.x, FreeBSD 6.x y 7.x, y posiblemente otras plataformas BSD y Apple Mac OS permiten a atacantes dependientes del contexto ejecutar código de su elección a través de valores de ciertos campos de enteros en el argumento de formato de (1) la función strfmon en lib/libc/stdlib/strfmon.c, en relación a la macro GET_NUMBER; y (2) la función printf, en relación a left_prec y right_prec."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue. Properly written application should not use arbitrary untrusted data as part of the format string passed to functions as strfmon or printf family functions.","lastModified":"2009-09-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*","matchCriteriaId":"CCE4F2E6-2286-4D87-ADD7-7E999B4E5620"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*","matchCriteriaId":"C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0_p5_release:*:*:*:*:*:*:*","matchCriteriaId":"67FDB43C-84D1-4B45-BFB9-340F3687A22F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F06B831E-D8F2-4380-B279-559CE103210F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*","matchCriteriaId":"3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"}]}]}],"references":[{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/strfmon.c","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/53","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3770","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490158/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28479","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019722","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41504","source":"cve@mitre.org"},{"url":"https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/strfmon.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490158/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1392","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors."},{"lang":"es","value":"La configuración por defecto de VMware Workstation 6.0.2, VMware Player versiones 2.0.x anteriores a 2.0.3, y VMware ACE versiones 2.0.x anteriores a 2.0.1 permite el acceso a la consola del sistema operativo cliente mediante llamadas anónimas a la interfaz de programación de aplicaciones VIX, teniendo un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"A9191386-10C0-48A2-B70C-6A047347B5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"389DA24B-6865-428D-8630-837A0D589891"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3755","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28276","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41551","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1393","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plone CMS 3.0.5, and probably other 3.x versions, places a base64 encoded form of the username and password in the __ac cookie for the admin account, which makes it easier for remote attackers to obtain administrative privileges by sniffing the network."},{"lang":"es","value":"Plone CMS 3.0.5, y probablemente otras versiones 3.x, coloca en formato codificado base64 el nombre de usuario y contraseña del usuario admin en la cookie __ac, facilitando a atacantes remotos la obtención de privilegios de adminitrador mediante la escucha del tráfico de red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3","matchCriteriaId":"621080E0-CDB4-4C12-900E-F253CFC1A824"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"10ED9859-7207-45AB-9E66-E5E09828839F"}]}]}],"references":[{"url":"http://plone.org/documentation/how-to/secure-login-without-plain-text-passwords","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://plone.org/products/plone/roadmap/48?","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3754","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41427","source":"cve@mitre.org"},{"url":"http://plone.org/documentation/how-to/secure-login-without-plain-text-passwords","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://plone.org/products/plone/roadmap/48?","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1394","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plone CMS before 3 places a base64 encoded form of the username and password in the __ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network."},{"lang":"es","value":"Plone CMS versiones anteriores a 3 pone en formato codificado base64 el nombre de usuario y la contraseña de todos los usuarios en la cookie __ac, facilitando a atacantes remotos obtener acceso mediante la escucha del tráfico de red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"C4A55D03-9FDD-466B-BA65-42996B4F802C"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"079F5BAC-8873-4087-9030-3036E84B06FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DA64F59B-A021-4EE5-8CCD-BB7FA0FB5B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:2.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"64130585-46A0-4F0D-9DD1-8E42AF2CE054"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"09B101F0-679D-4346-B35E-113E27C952B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:2.5:beta1:*:*:*:*:*:*","matchCriteriaId":"489E848B-DB59-4FCB-85B8-7338547013AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:2.5:beta2:*:*:*:*:*:*","matchCriteriaId":"BABF434A-91C0-490B-BD2A-FBE83F8AA954"}]}]}],"references":[{"url":"http://plone.org/about/security/overview/security-overview-of-plone/","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3754","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41425","source":"cve@mitre.org"},{"url":"http://plone.org/about/security/overview/security-overview-of-plone/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1395","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plone CMS does not record users' authentication states, and implements the logout feature solely on the client side, which makes it easier for context-dependent attackers to reuse a logged-out session."},{"lang":"es","value":"Plone CMS no registra el estado de autenticación de los usarios, e implementa la función de desconexión sólo en el lado del cliente, facilitando la reutilización de sesiones finalizadas por atacantes dependientes del contexto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"88913B9B-AF24-489A-83E5-A9688F4DAA12"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3754","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41423","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1396","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network."},{"lang":"es","value":"Plone CMS 3.x utiliza datos no variables (un nombre de usario y un servidor secreto) cuando calcula un valor HMAC-SHA1 para la cookie de autenticación, facilitando que atacantes remotos obtengan acceso permanente a una cuenta mediante la escucha del tráfico de red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"88913B9B-AF24-489A-83E5-A9688F4DAA12"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3754","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41421","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_Plone_CMS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489544/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1397","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint."},{"lang":"es","value":"Check Point VPN-1 Power/UTM, con NGX R60 hasta R65 y el software NG AI R55, permite a usuarios remotos autenticados provocar una denegación de servicio (parada del túnel VPN sitio a sitio), y posiblemente interceptar tráfico de red, por la configuración  de la dirección IP local RFC1918 al ser la misma que una de estas direcciones IP RFC1918 del punto final del túnel, y utilizando SecuRemote para conectar a una interfaz de red en el otro punto final.\r\n\t\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn-1_pro:ngx_r61:*:*:*:*:*:*:*","matchCriteriaId":"9AE9A8C6-3273-4A44-B407-F28094569860"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn-1_pro:ngx_r62_ga:*:*:*:*:*:*:*","matchCriteriaId":"C01B3DF8-A2BD-486F-A0EB-800F8F906FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:ngx_r60:*:pro:*:*:*:*:*","matchCriteriaId":"95028F5A-F2DB-4440-B6BB-3F4A0C8C1FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_firewall-1:ng_ai_r55:*:*:*:*:*:*:*","matchCriteriaId":"0F4EAB35-FB40-45C7-BD09-7524D50C3FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_power_utm:ngx_r65_with_messaging_security:*:*:*:*:*:*:*","matchCriteriaId":"E28266A6-257E-499C-AF99-8CDF204DBF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_power_utm_with_ngx:r65:*:*:*:*:*:*:*","matchCriteriaId":"799986F4-BDB5-46AB-9CFF-102CB9CD3BE8"}]}]}],"references":[{"url":"http://puresecurity.com.au/index.php?action=fullnews&id=5","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/992585","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.puresecurity.com.au/files/PureSecurity%20VPN-1%20DoS_Spoofing%20Attack%20against%20VPN%20tunnels.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28299","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019666","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0953/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41260","source":"cve@mitre.org"},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk34579","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://puresecurity.com.au/index.php?action=fullnews&id=5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/992585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.puresecurity.com.au/files/PureSecurity%20VPN-1%20DoS_Spoofing%20Attack%20against%20VPN%20tunnels.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0953/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk34579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-1398","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en online.php de AuraCMS versión 2.0 hasta 2.2.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el campo X-Forwarded-For (variable de entorno HTTP_X_FORWARDED_FOR) en la cabecera HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"79834D18-B70E-4ADC-B458-EF26ED1016C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"1E62CD9C-DE5F-4E6D-9D37-A1B028C1D9DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CCAA5702-01AB-4238-A4A8-E890F5BDB20F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28257","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41217","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1399","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Clansphere 2008 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php de Clansphere 2008 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección aprovechando vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2008:*:*:*:*:*:*:*","matchCriteriaId":"5FC5B7AF-964C-412B-8CE2-17B03AC34026"}]}]}],"references":[{"url":"http://secunia.com/advisories/29534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28224","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1400","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) or \"../\" (dot dot slash) in the URI."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el servidor HTTP Net Inspector (mghttpd) en MG-SOFT Net Inspector versión 6.5.0.828 y anteriores para Windows, permite a los atacantes remotos leer archivos arbitrarios por medio de un \"..\\\" (punto punto barra invertida) o \"../\" (punto punto barra diagonal) en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mg-soft:net_inspector:6.5.0.828:*:*:*:*:*:*:*","matchCriteriaId":"B2FB1AC7-78E4-4946-A34A-5071C31D0D41"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/netinsp-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5269","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/netinsp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1401","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file."},{"lang":"es","value":"Una vulnerabilidad de cadenas de formato en el servidor HTTP Net Inspector (mghttpd) en MG-SOFT Net Inspector versión 6.5.0.828 y anteriores para Windows, permite a los atacantes remotos ejecutar código arbitrario por medio de especificadores de cadenas de formato en el URI, que es grabado en un archivo de registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mg-soft:net_inspector:*:*:*:*:*:*:*:*","versionEndIncluding":"windows","matchCriteriaId":"43F09351-22F6-46D9-A9AC-624FC955AD5A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/netinsp-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5269","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/netinsp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1402","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (exception and crash) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) or (2) denial of service (device freeze or memory consumption) via a malformed request to the Net Inspector Server (niengine)."},{"lang":"es","value":"MG-SOFT Net Inspector versión 6.5.0.828 y anteriores para Windows, permite a los atacantes remotos causar una (1) denegación de servicio (excepción y bloqueo) por medio de un paquete UDP en el SNMP Trap Service (MgWTrap3.exe) o (2) denegación de servicio (congelación del dispositivo o consumo de memoria) por medio de una petición malformada en el Net Inspector Server (niengine)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mg-soft:net_inspector:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.0.828","matchCriteriaId":"EB7C6968-D03D-4F2C-8099-344F0A799350"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/netinsp-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5269","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/netinsp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1403","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remote attackers to execute arbitrary code via a request with a long filename."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servidor TFTP de BootManage TFTPD versión 1.99 y anteriores permite a atacantes remotos ejecutar código de su elección utilizando una petición con un nombre de fichero demasiado largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bootmanage:administrator:*:*:*:*:*:*:*:*","versionEndIncluding":"windows","matchCriteriaId":"83108732-212B-492B-A025-66D28B59F0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bootmanage:tftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"windows","matchCriteriaId":"2847EC41-413C-4499-BD5D-0477A6A1C5C6"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/bootixtftpd-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489705/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28270","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41226","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/bootixtftpd-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489705/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1404","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo Viso (Industry Book) 2.04 y 2.03 para eXV2 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro kid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exv2:exv2:2.0.3:*:visio:*:*:*:*:*","matchCriteriaId":"E65E9E29-73C6-4243-85FD-856420C71795"}]}]}],"references":[{"url":"http://secunia.com/advisories/29389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28255","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41216","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5254","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1405","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo code/display.php en fuzzylime (cms) versión 3.01, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro admindir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime:3.01:*:*:*:*:*:*:*","matchCriteriaId":"F3658CC9-6390-4FA2-98DA-AF6EF4ACD180"}]}]}],"references":[{"url":"http://irk4z.wordpress.com/2008/03/15/fuzzylime-cms-301-remote-file-inclusion-vulnerability/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29417","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0912/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41221","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5260","source":"cve@mitre.org"},{"url":"http://irk4z.wordpress.com/2008/03/15/fuzzylime-cms-301-remote-file-inclusion-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0912/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1406","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the lid parameter in an ImprAnn action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en annonces-p-f.php del módulo MyAnnonces 1.8 para eXV2 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro lid en una acción ImprAnn."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exv2:exv2:1.8:*:myannonces:*:*:*:*:*","matchCriteriaId":"2577D480-39EB-4295-B90E-E42D14C4FD48"}]}]}],"references":[{"url":"http://secunia.com/advisories/29384","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28254","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41214","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5252","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1407","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the roomid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo WebChat 1.60 para eXV2 permite a atacantes remotos ejecutar comandos SQL de su elección al utilizar el parámetro roomid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exv2:exv2:1.60:*:webchat:*:*:*:*:*","matchCriteriaId":"6A9CFF31-DA3B-48CF-8B2B-EFFBEB45C47B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28256","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41213","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1408","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a banner_out action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en includes/functions/banners-external.php de phpBP 2 RC3 (2.204) FIX 4 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro id en una acción banner_out."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbp:phpbp:rc3_2.204:*:fix4:*:*:*:*:*","matchCriteriaId":"5C21A8EE-996D-42F9-A7DA-915E876DDC17"}]}]}],"references":[{"url":"http://irk4z.wordpress.com/2008/03/16/phpbp-rc3-2204-fix4-remote-sql-injection-vulnerability/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29411","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpbp.com/filedownload-phpbp2-RC3-204-fix5_22.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28272","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0910/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41222","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5263","source":"cve@mitre.org"},{"url":"http://irk4z.wordpress.com/2008/03/16/phpbp-rc3-2204-fix4-remote-sql-injection-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phpbp.com/filedownload-phpbp2-RC3-204-fix5_22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0910/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1409","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to (1) index.php, (2) editpassword.php, and (3) avatar.php in usercp/; (4) custompage.php; (5) errors/404.php; (6) memberslist.php and (7) profile.php in members/; (8) index.php and (9) fullview.php in news/; and (10) nopermission.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en el tema Default de Exero CMS 1.0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante la utilización de secuencias de salto de directorio en el parámetro theme de (1) index.php, (2) editpassword.php, y (3) avatar.php en usercp/; (4) custompage.php; (5) errors/404.php; (6) memberslist.php y (7) profile.php en members/; (8) index.php y (9) fullview.php en news/; y (10) nopermission.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exero:exero_cms:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EB145AE2-B4B1-449B-9A53-C5E2B4EFF571"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28273","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0909/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41238","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5265","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0909/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1410","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en PXE Server (pxesrv.exe) de Acronis Snap Deploy versiones 2.0.0.1076 y anteriores permite a atacantes remotos leer ficheros de su elección mediante la utilización de secuencias de salto de directorio en el servicio TFTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:snap_deploy:2.0.0.1076:*:*:*:*:*:*:*","matchCriteriaId":"A091CA72-DCC4-4E28-8DF3-AE7A515BD331"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/acropxe-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3758","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489358/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28182","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0814/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41074","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5228","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/acropxe-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489358/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0814/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1411","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service (crash) via an incomplete TFTP request, which triggers a NULL pointer dereference."},{"lang":"es","value":"PXE Server (pxesrv.exe) en Acronis Snap Deploy versiones 2.0.0.1076 y anteriores permite a atacantes remotos provocar una denegación de servicio (parada) al utilizar una petición TFTP incompleta, que dispara una referencia a un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:snap_deploy:2.0.0.1076:*:*:*:*:*:*:*","matchCriteriaId":"A091CA72-DCC4-4E28-8DF3-AE7A515BD331"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/acropxe-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3758","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489358/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28182","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0814/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41075","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5228","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/acropxe-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489358/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0814/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1412","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats."},{"lang":"es","value":"Vulnerabilidad no especificada en multiples productos anti-virus de F-Secure, incluidos Internet Security 2006 hasta 2008, Anti-Virus 2006 hasta 2008 y otros, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (suspender o parar) utilizando un archivo defectuoso que provocará un excepción no manejada, como se ha demostrado por el paquete de pruebas PROTOS GENOME para formatos de archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*","matchCriteriaId":"9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*","matchCriteriaId":"1106DE08-DE9A-488B-8C5D-28E353CDEEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:second_edition:*:*:*:*:*:*","matchCriteriaId":"C8609465-1436-4F50-B7EE-0DF9DA7AA4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"B47EC4EB-268A-4BB9-820D-AA3DB8D1A655"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"6.04","matchCriteriaId":"1566EBF3-230F-415F-8E0A-1D55A35ABB50"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"4.65","matchCriteriaId":"DDE3B1C3-BBCF-4C7E-87B4-418E850CE097"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:*:*:*:*:*:*:*:*","versionEndIncluding":"7.11","matchCriteriaId":"C103D696-73C5-4582-8DD4-B292467F4F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"5.54","matchCriteriaId":"1D3E6352-6BF9-4FE6-A572-07A31972A28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"7.11","matchCriteriaId":"CDAB6D4E-4897-4E83-B601-169D93EC50EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C788A5AB-C847-476C-9767-C6711F2D4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"3972C7F1-8B78-4A5D-8A75-C6CA01E997DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:second_edition:*:*:*:*:*:*","matchCriteriaId":"C0DCADF7-B044-4646-B215-52685609ED49"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"08ED9945-DC9F-4F4F-B2EB-B63986BCC7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_s60:2nd_edition:*:*:*:*:*:*:*","matchCriteriaId":"E6C6312D-350F-4E12-ABB6-4748CB286D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5BA3FA3-3D16-4958-AC75-7380EFE8948A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:6:*:*:*:*:*:*:*","matchCriteriaId":"757E27BF-8CC3-41E5-8348-350CFDAC4BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_mobile_antivirus_for_windows_mobile:2003:*:*:*:*:*:*:*","matchCriteriaId":"39318388-DD54-4304-9C7D-6F7C1584D68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_mobile_security_for_series_80:*:*:*:*:*:*:*:*","matchCriteriaId":"C3454E64-9E87-4707-BC02-5A881F443084"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*","versionEndIncluding":"3.10","matchCriteriaId":"5A2E6D2C-5520-41DE-AF1D-7E47F9A99CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*","versionEndIncluding":"7.00","matchCriteriaId":"604EFE23-657D-406F-81BF-17BA524E8423"}]}]}],"references":[{"url":"http://secunia.com/advisories/29397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml","source":"cve@mitre.org"},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml","source":"cve@mitre.org"},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"cve@mitre.org"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"cve@mitre.org"},{"url":"http://www.f-secure.com/security/fsc-2008-2.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28282","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019618","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019619","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019620","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0903/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.f-secure.com/security/fsc-2008-2.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0903/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1413","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de SNewsCMS Rus versiones 2.1 hasta 2.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección al utilizar el parámetro query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snews:snews_cms_rus:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5FA8CAA-4215-4191-9C4F-1FE925A94408"},{"vulnerable":true,"criteria":"cpe:2.3:a:snews:snews_cms_rus:2.3:*:*:*:*:*:*:*","matchCriteriaId":"D3D0F42B-5D32-4380-9626-698530D7054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:snews:snews_cms_rus:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0642C295-6D68-4793-A060-02155898A585"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3757","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489686/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28262","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41243","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489686/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1414","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the tab parameter to (1) index.php, as demonstrated using mixed case and encoded whitespace characters in the tag; or (2) clientinfo.php, (3) invoices.php, (4) smartlinks.php, and (5) todo.php, as demonstrated using a META tag."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Multiple Time Sheets (MTS) versión 5.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro tab en (1) index.php, como se ha demostrado al usar caracteres en mayúsculas, minúsculas y espacios en blanco codificados en esta etiqueta; o (2) clientinfo.php, (3) invoices.php, (4) smartlinks.php, y (5) todo.php, como se ha demostrado utilizando una etiqueta META."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:riceball:multiple_time_sheets:*:*:*:*:*:*:*:*","matchCriteriaId":"B71BCBD7-24E0-4A3D-8B78-8C2C77E8FCAF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489689/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28263","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0911/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41227","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0911/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1415","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to read arbitrary files via \"../..//\" (modified dot dot) sequences in the tab parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Multiple Time Sheets (MTS) versión 5.0 y anteriores permite a atacantes remotos leer ficheros de su elección utilizando secuencias \"../..//\" (cambios punto punto) en el parámetro tab."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:riceball:multiple_time_sheets:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2066CFE3-CBF4-49C9-A6C5-D0EC6DF14B63"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489689/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28263","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0911/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5262","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0911/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1416","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) converter.inc.php, (2) messages.inc.php, and (3) settings.inc.php in includes/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en PHPauction GPL 2.51 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro include_path de (1) converter.inc.php, (2) messages.inc.php, y (3) settings.inc.php en includes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauction:phpauction_gpl:2.51:*:*:*:*:*:*:*","matchCriteriaId":"492A8CA1-F5E2-4F31-A708-ECEF0F45940B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29422","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28284","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0908/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41239","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5266","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0908/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1417","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file."},{"lang":"es","value":"La secuencia de comandos prerm en axyl 2.1.7 permite a usuarios locales sobrescribir ficheros de su elección mediante la utilización de un ataque de enlace simbólico el fichero temporal axyl.conf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axyl:axyl:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A892409-FDFE-4277-80DA-8C4210DBD9A5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471227","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41406","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1419","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow."},{"lang":"es","value":"Xiph.org libvorbis 1.2.0 y versiones anteriores no maneja apropiadamente un valor cero de codebook.dim, lo cual permite a atacantes remotos provocar una denegación de servicio (caída o bucle infinito) o disparar un desbordamiento de entero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*","matchCriteriaId":"492EA1BE-E678-4300-A690-3BFCD4B233B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*","matchCriteriaId":"4E3C9031-F69A-4B6A-A8CB-39027174AA01"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*","matchCriteriaId":"D6B5646C-FF04-4D3D-B39E-27C1056962EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*","matchCriteriaId":"7361D8F0-FE84-41D0-9C62-F180339DD40A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*","matchCriteriaId":"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CF8C4486-971C-4C32-ADC2-BA5EDBCF33A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BD923EE0-A7C8-47BF-B745-50BA6FF3D4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CD51205C-7BE5-4304-8E17-1F637C044559"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F73EF75-AA31-45E7-8F30-9418FD26CD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"80D6F218-02F9-4AB0-8771-6CC5B1FC30DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.12:*:*:*:*:*:*:*","matchCriteriaId":"1138B8E1-7731-4719-B42A-4095A1CC2E1D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30234","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30237","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30247","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30259","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30479","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30820","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32946","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-09.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1591","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:102","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0270.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/29206","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020029","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-682-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=440700","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42400","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10104","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/29206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-682-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=440700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1420","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow."},{"lang":"es","value":"Desbordamiento de entero en la evaluación de valores en la partición de residuos (también conocido como partvals) en Xiph.org libvorbis 1.2.0 y versiones anteriores permite a atacantes remotos ejecutar código de su elección a través de ficheros OGG manipulados, lo cual dispara un desbordamiento heap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*","matchCriteriaId":"492EA1BE-E678-4300-A690-3BFCD4B233B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*","matchCriteriaId":"4E3C9031-F69A-4B6A-A8CB-39027174AA01"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*","matchCriteriaId":"D6B5646C-FF04-4D3D-B39E-27C1056962EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*","matchCriteriaId":"7361D8F0-FE84-41D0-9C62-F180339DD40A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*","matchCriteriaId":"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CF8C4486-971C-4C32-ADC2-BA5EDBCF33A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BD923EE0-A7C8-47BF-B745-50BA6FF3D4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CD51205C-7BE5-4304-8E17-1F637C044559"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F73EF75-AA31-45E7-8F30-9418FD26CD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"80D6F218-02F9-4AB0-8771-6CC5B1FC30DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.12:*:*:*:*:*:*:*","matchCriteriaId":"1138B8E1-7731-4719-B42A-4095A1CC2E1D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30234","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30237","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30247","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30259","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30479","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30820","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32946","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36463","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-09.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1591","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:102","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0270.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/29206","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020029","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-682-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=440706","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42402","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9500","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/825-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/29206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-682-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=440706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/825-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-1423","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow."},{"lang":"es","value":"Desbordamiento de entero en ciertos cálculos quantvals y quantlist de Xiph.org libvorbis 1.2.0 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de ficheros OGG manipulados con un espacio virtual largo de su codebook, lo cual dispara un desbordamiento heap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*","matchCriteriaId":"492EA1BE-E678-4300-A690-3BFCD4B233B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*","matchCriteriaId":"4E3C9031-F69A-4B6A-A8CB-39027174AA01"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*","matchCriteriaId":"D6B5646C-FF04-4D3D-B39E-27C1056962EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*","matchCriteriaId":"7361D8F0-FE84-41D0-9C62-F180339DD40A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*","matchCriteriaId":"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CF8C4486-971C-4C32-ADC2-BA5EDBCF33A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BD923EE0-A7C8-47BF-B745-50BA6FF3D4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CD51205C-7BE5-4304-8E17-1F637C044559"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F73EF75-AA31-45E7-8F30-9418FD26CD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A329D52F-B9BB-4883-A5AD-F3EE0C0E5D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"80D6F218-02F9-4AB0-8771-6CC5B1FC30DD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30234","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30237","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30247","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30259","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30479","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30820","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32946","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-09.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1591","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:102","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0270.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/29206","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020029","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-682-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=440709","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42403","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9851","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/29206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-682-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=440709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-1425","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a kate action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo gallery en Easy-Clanpage 2.2 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro id en la acción kate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-clanpage:easy-clanpage:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7A66DFE8-8217-48D7-9C01-7E2F8054BC90"}]}]}],"references":[{"url":"http://secunia.com/advisories/29430","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28309","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41303","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1426","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via the albumid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en album.asp de KAPhotoservice permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro albumid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaphotoservice:kaphotoservice:*:*:*:*:*:*:*:*","matchCriteriaId":"5024C49D-78DB-490A-9A4C-97D3BAFA5422"}]}]}],"references":[{"url":"http://secunia.com/advisories/29433","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489891/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41300","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489891/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1427","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mailingid parameter in a mailing view action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Joobi Acajoom (com_acajoom) versiones 1.1.5 y 1.2.5 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro mailingid en una acción mailing view en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joobi:acajoom:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"696ACCEF-C806-43A2-8D5D-6CF775F67E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:joobi:acajoom:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"46AE63A1-BC1E-4474-985F-961C008C686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_acajoom:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E3A96110-DCE3-4148-A829-AB3E5FB5113D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_acajoom:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9C00409E-78FA-471A-A5DE-2C0F7BDC5806"}]}]}],"references":[{"url":"http://secunia.com/advisories/29429","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28305","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41290","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5273","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1428","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo Ubercart versiones 5.x anteriores a 5.x-1.0-beta7 para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección utilizando un valor de atributo de texto para un producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:ubercart_module:*:*:*:*:*:*:*:*","versionEndIncluding":"5-1.0","matchCriteriaId":"274C9C2E-8F6B-4C47-B33E-F10F1330919C"}]}]}],"references":[{"url":"http://drupal.org/node/233492","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0867/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41184","source":"cve@mitre.org"},{"url":"http://drupal.org/node/233492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0867/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1429","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote attackers to cause a denial of service (daemon crash) via a NEW_CLIENT packet without a nickname."},{"lang":"es","value":"Secure Internet Live Conferencing (SILC) Server versiones anteriores a 1.1.1 permite a atacantes remotos provocar una denegación de servicio (final erróneo del demonio) al utilizar un paquete NEW_CLIENT sin incluir un apodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc-server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"555536C2-0DBD-4093-BF63-4885028B2845"}]}]}],"references":[{"url":"http://secunia.com/advisories/29459","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29946","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-27.xml","source":"cve@mitre.org"},{"url":"http://silcnet.org/docs/release/SILC%20Server%201.1.1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28450","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019711","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0919/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41307","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://silcnet.org/docs/release/SILC%20Server%201.1.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0919/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1430","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary SQL commands via the CatId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en links.asp de ASPapp permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro CatId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iatek:aspapp:*:*:*:*:*:*:*:*","matchCriteriaId":"3BC532A8-E57B-4E64-9799-B1BBE6D790A9"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5276","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1431","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key."},{"lang":"es","value":"RaidSonic NAS-4220-B con versión de firmware 2.6.0-n(2007-10-11) almacena una clave de cifrado de partición en un fichero no cifrado /system/.crypt con una codificación base64, lo que permite a usuarios locales obtener dicha clave."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:raidsonic_technology:firmware:2.6.0-n:*:*:*:*:*:*:*","matchCriteriaId":"812ACDC4-8572-4489-B64D-0373F9B4FD7A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:raidsonic_technology:nas-4220-b:2.6.0-n:*:*:*:*:*:*:*","matchCriteriaId":"546FAFC5-4FC6-41D3-A9DE-D0711A35DE0B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29401","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489690/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28264","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489690/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1432","sourceIdentifier":"cve@mitre.org","published":"2008-03-20T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine SupportCenter Plus 7.0.0 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, a related issue to CVE-2008-1299.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SolutionSearch.do de ManageEngine SupportCenter Plus 7.0.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección utilizando el parámetro searchText, siendo un tema relacionado con CVE-2008-1299. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:supportcenter_plus:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"32C705C9-9BCB-438C-9B9F-01FE017A2C79"}]}]}],"references":[{"url":"http://secunia.com/advisories/29441","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1434","sourceIdentifier":"secure@microsoft.com","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a \"memory handling error\" that triggers memory corruption."},{"lang":"es","value":"Una vulnerabilidad de uso de la memoria previamente liberada en Microsoft Word en Office 2000 y XP SP3, 2003 SP2 y SP3, y 2007 Office System SP1 y anteriores, permite a atacantes remotos ejecutar código arbitrario por medio  de un documento HTML con un gran número de Cascading Style Sheets (CSS), relacionado con un \"memory handling error\" que desencadena una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:*","matchCriteriaId":"4142D44F-26F2-467B-A7DE-00239C0013D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:sp1:*:*:*:*:*","matchCriteriaId":"5E8B5977-31FA-4018-80E1-908016F3C224"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:sp3:*:*:*:*:*","matchCriteriaId":"79EEAE40-5791-41F5-A35D-2388480B3843"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=700","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30143","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29105","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020014","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1504/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5012","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1504/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1435","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not properly handled when saving, aka \"Windows Saved Search Vulnerability.\""},{"lang":"es","value":"El Explorador de Windows en Microsoft Windows Vista hasta SP1 y Server 2008, permite a atacantes remotos con la ayuda del usuario ejecutar código de su elección mediante ficheros manipulados de guardar-búsqueda (.search-ms) que no se han manejado adecuadamente cuando se guardaban. También se conoce como \"Vulnerabilidad de Guardar Búsqueda de Windows\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://secunia.com/advisories/30953","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30109","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020436","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2020/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-038","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5600","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2020/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1436","sourceIdentifier":"secure@microsoft.com","published":"2008-04-21T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping."},{"lang":"es","value":"Microsoft Windows XP Professional SP2, vista y Server 2003 y 2008 no asignan apropiadamente las actividades a las cuentas (1) NetworkService y (2) LocalService, lo que podría permitir que los atacantes dependientes del contexto consigan privilegios mediante el uso de un proceso de servicio para capturar un recurso de un segundo proceso de servicio que tiene una capacidad de escalado de privilegios LocalSystem, relacionada con la administración inadecuada del derecho de usuario SeImpersonatePrivilege, como se informó originalmente para Internet Information Services (IIS), también se conoce como token Secuestro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:sp1:x64:*:*:*:*:*","matchCriteriaId":"C52FFD3E-195E-4A61-9789-AF5A3EFB3A62"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:sp2:*:*:*:*:*:*","matchCriteriaId":"9E15E896-99D9-4558-B85E-069D2F2EA565"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:sp2:x64:*:*:*:*:*","matchCriteriaId":"0BA8CAFA-7C40-4692-A7C4-403315BF3E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://blogs.technet.com/msrc/archive/2008/04/17/msrc-blog-microsoft-security-advisory-951306.aspx","source":"secure@microsoft.com"},{"url":"http://isc.sans.org/diary.html?storyid=4306","source":"secure@microsoft.com"},{"url":"http://milw0rm.com/sploits/2008-Churrasco.zip","source":"secure@microsoft.com"},{"url":"http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/29867","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://securitywatch.eweek.com/flaws/microsoft_belatedly_admits_to_windows_server_2008_token_kidnapping.html","source":"secure@microsoft.com"},{"url":"http://www.argeniss.com/research/Churrasco.zip","source":"secure@microsoft.com"},{"url":"http://www.argeniss.com/research/TokenKidnapping.pdf","source":"secure@microsoft.com"},{"url":"http://www.microsoft.com/technet/security/advisory/951306.mspx","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/491111/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/497168/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/28833","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1019904","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1264/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41880","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5891","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6705","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/msrc/archive/2008/04/17/msrc-blog-microsoft-security-advisory-951306.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=4306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://milw0rm.com/sploits/2008-Churrasco.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitywatch.eweek.com/flaws/microsoft_belatedly_admits_to_windows_server_2008_token_kidnapping.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.argeniss.com/research/Churrasco.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.argeniss.com/research/TokenKidnapping.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/security/advisory/951306.mspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491111/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497168/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1264/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1437","sourceIdentifier":"secure@microsoft.com","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438."},{"lang":"es","value":"Vulnerabilidad no especificada en la Máquina de Protección de Malware de Microsoft (mpengine.dll) versiones 1.1.3520.0 y 0.1.13.192, tal y como se usa en múltiples productos de Microsoft, permite a atacantes según contexto provocar una denegación de servicio (cuelgue del equipo y reinicio) a través de un archivo manipulado, una vulnerabilidad diferente a la CVE-2008-1438."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:antigen_for_exchange:*:*:*:*:*:*:*:*","matchCriteriaId":"ABC4C839-B772-44EB-BD55-7477FFD73C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:antigen_for_smtp_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"F2B3A3CB-9A6C-4FC6-BF90-003D8A9FC3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:diagnostics_and_recovery_toolkit:6.0:*:*:*:*:*:*:*","matchCriteriaId":"166B173E-90D5-4DBF-AD6F-3C804687CB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:*:*:*:*:*:*:*:*","matchCriteriaId":"769D4056-0E25-4A0A-B0E7-265AC188053A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_security_for_exchange_server:*:*:*:*:*:*:*:*","matchCriteriaId":"1B50C829-EFB4-4C5D-B1F2-871F3EE7B5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_security_for_sharepoint:*:*:*:*:*:*:*:*","matchCriteriaId":"ACFC59CB-6211-49DD-B833-B00D3CE53A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:malware_protection_engine:0.1.13.192:*:*:*:*:*:*:*","matchCriteriaId":"8CEA6F8E-1A38-47FC-891C-326EAA8A9F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:malware_protection_engine:1.1.3520.0:*:*:*:*:*:*:*","matchCriteriaId":"A6EFC0F5-EB5E-4D34-9B8B-5C60CCC32D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*","matchCriteriaId":"A458632B-D1AE-4643-A8F0-4295B506E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_onecare:*:*:*:*:*:*:*:*","matchCriteriaId":"4109D8E8-A385-4098-A983-FCF5F69CCD1F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30172","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29060","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020016","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1506/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-029","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13981","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1506/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1438","sourceIdentifier":"secure@microsoft.com","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with \"crafted data structures\" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437."},{"lang":"es","value":"Vulnerabilidad no especificada en la Máquina de Protección de Malware de Microsoft (mpengine.dll) versiones 1.1.3520.0 y 0.1.13.192, tal y como se usa en múltiples productos de Microsoft, permite a atacantes según contexto provocar una denegación de Servicio (agotamiento de espacio en disco) a través de “estructuras de datos manipuladas” que provocan la creación de ficheros grandes temporales, una  vulnerabilidad diferente a la CVE-2008-1438."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:antigen_for_exchange:*:*:*:*:*:*:*:*","matchCriteriaId":"ABC4C839-B772-44EB-BD55-7477FFD73C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:antigen_for_smtp_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"F2B3A3CB-9A6C-4FC6-BF90-003D8A9FC3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:diagnostics_and_recovery_toolkit:6.0:*:*:*:*:*:*:*","matchCriteriaId":"166B173E-90D5-4DBF-AD6F-3C804687CB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:*:*:*:*:*:*:*:*","matchCriteriaId":"769D4056-0E25-4A0A-B0E7-265AC188053A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_security_for_exchange_server:*:*:*:*:*:*:*:*","matchCriteriaId":"1B50C829-EFB4-4C5D-B1F2-871F3EE7B5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_security_for_sharepoint:*:*:*:*:*:*:*:*","matchCriteriaId":"ACFC59CB-6211-49DD-B833-B00D3CE53A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:malware_protection_engine:0.1.13.192:*:*:*:*:*:*:*","matchCriteriaId":"8CEA6F8E-1A38-47FC-891C-326EAA8A9F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:malware_protection_engine:1.1.3520.0:*:*:*:*:*:*:*","matchCriteriaId":"A6EFC0F5-EB5E-4D34-9B8B-5C60CCC32D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*","matchCriteriaId":"A458632B-D1AE-4643-A8F0-4295B506E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_onecare:*:*:*:*:*:*:*:*","matchCriteriaId":"4109D8E8-A385-4098-A983-FCF5F69CCD1F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30172","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29073","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020016","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1506/references","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-029","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14375","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121129490723574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-134A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1506/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1440","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the \"PGM Invalid Length Vulnerability.\""},{"lang":"es","value":"Microsoft Windows XP SP2 y SP3, y Server 2003 SP1 y SP2 no valida apropiadamente la opción longitud de campo en paquetes Pragmatic General Multicast (PGM) lo que permite a atacantes remotos provocar una denegación de servicio (bucle infinito y caida del sistema) a través de un paquete PGM manipulado, también conocida como \"Vulnerabilidad de longitud no valida PGM\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://secunia.com/advisories/30587","source":"secure@microsoft.com","tags":["Broken Link","Permissions Required","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020230","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29508","source":"secure@microsoft.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1783","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5473","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Permissions Required","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-1441","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the \"PGM Malformed Fragment Vulnerability.\""},{"lang":"es","value":"Microsoft Windows XP SP2 y SP3, y Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008  permiten a atacantes remotos provocar una denegación de servicio (caida del sistema) a través de una serie de paquetes Pragmatic General Multicast (PGM) con fragmentos no válidos, también conocida como \"Vulnerabilidad de fragmentos malformados PGM\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:itanium:*","matchCriteriaId":"ED5ADA49-C463-4C85-B9BD-CFEE57417066"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*","matchCriteriaId":"F2F3C15B-1F4C-4E6C-A254-16F8A17F9A71"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7211B5C5-6B6E-4A33-88BC-1D64CD684204"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*","matchCriteriaId":"18420EC8-633E-4AED-B33F-5A3C673C396D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30587","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020231","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29509","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1783","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1442","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the \"HTML Objects Memory Corruption Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el método substringData en Microsoft Internet Explorer 6 y 7 permite a atacantes remotos ejecutar código de su elección a través de, lo que esta relacionado con un manipulación no específica de un objeto DOM antes de una llamada a este método, también conocida como \"Vulnerabilidad de corrupción de memoria por objetos HTML\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30575","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3934","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020225","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/493253/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/29556","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1778","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-039/","source":"secure@microsoft.com","tags":["Patch","Technical Description","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-031","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5720","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/493253/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-039/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Technical Description","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1444","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the \"SAMI Format Parsing Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Microsoft DirectX 7.0 y 8.1 o en Windows 2000 SP4 permite a atacantes remotos ejecutar código de su elección a través de un archivo Synchronized Accessible Media Interchange (SAMI) con parámetros manipulados para una variable Class Name, también conocida como la \"Vulnerabilidad SAMI Format Parsing\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*","matchCriteriaId":"59F8A83B-899C-47CE-B444-E8B4AC7723C7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*","matchCriteriaId":"7AF8B188-A5E0-4D53-9FE1-C72BD956191B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:10.0:*:*:*:*:*:*:*","matchCriteriaId":"5A53A6AC-74B0-4DB3-B94D-06FB969AE83C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30579","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3937","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020223","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493250/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/29578","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1780","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-040/","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493250/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-040/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1445","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request."},{"lang":"es","value":"Active Directory en Microsoft Windows 2000 Server SP4, XP Professional SP2 y SP3, Server 2003 SP1 y SP2, y Server 2008 permite a usuarios autenticados causar una denegación de servicio (caída del sistema o reinicio) a través de una petición LDAP manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*","matchCriteriaId":"7AF8B188-A5E0-4D53-9FE1-C72BD956191B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:pro:*:*:*:*:*","matchCriteriaId":"EFE32C06-74E0-4C0D-8C12-B20282AB9F7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30586","source":"secure@microsoft.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020229","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493338/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/493342/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/29584","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1782","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-035","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4910","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493338/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493342/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1446","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.553","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka \"Integer Overflow in IPP Service Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en la extensión Internet Printing Protocol (IPP) ISAPI en Microsoft Internet Information Services (IIS) v5.0 hasta v7.0 en Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, y Server 2008, permite a atacantes remotos autenticados ejecutar código arbitrario a través de un petición HTTP POST que dispara un conexión IPP de salida desde un servidor Web a la máquina manejada por el atacante, también conocida como \"Vulnerabilidad de servicio por Desbordamiento de entero en IPP\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"7.0","matchCriteriaId":"4ED209E9-04E3-4FDD-947E-8103273FF41D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:-:*","matchCriteriaId":"C5D2C681-EB06-4B72-BD34-47AEE35CC227"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:professional:*:-:*","matchCriteriaId":"81E8A3CB-9110-4D65-BCAE-261FF7135544"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32248","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/793233","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31682","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021048","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2813","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-062","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45545","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45548","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5764","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/793233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1447","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\""},{"lang":"es","value":"El protocolo DNS, como es implementado en (1) BIND 8 y 9 en versiones anteriores a 9.5.0-P1, 9.4.2-P1 y 9.3.5-P1; (2) Microsoft DNS en Windows 2000 SP4, XP SP2 y SP3 y Server 2003 SP1 y SP2; y otras implementaciones permiten a atacantes remotos suplantar el tráfico DNS a través de un ataque de un cumpleaños que usa referencias in-bailiwick para llevar a cabo un envenenamiento del caché contra resolutores recursivos, relacionado con la insifuciente aleatoriedad de la ID de la transacción DNS y los puertos de origen, vulnerabilidad también conocida como \"DNS Insufficient Socket Entropy Vulnerability\" o \"the Kaminsky bug\"."}],"vendorComments":[{"organization":"Red Hat","comment":"http://rhn.redhat.com/errata/RHSA-2008-0533.html","lastModified":"2008-07-09T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.2,"impactScore":4.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-331"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":false,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:compute_cluster:*:itanium:*","matchCriteriaId":"69117328-A5AD-48A5-A56A-0AA8805A113E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:datacenter:*:itanium:*","matchCriteriaId":"3ECE18F6-9DDD-4354-9012-B0660E184E83"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:enterprise:*:itanium:*","matchCriteriaId":"4A2B4F1C-737D-40DA-B12E-6C664F9A7ECA"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:standard:*:itanium:*","matchCriteriaId":"DBBCB4B2-8007-4AD5-946E-396330E7DC31"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:storage:*:itanium:*","matchCriteriaId":"68758D17-44AF-4472-928C-3B94A7EAD671"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:compute_cluster:*:itanium:*","matchCriteriaId":"76EDD7D7-4567-4007-86A3-95E907616C6A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:compute_cluster:*:x64:*","matchCriteriaId":"7A933555-D875-47B9-BFA7-E030B04C1197"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:datacenter:*:itanium:*","matchCriteriaId":"4BAA5F63-9A88-4B38-B284-B6E6170F12A8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:datacenter:*:x64:*","matchCriteriaId":"9F168D81-2D2B-4B75-B907-A8AE2A3523C5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:enterprise:*:itanium:*","matchCriteriaId":"1778D813-845D-4B79-B9AF-5D4E0B461C75"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:enterprise:*:x64:*","matchCriteriaId":"A2E917A1-AFE1-4AA3-AB80-A69F152BAB51"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:standard:*:itanium:*","matchCriteriaId":"C8203007-1723-431B-ADDE-C5FE76A88619"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:standard:*:x64:*","matchCriteriaId":"423102CB-1FA1-46BB-8345-412F35DB25B7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:storage:*:itanium:*","matchCriteriaId":"98E956AB-6A8E-4C5D-89D5-52BC374B1D7C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:storage:*:x64:*","matchCriteriaId":"676A5A3B-EFE5-4B84-8F8E-CF952003F48F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*","matchCriteriaId":"4902A7BD-0645-4CAC-8EA8-24BD2D8B893A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*","matchCriteriaId":"492EA1BE-E678-4300-A690-3BFCD4B233B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*","matchCriteriaId":"4E3C9031-F69A-4B6A-A8CB-39027174AA01"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*","matchCriteriaId":"D6B5646C-FF04-4D3D-B39E-27C1056962EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*","matchCriteriaId":"7361D8F0-FE84-41D0-9C62-F180339DD40A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4:*:*:*:*:*:*:*","matchCriteriaId":"1E3C0D00-DF20-4B46-8A7D-99D963BD921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8:*:*:*:*:*:*:*","matchCriteriaId":"7904F3D9-A6B0-4ED6-8BAD-2D26C118C0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.9:*:*:*:*:*:*:*","matchCriteriaId":"90E4653A-C63A-4568-BFF2-ECAB7AB5A55C"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc","source":"secure@microsoft.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html","source":"secure@microsoft.com","tags":["Technical Description"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121630706004256&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121630706004256&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121866517322103&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123324863916385&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123324863916385&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0533.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30925","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30973","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30977","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30979","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30980","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30988","source":"secure@microsoft.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30989","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30998","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31011","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31012","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31014","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31019","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31022","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31030","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31031","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31033","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31052","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31065","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31072","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31093","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31094","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31137","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31143","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31151","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31152","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31153","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31169","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31197","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31199","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31204","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31207","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31209","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31212","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31213","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31221","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31236","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31237","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31254","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31354","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31422","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31430","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31451","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31482","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31495","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31588","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31823","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33714","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33786","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-08.xml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX117991","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX118183","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://up2date.astaro.com/2008/08/up2date_7202_released.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0002.txt","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0003.txt","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1603","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1604","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1605","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1619","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1623","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/?p=1176","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/DMK_BO2K8.ppt","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26667","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26668","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26669","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26670","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26671","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26672","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/800113","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7DWR4J","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:139","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.nominum.com/asset_upload_file741_2661.pdf","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7000912","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata42.html#013_bind","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata43.html#004_bind","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0789.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495289/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30131","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020437","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020438","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020440","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020448","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020449","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020548","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020558","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020560","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020561","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020575","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020576","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020577","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020578","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020579","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020651","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020653","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020702","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020802","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020804","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-622-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-627-1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2019/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2023/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2025/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2029/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2030/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2050/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2051/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2052/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2055/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2092/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2113/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2114/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2123/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2139/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2166/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2195/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2196/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2197/references","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2291","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2342","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2377","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2383","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2384","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2467","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2482","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2549","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2582","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0297","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0311","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0622","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43334","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43637","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627","source":"secure@microsoft.com","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/6122","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6123","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6130","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121630706004256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121630706004256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121866517322103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123324863916385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123324863916385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0533.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX117991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX118183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://up2date.astaro.com/2008/08/up2date_7202_released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.caughq.org/exploits/CAU-EX-2008-0003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/?p=1176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.doxpara.com/DMK_BO2K8.ppt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ26672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/800113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7DWR4J","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.nominum.com/asset_upload_file741_2661.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7000912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata42.html#013_bind","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openbsd.org/errata43.html#004_bind","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0789.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495289/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-622-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-627-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2019/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2023/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2025/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2029/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2030/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2050/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2051/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2052/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2055/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2092/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2113/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2114/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2123/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2139/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2166/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2195/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2196/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2197/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/6122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1448","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka \"URL Parsing Cross-Domain Information Disclosure Vulnerability.\""},{"lang":"es","value":"El manejador de protocolo MHTML en un componente de Outlook Express versiones 5.5 SP2 y 6 hasta SP1 y Windows Mail de Microsoft no asigna la zona de seguridad de Internet Explorer correcta a los nombres de ruta (path) de recurso compartido UNC, lo que permite a los atacantes remotos omitir las restricciones de acceso previstas y leer archivos arbitrarios por medio de un URI mhtml: en conjunto con un redireccionamiento, también se conoce como \"URL Parsing Cross-Domain Information Disclosure Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"589E5F7F-5429-4050-8C0D-F7F8D18DEB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D45F2775-A10B-4834-A2EF-7498EEAB155D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_mail:*:*:*:*:*:*:*:*","matchCriteriaId":"0BDD015F-267D-4E33-885B-6A14F493CCC5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31415","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/internet-explorer-zone-elevation","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/495458/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30585","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020679","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020680","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2352","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-048","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5886","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/internet-explorer-zone-elevation","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1451","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka \"Memory Overwrite Vulnerability.\""},{"lang":"es","value":"El servicio WINS en Microsoft Windows 2000 SP4, y Server 2003 SP1 y SP2 no verifica adecuadamente las estructuras de datos en paquetes de red WINS, lo que permite a usuarios locales obtener privilegios a través de un paquete manipulado, también conocida como \"Vulnerabilidad de sobrescritura de memoria\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2A0607E7-B416-4AF8-ADF6-6E503627DD29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30584","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020228","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29588","source":"secure@microsoft.com","tags":["Exploit","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1781","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-034","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5582","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1453","sourceIdentifier":"secure@microsoft.com","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets."},{"lang":"es","value":"La pila Bluetooth en Microsoft Windows XP SP2 y SP3, y Vista Gold y SP1 permite a atacantes fisicamente próximos ejecutar código de su elección a través de una larga serie de paquetes Service Discovery Protocol (SDP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:C/I:C/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.3},"baseSeverity":"HIGH","exploitabilityScore":6.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30051","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020221","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29522","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1777","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-030","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4730","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1454","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting \"records from a response that is outside the remote server's authority,\" aka \"DNS Cache Poisoning Vulnerability,\" a different vulnerability than CVE-2008-1447."},{"lang":"es","value":"La vulnerabilidad no especificada en Microsoft DNS en Windows 2000 SP4, Server 2003 SP1 y SP2, y Server 2008 permite a los atacantes remotos dirigir ataques de intoxicación por caché por medio de vectores desconocidos relacionados con la aceptación de \"records from a response that is outside the remote server's authority\", también se conoce como \"DNS Cache Poisoning Vulnerability\", esta una vulnerabilidad diferente a CVE-2008-1447."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://secunia.com/advisories/30925","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30132","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020437","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2019/references","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2019/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1455","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A \"memory calculation error\" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted list values that trigger memory corruption, aka \"Parsing Overflow Vulnerability.\""},{"lang":"es","value":"Un error en el cálculo de memoria en Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2,  y 2007 incluyendo el SP1; y Compatibility Pack para Word, Excel, and PowerPoint 2007 incluyendo  el SP1; y Office 2004 para Mac, permite a atacantes remotos ejecutar código de su elección a través de un archivo PowerPoint con una lista de valores manipulados, lo que lanza una corrupción de memoria. También conocida como \"Vulnerabilidad de desbordamiento en validación\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:*:*:*:*:*:*:*","matchCriteriaId":"AB5FE646-2516-4E38-BE3F-9F987CBBB70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31453","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30579","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020676","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2355","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5555","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1456","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers."},{"lang":"es","value":"Vulnerabilidad de índice de array en el Sistema de Eventos de Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1 y Server 2008 permite a usuarios autentificados remotamente ejecutar código de su elección mediante una petición de subscripción a un evento manipulada que se utiliza para acceder a un array de punteros de una función."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*","matchCriteriaId":"85442DDD-DFB0-455D-8078-EFE49ABC60B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31417","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30586","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020677","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2353","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5630","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1457","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request."},{"lang":"es","value":"El Sistema de Eventos en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1 y Server 2008 no valida correctamente las subscripciones por usuario, lo que permite a usuarios autentificados remotamente ejecutar código de su elección mediante una petición de subscripción a un evento manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*","matchCriteriaId":"85442DDD-DFB0-455D-8078-EFE49ABC60B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31417","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30584","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020677","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2353","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6095","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1458","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action.  NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo index.php en CS-Cart versión 1.3.2, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro q en una acción de búsqueda de productos. NOTA: también se reportó que la versión 1.3.5-SP2 edición de prueba también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2560C3BF-C7DC-4645-B278-F86658660ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*","matchCriteriaId":"9979A5D8-91BE-4956-A408-DECEADE7D16E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3762","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489857/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489857/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1459","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Alberghi (com_alberghi) 2.1.3 y anteriores para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail (detalle) a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlaitalia:com_alberghi:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5F89A9E6-BAAB-481E-BD75-AF20C1FA0B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mamboitalia:com_alberghi:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"84288EE0-262F-49A0-B230-E0E306B26389"}]}]}],"references":[{"url":"http://secunia.com/advisories/29473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28331","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41285","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1460","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Joovideo (com_joovideo) 1.0 y 1.2.2 para Mambo and Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail (detalle) a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlapixel:com_joovideo:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0336CEFC-9E81-4FB0-92DA-48ABACD92ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlapixel:com_joovideo:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B41DE4-FC21-4663-AA2E-15E04623D087"}]}]}],"references":[{"url":"http://secunia.com/advisories/29474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28318","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41279","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1461","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line.  NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker."},{"lang":"es","value":"Desbordamiento de búfer en XnView 1.92.1 permite a atacantes remotos ayudados por elme usuario ejecutar código de su elección a través de un argumento nombre de archivo largo en la línea de comandos. NOTA: no está claro si hay configuraciones del gestor común en los que este argumento sea controlado por un atacante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xnview:xnview:1.92.1:*:*:*:*:*:*:*","matchCriteriaId":"01370703-08C0-49C3-A7F6-5C223FB146C0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3761","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.click-internet.fr/index.php?cki=News&news=9","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489658/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28259","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41245","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.click-internet.fr/index.php?cki=News&news=9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489658/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1462","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo secciones (Section) de RunCMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro artid en una acción viewarticle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*","matchCriteriaId":"54FAD4EA-656F-42EE-A288-12EAF0AF8B5F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28378","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41377","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5285","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1463","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the \"corrective action\" section of an alert page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el GUI de administración de Imperva SecureSphere MX Management Server 5.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una petición no válida o prohibida a un servidor web protegido por SecureSphere, lo que dispara una inyección en la sección de \"corrective action\" en una página de alerta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A1F79554-D9E6-40C8-8F3B-BAC9C43ADC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_mx_management_server:5:*:*:*:*:*:*:*","matchCriteriaId":"7767378F-3087-4C0F-9B49-5BBDBE7D1F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_mx_management_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"77B7CE60-7FF7-453D-AFE7-0F42E65F3DC7"}]}]}],"references":[{"url":"http://imperva.com/go/secadv/20080318","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28279","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41359","source":"cve@mitre.org"},{"url":"http://imperva.com/go/secadv/20080318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1464","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"More information is available at: http://www.securityfocus.com/bid/28163","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) query parameter to (a) search.php; (2) gusername and (3) gpassword parameters to (b) login.php; and the (4) username and (5) password parameters to (c) gadmin/index.php in a signin action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Gallarific Free Edition 1.1 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros(1) query a (a) search.php; (2) gusername y (3) gpassword a (b) login.php y (4) username y (5) password a (c) gadmin/index.php en una acción signin. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallarific:gallarific:1.1:-:free:*:*:*:*:*","matchCriteriaId":"337C1C62-0096-47C4-844C-F52274DA3712"}]}]}],"references":[{"url":"http://secunia.com/advisories/29399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1465","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Detodas Restaurante (com_restaurante) 1.0 para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail (detalle) a index.php, un producto distinto a CVE-2008-0562."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:detodas:com_restaurante:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7CA31204-F1F3-4BA1-AC00-CF02C704052F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28324","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41283","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5280","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1466","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bn_dir_default parameter to (1) add_user.php, (2) create_forum.php, (3) create_user.php, (4) delete_notes.php, (5) delete_user.php, (6) edit_forum.php, (7) mail_users.php, (8) moderate_notes.php, and (9) reorder_forums.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos PHP remotos en W-Agora 4.0 permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro bn_dir_default a 1) add_user.php, (2) create_forum.php, (3) create_user.php, (4) delete_notes.php, (5) delete_user.php, (6) edit_forum.php, (7) mail_users.php, (8) moderate_notes.php y (9) reorder_forums.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5C784AC9-234B-4E5D-987C-3CB2CA1CC96F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28366","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41352","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1467","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to \"received URLs in the message window.\"  NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by the victim"},{"lang":"es","value":"** EN DISPUTA ** CenterIM versión 4.22.3 y anteriores, permiten a los atacantes remotos asistidos por el usuario ejecutar comandos arbitrarios por medio de metacaracteres de shell en un URI, relacionado con las \"received URLs in the message window\". NOTA: este problema se ha cuestionado debido a la naturaleza  de usuario asistido, ya que la URL requiere ser seleccionada y activada por la víctima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centerim:centerim:4.22.3:*:*:*:*:*:*:*","matchCriteriaId":"5A9FB207-F232-4D36-829A-8D0768175D0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29597","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0956/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41362","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5283","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00073.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00076.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0956/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00076.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1468","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en namazu.cgi de Namazu antes de 2.0.18 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una entrada codificada con UTF-7, relacionada con un fallo al establecer el conjunto de caracteres, un vector distinto a CVE-2004-1318 y CVE-2001-1350. NOTA: alguno de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.17","matchCriteriaId":"7652498D-C86D-4457-AE11-99CD320DFCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:1.3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2AAE7466-56A5-4FBF-8F28-F33150FA2713"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E9E6345-F6AF-4AC4-B9A5-54EDAB3E49CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F17EB317-5BCF-4756-8F1E-FD3303BBC662"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"71C4F1F4-53D0-4EE4-8F6C-171E9B43A942"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"46FB42D2-C51A-4C2B-97DC-308246D7D853"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"7E70426F-C511-4582-BF05-448CCFB52607"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"8FB99CD9-3892-4F06-AE5A-66741CE8201F"},{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AC5AC101-DF8C-4517-9F46-64E4201D2D9F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2300892830/index.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127239985506823&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127239985506823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29561","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39645","source":"cve@mitre.org"},{"url":"http://www.namazu.org/security.html.en","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28380","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41360","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00575.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00654.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/jp/JVN%2300892830/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127239985506823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127239985506823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.namazu.org/security.html.en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00575.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00654.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1469","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T21:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"More information available at: http://www.securityfocus.com/bid/28163/info","cveTags":[],"descriptions":[{"lang":"en","value":"Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Gallarific Free Edition 1.1 no necesita autentificación para 1) photos.php, (2) comments.php y (3) gallery.php en gadmin/, lo que permite a atacantes remotos editar objetos a través de una petición directa, vectores distintos a CVE-2008-1327. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallarific:gallarific:1.1:-:free:*:*:*:*:*","matchCriteriaId":"337C1C62-0096-47C4-844C-F52274DA3712"}]}]}],"references":[{"url":"http://secunia.com/advisories/29399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1470","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier, allows remote attackers to conduct cross-site scripting (XSS) attacks via the postdata parameter, due to an incomplete fix for CVE-2005-1118."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en IISWebAgentIF.dll en el WebID RSA Authentication Agent 5.3 y posiblemente anteriores, permite a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) a través del parámetro postdata, debido a una solución incompleta para CVE-2005-1118."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:webid:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1FECE5B8-1517-4703-9F87-ACF160B89A89"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3768","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489691/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489691/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1471","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory."},{"lang":"es","value":"El dispositivo cpoint.sys driver en Panda Internet Security 2008 y Antivirus+ Firewall 2008 permite a usuarios locales provocar una denegación de servicio (caída del sistema o kernel panic), sobrescribir memoria o ejecutar código de su elección a través de una petición IOCTL manipulada que dispara una escritura en memoria fuera de límite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:x32:*:*:*:*:*","matchCriteriaId":"8C7E0F58-4948-4785-816F-6B2DC5FEA18E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:*:x32:*:*:*:*:*","matchCriteriaId":"EEC92A11-2DA9-45B0-8887-876126DA6940"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:pro:*:*:*:*:*","matchCriteriaId":"26CF0F23-E9B6-415F-868A-C883EF11F389"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_antivirus_and_firewall:2008:*:*:*:*:*:*:*","matchCriteriaId":"C4D1D99A-22AA-4FC6-ADEF-2759EB96CF5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"045DD35A-DBE0-412F-AEE0-CA333328A59D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pandasecurity.com/homeusers/support/card?id=41231&idIdioma=2&ref=ProdExp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.pandasecurity.com/homeusers/support/card?id=41337&idIdioma=2&ref=ProdExp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/489292/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28150","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019568","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-001.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0801/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41079","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pandasecurity.com/homeusers/support/card?id=41231&idIdioma=2&ref=ProdExp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.pandasecurity.com/homeusers/support/card?id=41337&idIdioma=2&ref=ProdExp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/489292/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0801/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1472","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el control ActiveX ListCtrl (ListCtrl.ocx), como es usado en varios productos de CA, incluyendo BrightStor ARCserve Backup versión R11.5, Desktop Management Suite versiones r11.1 hasta r11.2 y productos Unicenter versiones r11.1 hasta r11. 2, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo) por medio de un argumento largo en el método AddColumn."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:brightstor_arcserve_backup_laptops_desktops:11.5:*:*:*:*:*:*:*","matchCriteriaId":"8CB967E4-2CE5-4283-A798-2C083AFB5B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.1:a:*:*:*:*:*:*","matchCriteriaId":"B8FAF118-7DCB-4F6E-8645-102ED226828B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.1:c1:*:*:*:*:*:*","matchCriteriaId":"04E5D3CF-9015-4D84-A498-25120C4DDC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.1:ga:*:*:*:*:*:*","matchCriteriaId":"0BC9155B-394F-4DB0-ACEE-CFF62E03A44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"CEBE5366-CEDA-4CF2-9625-13E9D9E93B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_dsm_r11_list_control_atx:11.2.3.1895:*:*:*:*:*:*:*","matchCriteriaId":"C68A1807-ED3A-4E7B-84BF-BB6AD0916174"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:asset_management:r11.1:a:*:*:*:*:*:*","matchCriteriaId":"21C1E9A1-00F4-4866-9899-D644BD1E6E65"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:asset_management:r11.1:c1:*:*:*:*:*:*","matchCriteriaId":"7A89E3C3-861F-41DE-B46C-776E4BDC6F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:asset_management:r11.1:ga:*:*:*:*:*:*","matchCriteriaId":"170FCD6A-792C-452D-97E3-FE9A354D95D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:asset_management:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"6B9F9C9B-CD0E-42B6-B654-EE9E16A93790"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:asset_management:r11.2:a:*:*:*:*:*:*","matchCriteriaId":"EBD24EBE-2942-4A0D-9481-FEC5BE9C94C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:asset_management:r11.2:c1:*:*:*:*:*:*","matchCriteriaId":"80486731-420B-4B2F-B2C3-B40E0C57ACFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:desktop_management_bundle:r11.1:a:*:*:*:*:*:*","matchCriteriaId":"D4E67182-4AC8-4094-AC4F-815E40AE82E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:desktop_management_bundle:r11.1:c1:*:*:*:*:*:*","matchCriteriaId":"E2A6834E-2E6C-4DC6-B8F7-BB3FE643BE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:desktop_management_bundle:r11.1:ga:*:*:*:*:*:*","matchCriteriaId":"1D4976C0-DF5F-4A7E-AEC1-6C90E82F5047"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:desktop_management_bundle:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"C03C0146-12CF-437E-B13A-C13FC06EC0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:desktop_management_bundle:r11.2:a:*:*:*:*:*:*","matchCriteriaId":"C2FE92F0-0F01-455F-8A13-1FC8E65F2117"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:desktop_management_bundle:r11.2:c1:*:*:*:*:*:*","matchCriteriaId":"078BC506-4092-4FE4-8AD2-1DDD92848852"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:remote_control:r11.1:a:*:*:*:*:*:*","matchCriteriaId":"B1607DE7-0078-4BF3-8E28-59F1CBC7775A"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:remote_control:r11.1:c1:*:*:*:*:*:*","matchCriteriaId":"F0834E9C-2B65-4AB9-B4A7-410282967975"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:remote_control:r11.1:ga:*:*:*:*:*:*","matchCriteriaId":"71B90EAA-275B-4E9E-B254-C4EC8158939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:remote_control:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"4C3338E5-87AC-4D7C-96EF-38A8B43D0060"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:remote_control:r11.2:a:*:*:*:*:*:*","matchCriteriaId":"CCD51973-2876-44AD-8FC5-0469267E71C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:remote_control:r11.2:c1:*:*:*:*:*:*","matchCriteriaId":"860B437B-5C99-421D-BAAE-56F583DAA532"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:software_delivery:r11.1:a:*:*:*:*:*:*","matchCriteriaId":"7AF37FA7-6556-49FC-B7C9-D5530BDA00D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:software_delivery:r11.1:c1:*:*:*:*:*:*","matchCriteriaId":"92EBC724-75AB-4201-AD97-1A05A7F46941"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:software_delivery:r11.1:ga:*:*:*:*:*:*","matchCriteriaId":"50BCB284-7A16-4EAE-A8DF-9C432CD71490"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:software_delivery:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"174BBEAB-EE21-4CBC-BE54-E51A4DD95D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:software_delivery:r11.2:a:*:*:*:*:*:*","matchCriteriaId":"57EC5134-D419-44A2-885C-72CB7724F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:unicenter:software_delivery:r11.2:c1:*:*:*:*:*:*","matchCriteriaId":"4CDB0DF2-6160-4059-B379-78E45B4E8D4D"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489893/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490263/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28268","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019617","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0902/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41225","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5264","source":"cve@mitre.org"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489893/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490263/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0902/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1473","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a \"Shatter\" style attack."},{"lang":"es","value":"El Altiris Client Service (AClient.exe) en Symantec Altiris Deployment Solution versiones 6.8.x anteriores a 6.9.164, permite a los usuarios locales alcanzar privilegios mediante un ataque estilo \"Shatter\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F838B26-BCE1-4663-95B1-B40BAB4F614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*","matchCriteriaId":"A1363995-0647-4C83-B3DA-360D5433DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*","matchCriteriaId":"9834A783-AB15-489F-A146-0D0D5A9DB5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.282:*:*:*:*:*:*:*","matchCriteriaId":"A9E968DE-D137-467D-9800-7E00D69BA3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.378:*:*:*:*:*:*:*","matchCriteriaId":"57F30D89-6939-4BE7-B1FA-2F3C3CD6989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.380:*:*:*:*:*:*:*","matchCriteriaId":"66BB840E-08C0-443A-A4B4-CAAF476AB728"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.380.0:*:*:*:*:*:*:*","matchCriteriaId":"1BE8C69C-6604-4244-9634-D8D1CE2B3AEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.03.10.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28110","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019569","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0843/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41100","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.03.10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0843/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1474","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS)."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Roundup versiones anteriores a 1.4.4, presenta un impacto desconocido y vectores de ataque, algunos de los cuales pueden estar relacionados con un problema de tipo cross-site scripting (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"AE1D1977-97A0-4407-9767-D9E6D6F9F6AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19ECB7A0-10A6-4745-A14A-1FDCBA54FA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9968A3F6-095B-40E8-B5B3-FF0B9DDF4D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53AB2FBF-3D72-4548-B7EF-A9966DDADE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0079C51C-5341-4ABD-AEC3-ED95D6B3849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D942F581-EEE1-4475-91BC-A381F647DB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"85EA6E14-83A2-4EB5-B288-1BAAAE7BB15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3B79CB12-0F99-4337-8FFE-300E1F2635A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5D7924E0-09DE-4231-8543-93F132C525D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B5181473-7735-4C4D-84EB-45123A4CB2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"611D6B74-E98A-4060-A4E8-0066B23097C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDDDAB17-2E78-4F3A-8129-5F6B0AD6824C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7BC05048-471F-43B8-84F1-B3A4AD0BEB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D5EA1112-FD27-4560-99B9-F95CB4875B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B1C7A4E-B709-45B9-820B-9DA47D09A768"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre1:*:*:*:*:*:*","matchCriteriaId":"12248494-B69A-493A-8BAA-AED8B6D90967"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre2:*:*:*:*:*:*","matchCriteriaId":"83D18991-4357-4EDA-B58A-C2B2D55AF65C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre3:*:*:*:*:*:*","matchCriteriaId":"3EA23543-A008-4A35-A2FD-A5C92419B5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"85911897-FF14-4287-A70C-2BE1533D7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"C5AF4647-28B7-4A1F-8CE0-1AECF5E9DA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"7491CD5B-BE8B-43D9-9A9C-A9D9091FFF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C170F3BF-A954-4259-AFEA-8FBBA9A03E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"368312AF-2FC0-4528-A735-FE8E6412637D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.2:pr1:*:*:*:*:*:*","matchCriteriaId":"15A83A5C-A463-4A90-9C2B-CD4BF64D9F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5:*:*:*:*:*:*:*","matchCriteriaId":"BFA22ED9-74AB-4B1A-AE32-002CBC70DD33"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"7CA7035B-ACAD-43CC-8B0A-5D5C71ED4D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5FF02B8B-EE0E-490C-B611-9E9073B08A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB0B1077-5E96-49D8-8C42-E1B269D977D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:pr1:*:*:*:*:*:*","matchCriteriaId":"62D6C85E-EDA1-4F97-86F7-A55D0209E9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"046CAABB-4A40-4734-9506-FE9E5D74ED6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D7C743E-B264-4FEB-AE0D-6B63C6D25CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"18AC89CD-2092-4694-8DA3-268466CB1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C8EB5412-927B-49F4-B1F1-0890AB674F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B52588E4-C6C4-45DE-B8C2-4948AEAA2E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"7C747D8A-1FD7-4E80-949F-49833D8A871B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"74CEEC73-4AF9-4E5A-A526-101E23A7ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.8:stable:*:*:*:*:*:*","matchCriteriaId":"6890C793-5346-4274-91F6-D3A1F4D4454B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"10F15818-1EC9-4E72-8E10-BF7CBEE6DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2136129D-9795-4281-A07E-297BE50A7A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b1:*:*:*:*:*:*","matchCriteriaId":"31430BEC-1190-46F9-82B8-6EBE6CBE1BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b2:*:*:*:*:*:*","matchCriteriaId":"E0855645-97A3-4CA1-9A7C-3050151302E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b3:*:*:*:*:*:*","matchCriteriaId":"86F1057A-0273-4B77-8DD9-32D54676F991"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b4:*:*:*:*:*:*","matchCriteriaId":"ACC3C30E-4796-49CE-AFDF-DC7B29737FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"068DEB7C-DAC2-45D6-A0B6-DC54EF52DF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"960311B7-4C1B-4D7F-B8D1-A99977C389D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"953F1AAF-CFF8-462C-99E4-7A4D8404BCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"280DC837-EB0D-42EA-8236-FFD87B0987AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B57648C-D3D8-4ADE-8500-9E7CC170DF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E74C7F38-1DF5-4817-A6F7-F24E015346C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"A7305D65-2C60-4AC0-86E8-10A115EC008C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"8829C3BE-C384-4CB5-9128-12338E1E68F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"134F2504-202E-456E-973F-CDF26EC119A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"67CB2FD7-7E9E-4395-98B9-7A97B2140A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"932E8C5F-23DC-4A3D-8683-095E98595A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"34318627-2740-4FDC-BF08-87CD6AD82F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:b1:*:*:*:*:*:*","matchCriteriaId":"8455602A-65E5-4DAE-9D66-CA9A226E5AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:b2:*:*:*:*:*:*","matchCriteriaId":"5ABA002F-3226-4492-9E4A-F8D2BD0C0791"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:b3:*:*:*:*:*:*","matchCriteriaId":"3595DB2B-EA69-4A47-B69D-3D526E9E9D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D864CE13-3E5D-4A43-B45C-50FD73634828"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5E6CF969-C90B-47AD-8538-F865C6D96F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"BE2ADB27-CC67-4E07-AB14-D4E7AFBAF41A"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"C00B6823-DDC4-455B-806E-20DC50C91CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"25307B01-1BDF-402C-BAB8-3F79E3AD5FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B20E4D7D-AEB3-431A-8EAD-AA0968F339A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"EE10C1E5-78C2-460D-BD73-97026C18D2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"EAA37A04-8B76-41F5-BB6A-BC510100A59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"E83205C4-D7BE-41C8-B4B2-76B265743D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"CAA29FD3-B9CE-47B8-9593-BD953C3ECC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"88EC7A4B-678F-4A87-9E7F-1F9B95647E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"A7B45F23-702E-436A-BEF5-26AB0B7B3288"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"41C8C39E-F339-48A4-83AB-D89493070418"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.0:b1:*:*:*:*:*:*","matchCriteriaId":"0C1E36E4-C4C9-4AE9-A91E-504B75441D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.0:b2:*:*:*:*:*:*","matchCriteriaId":"CA49A32F-5932-4E3D-80F4-3F695E6D967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D98E71AD-3B23-44D8-B7DE-902B616BED76"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"36336002-7EDC-47D2-A652-923C5DC99847"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6893FFAD-A2D1-4C8B-983F-68C2899E56E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"81944927-FFCF-4709-B80B-7279CE31A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"A5B11756-4710-4E9A-9E37-C3FA1C5E5B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"8DEAB81E-DAA8-49CD-AEC7-1492DE605172"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.9.0:b1:*:*:*:*:*:*","matchCriteriaId":"4AF05890-2633-4863-B545-ED923D9A4A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5D00A7FA-8CC2-49DE-B515-7ADA3240549E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55982C77-F866-4298-BD46-E3DF136C6203"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"69A92DF0-153B-4130-A12F-28A921673A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5E6A5DC6-8E85-4545-840A-3D5DF8FB3B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A85D14A2-5505-43CC-8416-6165C604D363"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0BCEF97A-C493-41A8-8A7D-4A187F016AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55B7551D-6264-4949-A038-6006F432F261"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"12903A2D-44DF-4606-B4DB-0501786A22C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7032E7E5-B353-451C-AA8A-70F055DE68C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A11A4AFF-EE53-477D-9B82-6A65A6765DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8F5E2921-8219-4F59-B877-C2BCF9C0AB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0038D97D-E099-41FD-B467-C2FA8A1A04BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"CCFDDF8D-B34E-4A31-A335-E41477436C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"764F3225-B6F0-497E-B2BD-A6CBA40D06BF"}]}]}],"references":[{"url":"http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29848","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-21.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1554","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28239","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436546","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41241","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html","source":"cve@mitre.org"},{"url":"http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1475","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods."},{"lang":"es","value":"El servidor xml-rpc en Roundup 1.4.4 no comprueba los permisos de propiedad, lo que permite a atacantes evitar restricciones y editar o leer propiedades restringidas a través de los métodos (1) list, (2) display y (3) set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"AE1D1977-97A0-4407-9767-D9E6D6F9F6AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19ECB7A0-10A6-4745-A14A-1FDCBA54FA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9968A3F6-095B-40E8-B5B3-FF0B9DDF4D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53AB2FBF-3D72-4548-B7EF-A9966DDADE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0079C51C-5341-4ABD-AEC3-ED95D6B3849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D942F581-EEE1-4475-91BC-A381F647DB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"85EA6E14-83A2-4EB5-B288-1BAAAE7BB15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3B79CB12-0F99-4337-8FFE-300E1F2635A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5D7924E0-09DE-4231-8543-93F132C525D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B5181473-7735-4C4D-84EB-45123A4CB2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"611D6B74-E98A-4060-A4E8-0066B23097C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDDDAB17-2E78-4F3A-8129-5F6B0AD6824C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7BC05048-471F-43B8-84F1-B3A4AD0BEB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D5EA1112-FD27-4560-99B9-F95CB4875B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B1C7A4E-B709-45B9-820B-9DA47D09A768"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre1:*:*:*:*:*:*","matchCriteriaId":"12248494-B69A-493A-8BAA-AED8B6D90967"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre2:*:*:*:*:*:*","matchCriteriaId":"83D18991-4357-4EDA-B58A-C2B2D55AF65C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre3:*:*:*:*:*:*","matchCriteriaId":"3EA23543-A008-4A35-A2FD-A5C92419B5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"85911897-FF14-4287-A70C-2BE1533D7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"C5AF4647-28B7-4A1F-8CE0-1AECF5E9DA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"7491CD5B-BE8B-43D9-9A9C-A9D9091FFF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C170F3BF-A954-4259-AFEA-8FBBA9A03E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"368312AF-2FC0-4528-A735-FE8E6412637D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.2:pr1:*:*:*:*:*:*","matchCriteriaId":"15A83A5C-A463-4A90-9C2B-CD4BF64D9F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5:*:*:*:*:*:*:*","matchCriteriaId":"BFA22ED9-74AB-4B1A-AE32-002CBC70DD33"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"7CA7035B-ACAD-43CC-8B0A-5D5C71ED4D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5FF02B8B-EE0E-490C-B611-9E9073B08A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB0B1077-5E96-49D8-8C42-E1B269D977D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:pr1:*:*:*:*:*:*","matchCriteriaId":"62D6C85E-EDA1-4F97-86F7-A55D0209E9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"046CAABB-4A40-4734-9506-FE9E5D74ED6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D7C743E-B264-4FEB-AE0D-6B63C6D25CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"18AC89CD-2092-4694-8DA3-268466CB1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C8EB5412-927B-49F4-B1F1-0890AB674F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B52588E4-C6C4-45DE-B8C2-4948AEAA2E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"7C747D8A-1FD7-4E80-949F-49833D8A871B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"74CEEC73-4AF9-4E5A-A526-101E23A7ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.8:stable:*:*:*:*:*:*","matchCriteriaId":"6890C793-5346-4274-91F6-D3A1F4D4454B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"10F15818-1EC9-4E72-8E10-BF7CBEE6DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2136129D-9795-4281-A07E-297BE50A7A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b1:*:*:*:*:*:*","matchCriteriaId":"31430BEC-1190-46F9-82B8-6EBE6CBE1BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b2:*:*:*:*:*:*","matchCriteriaId":"E0855645-97A3-4CA1-9A7C-3050151302E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b3:*:*:*:*:*:*","matchCriteriaId":"86F1057A-0273-4B77-8DD9-32D54676F991"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b4:*:*:*:*:*:*","matchCriteriaId":"ACC3C30E-4796-49CE-AFDF-DC7B29737FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"068DEB7C-DAC2-45D6-A0B6-DC54EF52DF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"960311B7-4C1B-4D7F-B8D1-A99977C389D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"953F1AAF-CFF8-462C-99E4-7A4D8404BCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"280DC837-EB0D-42EA-8236-FFD87B0987AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B57648C-D3D8-4ADE-8500-9E7CC170DF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E74C7F38-1DF5-4817-A6F7-F24E015346C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"A7305D65-2C60-4AC0-86E8-10A115EC008C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"8829C3BE-C384-4CB5-9128-12338E1E68F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"134F2504-202E-456E-973F-CDF26EC119A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"67CB2FD7-7E9E-4395-98B9-7A97B2140A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"932E8C5F-23DC-4A3D-8683-095E98595A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"34318627-2740-4FDC-BF08-87CD6AD82F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:b1:*:*:*:*:*:*","matchCriteriaId":"8455602A-65E5-4DAE-9D66-CA9A226E5AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:b2:*:*:*:*:*:*","matchCriteriaId":"5ABA002F-3226-4492-9E4A-F8D2BD0C0791"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.0:b3:*:*:*:*:*:*","matchCriteriaId":"3595DB2B-EA69-4A47-B69D-3D526E9E9D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D864CE13-3E5D-4A43-B45C-50FD73634828"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5E6CF969-C90B-47AD-8538-F865C6D96F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"BE2ADB27-CC67-4E07-AB14-D4E7AFBAF41A"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"C00B6823-DDC4-455B-806E-20DC50C91CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"25307B01-1BDF-402C-BAB8-3F79E3AD5FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B20E4D7D-AEB3-431A-8EAD-AA0968F339A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"EE10C1E5-78C2-460D-BD73-97026C18D2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"EAA37A04-8B76-41F5-BB6A-BC510100A59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"E83205C4-D7BE-41C8-B4B2-76B265743D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"CAA29FD3-B9CE-47B8-9593-BD953C3ECC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"88EC7A4B-678F-4A87-9E7F-1F9B95647E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"A7B45F23-702E-436A-BEF5-26AB0B7B3288"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"41C8C39E-F339-48A4-83AB-D89493070418"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.0:b1:*:*:*:*:*:*","matchCriteriaId":"0C1E36E4-C4C9-4AE9-A91E-504B75441D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.0:b2:*:*:*:*:*:*","matchCriteriaId":"CA49A32F-5932-4E3D-80F4-3F695E6D967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D98E71AD-3B23-44D8-B7DE-902B616BED76"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"36336002-7EDC-47D2-A652-923C5DC99847"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6893FFAD-A2D1-4C8B-983F-68C2899E56E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"81944927-FFCF-4709-B80B-7279CE31A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"A5B11756-4710-4E9A-9E37-C3FA1C5E5B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"8DEAB81E-DAA8-49CD-AEC7-1492DE605172"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.9.0:b1:*:*:*:*:*:*","matchCriteriaId":"4AF05890-2633-4863-B545-ED923D9A4A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5D00A7FA-8CC2-49DE-B515-7ADA3240549E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55982C77-F866-4298-BD46-E3DF136C6203"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"69A92DF0-153B-4130-A12F-28A921673A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5E6A5DC6-8E85-4545-840A-3D5DF8FB3B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A85D14A2-5505-43CC-8416-6165C604D363"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0BCEF97A-C493-41A8-8A7D-4A187F016AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55B7551D-6264-4949-A038-6006F432F261"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"12903A2D-44DF-4606-B4DB-0501786A22C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7032E7E5-B353-451C-AA8A-70F055DE68C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A11A4AFF-EE53-477D-9B82-6A65A6765DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8F5E2921-8219-4F59-B877-C2BCF9C0AB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0038D97D-E099-41FD-B467-C2FA8A1A04BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"CCFDDF8D-B34E-4A31-A335-E41477436C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"764F3225-B6F0-497E-B2BD-A6CBA40D06BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32805","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-21.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1907211&group_id=31577&atid=402788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28238","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0891","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436546","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41240","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00452.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00478.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1907211&group_id=31577&atid=402788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00452.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00478.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1476","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Serendipity (S9Y) antes de 1.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados relacionados con trackbacks recibidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"F9A7F03F-B208-42CB-9C92-D6C91B5A0B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.3:*:*:*:*:*:*:*","matchCriteriaId":"F1E76BF9-E517-4F90-8BF0-E9778ADB8EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.4:*:*:*:*:*:*:*","matchCriteriaId":"CCD05A9E-1ADA-493A-8B4A-42CF6B0799B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"BD95BE08-FE15-4003-A7A8-66ED5FFA1F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.6_pl3:*:*:*:*:*:*:*","matchCriteriaId":"0B643749-7042-4E0E-AA43-B393067C689D"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.7:*:*:*:*:*:*:*","matchCriteriaId":"75E0E8DF-38CD-405C-AB70-915A03FD4990"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"65197FD8-6DA6-41F6-8187-9D76308D9E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.8:*:*:*:*:*:*:*","matchCriteriaId":"712D208E-D70C-48FF-BDA8-BDFB78415305"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"048A793F-A64E-486A-95CF-17DA2F6FBF56"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"7388332D-10CE-439A-AA1B-E03AA6786CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9F2BE6D0-0EA7-4764-8A98-7BE7D3F80C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9F2C16D1-3708-4EB9-8CFC-58BE57AF11EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"BAE60E47-6660-4ABF-B77D-63D517ABC481"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.9:*:*:*:*:*:*:*","matchCriteriaId":"D22A37CD-4F71-42E6-8E30-6C9815068C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"15A336BA-698D-4F93-BCBA-63693E50823E"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C78FB439-F70B-4EE1-B026-BCCFA3D94D40"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3B2ED0DF-DEAD-497A-A6E4-0E861AF3C0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DA8A0A3E-BAC6-4338-A026-129048532322"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2B42960D-8880-4DD9-A8BA-8D9D34E1C568"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6C7F0EC2-8A5F-45A0-A557-E831B94BE3A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0223CA41-2914-43B5-B768-AF18A9B3815D"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4CB35A49-9FF9-4F53-B5E9-F7AB6300CADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FBA8A071-CB09-4269-8606-823B32207BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"26AA8798-E46D-4F91-ABFF-B1842275D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A6D2694B-E9C3-49E5-83C2-53138CDFAA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipity:serendipity:1.2:*:*:*:*:*:*:*","matchCriteriaId":"727E6C9A-C6F0-41C3-B4DA-AED1F22E5111"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/192-Serendipity-1.3-released-addresses-security.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29398","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1528","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28298","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0925/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41343","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/192-Serendipity-1.3-released-addresses-security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0925/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1477","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) busca and (2) link parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en busca.php de eForum 0.4 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) busca y (2) link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jcorporate:eforum:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5916B252-5D2D-4D21-ADF5-D91561B1F24E"}]}]}],"references":[{"url":"http://omni.playhack.net/blog/?p=10","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3767","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489738/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28293","source":"cve@mitre.org"},{"url":"http://omni.playhack.net/blog/?p=10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489738/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1478","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode connection, then closing the original FTP connection.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Home FTP Server 1.4.5.89 permite a atacantes remotos provocar una denegación de servicio (caída) abriendo una conexión FTP en modo pasivo y a continuación cerrando la conexión FTP original. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ari_pikivirta:home_ftp_server:1.4.5.89:*:*:*:*:*:*:*","matchCriteriaId":"C9B9D817-6643-4426-B57B-45DA4007940A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3766","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489706/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28283","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5270","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489706/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1479","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows remote attackers to inject arbitrary web script or HTML via the directory parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de cyberfrogs.net cfnetgs 0.24 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro directory. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfrogs:cfnetgs:0.24:*:*:*:*:*:*:*","matchCriteriaId":"BD3D7B2C-D4EC-46CA-BD01-CC50D7DB6A06"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28267","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1480","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request."},{"lang":"es","value":"rpc.metad de Sun Solaris 10 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una petición RPC malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249146-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-015.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28261","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019652","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0918/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0206","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41224","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249146-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-015.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0918/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1481","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de webSPELL 4.1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro board. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9B5F7643-A1B4-4195-A59B-33F3F9D31C72"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28294","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28294/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28294/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1482","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demuxers/demux_flv.c; (2) a crafted .MOV file, which triggers an overflow in demuxers/demux_qt.c; (3) a crafted .RM file, which triggers an overflow in demuxers/demux_real.c; (4) a crafted .MVE file, which triggers an overflow in demuxers/demux_wc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demuxers/ebml.c; or (6) a crafted .CAK file, which triggers an overflow in demuxers/demux_film.c."},{"lang":"es","value":"Múltiples desbordamientos de entero en xine-lib 1.1.11 y anteriores permiten a atacantes remotos disparar desbordamientos de búfer basados en montículo y posiblemente ejecutar código de su elección a través de (1) un archivo .FLV manipulado, que dispara un desbordamiento en demuxers/demux_flv.c; (2) un archivo .MOV manipulado, que dispara un desbordamiento en demuxers/demux_qt.c; (3) un archivo .RM manipulado, que dispara un desbordamiento en demuxers/demux_real.c; (4) un archivo .MVE manipulado, que dispara un desbordamiento en demuxers/demux_wvc3movie.c; (5) un archivo .MKV manipulado, que dispara un desbordamiento en demuxers/ebml.c; o (6) un archivo .CAK manipulado, que dispara un desbordamiento en demuxers/demux_film.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/xinehof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/xinehof.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29484","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30337","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31372","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3769","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.441137","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1586","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489894/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28370","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0981/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=438663","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41350","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00157.html","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/xinehof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/xinehof.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.441137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489894/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=438663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00157.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1483","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs."},{"lang":"es","value":"OpenSSH 4.3p2 y probablemente otras versiones, permite a usuarios locales secuestrar conexiones X enviadas provocando que ssh ponga DISPLAY a :10, incluso cuando otro proceso está escuchando en el puerto asociado, como se demostró abriendo el puerto TCp 6010 (IPv4) y escaneando una cookie enviada por Emacs."}],"vendorComments":[{"organization":"Red Hat","comment":"All openssh versions shipped in Red Hat Enterprise Linux 5 include the patch for this issue.\n\nThis issue was fixed in Red Hat Enterprise Linux 4 via: https://rhn.redhat.com/errata/RHSA-2005-527.html\n\nRed Hat Enterprise Linux 3 is affected by this issue. The Red Hat Security Response Team has rated this issue as having low security\nimpact. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-1483\n","lastModified":"2010-03-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3p2:*:*:*:*:*:*:*","matchCriteriaId":"3640CCC9-EC4A-44A4-B747-7BAAAD3460C7"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29537","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29683","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29873","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29939","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30086","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30230","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30347","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1","source":"cve@mitre.org"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm","source":"cve@mitre.org"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1576","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml","source":"cve@mitre.org"},{"url":"http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:078","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490054/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28444","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019707","source":"cve@mitre.org"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0994/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1123/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1124/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1448/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1526/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1624/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1630/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41438","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2397","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/597-1/","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490054/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0994/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1123/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1124/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1448/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1526/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1624/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1630/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/597-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1484","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account.  NOTE: this issue might be related to CVE-2006-5737."},{"lang":"es","value":"La característica de reinicialización de contraseña en PunBB 1.2.16 y anteriores utiliza números aleatorios previsibles basados en la hora del sistema, lo que permite a usuarios autentificados remotamente averiguar la nueva contraseña a través de un ataque de fuerza bruta con una semilla que está basada en la creación aproximada de la cuenta objetivo. NOTA: este caso podría estar relacionado con CVE-2006-5737."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"C68B349F-F76D-49D2-95DA-C8670E32530A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"FB336F6C-E81A-43C2-A252-36A192D9CADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"53C4E00F-E370-4DD1-B760-8AA0CEC4E536"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"00082231-3168-4FCC-807B-8AD3DBBFCE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"B77FF770-BEB4-4320-AA45-399A5CC6540A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF85286-A1F8-4797-99F0-4F42B6D859CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DDBA41AF-C817-476A-8ED1-57808D0B678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C353C194-328F-4C4C-9773-F06A0FA3978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFE58D68-FC34-4F70-849A-2E6CC919230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5713E747-5529-4A64-95B4-D9678D8E88B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1DFD4225-32F9-4D62-87C5-9632A1C03326"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4A75787B-6156-4710-9B24-48C5763E7771"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20A9473E-DE15-4BE2-839D-90B55F8713EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4546E547-54E1-4FB9-9F20-7C70B9F86BC6"}]}]}],"references":[{"url":"http://osvdb.org/45561","source":"cve@mitre.org"},{"url":"http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt","source":"cve@mitre.org"},{"url":"http://punbb.org/forums/viewtopic.php?id=18460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29043","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sektioneins.de/advisories/SE-2008-01.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488408/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27908","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5165","source":"cve@mitre.org"},{"url":"http://osvdb.org/45561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.org/forums/viewtopic.php?id=18460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sektioneins.de/advisories/SE-2008-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488408/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1485","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PunBB 1.2.16 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro get_host parameter a moderate.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"C68B349F-F76D-49D2-95DA-C8670E32530A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"FB336F6C-E81A-43C2-A252-36A192D9CADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"53C4E00F-E370-4DD1-B760-8AA0CEC4E536"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"00082231-3168-4FCC-807B-8AD3DBBFCE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"B77FF770-BEB4-4320-AA45-399A5CC6540A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF85286-A1F8-4797-99F0-4F42B6D859CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DDBA41AF-C817-476A-8ED1-57808D0B678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C353C194-328F-4C4C-9773-F06A0FA3978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFE58D68-FC34-4F70-849A-2E6CC919230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5713E747-5529-4A64-95B4-D9678D8E88B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1DFD4225-32F9-4D62-87C5-9632A1C03326"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4A75787B-6156-4710-9B24-48C5763E7771"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20A9473E-DE15-4BE2-839D-90B55F8713EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4546E547-54E1-4FB9-9F20-7C70B9F86BC6"}]}]}],"references":[{"url":"http://osvdb.org/45561","source":"cve@mitre.org"},{"url":"http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29043","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/45561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1486","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en Phorum versiones anteriores a 5.2.6, cuando la función mysql_use_ft está deshabilitado, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de la búsqueda sin texto completo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.5","matchCriteriaId":"51F00681-EE3F-40FA-B516-19C64B76B973"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"26E2C5A7-8B52-4BDF-80F1-5D45AEBE6E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"0E8DF602-0A22-45A9-A286-C237180701C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"AB109C36-BF0F-41E3-A1F4-0DB264BD4A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"9A31EA2D-2B01-4928-9B3E-9D666FD2758B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"E87DE16C-7C68-4DA8-9BD9-C61D74E61D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*","matchCriteriaId":"5001527E-FE93-4BE7-BF79-7717D64CAF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"D15ED599-6B84-4E03-8BA4-36E1D55F1F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"D491A2B9-949A-4A56-A41F-23A222C03BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"01CFDB0B-6FBD-49F3-8238-81E92661297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*","matchCriteriaId":"EC73A23F-2399-41B0-B6BD-289DF63F2C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*","matchCriteriaId":"AD59DD99-1FC7-498B-9EA1-1AA8FE132EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1655572D-7D56-4D9D-9E0F-A67DF23FC934"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"387E0B83-B240-4922-8C57-CE0CDB000888"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D02321D7-2F3E-40F9-9A76-CFF339C93199"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3B908D49-F64A-488F-95F3-163AB9DAB02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*","matchCriteriaId":"1A26F8E5-0FFE-473D-BDA1-2D5340B5A4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0FF0655C-7C83-4363-A444-993B35D7A7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"B3D0F7C4-902D-4186-8EFF-3876D6D6633E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"6F87C476-6A55-4B19-97B0-24204E96A63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.15a:*:*:*:*:*:*:*","matchCriteriaId":"83F8F544-1B09-4B22-B1F3-2CD1E8D7AECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"17D0AC3E-97F7-4A13-8E65-7E424D055E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.17a:*:*:*:*:*:*:*","matchCriteriaId":"D184385A-763A-4971-8051-20564D020787"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"04B508F8-CFCC-4841-BF70-1ABB28EB1ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"C365D62D-ACB1-44D3-935D-F79A79642684"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F4B45305-FF8B-42F8-A726-F8604BADC323"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"70F4AB87-2D63-4208-8982-BBF978392285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"149A6B5A-84FC-4B6F-B053-0AC881BC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"375346D4-CEA4-4BAE-83DF-639E86C3DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"3C6E0429-3241-47B0-B853-66D3167CE4F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"121F0F96-F901-479F-A64F-3DAE1AC0AFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"F837829B-28E5-41B3-9A23-C4D4A7FE636A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"700B9165-B956-4CAB-B980-42885FFA418F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A4C4E79D-EBE6-456C-A74F-B94F32736383"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D3596808-8399-4EA9-B885-5443CA91C3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.2:beta:*:*:*:*:*:*","matchCriteriaId":"B5409C8A-8B57-48FB-B01E-411C00153E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"74DB422C-E79C-46B2-BB52-8C457822A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"37881B2C-0CD0-4E2A-A11D-9758772640E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phorum.org/phorum5/read.php?64%2C126815%2C126815","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28540","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41418","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phorum.org/phorum5/read.php?64%2C126815%2C126815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1487","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en LinPHA antes de 1.3.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de 1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php y (5) plugins/stats/stats_view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"1CCA245C-A695-478D-A1E4-BCFDE7242E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F46907-9618-4F1C-8C68-E33EBC8E32B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A16B7211-B340-4E4E-A016-74F7596A7B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F06B06C9-CE7F-45A1-946E-C3D3BF843FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B371E12C-9CB4-4E03-8B1E-F8A858AD5476"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F4ECA9FA-1BC3-4644-8A7D-F27DE382B519"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8C616987-BB74-4781-850E-22EA77D61D21"}]}]}],"references":[{"url":"http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup","source":"cve@mitre.org"},{"url":"http://linpha.sourceforge.net/wiki/index.php/Release_Notes#Version_1.3.3","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linpha.sourceforge.net/wiki/index.php/Release_Notes#Version_1.3.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1488","sourceIdentifier":"cve@mitre.org","published":"2008-03-24T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en apc.c de Alternative PHP Cache (APC) de 3.0.11 a 3.0.16 permite a atacantes remotos ejecutar código de su elección a través de un nombre de archivo largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1C918A8A-DC10-4ECC-852E-3738A89F874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D615703C-94A1-41D1-BB09-C76195A29A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12p1:*:*:*:*:*:*:*","matchCriteriaId":"EE771CF6-EDBC-492F-A251-2613EF46E66E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.12p2:*:*:*:*:*:*:*","matchCriteriaId":"11BBF635-1FA0-4A77-A240-76935DDFE17D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"86A81C28-309E-44CE-9221-3B1CB84DD981"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A496D93C-375A-4B06-BC5B-0AB9B41BB6BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"B3318828-8848-4B4E-8FCD-A12A6EC3E733"},{"vulnerable":true,"criteria":"cpe:2.3:a:pecl-php:alternative_php_cache:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"48DE97C6-4950-4337-9913-03A8C7D70E46"}]}]}],"references":[{"url":"http://papasian.org/~dannyp/apcsmash.php.txt","source":"cve@mitre.org"},{"url":"http://pecl.php.net/bugs/bug.php?id=13415","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31082","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-07.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:082","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28457","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41420","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html","source":"cve@mitre.org"},{"url":"http://papasian.org/~dannyp/apcsmash.php.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pecl.php.net/bugs/bug.php?id=13415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1489","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984."},{"lang":"es","value":"Desbordamiento de entero en la función MP4_ReadBox_rdrf de libmp4.c para VLC 0.8.6e permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de una MP4 RDRF box manipulada que dispara un desbordamiento de búfer basado en montículo, una vulnerabilidad distinta a CVE-2008-0984."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6e:*:*:*:*:*:*:*","matchCriteriaId":"6545867A-07ED-4E16-AED0-566C5CCD46FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/29503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29800","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"cve@mitre.org"},{"url":"http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28433","source":"cve@mitre.org"},{"url":"http://www.videolan.org/security/sa0803.php","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41412","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa0803.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1490","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659."},{"lang":"es","value":"Desbordamiento de búfer en Arigma, un control Active X determinado de ImageUploader4.ocx 4.1.36.0, usado con Piczo (también conocido como Pizco) y posiblemente otros servicios en línea, permite a atacantes remotos ejecutar código de su elección mediante vectores sin especificar, posiblemente implicando una propiedad larga  Action, una CLSID diferente de la CVE-2008-0659."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aurigma:image_uploader_activex_control:4.1.36.0:*:*:*:*:*:*:*","matchCriteriaId":"DEC69418-BF28-4200-A5F9-898442AFD034"},{"vulnerable":true,"criteria":"cpe:2.3:a:piczo:imageuploader4:4.1.36.0:*:*:*:*:*:*:*","matchCriteriaId":"5FBD0312-E293-4536-82D4-963E77E7B2FD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120605071403813&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28354","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40152","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120605071403813&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1491","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el Servidor DPC Proxy (DpcProxy.exe) de ASUS Remote Console (también conocida como ARC o ASMB3) 2.0.0.19 y 2.0.0.24, permite a atacantes remotos ejecutar código de su elección mediante una cadena larga al puerto TCP 623."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asus:remote_console:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"1F3E7CD7-6891-4EB8-BDC4-5C9E64D001FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asus:remote_console:2.0.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8B397474-6F33-4921-AA32-369E1A95105D"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/asuxdpc-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489966/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28394","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0982/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41358","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5694","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/asuxdpc-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489966/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0982/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1492","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php.  NOTE: it was later reported that vector 1 is also present in 2.0."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en CoronaMatrix phpAddressBook versión 2.11, permiten a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro skin en los archivos (1) index.php y (2) install.php. NOTA: más tarde se reportó que el vector 1 también está presente en versión 2.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coronamatrix:phpaddressbook:2.11:*:*:*:*:*:*:*","matchCriteriaId":"ADC4C181-C11F-42EB-BEC7-CA3BC14C4BFB"}]}]}],"references":[{"url":"http://0x90.com.ar/Advisory/20080321.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3772","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489971/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491525/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41394","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5288","source":"cve@mitre.org"},{"url":"http://0x90.com.ar/Advisory/20080321.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491525/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1493","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de Salto de Directorio en login.php de Cuteflow Bin 1.5.0, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cuteflow-bin:cuteflow_bin:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7B203BC7-D951-4C92-B657-F26B5189CDCD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490055/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41392","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5296","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1494","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en inc/module/online.php de Easy-Clanpage 2.2, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción details, un vector diferente que la CVE-2008-1425.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-clanpage:easy-clanpage:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7A66DFE8-8217-48D7-9C01-7E2F8054BC90"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3773","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489888/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489888/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1495","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros no restringidos en administrer/produits.php de PEEL, posiblemente versión 3.x y anteriores, permite a administradores remotos autenticados subir y ejecutar archivos PHP de su elección mediante un tipo de contenido modificado en una acción ajout, tal y como se ha demostrado con (1) image/gif y (2) application/pdf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"1E0E9C1B-4543-4AEC-944E-38CAC97F41FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B7C82B22-874E-4374-AC6D-1817FCBE5EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2A64CF2A-E3A0-431E-928F-6BE731892F7E"}]}]}],"references":[{"url":"http://realn.free.fr/releases/70207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28346","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41354","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5281","source":"cve@mitre.org"},{"url":"http://realn.free.fr/releases/70207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1496","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Inyección SQL en PEEL, posiblemente versión 3.x y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el (1) parámetro email en (a) membre.php y el  (2) parámetro timestamp en (b) la acción details en achat/historique_commandes.php y (c) la acción facture en factures/facture_html.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"1E0E9C1B-4543-4AEC-944E-38CAC97F41FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B7C82B22-874E-4374-AC6D-1817FCBE5EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2A64CF2A-E3A0-431E-928F-6BE731892F7E"}]}]}],"references":[{"url":"http://realn.free.fr/releases/70207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28346","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41341","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41353","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5281","source":"cve@mitre.org"},{"url":"http://realn.free.fr/releases/70207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1497","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command."},{"lang":"es","value":"Desbordamiento de búfer basado en Pila en el servicio IMAP de NetWin SurgeMail 38k4-4 y versiones anteriores, permite a usuarios remotos autenticados ejecutar código de su elección mediante argumentos largos del comando LSUB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*","matchCriteriaId":"96563C20-642A-47EA-8A4B-1DE9C1DD7377"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*","matchCriteriaId":"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*","matchCriteriaId":"90487000-A5DA-463B-82B2-5F83DBEC7154"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"8B654A1F-01A3-4F18-A1E6-9D924BF34397"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"4FDB3E97-547C-4531-81E9-B280E3DF39D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:*","matchCriteriaId":"61DA6241-B456-4721-BAB7-A857FAA4B41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:*","matchCriteriaId":"BBBC4664-D561-4DDD-AC69-003D498FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:*","matchCriteriaId":"7324F0F8-6F15-4966-9589-7BDF502DA287"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:*","matchCriteriaId":"FAF4BCCC-8284-4EB2-B38B-06283E584F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:*","matchCriteriaId":"288E7531-50DA-4AE1-B152-F0FBE7CA88BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*","matchCriteriaId":"914D7AFB-007F-48C1-98C0-13B38F2C2D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:*","matchCriteriaId":"1ED629A5-B807-4856-AD71-DF5040463694"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:*","matchCriteriaId":"5470DC1D-DBE4-4C03-B831-42533DF08D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.2e:*:*:*:*:*:*:*","matchCriteriaId":"B4420781-D233-4C09-9979-B20BB476E635"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.5a:*:*:*:*:*:*:*","matchCriteriaId":"8C4180CD-DCAC-42DB-8973-F8233F8B8EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.5b3:*:*:*:*:*:*:*","matchCriteriaId":"6BB3CEAB-41DD-447B-B36E-C5C5B9F1A2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.6d:*:*:*:*:*:*:*","matchCriteriaId":"1CE7B0E5-E5A8-4F03-867A-8AE987D2254B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.6f3:*:*:*:*:*:*:*","matchCriteriaId":"60B63ABA-5B8B-4EF2-A832-38F047904727"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.6f5:*:*:*:*:*:*:*","matchCriteriaId":"90D7306C-A95A-4DB8-A6F1-29B233FF9977"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.6f7:*:*:*:*:*:*:*","matchCriteriaId":"234A98AA-6482-4889-B3A3-3D4EC1023371"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.7b:*:*:*:*:*:*:*","matchCriteriaId":"063644A4-AD5B-4BD7-9B6C-ADA2C47562C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.7b3:*:*:*:*:*:*:*","matchCriteriaId":"4CB85D71-332A-4B5F-8B48-57CE29461920"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.7b5:*:*:*:*:*:*:*","matchCriteriaId":"0871CD5E-B0B7-4A80-924F-073227420136"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.7b6:*:*:*:*:*:*:*","matchCriteriaId":"563791A9-A34B-4C2A-9F4F-F878654C5742"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.7b7:*:*:*:*:*:*:*","matchCriteriaId":"5AAF682B-5815-4787-B288-F1CB47F1C986"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.7b8:*:*:*:*:*:*:*","matchCriteriaId":"E4764A66-0284-4D85-9A8D-69CC9FCD53EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8a:*:*:*:*:*:*:*","matchCriteriaId":"12FCF5D0-3E98-48E4-840C-5DD47A893AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8b:*:*:*:*:*:*:*","matchCriteriaId":"6B2E8CA7-DAF6-4C30-8ED1-9FA6D4A660D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8d:*:*:*:*:*:*:*","matchCriteriaId":"1C384BC3-603B-4409-B473-F3213D05DB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f:*:*:*:*:*:*:*","matchCriteriaId":"C81E2733-0791-4D5E-990F-B40859EEA7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f2:*:*:*:*:*:*:*","matchCriteriaId":"F1CE77D8-ADB3-4A3E-9D79-4F9739F7549A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:*","matchCriteriaId":"50C06B4F-1DEC-4622-B060-184762418112"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:*","matchCriteriaId":"19390313-1B1C-4388-AA3B-1A470416FADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:*","matchCriteriaId":"EB1FD0B1-DEE5-4765-9538-FBA20E8B1559"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:*","matchCriteriaId":"30495DFC-EC4F-4449-851A-3358C9BCBF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k:*:*:*:*:*:*:*","matchCriteriaId":"1C4BE37B-BA86-4B1D-A1B6-B5910F61171D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k2:*:*:*:*:*:*:*","matchCriteriaId":"DAF32266-AB58-4215-B7FF-CC882835EE79"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k3:*:*:*:*:*:*:*","matchCriteriaId":"A437EB1A-2E12-4AAB-8817-57D17C2E21E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8m:*:*:*:*:*:*:*","matchCriteriaId":"25C21957-FA45-4FCE-AFFE-4A0E1345CFE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3774","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489959/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28377","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41402","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489959/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1498","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command."},{"lang":"es","value":"Desbordamiento de búfer basado en Pila en el servicio IMAP de NetWin SurgeMail 38k4-4 y versiones anteriores, permite a usuarios remotos autenticados ejecutar código de su elección mediante un primer argumento largo del comando LIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8k4","matchCriteriaId":"CF997ADC-BF65-4ED0-8C66-01CB824407D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28260","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0901/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0901/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1499","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en frontend/x/manpage.html de cPanel 11.18.3 y 11.21.0-BETA, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una cadena de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*","matchCriteriaId":"53A19523-B3B1-48E6-A202-CEB1CBD2DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.21:beta:*:*:*:*:*:*","matchCriteriaId":"5BB81672-314F-49D4-AD9E-CA8D1A14CD45"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3775","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489963/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28403","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41374","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489963/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1500","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php de TinyPortal 0.8.6 y 1.0.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro PHPSESSID. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyportal:tinyportal:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"420C38B7-DD37-4119-851A-726C3631545C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinyportal:tinyportal:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"583E72C6-345A-46CD-BD0D-7B7BB434BBDD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28402","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1501","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command."},{"lang":"es","value":"La function send_user_mode de s_user.c en (1) Undernet ircu 2.10.12.12 y versiones anteriores, (2) snircd 1.3.4 y versiones anteriores, y otras ircu derivadas sin especificar , permite a atacantes remotos provocar una denegación de servicio (caída de demonio) mediante un comando MODE mal formado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ircu:ircu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.12.12","matchCriteriaId":"9CDEADF6-D6D6-4583-AB10-012CDD10A07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:quakenet:snircd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"CC17EDDB-2601-4166-8185-8E761444DE0E"}]}]}],"references":[{"url":"http://hg.quakenet.org/snircd/rev/2da2b881d9f5","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/43613","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29486","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3779","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489990/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28413","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019687","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019688","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0977","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0978","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41401","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5306","source":"cve@mitre.org"},{"url":"http://hg.quakenet.org/snircd/rev/2da2b881d9f5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/43613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489990/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1502","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols."},{"lang":"es","value":"La función _bad_protocol_once en el archivo phpgwapi/inc/class.kses.inc.php en KSES, como es usado en eGroupWare versiones anteriores a 1.4.003, Moodle versiones anteriores a 1.8.5 y otros productos, permite a los atacantes remotos omitir el filtrado de HTML y conducir ataques de tipo cross-site scripting (XSS) por medio de una cadena que contiene protocolos URL especialmente diseñados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.002","matchCriteriaId":"8E631688-AC1D-45BE-91A4-B126DD4032CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E440ECF0-C87D-432B-91D6-C1D61FF780C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"598C8726-BD8E-41F5-8A83-E06CF6F24C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E91357C7-8028-4870-AEDB-DACEC0EE1E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7CE992D5-371B-466C-8A08-884B146694D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.2.106-2:*:*:*:*:*:*:*","matchCriteriaId":"40CF5935-81F4-427F-9D0F-65B5521AF8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.4.001:*:*:*:*:*:*:*","matchCriteriaId":"F22F0392-6D7A-4133-83AA-C14F1B69A167"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"55AB250C-A3A0-4BC2-AC96-5B41F60E4E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3113CF64-DFDD-413F-BB85-5A8B251608D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CE4F8CC3-5428-4F72-B4DC-299A50EE9C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"28252347-44DD-4302-8170-21DDB0A3B3A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"740F27D0-4E66-4E2C-A2AB-54F5211F796F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"FA227895-91FF-4689-A03A-D712EAB5E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C42DBF05-906B-47E6-BC75-50EBA38B72BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D6A58D43-9AB1-4EEA-8E5D-7829AFAE11D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B6C3409E-47BF-4D01-ADAC-58475E5D3077"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2E38AF73-EA00-485F-A63B-7C05AD9C948E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"66BD9A00-DA61-4389-8731-B92585C2BE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"680CE396-5F61-409C-A152-4D1E1CB44EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"98CA6482-0B84-463D-9C81-A92FFC06C9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0794B997-0793-4465-B9BA-5BFF254D600A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DCFEA024-4CA7-4975-802C-1BB9C099C164"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D1E5E19D-BC58-478E-A584-6D260A5C5265"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"92E97539-A7CC-48D3-A897-ADE4BC194B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D19C1954-6330-449D-9101-378D5DBD122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29491","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30986","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32446","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"http://www.egroupware.org/changelog","source":"cve@mitre.org"},{"url":"http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/14","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28424","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0989/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41435","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/658-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.egroupware.org/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0989/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/658-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1503","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2) sysContact or (3) sysLocation SNMP configuration field, aka \"Audit Log XSS.\" NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities."},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados (XSS) en el interfaz de gestión web en F5 BIG-IP 9.4.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) el nombre del objeto node, o el (2) sysContact o el (3) campo de configuración SNMP sysLocation, también conocido como \"Audit Log XSS\". NOTA:  esta característica podría ser resultado de vulnerabilidades de falsificación de petición en sitios cruzados (CSRF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:f5:tmos:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"238F0964-D138-4673-9747-C73E8D84E367"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3778","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489991/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28416","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41440","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489991/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1504","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject arbitrary web script or HTML via the Lang parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados (XSS) en setup.php3 de phpHeaven phpMyChat 0.14.5, permite a atacantes remotos remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro Lang. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpheaven:phpmychat:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"A04FEECB-A07E-47FC-BF1E-2F8CC5455A3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28399","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41381","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1505","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en SSTREAMTV custompages (com_custompages) 1.1 y componentes anteriores para Joomla! permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro cpage de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sstreamtv:custompages:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"D1FA0493-04B4-4DA6-95A0-AF41D617CA16"}]}]}],"references":[{"url":"http://secunia.com/advisories/29520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28409","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41396","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1506","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"PEEL, posiblemente 3.x y versiones anteriores, permite a atacantes remotos obtener información de configuración mediante una petición directa a phpinfo.php, que realiza una llamada a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"954F5EB0-24AC-4619-821D-6DBB865B3771"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"1E0E9C1B-4543-4AEC-944E-38CAC97F41FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B7C82B22-874E-4374-AC6D-1817FCBE5EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2A64CF2A-E3A0-431E-928F-6BE731892F7E"}]}]}],"references":[{"url":"http://realn.free.fr/releases/70207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41494","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5281","source":"cve@mitre.org"},{"url":"http://realn.free.fr/releases/70207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1507","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote attackers to gain administrative access."},{"lang":"es","value":"PEEL, posiblemente 3.x y versiones anteriores, tiene (1) una cuenta por defecto info@peel.fr con contraseña admin y (2) una cuenta por defecto contact@peel.fr con contraseña cinema, que permite a atacantes remotos conseguir acceso administrativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"954F5EB0-24AC-4619-821D-6DBB865B3771"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"1E0E9C1B-4543-4AEC-944E-38CAC97F41FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B7C82B22-874E-4374-AC6D-1817FCBE5EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2A64CF2A-E3A0-431E-928F-6BE731892F7E"}]}]}],"references":[{"url":"http://realn.free.fr/releases/70207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41493","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5281","source":"cve@mitre.org"},{"url":"http://realn.free.fr/releases/70207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1508","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"La vulnerabilidad de inyección SQL en EfesTech E-Kontör y versiones anteriores permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efestech:e-kontor:-:*:*:*:*:*:*:*","matchCriteriaId":"0F5F574B-2E66-4F35-A0D8-B30264EBDE6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3776","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28412","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41419","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1509","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the query parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de XLPortal 2.2.4 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlportal:xlportal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"F4091AFF-A026-41F8-8C44-1BA7688EDEBC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28408","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41379","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1510","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en system/workplace/admin/accounts/users_list.jsp de Alkacon OpenCMS 7.0.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) searchfilter o del parámetro (2) listSearchFilter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"77C1DA6A-037E-4EA6-B18A-774D365E5E07"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3777","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489984/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28411","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41390","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489984/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1511","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for (1) classes/class_admin.php and (2) classes/class_comments.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos PHP en ooComments 1.0, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro PathToComment para (1) classes/class_admin.php y (2) classes/class_comments.php.  NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oocomments:oocomments:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DEA290-21C2-44A3-9EF0-EF3E5BDFC319"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28401","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28401/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28401/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-1512","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo admin/admin_xs.php en el módulo eXtreme Styles (XS-Mod) versiones 2.3.1 y 2.4.0 para phpBB, permite a los atacantes remotos incluir y ejecutar archivos arbitrarios por medio de un .. (punto punto) en el parámetro phpEx. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:module_xs:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"364289F4-52CF-46C9-934B-6C01B4DA8180"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:module_xs:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"10FC3103-D5CF-482E-95F7-FF148C02357E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29487","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28432","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41404","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5301","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1513","sourceIdentifier":"cve@mitre.org","published":"2008-03-25T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de Danneo CMS 0.5.1 y versiones anteriores, cuando la opción Referers statistics está activada, permite a atacantes remotos ejecutar comandos SQL de su elección mediante la cabecera HTTP Referer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:danneo:cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.1","matchCriteriaId":"E717BBDF-1DB1-4E16-805D-CC4807042814"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41153","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5239","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1514","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference."},{"lang":"es","value":"El archivo arch/s390/kernel/ptrace.c en el kernel de Linux versión 2.6.9 y otras versiones anteriores a 2.6.27-rc6, en plataformas s390 permite a los usuarios locales causar una denegación de servicio (pánico del kernel) por medio de la prueba de relleno del área de usuario del  testsuite de ptrace en modo de 31 bits, que desencadena una desreferencia no válida."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 5, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 4 via: https://rhn.redhat.com/errata/RHSA-2008-0972.html","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc5:*:*:*:*:*:*","versionEndIncluding":"2.6.27","matchCriteriaId":"34FD457B-2E9B-490A-8BF5-F170D6AF91EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31826","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32237","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32356","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32799","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceware.org/systemtap/wiki/utrace/tests","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31177","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=438147","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41501","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceware.org/systemtap/wiki/utrace/tests","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=438147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1515","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to \"read and modify objects\" via SOAP requests, related to \"Missing security checks.\""},{"lang":"es","value":"La interfaz SOAP en OTRS versión 2.1.x anterior a 2.1.8 y versión 2.2.x anterior a 2.2.6, permite a los atacantes remotos “read and modify objects\" por medio de peticiones SOAP, relacionadas con \"Missing security checks\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*","versionStartIncluding":"2.1.0","versionEndExcluding":"2.1.8","matchCriteriaId":"5DD39ADE-D547-458C-9C49-66CB656EC6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.6","matchCriteriaId":"61CA5BBB-785C-4D75-8B25-2BF62C28A613"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://otrs.org/advisory/OSA-2008-01-en/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29585","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29859","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28647","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41577","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://otrs.org/advisory/OSA-2008-01-en/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1518","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en kl1.sys en Kaspersky Anti-Virus 6.0 y 7.0, y en  Internet Security 6.0 y 7.0, permite a usuarios locales aumentar privilegios a través de una llamada IOCTL 0x800520e8"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EB11D125-1699-41E8-9184-6961D7AA4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:7.0:*:*:*:*:*:*:*","matchCriteriaId":"42BDC78B-D322-4571-B930-335F5AA82A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_internet_security:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EBD42038-FE1C-4AC9-9830-8021139847CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_internet_security:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D4140C79-F4BA-4159-A1DC-5BD63642A4D5"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020195","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020196","source":"cve@mitre.org"},{"url":"http://www.kaspersky.com/technews?id=203038727","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1739","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42849","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kaspersky.com/technews?id=203038727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1521","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html."},{"lang":"es","value":"Los routers ZyXEL Prestige, incluyendo los modelos P-660 y P-661con firmware 3.40(AGD.2) hasta la 3.40(AHQ.3), permite a usuarios remotos autenticados obtener privilegios mediante el acceso a URIs administrativas, tal y como se demuestra en rpSysAdmin.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1522","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) \"user\" as their default password for the \"user\" account and (2) \"1234\" as their default password for the \"admin\" account, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"Los routers ZyXEL Prestige, incluyendo los modelos P-660 y P-661con firmware 3.40(AGD.2) hasta la 3.40(AHQ.3), tienen (1) “user” como contraseña por defecto para la cuenta “user” y (2) “1234” como contraseña por defecto para la cuenta “admin”, la cual facilita el acceso a los atacantes remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41508","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1523","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source."},{"lang":"es","value":"Los routers ZyXEL Prestige, incluyendo los modelos P-660, P-661 y P-662 con firmware 3.40(AGD.2) hasta la 3.40(AHQ.3), permite a usuarios remotos autenticados obtener credenciales ISP y Dynamic DNS mediante el envío de una petición directa para (1) WAN.html, (2) wzPPPOE.html y (3) rpDyDNS.html leyendo así el código fuente HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41509","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1524","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP service on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has \"public\" as its default community for both (1) read and (2) write operations, which allows remote attackers to perform administrative actions via SNMP, as demonstrated by reading the Dynamic DNS service password or inserting an XSS sequence into the system.sysName.0 variable, which is displayed on the System Status page."},{"lang":"es","value":"El servicio SNMP de los routers ZyXEL Prestige, incluyendo los modelos P-660 y P-661 con firmware 3.40(AGD.2) hasta la 3.40(AHQ.3), tienen “public” como comunidad por defecto (default community) tanto para operaciones de (1) lectura como de (2) escritura, lo cual permite a atacantes remotos realizar tareas administrativas a través de SNMP, tal y como se ha demostrado leyendo la contraseña del Servicio Dynamic DNS o insertando una secuencia XSS en la variable system.sysName.0, que se visualiza en la página System Status."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1525","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address."},{"lang":"es","value":"La configuración SNMP por defecto de los routers ZyXEL Prestige, incluyendo los modelos P-660 y P-661 con firmware 3.40(AGD.2) hasta la 3.40(AHQ.3), tienen un valor Trusted Host 0.0.0.0, lo cual permite a atacantes remotos enviar peticiones SNMP  desde cualquier dirección IP de origen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1526","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords."},{"lang":"es","value":"Los routers ZyXEL Prestige, incluyendo los modelos P-660, P-661 y P-662 con firmware 3.40(PE9) y 3.40(AGD.2) hasta la 3.40(AHQ.3), no utilizan salt cuando se calcula el hash de una contraseña MD5, lo cual facilita a los atacantes craquear contraseñas."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-663hn-51_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"62972D5A-85C3-4DD4-A26A-471D4E82357F"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-663hn-51_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"4E92F1B9-AF50-4E0D-B3AC-3C306A383A44"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-663hn-51:-:*:*:*:*:*:*:*","matchCriteriaId":"1F2A8EAA-E91F-48D8-82F9-0719C6F6BB2F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-61_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"5252D640-B50B-4532-ABBD-912A37F596DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-61_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"F5B68B4A-D806-49C8-AE14-504BE57CAB95"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660h-61:-:*:*:*:*:*:*:*","matchCriteriaId":"B996FCFC-C719-43B1-9088-3867D5C124BE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-63_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"39CB46BC-64D2-46AE-BD36-1A79EB36B292"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-63_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"5142FA69-CA58-46F4-BCDD-9798DCCB3AD3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660h-63:-:*:*:*:*:*:*:*","matchCriteriaId":"D0F5B1A3-7A36-4A84-B0C1-508036A0AB5B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-67_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"67B02999-B7EB-402E-8146-020ACC9ED382"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-67_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"76279D36-5A32-4B6E-9F78-3EEFB70E55C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660h-67:-:*:*:*:*:*:*:*","matchCriteriaId":"6D676131-6B32-4B57-8E77-95A9F63375B0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-d1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"DD203D62-1938-4521-81D5-154A7425B9B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-d1_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"3295C0E2-C458-4902-8694-2A3ACFBCE653"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660h-d1:-:*:*:*:*:*:*:*","matchCriteriaId":"DF5193DA-10B0-4C7D-B210-CF074E531215"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-d3_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"9001B98C-9F05-4C1A-8193-D1B553484A7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-d3_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"910FB6FC-66EC-48EE-8D61-BAE34D7BFB65"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660h-d3:-:*:*:*:*:*:*:*","matchCriteriaId":"38FD0899-E818-461E-B6FA-48E9564BBB04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hn-51_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"C9D5E082-EFA6-4EC1-B0F7-D4F41D713F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hn-51_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"D1199BFD-05AF-4307-805D-8CFE09DC9FBA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660hn-51:-:*:*:*:*:*:*:*","matchCriteriaId":"B0138796-FFDC-4976-83AB-018DD7CD7D5F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-t1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"C5E642F1-A6C9-47D8-B8CA-591B925AD632"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660h-t1_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"92A66C1F-D2BC-46D2-920B-AF81E4964D2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660h-t1:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFE9380-506C-4DB6-B14E-BF8D36A5B403"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw_d1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"88F93947-8F4C-4297-BDC1-248C279A3C66"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw_d1_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"15EADE70-CC53-4FFD-A7A0-6F47112DEFF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660hw_d1:-:*:*:*:*:*:*:*","matchCriteriaId":"1D13FB1A-637D-4E69-B84F-05531DCA5769"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw_d3_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"20A15016-C985-4DC2-8063-20B34A8F38C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw_d3_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"211F500D-83A0-4E98-A602-5A8E28DA80C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660hw_d3:-:*:*:*:*:*:*:*","matchCriteriaId":"465FD6ED-C294-49B2-8F2C-8EF0633DABFF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw_t3_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"E6200AB4-23E4-4D5D-AE01-FA77BD2802E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-660hw_t3_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"7EBA6080-40A5-41B8-9ABA-DE9B4D14B905"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-660hw_t3:-:*:*:*:*:*:*:*","matchCriteriaId":"26E8D38B-1859-4DCE-A566-777432CB7E9D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661hnu-f1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"75CC92BC-C701-4CDB-B3BD-D1A35AE2B513"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661hnu-f1_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"B1C64678-E7F5-4D49-B057-81A7D332FAEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-661hnu-f1:-:*:*:*:*:*:*:*","matchCriteriaId":"3D31A24A-C61D-4C9E-ADB7-2A82348A1F8F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661h_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"571F3900-C4E5-4BA7-BCC4-6F4CB11C37FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661h_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"82811C5C-C3B3-4F59-B4C7-FF94337575A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-661h:-:*:*:*:*:*:*:*","matchCriteriaId":"AC4294BF-24E3-48CB-9C9C-3F212DC3B44C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661hw-d1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"F45DA65D-375A-44C3-8C13-56BE11A62D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661hw-d1_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"3D302F58-44B7-4664-8C5B-CD7801BC2C8F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-661hw-d1:-:*:*:*:*:*:*:*","matchCriteriaId":"213239B3-6262-43BD-9789-895123B458CC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661hnu-f3_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"9E098395-FAA8-4F2F-9BA3-CE020128CC4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-661hnu-f3_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"1B7AC499-C52B-4320-9DAC-32268EA2EE2F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-661hnu-f3:-:*:*:*:*:*:*:*","matchCriteriaId":"4C246CBE-3153-48F6-9DB3-111496519A54"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662hw-d3_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"E0FF5102-C646-4576-B06B-7AEDF30597AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662hw-d3_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"08C40AFF-B177-41D6-AB6B-7684F76B04D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-662hw-d3:-:*:*:*:*:*:*:*","matchCriteriaId":"293A9D18-75F3-4925-A823-783C5D3C5712"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662hw-d_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"248CEACF-760B-400F-AAF8-3942207D7D9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662hw-d_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"9D3C331D-6579-4A53-A0E1-7B191F52D78F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-662hw-d:-:*:*:*:*:*:*:*","matchCriteriaId":"AFCEFCAB-785B-441D-9CCF-B45FC769A648"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662hw-d1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"4D84E350-5816-4ABE-A2A1-ABB719DFB65A"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662hw-d1_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"E7823501-F6A1-4F4A-98B8-6B272AB6073B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-662hw-d1:-:*:*:*:*:*:*:*","matchCriteriaId":"AF7B15B0-7767-4338-9B27-94AB74D87E2F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662h-61_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.40\\(agd.2\\)","versionEndIncluding":"3.40\\(ahq.3\\)","matchCriteriaId":"C92F00FE-2074-484E-A65E-6E6AADC6625E"},{"vulnerable":true,"criteria":"cpe:2.3:o:zyxel:p-662h-61_firmware:3.40\\(pe9\\):*:*:*:*:*:*:*","matchCriteriaId":"48C44A40-5559-483D-B532-2CEB60E0D709"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:zyxel:p-662h-61:-:*:*:*:*:*:*:*","matchCriteriaId":"E24CF1BB-6CE2-475F-A74E-6958FEA47374"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1527","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack."},{"lang":"es","value":"Los routers ZyXEL Prestige, incluyendo los modelos P-660, P-661 y P-662 con firmware 3.40(PE9) y 3.40(AGD.2) hasta la 3.40(AHQ.3), soportan autenticación sobre HTML a través de una cadena hash en el campo hiddenPassword, lo cual permite a atacantes remotos obtener acceso mediante un ataque por repetición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1528","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for (1) RemMagSNMP.html, which discloses SNMP communities; or (2) WLAN.html, which discloses WEP keys."},{"lang":"es","value":"Los routers ZyXEL Prestige, incluyendo los modelos P-660 y P-661 con firmware 3.40(AGD.2) hasta la 3.40(AHQ.3), permite a usuarios remotos autenticados obtener datos validados realizando peticiones HTML directas y después leyendo el código fuente HTML, tal y como se ha demostrado mediante una petición para  (1) RemMagSNMP.html, que revela las comunidades SNMP; o (2) WLAN.html, que revela claves WEP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41511","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1529","sourceIdentifier":"cve@mitre.org","published":"2008-03-26T10:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods."},{"lang":"es","value":"Los routers ZyXEL Prestige tienen un mínimo de longitud de contraseña para la cuenta admin que es demasiado pequeña, lo cual facilita a los atacantes remotos adivinar contraseñas mediante métodos de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d1:*:*:*:*:*:*:*","matchCriteriaId":"B9B37DD5-40E7-43E3-8183-A755C488E383"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_660:h-d3:*:*:*:*:*:*:*","matchCriteriaId":"D2850459-830C-49FD-89F8-0693E6D33543"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_661:hw-d1:*:*:*:*:*:*:*","matchCriteriaId":"7C2C98B6-E370-4E2C-988D-CC3F3AA78126"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agd.2:*:*:*:*:*:*","matchCriteriaId":"AC9ED360-9257-477C-8F21-0CD4C1D38F42"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:agl.3:*:*:*:*:*:*","matchCriteriaId":"B170D9D8-4A01-4A97-947C-F978B07045C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.0:*:*:*:*:*:*","matchCriteriaId":"9D759579-E9E7-4344-BA88-CACECFB9C731"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahq.3:*:*:*:*:*:*","matchCriteriaId":"35DB7E44-E00E-41E3-A701-FB5DAC8E48E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:ahz.0:*:*:*:*:*:*","matchCriteriaId":"2344FB7D-785D-4C52-BF27-1EEAAB2726B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:atm.0:*:*:*:*:*:*","matchCriteriaId":"CEA7FE7B-31E2-4164-882B-2E9712F95044"}]}]}],"references":[{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41513","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/projects/router-hacking-challenge/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1530","sourceIdentifier":"cve@mitre.org","published":"2008-03-27T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers \"memory corruption around deduplication of user IDs.\""},{"lang":"es","value":"GnuPG (gpg) 1.4.8 y 2.0.8 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de claves duplicadas manipuladas  que son importadas de un servidor de claves, lo cual dispara \"corrupción de memoria en torno a la duplicación de identificadores de usuario\".\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue does not affect the versions of gnupg packages as shipped with Red Hat Enterprise Linux versions 2.1, 3, 4 or 5.","lastModified":"2008-03-28T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6150E3-1D7C-44DA-BA57-35AB26F881B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnupg:gnupg:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"90B62D8E-3A37-4D7A-B674-06FFD80B86FB"}]}]}],"references":[{"url":"http://lists.gnupg.org/pipermail/gnupg-announce/2008q1/000272.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28487","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1056/references","source":"cve@mitre.org"},{"url":"https://bugs.g10code.com/gnupg/issue894","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214990","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41547","source":"cve@mitre.org"},{"url":"http://lists.gnupg.org/pipermail/gnupg-announce/2008q1/000272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.g10code.com/gnupg/issue894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1531","sourceIdentifier":"cve@mitre.org","published":"2008-03-27T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost."},{"lang":"es","value":"La función connection_state_machine (connections.c) en lighttpd versión 1.4.19 y anteriores, y versión 1.5.x anterior a 1.5.0, permite a los atacantes remotos generar una denegación de servicio (pérdida de conexión SSL activa) al activar un error SSL, como desconectarse antes que una descarga ha finalizado, lo que hace que todas las conexiones SSL activas se pierdan."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"78C95091-A48E-4C17-BB2C-ED771DDDF6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5","versionEndExcluding":"1.5.0","matchCriteriaId":"C0DD96A7-552B-4DC0-BFF5-63022F0A771B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29505","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29544","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29636","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29649","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-08.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2136","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2139","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2140","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/285#comment:18","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/285#comment:21","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0132","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1540","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/43788","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/490323/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28489","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1063/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214892","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41545","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2407","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00562.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00587.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/285#comment:18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/285#comment:21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/43788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/490323/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1063/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00562.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00587.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1532","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload."},{"lang":"es","value":"Perlbal versiones anteriores 1.70, cuando la subida almacenada en memoria está activa, permite a atacantes remotos provocar una denegación de servicio (caída) a través de  la subida de un zero-bytes troceado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perlbal:perlbal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.60","matchCriteriaId":"673A52DA-3961-4A9C-8C9F-FF07BC6D170A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=214784","source":"cve@mitre.org"},{"url":"http://search.cpan.org/src/BRADFITZ/Perlbal-1.70/CHANGES","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29565","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28491","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1045/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=439054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41538","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00665.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00672.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=214784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://search.cpan.org/src/BRADFITZ/Perlbal-1.70/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1045/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=439054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00665.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00672.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1533","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión XML-RPC Blogger API de Joomla! 1.5 permite a atacantes remotos realizar operaciones de artículo no autorizadas en artículos a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"D19C0114-9495-4CD9-8CA7-D25A11872709"}]}]}],"references":[{"url":"http://secunia.com/advisories/28861","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.joomla.org/content/view/4560/1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27719","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41563","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.joomla.org/content/view/4560/1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1534","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) settings[footer] parameter to footer.inc.php and the (2) settings[header] parameter to header.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en PowerPHPBoard 1.00b permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el (1) parámetro settings[footer] en footer.inc.php y el (2) parámetro settings[header] en header.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerscripts:powerphpboard:1.00b:*:*:*:*:*:*:*","matchCriteriaId":"19EE937B-6EC1-41FF-8228-2B6565265C19"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490011/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28421","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0992/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41403","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5303","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490011/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0992/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1535","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Matti Kiviharju rekry (aka com_rekry or rekry!Joom) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the op_id parameter in a view action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Matti Kiviharju rekry (tambien conocido como com_rekry o rekry!Joom) 1.0.0 de Joomla! permite a atacantes remotos la ejecución de comandos SQL de su elección mediante el parámetro op_id en una acción view en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matti_kiviharju:rekry_component:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7AFA41C6-8204-4E0E-814C-5777EED102FA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28422","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41385","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1536","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Pictures Pro (también conocido como Tim Grissett) Photo Cart 4.1 permite a atacantes remotos la inyección de secuencias de comandos web o HTML de su elección a través del parámetro amessage.\r\nNOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:picturespro:picturespro_photo_cart:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F41817F-5E8E-45E6-A8CD-AC4E3A927D15"}]}]}],"references":[{"url":"http://secunia.com/advisories/29490","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.picturespro.com/community/forums/photo_cart/index.php?see=viewTopic&topic=296795080324075103","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28430","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.picturespro.com/community/forums/photo_cart/index.php?see=viewTopic&topic=296795080324075103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1537","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a ..  (dot dot) in the page parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"ulnerabilidad de salto de directorio en pb_inc/admincenter/index.php de PowerScripts PowerBook 1.21 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro page.\r\nNOTA: en algunos entornos, esto podría solaparse con la incluisón remota de archivo utilizando un nombre de ruta compartido UNC o una URL ftp, ftps, o ssh2.sftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerscripts:powerbook:1.21:*:*:*:*:*:*:*","matchCriteriaId":"EF339422-15BB-4FB0-87BA-AF043B23AE12"}]}]}],"references":[{"url":"http://secunia.com/advisories/29480","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3783","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490008/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41393","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490008/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1538","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Fixed in EventLog Analyzer 10.0 Build 10000."},{"lang":"es","value":"La vulnerabilidad de Cros-site scripting (XSS) en searchAction.do en ManageEngine EventLog Analyzer 5 permite a los atacantes remotos inyectar secuencias de comandos web arbitrarias o HTML a través del parámetro searchText. NOTA: se desconoce la procedencia de esta información; Los detalles se obtienen únicamente de la información de terceros. Corregido en EventLog Analyzer 10.0 Build 10000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:eventlog_analyzer:5:*:*:*:*:*:*:*","matchCriteriaId":"0351AE61-6B0C-462C-ADC3-B4DAA4EE1830"}]}]}],"references":[{"url":"http://secunia.com/advisories/29524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1539","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL commands via the p parameter to modules.php for the Forums module."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en includes/dynamic_titles.php de PHP-Nuke Platinum 7.6.b.5 permite a atacantes remotos la ejecución de comandos SQL de su elección mediante el parámetro p de modules.php en el módulo Forums."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:futurenuke:php_nuke_platinum:7.6.b.5:*:*:*:*:*:*:*","matchCriteriaId":"76BED4D9-F79D-4EA1-8C1A-1EF3BA0804B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28410","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41387","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5295","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1540","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Datsogallery (com_datsogallery) 1.3.1 de Joomla! y Mambo permite a atacantes remotos la ejecución de comandos SQL de su elección mediante el parámetro id en una acción detail en index.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:datsogallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FD4BC3FF-FE19-44B6-BA16-0AD70D39356B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:datsogallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9D7C5BF3-0342-47F9-8D27-A468848135E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28361","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41348","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1541","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en cgi-bin/his-webshop.pl de HIS Webshop 2.50 permite a atacantes remotos la lectura de ficheros de su elección mediante un .. (punto punto) en el parámetro t."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:his:webshop:2.50:*:*:*:*:*:*:*","matchCriteriaId":"0ADBEF19-0BA8-4E62-975A-747AEBF4C83F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29478","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490016/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28425","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0991/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41407","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5304","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490016/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0991/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1542","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Airspan Base Station Distribution Unit (BSDU) has \"topsecret\" as its password for the root account, which allows remote attackers to obtain administrative access via a telnet login, a different vulnerability than CVE-2008-1262."},{"lang":"es","value":"Airspan Base Station Distribution Unit (BSDU) posee \"alto secreto\" debido a que su contraseña para la cuenta de adminstrador (root), permite a atacantes remotos obtener acceso de adminstrador mediante autenticación telnet, una vulnerabilidad diferente a la CVE-2008-1262."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:airspan:base_station_distribution_unit:*:*:*:*:*:*:*:*","matchCriteriaId":"630A128B-AF8B-4279-B14C-8E8706A0D1A0"}]}]}],"references":[{"url":"http://airspan4wimax.googlepages.com/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/446403","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41437","source":"cve@mitre.org"},{"url":"http://airspan4wimax.googlepages.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/446403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1543","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262."},{"lang":"es","value":"Las Páginas de Interfaz para Usuarios Avanzados (Advanced User Interface Pages) en el componente ProST Web Management de Airspan WiMAX ProST tienen cierto ID de usuario y contraseña por defecto, que facilita a los atacantes remotos obtener acceso parcial como administrador, una vulnerabilidad diferente a la CVE-2008-1262."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:airspan:easy_st:*:*:*:*:*:*:*:*","matchCriteriaId":"ACF26466-376C-4B1A-89F4-1BDC315B783D"},{"vulnerable":false,"criteria":"cpe:2.3:h:airspan:easy_st-2:*:*:*:*:*:*:*:*","matchCriteriaId":"7FD20A1B-ED23-48B8-A6FD-0943F0515F3C"},{"vulnerable":false,"criteria":"cpe:2.3:h:airspan:prost:*:*:*:*:*:*:*:*","matchCriteriaId":"76F501DB-C6C1-46DF-AE02-81615782B1B8"},{"vulnerable":false,"criteria":"cpe:2.3:h:airspan:prost-2:*:*:*:*:*:*:*:*","matchCriteriaId":"4F8338C0-CD9F-48D9-AFF5-E695C539E138"},{"vulnerable":false,"criteria":"cpe:2.3:h:airspan:wimax_prost:*:*:*:*:*:*:*:*","matchCriteriaId":"0A9BDBF5-D5E1-4A18-88CE-C92214494D64"},{"vulnerable":false,"criteria":"cpe:2.3:h:airspan:wimax_prost-2:*:*:*:*:*:*:*:*","matchCriteriaId":"F8E2A876-C2CB-4C44-BEC9-11EB5063E7E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airspan:prost_web_management:*:*:*:*:*:*:*:*","matchCriteriaId":"903A7CF9-9EA5-420F-B777-A79A09231AEB"}]}]}],"references":[{"url":"http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41567","source":"cve@mitre.org"},{"url":"http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1544","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request headers when certain 8-bit character sequences are appended to a header name, which allows remote attackers to (1) conduct HTTP request splitting and HTTP request smuggling attacks via an incorrect Content-Length header, (2) access arbitrary virtual hosts via a modified Host header, (3) bypass referrer restrictions via an incorrect Referer header, and (4) bypass the same-origin policy and obtain sensitive information via a crafted request header."},{"lang":"es","value":"El método setRequestHeader del objeto XMLHttpRequest en Microsoft Internet Explorer versiones 5.01, 6 y 7 no bloquea los encabezados de petición HTTP peligrosos cuando ciertas secuencias de caracteres de 8 bits se anexan a un nombre de encabezado, lo que permite a los atacantes remotos (1) dirigir la división de peticiones HTTP y los ataques de contrabando de peticiones HTTP por medio de un encabezado de contenido largo inapropiado, (2) acceden a hosts virtuales arbitrarios por medio de un encabezado de host modificado, (3) omisión de las restricciones de referencia por medio de un encabezado Referer inapropiado y (4) omisión de la póliza mismo origen y conseguir información confidencial por medio de un encabezado de petición creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3785","source":"cve@mitre.org"},{"url":"http://www.mindedsecurity.com/MSA02240108.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489954/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28379","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020226","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-031","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5291","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121380194923597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mindedsecurity.com/MSA02240108.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489954/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1545","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding HTTP request header, which allows remote attackers to conduct HTTP request splitting and HTTP request smuggling attacks via a POST containing a \"Transfer-Encoding: chunked\" header and a request body with an incorrect chunk size."},{"lang":"es","value":"El método setRequestHeader del objeto XMLHttpRequest en Microsoft Internet Explorer 7  no restringe las cabeceras de las peticiones HTTP Transfer-Encoding peligrosas, lo que permite a atacantes remotos llevar a cabo ataques de división y contrabando de peticiones HTTP mediante un POST que contiene una cabecera \"Transfer-Encoding: chunked\" y un contenido con un tamaño de trozo incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*","matchCriteriaId":"0E6E1020-1017-4670-9316-27C79F1E2698"}]}]}],"references":[{"url":"http://secunia.com/advisories/29453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3786","source":"cve@mitre.org"},{"url":"http://www.mindedsecurity.com/MSA01240108.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489960/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0980","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42804","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mindedsecurity.com/MSA01240108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489960/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1546","sourceIdentifier":"cve@mitre.org","published":"2008-03-28T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service (air-conditioning outage) via an XML document containing a setRequest command."},{"lang":"es","value":"servlet/MIMEReceiveServlet en el controlador web para los sistemas de control de aire acondicionado Mitsubishi Electric GB-50 y GB-50A permite a atacantes remotos provocar la Denegación de Servicio (air-conditioning outage) mediante un documento XML que contiene un comando setRequest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:mitsubishi_electric:gb:50:*:*:*:*:*:*:*","matchCriteriaId":"88F8325A-103D-427C-88F3-92748E4FC0C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:mitsubishi_electric:gb:50a:*:*:*:*:*:*:*","matchCriteriaId":"40A44936-0441-4DE4-8D39-3FE2ED2C677B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3794","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/483862/2008-03-21/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489970/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28406","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41503","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483862/2008-03-21/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489970/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1547","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:01.927","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en exchweb/bin/redir.asp en Microsoft Outlook Web Access (OWA) para Exchange Server 2003 SP2 (alias build 6.5.7638) permite a atacantes remotos, redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"71A2E549-5F21-4842-BEB3-380CD4029C16"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4441","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497374/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497390/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497433/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497500/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497534/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31765","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46061","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://securityreason.com/securityalert/4441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497374/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497390/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497433/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497500/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497534/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1548","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the (1) UserName parameter to loginproc.asp and the (2) usr parameter to Login.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Aeries Browser Interface (ABI) 3.8.3.14 de Eagle Software Aries Student Information System permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros 1) UserName a loginproc.asp y (2) usr a Login.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.8.3.14:*:*:*:*:*:*:*","matchCriteriaId":"C1B07F91-4566-4553-8BCC-69DCC66BCC34"}]}]}],"references":[{"url":"http://secunia.com/advisories/29533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3787","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490033/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490033/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1549","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the (1) GrdBk parameter to GradebookOptions.asp and the (2) SchlCode variable to loginproc.asp, a different vector than CVE-2008-0942."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Aeries Browser Interface (ABI) 3.8.3.14 de Eagle Software Aries Student Information System permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro GrdBk a GradebookOptions.asp y (2) la variable SchlCode a loginproc.asp, un vector distinto a CVE-2008-0942."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeries:aeries_student_information_system:3.8.3.14:*:*:*:*:*:*:*","matchCriteriaId":"C1B07F91-4566-4553-8BCC-69DCC66BCC34"}]}]}],"references":[{"url":"http://secunia.com/advisories/29533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3787","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490033/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490033/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1550","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the _a parameter in a searchStr action and the (2) Submit parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el archivo index.php en CubeCart versión 4.2.1, permiten a los atacantes remotos inyectar script web o HTML arbitrario  por medio de (1) el parámetro _a en una acción searchStr y el parámetro (2) Submit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F0B79010-22A4-4D3D-8589-4D14F292D65E"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/51/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28452","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41559","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/51/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1551","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewcat.php del módulo Photo 3.02 para RunCMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:photo_module:3.02:*:*:*:*:*:*:*","matchCriteriaId":"52A1F8C2-44F2-473A-B955-1E89448B6AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*","matchCriteriaId":"54FAD4EA-656F-42EE-A288-12EAF0AF8B5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28395","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41378","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5290","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1552","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow.  NOTE: the researcher describes this as an integer overflow, but CVE uses the \"underflow\" term in cases of wraparound from unsigned subtraction."},{"lang":"es","value":"La función silc_pkcs1_decode de la librería silccrypt (silcpkcs1.c) en Secure Internet Live Conferencing (SILC) Toolkit antes de 1.1.7, SILC Client antes de 1.1.4 y SILC Server antes de 1.1.2 permite a atacantes remotos ejecutar código de su elección a través de un mensaje PKCS#1 manipulado, lo que dispara un desbordamiento inferior de entero, un error de signo y un desbordamiento de búfer. NOTA: el investigador lo describe como un desbordamiento de entero, pero CVE utiliza el término \"desbordamiento inferior\" en casos de estrechamiento de resta sin signo."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this issue to be a security flaw as SILC is not used in a vulnerable manner in Red Hat Enterprise Linux 4 and 5.\n\nMore information can be found here:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=440049","lastModified":"2008-04-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_client:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"17399447-A537-43ED-8F3B-34A6B3775F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"C79529C3-3305-4C9F-81B9-6A230CEC864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.6","matchCriteriaId":"29C8F2A5-C309-4BAB-B292-B95BE9BD335B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silc:silc:*:*:*:*:*:*:*:*","matchCriteriaId":"A363089A-8328-48B1-9609-36A635EC4A46"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29946","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-27.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3795","source":"cve@mitre.org"},{"url":"http://silcnet.org/general/news/?item=client_20080320_1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://silcnet.org/general/news/?item=server_20080320_1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://silcnet.org/general/news/?item=toolkit_20080320_1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.coresecurity.com/?action=item&id=2206","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:158","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490069/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28373","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019690","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0974/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41474","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00513.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00538.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://silcnet.org/general/news/?item=client_20080320_1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://silcnet.org/general/news/?item=server_20080320_1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://silcnet.org/general/news/?item=toolkit_20080320_1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.coresecurity.com/?action=item&id=2206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0974/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00513.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00538.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1553","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the to parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en mod.php de TopperMod 1.0 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro to."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:topper:toppermod:1.0:*:*:*:*:*:*:*","matchCriteriaId":"989DBE43-9753-4C13-9958-FB12FC3E7521"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28449","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41442","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5312","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1554","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a non-alphanumeric first character the localita parameter, which bypasses a protection mechanism."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en account/index.php de TopperMod 2.0, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección a través de un primer carácter no alfanumérico en el parámetro localita, lo que evita un mecanismo de protección"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:topper:toppermod:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9906569C-3CEE-4481-B62C-28C747A93C65"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490163/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28447","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41441","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1555","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _bFileToInclude parameter."},{"lang":"es","value":"vulnerabilidad de salto de directorio en system/_b/contentFiles/gbincluder.php de BolinOS 4.6.1 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro _bFileToInclude."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bolinos:bolinos:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2DFE4BB6-3DE3-4A37-A124-3255253A35A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28445","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41431","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5309","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1556","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) system/actionspages/_b/contentFiles/gBImageViewer.php, (2) ForEditor parameter to (b) system/actionspages/_b/contentFiles/gBselectorContents.php, (3) the PATH_INFO to (c) gBLoginPage.php and (d) gBPassword.php in system/actionspages/_b/contentFiles/, (4) formlogin parameter to system/actionspages/_b/contentFiles/gBLoginPage.php, and the (5) bolini_searchengine46Search parameter to (e) help/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BolinOS 4.6.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) url a (a) system/actionspages/_b/contentFiles/gBImageViewer.php, (2) ForEditor a (b) system/actionspages/_b/contentFiles/gBselectorContents.php, (3) PATH_INFO a (c) gBLoginPage.php y (d) gBPassword.php en system/actionspages/_b/contentFiles/, (4) formlogin a system/actionspages/_b/contentFiles/gBLoginPage.php y (5) bolini_searchengine46Search a (e) help/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bolinos:bolinos:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2DFE4BB6-3DE3-4A37-A124-3255253A35A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28445","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41432","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5309","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1557","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.php, which calls the phpinfo function."},{"lang":"es","value":"BolinOS 4.6.1 permite a atacantes remotos obtener información sensible a través de una petición directa a system/actionspages/_b/contentFiles/gBphpInfo.php, lo que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bolinos:bolinos:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2DFE4BB6-3DE3-4A37-A124-3255253A35A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490058/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41434","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5309","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1558","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter.  NOTE: this issue has been referred to as an integer overflow."},{"lang":"es","value":"Índice de array sin controlar en la función sdpplin_parse de stream/realrtsp/sdpplin.c en MPlayer 1.0 rc2 permite a atacantes remotos sobrescribir memoria y ejecutar código de su elección a través de un parámetro streamid SDP grande. NOTA: este problema ha sido referenciado como un desbordamiento de entero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"99908178-25AA-432B-BF06-D8196B5B7F71"}]}]}],"references":[{"url":"http://secunia.com/advisories/29515","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29921","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30412","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-22.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1552","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:196","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28851","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0997/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41490","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5307","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0997/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1559","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Bernard Gilly AlphaContent (com_alphacontent) 2.5.8 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Bernard Gilly AlphaContent (com_alphacontent) 2.5.8 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción view a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bernard_gilly:com_alphacontent:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"51E26714-CF6C-431D-BF93-9E4A464C4D63"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28443","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41428","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1560","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) domain parameter to lookup_result.asp, and the (2) word1 and (3) word2 parameters to suggest_result.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Digiappz DigiDomain 2.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) domain a lookup_result.asp y (2) word1 y (3) word2 a suggest_result.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digiappz:digidomain:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E25A031B-B019-43E3-80BF-56C359E58702"}]}]}],"references":[{"url":"http://secunia.com/advisories/29572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3789","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490157/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28475","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41500","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490157/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1561","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors.  NOTE: Vector 2 might also lead to a hang."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Wireshark (anteriormente Ethereal) de 0.99.5 a 0.99.8 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete mal formado a los analizadores(1) X.509sat o (2) Roofnet. NOTA: el vector 2 podría llevar también a un cuelgue."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-05.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:091","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28485","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019728","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1007/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-02.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41515","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2418","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15089","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9315","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1007/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1562","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740."},{"lang":"es","value":"El analizador LDAP en Wireshark (anteriormente Ethereal) de 0.99.2 a 0.99.8 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete mal formado, una vulnerabilidad distinta a CVE-2006-5740."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-05.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:091","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28485","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019728","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1007/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-02.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41516","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2418","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14549","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9318","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1007/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1563","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"decode as\" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet."},{"lang":"es","value":"La característica \"decode as\" (descodificar como) en packet-bssap.c del analizador SCCP en Wireshark (anteriormente Ethereal) de 0.99.6 a 0.99.8 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un paquete mal formado."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-05.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:091","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28485","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019728","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1007/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-02.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41517","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2418","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10238","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15074","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1007/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1564","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) in the filename."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Dan Costin File Transfer antes de 1.2f permite a atacantes remotos leer archivos de su elección   a través de \"..\\\" (punto punto barra invertida) en el nombre de archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:file-transfer:file_transfer:1.2b:*:*:*:*:*:*:*","matchCriteriaId":"3E39DDEA-C61B-4AD5-8EE1-C96661B80BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:file-transfer:file_transfer:1.2c:*:*:*:*:*:*:*","matchCriteriaId":"F56BC40A-7F5A-4C3E-972F-BD07684FCFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:file-transfer:file_transfer:1.2d:*:*:*:*:*:*:*","matchCriteriaId":"BB79270D-8FE5-471C-BAEF-D15D9C1F9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:file-transfer:file_transfer:1.2e:*:*:*:*:*:*:*","matchCriteriaId":"3AE4B806-46C4-4C6E-830F-5A26BD4086C9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=178021&release_id=586923","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1829601&group_id=178021&atid=883559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28453","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=178021&release_id=586923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1829601&group_id=178021&atid=883559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1565","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en forum/irc/irc.php del módulo PJIRC 0.5 para phpBB permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro phpEx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotscripts:pjirc:0.5:*:*:*:*:*:*:*","matchCriteriaId":"0B593C69-D52E-4628-9B92-FCF84365B38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:pjirc_module:0.5:*:*:*:*:*:*:*","matchCriteriaId":"928CC3C7-AC95-4944-A16F-34D63870FDAD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3790","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490070/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28446","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41456","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490070/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1566","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Search.do de ManageEngine Applications Manager 8.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro query. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:applications_manager:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E4FABF47-97A8-456A-AE3D-94E0769FB25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:applications_manager:8.2:*:*:*:*:*:*:*","matchCriteriaId":"FCB8BD49-2E1B-4002-8214-162832BB538A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28488","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41505","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1567","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information."},{"lang":"es","value":"phpMyAdmin versiones anteriores a 2.11.5.1, almacena la clave secreta MySQL de (1) nombre de usuario (2) contraseña, y (3) Blowfish, en texto sin cifrar en un archivo de Sesión bajo /tmp, que permite a los usuarios locales obtener información confidencial."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndExcluding":"2.11.5.1","matchCriteriaId":"978C2DD8-2223-42D1-A777-23B74C52C86B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29588","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29613","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28560","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1037/references","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41541","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/29588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1037/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-1568","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs."},{"lang":"es","value":"comix 3.6.4 permite a atacantes ejecutar comandos de su elección a través de un nombre de archivo que contiene metacaracteres de consola que no son limpiados correctamente cuando se ejecutan los programas rar, unrar, o jpegtran"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comix:comix:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"170E6C1D-73AC-4EA4-AA6B-2542090630E7"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=462840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29621","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29731","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29956","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-29.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28547","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41554","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=462840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1569","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket."},{"lang":"es","value":"policyd-weight versiones 0.1.14 beta-16 y anteriores, permite a los usuarios locales modificar o eliminar archivos arbitrarios por medio de un ataque de tipo symlink en archivos temporales que se utilizan cuando se crea un socket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s390:*:*:*:*:*","matchCriteriaId":"4567FE5A-5061-4741-AA6D-4AB365579F8D"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:policyd-weight:policyd-weight:*:beta16:*:*:*:*:*:*","versionEndIncluding":"0.1.14","matchCriteriaId":"0C01F2AD-6B48-459A-9047-FDA051C72A57"}]}]}],"references":[{"url":"http://secunia.com/advisories/29553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-11.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1531","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/43888","source":"cve@mitre.org"},{"url":"http://www.policyd-weight.org/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28480","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214403","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41565","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/43888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.policyd-weight.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1570","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T22:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs.  NOTE: this is due to an incomplete fix for CVE-2008-1569."},{"lang":"es","value":"Condición de carrera en la función create_lockpath de policyd-weight 0.1.14 beta-16 permite a usuarios locales modificar o borrar archivos de su elección creando el directorio LOCKPATH, a continuación modificándolo tras la comprobación del enlace sombólico. NOTA: esto es debido a un parche incompleto para CVE-2008-1569."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:policyd-weight:policyd-weight:0.1.14_beta-14:*:*:*:*:*:*:*","matchCriteriaId":"16B03601-4DF0-437A-89F7-B58F24739C4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29738","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-11.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/43888","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41570","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/43888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=214403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1571","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal sequences in the URI."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el servidor web incorporado en Image Capture en Apple Mac OS X versiones anteriores a 10.5, permite a los atacantes remotos leer archivos arbitrarios por medio de secuencias de salto de directorio en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020141","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29501","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42718","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1572","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, and display images that are being resized by this application."},{"lang":"es","value":"Image Capture en Apple Mac OS X versiones anteriores a 10.5, no utiliza apropiadamente los archivos temporales, lo que permite a los usuarios locales sobrescribir archivos arbitrarios y desplegar imágenes que están siendo redimensionadas por ésta aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020141","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29521","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42719","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1573","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory contents) via a crafted (1) BMP or (2) GIF image, which causes an out-of-bounds read."},{"lang":"es","value":"El motor de decodificación de imágenes BMP y GIF en ImageIO en Apple Mac OS X versiones anteriores a 10.5.3, permite a los atacantes remotos obtener información confidencial (contenido de memoria) por medio de una imagen (1) BMP o (2) GIF diseñada, lo que causa una lectura fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.2","matchCriteriaId":"09FE157F-2B5A-4CA9-A2BA-C8535809B2D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.2","matchCriteriaId":"BDD3CE38-A4CF-44A1-A18F-A3741A0EA1CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020144","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29513","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1882/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42721","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1882/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1574","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image that triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en ImageIO en Apple Mac OS X versiones anteriores a 10.5.3, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una imagen JPEG2000 diseñada que desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020144","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29514","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42722","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1575","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document, related to memory corruption that occurs during printing."},{"lang":"es","value":"Una vulnerabilidad no especificada en el servidor Apple Type Services (ATS) en Apple Mac OS X versiones 10.5 anteriores a 10.5.3, permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de una fuente diseñada incorporada en un documento PDF, relacionado con una corrupción de memoria que ocurre durante la impresión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020133","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29492","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42707","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1576","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly initialize memory, which might allow remote attackers to execute arbitrary code or cause a denial of service (application crash), or obtain sensitive information (memory contents) in opportunistic circumstances, by sending an e-mail message."},{"lang":"es","value":"Mail en Apple Mac OS X versiones anteriores a 10.5, cuando un servidor IPv6 SMTP es usado, no inicializa correctamente la memoria, lo que podría permitir a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) u obtener información confidencial (contenido de la memoria ) en circunstancias oportunistas, mediante el envío de un mensaje de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020140","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29500","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42723","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1577","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file, related to \"multiple memory corruption issues.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en el códec Pixlet en Apple Pixlet Video en Apple Mac OS X versiones anteriores a 10.5.3, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo de película especialmente diseñado, relacionado con \"multiple memory corruption issues.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020132","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29489","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42706","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1578","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing the process."},{"lang":"es","value":"El programa sso_util en Single Sign-On en Apple Mac OS X versiones anteriores a 10.5.3, coloca las contraseñas en la línea de comando, lo que permite a los usuarios locales obtener información confidencial mediante la enumeración de los procesos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020142","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29520","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42725","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1579","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a nonexistent blog."},{"lang":"es","value":"Wiki Server en Apple Mac OS X versiones 10.5 anteriores a 10.5.3, permite a los atacantes remotos obtener información confidencial (nombres de usuario) mediante la lectura del mensaje de error producido al acceder a un blog inexistente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020143","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42727","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1580","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information (Subject data) from personally identifiable certificates, and use arbitrary certificates to track user activities across domains, a related issue to CVE-2007-4879."},{"lang":"es","value":"CFNetwork en Safari en Apple Mac OS X versiones anteriores a 10.5.3, envía automáticamente un certificado de cliente SSL en respuesta a la petición de certificado de un servidor web, lo que permite a los sitios web remotos obtener información confidencial (datos del Subject) de certificados identificables personalmente y utilizar certificados arbitrarios para rastrear las actividades de los usuarios en todos los dominios, un problema relacionado con CVE-2007-4879."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29493","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42708","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1581","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apple QuickTime anterior a 7.5 sobre Windows, permite a atacantes remotos provocar una denegación de servicio (Caída) y la posibilidad de ejecutar código de su elección a través de un paquete de \"scanlines\" manipulado un las estructuras de PixData en una imagen PICT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.5","matchCriteriaId":"DDFD1347-3532-4126-B21B-FC865FF72AD6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"cve@mitre.org"},{"url":"http://secunia.com/secunia_research/2008-9/advisory/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT1991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493225/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29649","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020213","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42943","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-9/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT1991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493225/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1582","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada  en Apple QuickTime anterior a 7.5, permite a atacantes remotos provocar una denegación de servicio (Caída) y la posibilidad de ejecutar código de su elección a través de un archivo de ACC-encodec que genera una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29654","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020214","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42944","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1583","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image, a different vulnerability than CVE-2008-1581."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apple QuickTime anterior a 7.5, permite a atacantes remotos provocar una denegación de servicio (Caída) y la posibilidad de ejecutar código de su elección a través de una imagen PICT. Vulnerabilidad distinta de CVE-2008-1581."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.5","matchCriteriaId":"DDFD1347-3532-4126-B21B-FC865FF72AD6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29648","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020215","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42945","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1584","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo video codec content in a movie file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Apple QuickTime anterior a 7.5, permite a atacantes remotos provocar una denegación de servicio (Caída) y la posibilidad de ejecutar código de su elección a través de un contenido \"Indeo video codec\" manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.5","matchCriteriaId":"DDFD1347-3532-4126-B21B-FC865FF72AD6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493247/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29652","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020216","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-037/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42947","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493247/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-037/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1585","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs."},{"lang":"es","value":"Apple QuickTime anterior a 7.5 permite a atacantes remotos ejecutar programas de su elección a través de un archivo manipulado: URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.5","matchCriteriaId":"DDFD1347-3532-4126-B21B-FC865FF72AD6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31034","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1991","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/132419","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/493248/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29650","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020217","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-038/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42948","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT1991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/132419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/493248/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-162C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1776/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2064/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-038/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1586","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image."},{"lang":"es","value":"ImageIO en Apple iPhone OS 1.0 hasta 2.1 y iPhone OS para iPod touch 1.1 hasta 2.1, permite a los atacantes remotos causar una denegación de servicio(consumo de memoria o reinicio del dispositivo) a través de una imagen TIFF manipulada."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this libTIFF bug to be a security issue.","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021270","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1588","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL."},{"lang":"es","value":"Safari en Apple iPhone anterior a 2.0 e iPod touch anterior a 2.0 , permite a atacantes remotos falsificar la barra de direcciones mediante espacios Unicode ideográficos en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6430229D-ACD4-46AE-A6B5-95D3CC1AF514"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CA40173B-5F79-400E-9540-7E0BF7A78E35"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7A0EBA08-CE54-4AE3-9AED-514392372B7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E969C4E-45A5-4767-9959-A1AD2DE4E1C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43732","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1589","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites."},{"lang":"es","value":"Safari en Apple iPhone anterior a 2.0 e iPod touch anterior a 2.0 no interpreta correctamente que se pulse en un botón del menú como la confirmación de un usuario al visitar un sitio Web con un certificado (1)autofirmado o (2) no válido; esto facilita a atacantes remotos falsificar los sitios Web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6430229D-ACD4-46AE-A6B5-95D3CC1AF514"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CA40173B-5F79-400E-9540-7E0BF7A78E35"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7A0EBA08-CE54-4AE3-9AED-514392372B7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E969C4E-45A5-4767-9959-A1AD2DE4E1C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN88676089/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43734","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN88676089/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1590","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317."},{"lang":"es","value":"JavaScriptCore en WebKit de Apple iPhone anterior a 2.0 e iPod touch anterior a 2.0, no realiza correctamente la recolección de basura en tiempo de ejecución, esto permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) mediante vectores no especificados que provocan una corrupción de memoria. Se trata de una vulnerabilidad diferente de CVE-2008-2317."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6430229D-ACD4-46AE-A6B5-95D3CC1AF514"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CA40173B-5F79-400E-9540-7E0BF7A78E35"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7A0EBA08-CE54-4AE3-9AED-514392372B7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E969C4E-45A5-4767-9959-A1AD2DE4E1C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webkit:javascriptcore:*:*:*:*:*:*:*:*","matchCriteriaId":"547670B7-33BA-438C-9AA6-31EB8B4B2DC8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43738","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1591","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENT_IP HTTP header (HTTP_CLIENT_IP variable)."},{"lang":"es","value":"La función pnVarPrepForStore en PostNuke 0.764 y anteriores se salta las entradas de limpieza cuando está habilitado magic_quotes_runtime, lo que permite a atacantes remotos llevar a cabo ataques de inyección SQL y ejecutar comandos SQL de su elección a través de entradas asociadas con variables de servidor, como se demostró por la cabecera CLIENT_IP HTTP  (variable HTTP_CLIENT_IP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke:postnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"0.764","matchCriteriaId":"344AA2DF-E692-4E6A-B486-1D694D7F8818"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28407","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41375","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5292","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1592","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to \"Pathway panels.\""},{"lang":"es","value":"MQSeries 5.1 en IBM WebSphere MQ de 5.1 a 5.3.1 en las plataformas HP NonStop y Tandem NSK no requiere que se sea del grupo mqm para la ejecución de tareas administrativas, lo que permite a usuarios locales evitar las restricciones de acceso pervistas a través del programa runmqsc, relacionado con \"paneles Pathway\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:nonstop:*:*:*:*:*:*:*:*","matchCriteriaId":"6018065D-F606-4769-9341-9E7DEA6A0A72"},{"vulnerable":false,"criteria":"cpe:2.3:o:tandem_computers:tandem_operating_system:nsk:*:*:*:*:*:*:*","matchCriteriaId":"CE239FDD-F33C-4E9C-B864-BE3DCC78B59B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.1:*:*:*:*:*:*:*","matchCriteriaId":"089EDD33-4854-4894-B88D-EC560C40E2EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.3:*:*:*:*:*:*:*","matchCriteriaId":"36650BB9-861B-42B5-BCC1-492F84A64951"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"465D718A-ACA5-444B-99EE-67876B8D3687"}]}]}],"references":[{"url":"http://secunia.com/advisories/29360","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019610","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21297035","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28235","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21297035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1593","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the as_getadsp64 function."},{"lang":"es","value":"La característica de checkpoint (punto de comprobación) y restart (reinicio) en el kernel de IBM AIX 5.2, 5.3 y 6.1 no protege adecuadamente la memoria del kernel, lo que permite a usuarios locales leer y modificar porciones de memoria y obtener privilegios a través de vectores no especificados que implican un reinicio de un proceso de 64 bits, probablemente relacionado con la función as_getadsp64."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019606","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11820","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ12794","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ16992","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ17111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28467","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4595","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ11820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ12794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ16992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ17111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1594","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size."},{"lang":"es","value":"El kernel de IBM AIX 5.2 y 5.3 no manipula adecuadamente el redimensionamiento de sistemas de ficheros JFS2 en grupos de volúmenes concurrentes extendidos por múltiples nodos, lo que permite a usuarios locales de un nodo provocar una denegación de servicio (caída de nodo remoto) utilizando chfs o lreducelv para reducir el tamaño de un sistema de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019606","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ04946","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ04953","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ05246","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28467","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5434","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ04946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ04953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ05246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1595","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information."},{"lang":"es","value":"El sistema de ficheros proc en el kernel de IBM AIX 5.2 y 5.3 no refuerza adecuadamente los permisos de directorio cuando un archivo se ejecuta desde un directorio que tiene permisos más débiles que los del propio directorio, lo que permite a usuarios locales obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019606","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06022","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06505","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06663","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28467","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5321","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ06663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1596","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to missing checks in the TSD_FILES_LOCK policy for modifications performed via hard links, a different vulnerability than CVE-2007-6680."},{"lang":"es","value":"Trusted Execution en IBM AIX 6.1 utiliza un argumento de nombre de ruta incorrecto en una llamada a la función trustchk_block_write, lo que podría permitir a usuarios locales modificar archivos de confianza, relacionados con falta de comprobaciones en la política TSD_FILES_LOCK para modificaciones llevada a cabo mediante enlaces duros (hard links), un vector distinto a CVE-2007-6680."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019606","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ13418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28467","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ13418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1597","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger \"undefined behavior.\""},{"lang":"es","value":"La implementación WPAR system call (llamada al sistema WPAR) en el kernel de IBM AIX 6.1 permite a usuarios locales provocar una denegación de servicio a través de llamadas desconocidas que disparan \"comportamiento no definido\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019606","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ13346","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ13392","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28467","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6198","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ13346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ13392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1598","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El kernel de IBM AIX 6.1 permite a usuarios locales con privilegios ProbeVue leer memoria del kernel de su elección y obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019606","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ09545","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28467","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1019606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ09545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-1599","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat."},{"lang":"es","value":"Los programas nddstat de IBM AIX 5.2, 5.3 y 6.1 no manipulan adecuadamente variables de entorno, lo que permite a usuarios locales obtener privilegios invocando (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, o (5) tokstat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019604","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ16975","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ16991","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ17058","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ17059","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4156","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4157","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4158","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5468","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ16975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ16991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ17058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ17059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1600","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a different vulnerability than CVE-2004-1329."},{"lang":"es","value":"El programa lsmcode de IBM AIX 5.2, 5.3 y 6.1 no manipula adecuadamente variables de entorno, lo que permite a usuarios locales obtener privilegios, una vulnerabilidad distinta a CVE-2004-1329."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://securitytracker.com/id?1019603","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15057","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15100","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15276","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15277","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4159","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4160","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4161","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5566","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1601","sourceIdentifier":"cve@mitre.org","published":"2008-03-31T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el programa de reinicio de IBM AIX 5.2 y 5.3 permite a usuarios locales obtener privilegios en el grupo shutdown (apagado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/29347","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019602","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15479","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15480","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4162","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4163","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4164","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ15480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1602","sourceIdentifier":"cve@mitre.org","published":"2008-04-06T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el controlador de Orbit 2.6.3 y 2.6.4 permite a atacantes remotos ejecutar código de su elección a través de un URL de descarga largo, que no es manejado correctamente durante la conversión Unicode para una notificación balloon después de que haya fallado una descarga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orbit_downloader:orbit_downloader:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D6523B1-6B03-43B6-AEFD-72B92019D992"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbit_downloader:orbit_downloader:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7553CFDF-7CA8-4DAF-8FFF-3D9222C25937"}]}]}],"references":[{"url":"http://secunia.com/advisories/29669","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3798","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2211","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/490458/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28541","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41649","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/490458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1603","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in GNB DesignForm before 3.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the email form."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en GNB DesignForm versiones anteriores a la 3.9 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar en el formulario email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnb:designform:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8","matchCriteriaId":"4E31EB2D-DCC2-4C07-98A2-948C7DA5DCEE"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2358803701/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gnbnet.com/cgi/readme/designform.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28471","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41495","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2358803701/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gnbnet.com/cgi/readme/designform.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1604","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PerlMailer before 3.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en PerlMailer versiones anteriores a la 3.02, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perlmailer:perlmailer:*:*:*:*:*:*:*:*","versionEndIncluding":"3.01","matchCriteriaId":"9EEE0B50-72C3-44FA-BFDB-BF88C888DAB8"}]}]}],"references":[{"url":"http://cgi.din.or.jp/~hideyuki/cgi-bin/diary-s/perldiary-s.cgi","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2376669770/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000019.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28472","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41491","source":"cve@mitre.org"},{"url":"http://cgi.din.or.jp/~hideyuki/cgi-bin/diary-s/perldiary-s.cgi","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/jp/JVN%2376669770/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1605","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0.17 and earlier) in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method."},{"lang":"es","value":"Los controles ActiveX (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class y (3) ltmmPlayCtrl Class (ltmm15.dll 15.1.0.17 y anteriores) de LEADTOOLS Multimedia Toolkit 15 permiten a atacantes sobrescribir archivos de su elección mediante el método SaveSettingsToFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leadtools:multimedia_toolkit:15:*:*:*:*:*:*:*","matchCriteriaId":"8A00A861-5A31-4B0B-A361-A37BA2279EA8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28442","source":"cve@mitre.org"},{"url":"http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last","source":"cve@mitre.org"},{"url":"http://www.shinnai.altervista.org/xplits/TXT_lyyELAFI8pOPu2p7N6cq.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.altervista.org/xplits/TXT_lyyELAFI8pOPu2p7N6cq.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1606","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download arbitrary files via a .. (dot dot) in the file parameter to manager/getImportFileRedirect.jsp, (2) upload arbitrary files via a \"..\\\" (dot dot backslash) in the file parameter to importData.jsp, and (3) list directory contents via a .. (dot dot) in the dir parameter to manager/fileManager.jsp."},{"lang":"es","value":"Múltiples vulnerabilidades de Salto de Directorio en Elastic Path (EP) 4.1 y 4.1.1, permiten a atacantes remotos (1) descargar archivos de su elección mediante un .. (punto punto) en el parámetro file de manager/getImportFileRedirect.jsp, (2) subir archivos de su elección mediante un “..\\” (punto punto barra invertida) en el parámetro file de importData.jsp y (3) listar contenidos de directorio mediante un .. (punto punto) en el parámetro dir de manager/fileManager.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elastic_path:elastic_path:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C03E9B6E-FC77-4BE6-B47D-5E1A131F269B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elastic_path:elastic_path:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F167868B-D978-452B-83D9-C0FACBF908E0"}]}]}],"references":[{"url":"http://developer.elasticpath.com/entry%21default.jspa?categoryID=4&externalID=1334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29496","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://weblog.nomejortu.com/?p=37","source":"cve@mitre.org"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_elastic-path-arbitrary-file-system-access_2008-02-22.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28352","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41356","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41364","source":"cve@mitre.org"},{"url":"http://developer.elasticpath.com/entry%21default.jspa?categoryID=4&externalID=1334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://weblog.nomejortu.com/?p=37","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_elastic-path-arbitrary-file-system-access_2008-02-22.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1607","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbitrary SQL commands via the haber parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en haberoku.php de Serbay Arslanhan Bomba Haber 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro haber."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:serby_arslanhan:bomba_haber:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5A86A88C-9A2A-4D99-93C3-9180C46BE898"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28435","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41422","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1608","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo postview.php en Clever Copy versión 3.0, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro ID, un vector diferente de CVE-2008-0363 y CVE-2006-0583."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clever_copy:clever_copy:3.0:*:*:*:*:*:*:*","matchCriteriaId":"11BE426F-A466-4089-A74E-681FC14BECE5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28437","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28437/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41450","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28437/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1609","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter to forum/forum.php.  NOTE: other main_dir vectors are already covered by CVE-2006-7127."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos PHP en just another flat file (JAF) CMS 4.0 RC2, permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en (1) el parámetro website de (a) forum.php, (b) headlines.php y (c) main.php en forum/ y (2) el parámetro main_dir de forum/forum.php.  NOTA: otros vectores main_dir ya están contemplados en CVE-2006-7127."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaf_cms:jaf_cms:4.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"542C3023-EACE-46A1-A903-61252843F1F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490162/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490183/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28476","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41753","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/2474/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490162/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/2474/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1610","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request."},{"lang":"es","value":"Desbordamiento de Búfer basado en Pila en TallSoft Quick TFTP Server Pro 2.1, permite a atacantes remotos provocar una denegación de servicio o ejecutar código de su elección mediante un campo largo field en una petición de lectura o escritura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tallsoft_quick:tftp_server_pro:2.1:*:*:*:*:*:*:*","matchCriteriaId":"65E66CF5-3AC2-4FE5-B8BC-529D56656DC9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29494","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/quick-tftp-poc.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28459","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41499","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/quick-tftp-poc.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1611","sourceIdentifier":"cve@mitre.org","published":"2008-04-01T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Information regarding how the service runs as system: http://www.tftp-server.com/","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request."},{"lang":"es","value":"Desbordamiento de Búfer basado en Pila en TFTP Server SP 1.4 para Windows, permite a atacantes remotos provocar una denegación de servicio o ejecutar código de su elección mediante un campo filename largo en una petición de lectura o escritura.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftp-server:winagents_tftp_server:sp_1.4:*:windows:*:*:*:*:*","matchCriteriaId":"FB186D7D-C311-4668-8A4D-D908D07BF795"}]}]}],"references":[{"url":"http://secunia.com/advisories/29508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28462","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41496","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1612","sourceIdentifier":"secalert@redhat.com","published":"2008-04-01T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error.  NOTE: this issue is due to an incorrect fix for CVE-2007-6239."},{"lang":"es","value":"La función arrayShrink (lib/Array.c) en Squid 2.6.STABLE17 permite a atacantes provocar una denegación de servicio (terminación del proceso) a través de vectores desconocidos que provocan que un array se inicialice a 0 entradas, lo cual dispara un error de confirmación. NOTA: este problema se debe a un parche incompleto para CVE-2007-6239."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.6.stable17:*:*:*:*:*:*:*","matchCriteriaId":"C8585F22-39CB-46E1-B247-377C5C60AB47"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=squid-announce&m=120614453813157&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27477","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29813","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30032","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32109","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34467","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200903-38.xml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1646","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:134","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/01/5","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0214.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28693","source":"secalert@redhat.com"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2007_2.txt","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.squid-cache.org/Versions/v2/2.6/changesets/11882.patch","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-601-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41586","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11376","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00560.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=squid-announce&m=120614453813157&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-38.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/01/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0214.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2007_2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squid-cache.org/Versions/v2/2.6/changesets/11882.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-601-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00560.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1613","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en RD.asp de RedDot CMS 7.5 Build 7.5.0.48, y posiblemente otras versiones incluyendo 6.5 y 7.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro LngId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reddot:cms:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9625E4A6-4BD9-4BB9-B766-343FB936EED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:reddot:cms:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7CBA2389-D719-4FC3-82E9-25D53744DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:reddot:cms:7.5:build_7.5.0.48:*:*:*:*:*:*","matchCriteriaId":"ECC6FE8B-66CE-49BD-92E3-1C3034D7073C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29843","source":"cve@mitre.org"},{"url":"http://www.irmplc.com/index.php/167-Advisory-026","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28872","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.irmplc.com/index.php/167-Advisory-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491139/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1614","sourceIdentifier":"secalert@redhat.com","published":"2008-04-02T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Addition information can be found at:\r\n\r\nhttp://secunia.com/advisories/29615/\r\n\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges."},{"lang":"es","value":"suPHP versiones anteriores 0.6.3 permite a usuarios locales conseguir privilegios a través de (1) una condición de carrera que implica múltiples cambios de enlace simbólicos para apuntar a ficheros propiedad de diferentes usuarios, o (2) un enlace simbólico a el directorio de un usuario diferente, lo cual es usado para determinar privilegios.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian_marsching:suphp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.2","matchCriteriaId":"478EFD59-3294-4478-840D-ABAFD8C8CB8C"}]}]}],"references":[{"url":"http://lists.marsching.biz/pipermail/suphp/2008-March/001750.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29615","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29648","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29872","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1550","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28568","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1073/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=439687","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41582","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00014.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00075.html","source":"secalert@redhat.com"},{"url":"http://lists.marsching.biz/pipermail/suphp/2008-March/001750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1073/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=439687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1615","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls."},{"lang":"es","value":"El kernel de Linux versión 2.6.18 y posiblemente otras versiones, cuando corren bajo arquitecturas AMD64, permite a usuarios locales provocar una denegación de servicio (caída) a través de determinadas llamadas ptrace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*","matchCriteriaId":"6BF1F027-C9FF-4583-AB40-E0B757F9EE41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*","matchCriteriaId":"B18EBE6E-482D-435D-851C-73EC301F0A26"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4:*:*:*:*:*:*:*","matchCriteriaId":"D986CAD0-F4E0-4F97-B240-8967CD4466FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:amd64:*:*:*:*:*:*:*:*","matchCriteriaId":"C7979FDA-FB14-42C6-90AE-FB0B780FE508"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30112","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30252","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30818","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30890","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31628","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0275.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020047","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431430","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42278","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9563","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0275.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1617","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null."},{"lang":"es","value":"Vulnerabilidad de doble liberación en Web TransferCtrl Class 8,2,1,4 (iManFile.cab), usado en WorkSite Web 8.2 anterior a SP1 P2, permite a atacantes remotos ejecutar código de su elección a través de JavaScript que establece la propiedad Server a String(cadena) y posteriormente a null."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interwoven:worksite_web:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2","matchCriteriaId":"038053B6-DDA5-4514-A0D6-931A2C0FA6B2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28628","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1134/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41699","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1134/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1618","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"El servicio PPTP VPN en Watchguard Firebox versiones anteriores a 10, al realizar la negociación de autenticación MS-CHAPv2, genera diferentes códigos de error dependiendo de si el nombre de usuario es válido o no válido, lo que permite a los atacantes remotos enumerar nombres de usuario comprobados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:watchguard:firebox_pptp_vpn:4.9:*:*:*:*:*:*:*","matchCriteriaId":"74232A36-AA69-4E9E-9226-CFF4CFECB6C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:watchguard:firebox_pptp_vpn:5.0:*:*:*:*:*:*:*","matchCriteriaId":"53E189B5-EE45-4E2E-A87F-A8BBD414AAA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29708","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mwrinfosecurity.com/publications/mwri_watchguard-firebox-pptp-vpn-user-enumeration-advisory_2008-04-04.pdf","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/44218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28619","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019796","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1152/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mwrinfosecurity.com/publications/mwri_watchguard-firebox-pptp-vpn-user-enumeration-advisory_2008-04-04.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/44218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1152/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1619","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T16:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool."},{"lang":"es","value":"La emulación ssm_i de Xen 5.1 en arquitecturas IA64 permite a atacantes remotos provocar una denegación de servicio (dom0 pamic) mediante cierto tráfico, como se demostró utilizando la herramienta de prueba de estrés FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xensource_inc:xen:5.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6A29CB05-4C1E-4CC7-A1CA-7C423610705F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30116","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29085","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437770","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41633","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=437770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1620","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servicio 2X TFTP (TFTPd.exe) 3.2.0.0. y anteriores en 2X ThinClientServer 5.0_sp1-r3497 y anteriores, permite a atacantes remotos leer o sobreescribir ficheros de su elección mediante un ... (punto punto punto) en el nombre del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2x:thinclientserver:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.0.0","matchCriteriaId":"135D7080-0702-400A-BDA0-EF65840C27B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:2x:thinclientserver:*:sp1_r3497:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7EDB952B-2A04-4C29-A096-094F16B90695"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/thindirtrav-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/testz/tftpx.zip","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/29590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490324/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28504","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1040/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41528","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/thindirtrav-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/testz/tftpx.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/29590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490324/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1040/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1621","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) show.php, (2) search.php, and (3) view.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en GeeCarts permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro id a (1) show.php, (2) search.php y (3) view.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geertsen_holdings_inc:geecarts:*:*:*:*:*:*:*:*","matchCriteriaId":"E7946818-92CB-485E-9453-EBD44EE0601E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28470","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28470/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28470/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1622","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via a URL in the id parameter to (1) show.php, (2) search.php, and (3) view.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos PHP remotos en GeeCarts permiten a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro id a (1) show.php, (2) search.php y (3) view.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geertsen_holdings_inc:geecarts:*:*:*:*:*:*:*:*","matchCriteriaId":"E7946818-92CB-485E-9453-EBD44EE0601E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28470","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1623","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28503","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin_view_image.php de Smoothflash, permite a atacantes remotos ejecutar comandos SQL de su elección mediante un parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus_web_studios_inc:smoothflash:*:*:*:*:*:*:*:*","matchCriteriaId":"7CE14583-2ACE-43AA-B409-6CBAB332FC8F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28503","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5322","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1624","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xPage parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en v2demo/page.php en Jshop Server 1.x a 2.x, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro xPage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whorl_ltd:jshop_server:1:*:*:*:*:*:*:*","matchCriteriaId":"E2C9255F-0623-4744-BDEF-E5DE80479B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:whorl_ltd:jshop_server:2:*:*:*:*:*:*:*","matchCriteriaId":"426341E8-2035-4E2F-A013-61447B08FF4A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41524","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5325","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1625","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests."},{"lang":"es","value":"aavmker4.sys en avast! Home y Professional 4.7 para Windows, no valida de forma correcta la entrada a IOCTL 0xb2d60030, esto permite a usuarios locales obtener privilegios a través de cierta solicitud IOCTL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*","matchCriteriaId":"33A71A2C-36AC-4F36-9D94-AA824F4DE14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*","matchCriteriaId":"62618C12-3EAC-4434-B2A8-D83612F1A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*","matchCriteriaId":"B949535B-9771-4AC6-BBDB-8BB3A789A1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*","matchCriteriaId":"DC6DA89A-BF71-4031-9B51-E5941FDE5E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*","matchCriteriaId":"DB201D49-EB74-4A5D-B641-86C4429E3EC0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*","matchCriteriaId":"DF2D8C10-01E4-43D7-93EE-342BA7E9C489"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*","matchCriteriaId":"AAB7888A-E884-4C73-AF10-698C56E080F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*","matchCriteriaId":"1F7F2957-4422-4891-B573-F68882D7C8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:windows:*:*:*:*:*","matchCriteriaId":"FC6DE028-27FD-40D7-AD12-F3C648B445E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490321/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28502","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019732","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-002.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1034/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490321/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1034/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1626","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en eggBlog versiones anteriores a 4.0.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cookie no especificada.\r\nNOTA: puede coincidir con CVE-2008-0159."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eggblog:eggblog:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"5CA77066-056B-4655-A277-728CF69C8A76"}]}]}],"references":[{"url":"http://eggblog.net/news.php?id=39","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/showfiles.php?group_id=155425&package_id=173141&release_id=587701","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28497","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41512","source":"cve@mitre.org"},{"url":"http://eggblog.net/news.php?id=39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/showfiles.php?group_id=155425&package_id=173141&release_id=587701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1627","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID."},{"lang":"es","value":"CDS Invenio 0.92.1 y anteriores, permite a usuarios autenticados en remoto eliminar las alertas de notificaciones de correo electrónico o a los usuarios que deseen, a través de una UID interna modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cds_software_consortium:invenio:*:*:*:*:*:*:*:*","versionEndIncluding":"0.92.1","matchCriteriaId":"B35AC3EF-5AED-4A73-A6E6-0D947C523B4E"}]}]}],"references":[{"url":"http://cdsware.cern.ch/invenio/news.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cdsware.cern.ch/lists/project-cdsware-announce/archive/msg00021.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29521","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41546","source":"cve@mitre.org"},{"url":"http://cdsware.cern.ch/invenio/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cdsware.cern.ch/lists/project-cdsware-announce/archive/msg00021.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1628","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28524/info\r\n\r\nhttp://www.frsirt.com/english/advisories/2008/1052","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función audit_log_user_command de lib/audit_logging.c en Linux Audit versiones anteriores 1.7 podría permitir a atacantes remotos ejecutar código de su elección a través de un argumento command.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the audit packages as shipped with Red Hat Enterprise Linux 4.\n\nRed Hat is not treating this issue as a security vulnerability for Red Hat Enterprise Linux 5 as no application used the affected interface, and the only result is a controlled application termination as the overflow is detected by the FORTIFY_SOURCE protection mechanism.  We plan to address this as non-security bug fix in updated audit packages for Red Hat Enterprise Linux 5.2.\n\nFor further details, please see:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-1628","lastModified":"2008-04-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.1},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:audit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.9","matchCriteriaId":"20E7244C-184D-4316-B79C-DA01CC329CF7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://people.redhat.com/sgrubb/audit/ChangeLog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29754","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29957","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31316","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-14.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28524","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019824","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1052/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41576","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00200.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/linux-audit/2008-March/msg00138.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://people.redhat.com/sgrubb/audit/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1052/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/linux-audit/2008-March/msg00138.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1629","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28510","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHPkrm anterior a 1.5.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pau_rodriguez:phpkrm:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2","matchCriteriaId":"46C09538-9F31-4E9A-9E09-FD06EF299DC2"}]}]}],"references":[{"url":"http://freshmeat.net/projects/phpkrm/?branch_id=58803&release_id=274667","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29579","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28510","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41548","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/phpkrm/?branch_id=58803&release_id=274667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1630","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, and (6) showtemplates.php in pages/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CuteFlow 1.5.0 y 2.10.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro de idioma de (1) page/showcirculation.php; y (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, y (6) showtemplates.php en pages/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emedia_office_gmbh:cuteflow:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4CE4676D-0D5C-4C61-A925-AA53B8B933A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:emedia_office_gmbh:cuteflow:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB7D30E-C22D-4E42-8B34-29C4E254FC05"}]}]}],"references":[{"url":"http://secunia.com/advisories/29612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3792","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490305/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28500","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490305/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1631","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28500/info","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php de CuteFlow 1.5.0 y 2.10.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro UserId, relacionado con el campo de acceso del formulario en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emedia_office_gmbh:cuteflow:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4CE4676D-0D5C-4C61-A925-AA53B8B933A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:emedia_office_gmbh:cuteflow:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB7D30E-C22D-4E42-8B34-29C4E254FC05"}]}]}],"references":[{"url":"http://secunia.com/advisories/29612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3792","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490305/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41544","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490305/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1632","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Addtional information can be found at:\r\nhttp://xforce.iss.net/xforce/xfdb/41537","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) listid parameter to pages/editmailinglist_step1.php, the (2) userid parameter to pages/edituser.php, the (3) fieldid parameter to pages/editfield.php, and the (4) templateid to pages/edittemplate_step1.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en CuteFlow 2.10.0, permite a usuarios autenticados en remoto ejecutar comandos SQL de su elección a través de los parámetros (1) listid de pages/editmailinglist_step1.php, (2) userid de pages/edituser.php, (3) fieldid de pages/editfield.php, y (4) templateid de pages/edittemplate_step1.php. NOTA: se desconoce el origen de esta información; los detalles son obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emedia_office_gmbh:cuteflow:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.0","matchCriteriaId":"7E56A1D8-D629-4B78-88D9-3CABAE2C7E57"}]}]}],"references":[{"url":"http://secunia.com/advisories/29612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1633","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28522","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors, related to the use of (1) /tmp and (2) MINDI_CACHE."},{"lang":"es","value":"Vulnerabilidad sin especificar en Mondo Rescue antes de 2.2.5 tiene un efecto y unos vectores de ataque desconocidos, relacionados con el uso de 1) /tmp y (2) MINDI_CACHE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mondo:rescue:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"F349FAC2-3B27-41AB-AD77-21110BF606C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mondorescue.org/news.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28522","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41530","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mondorescue.org/news.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1634","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in JV2 Folder Gallery 3.1 allows remote attackers to inject arbitrary web script or HTML via the image parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en JV2 Folder Gallery 3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro image. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jv2:folder_gallery:3.1:*:*:*:*:*:*:*","matchCriteriaId":"20A97476-3074-4028-A214-41F3B987EDAB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41569","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1635","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tmp_theme parameter.  NOTE: 5.1.1 is also reportedly affected."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en view_private.php en Keep It Simple Guest Book (KISGB) 5.0.0 y anteriores, que permite a atacantes remotos añadir y ejecutar ficheros locales de su elección a través de un parámetro .. (punto punto). NOTA: la versión 5.1.1 también se encuentra afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raven_php_scripts:keep_it_simple_guest_book:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.1","matchCriteriaId":"170482D9-6B8B-4E33-9DA1-CC2EA22F9ACB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28513","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41525","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5324","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1636","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the f parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en JV2 Quick Gallery 1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro f. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jv2:quick_gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CF611CA-80FB-4225-AB7C-C9F949710DF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29598","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28511","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1637","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information."},{"lang":"es","value":"PowerDNS Recursor anterior a 3.1.5 no emplea la suficiente aleatoriedad para calcular (1) los valores TRXID y (2) números de las fuentes de los puertos UDP; esto hace que sea más fácil a los atacantes remotos envenenar una caché de DNS relacionada con (a) deficiencias algorítmicas en las funciones rand y random de librerias externas, (b) uso de una semilla de 32-bit, y (3) elección del momento del día como la única semilla de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"BFBA9267-A53C-4D1E-95BE-B69BA5C03DF3"}]}]}],"references":[{"url":"http://doc.powerdns.com/changelog.html","source":"cve@mitre.org"},{"url":"http://doc.powerdns.com/powerdns-advisory-2008-01.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29584","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29764","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-22.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1544","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490330/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28517","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/docs/PowerDNS_recursor_DNS_Cache_Poisoning.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.trusteer.com/docs/powerdnsrecursor.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1046/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41534","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00198.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00224.html","source":"cve@mitre.org"},{"url":"http://doc.powerdns.com/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://doc.powerdns.com/powerdns-advisory-2008-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490330/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/docs/PowerDNS_recursor_DNS_Cache_Poisoning.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.trusteer.com/docs/powerdnsrecursor.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1046/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00224.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1638","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nik Sharpener Pro, possibly 2.0, uses world-writable permissions for plug-in files, which allows local users to gain privileges by replacing a plug-in with a Trojan horse."},{"lang":"es","value":"Nik Sharpener Pro, posiblemente 2.0, utiliza permisos world-writable para archivos plugin, lo que permite a usuarios locales obtener privilegios remplazando un plugin por un troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nik_software_inc:nik_sharpener_pro:2.0:*:inkjet:*:*:*:*:*","matchCriteriaId":"95D4CDF7-EF89-49C1-B943-D5D53E2CA4B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/124289","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27707","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/124289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1639","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Neat weblog 0.2, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro articleId en una acción show, probablemente esté relacionado con la función showArticle de lib/lib_article.include.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neat_web:neat-web:0.2:*:*:*:*:*:*:*","matchCriteriaId":"6529F82D-AB6B-462A-BB72-A1BA0F7877B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28534","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1053/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41555","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1053/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1640","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the view_id parameter in an ansicht action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jgs_treffen.php en el añadido JGS-XA JGS-Treffen 2.0.2 y anteriores para Woltlab Burning Board (wBB) permite a atacantes remotos  ejecutar comandos SQL de su elección a través del parámetro view_id en una acción ansicht."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jgs-xa:jgs_treffen:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"0BC133B1-A05B-4AC0-B62A-298B67F0735D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jgs-xa:jgs_treffen:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"146A2651-818D-453A-9B82-EBEA93869419"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28530","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1054/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41556","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1054/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1641","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp de EfesTECH Video 5.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efestech:video:5.0:*:*:*:*:*:*:*","matchCriteriaId":"79C4F9B2-BECC-46E4-BAEC-D3BEEA15EB25"}]}]}],"references":[{"url":"http://secunia.com/advisories/29611","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3791","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490309/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28532","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490309/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1642","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Sava's GuestBook 2.0, permite a atacantes remotos incluir y ejecutar en archivos locales de su elección mediante secuencias de salto de directorio en el parámetro action. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savas_place:savas_guestbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1BCDA476-AEA1-48C5-8302-2A282502528F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28536","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1643","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en PXE TFTP Service (PXEMTFTP.exe) de LANDesk Management Suite (LDMS) 8.7 SP5 y anteriores y 8.8 permite a atacantes remotos leer archivos de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:landesk_software:landesk_management_suite:*:sp1:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"87C2E2FD-C69B-4A59-A148-8A172264D613"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk_software:landesk_management_suite:*:sp2:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"3AD6F362-118A-4BC9-BEA3-6E357095487E"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk_software:landesk_management_suite:*:sp3:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"B0FB40DD-51AE-4D37-81D4-5900327F0FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk_software:landesk_management_suite:*:sp4:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"97713265-A53E-44EC-BAC9-4602D61EF71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk_software:landesk_management_suite:*:sp5:*:*:*:*:*:*","versionEndIncluding":"8.7","matchCriteriaId":"5B59AE84-5717-4F09-9AFA-904FE53E5FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk_software:landesk_management_suite:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D173F977-6A61-46D8-8800-F1BB45ED9280"}]}]}],"references":[{"url":"http://community.landesk.com/support/docs/DOC-2659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28535","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019748","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1051/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41562","source":"cve@mitre.org"},{"url":"http://community.landesk.com/support/docs/DOC-2659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1051/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1644","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewlinks.php in Sava's Link Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en viewlinks.php en Sava's Link Manager 2.0, que permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro \"category\". NOTA: el origen de esta información es desconocida. Los detalles se han obtenido a través de información por parte de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savas_place:savas_link_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCAA36E4-AA2F-489A-B9D7-E5FAA85EFE3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28538","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1645","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbitrary local files via a .. (dot dot) in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en body.php de phpSpamManager (phpSM) 0.53 beta, permite a atacantes remotos leer archivos locales de su elección mediante un .. (punto punto) en el parámetro filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guillaume_meister:php_spammanager:0.53:beta:*:*:*:*:*:*","matchCriteriaId":"2FEC810F-64F0-4118-9945-62188F964254"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1055/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41575","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1055/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1646","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dl_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en wp-download.php de la extensión WP-Download 1.2 de WordPress, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro dl_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arnos_toolbox:wp-download:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2431940D-15A5-43DC-8132-285CE6433734"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wp_download:1.2:*:*:*:*:*:*:*","matchCriteriaId":"43E3D73C-9FCA-472D-BE09-69789A149E76"}]}]}],"references":[{"url":"http://secunia.com/advisories/29608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28516","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41552","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1647","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Los controles ActiveX ChilkatHttp.ChilkatHttp.1 y ChilkatHttp.ChilkatHttpRequest.1 de ChilkatHttp.dll 2.4.0.0, 2.3.0.0 y versiones anteriores  en ChilkatHttp ActiveX, revelan la inseguridad del método SaveLastError, el cual permite a atacantes remotos sobrescribir archivos de su elección. NOTA: alguno de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:chilkathttp_activex:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0.0","matchCriteriaId":"4FCC5778-A1A2-4D8D-AC4F-058E6EC0BBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:chilkathttp_activex:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.0.0","matchCriteriaId":"D0172057-0455-44A3-9B50-7938B1688E0B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28546","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1207033569.ff.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1050/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45988","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5338","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1207033569.ff.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1050/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1648","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Sympa antes de 5.4 permite a atacantes remotos  provocar una denegación de servicio (caída de demonio) a través de un email con un valor mal formado de la cabecera Content-Type y otras cabeceras no especificadas. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.001:*:*:*:*:*:*:*","matchCriteriaId":"F3208BF5-1B63-4953-8802-7426C8F80AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.002:*:*:*:*:*:*:*","matchCriteriaId":"D0E6B4F7-D4FA-4318-8759-A1A02A4A0C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.003:*:*:*:*:*:*:*","matchCriteriaId":"96D2C734-A49E-493E-B5C2-91088F2D85CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.004:*:*:*:*:*:*:*","matchCriteriaId":"56E0BD7B-42BE-480C-9262-CEBCFBB986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.005:*:*:*:*:*:*:*","matchCriteriaId":"5D4B3903-6668-4506-A781-0A9D9B8BF28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.006:*:*:*:*:*:*:*","matchCriteriaId":"90ED75CB-779F-48F2-BA15-75D63B0D3096"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.007:*:*:*:*:*:*:*","matchCriteriaId":"D3F1B140-62B0-473A-B6B1-17B4F617D89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.008:*:*:*:*:*:*:*","matchCriteriaId":"5D1E43F5-532C-4A83-84AA-AF9126CE2CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.009:*:*:*:*:*:*:*","matchCriteriaId":"4C2BDA2D-43B8-4D2A-8DE4-4C77AAF97947"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.010:*:*:*:*:*:*:*","matchCriteriaId":"724A3C0A-9BC2-4AA6-AE96-F8C55FC48849"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:0.011:*:*:*:*:*:*:*","matchCriteriaId":"1E68DF4F-2128-4C94-8E22-CD7211516348"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A0C9A23B-C8AF-49D9-9903-7DE02BFDD67D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"029358EB-0364-4D97-B829-85119DFA52BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"074D0A2E-F47E-4F33-A6B7-113AB7F06A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A2885638-1FA3-4999-8E41-9D2AD3C05A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C31299BE-61F5-4908-B2C1-47292E980329"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.1-2:*:*:*:*:*:*:*","matchCriteriaId":"3C420CC8-44C1-4802-8A95-E600B9AB7081"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"47B1A3C1-8620-4606-A82E-B711DB5BC73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3E6A6F6-2879-4AC3-AEBB-0A0FE1C809EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"EC66B684-8ECB-41AA-B5F9-2B3F8C099C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.3.4-1:*:*:*:*:*:*:*","matchCriteriaId":"1CEC4E75-F8F2-4BCA-9743-7FB0B62C2CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"86ED13ED-1C4A-4A96-9CBC-1CBD37D3C9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8A8E19-79A6-4F66-8156-B18128E30D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.4.2-1:*:*:*:*:*:*:*","matchCriteriaId":"813952B1-A3EF-4BDD-9D60-60400ADC2F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F5C84691-7FC4-4AB4-9347-CBD35FF4DAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.1b:*:*:*:*:*:*:*","matchCriteriaId":"CA008F46-8282-45C5-9098-4E5AC4EEA9D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.2b:*:*:*:*:*:*:*","matchCriteriaId":"CB906126-2D66-4148-8F96-DA50CE6998C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.3b:*:*:*:*:*:*:*","matchCriteriaId":"677ED6AF-066D-40B6-835D-6278BC7B417B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"69588B6A-CA26-4AF5-8D58-811EF810886C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"32269B73-089E-43FA-8685-E6FF186C5EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8160B236-0410-4789-9B02-4B8128BC791B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"55FACF98-3A75-4428-B761-05C67183367E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.2b:*:*:*:*:*:*:*","matchCriteriaId":"8C4AFACC-511E-4022-902C-ECCEE24AC292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E5690073-7AA6-4CC1-A4E1-34AB6236061F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"49569B6B-F42F-4C11-84EF-90B29E70AD99"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0031C064-F2A5-42D3-8926-C78618862B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"457C43C9-D11D-4403-89C8-2231A83FD696"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"59CFB558-6C22-45A8-B902-641B5EE699CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.3beta:*:*:*:*:*:*:*","matchCriteriaId":"C1BB88EB-B509-4962-BE76-5623BB3A0450"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.4:*:*:*:*:*:*:*","matchCriteriaId":"7B12ECDA-0392-4A96-B3C7-5449131A4454"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.5:*:*:*:*:*:*:*","matchCriteriaId":"0A5B0A99-4439-4EAD-B5F0-02BE4C0CCC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F68DE2B2-F6BA-4286-A1D9-C03F54EDB784"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"CA964AEF-5B79-49A2-922D-2EEDD8FBCC74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.5.3b:*:*:*:*:*:*:*","matchCriteriaId":"12232649-60D4-413B-83A6-BF50767ECE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.5.4b:*:*:*:*:*:*:*","matchCriteriaId":"1659E3A0-BC47-4510-A533-F12EA8E95574"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.6:*:*:*:*:*:*:*","matchCriteriaId":"D5573757-2E17-4B2D-8F83-415A0CBC2231"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"9277362E-954C-45CA-8FD3-FCB6DF81D9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7:*:*:*:*:*:*:*","matchCriteriaId":"8BBCDF02-2F13-4900-A449-0F624094A8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"E7B3F8C0-9A20-4A68-B3D7-24188588B8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"0D8D995E-3634-4D70-84F9-D3626267C47B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"63EC9E16-1BF1-4999-B10E-3F3E36069560"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7a:*:*:*:*:*:*:*","matchCriteriaId":"122E99D7-7C43-4E84-A00C-640A827373C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7b.1:*:*:*:*:*:*:*","matchCriteriaId":"6D35E600-9CD2-49C5-915C-BF3CA783DFAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7b.2:*:*:*:*:*:*:*","matchCriteriaId":"2744A6B5-8BC1-45B4-8693-1FDB4FA129B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:2.7b.3:*:*:*:*:*:*:*","matchCriteriaId":"7813C195-3774-423F-A516-F7A9EE088AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.0:*:*:*:*:*:*:*","matchCriteriaId":"88CDE8A4-792B-4D2E-A722-4404D1EC73A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.0a:*:*:*:*:*:*:*","matchCriteriaId":"3F9AC9AE-1D8D-4979-B01D-DC2C4CF2B346"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.0a.1:*:*:*:*:*:*:*","matchCriteriaId":"826A12E1-8CEB-4C4C-98A6-BE7983532CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.0b.4:*:*:*:*:*:*:*","matchCriteriaId":"2DBC7E6D-12E0-404F-95CA-6ED534B1988C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.0b.8:*:*:*:*:*:*:*","matchCriteriaId":"ED42E06D-A2A7-4A4D-9F04-C64218F136B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.0b.9:*:*:*:*:*:*:*","matchCriteriaId":"7D438CB2-B956-46FA-9B8C-A8D88CE4B2C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D7614757-F106-4EEF-8086-00B9D4C813CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A51FCAC6-A1BE-45B6-8319-43ACA7E761A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1b.7:*:*:*:*:*:*:*","matchCriteriaId":"534B15A7-1047-4AD1-B4DD-E3D22925CC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1b.8:*:*:*:*:*:*:*","matchCriteriaId":"EE21D81C-245A-494D-A38E-5DD3D40266BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1b.9:*:*:*:*:*:*:*","matchCriteriaId":"E77134DA-7D36-44D2-B9E5-20CCD0F5B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1b.10:*:*:*:*:*:*:*","matchCriteriaId":"429D2C09-CBBA-45AE-A588-24978052E9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1b.12:*:*:*:*:*:*:*","matchCriteriaId":"70919A0E-E97E-408C-8369-0C484D66BA2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.1b.13:*:*:*:*:*:*:*","matchCriteriaId":"910EC1FB-C86D-4082-AEE3-816918AFE059"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8AEF83-C528-47F6-AB5A-EE220F248E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"00735DD5-28EB-471E-A752-58758A0DB0C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.2.2a:*:*:*:*:*:*:*","matchCriteriaId":"2948FC69-B3AF-48AE-A752-5E85D55EE0A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3:*:*:*:*:*:*:*","matchCriteriaId":"75180EC6-7333-439E-8349-07E0B7985EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"08C5B74E-A70C-415F-9158-FD777030C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8DD97291-4C62-465F-8DDB-BD9AB1818C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.3:*:*:*:*:*:*:*","matchCriteriaId":"07D1AE25-96D2-4BDE-A1A8-21BE5442A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.4:*:*:*:*:*:*:*","matchCriteriaId":"AEBC95C6-910E-4F44-9255-4EA439688EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.5:*:*:*:*:*:*:*","matchCriteriaId":"7D2C5394-51B5-4068-8C92-681B6CB5D3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.6:*:*:*:*:*:*:*","matchCriteriaId":"98AD402F-3EEB-491D-9CD8-E18C55D016BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.7:*:*:*:*:*:*:*","matchCriteriaId":"5C8DE4F5-86AA-41E5-8058-F59A1D25CEF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.8:*:*:*:*:*:*:*","matchCriteriaId":"72DC6557-D9BF-47B0-BC67-F6EAC89974B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.4b.9:*:*:*:*:*:*:*","matchCriteriaId":"B73FAEE4-E1A2-4D71-B8A9-37981D26920A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"BC1891AE-B74E-47E1-B3E8-024E28CA1632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.6b.2:*:*:*:*:*:*:*","matchCriteriaId":"B06E726D-1C76-4E4D-886A-F1763097EBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.6b.3:*:*:*:*:*:*:*","matchCriteriaId":"52242171-94E3-4D63-AE73-9BD2F37EECE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.6b.4:*:*:*:*:*:*:*","matchCriteriaId":"AA439B9D-928C-44BE-BCF5-5D1503979605"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.6b.5:*:*:*:*:*:*:*","matchCriteriaId":"9776D60D-91F2-4562-AE83-DD695D62016F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3.6b.6:*:*:*:*:*:*:*","matchCriteriaId":"AF05F122-E643-4648-B464-F2A542A59293"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3a-vhost.10:*:*:*:*:*:*:*","matchCriteriaId":"5069326F-3216-44B5-B2F6-4DCEA06959AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3b.3:*:*:*:*:*:*:*","matchCriteriaId":"50B681F5-94E5-4185-9F6D-AD0762B1A690"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.3b.4:*:*:*:*:*:*:*","matchCriteriaId":"BD8E341C-F4A5-415B-B7C2-81AF7FB0A986"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:3.4:*:*:*:*:*:*:*","matchCriteriaId":"F961F141-5B14-4AB2-BEAE-5F0341DFCBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F2E8161D-DA40-43BB-A2A2-931D2734ABA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a1:*:*:*:*:*:*:*","matchCriteriaId":"EA40B80D-DBAC-49C7-8AB5-918CD2DB0C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a3:*:*:*:*:*:*:*","matchCriteriaId":"C621BCEE-887A-4B1B-A048-D3636B9EFFD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a4:*:*:*:*:*:*:*","matchCriteriaId":"947C74D5-BDD5-4529-AE6A-522CD8903BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a5:*:*:*:*:*:*:*","matchCriteriaId":"70FDCE81-C624-425C-B678-935416D5D183"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a6:*:*:*:*:*:*:*","matchCriteriaId":"509E103D-7D66-4C71-883F-87BFB9134947"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a7:*:*:*:*:*:*:*","matchCriteriaId":"A46EB3D7-6926-486A-B731-27887F58CF93"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a8:*:*:*:*:*:*:*","matchCriteriaId":"52551262-2531-430C-A2B9-51F42FCA8FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.a9:*:*:*:*:*:*:*","matchCriteriaId":"18762458-1469-45F0-B9F2-701602A76C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.b1:*:*:*:*:*:*:*","matchCriteriaId":"BD593FAE-71B9-4C04-B183-2A3083FDA276"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.b2:*:*:*:*:*:*:*","matchCriteriaId":"2F6494CE-0E9D-4B56-A09F-C3080B6F6974"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0.b3:*:*:*:*:*:*:*","matchCriteriaId":"65583ADB-CB47-4E8B-83C1-5AC24A0A5076"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6C16EFE-0F19-4082-8A0A-B8EAD35C2D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.2b.1:*:*:*:*:*:*:*","matchCriteriaId":"2FB797E2-74B9-4EDE-A61A-BAEEF7104660"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.2b.3:*:*:*:*:*:*:*","matchCriteriaId":"BC0B8BCB-0CA5-48AB-AEDE-DFA56E267B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.0:*:*:*:*:*:*:*","matchCriteriaId":"36476C74-E8EC-46B1-A044-1D4EB939795C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"2C566DEF-E3C0-4FB5-BFB6-D243DAA84DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.0a.1:*:*:*:*:*:*:*","matchCriteriaId":"511F87A0-B85D-479E-9BD9-3A301F7E0F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.0b:*:*:*:*:*:*:*","matchCriteriaId":"691C2460-35EF-4E25-A75E-0DBAF0C47B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.0b.1:*:*:*:*:*:*:*","matchCriteriaId":"8B952E38-C0CA-4411-952B-40D53F5E377B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A6997C75-36E1-41BE-BF29-1A2929917995"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB6A0762-9D17-4591-9C35-0FE241B0E11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4C62FDF7-898B-4492-9640-40939436CA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.2b:*:*:*:*:*:*:*","matchCriteriaId":"9049087A-4A1C-4538-AA88-F3AFA0134B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.2b2:*:*:*:*:*:*:*","matchCriteriaId":"9ADAB39A-CEF6-427F-AFF3-7D1A22B6B9A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3:*:*:*:*:*:*:*","matchCriteriaId":"5947A7FF-4397-4CEB-ABF6-0543FACAC891"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"24FEA9D2-D8DB-45ED-B1EA-810439C110E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3a.8:*:*:*:*:*:*:*","matchCriteriaId":"3235F808-1AB4-484E-AD27-7A7D3419B664"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3a.9:*:*:*:*:*:*:*","matchCriteriaId":"7DCB5592-4C54-466C-945A-393CF8F7C058"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3a.10:*:*:*:*:*:*:*","matchCriteriaId":"26B4AAE7-3B2A-4977-AA9E-8D7201E0154F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3b.1:*:*:*:*:*:*:*","matchCriteriaId":"42B7F70E-95E8-4604-A53A-514AC110E604"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3b.3:*:*:*:*:*:*:*","matchCriteriaId":"43536723-E89C-4BC6-AD3E-88B614A53D15"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3b.4:*:*:*:*:*:*:*","matchCriteriaId":"F7A2F899-15C0-4260-979F-6989056F3A03"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3b.5:*:*:*:*:*:*:*","matchCriteriaId":"01A3B273-D793-4F97-B1C1-96DE8B7F6E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.4a.2:*:*:*:*:*:*:*","matchCriteriaId":"C1B9C45A-21C1-4CA6-B65D-730D35070DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.4a.4:*:*:*:*:*:*:*","matchCriteriaId":"10022D33-92E5-4F27-A98A-8EE68AF39E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.4b.1:*:*:*:*:*:*:*","matchCriteriaId":"5A874DDD-ECC0-478C-8029-198B1109215B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30910","source":"cve@mitre.org"},{"url":"http://sourcesup.cru.fr/tracker/?func=detail&group_id=23&aid=3702&atid=167","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1600","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:133","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28539","source":"cve@mitre.org"},{"url":"http://www.sympa.org/distribution/latest-stable/NEWS","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1080/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41561","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourcesup.cru.fr/tracker/?func=detail&group_id=23&aid=3702&atid=167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sympa.org/distribution/latest-stable/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1080/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1649","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information may be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28542","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en staticpages/easypublish/index.php de EasyNews 4.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro de lectura (read) en una acción edp_pupublish."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easynews:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"E6AEB722-0BA1-463E-831E-AC65DB86AF80"}]}]}],"references":[{"url":"http://secunia.com/advisories/29624","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3793","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490338/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28542","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41593","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490338/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1650","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28542","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en dynamicpages/index.php de EasyNews 4.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro read en una acción edp_Help_Internal_News."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easynews:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"E6AEB722-0BA1-463E-831E-AC65DB86AF80"}]}]}],"references":[{"url":"http://secunia.com/advisories/29624","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3793","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490338/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28542","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41590","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490338/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1651","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://www.securityfocus.com/bid/28542","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/login.php de EasyNews 4.0, permite a atacantes remotos añadir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easynews:4.0tr:*:*:*:*:*:*:*","matchCriteriaId":"E6AEB722-0BA1-463E-831E-AC65DB86AF80"}]}]}],"references":[{"url":"http://secunia.com/advisories/29624","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3793","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490338/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28542","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41589","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490338/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1652","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función _serve_request_multiple en lib/Perlbal/ClientHTTPBase.pm de Perlbal antes de 1.70, cuando está habilitado concat get, permite a atacantes remotos leer archivos de su elección en un directorio padre mediante una secuencia de salto de directorio en un parámetro no especificado. NOTA: alguno de estos detalles se ha obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perlbal:perlbal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.60","matchCriteriaId":"673A52DA-3961-4A9C-8C9F-FF07BC6D170A"}]}]}],"references":[{"url":"http://search.cpan.org/src/BRADFITZ/Perlbal-1.70/CHANGES","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1045/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41540","source":"cve@mitre.org"},{"url":"http://search.cpan.org/src/BRADFITZ/Perlbal-1.70/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1045/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1653","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Sava's Link Manager 2.0, permite a atacantes remotos añadir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro q. NOTA: se desconoce el origen de esta información; los detalles son obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savas_place:savas_link_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCAA36E4-AA2F-489A-B9D7-E5FAA85EFE3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28537","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41595","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1654","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server."},{"lang":"es","value":"Error en la interacción entre Adobe Flash y múltiples servicios Universal Plug and Play (UPnP), permite a atacantes remotos realizar ataques del tipo falsificación de petición en sitios cruzados (CSRF) utilizando la función de Flash navigateToURL para enviar un mensaje SOAP a un punto de control UPnP, como se ha demostrado cambiando el servidor DNS primario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","matchCriteriaId":"F901FB44-DC26-4284-B160-EE4A4F8F9DF1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Jan/0182.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Jan/0204.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29865","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30507","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/hacking-the-interwebs/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/347812","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28696","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019807","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41718","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11435","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2008/Jan/0182.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Jan/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/hacking-the-interwebs/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/347812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1655","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Flash Player 9.0.115.0 y versiones anteriores, y 8.0.39.0 y versiones anteriores, hace más fácil a atacantes remotos llevar a cabo ataques DNS a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.115.0","matchCriteriaId":"5E284324-E67D-4C9A-9144-D08908BBD299"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29763","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29865","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30507","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44283","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28697","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019808","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41807","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10724","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-100A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1656","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725."},{"lang":"es","value":"Adobe ColdFusion 8 and 8.0.1 no implementa adecuadamente el nivel de acceso público para los métodos CFC, lo cual permite a atacantes remotos invocar esos métodos a través de Flex 2 remotos, una vulnerabilidad distinta a CVE-2006-4725."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*","matchCriteriaId":"810E1B9C-E32F-4788-8705-67F855DC9EE6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29748","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019806","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/44280","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28698","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1157","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/44280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1657","sourceIdentifier":"cve@mitre.org","published":"2008-04-02T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file."},{"lang":"es","value":"OpenSSH versión 4.4 anterior a 4.9, permite a los usuarios autenticados remotos omitir la directiva ForceCommand de sshd_config mediante la modificación del archivo de sesión .ssh/rc."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the versions of OpenSSH as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-04-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2DD362E-9EA9-4E88-9A94-D7B471EB1FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.4p1:*:*:*:*:*:*:*","matchCriteriaId":"E3094069-AC2E-43BD-8094-D48E2526DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9B72CFB3-39C7-469C-AA59-69F5B8993BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.6:*:*:*:*:*:*:*","matchCriteriaId":"2A7154C4-8325-4495-92B1-B7897CD7303E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.7:*:*:*:*:*:*:*","matchCriteriaId":"99BF4471-763B-485A-ABD5-C68AD0A14058"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.8:*:*:*:*:*:*:*","matchCriteriaId":"40B1B209-53B8-48DC-AFFC-BD69D5978A0B"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29683","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29939","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0139","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:098","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata43.html#001_openssh","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openssh.com/txt/release-4.9","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490488/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28531","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019733","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-649-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1035/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1624/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41549","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2419","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata43.html#001_openssh","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openssh.com/txt/release-4.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490488/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-649-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1035/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1624/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1658","sourceIdentifier":"security@ubuntu.com","published":"2008-04-11T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in a password."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en el grant helper (polkit-grant-helper.c) en el PolicyKit 0.7 y anteriores permite a atacantes remotos provocar denegación de servicio (caída) y  allows attackers to cause a denial of service (crash) posiblemente ejecutar código de su elección mediante cademas de formato en una contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:policykit:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"AF94BD0F-267D-423F-8CD6-A1FA85054002"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:policykit:0.6:*:*:*:*:*:*:*","matchCriteriaId":"DD23F933-B115-4977-A69F-B6A3CC54B40D"}]}]}],"references":[{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=15295","source":"security@ubuntu.com"},{"url":"http://gitweb.freedesktop.org/?p=PolicyKit.git%3Ba=commitdiff%3Bh=5bc86a14cc0e356bcf8b5f861674f842869b1be7","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29755","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:087","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/28702","source":"security@ubuntu.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1254","source":"security@ubuntu.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/policykit/+bug/205037","source":"security@ubuntu.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41877","source":"security@ubuntu.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00176.html","source":"security@ubuntu.com"},{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=15295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gitweb.freedesktop.org/?p=PolicyKit.git%3Ba=commitdiff%3Bh=5bc86a14cc0e356bcf8b5f861674f842869b1be7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/policykit/+bug/205037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00176.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1659","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP LDAP-UX vB.04.10 through vB.04.15 allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar de HP LDAP-UX versiones de la vB.04.10 a la vB.04.15, permite a usuarios locales obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux:b.04.10:*:*:*:*:*:*:*","matchCriteriaId":"4A956EB4-697B-4C3B-97CA-9F7EFAB71730"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux:b.04.11:*:*:*:*:*:*:*","matchCriteriaId":"90111ED0-FCCC-4305-A5DA-3EC1C5F056A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux:b.04.12:*:*:*:*:*:*:*","matchCriteriaId":"0E497770-91CB-45F1-8B9B-7899E2978B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux:b.04.13:*:*:*:*:*:*:*","matchCriteriaId":"49F8272F-5C73-460E-A16E-244830B72BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux:b.04.14:*:*:*:*:*:*:*","matchCriteriaId":"D1ADAD46-055C-412A-986C-0FC4CA935545"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux:b.04.15:*:*:*:*:*:*:*","matchCriteriaId":"4437AFCD-44BF-4F15-ACCE-4375E839DA1F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01447010","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01447010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30132","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29078","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019981","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1450/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42265","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6037","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01447010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01447010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1450/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1660","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en useradd de HP-UX B.11.11, B.11.23 y B.11.31, permite a usuarios locales acceder a archivos arbitrariamente a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121130252706976&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121130252706976&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30308","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020045","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29286","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1570","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42523","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5558","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121130252706976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121130252706976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1661","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T19:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en DoubleTake.exe en HP StorageWorks Storage Mirroring (SWSM) anterior a v4.5 SP2, permite a atacantes remotos ejecutar código de su elección a través de peticiones de autenticación codificadas manipuladas."}],"vendorComments":[{"organization":"Double-Take","comment":"This issue was fixed in version 5.1 which was released July 11, 2008","lastModified":"2009-05-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:4.5:sp1:*:*:*:*:*:*","matchCriteriaId":"779DE404-AC26-4200-A414-6C8F291295AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121250518326713&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121250518326713&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020157","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1723","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-034/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42810","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121250518326713&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121250518326713&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-034/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1662","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an \"empty systems list.\""},{"lang":"es","value":"Vulnerabilidad no especificada en HP System Administration Manager (SAM) sobre HP-UX B.11.11  y B.11.23, cuando se usa para configurar NFS. Puede permitir a atacantes remotos leer o modificar archivos de su elección, relacionados con una \"lista de sistemas vacía.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_administration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"773C91CF-D139-4E42-8B47-9084B2999324"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01367453","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01367453","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020580","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30449","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44119","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5814","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01367453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01367453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1663","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en HP System Management Homepage (SMH) 2.1.10 y 2.1.11 en Linux y Windows que permite a los atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"3162C720-A042-48D8-A598-5CC9845C5715"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"ABEEE1E4-1883-411E-A4BA-985041880439"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121492633526894&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121492633526894&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30912","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3979","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30029","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020406","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1990/references","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121492633526894&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121492633526894&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1990/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1664","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en libc de HP HP-UX B.11.23 y B.11.31 permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121805712507842&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121805712507842&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020637","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30581","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44247","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5855","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121805712507842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121805712507842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1665","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad múltiple no especificada en HP HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, y 2.30 que permite a los atacante remotos ejecutar código arbitrario a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_bidirectional_ldap_connector:2.20:*:*:*:*:*:*:*","matchCriteriaId":"4DA66766-D540-470E-849D-E4D7C576B837"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_bidirectional_ldap_connector:2.20.001:*:*:*:*:*:*:*","matchCriteriaId":"6225C495-B4D1-46CC-87A5-4C7C982E88D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_bidirectional_ldap_connector:2.20.002:*:*:*:*:*:*:*","matchCriteriaId":"D47C394B-6890-4C50-B0DB-8EE6D040C41C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_bidirectional_ldap_connector:2.30:*:*:*:*:*:*:*","matchCriteriaId":"4B41CB28-D432-4D3C-927F-016AF78BF30B"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01502023","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01502023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31148","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30250","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020512","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2119/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43847","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01502023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01502023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2119/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1666","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact and attack vectors, possibly related to the July 2008 Oracle Critical Patch Update."},{"lang":"es","value":"Vulnerabilidad no especificada en HP Oracle para OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, y 10gR2 con impacto desconocido y vectores de ataque, posiblemente relacionados con la actualización de parche Oracle Critical en Julio de 2008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oracle_for_openview:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E27E0491-0D88-4632-973C-2B45BF8E1978"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oracle_for_openview:9.1.01:*:*:*:*:*:*:*","matchCriteriaId":"B0D7A2B2-9145-4A75-B51E-4B4AAF4F47B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oracle_for_openview:9.2:*:*:*:*:*:*:*","matchCriteriaId":"D4D3832C-0DB7-460F-A427-31E70DBEE5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oracle_for_openview:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"635C3ABF-AAD7-4B21-9C37-AABE339FBA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oracle_for_openview:10g:*:*:*:*:*:*:*","matchCriteriaId":"05538F74-A1B9-4855-B8A5-2E4C85686C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oracle_for_openview:10g:r2:*:*:*:*:*:*","matchCriteriaId":"F9759A4C-45DF-4158-959D-893D6A43DFA1"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1667","sourceIdentifier":"cve@mitre.org","published":"2008-07-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Vendor website was under construction during the scoring of this vulnerability.  CPE information is not complete due to limited knowledge of Probe Builder version numbers.","cveTags":[],"descriptions":[{"lang":"en","value":"The Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe Builder 2.2 before A.02.20.901, as used in HP OpenView Internet Services (OVIS) on Windows, allows remote attackers to kill arbitrary processes via a process ID number in an unspecified opcode."},{"lang":"es","value":"The Probe Builder Service (alias PBOVISServer.exe) en European Performance Systems (EPS) Probe Builder 2.2 con versiones anteriores a A.02.20.901l, usado en HP OpenView Internet Services (OVIS) para Windows, permite a los atacantes remotos terminar procesos arbitrariamente a través del número de proceso ID con un opcode no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eps:probe_builder:2.2:*:*:*:*:*:*:*","matchCriteriaId":"55FE03DD-7C20-4205-A336-876A5133DCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_internet_services:*:*:*:*:*:*:*:*","matchCriteriaId":"461845C0-EF7F-441A-9B73-8C6F8E05D29D"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=728","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121726629109585&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121726629109585&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31278","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31282","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4054","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30403","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020568","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2227/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2228/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44041","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121726629109585&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121726629109585&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2227/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2228/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1668","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information."},{"lang":"es","value":"El archivo ftpd.c en (1) wu-ftpd versiones 2.4.2 y (2) ftpd en HP-UX de HP versión B.11.11, asigna uid 0 al cliente FTP en ciertas configuraciones erróneas del sistema operativo en las que la autenticación PAM puede tener éxito aunque no hay ninguna entrada de passwd disponible para un usuario, lo que permite a los atacantes remotos alcanzar privilegios, como es demostrado por un intento de inicio de sesión para una cuenta LDAP cuando nsswitch.conf no especifica LDAP para la información de passwd."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This flaw does not affect teh version of wu-ftpd as shipped in Red Hat Enterprise Linux 2.1.","lastModified":"2008-10-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30666","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020682","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44414","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5971","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1669","sourceIdentifier":"secalert@redhat.com","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain \"re-ordered access to the descriptor table.\""},{"lang":"es","value":"El kernel de Linux en versiones posteriores a la 2.6.25.2, no aplica determinados mecanismos de protección para la funcionalidad fcntl, la cual permite a usuarios locales (1) ejecutar código en paralelo o (2) explotar una condición de carrera (race condition) para obtener un “acceso re-ordenado a la tabla descriptor”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59393187-1D1E-45CD-BE0E-385F978E4834"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"D0CCDF6B-0365-4553-B161-3F6D68A58F72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*","matchCriteriaId":"A9B2BB71-0489-40F6-9CB6-A95B96E92106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*","matchCriteriaId":"842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*","matchCriteriaId":"05F0391C-D4CC-4652-A24C-DC47F4C3DC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*","matchCriteriaId":"56340FF9-EE77-4EB3-9720-240FAAEF39F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*","matchCriteriaId":"79EB0E94-6AE8-4703-96BD-B927E0F2893F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*","matchCriteriaId":"8A1F1242-0F07-4D81-9175-3BA5B2C7B564"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*","matchCriteriaId":"3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1CF4EC75-06A2-4BD4-A39A-183F00C46E11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*","matchCriteriaId":"DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*","matchCriteriaId":"A6501752-2595-4412-9140-C78EB9FD41CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*","matchCriteriaId":"0D78F881-DB3A-423A-8DAD-314645B2B3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*","matchCriteriaId":"D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*","matchCriteriaId":"70D1E088-5A9B-4CBF-A4FF-969201942CCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC106BDA-2EA4-41A2-AA01-6352A5C255B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*","matchCriteriaId":"FB515243-7519-4CA4-9267-D9A6798CBC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*","matchCriteriaId":"B672E1B6-E8E9-473F-853F-906EA56D712E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*","matchCriteriaId":"0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*","matchCriteriaId":"9F727CD3-D3C2-4648-9EC5-092DF3F73B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*","matchCriteriaId":"D1765065-ABE5-478C-9ACC-EFFA8E4A7043"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*","matchCriteriaId":"D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*","matchCriteriaId":"95DD4647-564E-4067-A945-F52232C0A33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*","matchCriteriaId":"6E20AD05-586B-4493-9793-3FF8028CF887"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*","matchCriteriaId":"4F76C298-81DC-43E4-8FC9-DC005A2116EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*","matchCriteriaId":"0AB349B2-3F78-4197-882B-90ADB3BF645A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*","matchCriteriaId":"8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*","matchCriteriaId":"F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*","matchCriteriaId":"31523E67-5E4F-43F7-9410-20CB3F287DAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*","matchCriteriaId":"9B627DE3-2702-4EB2-9733-253D315FB594"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*","matchCriteriaId":"C5B76C21-70C8-4911-A24B-270F876EF7C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*","matchCriteriaId":"A89DC9CD-C06F-4B9B-B376-900E65016296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*","matchCriteriaId":"15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*","matchCriteriaId":"8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*","matchCriteriaId":"707ECC75-65B6-4B02-BE85-A4804549A2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*","matchCriteriaId":"E55F2549-F813-4BD6-8933-6788D898ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*","matchCriteriaId":"3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30077","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30101","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30108","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30110","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30112","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30116","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30164","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30252","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30260","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30276","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30515","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30769","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30982","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31246","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1575","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:104","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:105","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/491740/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29076","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019974","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1451/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1452/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42242","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2518","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/614-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491740/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-618-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1451/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1452/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2222/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/614-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1670","sourceIdentifier":"secalert@redhat.com","published":"2008-04-28T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el cargador de imagen PNG progresivo (decoders/pngloader.cpp) en KHTML de KDE 4.0.x hasta 4.0.3; permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección mediante una imagen manipulada."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of KDE as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"82BE38B3-A061-49CD-8D37-488C8A45E720"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AA64B65F-541C-424E-9935-D02458056F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5A4E8ADF-5A73-4B91-850F-D14DEE6221FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8F36E9E5-9DA7-4A34-B600-FC4B4B9014A6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29980","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20080426-1.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28937","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019929","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1371/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42038","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20080426-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1371/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1671","sourceIdentifier":"secalert@redhat.com","published":"2008-04-28T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via \"user-influenceable input\" (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes."},{"lang":"es","value":"start_kdeinit en KDE de 3.5.5 a 3.5.9, cuando está instalado setuid root, permite a usuarios locales provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante \"una entrada influenciable por el usuario\" (probablemente argumentos en línea de comandos) que provocan que start_kdeinit envíe señales SIGUSR1 a otros procesos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of KDE as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"65CCBEC7-EF7F-43DB-892C-E9C93D3B3353"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D2C3D851-540B-4F4C-BCC4-47F4C099D212"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"32DF6E2C-221F-4F99-9D5B-C3E48AF7A9F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1E06B8C1-F186-4BC5-9C1D-DF5BC40FEDB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"F5F38CD2-8531-403D-B522-389DD4F8C5E7"}]}]}],"references":[{"url":"ftp://ftp.kde.org/pub/kde/security_patches/post-kde-3.5.5-kinit.diff","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29951","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29977","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30113","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-30.xml","source":"secalert@redhat.com"},{"url":"http://www.kde.org/info/security/advisory-20080426-2.txt","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:097","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28938","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019924","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-608-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1370/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42039","source":"secalert@redhat.com"},{"url":"ftp://ftp.kde.org/pub/kde/security_patches/post-kde-3.5.5-kinit.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kde.org/info/security/advisory-20080426-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-608-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1370/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1672","sourceIdentifier":"secalert@redhat.com","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses \"particular cipher suites,\" which triggers a NULL pointer dereference."},{"lang":"es","value":"OpenSSL 0.9.8f y 0.9.8g permite a atacantes remotos provocar una denegación de servicio (caída) mediante una negociación TLS que omite el Server Key Excahnge y usa \"particular cipher suites.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30405","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30825","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30852","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30868","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31288","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/520586","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492932/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29405","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020122","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42667","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/520586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1673","sourceIdentifier":"secalert@redhat.com","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding."},{"lang":"es","value":"La implementación de asn1 en (a) el núcleo Linux 2.4 versiones anteriores a 2.4.36.6 y 2.6 versiones anteriores a 2.6.25.5, tal como lo utilizado en los módulos cifs y ip_nat_snmp_basic; y (b) el paquete gxsnmp; no valida apropiadamente la longitud de valores durante la decodificación de datos ASN.1 BER, lo cual permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de (1) una longitud superior a la de trabajo del búfer, lo cual puede llevar a un desbordamiento no especificado; (2) una longitud oid a cero, lo cual puede llevar a un error off-by-one; o (3) una longitud indefinida de codificación primitiva.\r\n\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2, 3, 4, 5 or Red Hat Enterprise MRG.\n\nThe but existed on Red Hat Enterprise Linux 3, 4, and 5. However, this is only a security issue if the SLOB or SLUB memory allocators were used (introduced in Linux kernel versions 2.6.16 and 2.6.22, respectively). All Red Hat Enterprise Linux and Red Hat Enterprise MRG kernels use the SLAB memory allocator, which in this case, cannot be exploited to allow arbitrary code execution. As a preventive measure, the underlying bug was addressed in Red Hat Enterprise Linux 3, 4, and 5, via the advisories RHSA-2008:0973, RHSA-2008:0508, and RHSA-2008:0519, respectively.","lastModified":"2009-09-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*","matchCriteriaId":"EFB8DE9F-2130-49E9-85EE-6793ED9FBEED"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*","matchCriteriaId":"4F83D55B-3106-4907-A75F-A7EBF0EC6974"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*","matchCriteriaId":"0AFD594E-48BA-4281-8DEE-306E3008ABB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*","matchCriteriaId":"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*","matchCriteriaId":"637A08D0-E382-4DE8-AEEC-6A53A72849B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*","matchCriteriaId":"550DFE6E-DCE6-4649-8746-522996021DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*","matchCriteriaId":"2D3D2AA2-05B2-46E3-96EE-27EB29795E04"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*","matchCriteriaId":"E17BB496-749A-40C8-BAA9-6CFBBE308065"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*","matchCriteriaId":"AF51F68C-60A5-451F-9150-6DABBAE1D41E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*","matchCriteriaId":"0A3BF9D6-BE14-4590-91B8-501DC92261BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"0C30F255-1297-46EA-9FBC-05564792FF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*","matchCriteriaId":"5A6E8B0E-DEDD-43D1-9841-4BAF5A805967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*","matchCriteriaId":"934CBC22-864C-468F-B267-3CDE4449DA9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*","matchCriteriaId":"2AC432E3-7214-4B61-A666-2DAF5CCAEC52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*","matchCriteriaId":"7682650A-8332-484D-874F-2B67246880B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*","matchCriteriaId":"6DFF499A-6602-4BD3-90B5-E6C4AC888812"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*","matchCriteriaId":"0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35:*:*:*:*:*:*:*","matchCriteriaId":"9E460A86-FD22-4023-A0D7-0D2F43131635"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30000","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30580","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30644","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30658","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30982","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31107","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31836","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32103","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32104","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1592","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:113","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493300/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29589","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020210","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1770","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443962","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42921","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493300/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1675","sourceIdentifier":"secalert@redhat.com","published":"2008-05-02T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory."},{"lang":"es","value":"La función bdx_ioctl_priv en el controlador tehuti (archivo tehuti.c) en el Kernel de Linux versiones 2.6.x anteriores a 2.6.25.1, no comprueba apropiadamente cierta información relacionada al tamaño del registro, que presenta un impacto no especificado y vectores de ataque locales, probablemente relacionados con la lectura y escritura de la memoria del Kernel."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=120949204519706&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120949204619718&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120949582428998&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30017","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30044","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30260","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30515","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0157","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:109","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/491566/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/491732/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29014","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019960","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1406/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42132","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2501","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/614-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=linux-kernel&m=120949204519706&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120949204619718&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-kernel&m=120949582428998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491566/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491732/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1406/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/614-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1676","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended restrictions and conduct man-in-the-middle attacks by submitting a certificate signing request (CSR) and using the resulting certificate."},{"lang":"es","value":"Red Hat PKI Common Framework (rhpki-common) de Red Hat Certificate System (también conocido como Certificate Server o RHCS) 7.1 hasta 7.3, y Netscape Certificate Management System 6.x; no reconocen las restricciones de perfil de la Autoridad Certificadora en Extensions, esto puede permitir a atacantes remotos evitar las restricciones pretendidas y realizar ataques de hombre-en-medio (man-in-the-middle) al enviar una Solicitud de Firma de Certificado (certificate signing request (CSR)) y utilizar el certificado resultante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:redhat:certificate_system:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A94B7103-11B7-4B1E-AE02-86210F9CCCAA"},{"vulnerable":false,"criteria":"cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*","matchCriteriaId":"27FE079E-FB15-443C-BE2E-1D4C940BB8C0"},{"vulnerable":false,"criteria":"cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*","matchCriteriaId":"E2654E6A-190C-4D5C-ABC0-89011DD8E293"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"946E7D94-5FD5-40C2-B67A-14C0D13CDDAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_management_system:6.0:*:*:*:*:*:*:*","matchCriteriaId":"8D852DF7-F08A-4EAC-B7BB-D3384CA0B9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_management_system:6.01:*:*:*:*:*:*:*","matchCriteriaId":"5DD96E83-2151-4AFE-B3B3-E9CCF69D4B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_management_system:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A3F95B08-2AC6-4452-9BA3-26C80D3FABE7"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2008-0500.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0577.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/30929","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30062","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020427","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=445227","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43573","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0500.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=445227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1677","sourceIdentifier":"secalert@redhat.com","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression."},{"lang":"es","value":"Desbordamiento de búfer en el controlador de expresiones regulares de Red Hat Directory Server 8.0 y 7.1 anterior a SP6 permite a atacantes remotos provocar una denegación de servicio (caída de slapd) y posiblemente ejecutar código de su elección mediante una consulta LDAP manipulada que dispara el desbordamiento durante la traducción a una expresión regular."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2060B92C-72E4-4FAF-9CB6-C6142F6DDE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*","matchCriteriaId":"7A7C6A16-F928-4682-BCCA-D004FB4781B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*","matchCriteriaId":"374634C4-D913-46B3-AB98-1E3573814E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*","matchCriteriaId":"B58F8C3A-C0F5-400A-823F-F92F71B385EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1F47246B-7393-4F61-88F5-2B8A2211C46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5E190C97-A279-4EEE-B9C4-1EA888920F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:fedora_directory_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"673085C4-1098-45FB-9A8B-82ABC0771800"}]}]}],"references":[{"url":"http://secunia.com/advisories/30181","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30185","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0268.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0269.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29126","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020001","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=444712","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42332","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0268.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0269.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=444712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1678","sourceIdentifier":"secalert@redhat.com","published":"2008-07-10T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm."},{"lang":"es","value":"Fuga de memoria en la Función zlib_stateful_init en crypto/comp/c_zlib.c en libssl en OpenSSL v0.9.8f a la 0.9.8h, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de múltiples llamadas, como se ha demostrado mediante una negociación cliente SSL inicial al servidor HTTP Apache (mod_ssl) que especifica un algoritmo de compresión."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mod_ssl or httpd as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5 prior to 5.3.\n\nIn Red Hat Enterprise Linux 5.3, OpenSSL packages were rebased to upstream version 0.9.8e via RHBA-2009:0181 (https://rhn.redhat.com/errata/RHBA-2009-0181.html), introducing this problem in Red Hat Enterprise Linux 5.  Updated httpd packages were released via: https://rhn.redhat.com/errata/RHSA-2009-1075.html\n\n","lastModified":"2009-05-28T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222643","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=openssl-dev&m=121060672602371&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31026","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34219","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35264","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/44183","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3981","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=654119","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1075.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31692","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"https://bugs.edge.launchpad.net/bugs/186339","source":"secalert@redhat.com"},{"url":"https://bugs.edge.launchpad.net/bugs/224945","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447268","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43948","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=44975","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssl-dev&m=121060672602371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/44183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=654119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.edge.launchpad.net/bugs/186339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.edge.launchpad.net/bugs/224945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=44975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1679","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows.  NOTE: this issue is due to an incomplete fix for CVE-2007-4965."},{"lang":"es","value":"Múltiples desbordamientos de entero en imageop.c de Python versiones anteriores a 2.5.3 permiten a atacantes dependientes de contexto provocar una  denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de imágenes manipuladas que disparan desbordamientos de búfer basado en montículo.\r\nNOTA: esta cuestión es debida a una corrección incompleta para CVE-2007-4965."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1679\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-04-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.3","matchCriteriaId":"34F10529-2CBD-4C4E-93EB-CCFFAA669647"}]}]}],"references":[{"url":"http://bugs.python.org/issue1179","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://bugs.python.org/msg64682","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29889","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29955","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30872","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31255","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38675","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1551","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1620","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41958","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2424","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.python.org/issue1179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://bugs.python.org/msg64682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-1680","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T00:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc."},{"lang":"es","value":"PHP-Nuke Platinum 7.6.b.5 permite a atacantes remotos obtener información de la configuración a través de peticiones directas a maintenance/index.php, lo cual revela configuraciones como magic_quotes_gpc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:future_nuke:php-nuke_platinum:7.6.b.5:*:*:*:*:*:*:*","matchCriteriaId":"BF32BA5E-DC5E-4B9E-BD5C-63BCDCB8EBBD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41745","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5295","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1681","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege."},{"lang":"es","value":"Vulnerabilidad sin especificar en IBM DB2 Content Manager, antes de 8.3 FP8, tiene un efecto y unos vectores de ataque desconocidos relacionados con los privilegios de AllowedTrustedLogin"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_content_manager:*:fix_pack_7:*:*:*:*:*:*","versionEndIncluding":"8.3","matchCriteriaId":"67ABA3F9-E060-4857-9E6C-3D90FA05C997"}]}]}],"references":[{"url":"http://publib.boulder.ibm.com/infocenter/cmgmt/v8r3m0/topic/com.ibm.cmgmtreadmefp.doc/aparlist.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IO07690","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011946&aid=1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28567","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1070/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41585","source":"cve@mitre.org"},{"url":"http://publib.boulder.ibm.com/infocenter/cmgmt/v8r3m0/topic/com.ibm.cmgmtreadmefp.doc/aparlist.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IO07690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011946&aid=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1070/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1682","sourceIdentifier":"cve@mitre.org","published":"2008-04-04T19:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivos PHP remotos en quiz/common/db_config.inc.php en el componente Online FlashQuiz (com_onlineflashquiz) 1.0.2 para Joomla!, permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro base_dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elearningforce:online_flashquiz:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A165CE05-2372-47BC-AC91-1B873063532C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41592","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1683","sourceIdentifier":"cve@mitre.org","published":"2008-04-06T23:44:00.000","lastModified":"2023-11-07T02:02:02.780","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0887.  Reason: This candidate is a duplicate of CVE-2008-0887.  Notes: All CVE users should reference CVE-2008-0887 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"references":[]}},{"cve":{"id":"CVE-2008-1684","sourceIdentifier":"cve@mitre.org","published":"2008-04-06T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file."},{"lang":"es","value":"inetd en Sun Solaris 10, cuando está habilitado la validación de depuración, permite a usuarios locales escribir en archivos de su elección a través de un ataque de enlaces simbólicos en el fichero temporal /var/tmp/inetd.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019781","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233284-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28584","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41626","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5369","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233284-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1685","sourceIdentifier":"cve@mitre.org","published":"2008-04-06T23:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer overflow attacks, and provide no diagnostic message about this removal. NOTE: the vendor has determined that this compiler behavior is correct according to section 6.5.6 of the C99 standard (aka ISO/IEC 9899:1999)"},{"lang":"es","value":"** DISPUTED ** gcc de 4.2.0 a 4.3.0 en GNU Compiler Collection, cuando casts no están utilizados, considera que la suma de un puntero y un entero es mayor o igual que el puntero, lo que podría llevar a la eliminación del código de comprobación de longitud que estaba previsto como un mecanismo de protección contra ataques de desbordamientos de enteros y desbordamiento de búfer, y no proporcionar un mensaje diagnóstico sobre esta eliminación. NOTA: el proveedor ha determinado que este comportamiento del compilador es correcto según la sección 6.5.6 de la norma C99 (también conocido como ISO/IEC 9899:1999)."}],"vendorComments":[{"organization":"Red Hat","comment":"The Red Hat Security Response Team is aware of this new gcc behavior and is currently working to determine what impact these changes will have on the source code processed by the compiler. These changes do not affect Red Hat Enterprise Linux 2, 3, 4, or 5.","lastModified":"2008-07-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B63A6449-FD4A-4D83-BDF5-1E4D2284045B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B981AA48-6E80-426D-AE27-1D6965AA20A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0A3B471-AF8D-47C4-8769-6A68CC034E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8BEF1123-45FD-4A12-ADD1-12D58D7E4DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A5AFF1AB-58E4-4DF4-8EBB-D127FF396340"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AAF40923-6C7A-484A-BE9E-8BFA5D072C94"}]}]}],"references":[{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/162289","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41686","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/162289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1686","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer."},{"lang":"es","value":"Una vulnerabilidad de índice de matriz en Speex versión 1.1.12 y anteriores, tal y como es usado en libfishsound versión 0.9.0 y anteriores, incluyendo Illiminable DirectShow Filters y Annodex Plugins para Firefox, xine-lib versiones anteriores a 1.1.12, y muchos otros productos, permite a los atacantes remotos ejecutar código arbitrario por medio de una estructura de encabezado que contiene un desplazamiento negativo, que se utiliza para desreferenciar un puntero de función."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11.1","matchCriteriaId":"4432BC00-44D6-4ED9-B642-1BF8C81B6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AEB839B0-408E-4D96-B576-D9300082B7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*","matchCriteriaId":"5FEDBE74-5040-4E61-A34A-2BC36A2A129F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.12","matchCriteriaId":"5C3B238B-BE7C-4912-A56A-95DE5051846E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"95BC5FA0-E710-42D4-8BF0-4D30BC44C833"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8789D167-6DF2-46B7-ABA2-717E141738BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B93DC9BF-7CA8-4729-9A3D-F1CB711E1D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F04629EA-2BE2-42D5-9AC7-DDC7AB1818FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3873FDB9-80A9-4968-B0DC-84201AE1C78C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A7339D59-8049-4172-BB68-134F9B50E896"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5D762BB7-7A35-4D2A-9EC7-A328197F1EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46825B5B-B8A2-4FEB-991D-F2AE174A8C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"0D3BC3CC-07AA-445F-8913-E1FABC60C2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9ACE9F82-E352-47C7-BA34-C97E4FB759FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4CFF577A-41DB-49B8-BA00-00650DA10DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9655A71E-C2E4-4003-BBA7-05BD29375621"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"3E545096-41AC-4DF0-92B4-747CC1F1FE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"08E27446-B68B-4213-9FD1-3C3A8941BA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A0B0BC2-C155-460B-A8CB-0CF0C04896BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:speex:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1BA06646-FCDF-427D-84B1-99D8C6889CC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.0","matchCriteriaId":"68C981F1-832E-46A5-99CB-ECC3B46D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.5.41:*:*:*:*:*:*:*","matchCriteriaId":"FE5D47C5-1171-4A95-82CC-DA965D893F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.5.42:*:*:*:*:*:*:*","matchCriteriaId":"585368E9-36BB-45F6-A427-AF8578AA9347"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"72C4DD65-8354-40DE-B05F-6742A67C8BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"55901750-2FB5-4C4E-A1C9-8204D16FEBC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"022A0430-895C-46EA-A0C6-BA7492443901"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9CCA2B56-BB40-40AD-97F8-3AFCD2A66C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"76C7D68C-FEA1-4DC6-9FC4-A32AF894472C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"B0B42ED6-243E-427D-86F3-46EEC0DF282D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph:libfishsound:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"30743A63-4AA4-4812-9026-04A8FC1308ED"}]}]}],"references":[{"url":"http://blog.kfish.org/2008/04/release-libfishsound-091.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.xiph.org/pipermail/speex-dev/2008-April/006636.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29672","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29835","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29845","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29866","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29878","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29898","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30104","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30119","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30337","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30717","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-17.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.460836","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=592185","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1584","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1585","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1586","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:092","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:093","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:094","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:124","source":"cve@mitre.org"},{"url":"http://www.metadecks.org/software/sweep/news.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-004.html","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-2.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0235.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491009/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28665","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019875","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-611-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-611-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-611-3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1187/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1228/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1268/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1269/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1300/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1301/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1302/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41684","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10026","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00244.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00287.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00357.html","source":"cve@mitre.org"},{"url":"http://blog.kfish.org/2008/04/release-libfishsound-091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.xiph.org/pipermail/speex-dev/2008-April/006636.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.460836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=592185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.metadecks.org/software/sweep/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0235.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491009/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-611-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-611-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-611-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1187/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1228/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1268/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1269/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1300/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1301/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1302/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00357.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1687","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename."},{"lang":"es","value":"Las funciones (1) maketemp y (2) mkstemp incluidas en GNU m4 versiones anteriores a 1.4.11 no citan sus salidas cuando un fichero es creado, lo cual podría permitir a atacantes dependientes de contexto disparar una expansión macro, llevando a cabo un uso no especificado de un nombre de fichero incorrecto."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  After careful analysis of this issue the Red Hat Security Response Team has determined that this bug has no security impact outside of expected m4 behavior.","lastModified":"2008-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.10","matchCriteriaId":"0516018C-BCCA-4F3F-8EE7-FB362EAEFB12"}]}]}],"references":[{"url":"http://secunia.com/advisories/29671","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29729","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/12","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28688","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1151/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1151/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1688","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option.  NOTE: it is not clear when this issue crosses privilege boundaries."},{"lang":"es","value":"Vulnerabilidad no especificada en GNU m4 versiones anteriores a 1.4.11 podría permitir a  atacantes dependientes de contexto ejecutar código se su elección, relacionado con el manejo no apropiado de nombres de ficheros específicados con la opción -F.\r\nNOTA: no está claro cuando esta cuestión cruza fronteras de privilegios.\r\n\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  After careful analysis of this issue the Red Hat Security Response Team has determined that this bug has no security impact outside of expected m4 behavior.","lastModified":"2008-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5157211A-80A7-4694-9D45-E1C4CA9DA2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2E10A3A6-8DC0-4BFD-8C4F-4B6B7C5EC03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"77C4D372-B593-4AF4-A2C1-A5F1657B28EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"964FCBD7-B697-4D9A-AD73-F5ED3631FBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4BE99BE1-1956-41DB-8E9C-684D3040CEAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"96348B9C-BB73-404D-8A68-0A96B793BC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"4F6DD41B-D8EF-4D1E-B939-9CB0D85D8217"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C62D0160-F302-43A4-A244-DFD92BC9FD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"886BBA7D-DE20-4A47-9896-E71BA25E9205"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:m4:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"3AF0E0A6-401D-4306-88EC-5FFD207C39BF"}]}]}],"references":[{"url":"http://osvdb.org/44272","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29671","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29729","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28688","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1151/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41704","source":"cve@mitre.org"},{"url":"http://osvdb.org/44272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/07/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1151/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1689","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Only version information is located here: http://www.seattlelab.com/Products/SLMailPro/Utilities.asp. Versions 3.x, 4.x, and 5.x are vulnerable, but specific version information is not available.","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de agotamiento de pila de WebContainer.exe 1.0.0.336 y versiones anteriores, en SLMail Pro 6.3.1.0 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una cabecera de una petición larga en una petición HTTP al puerto TCP 801. NOTA: algún detalle ha sido obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.1.0","matchCriteriaId":"B83A7AC1-E492-4449-8C06-F4CE960C6270"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:5.5:*:*:*:*:*:*:*","matchCriteriaId":"77FBD34A-2B93-4395-B0F2-7463468A32A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:6.1:*:*:*:*:*:*:*","matchCriteriaId":"84C16CA7-DCD1-4907-829A-AAAF0DF195EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:6.2:*:*:*:*:*:*:*","matchCriteriaId":"82DD3A64-12A7-41B1-A0E5-B352120BFDD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7AB1FC0-B963-4160-A872-C9E1497EBF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:6.3:*:*:*:*:*:*:*","matchCriteriaId":"2373EEB7-D1DA-4700-ACB2-1204B156DEC7"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/slmaildos-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/slmaildos.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28505","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1039/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41532","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/slmaildos-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/slmaildos.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1039/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1690","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"WebContainer.exe 1.0.0.336 y versiones anteriores, en SLMail Pro 6.3.1.0 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de demonio) o posiblemente ejecutar código de su elección a través de una URI larga en una petición HTTP al puerto TCP 801. NOTA: algún detalle ha sido obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.1.0","matchCriteriaId":"B83A7AC1-E492-4449-8C06-F4CE960C6270"}]}]}],"references":[{"url":"http://aluigi.org/poc/slmaildos.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28505","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1039/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41531","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/slmaildos.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1039/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1691","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T17:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (UDP service outage) via a large packet to UDP port 54.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad sin especificar en SLMail.exe de SLMail Pro 6.3.1.0 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (parada del servicio UDP) mediante un paquete largo al puerto UDP 54. NOTA: algún detalle ha sido obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.1.0","matchCriteriaId":"B83A7AC1-E492-4449-8C06-F4CE960C6270"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/slmaildos-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28505","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1039/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41533","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/slmaildos-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1039/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1692","sourceIdentifier":"cve@mitre.org","published":"2008-04-07T18:44:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine."},{"lang":"es","value":"Eterm versión 0.9.4 abre una ventana terminal en :0 si -display no se especifica y no se establece la variable de entorno DISPLAY, lo que podría permitir a los usuarios locales secuestrar conexiones X11. NOTA: escenarios de ataque realistas requieren que la víctima ingrese un comando en la máquina incorrecta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eterm:eterm:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"B6F31693-5ABD-4675-81D5-6BFF5AEBEFFD"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=473127","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-03.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:222","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28512","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=473127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1693","sourceIdentifier":"security@ubuntu.com","published":"2008-04-18T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object."},{"lang":"es","value":"La función CairoFont::create en CairoFontEngine.cc de Poppler, posiblemente anterior a 0.8.0, como se usa en Xpdf, Evince, ePDFview, KWord y otras aplicaciones, no maneja correctamente fuentes embebidas en archivos PDF, lo que permite a atacantes remotos ejecutar código de su elección a través de un objeto fuente manipulado, relacionado con referenciar un puntero de una función asociado con el tipo de este objeto fuente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.3","matchCriteriaId":"310194C7-8370-4EB6-B4CF-C8EE2A8E55DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29816","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29834","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29836","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29851","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29853","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29868","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29869","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29884","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/29885","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/30019","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/30033","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/30717","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/31035","source":"security@ubuntu.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-18.xml","source":"security@ubuntu.com"},{"url":"http://securitytracker.com/id?1019893","source":"security@ubuntu.com"},{"url":"http://www.debian.org/security/2008/dsa-1548","source":"security@ubuntu.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1606","source":"security@ubuntu.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:089","source":"security@ubuntu.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:173","source":"security@ubuntu.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:197","source":"security@ubuntu.com"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"security@ubuntu.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0238.html","source":"security@ubuntu.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0239.html","source":"security@ubuntu.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0240.html","source":"security@ubuntu.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0262.html","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/28830","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-603-1","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-603-2","source":"security@ubuntu.com"},{"url":"http://www.vupen.com/english/advisories/2008/1265/references","source":"security@ubuntu.com"},{"url":"http://www.vupen.com/english/advisories/2008/1266/references","source":"security@ubuntu.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41884","source":"security@ubuntu.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226","source":"security@ubuntu.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.html","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0238.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0239.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0262.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-603-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-603-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1265/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1266/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00522.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1694","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"vcdiff en Emacs 20.7 a 22.1.50, cuando es utilizado con SCCS, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque symlink en ficheros temporales."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1694\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-05-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.7:*:*:*:*:*:*:*","matchCriteriaId":"0AFE5D6E-1979-4CF2-ACE0-BB6F31F80434"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:21.1:*:*:*:*:*:*:*","matchCriteriaId":"05BDDB87-0AFF-4BDC-995A-94F221ED3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:21.2:*:*:*:*:*:*:*","matchCriteriaId":"F9ADBEE6-3B38-4284-B9F8-37F7FFEBDE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:21.3:*:*:*:*:*:*:*","matchCriteriaId":"EA95B19B-F35D-4644-9E75-5A138A960C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:21.4:*:*:*:*:*:*:*","matchCriteriaId":"FC7E9FE5-E87C-440B-A16E-327501BC8977"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:sccs:*:*:*:*:*:*:*:*","matchCriteriaId":"08A58299-6BEC-4A2D-ACFB-904B43851D39"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=216880","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29905","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30109","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:096","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28857","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019909","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1309/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1310/references","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=208483","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41906","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/607-1/","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=216880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1309/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1310/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=208483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/607-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1696","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the prefixdir parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en makepost.php de DaZPHPNews 0.1-1, cuando register_globals están habilitado y magic_quotes_gpc  está deshabilitado, permite a atacantes remotos incluir y ejecutar los ficheros locales de su elección a través de un .. (punto punto) en el parámetro prefixdir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dazphp:dazphpnews:0.1-1:*:*:*:*:*:*:*","matchCriteriaId":"35D52A91-7C5C-46A6-BA95-489238F9D570"}]}]}],"references":[{"url":"http://secunia.com/advisories/29653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28582","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41608","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5347","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1697","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en la biblioteca ovwparser.dll en HP OpenView Network Node Manager (OV NNM) versiones 7.53, 7.51 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un URI largo en una petición HTTP procesada por el archivo ovas.exe, como es demostrado por una determinada petición de topology/homeBaseView. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"7.53","matchCriteriaId":"165864E6-F9B8-4E67-8344-6C08EA9E342E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C89F2AB-45CF-4455-920F-396852C862E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121553626110871&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121553626110871&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/hp-nnm-ov.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28569","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019782","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1085/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41600","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5342","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121553626110871&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121553626110871&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/hp-nnm-ov.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1019782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1085/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1698","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gallery.php de Simple Gallery 2.2; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro album de index.php. NOTA: se desconoce el origen de esta información; los detalles son obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ventrian:simple_gallery:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FA00F84C-3B17-4D66-97B0-B9F07D8584F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28596","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1699","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in permalink.php in Desi Quintans Writer's Block CMS 3.8a allows remote attackers to execute arbitrary SQL commands via the PostID parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en permalink.php en Desi Quintans Writer's Block CMS 3.8a, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro  PostID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:desiquintans:writers_block_cms:3.8a:*:*:*:*:*:*:*","matchCriteriaId":"03A01D98-567D-4361-BDB6-1EF5F9BA4C90"}]}]}],"references":[{"url":"http://secunia.com/advisories/29652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3803","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28564","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41619","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1700","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive."},{"lang":"es","value":"El Web TransferCtrl Class 8,2,1,4 (iManFile.cab), usado en WorkSite Web 8.2 anteriores a SP1 SP2, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de una gran número de directivas SendNrlLink, abriéndose una ventana por cada directiva."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interwoven:worksite_web:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2","matchCriteriaId":"038053B6-DDA5-4514-A0D6-931A2C0FA6B2"}]}]}],"references":[{"url":"http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41757","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1701","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare 6.5 allows attackers to cause a denial of service (ABEND) via a crafted Macintosh iPrint client request."},{"lang":"es","value":"Novell NetWare 6.5 permite a atacantes remotos provocar una denegación de servicio (ABEND) mediante una petición de cliente Macintosh iPrint manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8BC92E-F848-4358-AA3C-89587F029303"}]}]}],"references":[{"url":"http://secunia.com/advisories/29587","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28561","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019750","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1074/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41588","source":"cve@mitre.org"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/667/3842033_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1074/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/667/3842033_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1702","sourceIdentifier":"cve@mitre.org","published":"2008-04-08T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obtain sensitive information via a full pathname in the file parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en dload.php en el plugin my_gallery 2.3 para e107, permite a atacantes remotos obtener información sensible a través de un nombre absoluto de ruta en el parámetro file(archivo). NOTA: algunos de estos detalles de esta información se obtuvieron de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:my_gallery:2.3:*:*:*:*:*:*:*","matchCriteriaId":"09554AA6-05BF-41FB-97F7-02E91A5A0BC7"}]}]}],"references":[{"url":"http://secunia.com/advisories/29493","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3801","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28440","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41433","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1703","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message."},{"lang":"es","value":"Múltiples desbordamientos de búfer en TIBCO Software Rendezvous anterior a 8.1.0., utilizado en múltiples productos TIBCO,permitena atacantes remotos ejecutar código de su elección mediante un mensaje manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:adapter_files_z_os:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.1","matchCriteriaId":"46E74B55-ED15-4EA1-8AAC-8BB98798A1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:hawk:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.0","matchCriteriaId":"7FB4C18E-D1AD-4064-949A-D00A2A4B41BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F085498D-67C1-43D2-AAA2-35BA8AF1998E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7E90A12B-BEB4-4F51-B4D2-BA0DB127CE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EBF898A2-46AA-4A79-8D85-2C34174AD44E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5B9388D9-CC97-487B-864C-F8FA9BFF7306"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"389EDDD9-4EFC-4B11-A3B9-C3BCD8D4DBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"9CCBA1D2-6FDF-4D6F-9316-9B6F3A9BD50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.4:*:*:*:*:*:*:*","matchCriteriaId":"F45470DC-9C5C-4CBE-8DFD-FE49008A0D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50CFE4BA-00B8-4334-9B67-0A4276F5FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.5:*:*:*:*:*:*:*","matchCriteriaId":"900BB34F-1533-4D53-904D-78E3D6EF3ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6:*:*:*:*:*:*:*","matchCriteriaId":"94FDFA30-E50A-4AD1-81F6-39E58DCCC515"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6D5769-8FE2-4923-94EE-92619D8D086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C65C714C-91B8-4665-B9BD-699BE318EDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*","versionEndIncluding":"8.10","matchCriteriaId":"17CFBB43-82E9-4E7F-938C-B11B6425D3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rendezvous_datasecurity:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.6","matchCriteriaId":"413BBA07-5D7E-4E2F-9D1D-E26E2511FE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rendezvous_tx:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04","matchCriteriaId":"0D0E28E2-852E-4872-BED1-C17BE83DC75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.4","matchCriteriaId":"F939E999-5F16-430E-B960-965C25576D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:substantiation_es:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.0","matchCriteriaId":"EA8B1410-F4D3-475E-AF5B-BFBDBD0982DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28717","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019826","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/rendezvous_security_advisory_20080409.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1189/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1190/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41760","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/rendezvous_security_advisory_20080409.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1189/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1190/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1704","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server."},{"lang":"es","value":"Múltiples desbordamientos de bufer en TIBCO Software Enterprise Message Service (EMS) anterior a 4.4.3, y iProcess Engine 10.6.0 a 10.6.1, permite a atacantes remotos ejecutar código de su elección mediante un mensaje manipulado a el servidor EMS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.2","matchCriteriaId":"457287F0-58ED-4F7E-8A16-6F757262CD62"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A391F64-B618-4961-942C-109CE548FBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3811EEE8-ED90-4272-BDC9-9FBB7E2ABC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72D4BFCE-FD9B-45D8-B23A-B928B86ED2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A8B14826-B53E-46DC-8AE9-85776867D341"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A42A8728-2B49-4F1F-930C-AB2B808BDDA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50598050-FAC6-42B6-98E5-D02DF85F1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6D5769-8FE2-4923-94EE-92619D8D086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C65C714C-91B8-4665-B9BD-699BE318EDA2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28717","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019826","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1190/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/ems_security_advisory_20080409.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1190/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1705","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función logging de IBM solidDB 06.00.1018 y versiones anteriores permite a atacantes remotos ejecutar código de su elección a través de especificadores de formato de cadena en (1) el nombre de usuario, (2) pares de nombre y posiblemente otros campos nos especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:soliddb:06.00.1018:*:*:*:*:*:*:*","matchCriteriaId":"979423E3-2025-4EB2-B1C5-5C6B6A39B745"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28468","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1706","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large value in a certain 32-bit field."},{"lang":"es","value":"Índice de array sin controlar en IBM solidDB 06.00.1018 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un valor largo en un determinado campo de 32-bit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:soliddb:06.00.1018:*:*:*:*:*:*:*","matchCriteriaId":"979423E3-2025-4EB2-B1C5-5C6B6A39B745"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28468","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41486","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1707","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a packet with an 0x11 value in a certain \"type\" field."},{"lang":"es","value":"IBM solidDB 06.00.1018 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (puntero de referencia NULL y caída de demonio) a través de un paquete con un valor 0x11 en un determinado campo \"type\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*","versionEndIncluding":"06.00.1018","matchCriteriaId":"BD3FDAE2-AC26-4F32-8451-BAE990550151"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28468","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41487","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1708","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field."},{"lang":"es","value":"IBM solidDB 06.00.1018 y versiones anteriores no validan un determinado campo que especifica una cantidad de memoria a asignar, lo cual permite a atacantes remotos provocar una denegación de servicio (salida del demonio) a través de un paquete con un valor largo en este campo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*","versionEndIncluding":"06.00.1018","matchCriteriaId":"BD3FDAE2-AC26-4F32-8451-BAE990550151"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28468","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41488","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/soliduro-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/soliduro.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1709","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project line beginning with a 'Project(\"{}\") =' sequence, probably a different vector than CVE-2008-0250."},{"lang":"es","value":"Desbordamiento de búfer en Microsoft Visual InterDev 6.0 (SP6) permite a atacantes asistidos por el usuario ejecutar código se su elección a través de un fichero Studio Solution (.SLN)con un línea Project malformada que comienza con una secuencia 'Project(\"{}\") =', posiblemente un vector diferente a CVE-2008-0250.\r\n\r\n \t\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_interdev:6.0:sp6:*:*:*:*:*:*","matchCriteriaId":"38071390-7466-4136-BF26-21835A1E8C41"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41826","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5349","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1710","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in chnfsmnt in IBM AIX 6.1 allows local users to gain privileges via a modified PATH environment variable."},{"lang":"es","value":"Vulnerabilidad de búsqueda no permitida de ruta en chnfsmnt de IBM AIX 6.1 permite a usuarios locales conseguir privilegios a través de una variables de entorno PATH modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29518","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019693","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ20391","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ23556","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ18296","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28429","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0983","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ20391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ23556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IZ18296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1711","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"Terong PHP Photo Gallery (también conocido como  Advanced Web Photo Gallery) 1.0 almacena contraseñas en texto claro en una base de datos MySQL, lo cual permite a atacantes dependientes de contexto obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:terong:advanced_web_photo_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5551044A-51F8-41CA-A4F4-48386C0A3B1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41820","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5364","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1712","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo includes/functions_weblog.php en mxBB mx_blogs versión 2.0.0 beta, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro mx_root_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mx-system:mxbb:2.0.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"9ACD13A9-A79D-4C68-BEE1-89E1073BCCE5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28515","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41819","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1713","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application crash) via a long string to IMAP port (143/tcp)."},{"lang":"es","value":"MailServer.exe de NoticeWare Email Server 4.6.1.0 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una cadena larga del puerto IMAP (143/tcp)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"33D79BA2-3571-40CA-8DFB-2342CD507F2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29629","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28559","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41581","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5341","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1714","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show.php de FaScript FaPhoto 1.0, cuando magic_quotes_gpc está inactivo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faphoto:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4C17E948-E9EB-42E7-ADEA-816C9218370D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28545","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41557","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1715","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en content/user.php de AuraCMS 2.2.1 y versiones anteriores, cuando magic_quotes_gpc está inactivo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro country."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"3AC238B1-5A62-449B-8A40-C507AB323B28"}]}]}],"references":[{"url":"http://secunia.com/advisories/29593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28499","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41529","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1716","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page and (2) form parameters, which are not properly handled when they are reflected back in an error message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WoltLab Community Framework (WCF) 1.0.6 de WoltLab Burning Board 3.0.5 permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) page y (2) form,  que no son manejados adecuadamente cuando son reflejados en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F7D2C3ED-2974-4585-8513-043327535178"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490560/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28678","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41714","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490560/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1717","sourceIdentifier":"cve@mitre.org","published":"2008-04-09T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found."},{"lang":"es","value":"WoltLab Community Framework (WCF) 1.0.6 de WoltLab Burning Board 3.0.5 permite a atacantes remotos obtener la ruta completa a través de los parámetros no válidos (1) page y (2) form, lo cual filtra la ruta de un manejador de excepciones cuando una clase válida no se puede encontrar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F7D2C3ED-2974-4585-8513-043327535178"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490560/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28678","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41713","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490560/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1718","sourceIdentifier":"cve@mitre.org","published":"2008-04-10T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Secunia information:\r\nhttp://secunia.com/advisories/28210","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail (MIME) attachment."},{"lang":"es","value":"Desbordamiento de búfer en mimesr.dll en Autonomy (anteriormente Verity) KeyView, usado en IBM Lotus Notes anterior a 8.0, puede permitir a atacantes remotos  asistidos por el usuario ejecutar código de su elección a través de un mensaje de correo electrónico con un adjunto (MIME) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:*:*:*:*:*:*:*:*","matchCriteriaId":"3A31DE25-F7B5-4AEA-B870-2B852F4FD8A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"692E295E-E650-42D5-AF7A-D6276C3D76E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"50660BA1-A24A-4DBF-AB59-1CF04FA54120"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41856","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1719","sourceIdentifier":"cve@mitre.org","published":"2008-04-10T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Nuke ET 3.2 y 3.4, permite a atacantes remotos realizar acciones como administradores, como se ha demostrado insertando una secuencia XSS en un documento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:truzone:nuke_et:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8066A4B4-B961-4040-ADC4-A4F1DD7FCC56"},{"vulnerable":true,"criteria":"cpe:2.3:a:truzone:nuke_et:3.4:*:*:*:*:*:*:*","matchCriteriaId":"701BFE6D-1E6A-41FC-BAD7-F9EAF436FA95"}]}]}],"references":[{"url":"http://secunia.com/advisories/29651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mrzayas.es/2008/04/07/xsrf-en-nuke-et-3x/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41851","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mrzayas.es/2008/04/07/xsrf-en-nuke-et-3x/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1720","sourceIdentifier":"secalert@redhat.com","published":"2008-04-10T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Desbordamiento de búfer en resync2.6.9 a 3.0.1, al activar el soporte de atributos extendidos  (xattr), puede permitir a atacantes remotos ejecutar código de su elección a través de vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of rsync as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"FEA9CA2C-640D-407E-B1A1-B796CD4F4022"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E6525C2F-2572-4310-9D30-B198CB384984"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"6DBCAA31-D770-451A-A0FE-7A6E8A99416D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"EBB31395-F275-473B-B86B-B2E758BA2D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"374E5F91-0E56-4191-B739-4D519DDE9792"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"662396BC-14FB-45C6-9C5B-C557A5DE2E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"A34821C0-3586-4160-B3AD-C49C27EEE05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"2C7901A8-84D3-4852-A439-C12EB471C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"19AA7B76-8AEB-4B5C-B7F4-82899D200951"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"88559A7B-9063-4952-928A-2FE6242D3FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"AB40E21F-55FA-4E2F-8A53-3CDF12754882"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"23834146-79D3-40F1-857A-339D5BD15DC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C7C41B8A-8330-4C5F-A0BA-854E96C3F686"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"8EAD7F16-C6FD-4499-8CC9-310379DE8CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9B965433-0880-43F3-996F-7F2FAA951B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9191C5BE-F4CF-4285-AFCE-FB0F58F7868E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"DBEDC1BF-B858-420D-8471-BE6F9BD766CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"D214AC3E-7D71-4019-BF13-3B037F345D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"8056C095-00C3-48A9-8F00-8EC3CA71AE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"72EA2B26-61BC-4513-9B11-7C21477F93BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"BEECBA41-4E06-4D26-AD66-1698C39CB4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"10E73D14-2BBB-4E6E-970D-58C9D678CB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"58239BB8-F979-4902-807F-7037FA10D13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D494532E-87C1-435A-B41C-C446EA100FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"2AF3AD10-C818-4510-AAB3-E760D48FDC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3EB3A011-194C-4F0C-8DA2-48C592C9369A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7B29F059-2213-4D01-A704-95A5620AE1DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.6:*:*:*:*:*:*:*","matchCriteriaId":"F5774F2C-A9D4-4E92-8832-A7CC2F25B682"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"CB2845B1-800A-4A87-A11E-94919CBA5655"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.8:*:*:*:*:*:*:*","matchCriteriaId":"4779C728-4B69-4B75-92A2-45E5D41FCC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"99BA0BEE-7C5F-47BD-AE02-68F69E52EA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7313AE31-C2AA-4A06-98BB-0AD3FAB7AAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C44A273A-4613-44DC-905B-8EEDC035799C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com"},{"url":"http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://samba.anu.edu.au/rsync/security.html#s3_0_2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/29668","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29770","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29777","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29781","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29788","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29856","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29861","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200804-16.xml","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1545","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:084","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/44368","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/44369","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28726","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019835","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1191/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1215/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41766","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/600-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00237.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00247.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://samba.anu.edu.au/rsync/security.html#s3_0_2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1191/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1215/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/600-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00247.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1721","sourceIdentifier":"cve@mitre.org","published":"2008-04-10T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow."},{"lang":"es","value":"Error de signo en entero en el módulo de extensión zlib en Python 2.5.2 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de un entero negativo, lo que provoca una asignación insuficiente de memoria y un desbordamiento de búfer."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=442005\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-681"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"2.4.6","matchCriteriaId":"926A663A-6369-4EE3-AD9B-F5950233B1D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.5.2","matchCriteriaId":"6D116B93-E4E2-45C3-8A7E-807CEDFA17E7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://bugs.python.org/issue2586","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29889","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29955","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30872","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31255","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31358","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/38675","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3802","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1551","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1620","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:085","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.securityfocus.com/archive/1/490690/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28715","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019823","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1229/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41748","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2444","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.python.org/issue2586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/29955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/38675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.securityfocus.com/archive/1/490690/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1229/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1722","sourceIdentifier":"secalert@redhat.com","published":"2008-04-10T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image."},{"lang":"es","value":"Múltiples desbordamientos de enteros en (1) filter/image-png.c y (2) fileter/image-zoom.c en CUPS 1.3, permite a atacantes provocar una denegación de servicio (caída)a disparar una corrupción de memoria, como se demostró a través de una imagen PNG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cups:cups:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B8BEF02F-4298-42F1-97D8-2726CCC6D69F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29902","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30078","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30190","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30553","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30717","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32292","source":"secalert@redhat.com"},{"url":"http://www.cups.org/str.php?L2790","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1625","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/218395","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:170","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/44398","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28781","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1019854","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-606-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1226/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41832","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8768","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0498.html","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/656-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00068.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/218395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-606-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1226/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0498.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/656-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1724","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método IActiveXTransfer.FileTransfer en el control ActiveX SecureTransport FileTransfer en vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server anterior a 4.6.1 Hotfix 20 permite a atacantes remotos ejecutar código a su elección a través del parámetro long remoteFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:tumbleweed:securetransport_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"D7D59B3C-06CD-48F8-8135-B7001D1F2015"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tumbleweed:securetransport_server_app:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"392851F0-76D4-411F-9363-D56EC8B6407D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29717","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3806","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.aushack.com/200708-tumbleweed.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490536/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28662","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1165/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41692","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5398","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.aushack.com/200708-tumbleweed.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490536/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1165/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1725","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El control ActiveX IBizEBank.FIProfile.1 en fiprofile20.ocx en IBiz E-Banking Integrator (anteriormente IBiz OFX Integrator) 2.0.2932 expone el método inseguro WriteOFXDataFile, que permite a atacantes remotos sobreescribir archivos de su elección mediante un nombre de ruta completo en el argumento.  NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nsoftware:ibiz_e-banking_integrator:2.0.2932:*:*:*:*:*:*:*","matchCriteriaId":"1B47FFB8-E675-4D2E-8D9A-5EE758E6A79D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28700","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41752","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1726","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en   KnowledgeQuest 2.6, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a su elección mediante (1) el parametro kqid a (a)articletext.php y (b)articletextonly.php y (2) el parametro username de (c)logincheck.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myknowledgequest:knowledgequest:2.6:*:*:*:*:*:*:*","matchCriteriaId":"37ACCEF2-10CB-42AE-9AAB-78CC16BC9F7C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44254","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44255","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28713","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28716","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41746","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5421","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1727","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts."},{"lang":"es","value":"KnowledgeQuest 2.5 y 2.6 no requiere autenticación de acceso a admincheck.php, esto permite a los atacantes remotos crear cuentas de administrador de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myknowledgequest:knowledgequest:2.5:*:*:*:*:*:*:*","matchCriteriaId":"05BA8853-702B-4DAB-87E1-0D7C3B7662EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:myknowledgequest:knowledgequest:2.6:*:*:*:*:*:*:*","matchCriteriaId":"37ACCEF2-10CB-42AE-9AAB-78CC16BC9F7C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44257","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41747","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5418","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1728","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages."},{"lang":"es","value":"ConnectionManagerImpl.java en Ignite Realtime Openfire 3.4.5 permite a usuarios remotos autenticados provocar una denegación de servicio (interrupción del demonio) desencadenando grandes colas de salida sin leer los mensajes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ignite_realtime:openfire:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"44E86FA0-8CE4-4D12-92A5-8763A312D54F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29901","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-26.xml","source":"cve@mitre.org"},{"url":"http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html","source":"cve@mitre.org"},{"url":"http://www.igniterealtime.org/fisheye/changelog/svn-org?cs=10031","source":"cve@mitre.org"},{"url":"http://www.igniterealtime.org/issues/browse/JM-1289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/04/10/7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28722","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1188/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.igniterealtime.org/fisheye/changelog/svn-org?cs=10031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.igniterealtime.org/issues/browse/JM-1289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/04/10/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1188/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1729","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the \"access content\" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types."},{"lang":"es","value":"El menú de sistema en Drupal 6 anterior a 6.2 tiene configuraciones de menu incorrectas, que  permiten a atacantes remotos (1) editar las páginas de perfil de usuarios a su elección, y obtener información sensible del (2) rastreador y (3) páginas de blog, relacionados con falta de comprobaciones de los permisos de \"acceso a contenidos\"; y (4) permite autenticación de usuarios remotos, con acceso a página de administración, para editar tipos de contenidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.2","matchCriteriaId":"F8677C5B-2871-4744-937F-6E6F67C1E1E6"}]}]}],"references":[{"url":"http://drupal.org/node/244637","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29762","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/44270","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28714","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1185/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41755","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/244637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/44270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/28714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1185/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1730","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.html en ARWScripts Gallery Script Lite (aka gallery-script-lite o Free Photo Gallery Site Script), desde el 20080411, permite a atacantes remotos leer archivos locales de su elección mediante secuencias de salto de directorio en el parámetro path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arwscripts:gallery_script_lite:*:*:*:*:*:*:*:*","matchCriteriaId":"2095A00F-7D91-4830-938C-A9E23849922F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28718","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41742","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5419","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1731","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking."},{"lang":"es","value":"El módulo de Acceso Simple para Drupal 5.x a 5.x-1.2-2 no manipula adecuadamente la información privada para nodos, que podría permitir a atacantes remotos evitar las restricciones de acceso planeadas, y leer o modificar nodos, en circunstancias oportunas relacionadas con la interacción entre Acceso Simple y (1) Node clone o (2) asuntos de seguimiento de Proyecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3281d:simple_access:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"A4E84BCC-0B05-418C-AD25-05F78BB0478D"},{"vulnerable":true,"criteria":"cpe:2.3:a:3281d:simple_access:5.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"818BB0AA-B912-4803-8AF5-D4C5955000DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:3281d:simple_access:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A635AF8A-DFC8-44BE-8A86-57DE9C737A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:3281d:simple_access:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9C21AE6A-99E1-4924-AE65-6A3335DD9379"},{"vulnerable":true,"criteria":"cpe:2.3:a:3281d:simple_access:5.x-1.2-1:*:*:*:*:*:*:*","matchCriteriaId":"C511D19B-0F49-42F9-B952-19ED5C1BCFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:3281d:simple_access:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"17A405C7-9FE3-46FA-82E4-79F543106F90"}]}]}],"references":[{"url":"http://drupal.org/node/244560","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29772","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44271","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28720","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41756","source":"cve@mitre.org"},{"url":"http://drupal.org/node/244560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1732","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en showpredictionsformatch.php en Prediction Football 1.x permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro matchid en una dupa action.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:predictionfootball:predictionfootball:1:*:*:*:*:*:*:*","matchCriteriaId":"8C0956B2-6AD6-493E-B280-09B98D243A91"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28704","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1160/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41728","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5410","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1160/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1733","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en puarcade.class.php 2.2 y anteriores en el Pragmatic Utopia PU Arcade (com_puarcade) componente para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro gid de intex.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragmaticutopia:com_puarcade:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"9A613FAA-2964-459A-A3E4-4709197E5044"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3807","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490626/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41726","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490626/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1734","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server."},{"lang":"es","value":"Conflicto de interpretación en PHP Toolkit antes de 1.0.1 en Gentoo Linux podría permitir a usuarios locales provocar una denegación de servicio (Parada PHP) y leer contenidos de secuencias de comandos PHP creando un archivo con un nombre de una letra del alfabeto en minúsculas, lo que dispara la interpretación de cierto argumento [a-z] no entrecomillado como un intérprete de comandos glob coincidente para este nombre, mejor que una interpretación como la cadena de expresión regular [a-z] literal y consecuentemente bloquea el lanzamiento del intérprete PHP del Servidor Apache HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:php_toolkit:*:rc1:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"509DE99A-4F75-4BB6-85C4-3244F08252B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:php_toolkit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0799813F-9774-4C07-A2EB-FF1D5D3C8763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:php_toolkit:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3245C5A-35B3-46E1-8307-3390C0AFEBA0"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209535","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-19.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28844","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41928","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=209535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1735","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function."},{"lang":"es","value":"BitDefender Antivirus 2008 18-01-2008 y anteriores permite a usuarios locales provocar una denegación de servicio (caída del sistema) mediante un puntero no válido a la estructura CLIENT_ID en una llamada a la función NtOpenProcess hooked System Service Descriptor Table (SSDT)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:antivirus:2008:*:*:*:*:*:*:*","matchCriteriaId":"C3B81AD6-3166-426E-8C88-F66821DEE17C"}]}]}],"references":[{"url":"http://kb.bitdefender.com/KB419-en--Security-vulnerability-in-BitDefender-2008.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30005","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019943","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28741","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1384","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42081","source":"cve@mitre.org"},{"url":"http://kb.bitdefender.com/KB419-en--Security-vulnerability-in-BitDefender-2008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1736","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709."},{"lang":"es","value":"Comodo Firewall Pro anterior a 3.0 no valida adecuadamente algunos parámetros que enganchan con las funciones de la Tabla de Descriptores de Servicios del Sistema (SSDT), lo que permite  a usuarios locales producir una denegación de servicio (caída del sistema) mediante (1) una estructura OBJECT_ATTRIBUTES manipulada en una llamada a la función NtDeleteFile, lo que conduce a una validación incorrecta de un resultado ZwQueryObject; y llamadas no especificadas a las funciones (2) NtCreateFile y (3) NtSetThreadContext, diferentes vectores que en CVE-2007-0709"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comodo:comodo_personal_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"BFD97FB7-EB99-4422-82FF-796EDB70C05F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019944","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"cve@mitre.org"},{"url":"http://www.personalfirewall.comodo.com/release_notes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28742","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42082","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.personalfirewall.comodo.com/release_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1737","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function."},{"lang":"es","value":"Sophos Anti-Virus 7.0.5 y otras versiones 7.x, cuando está habilitado Runtime Behavioural Analysis, permite a usuarios locales provocar una denegación de servicio (reinicio con el producto deshabilitado) y posiblemente obtener privilegios mediante un valor zero en cierto campo length en el argumento ObjectAttributes a la función NtCreateKey hooked System Service Descriptor Table (SSDT)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E3605FC9-61B9-489D-863C-5248D71BCF62"}]}]}],"references":[{"url":"http://secunia.com/advisories/29996","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019945","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28743","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/37810.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1381","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42083","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sophos.com/support/knowledgebase/article/37810.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1738","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function."},{"lang":"es","value":"Rising Antivirus 2008 anterior a 20.38.20 permite a usuarios locales provocar una denegación de servicio (caída del sistema) mediante un puntero no válido a la estructura _CLIENT_ID en una llamada a NtOpenProcess asociada a la función System Service Descriptor Table (SSDT)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rising-global:rising_antivirus:*:2008:*:*:*:*:*:*","versionEndIncluding":"20.38.20","matchCriteriaId":"AFB13BFB-FCF7-4EFB-B324-591CF1AD3C21"}]}]}],"references":[{"url":"http://secunia.com/advisories/30007","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019946","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28744","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42084","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491405/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1739","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T19:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption."},{"lang":"es","value":"Apple QuickTime versiones anteriores a 7.4.5 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de átomos ftyp manipulados en un fichero de película, lo cual dispara una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.4","matchCriteriaId":"1D5E943B-2AB9-4E85-A9A8-911C52438793"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"}]}]}],"references":[{"url":"http://support.apple.com/kb/HT1241","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45144","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT1241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1740","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified \"stress test,\" aka Bug ID CSCsh20972."},{"lang":"es","value":"El servicio Presence Engine (PE) de Cisco Unified Presence versiones anteriores a 6.0(1) permite a atacantes remotos provocar una denegación de servicio (core dump e interrupción del servicio) a través de \"pruebas de estrés\" sin especificar, también conocido como Bug ID CSCsh20972."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0_2","matchCriteriaId":"4C218B1B-CE56-4170-A084-2A84750BC780"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"36C86548-FAC6-49A3-9D3B-3107A7916086"}]}]}],"references":[{"url":"http://secunia.com/advisories/30240","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020023","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29220","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1534","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42412","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1741","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan, aka Bug ID CSCsj64533."},{"lang":"es","value":"El servicio SIP Proxy (SIPD) de Cisco Unified Presence versiones anteriores a 6.0(3) permite a atacantes remotos provocar una denegación de servicio (core dump e interrupción del servicio) a través de un escaneo del puerto TCP, también conocido como Bug ID CSCsj64533"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0_2","matchCriteriaId":"4C218B1B-CE56-4170-A084-2A84750BC780"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"36C86548-FAC6-49A3-9D3B-3107A7916086"}]}]}],"references":[{"url":"http://secunia.com/advisories/30269","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020023","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29222","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1534","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42413","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1742","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609."},{"lang":"es","value":"Fugas de memoria en el servicio Certificate Trust List (CTL) Provider de Cisco Unified Communications Manager (CUCM) 5.x versiones anteriores a 5.1(3) permite a atacantes remotos provocar una denegación de servicio (consumo excesivo de memoria e interrupción del servicio) a través de una serie de paquetes TCP malformados, como lo demostrado por TCPFUZZ, también conocido como Bug ID CSCsj80609."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E6C20851-DC17-4E89-A6C1-D1B52D47608F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"577571D6-AC59-4A43-B9A5-7B6FC6D2046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"B860F1E1-E295-4B71-B396-14286611EA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2\\):*:*:*:*:*:*","matchCriteriaId":"E194E6EC-282D-4C8E-96E3-00D64FCD8C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2a\\):*:*:*:*:*:*","matchCriteriaId":"5B2EA451-EE18-440A-924A-556A2EC74300"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2b\\):*:*:*:*:*:*","matchCriteriaId":"8950C510-38F3-4040-8871-C085DDECF5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(3a\\):*:*:*:*:*:*","matchCriteriaId":"7101A008-3F3C-4ABB-B4FC-25BDA8809C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"156F822A-08CB-4EE2-9054-18F649D96C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"53CBD1E5-46C6-4F31-867A-118227EB0473"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"8E8F77F9-05C3-4B66-9022-7B227F97978C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42410","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1743","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433."},{"lang":"es","value":"Fugas de memoria en el servicio Certificate Trust List (CTL) Provider service de Cisco Unified Communications Manager (CUCM) 5.x versiones anteriores a 5.1(3) y 6.x versiones anteriores a 6.1(1) permite a atacantes remotos provocar una denegación de servicio (consumo excesivo de memoria e interrupción del servicio) a través de una serie de paquetes TCP malformados, también conocido como Bug ID CSCsi98433."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3\\)","matchCriteriaId":"4013A936-92B1-4579-ABD3-B57A80A8C8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1\\(1\\)","matchCriteriaId":"795C8E07-9671-4B8D-ABC6-D373F49D0244"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42414","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1744","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770."},{"lang":"es","value":"El servicio Certificate Authority Proxy Function (CAPF) service de Cisco Unified Communications Manager (CUCM) 4.1 versiones anteriores a 4.1(3)SR7, 4.2 versiones anteriores a 4.2(3)SR4, y 4.3 versiones anteriores a 4.3(2) permite a atacantes remotos provocar una denegación de servicio (caída del servicio) a través de tráfico de red malformado, también conocido como Bug ID CSCsk46770."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AC772518-51CC-4692-BEB2-2C9C2A215F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr4:*:*:*:*:*:*:*","matchCriteriaId":"5669BB8E-3799-46AD-9E31-96BF3F60B20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr5:*:*:*:*:*:*:*","matchCriteriaId":"236C3A89-D732-423F-9885-5B429DBDF257"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr5b:*:*:*:*:*:*:*","matchCriteriaId":"88DC4709-EE11-45CF-B929-A0623F254341"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr5c:*:*:*:*:*:*:*","matchCriteriaId":"10A04B5A-D912-43F5-8143-21C23207F6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2_3_sr2:*:*:*:*:*:*:*","matchCriteriaId":"5ED2283C-822A-45B1-B82B-90EEB78CD372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2_3_sr2b:*:*:*:*:*:*:*","matchCriteriaId":"A6A6AC6B-D3CD-4F05-A73F-61041C6DB514"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2_3_sr3:*:*:*:*:*:*:*","matchCriteriaId":"939CD685-4539-421F-BC12-36E641301E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"577571D6-AC59-4A43-B9A5-7B6FC6D2046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3_1_sr1:*:*:*:*:*:*:*","matchCriteriaId":"97DC0190-A028-489D-BF61-8A49A91C15B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_1:*:*:*:*:*:*:*","matchCriteriaId":"2740B5E5-E8D2-491E-B174-A1A9DF812418"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_2:*:*:*:*:*:*:*","matchCriteriaId":"60D93DAA-0ED6-4DA5-B7A5-50D5567A6178"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_2a:*:*:*:*:*:*:*","matchCriteriaId":"DEA1ABD3-D076-4CA6-A12D-3C3BB5080B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_2b:*:*:*:*:*:*:*","matchCriteriaId":"54B14EC5-4391-4698-BF6F-2726FD28D318"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_3a:*:*:*:*:*:*:*","matchCriteriaId":"B5F1270F-DBF6-4938-A1A0-732EE52C83E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"05F443F9-B454-42B3-8464-ACEA40066DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0_1a:*:*:*:*:*:*:*","matchCriteriaId":"1FBF1FDC-7096-4EE6-B9A2-0C9971F407D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1_1a:*:*:*:*:*:*:*","matchCriteriaId":"047E45A0-C0F0-4900-B5FB-8F0A5852732D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42415","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1745","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115."},{"lang":"es","value":"Cisco Unified Communications Manager (CUCM) 5.x versiones anteriores a 5.1(2) y 6.x versiones anteriores a 6.1(1) permite a atacantes remotos provocar una denegación de servicio (interrupción del servicio) a través de un mensaje SIP JOIN con una cabecera malformada, también conocido como Bug ID CSCsi48115."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr.5:*:*:*:*:*:*","matchCriteriaId":"FBE07ABF-97B2-48B4-8EF6-861AB41340F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr4:*:*:*:*:*:*","matchCriteriaId":"9135D3DE-5110-47CB-A23F-7CE3D9AFD153"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr5:*:*:*:*:*:*","matchCriteriaId":"914A2B2A-6292-451B-B26A-1B529CECBE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr5b:*:*:*:*:*:*","matchCriteriaId":"72FAE8F7-504A-4B6F-9C9D-45158AC6C208"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr5c:*:*:*:*:*:*","matchCriteriaId":"835DD627-C5F1-4733-8949-C91592EC719A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2\\(3\\)sr.2:*:*:*:*:*:*","matchCriteriaId":"701A374B-00A7-4151-8652-9A39FAECBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\\(3\\)sr2b:*:*:*:*:*:*","matchCriteriaId":"42F41FF1-3FD1-4E90-877C-AC10D56CFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\\(3\\)sr3:*:*:*:*:*:*","matchCriteriaId":"291CFDEC-CDF8-438D-9D1E-2832CE705FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"577571D6-AC59-4A43-B9A5-7B6FC6D2046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:4.3\\(1\\)sr.1:*:*:*:*:*:*","matchCriteriaId":"25EF5BF5-5909-4194-96DD-E8725BD3499A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"B860F1E1-E295-4B71-B396-14286611EA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2\\):*:*:*:*:*:*","matchCriteriaId":"E194E6EC-282D-4C8E-96E3-00D64FCD8C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2a\\):*:*:*:*:*:*","matchCriteriaId":"5B2EA451-EE18-440A-924A-556A2EC74300"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2b\\):*:*:*:*:*:*","matchCriteriaId":"8950C510-38F3-4040-8871-C085DDECF5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(3a\\):*:*:*:*:*:*","matchCriteriaId":"7101A008-3F3C-4ABB-B4FC-25BDA8809C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"156F822A-08CB-4EE2-9054-18F649D96C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"53CBD1E5-46C6-4F31-867A-118227EB0473"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"8E8F77F9-05C3-4B66-9022-7B227F97978C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42417","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1746","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets, as demonstrated by the IP Stack Integrity Checker (ISIC), aka Bug ID CSCsj24113."},{"lang":"es","value":"El servicio SNMP Trap Agent de Cisco Unified Communications Manager (CUCM) 4.1 versiones anteriores a 4.1(3)SR6, 4.2 versiones anteriores a 4.2(3)SR3, 4.3 versiones anteriores a 4.3(2), 5.x versiones anteriores a 5.1(3), y 6.x versiones anteriores a 6.1(1) permite a atacantes remotos provocar una denegación de servicio (core dump y reinicio del servicio) a través de una serie de paquetes UDP malformados, como lo demostrado por  IP Stack Integrity Checker (ISIC), también conocido como Bug ID CSCsj24113."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr.5:*:*:*:*:*:*","matchCriteriaId":"FBE07ABF-97B2-48B4-8EF6-861AB41340F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr4:*:*:*:*:*:*","matchCriteriaId":"9135D3DE-5110-47CB-A23F-7CE3D9AFD153"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr5:*:*:*:*:*:*","matchCriteriaId":"914A2B2A-6292-451B-B26A-1B529CECBE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr5b:*:*:*:*:*:*","matchCriteriaId":"72FAE8F7-504A-4B6F-9C9D-45158AC6C208"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:\\(3\\)sr5c:*:*:*:*:*:*","matchCriteriaId":"835DD627-C5F1-4733-8949-C91592EC719A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2\\(3\\)sr.2:*:*:*:*:*:*","matchCriteriaId":"701A374B-00A7-4151-8652-9A39FAECBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\\(3\\)sr2b:*:*:*:*:*:*","matchCriteriaId":"42F41FF1-3FD1-4E90-877C-AC10D56CFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\\(3\\)sr3:*:*:*:*:*:*","matchCriteriaId":"291CFDEC-CDF8-438D-9D1E-2832CE705FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"577571D6-AC59-4A43-B9A5-7B6FC6D2046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:4.3\\(1\\)sr.1:*:*:*:*:*:*","matchCriteriaId":"25EF5BF5-5909-4194-96DD-E8725BD3499A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"B860F1E1-E295-4B71-B396-14286611EA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2\\):*:*:*:*:*:*","matchCriteriaId":"E194E6EC-282D-4C8E-96E3-00D64FCD8C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2a\\):*:*:*:*:*:*","matchCriteriaId":"5B2EA451-EE18-440A-924A-556A2EC74300"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2b\\):*:*:*:*:*:*","matchCriteriaId":"8950C510-38F3-4040-8871-C085DDECF5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"8E8F77F9-05C3-4B66-9022-7B227F97978C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42420","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1747","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an unspecified SIP INVITE message, aka Bug ID CSCsk46944."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco Unified Communications Manager 4.1 versiones anteriores a 4.1(3)SR6, 4.2 versiones anteriores a 4.2(3)SR3, 4.3 versiones anteriores a 4.3(2), 5.x versiones anteriores a 5.1(3), y 6.x versiones anteriores a 6.1(1) permite a atacantes remotos provocar una denegación de servicio (reinicio servicio CCM) a través de un mensaje SIP INVITE sin especificar, también conocido como Bug ID CSCsk46944."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"4.1\\(3\\)sr6","matchCriteriaId":"1F2FC25F-22C5-43B5-9F69-D5035C77FAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.2\\(3\\)sr3","matchCriteriaId":"62436DD2-D8B1-4BBE-9E77-32E65D2F8599"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"4.3\\(2\\)","matchCriteriaId":"6012B9A6-B140-4076-9BA8-FB419A7FDA9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3\\)","matchCriteriaId":"4013A936-92B1-4579-ABD3-B57A80A8C8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1\\(1\\)","matchCriteriaId":"795C8E07-9671-4B8D-ABC6-D373F49D0244"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42418","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1748","sourceIdentifier":"psirt@cisco.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355."},{"lang":"es","value":"Cisco Unified Communications Manager 4.1 versiones anteriores a 4.1(3)SR7, 4.2 versiones anteriores a 4.2(3)SR4, 4.3 versiones anteriores a 4.3(2), 5.x versiones anteriores a 5.1(3), y 6.x versiones anteriores a 6.1(1) no valida apropiadamente URLs SIP, lo cual permite a atacantes remotos provocar una denegación de servicio (interrupción del servicio) a través de un mensaje SIP INVITE, también conocido como ug ID CSCsl22355."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","versionEndExcluding":"4.1\\(3\\)sr7","matchCriteriaId":"9052FB98-E267-4D79-9F3E-BFC79FAF95B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.2\\(3\\)sr4","matchCriteriaId":"6D27236B-0B95-4899-B1AF-0E75D8B6044F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"4.3\\(2\\)","matchCriteriaId":"6012B9A6-B140-4076-9BA8-FB419A7FDA9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3\\)","matchCriteriaId":"4013A936-92B1-4579-ABD3-B57A80A8C8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1\\(1\\)","matchCriteriaId":"795C8E07-9671-4B8D-ABC6-D373F49D0244"}]}]}],"references":[{"url":"http://secunia.com/advisories/30238","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29221","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42419","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1749","sourceIdentifier":"psirt@cisco.com","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content Switching Module with SSL (CSM-S) 2.1(2) up to 2.1(7) allows remote attackers to cause a denial of service (memory consumption) via TCP segments with an unspecified combination of TCP flags."},{"lang":"es","value":"Fuga de memoria en Cisco Content Switching Module (CSM) 4.2(3) hasta 4.2(8) y Cisco Content Switching Module con SSL (CSM-S) 2.1(2) hasta 2.1(7); permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de segmentos TCP con una combinación no especificada de los bits de control (flags) de TCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"91931C63-3D0B-45EF-B8AD-9764DE8BCF0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"69B532AD-840F-42DA-B8F5-86B68F434B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"480FEB19-1786-4D2B-B8AE-319C294C15A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"72742A19-CC42-4A32-B748-D83AE4E8705D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"182C450A-A615-49E9-9673-696DF10C78F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8511F71D-D21C-4BB5-B622-FBE0BAFDF7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D5DCD3E0-C076-4EAF-BF78-B7184567175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module_ssl:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3497D98-B8AC-4B8B-9096-EA363B1A8FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module_ssl:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"15F4B859-9A16-4D31-87EE-5DA562C0A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module_ssl:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02BAAC44-64BF-40D1-8326-3EF7BA93E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module_ssl:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"0AEC43F0-B1F8-4220-A173-77207F94D1D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module_ssl:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"58AB9D82-814C-49C0-9379-B8AC2645EE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:cisco_content_switching_module_ssl:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D206443D-4E1C-4FD7-8F17-48F4DD49C959"}]}]}],"references":[{"url":"http://secunia.com/advisories/30223","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995684.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29216","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020021","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1532/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42409","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080995684.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1532/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1750","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to the /category URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Integry System LiveCart 1.1.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro id a la /category URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livecart:livecart:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"941E0799-74C9-4A5C-8EFA-EA225892E0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:livecart:livecart:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"41B2338E-3F31-4004-A3AB-3C314FCB96CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:livecart:livecart:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D2259AE-94A3-46B5-B30A-B8EF48B2142D"}]}]}],"references":[{"url":"http://livecart.com/news/LiveCart-1-1-2-released.12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2008/May/0021.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44358","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28723","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41750","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5422","source":"cve@mitre.org"},{"url":"http://livecart.com/news/LiveCart-1-1-2-released.12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2008/May/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1751","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) language and (2) lang parameters."},{"lang":"es","value":"Múltiples vunerabilidades de salto de directorio en index.php en Ksemail permiten a atacantes remotos leer archivos locales a su elección mediante un...(punto a punto) en los parámetros (1) de idioma y (2) lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ksemail:ksemail:*:*:*:*:*:*:*:*","matchCriteriaId":"9C60BB32-E3CD-4A9A-96A5-29B981C9D27A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28724","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41749","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5423","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1752","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"ezRADIUS 0.1 almacena información sensible bajo la raíz web con control de acceso insuficiente, lo cual permite atacantes remotos obtener credenciales mediante peticiones directas a (1) config.ini o (2) database.ini. Nota: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achmad_zaenuri:ezradius:0.1:*:*:*:*:*:*:*","matchCriteriaId":"941020DB-4EA1-4FB5-A81E-D799A0FD3D99"}]}]}],"references":[{"url":"http://secunia.com/advisories/29769","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=809832","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=591272&group_id=221332","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44399","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41767","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=809832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=591272&group_id=221332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1753","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en system/workplace/admin/workplace/sessions.jsp en Alkacon OpenCMS 7.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro searchfilter, un vector diferente de CVE-2008-1510."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkacon:opencms:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"77C1DA6A-037E-4EA6-B18A-774D365E5E07"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490498/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490710/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28637","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41675","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490498/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490710/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1754","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory."},{"lang":"es","value":"Symantec Altiris Deployment Solution anterior a 6.9.164 almacena en memoria las contraseñas de Deployment Solution Agent (aka AClient) en texto claro, el cual permite a los usuarios locales obtener información sensible volcando el proceso de memoria AClient.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:*:sp2:*:*:*:*:*:*","versionEndIncluding":"6.8","matchCriteriaId":"2D3DE87D-33E4-4574-AE73-26E93F57EE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*","matchCriteriaId":"A1363995-0647-4C83-B3DA-360D5433DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.380:*:*:*:*:*:*:*","matchCriteriaId":"66BB840E-08C0-443A-A4B4-CAAF476AB728"}]}]}],"references":[{"url":"http://secunia.com/advisories/29771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/44388","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28707","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019825","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1197/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41771","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/44388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1197/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1755","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función showSource en showSource.php en World of Phaos 4.0.1 permite a atacantes remotos leer archivos de su elección mediante secuencias de salto de directorio en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zekewalker:world_of_phaos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92C13BBD-86FB-4F72-9E9A-49823B7D1917"}]}]}],"references":[{"url":"http://www.osvdb.org/44387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28719","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41741","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5420","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1756","sourceIdentifier":"cve@mitre.org","published":"2008-04-11T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service (daemon crash) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el demonio Qmaster en Sun N1 Grid Engine 6.1 permite a los usuarios locales provocar una denegación de servicio (caída del demonio) mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:aix:*:*:*:*:*","matchCriteriaId":"389FE027-029C-42C8-ADE5-23D85EFC99FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"0ABA2C49-F6EC-46D6-B424-7FEC9DBE572B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:irix:*:*:*:*:*","matchCriteriaId":"A49B3DF8-A329-4577-BEAC-2C9863FAE678"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"D6014B2C-B0CF-4226-96CB-809629EA084D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"AF55A607-597B-444A-A5CB-F0EDA4BEAD51"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"6EA9AB55-5E5F-40FB-9351-21FDE32B87AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_grid_engine:6.1:*:x86:*:*:*:*:*","matchCriteriaId":"4DB52B5A-45CE-4B4D-813A-C5DF350DCE3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-234822-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/44363","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28731","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019830","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1196/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41763","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-234822-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/44363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1196/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1757","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en el módulo ConcoursPhoto para KwsPHP 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro VIEW."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwsphp:kwsphp:1.0:*:*:*:*:*:*:*","matchCriteriaId":"69750EA0-C35C-4EBA-9593-E9A8664B52B0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3809","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490470/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28612","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41814","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490470/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1758","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en el módulo ConcoursPhoto para KwsPHP permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro C_ID a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwsphp:kwsphp:*:*:*:*:*:*:*:*","matchCriteriaId":"97202E3C-E93E-4308-899D-31F95522DB73"}]}]}],"references":[{"url":"http://secunia.com/advisories/29664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28738","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41636","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5353","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1759","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en el módulo jeuxflash para KwsPHP permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat de index.php, un vector diferente de CVE-2007-4922."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jeuxflash:jeuxflash_module:*:*:*:*:*:*:*:*","matchCriteriaId":"63F2654E-482E-4792-A456-BB0398B82037"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwsphp:kwsphp:*:*:*:*:*:*:*:*","matchCriteriaId":"97202E3C-E93E-4308-899D-31F95522DB73"}]}]}],"references":[{"url":"http://koogar.alorys-hebergement.com/kwsphp/modules/maintenance/index.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28601","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41635","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5352","source":"cve@mitre.org"},{"url":"http://koogar.alorys-hebergement.com/kwsphp/modules/maintenance/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1760","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Blogator-script anterior a  1.01 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro incl_page en (1) struct_admin.php, (2) struct_admin_blog.php, y (3) struct_main.php en _blogadata/include."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00","matchCriteriaId":"F7C4C5AD-C4E8-4B3A-B1A0-ED0357332F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:0.90:*:*:*:*:*:*:*","matchCriteriaId":"FA3DEDEF-5E9F-448F-BF4A-455AEDC23FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:0.91:*:*:*:*:*:*:*","matchCriteriaId":"4044E07B-A56F-41A5-87C2-FFB4D732BD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:0.92:*:*:*:*:*:*:*","matchCriteriaId":"E49B61D3-AEE9-404C-9655-E50F0D8B9AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:0.93:*:*:*:*:*:*:*","matchCriteriaId":"6D37FBA4-5C3B-40E0-8F3E-CBFFA569B8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:0.95:*:*:*:*:*:*:*","matchCriteriaId":"F75A63DE-A2BC-4E11-B894-3CE004BAA360"}]}]}],"references":[{"url":"http://secunia.com/advisories/29684","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blogator-script.com/changelog.php","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28627","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41660","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5365","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blogator-script.com/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1761","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access."},{"lang":"es","value":"Opera anterior a 9.27 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una fuente newsfeed manipulada, lo cual dispara un acceso a memoria inválido. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.26","matchCriteriaId":"F8E03B82-266A-4AFE-934B-A652054E85DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-14.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/927/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/881/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28585","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1084/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41625","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/927/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/881/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1084/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1762","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption."},{"lang":"es","value":"Opera versiones anteriores a 9.27, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un patrón de imagen escalado diseñado en un elemento CANVAS de HTML, que desencadena corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.26","matchCriteriaId":"FC16D7E2-F85D-4BDC-9BB0-6CBB9D7EE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-14.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/927/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/support/search/view/882/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28585","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1084/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41627","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/927/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/support/search/view/882/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1084/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1763","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the id_art parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en _blogadata/include/sond_result.php en Blogator-script 0.95 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el parámetro id_art."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogator_script:blogator_script:0.95:*:*:*:*:*:*:*","matchCriteriaId":"AE74067D-DCFF-4B94-9A19-3DA785F94D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator_script:blogator_script:1.01:*:*:*:*:*:*:*","matchCriteriaId":"5CA4FE8A-A4FC-4AD7-B9FE-3171495116F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29684","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blogator-script.com/changelog.php","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/490500/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28635","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41658","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blogator-script.com/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/490500/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1764","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to \"keyboard handling of password inputs.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en Opera versiones anteriores a 9.27, presenta un impacto desconocido y vectores de ataque remotos relacionados con el \"keyboard handling of password inputs\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.26","matchCriteriaId":"F8E03B82-266A-4AFE-934B-A652054E85DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"1CBC39B3-4106-4B28-8AFB-4F4B5B5119D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"763CEF7F-AAB2-4C16-BDC2-E5F864111592"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"B66F0EC7-452C-4847-B028-5086FE657440"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"5F966486-485B-4B0D-9BE1-F1D39CB08863"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"A32E4272-6CEF-4C1C-BDA2-96863E8301DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*","matchCriteriaId":"47B21D05-A906-44B5-AEDA-73D383B905E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*","matchCriteriaId":"E0BA115B-C42E-4794-90BC-778B0C85CE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*","matchCriteriaId":"7C0F2643-923D-4072-B5A4-6321066C3AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*","matchCriteriaId":"4500A623-BD2C-461A-B862-2C51BD25BE71"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"63114EE0-54F7-4418-9B9E-C37BB2869F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CF5C9CB9-6396-415D-AC64-312F47A76177"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"C8F3056A-14B5-411F-8FE8-80AF5605001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4CF6B223-8575-40C7-9EDA-BDDCF6ABDBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*","matchCriteriaId":"BB1B176A-1200-4E75-BFC0-AA5F87E2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*","matchCriteriaId":"911B0336-02CE-426C-ABFF-8CFD3BC146CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*","matchCriteriaId":"DB0E448B-8A9C-44BF-AE29-D05900F6FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"790C5B0D-9A06-4C0C-BBBF-9B4C17857213"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*","matchCriteriaId":"620666CE-AABB-4A36-9566-425F2C810F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.30:*:*:*:*:*:*:*","matchCriteriaId":"431AE65C-5A7A-48D3-8A73-EC20CC86CB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.55:*:*:*:*:*:*:*","matchCriteriaId":"CDC4A969-1099-4F99-AA39-0BDB7654044C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.1tp:*:*:*:*:*:*:*","matchCriteriaId":"C955D52D-4FA9-4FD0-BE56-9C6F4B33F1CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.6:*:*:*:*:*:*:*","matchCriteriaId":"7BC3478B-E45C-415C-B3D8-D9937BB3D98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-14.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/927/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/927/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41834","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/927/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/927/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1765","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header.  NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244."},{"lang":"es","value":"Desbordamiento de búfer en Adobe Photoshop Album Starter Edition 3.2, y posiblemente en After Effects CS3, permite a atacantes remotos con usuario asistido, y atacantes físicamente próximos ejecutar código arbitrario a través de  un fichero BMP con una cabecera de imagen no válida. NOTE: El problema relacionado con Photoshop CS3 ya está tratado en CVE 2007-2244."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:photoshop:3.2:*:starter:*:*:*:*:*","matchCriteriaId":"91E53D3C-E314-4775-86E1-B02B2B3A1C4D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29838","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019910","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28874","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1317","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41941","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5479","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1766","sourceIdentifier":"cve@mitre.org","published":"2008-04-12T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to \"two minor security-related bugs.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en phpBB anterior a 3.0.1 tienen un impacto desconocido y vectores de ataque, referidos a \" dos errores menores relacionados con la seguridad\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:*:rc8:*:*:*:*:*:*","versionEndIncluding":"3.0.0","matchCriteriaId":"2E3CA890-BF52-4A49-9F83-E1E9FA63BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C2380A73-A1DF-4790-B5A5-7BCE5855735A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"AC9BF138-DF69-451C-986F-FDE7376D141B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"0C66D15A-036B-42E9-ADF9-110F94E0B1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D5FB2232-56F1-4958-8374-EEEB8E61F1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:rc7:*:*:*:*:*:*","matchCriteriaId":"7681FD73-A753-47EA-9DDA-F3C4F9A30E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0rc:1:*:*:*:*:*:*","matchCriteriaId":"626618F6-3404-461E-A071-67E73C15EF91"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0rc:2:*:*:*:*:*:*","matchCriteriaId":"00928BFE-2FFD-432F-A444-2256E722A1C4"}]}]}],"references":[{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=879735","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1236/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41886","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=879735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1236/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1767","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT \"transformation match\" condition that triggers a large number of steps."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de  búfer en pattern.c en libxslt anteriores a 1.1.24, permiten a atacantes, dependiendo del contexto, provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un fichero de hoja de estilo XSL con una condición \"transformation match\" XSLT larga  que dispara un número grande de pasos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:desktop:3:*:*:*:*:*:*:*","matchCriteriaId":"C17C5FD0-2D17-4625-85AC-45E926EDD3F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*","matchCriteriaId":"492EA1BE-E678-4300-A690-3BFCD4B233B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*","matchCriteriaId":"4E3C9031-F69A-4B6A-A8CB-39027174AA01"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*","matchCriteriaId":"D6B5646C-FF04-4D3D-B39E-27C1056962EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:as:*:*:*:*:*","matchCriteriaId":"327FEE54-79EC-4B5E-B838-F3C61FCDF48E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:es:*:*:*:*:*","matchCriteriaId":"056C1C15-D110-4309-A9A6-41BD753FE4F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:ws:*:*:*:*:*","matchCriteriaId":"08392974-5AC1-4B12-893F-3F733EF05F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:as:*:*:*:*:*","matchCriteriaId":"49EF5B77-9BC9-4AE8-A677-48E5E576BE63"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:es:*:*:*:*:*","matchCriteriaId":"36389D32-61C1-4487-8399-FA7D2864FACD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:ws:*:*:*:*:*","matchCriteriaId":"49B67F74-AF8F-4A27-AA8A-A8479E256A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4:*:*:*:*:*:*:*","matchCriteriaId":"D986CAD0-F4E0-4F97-B240-8967CD4466FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*","matchCriteriaId":"AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_workstation:5:*:*:*:*:*:*:*","matchCriteriaId":"292F7F41-3545-42B4-8B86-A13D8708E775"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*","matchCriteriaId":"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=527297","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30315","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30393","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30717","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31363","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-02.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1589","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:151","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0287.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29312","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020071","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-633-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1580/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42560","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=527297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-633-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1580/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1768","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow."},{"lang":"es","value":"Múltiples desbordamientos de enteros en VLC anterior a 0.8.6f, permite a atacantes remotos provocar una denegación de servicio (caída) a través del demultiplexador (1) MP4, (2) Real y (3) el codec Cinepak, que inicia el desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99:*:*:*:*:*:*:*","matchCriteriaId":"929E49D1-B8F6-4A25-A93F-D8211520ED61"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99a:*:*:*:*:*:*:*","matchCriteriaId":"B61BB1FD-6D2A-42EA-9824-9A8FD728B4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99b:*:*:*:*:*:*:*","matchCriteriaId":"76DDF802-26C2-437E-BB01-F01209FFE0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99c:*:*:*:*:*:*:*","matchCriteriaId":"546BAE28-5B2A-4856-8B2A-316D9AD2F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99d:*:*:*:*:*:*:*","matchCriteriaId":"56926B35-987F-4C12-9FBC-61BF7CEE1541"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99e:*:*:*:*:*:*:*","matchCriteriaId":"2D8FAE03-C528-4BAD-823E-EEEC4368113D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99f:*:*:*:*:*:*:*","matchCriteriaId":"1C5B604B-5A7A-450A-8252-60FDCB114283"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99g:*:*:*:*:*:*:*","matchCriteriaId":"78FCD5D6-A4A9-48CD-BD0E-296FD1032907"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99h:*:*:*:*:*:*:*","matchCriteriaId":"5624A925-C0D8-4E85-9B32-085BB9059FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99i:*:*:*:*:*:*:*","matchCriteriaId":"28E35B1D-3191-4E18-B265-ACA736A87645"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"60FCBA5D-568F-424B-BFB1-1BA41DB0D6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.50:*:*:*:*:*:*:*","matchCriteriaId":"656BBC4D-8569-4A91-87DF-93D053BEEC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.60:*:*:*:*:*:*:*","matchCriteriaId":"0C9C7B19-59F4-43FB-8122-AAD36ABDF807"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.61:*:*:*:*:*:*:*","matchCriteriaId":"6E2DB4C0-CCEE-40D6-B227-E00A002D755B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.62:*:*:*:*:*:*:*","matchCriteriaId":"01BE9872-10B5-466E-BEE4-69B6451076C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.63:*:*:*:*:*:*:*","matchCriteriaId":"C6125D6E-6416-49E8-8770-5C0590F3FA0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.70:*:*:*:*:*:*:*","matchCriteriaId":"27122F7C-1D19-41D8-B323-A6941D0DE193"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.71:*:*:*:*:*:*:*","matchCriteriaId":"6068DB81-542B-43F0-9B42-CEA7689F61D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.72:*:*:*:*:*:*:*","matchCriteriaId":"A009555D-CC59-4C6A-B350-E7F4730F5B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.73:*:*:*:*:*:*:*","matchCriteriaId":"3299D365-015F-4A95-80C3-977853E70E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.80:*:*:*:*:*:*:*","matchCriteriaId":"47EC751E-FB47-4263-B9ED-FBBAAEA677F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.81:*:*:*:*:*:*:*","matchCriteriaId":"5BA7C125-989A-4727-9E59-44ACC1750E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.82:*:*:*:*:*:*:*","matchCriteriaId":"BC105DEB-DE1F-4183-8A4A-F7E58FBB82C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.83:*:*:*:*:*:*:*","matchCriteriaId":"521F12A2-7785-48C9-BB11-E91CEF61584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.90:*:*:*:*:*:*:*","matchCriteriaId":"25A412BA-A195-4893-B5F8-EE6FC9A53326"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.91:*:*:*:*:*:*:*","matchCriteriaId":"A6ADA95A-A8B2-4E3E-A3E4-AEA03B14C339"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.92:*:*:*:*:*:*:*","matchCriteriaId":"F7823310-E6C2-42D6-A0CC-8D2A0CA5EB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBE2DF23-1CF5-4371-82EF-7072B0FCC226"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2F706E26-E58D-4B5C-98AC-A386BF7ABC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E19F3E58-0D65-45AF-8024-E3A7CFD05142"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4B24956D-A924-40BC-A340-3BE9DD3CCBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F94AC83A-6790-4E26-A4B8-E2B4394CB3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"DD6F543A-8520-4F13-9C03-9520A6B92944"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.3_ac3:*:*:*:*:*:*:*","matchCriteriaId":"F3991F10-CFC4-4979-B5D4-F9EFB9992683"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"01FC4A5C-5A0A-40CF-891B-97443CC4A367"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6656C05D-4A4B-47DE-9844-308FD98CFF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8CBF1B20-1478-472C-B9A1-974A7A5333C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C29EDDF9-DE90-4AA7-8454-D42B4C37ECF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"02AF1C9A-FD6F-4CA4-8275-8B7655F861F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B56B15F-7504-4D55-8C31-1C28F1A8129D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6C6BB497-20F6-4CCB-A24E-7228BE68CA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2855B3-D0ED-4C8E-95A0-151E88F95057"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"56B90DCE-2EA9-49AA-9F63-0515C751E821"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"34C4F8C4-EEA4-4369-BBC8-C726059C8852"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2821324-7A44-40CD-95B8-F4B5B09E6D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4A98AC34-2FAB-4CAE-9D14-B4E11CC2AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"347E213C-83AF-4F98-8096-2113E00C1BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"6A26753D-44F2-49F6-8486-1DD61297C037"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"67C2B1C1-1606-411D-A9CA-D1A654FD4133"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28BBBBAF-71F7-4F47-ADE6-FF7B590832E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"5AC67A7B-21E0-45DA-A70F-EE97079140A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.4a:*:*:*:*:*:*:*","matchCriteriaId":"1062EB82-2A6C-4770-A339-21686FF9E923"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FEA7ECBE-1CAE-47C5-ACC1-F7BBA3946CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"50A23534-3DF7-422A-B997-1FB16D8564C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6a:*:*:*:*:*:*:*","matchCriteriaId":"9E85F765-D2DF-41C0-A90F-732861CA32F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6b:*:*:*:*:*:*:*","matchCriteriaId":"26981B0C-6A7E-40BA-8F50-0C19870258FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"89FAFEE4-35FE-44BE-90DD-1E067A1A2AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6d:*:*:*:*:*:*:*","matchCriteriaId":"686E1C6D-CDE6-4615-B983-3BCDDDE921AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6e:*:*:*:*:*:*:*","matchCriteriaId":"6545867A-07ED-4E16-AED0-566C5CCD46FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.1337:*:*:*:*:*:*:*","matchCriteriaId":"053BE4FF-4699-42E8-B480-DA2224EC2BDE"}]}]}],"references":[{"url":"http://secunia.com/advisories/29503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29800","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"cve@mitre.org"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28903","source":"cve@mitre.org"},{"url":"http://www.videolan.org/developers/vlc/NEWS","source":"cve@mitre.org"},{"url":"http://www.videolan.org/security/sa0803.php","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/developers/vlc/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa0803.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1769","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption."},{"lang":"es","value":"VLC versions anteriores a la 0.8.6f, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un Cinepak manipulado que dispara un acceso a array fuera de límite y una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99:*:*:*:*:*:*:*","matchCriteriaId":"929E49D1-B8F6-4A25-A93F-D8211520ED61"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99a:*:*:*:*:*:*:*","matchCriteriaId":"B61BB1FD-6D2A-42EA-9824-9A8FD728B4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99b:*:*:*:*:*:*:*","matchCriteriaId":"76DDF802-26C2-437E-BB01-F01209FFE0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99c:*:*:*:*:*:*:*","matchCriteriaId":"546BAE28-5B2A-4856-8B2A-316D9AD2F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99d:*:*:*:*:*:*:*","matchCriteriaId":"56926B35-987F-4C12-9FBC-61BF7CEE1541"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99e:*:*:*:*:*:*:*","matchCriteriaId":"2D8FAE03-C528-4BAD-823E-EEEC4368113D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99f:*:*:*:*:*:*:*","matchCriteriaId":"1C5B604B-5A7A-450A-8252-60FDCB114283"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99g:*:*:*:*:*:*:*","matchCriteriaId":"78FCD5D6-A4A9-48CD-BD0E-296FD1032907"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99h:*:*:*:*:*:*:*","matchCriteriaId":"5624A925-C0D8-4E85-9B32-085BB9059FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.1.99i:*:*:*:*:*:*:*","matchCriteriaId":"28E35B1D-3191-4E18-B265-ACA736A87645"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"60FCBA5D-568F-424B-BFB1-1BA41DB0D6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.50:*:*:*:*:*:*:*","matchCriteriaId":"656BBC4D-8569-4A91-87DF-93D053BEEC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.60:*:*:*:*:*:*:*","matchCriteriaId":"0C9C7B19-59F4-43FB-8122-AAD36ABDF807"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.61:*:*:*:*:*:*:*","matchCriteriaId":"6E2DB4C0-CCEE-40D6-B227-E00A002D755B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.62:*:*:*:*:*:*:*","matchCriteriaId":"01BE9872-10B5-466E-BEE4-69B6451076C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.63:*:*:*:*:*:*:*","matchCriteriaId":"C6125D6E-6416-49E8-8770-5C0590F3FA0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.70:*:*:*:*:*:*:*","matchCriteriaId":"27122F7C-1D19-41D8-B323-A6941D0DE193"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.71:*:*:*:*:*:*:*","matchCriteriaId":"6068DB81-542B-43F0-9B42-CEA7689F61D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.72:*:*:*:*:*:*:*","matchCriteriaId":"A009555D-CC59-4C6A-B350-E7F4730F5B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.73:*:*:*:*:*:*:*","matchCriteriaId":"3299D365-015F-4A95-80C3-977853E70E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.80:*:*:*:*:*:*:*","matchCriteriaId":"47EC751E-FB47-4263-B9ED-FBBAAEA677F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.81:*:*:*:*:*:*:*","matchCriteriaId":"5BA7C125-989A-4727-9E59-44ACC1750E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.82:*:*:*:*:*:*:*","matchCriteriaId":"BC105DEB-DE1F-4183-8A4A-F7E58FBB82C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.83:*:*:*:*:*:*:*","matchCriteriaId":"521F12A2-7785-48C9-BB11-E91CEF61584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.90:*:*:*:*:*:*:*","matchCriteriaId":"25A412BA-A195-4893-B5F8-EE6FC9A53326"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.91:*:*:*:*:*:*:*","matchCriteriaId":"A6ADA95A-A8B2-4E3E-A3E4-AEA03B14C339"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.2.92:*:*:*:*:*:*:*","matchCriteriaId":"F7823310-E6C2-42D6-A0CC-8D2A0CA5EB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBE2DF23-1CF5-4371-82EF-7072B0FCC226"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2F706E26-E58D-4B5C-98AC-A386BF7ABC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E19F3E58-0D65-45AF-8024-E3A7CFD05142"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4B24956D-A924-40BC-A340-3BE9DD3CCBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F94AC83A-6790-4E26-A4B8-E2B4394CB3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"DD6F543A-8520-4F13-9C03-9520A6B92944"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.3_ac3:*:*:*:*:*:*:*","matchCriteriaId":"F3991F10-CFC4-4979-B5D4-F9EFB9992683"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"01FC4A5C-5A0A-40CF-891B-97443CC4A367"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6656C05D-4A4B-47DE-9844-308FD98CFF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8CBF1B20-1478-472C-B9A1-974A7A5333C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C29EDDF9-DE90-4AA7-8454-D42B4C37ECF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"02AF1C9A-FD6F-4CA4-8275-8B7655F861F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B56B15F-7504-4D55-8C31-1C28F1A8129D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6C6BB497-20F6-4CCB-A24E-7228BE68CA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2855B3-D0ED-4C8E-95A0-151E88F95057"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"56B90DCE-2EA9-49AA-9F63-0515C751E821"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"34C4F8C4-EEA4-4369-BBC8-C726059C8852"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2821324-7A44-40CD-95B8-F4B5B09E6D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4A98AC34-2FAB-4CAE-9D14-B4E11CC2AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"347E213C-83AF-4F98-8096-2113E00C1BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"6A26753D-44F2-49F6-8486-1DD61297C037"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"67C2B1C1-1606-411D-A9CA-D1A654FD4133"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28BBBBAF-71F7-4F47-ADE6-FF7B590832E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"5AC67A7B-21E0-45DA-A70F-EE97079140A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.4a:*:*:*:*:*:*:*","matchCriteriaId":"1062EB82-2A6C-4770-A339-21686FF9E923"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FEA7ECBE-1CAE-47C5-ACC1-F7BBA3946CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"50A23534-3DF7-422A-B997-1FB16D8564C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6a:*:*:*:*:*:*:*","matchCriteriaId":"9E85F765-D2DF-41C0-A90F-732861CA32F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6b:*:*:*:*:*:*:*","matchCriteriaId":"26981B0C-6A7E-40BA-8F50-0C19870258FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"89FAFEE4-35FE-44BE-90DD-1E067A1A2AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6d:*:*:*:*:*:*:*","matchCriteriaId":"686E1C6D-CDE6-4615-B983-3BCDDDE921AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6e:*:*:*:*:*:*:*","matchCriteriaId":"6545867A-07ED-4E16-AED0-566C5CCD46FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.1337:*:*:*:*:*:*:*","matchCriteriaId":"053BE4FF-4699-42E8-B480-DA2224EC2BDE"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=214627#c3","source":"cve@mitre.org"},{"url":"http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit%3Bh=cf489d7bff3c1b36b2d5501ecf21129c78104d98","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29800","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"cve@mitre.org"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28904","source":"cve@mitre.org"},{"url":"http://www.videolan.org/developers/vlc/NEWS","source":"cve@mitre.org"},{"url":"http://www.videolan.org/security/sa0803.php","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14445","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=214627#c3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit%3Bh=cf489d7bff3c1b36b2d5501ecf21129c78104d98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/developers/vlc/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa0803.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1770","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en el control ActiveX  Akamai Download Manager anteriores a la 2.2.3.6, permite a atacantes remotos forzar la descarga y ejecución de archivos arbitrariamente a través de un parámetro URL que contiene un LF codificado seguido de una línea de destino maliciosa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akamai:download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3.5","matchCriteriaId":"C60F1985-680C-4D84-88D3-7B4B7AA29592"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai:download_manager:2.0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"99E30ADC-EF45-4A12-90C6-1C52DD3EAB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai:download_manager:2.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"878614A8-0763-4F95-B3C9-471AA87C3DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai:download_manager:2.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"78484E1E-AF53-4A7C-BFBE-1B21EDE580ED"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062672.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30537","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493077/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493142/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020194","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1746/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42879","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5741","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062672.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493077/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493142/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1746/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1771","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length."},{"lang":"es","value":"Desbordamiento de entero en la función ws_getpostvars de Firefly Media Server (anteriormente mt-daapd) 0.2.4.1 (0.9~r1696-1.2 en Debian) permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de una petición HTTP POST con una Content-Length (longitud de contenido) grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fireflymediaserver:fireflymediaserver:0.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F87868B0-AF9F-4BE6-84A5-8D4B5316744E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476241","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29919","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30661","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=593465&group_id=98211","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1597","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28860","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019908","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1303/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41850","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00446.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=593465&group_id=98211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1303/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00446.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1772","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"iScripts SocialWare almacena contraseñas en claro en la base de datos, lo cual permite a atacantes dependientes del contexto obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iscripts:socialware:*:*:*:*:*:*:*:*","matchCriteriaId":"6D73C65C-89FF-483A-AB91-4F8522599DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44326","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41812","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5402","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1773","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto de includes/header.inc.php i en Dragoon 0.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dragoon:dragoon:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1937DE60-2E9D-4F3C-96F3-57C4245BB047"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28660","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41680","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1774","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en editlink.php de Pligg 9.9.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"3F03AA4B-59E5-464A-9F9E-954B6DCCC4DA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28681","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1164/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41709","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5406","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1164/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1775","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en mindex.do de ManageEngine Firewall Analyzer 4.0.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro displayName. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:firewall_analyzer:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"18BA60CF-9D0C-43B0-9DAB-EDB2ED2F6434"}]}]}],"references":[{"url":"http://secunia.com/advisories/29632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28604","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1776","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en in modules/basicfog/basicfogfactory.class.php de PhpBlock A8.4, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro PATH_TO_CODE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpblock:phpblock:a8.4:*:*:*:*:*:*:*","matchCriteriaId":"96826432-3450-4446-9F8D-DCE80C77BBD2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41616","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5348","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1777","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028."},{"lang":"es","value":"El servicio eDirectory Host Environment (dhost.exe) de Novell eDirectory 8.8.2 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través una petición http HEAD larga al puerto TCP  8028."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/novel-edir.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019783","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/novel-edir.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1778","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación de conmutación de contexto de punto flotante en Sun Solaris 9 y 10 en plataformas x86, podría permitir a usuarios locales provocar una denegación de servicio (salida de aplicación), corrupción de datos, o dispararía calculos incorrectos a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29728","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233921-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28733","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019833","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1193/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41765","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4950","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-233921-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1193/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1779","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Solaris 8, 9, and 10 allows \"remote privileged\" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets."},{"lang":"es","value":"Sun Solaris 8, 9 y 10 permite usuarios con \"privilegios remotos\" provocar una denegación de servicio (pánico), mediante vectores desconocidos relacionados con los paquetes IP autoencapsulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29817","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235901-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-173.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28732","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019831","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1192/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1325/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41762","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235901-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-173.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1192/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1325/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1780","sourceIdentifier":"cve@mitre.org","published":"2008-04-14T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la funcionalidad etiquetada de trabajo en red de Solaris 10 Trusted Extensions permite a aplicaciones en zonas etiquetadas separadas evitar las restricciones de etiquetas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235421-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28734","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019832","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1194/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41764","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235421-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1194/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1781","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T16:05:00.000","lastModified":"2023-11-07T02:02:04.000","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its requester.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-1782","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter."},{"lang":"es","value":"phpdemo/viewsource.php en Advanced Software Engineering ChartDirector 4.1 permite a atacantes remotos leer ficheros sensibles a través del parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advanced_software_engineering:chartdirector:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F9FFE0-EDAE-4805-BEE4-9DBFA31FC987"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1140/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41701","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5399","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1140/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1783","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php."},{"lang":"es","value":"Prozilla Reviews 1.0 permite a atacantes remotos borrar usuarios de su elección a través de un parámetro UserID modificado en una petición directa a siteadmin/DeleteUser.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:reviews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA41507-1DFE-4BE8-B8C0-16DDDA6E86EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28642","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1118/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41678","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5387","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1118/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1784","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in siteadmin/."},{"lang":"es","value":"Prozilla Topsites 1.0 permite a atacantes remotos llevar a cabo acciones administrativas a través de una petición directa a (1) addu.php, (2) editu.php, y (3) uidx.php en siteadmin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:topsites:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D82FB564-BA39-4AE1-BAAE-11EA4FC8F64A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28641","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41679","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1785","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter."},{"lang":"es","value":"delete.php in Prozilla Top 100 1.2 permite a usuarios remotos autenticados borrar estadísticas y cuentas de usuarios de su elección a través de un parámetro modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:top_100:1.2:*:*:*:*:*:*:*","matchCriteriaId":"09B6D839-5CED-4EEA-B2E6-FEDE504FF42C"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1119/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41674","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5384","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1119/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1786","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments."},{"lang":"es","value":"El control ActiveX DSM gui_cm_ctrls (archivo gui_cm_ctrls.ocx), tal y como es usado en distintos productos de CA, incluyendo a BrightStor ARCServe Backup for Laptops and Desktops versión r11.5, Desktop Management Suite versiones r11.1 hasta r11.2 C2; Unicenter versiones r11.1 hasta r11.2 C2; y Desktop and Server Management versiones r11.1 hasta r11.2 C2, permite a los atacantes remotos ejecutar código arbitrario por medio de argumentos de función diseñados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:arcserve_backup_laptops_and_desktops:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"06109720-7926-4FC2-929B-0F16B1831739"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_and_server_management:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A9801DB-E3D2-4314-B48B-8F127D4C6F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_and_server_management:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"C32D19ED-1EF0-4B66-8130-DA801BE7F34B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_and_server_management:r11.2a:*:*:*:*:*:*:*","matchCriteriaId":"943AFBAF-83DC-4A3B-B2E1-ACE6FF49F1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_and_server_management:r11.2c1:*:*:*:*:*:*:*","matchCriteriaId":"136D746D-573D-49AC-BD5C-5900021E276E"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_and_server_management:r11.2c2:*:*:*:*:*:*:*","matchCriteriaId":"33B72C35-13CA-4709-852E-929929FA1B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"CEBE5366-CEDA-4CF2-9625-13E9D9E93B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.2a:*:*:*:*:*:*:*","matchCriteriaId":"24E406D9-A850-4583-8A00-54DA578F6EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.2c1:*:*:*:*:*:*:*","matchCriteriaId":"C126FF95-7341-4B14-88B9-38163D98DF1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:desktop_management_suite:r11.2c2:*:*:*:*:*:*:*","matchCriteriaId":"F58E3FBB-B807-4D15-8D73-94496B0749AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_asset_management:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"404081A2-644D-4F4A-9BEE-6EE3A7BB2BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_asset_management:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"24503C4D-24BF-4EF3-A2F7-41958D02C7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_asset_management:r11.2a:*:*:*:*:*:*:*","matchCriteriaId":"04A5D3AF-997D-4F7E-B12E-442B42D38145"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_asset_management:r11.2c1:*:*:*:*:*:*:*","matchCriteriaId":"809DB7E2-023F-491E-933F-3C47197EF2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_asset_management:r11.2c2:*:*:*:*:*:*:*","matchCriteriaId":"37B1BD20-8F53-462E-A0B2-53185C49D63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_desktop_management_bundle:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"FC37EE01-FEAA-418B-B2D0-8793E823D9DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_desktop_management_bundle:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"229BB2F0-BA44-423B-B232-3B50C55F2E4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_desktop_management_bundle:r11.2a:*:*:*:*:*:*:*","matchCriteriaId":"B3833EBA-F8CC-4E39-92D5-20EA31F5DF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_desktop_management_bundle:r11.2c1:*:*:*:*:*:*:*","matchCriteriaId":"E9539E19-223C-4AA3-ADC8-F3606336816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_desktop_management_bundle:r11.2c2:*:*:*:*:*:*:*","matchCriteriaId":"3FFEBDA7-6A58-4E3B-B58B-424BD7E07C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_remote_control:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"F192DA2C-FAEC-4D77-A32C-7513EA053305"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_remote_control:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"757EFDA2-F229-461C-9256-1A7F31A2AC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_remote_control:r11.2a:*:*:*:*:*:*:*","matchCriteriaId":"D4C36FD1-EFC8-446D-B32B-6DCA094DCCA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_remote_control:r11.2c1:*:*:*:*:*:*:*","matchCriteriaId":"44782D0F-435C-43DB-AEE8-4926803A530E"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_remote_control:r11.2c2:*:*:*:*:*:*:*","matchCriteriaId":"1947D61C-B414-437B-99FF-B1D8627AAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_software_delivery:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"8B1ECC98-9A72-4E2C-81AD-35BE9700E589"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_software_delivery:r11.2:*:*:*:*:*:*:*","matchCriteriaId":"AEF6F1F5-3D50-4B45-A9D6-823771F32B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_software_delivery:r11.2a:*:*:*:*:*:*:*","matchCriteriaId":"8E1D0238-CE36-4F1B-BE87-3D15962D2DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_software_delivery:r11.2c1:*:*:*:*:*:*:*","matchCriteriaId":"7297A385-2C85-43E8-BFB0-F4B173B525FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:unicenter_software_delivery:r11.2c2:*:*:*:*:*:*:*","matchCriteriaId":"8FC3FF2E-1226-47E8-B5BE-B511A0EB9457"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerability.aspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29837","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/684883","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/490959/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28809","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019872","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1249/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41853","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerability.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/684883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/490959/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1249/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-1787","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) text and (2) ul parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en Poplar Gedcom Viewer 2.0 permiten a atacantes remotos inyectar web script o HTML de su elección a través de parámetros (1) text y (2) ul.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos sólamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poplar_gedcom_viewer:poplar_gedcom_viewer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"19961032-A339-4170-A4FE-9BE2194379FF"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28608.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28608","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41689","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28608.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1788","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Prozilla Entertainers 1.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat.\r\nNOTA: alguno de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:entertainers:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51003F63-6F5A-4B3F-83F0-966EC805EE66"}]}]}],"references":[{"url":"http://secunia.com/advisories/29715","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5371","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1789","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum.php de Prozilla Forum permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro forum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:forum:*:*:*:*:*:*:*:*","matchCriteriaId":"F7BA84A1-FF75-4EA1-857E-D97840CB770F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28643","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41702","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5385","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1790","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the \"Manage Settings\" functionality.  NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros no restringidos en iScripts SocialWare permite a administradores remotos autenticados subir ficheros de su elección a través de un fichero logo manipulado en la funcionalidad \"Manage Settings\". \r\nNOTA: explotación remota es facilitada por una vulnerabilidad de inyección SQL aparte.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iscripts:socialware:*:*:*:*:*:*:*:*","matchCriteriaId":"6D73C65C-89FF-483A-AB91-4F8522599DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44327","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28670","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1137/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41751","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5402","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1137/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1791","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ladder.php de My Gaming Ladder 7.5 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ladderid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mygamingladder:mygamingladder:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"2B228647-4CD5-4376-8B83-140B6D1277D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mygamingladder:mygamingladder:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"0FB1DE1F-4729-48E7-A3D8-E4DAB8C1E346"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28671","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1138/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5401","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1138/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1792","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la insercción de filtros del módulo Flickr Drupal 5.x versiones anteriores a 5.x-1.3 y 6.x versiones anteriores a 6.x-1.0-alpha permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupalr:flickr:5.x-0.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"A3DDA2C5-E375-4D1B-A77C-3C6AC3CA85B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupalr:flickr:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"428C00AC-F002-437F-AE48-9AD80736D1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupalr:flickr:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"2A707077-29CF-4C18-A1EC-E1A9FAD2E2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupalr:flickr:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"BC512201-8791-488A-9CFD-10994D754EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupalr:flickr:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"562C6942-42DD-475B-AC82-0CAB6429F5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupalr:flickr:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A91C7019-8698-41C8-88DA-99BE98AAD210"}]}]}],"references":[{"url":"http://drupal.org/node/241939","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29658","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28594","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1082/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41603","source":"cve@mitre.org"},{"url":"http://drupal.org/node/241939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1082/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1793","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en view.cgi de Smart Classified ADS Professional, Smart Photo ADS, y Smart Photo ADS Gold permiten a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) AdNum y (2) Department.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos sólamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hoffice:smart_classified_ads:*:*:professional:*:*:*:*:*","matchCriteriaId":"FD4ECB25-107F-42ED-B54F-B6C813496CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hoffice:smart_photo_ads:*:*:*:*:*:*:*:*","matchCriteriaId":"7293F80F-7FEC-4D1D-97DF-7681B426BAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hoffice:smart_photo_ads_gold:*:*:*:*:*:*:*:*","matchCriteriaId":"55458735-4AA7-4C12-AB6B-0FCED0A95A95"}]}]}],"references":[{"url":"http://secunia.com/advisories/29623","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28595","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41611","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1794","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo Webform Drupal 5.x versiones anteriores a 5.x-1.10, 5.x-2.x versiones anteriores a 5.x-2.0-beta3, y 6.x versiones anteriores a 6.x-1.0-beta3 permiten a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"760C8FA6-0E5F-4541-B2EE-220DA87BFA6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A4B7031E-2A2C-4A13-9F02-E900DFCF513A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"2213BFE0-4424-45EC-8EE0-07AD431EB208"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"6504B211-A1DD-434F-9867-962F3D5AB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"65060546-8210-4325-AE5E-38B007B4A178"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"BBAAB0FB-F042-4EC5-A2BC-030A2F092304"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"6A65D84B-A0AF-414B-ACBF-E1F40836439E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"00ADDC1F-C4D8-42A0-921B-C2C629CB6D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"5040F0CC-5B97-4D46-8D77-DE30B3DA8263"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"F8FFC532-C472-41CA-96BF-3E63CFF26584"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E5D48B23-6FCB-47B8-A38C-2249E99831B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:5.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"855873B4-99FA-4C04-826D-FD56F657FCB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:webform_module:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"AABC2E96-4649-4778-B577-185CBD323099"}]}]}],"references":[{"url":"http://drupal.org/node/242053","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28597","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1081/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41617","source":"cve@mitre.org"},{"url":"http://drupal.org/node/242053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1081/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1795","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via (1) the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or (2) the data__announcements___pk1_pk2__subject parameter in an ADD action to bin/common/announcement.pl."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Blackboard Academic Suite 7.x y versiones anteriores, y posiblemente algunas versiones 8.0, permiten a atacantes remotos inyectar web script o HTML de su elección a través de (1) el parámetro searchText en una acción Course de webapps/blackboard/execute/viewCatalog o (2) el parámetro data__announcements___pk1_pk2__subject en una acción ADD de bin/common/announcement.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:academic_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"7","matchCriteriaId":"68674833-D34A-4425-B452-527FE27DA575"}]}]}],"references":[{"url":"http://secskill.wordpress.com/2008/03/27/hacking-blackboard-academic-suite-2/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3810","source":"cve@mitre.org"},{"url":"http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490096/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28455","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019710","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41478","source":"cve@mitre.org"},{"url":"http://secskill.wordpress.com/2008/03/27/hacking-blackboard-academic-suite-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490096/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1796","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service."},{"lang":"es","value":"Comix 3.6.4 crea directorios temporales con nombres previsibles, lo cual permite a usuarios locales provocar una denegación de servicio no especificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"EE2027FA-357A-4BE3-9043-6DE8307C040A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comix:comix:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"170E6C1D-73AC-4EA4-AA6B-2542090630E7"}]}]}],"references":[{"url":"http://secunia.com/advisories/29956","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-29.xml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41854","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1797","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service (freeze) via a crafted URL."},{"lang":"es","value":"Vulnerabilidad no especificada en Secure Computing Webwasher 5.30 versiones anteriores a Build 3159 y 6.3.0 versiones anteriores a Build 3150 permite a atacantes remotos provocar una denegación de servicio (congelación) a través de una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:secure_computing:webwasher:*:*:*:*:*:*:*:*","versionEndIncluding":"5.30","matchCriteriaId":"336CA103-5227-4D54-84DC-ABA961AAF676"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_computing:webwasher:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.0","matchCriteriaId":"6520582A-44C8-4BEE-842D-CA5343514059"}]}]}],"references":[{"url":"http://secunia.com/advisories/29674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3811","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490406/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28600","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41620","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490406/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1798","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cal[lng] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en forum/kietu/libs/calendrier.php de Dragoon 0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro cal[lng]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dragoon:dragoon:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1937DE60-2E9D-4F3C-96F3-57C4245BB047"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28638","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41669","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5369","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1799","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en thumbnails.php de sabros.us 1.75 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro img."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sabros.us:sabros.us:1.75:*:*:*:*:*:*:*","matchCriteriaId":"43D731C5-BC39-4E62-B862-724042937C76"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28623","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41672","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5360","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1800","sourceIdentifier":"cve@mitre.org","published":"2008-04-15T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1) choice, (2) _page_, (3) zone_admin, (4) general_search, and (5) import parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php de DivXDB 2002 0.94b permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) choice, (2) _page_, (3) zone_admin, (4) general_search, y (5) import.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos sólamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divxdb:0.94b:2002:*:*:*:*:*:*","matchCriteriaId":"6220AB16-41F2-49B5-BD35-B78D2E5379F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41634","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1801","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field."},{"lang":"es","value":"Desbordamiento inferior de entero en la función iso_recv_msg (iso.c) de rdesktop 1.5.0 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una petición Remote Desktop Protocol (RDP) (Protocolo de Escritorio Remoto) con un campo de longitud pequeño."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rdesktop:rdesktop:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3B97D70B-2614-4EDB-A74E-217E42076C66"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696","source":"cve@mitre.org"},{"url":"http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEAD","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30118","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31224","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31928","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-04.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1573","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:101","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0575.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0576.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0725.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29097","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019990","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-646-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1467/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42272","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11570","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5561","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0575.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0576.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0725.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-646-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1467/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1802","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields."},{"lang":"es","value":"Desbordamiento de búfer en la función process_redirect_pdu (rdp.c) de rdesktop 1.5.0 permite a atacantes remotos ejecutar código de su elección mediante una petición de redireccionamiento Remote Desktop Protocol (RDP) (Protocolo de Escritorio Remoto) con campos de longitud modificados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of rdesktop as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-06-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rdesktop:rdesktop:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3B97D70B-2614-4EDB-A74E-217E42076C66"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697","source":"cve@mitre.org"},{"url":"http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdp.c?r1=1.101&r2=1.102&pathrev=HEAD","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30118","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31928","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1573","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:101","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29097","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019991","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-646-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1467/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42275","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5585","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdp.c?r1=1.101&r2=1.102&pathrev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-646-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1467/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1803","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow.  NOTE: the role of the channel_process function was not specified by the original researcher."},{"lang":"es","value":"Un error en la propiedad signedness de enteros en la función xrealloc (archivo rdesktop.c) en RDesktop versión 1.5.0,  permite a atacantes remotos ejecutar código arbitrario por medio de parámetros desconocidos que desencadenan un desbordamiento en la región heap de la memoria. NOTA: el rol de la función channel_process no fue especificado por el investigador original."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rdesktop:rdesktop:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3B97D70B-2614-4EDB-A74E-217E42076C66"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=698","source":"cve@mitre.org"},{"url":"http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdesktop.c?r1=1.161&r2=1.162&pathrev=HEAD","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-04.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20080511065217.GA24455%40cse.unsw.EDU.AU","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1573","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:101","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0575.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29097","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019992","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-646-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1467/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2403","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42277","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9800","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/rdesktop.c?r1=1.161&r2=1.162&pathrev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20080511065217.GA24455%40cse.unsw.EDU.AU","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-360.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0575.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-646-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1467/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1804","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment."},{"lang":"es","value":"preprocessors/spp_frag3.c en Sourcefire Snort before 2.8.1 no identifica adecuadamente los fragmentos de paquetes que tienen valores TTL distintos, esto permite a atacantes remotos evitar las reglas de detección usando un paquete TTL para cada fragmento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.0","matchCriteriaId":"41A284AF-58E7-43A2-85E1-2D26C90E6C8E"}]}]}],"references":[{"url":"http://cvs.snort.org/viewcvs.cgi/snort/ChangeLog?rev=1.534.2.11","source":"cve@mitre.org"},{"url":"http://cvs.snort.org/viewcvs.cgi/snort/src/preprocessors/spp_frag3.c.diff?r1=text&tr1=1.46.2.4&r2=text&tr2=1.46.2.5&diff_format=h","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=701","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30563","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31204","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020081","source":"cve@mitre.org"},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29327","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1602","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42584","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00156.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00167.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00198.html","source":"cve@mitre.org"},{"url":"http://cvs.snort.org/viewcvs.cgi/snort/ChangeLog?rev=1.534.2.11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.snort.org/viewcvs.cgi/snort/src/preprocessors/spp_frag3.c.diff?r1=text&tr1=1.46.2.4&r2=text&tr2=1.46.2.5&diff_format=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=40","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1805","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en Skype 3.6.0.248 y otras versiones anteriores a 3.8.0.139; permite a atacantes remotos con la ayuda del usuario evitar los diálogos de aviso y posibilita la ejecución de código de su elección  a través de un archivo: URI que finaliza en una extensión ejecutable que no está incluida en la lista negra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.0.115","matchCriteriaId":"9AF92A12-1646-4C60-8EF0-EE32FFD0AB65"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.106:beta:*:*:*:*:*:*","matchCriteriaId":"299E4795-0202-42D5-83A9-6CEE9063A556"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.123:beta:*:*:*:*:*:*","matchCriteriaId":"D8EB8746-D7A3-4393-A765-23B44432F10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.137:beta:*:*:*:*:*:*","matchCriteriaId":"051A0E63-C02E-4FB4-9A7E-F4AD46782272"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.154:beta:*:*:*:*:*:*","matchCriteriaId":"76F03F89-83E6-4558-8675-83A8CD691D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.190:*:*:*:*:*:*:*","matchCriteriaId":"12E90F91-50CB-422D-8535-2B52275484DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.198:*:*:*:*:*:*:*","matchCriteriaId":"952D150E-46C0-454D-A3D9-7DD19A255366"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.205:*:*:*:*:*:*:*","matchCriteriaId":"78886104-B6C1-4855-97B6-D2F59583DDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.209:*:*:*:*:*:*:*","matchCriteriaId":"B8F77926-096E-4F67-8818-2C089356F328"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.214:*:*:*:*:*:*:*","matchCriteriaId":"AE9B5B52-2513-4D8A-A3A7-BDE5F1B7A979"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.216:*:*:*:*:*:*:*","matchCriteriaId":"6E1FB0E2-E124-45B2-9209-97699BC431E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.217:*:*:*:*:*:*:*","matchCriteriaId":"D93968CE-9479-4EEE-B972-A6E375F9C0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.218:*:*:*:*:*:*:*","matchCriteriaId":"EB65C69E-5B05-4BDC-86F1-9DC0306D6EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.112:beta:*:*:*:*:*:*","matchCriteriaId":"05A80FAC-2E2B-4733-A0C2-B18332274C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.134:beta:*:*:*:*:*:*","matchCriteriaId":"881122D2-80E8-4414-AF69-505A0FE22246"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.144:*:*:*:*:*:*:*","matchCriteriaId":"76299BE8-B49E-4FA9-87DF-835CB0DCEF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.147:*:*:*:*:*:*:*","matchCriteriaId":"DFC6A6C1-0C22-42C4-A935-A7A87DD87025"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.150:*:*:*:*:*:*:*","matchCriteriaId":"1DFDCC89-F71C-4D0E-B0E6-1590FE95B8AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.152:*:*:*:*:*:*:*","matchCriteriaId":"6818B6E0-8076-41BA-A754-92E3601DD042"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.53:beta:*:*:*:*:*:*","matchCriteriaId":"ADCD5ECD-1B01-4F68-B2A7-8EB9CCA5B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.63:beta:*:*:*:*:*:*","matchCriteriaId":"F3D08B9A-BF09-4903-A322-3E578FB09284"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.82:beta:*:*:*:*:*:*","matchCriteriaId":"6938D9C6-8254-4AAF-9332-39088AC1C027"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.115:beta:*:*:*:*:*:*","matchCriteriaId":"2EF81382-A61A-4A48-9251-FBAA076B7149"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.145:*:*:*:*:*:*:*","matchCriteriaId":"57EA3CE4-F19D-46DD-A3BA-4AAE0B19CC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.148:*:*:*:*:*:*:*","matchCriteriaId":"2542EED5-83A3-496C-8A8B-D85A31814AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.152:*:*:*:*:*:*:*","matchCriteriaId":"E69AEBB5-0571-4AB8-8DB7-E7C9D98CDC0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.158:*:*:*:*:*:*:*","matchCriteriaId":"CFA1F1F0-D394-40BD-B88C-CA7D095C6130"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.163:*:*:*:*:*:*:*","matchCriteriaId":"61FC737C-EBB2-4B85-8A50-DC12B4C3CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.175:*:*:*:*:*:*:*","matchCriteriaId":"3761EF03-CAA9-4B7B-A4A6-2D9BCF51273D"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.107:beta:*:*:*:*:*:*","matchCriteriaId":"55FAFD26-50E2-426A-8AB4-710592C4DAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.158:beta:*:*:*:*:*:*","matchCriteriaId":"15CA94B8-692A-4A05-8AA5-AD8C59C73868"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.178:beta:*:*:*:*:*:*","matchCriteriaId":"9191D269-3F5D-4F49-A12C-5E87A545C6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.202:*:*:*:*:*:*:*","matchCriteriaId":"6D1AA43F-6A09-4D8C-A766-7224EDB0D8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.214:*:*:*:*:*:*:*","matchCriteriaId":"5B285100-B72C-46AD-A765-F051E50508A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.229:*:*:*:*:*:*:*","matchCriteriaId":"4C564D31-1BFE-49B6-9F17-0DD1E6DF75F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.234:*:*:*:*:*:*:*","matchCriteriaId":"FE08B27C-D397-4B16-BD1C-887FEFEFF78B"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.239:*:*:*:*:*:*:*","matchCriteriaId":"F7AE9DCD-577F-4F91-A193-28E56573D4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.127:beta:*:*:*:*:*:*","matchCriteriaId":"4FF70951-D17A-48E0-95D7-29F8284E5339"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.159:beta:*:*:*:*:*:*","matchCriteriaId":"6B020197-18F2-44B9-AFE8-7D7759FF8344"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.216:*:*:*:*:*:*:*","matchCriteriaId":"AC0CF569-D829-4230-BECB-E9EA2BC4F0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.244:*:*:*:*:*:*:*","matchCriteriaId":"95648140-386E-4D8B-BE7E-9542333F0A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.248:*:*:*:*:*:*:*","matchCriteriaId":"0DD8EA54-6762-4411-9146-82F7D780FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.8.0.96:beta:*:*:*:*:*:*","matchCriteriaId":"BB7841CC-B54C-4EDC-B17A-A2DD97F01476"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29553","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020201","source":"cve@mitre.org"},{"url":"http://www.skype.com/security/skype-sb-2008-003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1749/references","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.skype.com/security/skype-sb-2008-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1749/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1806","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en FreeType2 anterior a 2.3.6, permite a atacantes dependientes del contexto ejecutar código arbitrario a través de un set de valores manipulados de un tamaño 16-bit  dentro de la tabla de diccionario Private en un archivo Printer Font Binary (PFB), lo que provoca un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020238","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29640","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1807","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid \"number of axes\" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption."},{"lang":"es","value":"FreeType2 versiones anteriores a 2.3.6 permite a atacantes dependientes de contexto ejecutar código de su elección a través de un campo \"número de axes\" inválido en un fichero Printer Font Binary (PFB), lo cual dispara una liberación de localizaciones de memoria de su elección, provocando corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020239","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29641","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1808","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Múltiples errores de superación de límite (off-by-one) en FreeType2 antes de 2.3.6 permite a atacantes dependientes del contexto ejecutar código arbitrario mediante (1) una tabla manipulada en un archivo Printer Font Binary (PFB) o (2) una instrucción SHC manipulada en un archivo TrueType Font (TTF), lo que dispara un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35204","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020240","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29637","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29639","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11188","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1809","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing \"NULL search parameters.\""},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Novell eDirectory 8.7.3 anterior a 8.7.3.10b, y 8.8 anterior a 8.8.2 FTF2, permite a atacantes remotos ejecutar código de su elección mediante una solicitud de búsqueda LDAP que contenga \"parámetros de búsqueda nulos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31036","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3843876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30175","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020470","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2062/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43716","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3843876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2062/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1810","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable."},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en dbmsrv en SAP MaxDB 7.6.03.15 sobre Linux. Permite a usuarios locales elevar sus privilegios a través de una variable de entorno PATH modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:maxdb:7.6.03.15:*:*:*:*:*:*:*","matchCriteriaId":"4AA3A766-8E99-4CD8-B6EA-A360DE2AA832"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30474","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020585","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44125","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1811","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that APEX01 is for insufficient authorization checks for SQL commands in the run_ddl function in flows_030000.wwv_execute_immediate, allowing privilege escalation by certain non-DBA remote authenticated users."},{"lang":"es","value":"Una vulnerabilidad no especificada en Oracle Application Express versión 3.0.1, presenta un impacto no especificado y vectores de ataque autenticados remotos relacionados con flows_030000.wwv_execute_immediate, también se conoce como APEX01. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. Oracle no ha comentado sobre las afirmaciones de investigadores confiables que APEX01 está por comprobaciones de autorización insuficientes para comandos SQL en la función run_ddl en flows_030000.wwv_execute_immediate, lo que permite una escalada de privilegios por parte de un determinado usuario autenticado remoto sin DBA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_express:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4FB978E6-BC59-4486-8341-3E98A5A91347"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=690","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41988","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1812","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Database 9.0.1.5 has unknown impact and local attack vectors, aka EM01."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Enterprise Manager en Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2 y Enterprise Manager para AS 1.0.2.2 y Database 9.0.1.5 tiene impacto y vectores de ataque locales desconocidos, también conocido como EM01."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.0.1.5:*:fips\\+:*:*:*:*:*","matchCriteriaId":"6C64DE7C-5A32-4C73-8A3D-4B646FB24D0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41989","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1813","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to (1) SYS.DBMS_AQ in the Advanced Queuing component, aka DB01; (2) Core RDBMS, aka DB03; (3) SDO_GEOM in Oracle Spatial, aka DB06; (4) Export, aka DB12; and (5) DBMS_STATS in Query Optimizer, aka DB13.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB06 is SQL injection, and DB13 occurs when the OUTLN account is reset to use a hard-coded password."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle Database versiones 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5 y 10.2.0.3, presentan un impacto desconocido y vectores de ataque remotos no autenticados o autenticados relacionados con (1) SYS. DBMS_AQ en el componente Advanced Queue Server, también se conoce como DB01; (2) Core RDBMS, también se conoce como DB03; (3) SDO_GEOM en Oracle Spatial, también se conoce como DB06; (4) Export, también se conoce como DB12; y (5) DBMS_STATS en el Query Optimizer , también se conoce como DB13. NOTA: la información anterior fue obtenida de la CPU de Oracle. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que DB06 es inyección SQL y DB13 se produce cuando se restablece la cuenta OUTLN para utilizar una contraseña embebida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CDBBD94E-B3C9-43F4-BFF5-D4E445B75585"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.red-database-security.com/advisory/oracle_outln_password_change.html","source":"cve@mitre.org"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_geom.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490919/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490950/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41991","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41992","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41994","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41995","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/oracle_outln_password_change.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_geom.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490919/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490950/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1814","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3 and 10.1.2.2; and Oracle Collaboration Suite 10.1.2; has unknown impact and remote attack vectors, aka DB04."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Secure Enterprise Search o Ultrasearch en Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5 y 10.2.0.3; Application Server 9.0.4.3 y 10.1.2.2 y Oracle Collaboration Suite 10.1.2; tiene impacto y vectores de ataque remotos desconocidos, también conocido como DB04."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:9.0.1.5:*:*:*:*:fips:*:*","matchCriteriaId":"11E341D3-EEE6-44AC-95B2-B27BB4172E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2A79241E-EDAB-4116-8590-D4EC347F8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"A3033B3C-17DC-41A4-B076-5F0B4CF35D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B547C059-4402-4A6D-9E08-02D7F6E2BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"46B45AF1-4C5A-45FF-BC5B-04328D3B89CB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41997","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1815","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that DB02 is for SQL injection in LOCK_CHANGE_SET."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Change Data Capture de Oracle Database versiones 10.1.0.5, 10.2.0.3 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque remotos autenticados relacionados con DBMS_CDC_UTILITY , también se conoce como DB02. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que DB02 es para inyección SQL en LOCK_CHANGE_SET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491522/30/390/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491522/30/390/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1816","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDO_UTIL in the Oracle Spatial component, aka DB05; or (2) fine grained auditing in the Audit component, aka DB14.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB05 is SQL injection."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle Database versiones 10.1.0.5 y 10.2.0.3, presenta un impacto desconocido y vectores de ataque remotos autenticados relacionados con (1) SDO_UTIL en el componente Oracle Spatial, también se conoce como DB05 ; o (2) auditoría detallada en el componente Audit, también se conoce como DB14. NOTA: la información anterior fue obtenida de la CPU de Oracle. Oracle no ha comentado sobre las afirmaciones de investigadores confiables que DB05 es inyección SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_util.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490918/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41999","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42000","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_util.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490918/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1817","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDO_IDX in the Spatial component, aka DB07; and (2) Core RDBMS, aka DB10.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB07 is SQL injection."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle Database versiones 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque remotos relacionados con (1) SDO_IDX en el componente Spatial, también se conoce como DB07; y (2) Core RDBMS, también se conoce como DB10. NOTA: la información anterior fue obtenida de la CPU de Oracle. Oracle no ha comentado sobre las afirmaciones de investigadores confiables que DB07 es inyección SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips:*:*:*:*:*","matchCriteriaId":"D86DC2E3-3B89-4FAC-9B8F-DC629B50ADC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_idx.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490920/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42002","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_idx.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490920/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1818","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Authentication en Oracle Database 11.1.0.6 tiene un impacto desconocido y vectores de ataque remotos, también conocido como DB08."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42031","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1819","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Net Services en Oracle Database 9.2.0.8, 10.1.0.5 y 10.2.0.3 tiene impacto y vectores de ataque locales desconocidos, también conocido como DB09."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42033","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1820","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Data Pump en Oracle Database versiones 9.2.0.8, 10.1.0.5, 10.2.0.3 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque remotos relacionados con KUPF$FILE_INT, también se conoce como DB11. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. Oracle no ha comentado sobre las afirmaciones de investigadores confiables que DB11 es para un desbordamiento de búfer en el procedimiento SYS. KUPF$FILE_INT. GET_FULL_FILENAME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491524/30/390/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42036","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491524/30/390/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1821","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and 10.1.0.5 has unknown impact and remote attack vectors related to SYS.DBMS_AQJMS_INTERNAL, aka DB15.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that DB15 is for multiple buffer overflows in the (1) AQ$_REGISTER and (2) AQ$_UNREGISTER procedures."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Advanced Queue Mena en Oracle Database versiones 9.0.1.5 FIPS+ y 10.1.0.5, presenta un impacto desconocido y vectores de ataque remotos relacionados con SYS.DBMS_AQJMS_INTERNAL, también se conoce como DB15. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. Oracle no ha comentado sobre las afirmaciones de investigadores seguros que DB15 es para desbordamientos de búfer múltiples en los procedimientos (1) AQ$_REGISTER y (2) AQ$_UNREGISTER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:fips\\+:*:*:*:*:*","matchCriteriaId":"E42BC5A5-C134-4C3F-968A-6BDEBE8110B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491521/30/390/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42037","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491521/30/390/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1822","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote attack vectors, aka APEX02."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Express en Oracle Application Express 3.0.1 tiene impacto y vectores de ataque remotos, también conocido como APEX02."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_express:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4FB978E6-BC59-4486-8341-3E98A5A91347"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42041","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1823","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"According to the vendor \" the impact of this vulnerability is limited to Jinitiator; there is no Oracle Application Server impact. Oracle Jinitiator versions 1.3.1.15 and later are not affected\".","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.14 has unknown impact and remote attack vectors, aka AS01."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Jinitiator en Oracle Application Server 1.3.1.14 tiene impacto y vectores de ataque remotos desconocidos, también conocido como AS01."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jinitiator:1.3.1.14:*:*:*:*:*:*:*","matchCriteriaId":"15CA4DED-A7B4-4712-B284-4E2D46B23D9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42045","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1824","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 has unknown impact and remote attack vectors, aka AS02."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Dynamic Monitoring Service de Oracle Application Server 9.0.4.3, 10.1.2.2, y 10.1.3.3 tiene un impacto desconocido y vectores de ataque remoto, también conocido como AS02."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A79FF0E1-4EEF-49E2-890C-1C8937CF2F5A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42050","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1825","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Portal en Oracle Application Server 9.0.4.3 tiene impacto y vectores de ataque remotos desconocidos, también conocido como AS03."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_9i:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6F6D1B99-8246-46F3-8078-C472DA29823A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42051","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1826","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and attack vectors related to (a) Advanced Pricing, aka (1) APP01 and (2) APP10; and (b) Applications Framework, aka (3) APP05."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.10.2 tiene impacto y vectores de ataque desconocidos relacionados con (a) Advanced Pricing, también conocido como (1) APP01 y (2) APP10 y (b) Applications Framework, también conocido como (3) APP05."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1827","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced Pricing component, aka (1) APP02, (2) APP03, and (3) APP09; (b) Application Object Library component, aka (4) APP04, (5) APP07, and (6) APP11; (c) Applications Manager component, aka (7) APP06; (d) and Applications Technology Stack component, aka (8) APP08."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.10.2 y 12.0.4 tienen un impacto desconocido y vectores de ataque relacionados a (a) el componente Advanced Pricing, también conocido como (1) APP02, (2) APP03, y (3) APP09; (b) el componente Application Object Library, también conocido como (4) APP04, (5) APP07, y (6) APP11; (c) el componente Applications Manager, también conocido com (7) APP06; (d) y el componente Applications Technology Stack, también conocido como (8) APP08."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_11i:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"D96B6EEE-0F84-4B16-B551-86A000338974"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_12:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"52A9B322-9825-46FD-BF95-736F4C19EFDA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42057","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42063","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1828","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente PeopleSoft PeopleTools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.22.19, 8.48.16, y 8.49.09, posee un impacto desconocido y vectores de ataque para autenticación remota, también conocido como PSE01."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.22.19:*:*:*:*:*:*:*","matchCriteriaId":"97BE9EAF-A338-4B64-9A04-3A63F0C01562"},{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.48.16:*:*:*:*:*:*:*","matchCriteriaId":"A6F5787C-F4E7-46E8-A79B-23823E408900"},{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.49.09:*:*:*:*:*:*:*","matchCriteriaId":"67503462-A232-4EC3-8E42-25750A8C4AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.22.19:*:*:*:*:*:*:*","matchCriteriaId":"8D575AEC-E802-42CF-9BFB-CA9496DB2E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.16:*:*:*:*:*:*:*","matchCriteriaId":"59BD3356-E8FB-416B-A476-2DCB0F7675C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.09:*:*:*:*:*:*:*","matchCriteriaId":"07C72C73-B58B-4B99-BE06-BAC13A54182B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1829","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft HCM Recruiting en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.8 SP1 tiene impacto y vectores de ataque remoto desconocidos, también conocida como PSE02."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterpriseone:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"600A8C88-6B2D-4349-AE0F-DC3B21D6F1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:*:*:*:*:*:*:*","matchCriteriaId":"F4AEAAD4-68FA-4370-871C-D03F8122E2AD"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42066","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1830","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft HCM ePerformance en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9 y 9.0 tiene impacto y vectores de ataque remoto desconocidos, también conocida como PSE03."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.9:*:*:*:*:*:*:*","matchCriteriaId":"AAD42026-4D1C-410C-A0E6-B795B8AC5053"},{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:9.0:*:*:*:*:*:*:*","matchCriteriaId":"64F45986-4086-4372-A069-D7712E948C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_hcm_eperformance:8.9:*:*:*:*:*:*:*","matchCriteriaId":"6906441F-4DF7-4ECD-964C-417629AD8B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_hcm_eperformance:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6765AA7E-CEE6-4D3A-B1CE-1998C215AD16"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42067","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1831","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T10:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka (1) SEBL01, (2) SEBL02, (3) SEBL03, (4) SEBL04, (5) SEBL05, and (6) SEBL06."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el componente Siebel SimBuilder en Oracle Siebel Enterprise 7.8.2 y 7.8.5 tiene impacto y vectores de ataque locales o remotos desconocidos, también conocidos como (1) SEBL01, (2) SEBL02, (3) SEBL03, (4) SEBL04, (5) SEBL05 y (6) SEBL06."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise:7.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6D6AB8D7-7DF4-44A5-B55D-AF64FF86A8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise:7.8.5:*:*:*:*:*:*:*","matchCriteriaId":"918E408B-C8B7-4C25-8D4A-20182FD976F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/29829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29874","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019855","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491024/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1233/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1267/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1832","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file."},{"lang":"es","value":"lib/prefs.tcl en Cecilia 2.0.5, permite a atacantes remotos sobrescribir ficheros de su elección a través de una ataque de enlace simbólico al archivo temporal csvers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cecilia:cecilia:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B66F3ECB-47F3-42D2-B377-FD9B50077548"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476321","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41837","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1833","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en libclamav de ClamAV 0.92.1 permite a atacantes remotos ejecutar código de su elección a través de binarios PE comprimidos con WWPack manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29975","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"cve@mitre.org"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1549","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28798","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019850","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41833","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=877","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-20.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1834","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attackers to read arbitrary files via a crafted Flash file."},{"lang":"es","value":"swfdec_load_object.c en Swfdec versiones anteiores a 0.6.4  no restringe adecuadamente el acceso a ficheros locales por sandboxes no permitidas, lo cual permite a atacantes remotos leer fichero de su elección a través de un fichero Flash manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.2","matchCriteriaId":"93BCAD47-B325-47BE-BAAC-AB8443D8C31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D6CC0DF7-89DF-4765-8F23-9C689481D566"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E71D71A-E976-4C60-AD49-65850E74E507"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"77C1F080-C555-46AB-A53B-1461650FC11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E8A5668-FAEF-4A62-92EE-C38D07302E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EE44A473-AEF6-48E9-9521-0F23CE72A844"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A67C440E-E2C9-4075-AD49-17F9B916F505"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6FAEBF1E-1DFC-48D6-8A0B-7A55BE6E1DA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E438B180-8CD3-4B01-A7F3-66A554AD84F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2DEAD3CC-A07A-4EB9-9DE8-9DD228F46892"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4F46EDE3-9FFA-4FE1-B094-0544BFA5FDE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C0C278DF-6587-4364-83E9-B3C57D8982C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"707154AC-2393-46D1-8E80-C15786DC1BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"68D11C1F-270A-452F-B76E-2CABFE23A421"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"281E12A8-508F-43FF-AB02-EB42198E28D1"}]}]}],"references":[{"url":"http://gitweb.freedesktop.org/?p=swfdec/swfdec.git%3Ba=commit%3Bh=326ee4ff631ecc11605f1251e1923a94561a3823","source":"cve@mitre.org"},{"url":"http://lists.freedesktop.org/archives/swfdec/2008-April/001321.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29915","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28881","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41887","source":"cve@mitre.org"},{"url":"http://gitweb.freedesktop.org/?p=swfdec/swfdec.git%3Ba=commit%3Bh=326ee4ff631ecc11605f1251e1923a94561a3823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/swfdec/2008-April/001321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1835","sourceIdentifier":"secalert@redhat.com","published":"2008-04-16T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar."},{"lang":"es","value":"ClamAV antes de 0.93 permite a atacantes remotos evitar el motor de escanéo a través de un archivo RAR con un número de versión no válido, que no puede ser analizado por ClamAV pero que puede ser extraído por Winrar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.92.1","matchCriteriaId":"CC4CA71C-AF06-4FB8-BF94-AE637D04AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"06A9B47A-8FC3-4BD2-A55F-9150307619B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"7068873F-E45D-4471-B55E-BF7B0E3AFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"695F0967-1529-42DB-8978-8B9192F7F615"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"BB72ED94-7832-43CF-81CF-27F88CAC6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"802BFF6B-5D9F-49AE-B96A-86A85E0F1034"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"5F7B2943-BC22-4735-8AA5-AADBEA685FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C6257524-7FC5-40CA-9BDA-82B8565C5BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"35EBA938-DC66-40EA-8C66-38296AB57B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"659B4C39-0F0F-40C5-9B7E-0D00330611F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"508C140C-2F87-4270-85B0-00EA6678A344"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"3033A4A2-47E9-434F-BA0A-0F2476A67899"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"0C1EDFB4-B0C8-4832-BCA1-C35D28877581"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"4EF47B2A-4520-4872-987D-2EF88344ADB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*","matchCriteriaId":"12A4541A-2560-482A-BAEA-275579B499B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9006F64F-D72B-49C4-9F51-8AD9273957B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5698AB2-94DE-480D-9E55-C05871562B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*","matchCriteriaId":"A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"FC31E071-6BB8-45FE-AA09-E7E459B549D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C4CBE9C9-A1DE-4C68-B84D-C735A9A700E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"53D884A1-305C-416A-9851-3A7D875FDC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"E58A6CBC-ED1C-430D-8F43-88694971A850"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"E330A535-A376-4BFF-BB1B-31E83370FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F1ADBDEE-1421-42E5-8DE2-404087613B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"EDF94B1E-E8D4-4952-9081-1254F335445D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"8657268E-4C78-4565-9966-7329095A7905"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"8D20F0D5-2291-4F24-94DB-180CDF926B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"A0E2884A-615F-4063-8FB7-EC157C3EC07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BC41B7-272F-44BB-BD48-6C9231402526"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*","matchCriteriaId":"0138546B-3704-45FB-8115-05C12F9935D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"5F56722F-F61A-404B-B0B2-1C92C22D0436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"D00EBC44-B4AB-443F-A063-8C8CB64F5F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"2DB68680-FA6D-4235-90DA-E3DF0E5BB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B116E9A-0646-4AD5-A531-C35124AB02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3F3C25BA-72EF-4588-A90A-B323A3407FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"01FDAEBC-0B2E-4F60-8B59-13A93B1AF206"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*","matchCriteriaId":"E021DD71-1845-4899-BB87-8445147AD93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"8EFAC7BA-2A39-46A8-BF91-5537532F45D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"733CB165-98CD-4F8E-8A6D-07CF522634BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91rc1:*:*:*:*:*:*:*","matchCriteriaId":"C721E8E3-FB32-41A1-B572-7DB06D9ECB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91rc2:*:*:*:*:*:*:*","matchCriteriaId":"4DCE173B-6229-42C9-8481-66F5727E464A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29891","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30328","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31576","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31882","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"secalert@redhat.com"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28784","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41874","source":"secalert@redhat.com"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=541","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1836","sourceIdentifier":"secalert@redhat.com","published":"2008-04-16T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read."},{"lang":"es","value":"La función rfc2231 en message.c en libclamav de ClamAV anterior 0.93, permite a atacantes remotos causar una denegación de servicio (caída) a través de un mensaje manipulado que produce una cadena que no termina en null, lo que inicia un desbordamiento de búfer de lectura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B116E9A-0646-4AD5-A531-C35124AB02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3F3C25BA-72EF-4588-A90A-B323A3407FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"01FDAEBC-0B2E-4F60-8B59-13A93B1AF206"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*","matchCriteriaId":"E021DD71-1845-4899-BB87-8445147AD93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29891","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30328","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31576","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31882","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"secalert@redhat.com"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28784","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41868","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"secalert@redhat.com"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=881","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1837","sourceIdentifier":"secalert@redhat.com","published":"2008-04-16T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger \"memory problems,\" as demonstrated by the PROTOS GENOME test suite for Archive Formats."},{"lang":"es","value":"libclamunrar de ClamAV before 0.93 permite a atacantes remotos provocar una denegación de servicio (caída) a través de ficheros RAR manipulados que disparan \"problemas de memoria\", tal como lo demostrado por el paquete de pruebas PROTOS GENOME de Archive Formats."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.92.1","matchCriteriaId":"CC4CA71C-AF06-4FB8-BF94-AE637D04AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"06A9B47A-8FC3-4BD2-A55F-9150307619B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"7068873F-E45D-4471-B55E-BF7B0E3AFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"695F0967-1529-42DB-8978-8B9192F7F615"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"BB72ED94-7832-43CF-81CF-27F88CAC6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"802BFF6B-5D9F-49AE-B96A-86A85E0F1034"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"5F7B2943-BC22-4735-8AA5-AADBEA685FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C6257524-7FC5-40CA-9BDA-82B8565C5BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"35EBA938-DC66-40EA-8C66-38296AB57B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"659B4C39-0F0F-40C5-9B7E-0D00330611F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"508C140C-2F87-4270-85B0-00EA6678A344"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"3033A4A2-47E9-434F-BA0A-0F2476A67899"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"0C1EDFB4-B0C8-4832-BCA1-C35D28877581"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"4EF47B2A-4520-4872-987D-2EF88344ADB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*","matchCriteriaId":"12A4541A-2560-482A-BAEA-275579B499B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9006F64F-D72B-49C4-9F51-8AD9273957B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5698AB2-94DE-480D-9E55-C05871562B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*","matchCriteriaId":"A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"FC31E071-6BB8-45FE-AA09-E7E459B549D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C4CBE9C9-A1DE-4C68-B84D-C735A9A700E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"53D884A1-305C-416A-9851-3A7D875FDC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"E58A6CBC-ED1C-430D-8F43-88694971A850"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"E330A535-A376-4BFF-BB1B-31E83370FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F1ADBDEE-1421-42E5-8DE2-404087613B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"EDF94B1E-E8D4-4952-9081-1254F335445D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"8657268E-4C78-4565-9966-7329095A7905"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"8D20F0D5-2291-4F24-94DB-180CDF926B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"A0E2884A-615F-4063-8FB7-EC157C3EC07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BC41B7-272F-44BB-BD48-6C9231402526"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*","matchCriteriaId":"0138546B-3704-45FB-8115-05C12F9935D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"5F56722F-F61A-404B-B0B2-1C92C22D0436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"D00EBC44-B4AB-443F-A063-8C8CB64F5F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"2DB68680-FA6D-4235-90DA-E3DF0E5BB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B116E9A-0646-4AD5-A531-C35124AB02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3F3C25BA-72EF-4588-A90A-B323A3407FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"01FDAEBC-0B2E-4F60-8B59-13A93B1AF206"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*","matchCriteriaId":"E021DD71-1845-4899-BB87-8445147AD93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"8EFAC7BA-2A39-46A8-BF91-5537532F45D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"733CB165-98CD-4F8E-8A6D-07CF522634BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91rc1:*:*:*:*:*:*:*","matchCriteriaId":"C721E8E3-FB32-41A1-B572-7DB06D9ECB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91rc2:*:*:*:*:*:*:*","matchCriteriaId":"4DCE173B-6229-42C9-8481-66F5727E464A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29891","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30328","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31576","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31882","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"secalert@redhat.com"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28784","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41870","source":"secalert@redhat.com"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=898","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1227/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1838","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en BosClassifieds Classified Ads System 3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosclassifieds_ads_systems:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6D5B2CFC-4DF9-463A-A740-8A0E5892A0CB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29799","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28760","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41799","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1839","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en module/main.php de WORK system e-commerce 4.0.9 permiten a atacantes remotos inyectar web script o HTML a través de los parámetros (1) day, (2) month, y (3) year.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos sólamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:work_system_e-commerce:work_system_e-commerce:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FBBCFE7D-66EE-4339-BFDC-D8F01C1E7ADB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28785","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1840","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en upload.php de Coppermine Photo Gallery (CPG) 1.4.16 y anteriores; permite a usuarios autenticados en remoto o a servidores HTTP asistidos por el usuario, ejecutar comandos SQL de su elección a través de la cabecera de respuesta HTTP Content-Type proporcionada por el servidor HTTP que se utiliza para una actualización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.16","matchCriteriaId":"C0E0C60B-44DD-4E37-A337-FA887D88346A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4:*:*:*:*:*:*:*","matchCriteriaId":"183F2FD0-A6D4-4F86-98D7-FC7D22443654"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"45C95857-2002-46F1-88AC-CC34F0B943D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EAA317DD-C804-4349-9BDC-B23FAE493516"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3DFCDB9A-E808-4EC2-A377-CF17C0B6AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3BB681-16F8-441F-912C-9488791A6420"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"709BC7EC-6EAB-4880-B210-F6E154FF7CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"A5C614B6-4BC6-4F77-8D4E-9EBDC69B396C"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"AC4E2E91-3BDD-4308-A7FB-6C0EB6F3E115"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"492C36B4-FB91-4B29-A3B6-0BFF3EF01A87"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D7A89B92-8323-4240-80CE-102070202A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"F1BCC40D-EF9C-4843-9183-EA725C9C03FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F0D02234-2729-499B-A686-F1F85401FEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"E21C42CB-86B1-4EC1-A508-809316F83CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"F6626384-FA55-4B87-801B-554B9E7EC1F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"84687B6F-B1A1-4CE0-A199-40CAF3D293C5"}]}]}],"references":[{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C51787%2C0.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29795","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/44345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28766","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41784","source":"cve@mitre.org"},{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C51787%2C0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/44345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1841","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the session_id variable, as exploited in the wild in April 2008.  NOTE: the fix for CVE-2008-1840 was intended to address this vulnerability, but is actually inapplicable."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la funcionalidad de manejo de sesión en bridge/coppermine.inc.php de Coppermine Photo Gallery (CPG) 1.4.17 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de un campo de entrada asociado con la variable session_id, tal y como se realiza en exploits públicos desde Abril del 2008.\r\nNOTA: el parche para CVE-2008-1840 tenía el propósito de abordar esta vulnerabilidad, pero es actualmente inaplicable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C650302F-3CE7-43FB-A125-E753053BCE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"04F386E8-4F1F-498A-93A9-5F69E70BF131"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"36144FFF-3FC8-4C73-9FD1-3AA870BFF85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D6C04B35-6E90-4348-A954-02972BBBD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6DD2CA54-6534-4A4F-9667-8A594B7E43CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BFF90F7F-070C-4ABE-8F94-7192F18B1A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"E82C8348-DA66-4F92-A6B9-2F150AEF5E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EAA317DD-C804-4349-9BDC-B23FAE493516"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3BB681-16F8-441F-912C-9488791A6420"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"709BC7EC-6EAB-4880-B210-F6E154FF7CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"A5C614B6-4BC6-4F77-8D4E-9EBDC69B396C"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"AC4E2E91-3BDD-4308-A7FB-6C0EB6F3E115"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"492C36B4-FB91-4B29-A3B6-0BFF3EF01A87"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D7A89B92-8323-4240-80CE-102070202A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"F1BCC40D-EF9C-4843-9183-EA725C9C03FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F0D02234-2729-499B-A686-F1F85401FEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"E21C42CB-86B1-4EC1-A508-809316F83CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"F6626384-FA55-4B87-801B-554B9E7EC1F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"84687B6F-B1A1-4CE0-A199-40CAF3D293C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"06A2C9AC-7A77-4EE5-9F12-BD203FE08108"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"50DB1549-0A92-4A3A-AAC1-931B0E394647"}]}]}],"references":[{"url":"http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?r1=4380&r2=4381","source":"cve@mitre.org"},{"url":"http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?view=log","source":"cve@mitre.org"},{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C51882.0.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28767","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41788","source":"cve@mitre.org"},{"url":"http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?r1=4380&r2=4381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C51882.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1842","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow."},{"lang":"es","value":"Error en la propiedad signedness de enteros en el archivo ovspmd.exe en HP OpenView Network Node Manager (OV NNM) versiones 8.01 y 7.53 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) o ejecutar código arbitrario por medio de una petición larga al puerto TCP 8886 que comienza con un determinado entero negativo, que pasa una comparación firmada y desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"7.53","matchCriteriaId":"165864E6-F9B8-4E67-8344-6C08EA9E342E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:4.11:*:*:*:*:*:*:*","matchCriteriaId":"4670BB0B-F94E-44FE-A1E5-2EEAF58C0C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"522BF98F-FFEB-4867-AC18-CDC872F2099D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.01:*:*:*:*:*:*:*","matchCriteriaId":"1218361D-6F62-4035-B0B2-9BEB19539A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5701BC4B-8B3E-4AAD-965F-EDB406D5FBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*","matchCriteriaId":"E8E17259-60C7-4F6B-AB23-06E406FA006D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*","matchCriteriaId":"E8A2AF84-E59A-4725-85E6-D2AF56F97F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.10:*:*:*:*:*:*:*","matchCriteriaId":"1E441789-E4C5-4D40-A0BE-1A20F5F90A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.20:*:*:*:*:*:*:*","matchCriteriaId":"65AAF9FC-36B2-4939-BAB5-829E13D310FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.31:*:*:*:*:*:*:*","matchCriteriaId":"87DF6D25-9B6E-4862-9252-92C8DB6F3F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*","matchCriteriaId":"D24CCB02-FFFE-448B-AF31-D9AC39443552"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C89F2AB-45CF-4455-920F-396852C862E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*","matchCriteriaId":"725DA559-EE1C-4CCE-91C4-D5AAA940D855"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:8.01:*:*:*:*:*:*:*","matchCriteriaId":"F556FF2D-391F-476E-82CE-8423CD3E540A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/closedview-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/closedview.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121321155405849&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121321155405849&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121321155405849&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493781/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1159","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41737","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/closedview-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/closedview.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121321155405849&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121321155405849&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121321155405849&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493781/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1843","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via the age_to parameter in a browsebyCat action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browse.php de W2B DatingClub (también conocido como Dating Club); permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro age_to en una acción browsebyCat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:dating_club:*:*:*:*:*:*:*:*","matchCriteriaId":"B8A5CA5E-5FCD-4380-B944-77D9AEC755BA"}]}]}],"references":[{"url":"http://forum.aria-security.com/showthread.php?p=70","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120792465631586&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29815","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28737","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41792","source":"cve@mitre.org"},{"url":"http://forum.aria-security.com/showthread.php?p=70","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120792465631586&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1844","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cat.php de W2B phpHotResources; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro kind."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phphotresources:*:*:*:*:*:*:*:*","matchCriteriaId":"79552EFA-1540-472A-BD57-5B4C9953CBE6"}]}]}],"references":[{"url":"http://forum.aria-security.com/showthread.php?p=70","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120792465631586&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44378","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28736","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41793","source":"cve@mitre.org"},{"url":"http://forum.aria-security.com/showthread.php?p=70","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120792465631586&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1845","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option."},{"lang":"es","value":"El intérprete de comandos Korn (también conocido como mksh) antes de R33d en MirOS (también conocido como MirBSD) no renueva la E/S tty cuando invoca a mksh en un terminal nuevo, lo que permite a usuarios locales obtener privilegios abriendo un terminal virtual e introduciendo secuencias de comandos,  que se podrían ejecutar posteriormente en circunstancias oportunas por un usuario distinto que lance mksh y especifique ese terminal con la opción -T."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mirbsd:miros:*:c:*:*:*:*:*:*","versionEndIncluding":"33","matchCriteriaId":"EA2CBA6E-BBEC-4FD6-B32A-1748F6528339"},{"vulnerable":true,"criteria":"cpe:2.3:o:mirbsd:miros:33:a:*:*:*:*:*:*","matchCriteriaId":"EE115BFE-1E0D-4E7D-992A-FFDB4B765EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:mirbsd:miros:33:b:*:*:*:*:*:*","matchCriteriaId":"1E87BD42-6F51-4E8E-93DE-9DA8B478A078"}]}]}],"references":[{"url":"http://secunia.com/advisories/29803","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mirbsd.org/mksh.htm#clog","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44365","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mirbsd.org/mksh.htm#clog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1846","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the \"Always Use Secure HTML Editor\" (aka Editor Security or Secure Editing) parameter, which allows remote attackers to conduct cross-site scripting (XSS) attacks by entering feedback for a file."},{"lang":"es","value":"La configuración por defecto de AP NetWeaver versiones anteriores a 7.0 SP15 no permite el parámetro \"Always Use Secure HTML Editor\" (también conocido como Editor Security or Secure Editing), lo cual permite a atacantes remotos llevar a cabo un ataque de secuencias de comandos en sitios cruzados (XSS) introduciendo feedback para un archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:*:sp8:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"1AF8B0B5-CE15-43B7-A8EB-0813A7CA5AF4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3812","source":"cve@mitre.org"},{"url":"http://www.aitsec.com/vulnerability-SAP-Netweaver-6.40-7.0-Cross-Site-Scripting.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28699","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019822","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41735","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aitsec.com/vulnerability-SAP-Netweaver-6.40-7.0-Cross-Site-Scripting.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1847","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php de CoronaMatrix phpAddressBook 2.11 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coronamatrix:phpaddressbook:2.11:*:*:*:*:*:*:*","matchCriteriaId":"ADC4C181-C11F-42EB-BEC7-CA3BC14C4BFB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28750","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41498","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5432","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1848","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a show_error action to index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! 1.6.2 y anteriores; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro de error en una acción show_error de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlacode:joomlaexplorer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"2A7A4826-389B-4857-97D7-F28ACDFB98BB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28746","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41779","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5431","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1849","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php del componente joomlaXplorer 1.6.2 y anteriores (com_joomlaxplorer) para Mambo/Joomla!, permite a atacantes remotos listar directorios de su elección a través del parámetro \"dir\" .. (punto punto) en una acción \"show_error\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlacode:joomlaexplorer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"2A7A4826-389B-4857-97D7-F28ACDFB98BB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28746","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41778","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5431","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1850","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en login.php de Omnistar Interactive OSI Affiliate permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) login, (2) profile, (3) profile2 y (4) ref."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osiaffiliate:osiaffiliate:*:*:*:*:*:*:*:*","matchCriteriaId":"5E461E76-01C2-4036-BEF5-7539ED7E3465"}]}]}],"references":[{"url":"http://secunia.com/advisories/29779","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mrzayas.es/2008/04/11/xss-en-osiaffiliate/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28785","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28793","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41811","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41825","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mrzayas.es/2008/04/11/xss-en-osiaffiliate/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1851","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments."},{"lang":"es","value":"ovalarmsrv de HP OpenView Network Node Manager (OV NNM) 7.51, 7.53 y puede que también en otras versiones; permite a atacantes remotos provocar una denegación de servicio (cuelgue) mediante ciertas solicitudes que no proporcionan todos los argumentos necesarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41694","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1852","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure."},{"lang":"es","value":"ovalarmsrv en HP OpenView Network Node Manager (OV NNM) 7.51, 7.53 y posiblemente otras versiones permite a atacantes remotos provocar una denegación de servicio (caída) a través de ciertas peticiones que especifican un número grande de sub-argumentos, lo que dispara una referencia a un puntero NULO debido a un fallo de asignación de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41695","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1853","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request)."},{"lang":"es","value":"El servicio ovtopmd en HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, y posiblemente otras versiones permite a atacantes remotos provocar una denegación de servicio (salida) mediante el envío de un paquete 0x36 (solicitud de salida)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41693","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1854","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad sin especificar en SmarterMail Web Server (SMWebSvr.exe) de SmarterMail 5.0.2999, permite a atacantes remotos provocar una denegación de servicio (finalización de servicio) a través de una petición larga (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos sólamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:5.0.2999:*:*:*:*:*:*:*","matchCriteriaId":"CFF049AE-951E-438D-9F99-F25B02B8325D"}]}]}],"references":[{"url":"http://secunia.com/advisories/29732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28610","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1855","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI, a different vulnerability than CVE-2006-5274."},{"lang":"es","value":"FrameworkService.exe en McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 y anteriores, usado por ePolicy Orchestrator (ePO) y ProtectionPilot (PrP), permite a atacantes remotos corromper la memoria y provocar una denegación de servico (caída del servicio CMA Framework) a través de un método largo inválido en una petición al URI /spin//AVClient//AVClient.csp. Vulnerabilidad distinta del CVE-2006-5274."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:cma:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.0.574","matchCriteriaId":"51DEDB9E-714A-4ED0-8B3D-BD48F8A93586"}]}]}],"references":[{"url":"http://secunia.com/advisories/29637","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/mcafee_again.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28573","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1122/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41597","source":"cve@mitre.org"},{"url":"https://knowledge.mcafee.com/article/219/615324_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5343","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.offensive-security.com/0day/mcafee_again.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1122/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://knowledge.mcafee.com/article/219/615324_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1856","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into the maps_type configuration setting, and then sending a request to maps_view.php, which causes plugins/maps/map.main.class.php to use the modified configuration."},{"lang":"es","value":"plugins/maps/db_handler.php en LinPHA 1.3.3 y anteriores no requiere autenticación para una acción \"settings\" que modifica el fichero de configuración, lo que permite a atacantes remotos llevar a cabo ataque de salto de directorio y ejecutar archivos locales de su elección colocando secuencias de salto de directorio en la configuración de maps_type y a continuación enviando la petición a maps_view.php, lo que provoca que plugins/maps/map.main.class.php use la configuración modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C3C962-F6F4-441E-9CE2-80EE8BBF1E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2EE653B-2731-4C3E-A7D0-3465276E879C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"108B066B-28C1-4888-B696-78F816A89B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9113509A-C884-46F4-BE97-C49382536FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5BD294BF-79FE-4940-B2D1-CB2506370EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"00E9B8B3-87E5-46A5-8242-04E620D54086"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0E05B25E-8507-4B40-AD6B-835019EF06EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C16546DA-1516-47C1-B603-34AF3DE3A9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"656D37D2-289D-49EB-AB25-D8522AB8A79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"059C1787-16E2-48BA-96A2-092F58E6F53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A16B7211-B340-4E4E-A016-74F7596A7B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F06B06C9-CE7F-45A1-946E-C3D3BF843FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B371E12C-9CB4-4E03-8B1E-F8A858AD5476"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F4ECA9FA-1BC3-4644-8A7D-F27DE382B519"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8C616987-BB74-4781-850E-22EA77D61D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"27827923-6084-46C8-A7E1-94B0B4D181BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29724","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=595725","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28654","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41676","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5392","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=595725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1857","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en viewsource.php de Make our Life Easy (Mole) 2.1.0, permite a atacantes remotos leer ficheros de su elección a través de secuencias de salto de directorio en los parámetros (1) dirn y (2) fname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole:make_our_life_easy:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF5EAC2D-493A-488D-95E1-4023A94EAC97"}]}]}],"references":[{"url":"http://secunia.com/advisories/29685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28659","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1141/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41681","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1141/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1858","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en 724Networks 724CMS 4.01 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:724cms:724cms:*:*:*:*:*:*:*:*","versionEndIncluding":"4.01","matchCriteriaId":"1E277ED7-CD0E-408D-9C8F-B22A8A86509B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1139/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41700","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1139/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1859","sourceIdentifier":"cve@mitre.org","published":"2008-04-16T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en events.php de iScripts SocialWare, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción de mostrar (show)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iscripts:socialware:*:*:*:*:*:*:*:*","matchCriteriaId":"6D73C65C-89FF-483A-AB91-4F8522599DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29725","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28669","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1137/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41697","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5402","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1137/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1860","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin.php de LokiCMS 0.3.3 y versiones anteriores permite a atacantes remotos inyectar código PHP en includes/Config.php a través del parámetro default."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.3","matchCriteriaId":"E1170433-C6C9-42B8-B8AA-62459D9EA6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"524DB171-D7DE-4B7D-BCCB-C0C9AE508CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.1.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"CE0504E9-7090-4D4A-A9B8-A9B79A489840"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"483D2A1D-6C0D-41B3-A0AB-BC831103D3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F3FFAD14-7710-4D6C-BC50-E12C2DA8AE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.1b1:*:*:*:*:*:*:*","matchCriteriaId":"995173AA-DAA3-4D0C-8727-E6079AEC6146"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.1b2:*:*:*:*:*:*:*","matchCriteriaId":"1EC01CBD-2414-4AC6-81C5-C91124EAA176"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.2b1:*:*:*:*:*:*:*","matchCriteriaId":"99744F88-CF80-4635-A23D-B9EFED94F126"}]}]}],"references":[{"url":"http://secunia.com/advisories/29749","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492877/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1162/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41736","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492877/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1162/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1861","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the exbb[default_lang] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en modules/threadstop/threadstop.php de ExBB Italia 0.22 y versiones anteriores, cuando register_globals está activo y magic_quotes_gpc inactivo, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro exbb[default_lang]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exbb:exbb_italia:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2","matchCriteriaId":"869FCD05-4AC7-4B45-8985-81B45D1EAED1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28686","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41707","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5405","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1862","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackers to bypass this check via (1) POST or (2) COOKIE variables, a different vector than CVE-2006-4488.  NOTE: this can be leveraged to conduct PHP remote file inclusion attacks via a URL in the (a) new_exbb[home_path] or (b) exbb[home_path] parameter to modules/threadstop/threadstop.php."},{"lang":"es","value":"ExBB Italia 0.22 y versiones anteriores solo chequean las peticiones GET que usa QUERY_STRING para determinadas manipulaciones de ruta, lo cual permite a atacantes remotos evitar esta comprobación a través de las variables (1) POST o (2) COOKIE, un vector diferente a la CVE-2006-4488.  NOTA:  esto podría ser aprovechado para llevar a cabo ataques de inclusión de ficheros PHP remotos a través de una URL en el parámetro (a) new_exbb[home_path] o (b) exbb[home_path] de modules/threadstop/threadstop.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exbb:exbb_italia:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2","matchCriteriaId":"869FCD05-4AC7-4B45-8985-81B45D1EAED1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41708","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5405","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1863","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SLQ en view_reviews.php de Prozilla Cheat Script (también conocido como Cheats) 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:cheats:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FFFD8987-1B78-4E5D-BDC2-E5FC339BC62C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29701","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28640","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1116/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41673","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5389","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1116/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1864","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL commands via the project parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en project.php de Prozilla Freelancers permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro project."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:prozilla_freelancers:*:*:*:*:*:*:*:*","matchCriteriaId":"8F11CF3D-12C2-4488-92BA-9D652AA436DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29723","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28653","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41705","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1865","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the msx_readnode function in libmosix.c in openmosix-tools (aka userspace-tools) in openMosix might allow local users to cause a denial of service (application crash) via a third-party program that calls this function with a long item argument.  NOTE: the vendor does not provide any program that is capable of causing this overflow."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función msx_readnode de libmosix.c en openmosix-tools (también conocido como userspace-tools) de openMosix puede permitir a usuarios locales provocar una denegación de servicio (caída de aplicación) a través de un programa de terceros que llama a esta función con un argumento item.\r\nNOTA: el fabricante no \tproporciona ningún programa capaz de provocar este desbordamiento.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openmosix_project:openmosix:*:*:*:*:*:*:*:*","matchCriteriaId":"BD14F6B8-9B01-4919-9ACE-2C9F9A157283"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3813","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490534/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28663","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41691","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490534/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1866","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request."},{"lang":"es","value":"admin/modif_config.php en Blog Pixel Motion (también conocida como PixelMotion) no requiere autenticación de admin, lo que permite a usuarios autenticados subir scripts PHP de su elección en un archivo ZIP, el cual esta escrito en templateZip/ y luego automáticamente  extraido bajo templates/ para ejecutarse mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixel_motion:pixel_motion_blog:*:*:*:*:*:*:*:*","matchCriteriaId":"10852BB8-8028-49C5-A40C-112190649BB1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28646","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1121/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41670","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5381","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1121/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1867","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Blog Pixel Motion (también conocido como Blog PixelMotion) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro categorie de index.php, posiblemente relacionado a include/requetesIndex.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixel_motion:pixel_motion_blog:*:*:*:*:*:*:*:*","matchCriteriaId":"10852BB8-8028-49C5-A40C-112190649BB1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28645","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1121/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41668","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1121/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1868","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information."},{"lang":"es","value":"admin/sauvBase.php en Blog Pixel Motion (también conocido como  Blog PixelMotion), no requiere autenticación, lo que permite a atacantes remotos disparar un volcado de copia de seguridad de la base de datos, y obtener el resultado del archivo blogPM.sql que contiene información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixel_motion:pixel_motion_blog:*:*:*:*:*:*:*:*","matchCriteriaId":"10852BB8-8028-49C5-A40C-112190649BB1"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1121/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41671","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5380","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1121/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1869","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.  NOTE: this issue might be site-specific."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Site Sift Listings, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail de index.php.\r\nNOTA: esta cuestión puede ser específica de un sitio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:site_sift_media:site_sift_listings:*:*:*:*:*:*:*:*","matchCriteriaId":"8DF66FAB-5F54-471C-9707-997CD14BFED4"}]}]}],"references":[{"url":"http://secunia.com/advisories/29705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28644","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1120/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41662","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5383","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1120/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5383","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1870","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  getdata.php de PIGMy-SQL 1.4.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geek247:pigmy-sql:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"A5D8910B-8D45-46A8-992C-1DAA4FB03A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:geek247:pigmy-sql:1.4:*:*:*:*:*:*:*","matchCriteriaId":"0BB2481B-7941-4AC8-8159-531A5A91CD0B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28634","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1135/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41657","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5367","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1135/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1871","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en links.php de Scriptsagent.com Links Directory 1.1 permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro cat_id en una acción list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsagent:links_directory:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EEC22651-DCC7-406F-8E60-DF183FAA4298"}]}]}],"references":[{"url":"http://secunia.com/advisories/29710","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28655","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1126/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41661","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5377","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1126/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1872","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en home.news.php de Comdev News Publisher 4.1.2 permite a atacantes remotos ejecutar comandos SLQ de su elección a través de un parámetro arcmonth.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comdev:comdev_news_publisher:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1254962D-680A-46ED-A1E8-479CC7369616"}]}]}],"references":[{"url":"http://secunia.com/advisories/29697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28622","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41663","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1873","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authenticated users to inject arbitrary web script or HTML via a CSS property in the STYLE attribute of a DIV element in the mensaje parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica de mesaje privados en Nuke ET 3.2 y 3.4, cuando usamos Internet Explorer, permite a atacantes remotos autenticados inyectar web script o HTML  de su elección mediante una propiedad CSS en el atributo STYLE de un elemento DIV en el parámetro mensaje. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"362853AC-2DA6-4A6E-856D-8615266B95EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.4:*:*:*:*:*:*:*","matchCriteriaId":"1FF9E1E6-B28B-4874-AF85-0FB686969967"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://mrzayas.es/wp-content/poc/nukeet.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mrzayas.es/2008/04/04/xploitnukeet3/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28614","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41646","source":"cve@mitre.org"},{"url":"http://mrzayas.es/wp-content/poc/nukeet.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mrzayas.es/2008/04/04/xploitnukeet3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1874","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users to execute arbitrary SQL commands via the reed parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en account/user/mail.html en Xpoze Pro 3.05 y anteriores, permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro reed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpoze:xpoze_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"3.05","matchCriteriaId":"9E674190-DA2C-4BCC-8947-21DBAC576452"}]}]}],"references":[{"url":"http://secunia.com/advisories/29700","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28618","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41656","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5358","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1875","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote attackers to execute arbitrary SQL commands via the photo_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Terong PHP Photo Gallery (también conocido como Advanced Web Photo Gallery) 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro photo_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:terong:advanced_web_photo_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5551044A-51F8-41CA-A4F4-48386C0A3B1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28626","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41665","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5364","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1876","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[files][functions_page] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en index.php en VisualPic 0.3.1, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro URL _CONFIG[files][functions_page]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snarky:visualpic:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4DD7F3FC-4725-4469-8F8D-50BD1A9914C2"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1127/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41667","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5375","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1127/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1877","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with privileges."},{"lang":"es","value":"tss 0.8.1 permite a usuarios locales leer ficheros de su elección a través del parámetro -a, lo cual es procesado mientras tss está ejecutándose con privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:tss:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D757EC7B-EA3E-4A21-8C2F-212252D9CBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:tss:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"78CFB325-4796-4C28-9D68-5242382063B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:tss:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"ED98012A-6742-433F-9D78-5CB383E51C7A"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41929","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1878","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title."},{"lang":"es","value":"Desbordamiento de búfer basada en pila en la función demux_nsf_send_chunk en el src/demuxers/demux_nsf.c en xine-lib 1.1.12 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un título NSF largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.12","matchCriteriaId":"ED7557F8-5A8F-4DCE-AB62-BB6E88893443"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30021","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30337","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31372","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31393","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-01.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1586","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:177","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28816","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1247/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41865","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5458","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00536.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00571.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-635-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1247/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00536.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00571.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1880","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISC_PASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password."},{"lang":"es","value":"La configuración por defecto de Firebird anterior a 2.0.3.12981.0-r6 en Gentoo Linux establece la variable de entorno ISC_PASSWORD antes de arrancar Firebird, lo que permite a atacantes remotos evitar la autentificación SYSDBA y obtener información sensible de la base de datos mediante una contraseña vacía."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebird:firebird:*:r5:*:*:*:*:*:*","versionEndIncluding":"2.0.3.12981.0","matchCriteriaId":"1BC911A5-72A0-433A-93C1-1E402DC082C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebird:firebird:2.0.3.12981.0:*:*:*:*:*:*:*","matchCriteriaId":"927B6FBE-93ED-4ADC-8D4A-FE8B8DF4F0DA"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=216158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-06.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42299","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=216158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1881","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T23:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file.  NOTE: this issue is due to an incomplete fix for CVE-2007-6681."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función ParseSSA (modules/demux/subtitle.c) en VLC 0.8.6e permite a atacantes remotos ejecutar código de su elección mediante un subtitulo largeo en un archivo SSA. NOTA: este problema es debido a una corrección incompleta para CVE-2007-6681."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6e:*:*:*:*:*:*:*","matchCriteriaId":"6545867A-07ED-4E16-AED0-566C5CCD46FE"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vlcboffs-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/adv/vlcboffs-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29800","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"cve@mitre.org"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28274","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41936","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14872","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5250","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vlcboffs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/adv/vlcboffs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200804-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.videolan.org/Changelog/0.8.6f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1883","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string."},{"lang":"es","value":"El servidor en Blackboard Academic Suite 7.x almacena hashes de contraseñas MD5 que son proporcionadas directamente por clientes, lo que facilita a atacantes remotos el acceso a cuentas a través de un cliente modificado que salta el cálculo hash javascript/md5.js y en vez de eso envía una cadena MD5 cualquiera."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:blackboard_academic_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"7","matchCriteriaId":"09F45424-8CE2-4AAA-81BA-393B023DC328"}]}]}],"references":[{"url":"http://secskill.wordpress.com/2008/03/27/hacking-blackboard-academic-suite-2/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3810","source":"cve@mitre.org"},{"url":"http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490096/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41935","source":"cve@mitre.org"},{"url":"http://secskill.wordpress.com/2008/03/27/hacking-blackboard-academic-suite-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490096/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1884","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to read arbitrary files via directory traversal sequences in the wiki parameter, a different vector than CVE-2006-4418."},{"lang":"es","value":"Una vulnerabilidad salto de directorio en el archivo index.php en Wikepage Opus versión 13 2007.2, permite a los atacantes remotos leer archivos arbitrarios por medio de secuencias de salto de directorio en el parámetro wiki, un vector diferente de CVE-2006-4418."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikepage:opus:13_2007.2:*:*:*:*:*:*:*","matchCriteriaId":"39FF860A-87B0-4ED8-84B2-7DCDAAB5FEA8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-04/0082.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28664","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41688","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-04/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1885","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el control ActiveX NeffyLauncher 1.0.5  (NeffyLauncher.dll) de CDNetworks Nefficient Download permite a atacantes remotos descargar código de su elección en un sistema cliente a través de .. (punto punto) en el parámetro SkinPath y un URL .zip en el parámetro HttpSkin. NOTA: esto puede ser accionado para ejecución de código escribiendo a una carpeta Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cdnetworks:download_client:*:*:*:*:*:*:*:*","matchCriteriaId":"C97307E0-C926-41B9-B7A6-D858E6466B04"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2008/Apr/0065.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29692","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28666","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1186","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41743","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5397","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Apr/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1886","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T15:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode.  NOTE: this can be used by arbitrary web sites to host exploit code that targets this control."},{"lang":"es","value":"El control ActiveX NeffyLauncher 1.0.5 (NeffyLauncher.dll) de CDNetworks Nefficient Download utiliza una criptografía débil para un KeyCode que bloquea el uso sin autorización del control, lo que permite a atacantes remotos evitar este mecanismo de protección calculando el KeyCode pedido. NOTA: esto puede ser utilizado por sitios web cualquiera para hospedar exploits que amenacen este control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cdnetworks:download_client:*:*:*:*:*:*:*:*","matchCriteriaId":"C97307E0-C926-41B9-B7A6-D858E6466B04"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2008/Apr/0065.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28666","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41933","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5397","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Apr/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1887","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow."},{"lang":"es","value":"Python versión 2.5.2 y anteriores, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de varios vectores que causan que se proporcione un valor de tamaño negativo a la función PyString_FromStringAndSize, que asigna menos memoria de la esperada cuando assert() está deshabilitado y desencadena un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"9E0806D1-04EA-492A-8587-1886F47ECC80"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://bugs.python.org/issue2587","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29889","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30872","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31255","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1551","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1620","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490776","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/506056/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28749","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41944","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.python.org/issue2587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/506056/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1888","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Microsoft Windows SharePoint Services 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del campo Picture Source (Fuente de Imagen) (también conocido como picture object source) en Rich Text Editor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8127B923-B007-486A-8E61-10BE1E21D8BC"}]}]}],"references":[{"url":"http://www.caughq.org/advisories/CAU-2008-0002.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490624/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28706","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41934","source":"cve@mitre.org"},{"url":"http://www.caughq.org/advisories/CAU-2008-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490624/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1889","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewcat.php de XplodPHP AutoTutorials 2.1 y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xplodphp:autotutorials:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E4C861F1-FC0F-4369-8585-F0728D168AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xplodphp:autotutorials:2.1:*:7_day_trial_license:*:*:*:*:*","matchCriteriaId":"6139E00E-B493-46B6-92AF-8C5406879A2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1244/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41855","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5457","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1244/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1890","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Jom Comment 2.0 build 345 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a mediante vectores no especificados. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:azrul:jom_comment:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3C844429-877F-4D22-AE8F-AFA530898E76"}]}]}],"references":[{"url":"http://secunia.com/advisories/29820","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28812","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41866","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1891","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing (1) + (plus), (2) %2b (encoded plus), (3) . (dot), (4) %2e (encoded dot), or (5) %20 (encoded space) character in the URI, possibly related to the WEBrick::HTTPServlet::FileHandler and WEBrick::HTTPServer.new functionality and the :DocumentRoot option."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en WEBrick en Ruby versión 1.8.4 y anteriores, versión 1.8.5 anterior a 1.8.5-p231, versión 1.8.6 anterior a 1.8.6-p230, versión 1.8.7 anterior a 1.8.7-p22, y versión 1.9.0 anterior a 1.9.0-2, cuando se utilizan sistemas de archivos NTFS o FAT, permite a los atacantes remotos leer archivos CGI arbitrarios por medio de un trailing (1) + (más), (2) %2b (más codificado), (3) . (punto), (4) %2e (punto codificado) o (5) %20 (espacio codificado) en el URI, posiblemente relacionado con la función WEBrick::HTTPServlet::FileHandler y WEBrick::HTTPServer.new y la opción :DocumentRoot."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1891\n\nThe risks associated with fixing this flaw outweigh the benefits of the fix. Red Hat does not plan to fix this flaw in Red Hat Enterprise Linux.","lastModified":"2009-06-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.0","matchCriteriaId":"A27D6CAC-0E72-4C5A-9712-0DDD726EB3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"C80BDE13-9CBB-4A5F-9BF4-BEB907CED271"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/webrickcgi-adv.txt","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29794","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1245/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41824","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/webrickcgi-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1245/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1892","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bs_auth.php in Blogator-script 0.95 and 1.01 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bs_auth.php de Blogator-script 0.95 y 1.01 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro msg. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogator_script:blogator_script:0.95:*:*:*:*:*:*:*","matchCriteriaId":"AE74067D-DCFF-4B94-9A19-3DA785F94D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogator_script:blogator_script:1.01:*:*:*:*:*:*:*","matchCriteriaId":"5CA4FE8A-A4FC-4AD7-B9FE-3171495116F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29684","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28810","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41930","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1893","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en index.php de W2B Online Banking permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro ilang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:online_banking:*:*:*:*:*:*:*:*","matchCriteriaId":"35775085-7B5F-4E5C-8730-65795A34D347"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120829213903472&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28796","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41931","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120829213903472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1894","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Java version before FixPack 3.5 allows remote attackers to inject arbitrary web script or HTML via the cms parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en desktoplaunch/InfoView/logon/logon.object de BusinessObjects InfoView XI R2 SP1, SP2 y SP3 Java version antes de FixPack 3.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro cms."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:*:sp3_fp3.4:*:*:*:*:*:*","versionEndIncluding":"xi_r2","matchCriteriaId":"DBE66AF9-30E9-490D-BB69-20B505B08E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:*:sp3_ft3.0:*:*:*:*:*:*","versionEndIncluding":"xi_r2","matchCriteriaId":"A61640CE-3827-4FF0-923E-A0DFB0EFF480"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:*:sp3_ft3.1:*:*:*:*:*:*","versionEndIncluding":"xi_r2","matchCriteriaId":"3C24A21E-635D-4FDC-929F-C391051927E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:*:sp3_ft3.2:*:*:*:*:*:*","versionEndIncluding":"xi_r2","matchCriteriaId":"A8566E9C-3A39-4181-A64A-5F5630135437"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:*:sp3_ft3.3:*:*:*:*:*:*","versionEndIncluding":"xi_r2","matchCriteriaId":"A67FB433-D234-45E5-8DFB-2C24935CC366"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:xi_r2:sp1:*:*:*:*:*:*","matchCriteriaId":"4A888565-DDF2-4861-8D72-3A7913ADEE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:xi_r2:sp2:*:*:*:*:*:*","matchCriteriaId":"909B19BD-9CA1-4310-9F3D-9597807FDC58"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061428.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120818789018302&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/51450","source":"cve@mitre.org"},{"url":"http://resources.businessobjects.com/support/communitycs/FilesAndUpdates/boxir2_en_FixPack3.5_readme.pdf?recDnlReq=Record&dnlPath=boxir2_en_FixPack3.5_readme.pdf","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29804","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28762","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41875","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=120818789018302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://resources.businessobjects.com/support/communitycs/FilesAndUpdates/boxir2_en_FixPack3.5_readme.pdf?recDnlReq=Record&dnlPath=boxir2_en_FixPack3.5_readme.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1895","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to events.asp, the (2) UserName parameter to getpassword.asp, and possibly an unspecified parameter to (3) option_Update.asp in an edit action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Carbon Communities 2.4 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) ID a events.asp, (2) UserName a getpassword.asp y posiblemente un parámetro no especificado a (3) option_Update.asp en una acción edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"22855354-0D9B-4594-9F2B-716067F72B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:1.0:*:*:*:*:*:*:*","matchCriteriaId":"988F6660-AABE-47C2-A909-E6E91247D440"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7DE160C1-EDAE-49C5-B2EB-1FB2D7CA634A"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4D9BEEAC-649E-4DE2-B444-5AF30BAC46DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DD750FD5-2D87-47D6-A624-77DFD9FCB99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:2.3:*:*:*:*:*:*:*","matchCriteriaId":"61BD9636-04CB-408B-BE62-8161BD171E24"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/35","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugreport.ir/index.php?/35/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490923/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28806","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41845","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5456","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugreport.ir/index.php?/35/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490923/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1896","sourceIdentifier":"cve@mitre.org","published":"2008-04-18T22:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Carbon Communities 2.4 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) Redirect a login.asp ye (2) OrderBy a member_send.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"22855354-0D9B-4594-9F2B-716067F72B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:1.0:*:*:*:*:*:*:*","matchCriteriaId":"988F6660-AABE-47C2-A909-E6E91247D440"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7DE160C1-EDAE-49C5-B2EB-1FB2D7CA634A"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4D9BEEAC-649E-4DE2-B444-5AF30BAC46DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DD750FD5-2D87-47D6-A624-77DFD9FCB99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:carboncommunities:carbon_communities:2.3:*:*:*:*:*:*:*","matchCriteriaId":"61BD9636-04CB-408B-BE62-8161BD171E24"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/35","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490923/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28806","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41846","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5456","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490923/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1897","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake.  NOTE: this issue exists because of an incomplete fix for CVE-2008-1923."},{"lang":"es","value":"El driver del canal IAX2 (chan_iax2) en Asterisk Open Source 1.0.x, 1.2.x anteriores a 1.2.28 y 1.4.x anteriores a 1.4.19.1; Business Edition A.x.x, B.x.x anteriores a B.2.5.2 y C.x.x anteriores a C.1.8.1; AsteriskNOW anteriores a 1.0.3; Apliance Developer Kit 0.x.x y s800i anterior a la 1.1.0.3, cuando está configurado para permitir llamadas no autenticadas, no verifica que una respuesta ACK contenga un número que coincida con el de respuesta del servidor a un NUEVO mensaje, que puede permitir a los atacantes provocar una denegación de servicio (amplificación del tráfico) a través de una respuesta ACK falseada, que no complete la negociación de 3 pasos. NOTA: Este problema existe debido a una correción incompleto para CVE-2008-1923"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05B437-C292-4AA0-8AFE-1CA07CD80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0102C4C0-1A7D-4AB7-9817-44E6B0DB761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4:*:*:*:*:*:*:*","matchCriteriaId":"81DDF486-4185-48EE-869E-0AA6726C31F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CF45A8E1-F6B1-42BD-9168-12062FA6EAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5757B9B-2759-439A-9A6D-CCDD6C8C8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E4548D39-0562-4946-AA51-A7C1A31AEE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FCD71268-EAA2-477B-8AC4-DE4853A262B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8:*:*:*:*:*:*:*","matchCriteriaId":"529B2115-A191-4F3F-8F8C-A38B7C45463A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"b.2.5.1","matchCriteriaId":"3097291D-BBBB-4C69-8909-D6F7AC622B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c1.8.0","matchCriteriaId":"267F32ED-B9E4-4454-99C1-F445E52EE96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:a:*:*:*:*:*:*:*","matchCriteriaId":"313B3A38-8DEA-4D62-A1A4-0B6011E81870"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"802F8680-AB38-41AF-BFC8-F6927F6B1626"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BCAE8D90-B032-4C60-B487-BE655D00FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB64A872-B7B8-46A8-81E4-49EDAC160531"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"21000270-C9B9-430C-A252-763887A15835"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12F7CF45-5482-4947-8F1D-48C746987475"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B64995D-7892-49AB-A89D-A5D15615C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0397DBD4-EA00-444A-9008-4932F99DF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"D7203093-7209-4184-92CB-08AD73FAC379"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"F981A428-E7F3-4DE5-91DC-60A1C5C6C6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0:beta8:*:*:*:*:*:*","matchCriteriaId":"AF94C93A-723D-4DC5-9342-F091C8C6FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E5C988FD-CFB9-4763-BE5A-B89FB3538FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"00A6DAD0-D4C3-4A58-A35A-991E04B50EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6413B123-65DE-4483-A8A0-F5F30A809570"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"272DE03B-1470-45FF-A31B-2CE44A8E8378"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC6FE17C-3B08-4675-9F73-5DC0C2438BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8AB81C-3DCF-42E9-8022-2F7135022C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.27","matchCriteriaId":"BB10847E-585B-492B-A174-4D1C14755E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"6BD2F115-4614-4E25-8902-356EEC966E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*","matchCriteriaId":"678DB154-4363-42FF-8B28-367923FC6595"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0B41BC83-3AE3-4C89-A682-E24A4EFF9605"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"98F2FE25-8CDA-4D6D-884B-82C4D90F7FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F2C378-FF0E-4765-9F66-625C4064D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A55A9295-F632-4856-90A1-38371EB98589"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FAE6AF1-884D-41F7-B174-9E13C7719C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCA9E35B-9A6B-42F2-9315-9C7D09F62227"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"89B1F293-4F0F-48FD-A1F1-1230B94D87D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF7EC20-A424-45E5-B7E4-3CC86075858C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C790E105-55C8-4CDC-9FA8-E1FF6F130A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"44C860EF-2B29-4995-B942-000CC43FDD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADB80EF-C724-44BA-88FC-24087799D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"78B39BE8-7E2D-42DF-8633-44CAD5662777"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F39036E3-0027-4C72-9DEB-9A6E2B4512C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A037E6F9-3EF7-4EEB-AC16-081421BCE40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:patch:*:*:*:*:*:*","matchCriteriaId":"A553D442-A573-4A60-8514-3C70F651756D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A7EC02A-9C9E-4589-BBB3-1908D3078A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:patch:*:*:*:*:*:*","matchCriteriaId":"2395C742-D9FE-466F-BC97-67A846539121"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6C70FA9C-6F3B-4BDF-97FB-81D06AB0EE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:patch:*:*:*:*:*:*","matchCriteriaId":"58487C69-86C0-4736-BC90-4292AF8E3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E62D108C-862D-4BDB-BE37-285AA4C9C59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"CF1422F3-829D-498C-83A6-02989DFB70A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBEB9D69-A404-4053-92F9-CAC3481AFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E816CCDB-4169-4F09-AE87-E467F4BE7685"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:netsec:*:*:*:*:*:*","matchCriteriaId":"65223182-1675-462C-AF67-4A48760A63F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"107DA2D8-FE7C-4B70-856D-43D58B988694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:netsec:*:*:*:*:*:*","matchCriteriaId":"02D5E6DF-7C9C-479F-986B-D5C8A144ACB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:netsec:*:*:*:*:*:*","matchCriteriaId":"68AF6200-1385-449F-A00E-2BACEE16450B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5C14614F-4E27-40A6-9E56-2B1DBB10330B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:netsec:*:*:*:*:*:*","matchCriteriaId":"61C0769F-6739-41D2-ADD8-924AC04C5F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7A2F2F5A-66FD-4057-917C-66332A88D83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:netsec:*:*:*:*:*:*","matchCriteriaId":"8EF13987-5767-4FED-9584-63D74B0A30A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"399B0206-B48B-46EF-8CA6-A6E5A2550B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:netsec:*:*:*:*:*:*","matchCriteriaId":"C57C1324-E11A-4B2B-9722-A4A63AEF0497"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"26E9760F-C0EB-47BB-8DA4-CC7815099DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:netsec:*:*:*:*:*:*","matchCriteriaId":"EE6D9718-D57D-48F6-A2B1-CECAFFCDDFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6BD915CD-A7D3-4305-A6C0-290C648A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:netsec:*:*:*:*:*:*","matchCriteriaId":"3249AB40-2058-42E9-9A33-64E434E5BB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"0CF6584D-A7BB-4BD5-8232-9293FEE4A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"174D6B56-7D0F-46F0-849A-FD05CB348FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"938F545A-F8A7-455E-8E5A-2B5454B6CE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:netsec:*:*:*:*:*:*","matchCriteriaId":"E7C0897A-C841-4AAB-A6B3-1FCF7A99A60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*","matchCriteriaId":"21612C17-7368-4108-B55B-5AB5CA6733E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"A149F8C2-3DA5-44B2-A288-3482F3975824"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"9462B320-B69D-409D-8DCC-D8D6CA1A757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"BEA0014A-659B-4533-A393-6D4ADC80EB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"346C9F65-B5FB-4A75-8E1B-137112F270D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"7EFEE380-0C64-4413-AF3A-45ABC8833500"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"8CA18FC6-1480-400E-A885-8CDAE45AA7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"93741261-378B-4C02-8D68-0E5F39128375"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"72375576-F857-4585-A677-A326D89A65B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"40850BF4-E252-4667-9B46-9B6FEF6E997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1BB01DD1-B29B-4210-88CC-9ADB3148A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"88576385-EF03-408B-9775-B52E6AFFE48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.2","matchCriteriaId":"15C01793-C5D3-4359-B332-A8A104832370"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C3A0A08-4107-4B8B-AE7E-DC23849A54DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9320928D-D83C-4258-AF62-AB2D1F50D972"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"569084D1-977D-41FC-A444-0B3F5199DDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02D182FB-761C-4F08-A776-B613FAC55230"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C9046D49-6878-4571-8B9E-2FBD5BA80D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B5EDAB-61DD-4864-A159-39292D339DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"101DFEFB-7627-4D36-AAA2-EDFB4D0E5AB5"}]}]}],"references":[{"url":"http://bugs.digium.com/view.php?id=10078","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29927","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491220/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28901","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019918","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1324","source":"cve@mitre.org"},{"url":"https://downloads.asterisk.org/pub/security/AST-2008-006.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41966","source":"cve@mitre.org"},{"url":"https://github.com/jcollie/asterisk/commit/60de4fbbdf3ede49f158e23a9e3b679f2e519c1e","source":"cve@mitre.org"},{"url":"https://github.com/jcollie/asterisk/commit/771b3d8749b34b6eea4e03a2e514380da9582f90","source":"cve@mitre.org"},{"url":"https://github.com/jcollie/asterisk/commit/a8b180875b037b8da26f6a3bcc8e5e98b8c904d2","source":"cve@mitre.org"},{"url":"https://github.com/kaoru6/asterisk/commit/1fe14f38dd43dc894d21f85762b51208ba5c8acb","source":"cve@mitre.org"},{"url":"https://github.com/lyx2014/Asterisk/commit/0670e43c30135044e25cca7f80e1833e2c128653","source":"cve@mitre.org"},{"url":"https://github.com/mojolingo/asterisk/commit/20ac3662f137dbf7f42d5295590069a7d3b1166b","source":"cve@mitre.org"},{"url":"https://github.com/pruiz/asterisk/commit/e0ef9bd22810c6969a7f222eec04798f19a7e2d6","source":"cve@mitre.org"},{"url":"https://github.com/silentindark/asterisk-1/commit/fe8b7f31db687f8b9992864b82c93d22833019c7","source":"cve@mitre.org"},{"url":"https://github.com/xrg/asterisk-xrg/commit/10da3dab24e8ca08cf2c983f8d0206e383535b5a","source":"cve@mitre.org"},{"url":"https://github.com/xrg/asterisk-xrg/commit/51714a24347dc57f9a208a4a8af84115ef407b83","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00581.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00600.html","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=10078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.digium.com/pub/security/AST-2008-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491220/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://downloads.asterisk.org/pub/security/AST-2008-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/jcollie/asterisk/commit/60de4fbbdf3ede49f158e23a9e3b679f2e519c1e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/jcollie/asterisk/commit/771b3d8749b34b6eea4e03a2e514380da9582f90","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/jcollie/asterisk/commit/a8b180875b037b8da26f6a3bcc8e5e98b8c904d2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/kaoru6/asterisk/commit/1fe14f38dd43dc894d21f85762b51208ba5c8acb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/lyx2014/Asterisk/commit/0670e43c30135044e25cca7f80e1833e2c128653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/mojolingo/asterisk/commit/20ac3662f137dbf7f42d5295590069a7d3b1166b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/pruiz/asterisk/commit/e0ef9bd22810c6969a7f222eec04798f19a7e2d6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/silentindark/asterisk-1/commit/fe8b7f31db687f8b9992864b82c93d22833019c7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/xrg/asterisk-xrg/commit/10da3dab24e8ca08cf2c983f8d0206e383535b5a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/xrg/asterisk-xrg/commit/51714a24347dc57f9a208a4a8af84115ef407b83","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00581.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00600.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1898","sourceIdentifier":"cve@mitre.org","published":"2008-04-21T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call."},{"lang":"es","value":"Un cierto control ActiveX en la biblioteca WkImgSrv.dll versión 7.03.0616.0, tal como se distribuye en Microsoft Works 7 y Microsoft Office 2003 y 2007, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo del navegador) por medio de un valor de propiedad WksPictureInterface no válido, que desencadena una llamada de función inapropiada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*","matchCriteriaId":"DB7EA4CC-E705-42DB-86B6-E229DA36B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D35F4330-35ED-4966-884C-CF9F61F526E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0029.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://blogs.technet.com/swi/archive/2008/06/05/why-there-wont-be-a-security-update-for-wkimgsrv-dll.aspx","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491027/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41876","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5460","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5530","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://blogs.technet.com/swi/archive/2008/06/05/why-there-wont-be-a-security-update-for-wkimgsrv-dll.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491027/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1900","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field."},{"lang":"es","value":"option_Update.asp en Carbon Communities 2.4 y versiones anteriores permite a atacantes remotos editar información sobre los miembros de su elección a través de un campo ID modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carbon_communities:carbon_communities:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"6B7BAA36-AD07-4AAD-A9DF-0A49ADFB1C96"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490923/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41961","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490923/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1901","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file."},{"lang":"es","value":"aptlinex versiones anteriores a 0.91 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque symlink en un fichero temporal gambas-apt.lock."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.6-1:*:*:*:*:*:*:*","matchCriteriaId":"D3B47C38-0B94-47C8-90D0-DCE1C0A609FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.7-1:*:*:*:*:*:*:*","matchCriteriaId":"DA6359C6-1AF6-4DB8-B3E8-DB42C915230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.8-1:*:*:*:*:*:*:*","matchCriteriaId":"9D005494-754B-4200-BA8B-968A13954A1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.8-2:*:*:*:*:*:*:*","matchCriteriaId":"B59AFF98-7E2E-4FAA-852D-FE6A08677ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.9-1:*:*:*:*:*:*:*","matchCriteriaId":"2FB3D88B-6088-4A99-A864-2A811B08E6A1"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41956","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1902","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL."},{"lang":"es","value":"El GUI para aptlinex versiones anteriores a 0.91 no alerta suficientemente al usuario de acciones potencialmente peligrosas, lo cual permite a atacantes remotos eliminar o modificar paquetes de su elección a través de una URL apt://."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.6-1:*:*:*:*:*:*:*","matchCriteriaId":"D3B47C38-0B94-47C8-90D0-DCE1C0A609FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.7-1:*:*:*:*:*:*:*","matchCriteriaId":"DA6359C6-1AF6-4DB8-B3E8-DB42C915230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.8-1:*:*:*:*:*:*:*","matchCriteriaId":"9D005494-754B-4200-BA8B-968A13954A1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.8-2:*:*:*:*:*:*:*","matchCriteriaId":"B59AFF98-7E2E-4FAA-852D-FE6A08677ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:aptlinex:0.9-1:*:*:*:*:*:*:*","matchCriteriaId":"2FB3D88B-6088-4A99-A864-2A811B08E6A1"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476572","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41954","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1903","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en news_show.php de Newanz NewsOffice 1.0 y 1.1, cuando register_globals está activo, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro newsoffice_directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newanz:newsoffice:1.0:*:*:*:*:*:*:*","matchCriteriaId":"04A8C2CF-A3C7-4128-8D71-9D7F876F3467"},{"vulnerable":true,"criteria":"cpe:2.3:a:newanz:newsoffice:1.1:*:*:*:*:*:*:*","matchCriteriaId":"112510B6-63B8-4AA6-B160-A7D1EA208FFE"}]}]}],"references":[{"url":"http://secunia.com/advisories/29797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28748","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41770","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1904","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the \"admin area\" via a modified this_cookie cookie."},{"lang":"es","value":"Cicoandcico CcMail 1.0.1 y versiones anteriores no verifica que la cookie this_cookie corresponde a una sesión autenticada, lo cual permite a atacantes remotos obtener acceso al \"área de administración\" a través de una cookie this_cookie modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cicoandcico:ccmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"0F7D53F2-5589-47BE-84BE-170573120F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cicoandcico:ccmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FF428D3-6BFF-4F75-8027-5D2FED103615"}]}]}],"references":[{"url":"http://secunia.com/advisories/29812","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28751","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41797","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1905","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long HTTP request to TCP port 54444, a different vector than CVE-2007-2322."},{"lang":"es","value":"NMMediaServer.exe en Nero MediaHome 3.3.3.0 y versiones anteriores, tal como se utiliza en Nero 8.3.2.1 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (puntero de referencia NULL y caída de aplicación) a través de una petición HTTP larga al puerto TCP  54444, un vector diferente a CVE-2007-2322."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nero:mediahome:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3.0","matchCriteriaId":"C4835A5D-6E42-47A3-AB9F-E9B47F7A07BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nero:nero:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.2.1","matchCriteriaId":"0C6E9733-BC70-4D46-A37B-5015D39BA007"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/neromedia-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29808","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28775","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1216/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41795","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/neromedia-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1216/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1906","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en calendar.php de cpCommerce 1.1.0 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro year en una acción view.year."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC2E775-D3FF-4C06-8818-DA6105D7F2FC"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/34","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28755","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1213/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41780","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5437","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1213/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1907","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_product, (2) id_manufacturer, and (3) id_category parameters to unspecified components.  NOTE: this probably overlaps CVE-2007-2959 and CVE-2007-2890."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en functions/display_page.func.php de cpCommerce 1.1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros de componentes no especificados (1) id_product, (2) id_manufacturer, y (3) id_category.\r\nNOTA: esto probablemente se solape con CVE-2007-2959 y CVE-2007-2890."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC2E775-D3FF-4C06-8818-DA6105D7F2FC"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/34","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28755","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41781","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5437","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1908","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or (2) the action parameter to category.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en cpCommerce 1.1.0 permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en (1) el parámetro language en una acción language de una URL por defecto, lo cual no es manejado correctamente en actions/language.act.php, o (2)el parámetro action de category.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC2E775-D3FF-4C06-8818-DA6105D7F2FC"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/34","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28755","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1213/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41783","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5437","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1213/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1909","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comment.php de PHP Knowledge Base (PHPKB) 1.5 y 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chadha_software_technologies:phpkb_knowledge_base:1.5:*:*:*:*:*:*:*","matchCriteriaId":"D4CA037C-17FF-42AC-836B-9E12F5E0EFCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:chadha_software_technologies:phpkb_knowledge_base:2.0:*:*:*:*:*:*:*","matchCriteriaId":"805FB610-DE4B-4FCB-9C9E-118ED3AAACE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28739","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41769","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5428","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1910","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2 allows remote attackers to execute arbitrary code via a malformed opcode 0x52 request to TCP port 3050. NOTE: this might overlap CVE-2007-5243 or CVE-2007-5244."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servicio de base de datos (ibserver.exe) de Borland InterBase 2007 SP2 permite a atacantes remotos ejecutar código de su elección a través de una petición opcode 0x52 malformada del puerto TCP 3050.\r\nNOTA: esto puede solapar CVE-2007-5243 o CVE-2007-5244."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland:interbase:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"61A34261-D9DD-4990-83EB-51C6ADDA8EEB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490752/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28730","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019834","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41932","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5427","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490752/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1911","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a cookpass cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en includes/system.php de 1024 CMS 1.4.2 beta y versiones anteriores, cuando magic_quotes_gpc está inactivo, permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cookie cookpass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1024_cms:1024_cms:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B5FDF8E-B71A-4462-B141-7FDBEE852184"}]}]}],"references":[{"url":"http://secunia.com/advisories/29810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28754","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41785","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5434","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1912","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en DivX Player 6.7 build 6.7.0.22 y versiones anteriores permite a atacantes remotos con usuario asistido provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de un subtítulo largo en un fichero .SRT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_player:*:build_6.7.0.22:*:*:*:*:*:*","versionEndIncluding":"6.7","matchCriteriaId":"F3BDAF76-066D-45AA-8BB3-9ACCDB3FBFA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490898/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28799","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019921","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1235/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5453","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5492","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490898/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1235/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1913","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Lasernet CMS 1.5 and 1.11, cuando magic_quotes_gpc está inactiva, permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro new en una acción new."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lasernet_cms:lasernet_cms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"FA1D77AB-F572-46B2-B508-7EFABAE43FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lasernet_cms:lasernet_cms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"1910E896-047B-4C5E-BAB2-4A53C5CD7BED"}]}]}],"references":[{"url":"http://secunia.com/advisories/29734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28804","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1239/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41838","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5454","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1239/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1914","sourceIdentifier":"cve@mitre.org","published":"2008-04-22T04:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el módulo AntServer (AntServer.exe) de BigAnt IM Server en BigAnt Messenger 2.2 permite a atacantes remotos ejecutar código de su elección a través de una URI larga en una petición al puerto TCP 6080.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigantsoft:bigant_messenger:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7408B34B-6A3D-4AAB-AA8E-123CA579ECFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29831","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490916/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491035/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28795","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1238/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41830","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490916/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491035/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1238/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1915","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo view.asp en DevWorx BlogWorx versión 1.0, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devworx:blogworx:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6E1F19FC-BC98-46BB-BD29-C2447F4A312B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28776","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1305/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41808","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1305/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1916","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module for Drupal allow remote attackers to inject arbitrary web script or HTML via text fields intended for the (1) address and (2) order information, which are later displayed on the order view page and unspecified other administrative pages, a different vulnerability than CVE-2008-1428."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS), vulnerabilidades en Ubercart 5.x anteteriores a 5.x-1.0-rc1, módulo para drupal que permite a los atacantes remotos inyectar código web o HTML a través de los campos deseados (1) dirección y (2) pedir información, los cuales son mostrados mas tarde en la página que hemos pedido y en otras páginas administrativas no especificadas, es una vulnerabilidad distinta a CVE-2008-1428."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:ubercart_module:5-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"739895AB-2F58-4E92-BE95-9D2BED55C5E6"}]}]}],"references":[{"url":"http://drupal.org/node/241944","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1083/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41624","source":"cve@mitre.org"},{"url":"http://drupal.org/node/241944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1083/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1917","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) class parameter to (a) methodTable.php, (b) code.php, and (c) details.php in browser/; and the (2) location parameter to browser/code.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AMFPHP 1.2 permite a atacantes remotos inyectar código web o HTML de su elección a través del (1) parámetro class en (a)methodTable.php, (b)code.php y (c)details.php en browser/; y del (2)parámetro location en browser/code.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amfphp:amfphp:1.2:*:*:*:*:*:*:*","matchCriteriaId":"60926DE5-47A3-484E-B799-FF78E13C91AD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28789","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41835","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1918","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submit_info[] parameter in a link submission action.  NOTE: it was later reported that 7.00.2 is also affected."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo submit.php en PHP-Fusion versiones 6.01.14 y 6.00.307, cuando magic_quotes_gpc está deshabilitado y se conoce el prefijo de la tabla de base de datos, permite a los usuarios autenticados remotos ejecutar comandos SQL arbitrarios por medio del parámetro submit_info[] en una acción link submission. NOTA: más tarde se reportó que versión 7.00.2 también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:6.00.307:*:*:*:*:*:*:*","matchCriteriaId":"3F79C639-9C29-4803-9E43-60207AE59794"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:6.01.14:*:*:*:*:*:*:*","matchCriteriaId":"F7967D43-5236-45DA-AC6A-CAE60C3807EC"}]}]}],"references":[{"url":"http://osvdb.org/51052","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33295","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.php-fusion.co.uk/news.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28855","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1318/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47610","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5470","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7576","source":"cve@mitre.org"},{"url":"http://osvdb.org/51052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.php-fusion.co.uk/news.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1318/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1919","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listtest.php en YourFreeWorld Apartment Search Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:apartment_search_script:*:*:*:*:*:*:*:*","matchCriteriaId":"1724580F-C863-4AD4-93C0-55C818F2B41B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28853","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1339/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41902","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5471","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1339/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1920","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer basado en montículo en el módulo boxelyRenderer en el Personal Status Manager feature de ICQ 6.0 build 6043, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un mensaje de estado personal manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:mirabilis_icq:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EB64B63F-0A40-44C6-99A6-D43D983907DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-04-08","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490921/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28803","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1299/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-04-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490921/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1299/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1921","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T13:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in store_pages/category_list.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the category_ID parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en store_pages/category_list.php en 5th Avenue Shopping Cart 1.2 trial edition permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro category_ID"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:5th_avenue_software:5th_avenue_shopping_cart:1.2:*:trial:*:*:*:*:*","matchCriteriaId":"B73F28D3-55FD-47B7-8778-B3D8C361157B"}]}]}],"references":[{"url":"http://forum.aria-security.com/showthread.php?p=76","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://forum.aria-security.net/showthread.php?p=2233","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491069/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28841","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41885","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5464","source":"cve@mitre.org"},{"url":"http://forum.aria-security.com/showthread.php?p=76","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://forum.aria-security.net/showthread.php?p=2233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1922","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Sarg pueden permitir a los atacantes ejecutar código de su elección a través de vectores desconocidos, probablemente a través de un log Squid manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sarg:squid_analysis_report_generator:*:*:*:*:*:*:*:*","matchCriteriaId":"9C409672-7674-428D-A604-33438BA4729E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30202","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:073","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29141","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42321","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1923","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends \"early audio\" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message."},{"lang":"es","value":"El IAX2 channel driver (chan_iax2) en Asterisk 1.2 anterior a la revisión 72630 y 1.4 anterior a la revisión 65679, cuando está configurado para permitir llamadas sin autenticación, envía \"early audio\" a una IP sin verificar de un mensaje NEW, lo que permite a atacantes remotos provocar una denegación de servicio (amplificación del tráfico) a través de un mensaje NEW falseado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:*:*:*:*:*:*:*:*","matchCriteriaId":"2140AF01-7079-4433-AF28-45E767E59AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"b2.5.1","matchCriteriaId":"C58BA442-8E36-492B-9700-B20B469190F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c1.8.0","matchCriteriaId":"267F32ED-B9E4-4454-99C1-F445E52EE96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:a:*:*:*:*:*:*:*","matchCriteriaId":"313B3A38-8DEA-4D62-A1A4-0B6011E81870"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"802F8680-AB38-41AF-BFC8-F6927F6B1626"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BCAE8D90-B032-4C60-B487-BE655D00FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB64A872-B7B8-46A8-81E4-49EDAC160531"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"21000270-C9B9-430C-A252-763887A15835"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12F7CF45-5482-4947-8F1D-48C746987475"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B64995D-7892-49AB-A89D-A5D15615C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0397DBD4-EA00-444A-9008-4932F99DF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"5BC80EBD-14D3-44A6-A06F-0549722E0EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta8:*:*:*:*:*:*:*","matchCriteriaId":"7859797F-E9AD-4429-BD2C-A24EC24A5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0beta7:*:*:*:*:*:*:*","matchCriteriaId":"34FAE6AC-1C98-42E0-A5D4-5EA17ED325A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"00A6DAD0-D4C3-4A58-A35A-991E04B50EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"272DE03B-1470-45FF-A31B-2CE44A8E8378"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC6FE17C-3B08-4675-9F73-5DC0C2438BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8AB81C-3DCF-42E9-8022-2F7135022C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*","matchCriteriaId":"678DB154-4363-42FF-8B28-367923FC6595"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F2C378-FF0E-4765-9F66-625C4064D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A55A9295-F632-4856-90A1-38371EB98589"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FAE6AF1-884D-41F7-B174-9E13C7719C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCA9E35B-9A6B-42F2-9315-9C7D09F62227"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF7EC20-A424-45E5-B7E4-3CC86075858C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C790E105-55C8-4CDC-9FA8-E1FF6F130A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"44C860EF-2B29-4995-B942-000CC43FDD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADB80EF-C724-44BA-88FC-24087799D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"78B39BE8-7E2D-42DF-8633-44CAD5662777"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F39036E3-0027-4C72-9DEB-9A6E2B4512C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A037E6F9-3EF7-4EEB-AC16-081421BCE40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A7EC02A-9C9E-4589-BBB3-1908D3078A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6C70FA9C-6F3B-4BDF-97FB-81D06AB0EE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"107DA2D8-FE7C-4B70-856D-43D58B988694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:netsec:*:*:*:*:*:*","matchCriteriaId":"02D5E6DF-7C9C-479F-986B-D5C8A144ACB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:netsec:*:*:*:*:*:*","matchCriteriaId":"68AF6200-1385-449F-A00E-2BACEE16450B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5C14614F-4E27-40A6-9E56-2B1DBB10330B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:netsec:*:*:*:*:*:*","matchCriteriaId":"61C0769F-6739-41D2-ADD8-924AC04C5F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7A2F2F5A-66FD-4057-917C-66332A88D83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:netsec:*:*:*:*:*:*","matchCriteriaId":"8EF13987-5767-4FED-9584-63D74B0A30A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"399B0206-B48B-46EF-8CA6-A6E5A2550B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:netsec:*:*:*:*:*:*","matchCriteriaId":"C57C1324-E11A-4B2B-9722-A4A63AEF0497"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"26E9760F-C0EB-47BB-8DA4-CC7815099DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:netsec:*:*:*:*:*:*","matchCriteriaId":"EE6D9718-D57D-48F6-A2B1-CECAFFCDDFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6BD915CD-A7D3-4305-A6C0-290C648A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:netsec:*:*:*:*:*:*","matchCriteriaId":"3249AB40-2058-42E9-9A33-64E434E5BB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"0CF6584D-A7BB-4BD5-8232-9293FEE4A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"174D6B56-7D0F-46F0-849A-FD05CB348FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"938F545A-F8A7-455E-8E5A-2B5454B6CE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*","matchCriteriaId":"21612C17-7368-4108-B55B-5AB5CA6733E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"A149F8C2-3DA5-44B2-A288-3482F3975824"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"9462B320-B69D-409D-8DCC-D8D6CA1A757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"BEA0014A-659B-4533-A393-6D4ADC80EB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"346C9F65-B5FB-4A75-8E1B-137112F270D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"7EFEE380-0C64-4413-AF3A-45ABC8833500"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"8CA18FC6-1480-400E-A885-8CDAE45AA7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"93741261-378B-4C02-8D68-0E5F39128375"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"72375576-F857-4585-A677-A326D89A65B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"40850BF4-E252-4667-9B46-9B6FEF6E997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1BB01DD1-B29B-4210-88CC-9ADB3148A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"99E9EE2A-56AD-42BC-8CB0-D34091849B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96877A3E-B54B-4F31-B281-76CDC98B2D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6D0B4503-42A6-4D88-954E-A662E91EC204"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A4B73813-BCD8-429E-B9B9-D6665E026BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"5BBA3ECC-4F40-41CD-A6D7-BBD680DDBACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBE2156-AF86-4C72-B33D-3FF83930F828"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61408884-FBBF-4D94-A552-F99AB46DCED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"4A527277-D97D-4B74-906F-7481BDBD96D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D8B57A32-7B83-4783-A244-C26301970444"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"88576385-EF03-408B-9775-B52E6AFFE48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc1:*:*:*:*:*:*","matchCriteriaId":"BFC1BB05-15C6-4829-86EB-5B1BFA4B5B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc2:*:*:*:*:*:*","matchCriteriaId":"AB77E88B-7233-4979-914E-24E671C1FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc3:*:*:*:*:*:*","matchCriteriaId":"C4FF0F09-0268-480F-A2F3-6F8C3F323EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc4:*:*:*:*:*:*","matchCriteriaId":"1CCF9CAE-674A-4833-9D5C-FCBD865BE9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.2","matchCriteriaId":"15C01793-C5D3-4359-B332-A8A104832370"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C3A0A08-4107-4B8B-AE7E-DC23849A54DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9320928D-D83C-4258-AF62-AB2D1F50D972"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"569084D1-977D-41FC-A444-0B3F5199DDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02D182FB-761C-4F08-A776-B613FAC55230"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C9046D49-6878-4571-8B9E-2FBD5BA80D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B5EDAB-61DD-4864-A159-39292D339DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"101DFEFB-7627-4D36-AAA2-EDFB4D0E5AB5"}]}]}],"references":[{"url":"http://bugs.digium.com/view.php?id=10078","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-006.html","source":"cve@mitre.org"},{"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42049","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=10078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.digium.com/pub/security/AST-2008-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1924","sourceIdentifier":"cve@mitre.org","published":"2008-04-23T16:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable."},{"lang":"es","value":"Una vulnerabilidad no especificada en phpMyAdmin versiones anteriores a 2.11.5.2, cuando se ejecuta en hosts compartidos, permite a los usuarios autenticados remotos con permisos de tabla CREATE leer archivos arbitrarios por medio de una petición POST de HTTP diseñada, relacionada con el uso de una variable UploadDir indefinida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.5.1","matchCriteriaId":"DC18B1C0-5228-4A30-8275-569C026F8070"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8F3A44D6-F174-428E-8456-5B7B093D7A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*","matchCriteriaId":"EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"CD5CB748-A953-4CAD-B8F9-21F43D2992E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*","matchCriteriaId":"A4843917-B7B1-4871-AE2B-2219C6EB85F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*","matchCriteriaId":"CC99B93D-2171-40DE-90B3-61D6DB9F6D47"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29944","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-02.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28906","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1328/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41964","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200805-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1328/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1925","sourceIdentifier":"cve@mitre.org","published":"2008-04-24T05:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with crafted nicknames, idents, and long hostnames."},{"lang":"es","value":"Desbordamiento de búfer en InspIRCd anterior a 1.1.18, cuando usa los módulos namesx y uhnames, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través un gran número de canales de usuarios con apodos, identidades y nombres de dominio largos manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.17","matchCriteriaId":"CC12025F-E00D-4051-87A6-6B419EB88DD0"}]}]}],"references":[{"url":"http://secunia.com/advisories/29610","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30163","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-08.xml","source":"cve@mitre.org"},{"url":"http://www.inspircd.org/bugtrack/view_bug.php?bug_id=438","source":"cve@mitre.org"},{"url":"http://www.inspircd.org/forum/showthread.php?t=2945","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/22/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28506","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1041/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.inspircd.org/bugtrack/view_bug.php?bug_id=438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.inspircd.org/forum/showthread.php?t=2945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/22/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1041/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1926","sourceIdentifier":"secalert@redhat.com","published":"2008-04-24T05:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an \"addr=\" statement to the login name, aka \"audit log injection.\""},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en login (login-utils/login.c) de util-linux-ng 2.14 y anteriores, hace que atacantes remotos puedan esconder fácilmente sus actividades modificando partes del log de sucesos, como se ha demostrado añadiendo una sentencia \"addr=\" en el campo \"name\" del login, también conocido como \"audit log injection.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue affecting Red Hat Enterprise Linux 5 and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1926\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. \n\nThis issue has been addressed in Red Hat Enterprise Linux 4 with the following update:\nhttps://rhn.redhat.com/errata/RHSA-2009-0981.html","lastModified":"2009-05-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:util-linux:2.13:*:*:*:*:*:*:*","matchCriteriaId":"393F4032-A538-489F-8643-27608E4D51B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:util-linux:2.13.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8756FB28-086B-472F-8F0B-29570EE41BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:util-linux:2.13.1:*:*:*:*:*:*:*","matchCriteriaId":"3D1ADC6E-3146-480E-BA04-5030C3E95AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:util-linux:2.13.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9B4D85E2-1EE1-40BA-9FE7-FE2C0779FA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:util-linux:2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"6EC054D9-5945-4BB9-A200-B764E4806D96"}]}]}],"references":[{"url":"http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29982","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30014","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35161","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0143","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:114","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0981.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507854/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28983","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022256","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1392/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41987","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9833","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00624.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0981.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507854/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1392/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00624.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1927","sourceIdentifier":"cve@mitre.org","published":"2008-04-24T05:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters.  NOTE: this issue might only be present on certain operating systems."},{"lang":"es","value":"Vulnerabilidad de doble liberacioón en Perl 5.8.8 permite a los atacantes, dependiendo del contexto, causar una denegación de servicio (corrupción de memoria y caida) a través de  expresiones regulares manipuladas conteniendo caracteres UTF8. NOTE: esta característica solo está presente en ciertos sistemas operativos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*","matchCriteriaId":"E98D2706-99B7-4153-925B-77A8CECD7CFB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/44588","source":"cve@mitre.org"},{"url":"http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30025","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30624","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31208","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0011","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1556","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml","source":"cve@mitre.org"},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=41","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:100","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0522.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0532.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500210/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28928","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020253","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-700-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-700-2","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2265/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2424","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41996","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipcop.org/index.php?name=News&file=article&sid=41","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0522.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0532.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500210/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-700-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-700-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2265/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1928","sourceIdentifier":"cve@mitre.org","published":"2008-04-24T05:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels."},{"lang":"es","value":"Desbordamiento de búfer en Imager en la versión 0.42 a la 0.63, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una imagen \"based fill\" en la que el número de canales de entrada es distinto del número de canales de salida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.42:*:*:*:*:*:*:*","matchCriteriaId":"EBA093A0-6344-48FD-B76A-DB3E0337B7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.43:*:*:*:*:*:*:*","matchCriteriaId":"1F5446B7-2610-4E29-AB9E-89F4C2B2409F"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.43_03:*:*:*:*:*:*:*","matchCriteriaId":"CB49EF29-6D69-402C-8032-7F780A1A4B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.44:*:*:*:*:*:*:*","matchCriteriaId":"FDC38B0A-7F1A-4266-9ECA-16E24E29EABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.44_01:*:*:*:*:*:*:*","matchCriteriaId":"1D927EC9-02AC-47B5-9617-369D3AEC98ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.45:*:*:*:*:*:*:*","matchCriteriaId":"A74E4BBF-9EFA-49BE-9A97-B795BD4713E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.45_02:*:*:*:*:*:*:*","matchCriteriaId":"DB693EB6-BB2C-42BD-81D0-5D41A3DDA3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.46:*:*:*:*:*:*:*","matchCriteriaId":"BAD2AE19-8A39-4414-834E-B262FBBB6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.47:*:*:*:*:*:*:*","matchCriteriaId":"ED1E5DD6-B58B-46A6-BA49-0ED3683BE8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.48:*:*:*:*:*:*:*","matchCriteriaId":"443B271D-CFE1-4F8A-8B5B-2BDDC19B6B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.49:*:*:*:*:*:*:*","matchCriteriaId":"3AF32B50-FB3C-45A2-B757-27948CD26F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.49_01:*:*:*:*:*:*:*","matchCriteriaId":"AF446B22-E726-45C7-8030-1CA456B5C334"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.50:*:*:*:*:*:*:*","matchCriteriaId":"C899B130-F05D-4E48-9B15-899DB88CF4C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.51:*:*:*:*:*:*:*","matchCriteriaId":"CA0EBE7F-46E3-4AF1-A5DF-A1B51CDA8E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.51_01:*:*:*:*:*:*:*","matchCriteriaId":"577ADA2C-39F9-4249-A6BB-4916738B536C"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.51_02:*:*:*:*:*:*:*","matchCriteriaId":"541DE153-A1D1-4D1A-85C6-0C1EDAF130D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.51_03:*:*:*:*:*:*:*","matchCriteriaId":"32755E64-A5EE-4BEF-B897-5972A56C62C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.52:*:*:*:*:*:*:*","matchCriteriaId":"17162C2C-4471-441B-9BF3-E472E1E72ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.53:*:*:*:*:*:*:*","matchCriteriaId":"AF59BA5C-57E7-4756-87BE-FE3D7AB8662F"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.55:*:*:*:*:*:*:*","matchCriteriaId":"A2D652EA-BE60-43ED-8610-824D81874204"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.56:*:*:*:*:*:*:*","matchCriteriaId":"3A488357-C9FC-42F1-8E21-46C0C9BB47F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.57:*:*:*:*:*:*:*","matchCriteriaId":"83426098-1258-421E-AA8A-135BBBDD9A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.58:*:*:*:*:*:*:*","matchCriteriaId":"D68C583B-F016-48CE-8939-4A6243CB9C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.59:*:*:*:*:*:*:*","matchCriteriaId":"36018499-E36F-435A-82BD-15AE7A77E54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.60:*:*:*:*:*:*:*","matchCriteriaId":"18E37D39-A695-4A40-A21A-42DE81A54F7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.61:*:*:*:*:*:*:*","matchCriteriaId":"A2F1EAC7-32C8-4930-BD0B-ABEF36133B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.62:*:*:*:*:*:*:*","matchCriteriaId":"593C9221-813D-4952-BBFF-8B0C6F541915"},{"vulnerable":true,"criteria":"cpe:2.3:a:imager:imager:0.63:*:*:*:*:*:*:*","matchCriteriaId":"F60537CB-3D82-4A9D-B9E1-8AAD80C4DE22"}]}]}],"references":[{"url":"http://imager.perl.org/i/release064/Imager_0_64","source":"cve@mitre.org"},{"url":"http://rt.cpan.org/Public/Bug/Display.html?id=35324","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28980","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1387/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41986","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html","source":"cve@mitre.org"},{"url":"http://imager.perl.org/i/release064/Imager_0_64","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.cpan.org/Public/Bug/Display.html?id=35324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1387/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1930","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with \"admin\" to obtain administrator privileges, aka a \"cryptographic splicing\" issue.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013."},{"lang":"es","value":"El método de autenticación por Cookie en WordPress 2.5 confía en un hash de la cadena que resulta de concatenar USERNAME y EXPIRY_TIME, lo que permite a atacantes remotos falsificar cookies registrando nombres de usuario que resulten en la misma cadena concatenada, como se demostró registrando nombres de usuario que comenzaban con \"admin\" para conseguir privilegios de administrador, también conocido como asunto \"empalme criptográfico\". NOTA: Esta vulnerabilidad existe debido a un parche incompleto para la vulnerabilidad CVE-2007-6013"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29965","source":"cve@mitre.org"},{"url":"http://wordpress.org/development/2008/04/wordpress-251/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-integrity.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491356/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28935","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019923","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1372/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42027","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/development/2008/04/wordpress-251/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-integrity.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491356/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1372/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1931","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read registry keys via a crafted IOCTL request."},{"lang":"es","value":"Los Drivers para los Codec de Audio de Realtek HD, RTKVHDA.sys y RTKVHDA64.sys, versiones anteriores a 6.0.1.5605 en Windows Vista, permite a usuarios locales crear, escribir y registrar claves a través de una petición IOCTL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:x32:*:*:*:*:*","matchCriteriaId":"8C7E0F58-4948-4785-816F-6B2DC5FEA18E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtek:hd_audio_codec_drivers:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1.5604","matchCriteriaId":"7B3CDE37-6440-4047-81C5-8E398373EEF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491249/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28909","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1350/references","source":"cve@mitre.org"},{"url":"http://www.wintercore.com/advisories/advisory_W010408.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491249/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1350/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wintercore.com/advisories/advisory_W010408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1932","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to execute arbitrary code via a crafted IOCTL request."},{"lang":"es","value":"Desbordamiento de entero en los controladores RTKVHDA.sys y RTKVHDA64.sys del Codec de audio Realtek HD anterior a la version 6.0.1.5605 en Windows Vista permite a usuarios locales ejecutar código arbitrario mediante la creación de respuestas IOCTL manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:x32:*:*:*:*:*","matchCriteriaId":"8C7E0F58-4948-4785-816F-6B2DC5FEA18E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtek:hd_audio_codec_drivers:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1.5604","matchCriteriaId":"7B3CDE37-6440-4047-81C5-8E398373EEF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/29953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491249/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28909","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1350/references","source":"cve@mitre.org"},{"url":"http://www.wintercore.com/advisories/advisory_W010408.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42079","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491249/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1350/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wintercore.com/advisories/advisory_W010408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1933","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method.  NOTE: the victim must explicitly allow the code to run."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta de cierto control Active X en Zune,  permite a usuarios remotos asistidos , sobrescribir archivos de su elección a través del método SaveToFile. NOTA: la víctima debe permitir ejecutar el código de manera explícita."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:zune_software:*:*:*:*:*:*:*:*","matchCriteriaId":"63214B3D-4275-42F3-881C-77EDCF4B4ED6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491231/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42028","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5489","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491231/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1934","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comentaires.php en Crazy Goomla 1.2.1 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crazy_goomba:crazy_goomba:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"836D87F6-67FE-4C69-A16C-FE651EDEAD20"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28880","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1304/references","source":"cve@mitre.org"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/58-Crazy-Goomba-1.2.1-SQL-inj.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42023","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1304/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/58-Crazy-Goomba-1.2.1-SQL-inj.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1935","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idFiliale parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Filiale para Joomla, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro idFiliale."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1346/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41980","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1346/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1936","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in an add action.  NOTE: this issue might be site-specific."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de Classifieds Caffe, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través  del parámetro cat_id en una acción add. NOTA: puede que esta cuestión sea específica de un sitio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:classifieds_caffe:classifieds_caffe:*:*:*:*:*:*:*:*","matchCriteriaId":"9EB63F29-C9D5-4F5D-B4A3-35B1062FC5D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28800","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1240/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5450","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1240/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1937","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges."},{"lang":"es","value":"El procesamiento del formulario \"user\" (userform.py) en MoinMoin anterior a 1.6.3, cuando emplea ACLs o una lista de superusuarios  que no está vacía, no gestiona correctamente los usuarios lo que permite a atacantes remotos obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03FBCD1B-2D05-4C17-B41C-CF8DA75BB05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"51DF4CAC-EDD8-4C71-BC77-0F516692B5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB1CAAA6-8D33-4901-88E2-120AB7B4CD53"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.6/rev/f405012e67af","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30160","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-09.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28869","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1307/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41909","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.6/rev/f405012e67af","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1307/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1938","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks."},{"lang":"es","value":"El firmware del Sony Mylo COM-2, modelo japonés anterior a 1.002 no verifica de forma adecuada el certificado SSL del servidor Web, lo que permite a los atacantes remotos obtener información sensible y conducir ataques de Spoofing.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sony:mylo_com_2:*:*:*:ja:*:*:*:*","versionEndIncluding":"1.001","matchCriteriaId":"CF6C7F9F-5F48-43F4-82D5-9877E0CBDDB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sony:mylo_com_2:*:*:*:en:*:*:*:*","versionEndIncluding":"1.100","matchCriteriaId":"B8808B60-2298-43F7-8293-9EF8846E7F01"}]}]}],"references":[{"url":"http://esupport.sony.com/perl/news-item.pl?news_id=262&mdl=COM2","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2376788395/index.html","source":"cve@mitre.org"},{"url":"http://mylo.nccl.sony.co.jp/download/M-W002-001-02/index.html","source":"cve@mitre.org"},{"url":"http://mylo.nccl.sony.co.jp/hotnews/2008/04/01/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28905","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1349/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41971","source":"cve@mitre.org"},{"url":"http://esupport.sony.com/perl/news-item.pl?news_id=262&mdl=COM2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/jp/JVN%2376788395/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mylo.nccl.sony.co.jp/download/M-W002-001-02/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mylo.nccl.sony.co.jp/hotnews/2008/04/01/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1349/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1939","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters to (a) philboard_reply.asp, and the (3) forumid parameter to (b) philboard_newtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920."},{"lang":"es","value":"Múltiples Vulnerabilidades de Inyección SQL en W1L3D4 Philboard 1.0, permiten a atacantes remotos ejecutar comandos SQL arbitrariamente a través de los parámetros (1) id y (2) topic en (a) philboard_reply.asp y del parámetro (3) forumid en (b) philboard_newtopic.asp, vectores diferentes de CVE-2007-2641 y CVE-2007-0920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:philboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1EB355C2-F8B0-4839-A367-8BB8FCAF2661"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28871","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1340/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41957","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1340/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1940","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls."},{"lang":"es","value":"la funcionalidad RBAC en grsecurity  anterior a 2.1.11-2.6.24.5 y 2.1.11-2.4.36.2, no refuerza adecuadamente las reglas de user_transition_deny y user_transition_allow para las llamadas  a (1) sys_setfsuid y (2) sys_setfsgid, lo que permite a usuarios locales evitar ciertas restricciones para esas llamadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"DE274B31-F45B-44AC-A2CF-55CDD75EF8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33.2:*:*:*:*:*:*:*","matchCriteriaId":"C69D79A0-4AE7-4404-A84B-CC9DC94ACB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33.3:*:*:*:*:*:*:*","matchCriteriaId":"4402581B-56B9-42EE-BEB6-471BDAAF98FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33.4:*:*:*:*:*:*:*","matchCriteriaId":"5622EF19-743B-4883-9261-D956AB1A640D"},{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.34:*:*:*:*:*:*:*","matchCriteriaId":"F3685EC7-3E2F-4180-9B24-F39EE79FA7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"3C64C331-5190-4A97-ADAD-9112A4F2BDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"F0A7E755-ABDB-4458-A16E-92C55217DBEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/29899","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.grsecurity.org/news.php#grsec21113","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28889","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019919","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1323/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41952","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.grsecurity.org/news.php#grsec21113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1323/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1941","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the form field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en la opción \"update\" en Akiva WebBoard 8.0, lo que permite a usuarios autenticados remotamente, inyectar código web o HTML de su elección a través de vectores desconocidos en los campos de un formulario. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akiva:webboard:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4202C8AE-016A-4A42-8AE2-96FE89E4EEC9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28895","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41969","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1942","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T06:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1) a malformed ExtGState resource containing a /Font resource, or (2) an XObject resource with a Rotate setting, which triggers memory corruption.  NOTE: this is probably a different vulnerability than CVE-2007-2186."},{"lang":"es","value":"El Foxit Reader 2.2 permite a los atacantes remotos causar una denegación de servicio (caida) y posiblemente la ejecución de código arbitrario mediante un fichero PDF con (1) un recurso ExtGState mal construido conteniendo un recurso /Font o (2) un recurso XObject con configuración Rotate, con iniciadores de corrupción de memoria. NOTA: esta es, probablemente, una vulnerabilidad distinta a CVE-2007-2186\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxit_software:reader:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6E2B5C-81D4-4E34-8634-7A50DA93A822"}]}]}],"references":[{"url":"http://secunia.com/advisories/29934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28890","source":"cve@mitre.org"},{"url":"http://www.vallejo.cc/proyectos/foxitreader1.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vallejo.cc/proyectos/foxitreader2.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1327/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41972","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41973","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vallejo.cc/proyectos/foxitreader1.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vallejo.cc/proyectos/foxitreader2.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1327/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1943","sourceIdentifier":"secalert@redhat.com","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Possible solution and more infomation located here: http://rhn.redhat.com/errata/RHSA-2008-0194.html","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer."},{"lang":"es","value":"Un desbordamiento de búfer en el backend de XenSource Xen Para Virtualized Frame Buffer (PVFB) versiones 3.0 hasta 3.1.2, permite a usuarios locales causar una denegación de servicio (bloqueo de aplicación) y posiblemente ejecutar código arbitrario por medio de una descripción diseñada de una framebuffer compartida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:5:*:*:*:*:*:*:*","matchCriteriaId":"6C49CDB8-DC34-4791-B3B0-C1EAF0638B04"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*","matchCriteriaId":"3AA8F2EC-55E9-4529-A816-B5D495605F6B"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:virtualization_server:5:*:*:*:*:*:*:*","matchCriteriaId":"6D84BCA5-7642-4638-98D9-482473FFCB14"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E6E5532C-4937-47C9-88DB-724106627030"},{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"95C055D0-25CC-45A0-A028-AB10EA4792CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A90622F-17E0-4BE4-87A8-97135CC83141"},{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EC057084-79A6-478C-8B7B-C30B89928FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"912EE73A-7C58-43EC-AF1A-9804E3ED68CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/29963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30781","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29183","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020008","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1900/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443078","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42387","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10338","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1900/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1944","sourceIdentifier":"secalert@redhat.com","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"https://bugzilla.redhat.com/show_bug.cgi?id=443078\r\n\"The PVFB backend is a user space program running as root in dom0\"","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via \"bogus screen updates,\" related to missing validation of the \"format of messages.\""},{"lang":"es","value":"Un desbordamiento de búfer en el backend del búfer de XenSource Xen Para-Virtualized Framebuffer (PVFB) Message versiones 3.0 hasta 3.0.3,  permite a usuarios locales causar una denegación de servicio (bloqueo de SDL) y posiblemente ejecutar código arbitrario por medio  de  \"bogus screen updates,\" relacionadas con la falta de comprobación del  \"format of messages.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:5:*:*:*:*:*:*:*","matchCriteriaId":"6C49CDB8-DC34-4791-B3B0-C1EAF0638B04"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*","matchCriteriaId":"3AA8F2EC-55E9-4529-A816-B5D495605F6B"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:virtualization_server:5:*:*:*:*:*:*:*","matchCriteriaId":"6D84BCA5-7642-4638-98D9-482473FFCB14"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E6E5532C-4937-47C9-88DB-724106627030"},{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A90622F-17E0-4BE4-87A8-97135CC83141"}]}]}],"references":[{"url":"http://secunia.com/advisories/29963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29186","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020009","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443390","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42388","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10868","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1945","sourceIdentifier":"secalert@redhat.com","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004."},{"lang":"es","value":"QEMU 0.9.0 no maneja apropiadamente cambio de medios extraíbles, lo cual permite a usuarios invitados del sistema operativo leer ficheros de su elección en el Host del sistema operativo utilizando el diskformat: parámetro en la opción -usbdevice para modificar la cabecera disk-image para identificar un formato diferente, una cuestión relacionada a CVE-2008-2004."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F1D35E0-2033-4ADE-9ADA-3B45996B53B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*","matchCriteriaId":"38C3AEB0-59E2-400A-8943-60C0A223B680"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4814716C-514C-40F7-A59B-ED61F14658DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32063","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32088","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35031","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1799","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:162","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30604","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020959","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44269","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0892.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0892.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-1946","sourceIdentifier":"secalert@redhat.com","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module."},{"lang":"es","value":"La configuración por defecto de \"su\" en /etc/pam.d/su en GNU Coreutils 5.2.1, permite a usuarios locales elevar sus privilegios de una cuenta (1) bloqueada o (2) caducada introduciendo el nombre de usuario en la línea de comandos. Relacionado con un uso indebido del módulo pam_succeed_if.so."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B4060C1F-54F4-4D8F-A359-48CC27359585"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2008-0780.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31225","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020552","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30363","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43993","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10029","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0780.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1947","sourceIdentifier":"secalert@redhat.com","published":"2008-06-04T19:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Apache Tomcat v5.5.9 a la v5.5.26 y v6.0.0 a la v6.0.16, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro name (también conocido como el atributo hostname) al host-manager/html/add."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=tomcat-user&m=121244319501278&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30500","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30592","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30967","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31639","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31891","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32120","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32266","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33999","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34013","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1593","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492958/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29502","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020624","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1725","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0503","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42816","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11534","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6009","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tomcat-user&m=121244319501278&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492958/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1948","sourceIdentifier":"secalert@redhat.com","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1."},{"lang":"es","value":"La función _gnutls_server_name_recv_params de lib/ext_server_name.c en libgnutls de gnutls-serv en GnuTLS versiones anteriores a la 2.2.4, no calcula correctamente el número de Nombre de Servidor  en un mensaje Hello TLS 1.0 durante la gestión de extensiones, lo cual permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código arbitrariamente a través de un valor cero para la longitud de los Nombres de Servidores, lo que conlleva un desbordamiento de búfer en una sesión de reanudación de datos en la función pack_security_parameters, también conocida como GNUTLS-SA-2008-1-1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"A9CF40D3-CE03-4C2A-8EEF-EB5989291806"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"EC60D4CC-922C-4941-A400-0CBEAC7F31D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"754A0D19-A17A-4007-8355-497D14CFCBF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8140DBE1-8116-4051-9A57-07535586E0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F1CC840D-AD01-4EE2-8652-06742A6286BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"84224A82-6D58-4000-A449-20C1632DAE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"A466931C-769A-4A28-B072-10930CE655E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"10F621DC-7967-4D97-A562-02E7033C89C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"776E5481-399F-45BC-AD20-A18508B03916"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"63D7F972-9128-4A4D-8508-B38CE2F155E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"C5D56873-E8C5-4E4B-BB85-6DCF6526B453"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"54FE4766-32D0-491E-8C71-5B998C468142"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"7F980857-2364-466A-8366-BD017D242222"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"0A2E649D-5C45-4412-927B-E3EDCE07587C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"066175C2-6E96-4BAE-B1A6-B23D25547FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"869D3010-67AE-44D0-BB8F-D9C410AEA1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"052B40C1-C29B-4189-9A45-DAE873AB716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B588AAE0-8C3F-47C7-812F-8C97BD8795E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EBB9154B-4254-4F33-8DB2-5B96E2DA4931"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2EA79D1-2EA8-4040-A5B5-C93EE937945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"61D05BC3-1315-4AC7-884D-41459272C94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"738F29DA-9741-4BA5-B370-417443A3AC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"52173492-1031-4AA4-A600-6210581059D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB636C36-2884-4F66-B68A-4494AEAF90C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC4231BD-201D-4B10-9E35-B9EEFC714F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4C9200C3-0F46-4238-918B-38D95BF11547"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"024A9511-7CB4-4681-8429-0FE7FC34DF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"34CEF5ED-87A5-44B2-8A4A-9896957C057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B84A4F5-CED7-4633-913F-BE8235F68616"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"97564ABD-F9CE-4B3C-978A-1622DE3E4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3DB6EC88-DCE0-439B-89CD-18229965849B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1E2C89DD-CDBD-4772-A031-089F32006D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8C2FD618-91F4-48E7-B945-90CC0A367DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"65DC9555-E76F-4F8D-AE39-5160B34A87FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8B61D180-9EEA-4258-9A59-7F004F2C83F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"00DE1208-BDDC-405B-A34A-B58D00A279DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B8EF689E-59AA-4619-ADB2-E195CFD4094A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"22314ED6-D0CD-442E-A645-A9CCFE114AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1C5B2-27BF-4328-9336-98B8828EE4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C952BF-A135-4B15-8A51-94D66B618469"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6ADED309-0A25-478D-B542-96217A0DD63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DC0403DE-76B1-4E24-8014-64F73DCB53DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7F714D22-873A-4D64-8151-86BB55EFD084"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E9181F9-50FF-4995-9554-022CF93376C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AED0B40F-3413-40D6-B1EF-E6354D2A91F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4E99A7D8-2303-4268-8EF8-6F01A042BEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"86C70F69-FB80-4F32-A798-71A5153E6C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B2A1E604-500E-4181-BF66-BB69C7C3F425"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"0C8120E3-B60F-44E4-B837-4707A9BAEDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F7073EAD-06C9-4309-B479-135021E82B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"1895868E-E501-42C2-8450-EEED4447BAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"199AA36A-3B23-438C-9109-CC9000372986"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD6FFF05-37B2-4D69-86AF-921591382D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*","matchCriteriaId":"82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"04C40F0E-B102-4FE8-9E93-0ACFBF35226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*","matchCriteriaId":"22802660-D33F-4683-B82F-C94AC6170A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*","matchCriteriaId":"3623E9BE-F513-4301-BF0C-6A7F87E78E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*","matchCriteriaId":"B5DBAF08-1441-4F14-A740-E90044B77042"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*","matchCriteriaId":"4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*","matchCriteriaId":"5D3B6684-3890-4B60-BE67-D06045A86B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81C6C982-21D5-4FE3-A342-FC45BD78D2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F9D61596-01EB-4936-923B-63537625F926"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"599EB59C-7717-47A8-84C6-78B6D79AEB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"26E9005E-5034-43F2-B96E-7829E19FE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A5EE-2892-4548-A0CB-D3289CD64D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"83F22BF4-A738-438B-8D0B-6993640F0D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D3193B7-8FB9-45E4-BFF6-891A3F14F021"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF269AE-121B-4982-A765-5C7E806FA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A1C9F604-7FBE-4759-B039-8F5894574203"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"191821CD-E4CB-4269-B04C-284A9F9783B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B2A71474-958D-4689-A652-3E2A731F47FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38169043-17DF-4CF9-963A-8770B8882357"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C4537676-A72E-4433-B44F-3664EDD6F240"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8D090B10-68F2-424D-8234-2A280AA96B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"23168B77-645D-4A2A-A6E3-7001104064A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4D085B16-3116-423F-BDE0-2D93E12650A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C59247E9-CDAE-4269-A8E4-F49F617CDD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6019C0C-E9DD-4831-8E6A-785AE1A930FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"16F9CF15-8789-49B6-BB6D-B784C8FF20ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C51E0C88-B19C-408D-AC17-10CE7462D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"2AC41482-B3BC-4C93-A850-73A179BAB763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"ADC80BE1-28A6-4348-A061-8FD9C805E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D8201FF6-53A8-4850-A2B2-47AA65B2CB75"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30287","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30302","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30317","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30330","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30331","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30338","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30355","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31939","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-20.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3902","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174","source":"secalert@redhat.com"},{"url":"http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1581","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/111034","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:106","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0489.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0492.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492282/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492464/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29292","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020057","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-613-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1582/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1583/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42532","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2552","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10935","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/111034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0489.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0492.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492282/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492464/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-613-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1582/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1583/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1949","sourceIdentifier":"secalert@redhat.com","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2."},{"lang":"es","value":"La función _gnutls_recv_client_kx_message en lib/gnutls_kx.c de libgnutls en gnutls-serv de GnuTLS versiones anteriores a la 2.2.4 continúa procesando los mensajes Client Hello dentro de un mensaje TLS después de que uno ya haya sido procesado, lo cual permite a atacantes remotos provocar una denegación de servicio (referencia NULL y caída) a través de un mensaje TLS que contiene múltiples mensajes Hello Client, también conocida como GNUTLS-SA-2008-1-2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"A9CF40D3-CE03-4C2A-8EEF-EB5989291806"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"EC60D4CC-922C-4941-A400-0CBEAC7F31D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"754A0D19-A17A-4007-8355-497D14CFCBF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8140DBE1-8116-4051-9A57-07535586E0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F1CC840D-AD01-4EE2-8652-06742A6286BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"84224A82-6D58-4000-A449-20C1632DAE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"A466931C-769A-4A28-B072-10930CE655E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"10F621DC-7967-4D97-A562-02E7033C89C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"776E5481-399F-45BC-AD20-A18508B03916"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"63D7F972-9128-4A4D-8508-B38CE2F155E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"C5D56873-E8C5-4E4B-BB85-6DCF6526B453"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"54FE4766-32D0-491E-8C71-5B998C468142"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"7F980857-2364-466A-8366-BD017D242222"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"0A2E649D-5C45-4412-927B-E3EDCE07587C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"066175C2-6E96-4BAE-B1A6-B23D25547FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"869D3010-67AE-44D0-BB8F-D9C410AEA1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"052B40C1-C29B-4189-9A45-DAE873AB716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B588AAE0-8C3F-47C7-812F-8C97BD8795E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EBB9154B-4254-4F33-8DB2-5B96E2DA4931"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2EA79D1-2EA8-4040-A5B5-C93EE937945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"61D05BC3-1315-4AC7-884D-41459272C94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"738F29DA-9741-4BA5-B370-417443A3AC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"52173492-1031-4AA4-A600-6210581059D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB636C36-2884-4F66-B68A-4494AEAF90C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC4231BD-201D-4B10-9E35-B9EEFC714F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4C9200C3-0F46-4238-918B-38D95BF11547"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"024A9511-7CB4-4681-8429-0FE7FC34DF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"34CEF5ED-87A5-44B2-8A4A-9896957C057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B84A4F5-CED7-4633-913F-BE8235F68616"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"97564ABD-F9CE-4B3C-978A-1622DE3E4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3DB6EC88-DCE0-439B-89CD-18229965849B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1E2C89DD-CDBD-4772-A031-089F32006D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8C2FD618-91F4-48E7-B945-90CC0A367DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"65DC9555-E76F-4F8D-AE39-5160B34A87FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8B61D180-9EEA-4258-9A59-7F004F2C83F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"00DE1208-BDDC-405B-A34A-B58D00A279DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B8EF689E-59AA-4619-ADB2-E195CFD4094A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"22314ED6-D0CD-442E-A645-A9CCFE114AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1C5B2-27BF-4328-9336-98B8828EE4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C952BF-A135-4B15-8A51-94D66B618469"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6ADED309-0A25-478D-B542-96217A0DD63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DC0403DE-76B1-4E24-8014-64F73DCB53DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7F714D22-873A-4D64-8151-86BB55EFD084"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E9181F9-50FF-4995-9554-022CF93376C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AED0B40F-3413-40D6-B1EF-E6354D2A91F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4E99A7D8-2303-4268-8EF8-6F01A042BEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"86C70F69-FB80-4F32-A798-71A5153E6C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B2A1E604-500E-4181-BF66-BB69C7C3F425"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"0C8120E3-B60F-44E4-B837-4707A9BAEDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F7073EAD-06C9-4309-B479-135021E82B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"1895868E-E501-42C2-8450-EEED4447BAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"199AA36A-3B23-438C-9109-CC9000372986"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD6FFF05-37B2-4D69-86AF-921591382D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*","matchCriteriaId":"82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"04C40F0E-B102-4FE8-9E93-0ACFBF35226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*","matchCriteriaId":"22802660-D33F-4683-B82F-C94AC6170A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*","matchCriteriaId":"3623E9BE-F513-4301-BF0C-6A7F87E78E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*","matchCriteriaId":"B5DBAF08-1441-4F14-A740-E90044B77042"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*","matchCriteriaId":"4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*","matchCriteriaId":"5D3B6684-3890-4B60-BE67-D06045A86B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81C6C982-21D5-4FE3-A342-FC45BD78D2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F9D61596-01EB-4936-923B-63537625F926"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"599EB59C-7717-47A8-84C6-78B6D79AEB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"26E9005E-5034-43F2-B96E-7829E19FE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A5EE-2892-4548-A0CB-D3289CD64D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"83F22BF4-A738-438B-8D0B-6993640F0D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D3193B7-8FB9-45E4-BFF6-891A3F14F021"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF269AE-121B-4982-A765-5C7E806FA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A1C9F604-7FBE-4759-B039-8F5894574203"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"191821CD-E4CB-4269-B04C-284A9F9783B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B2A71474-958D-4689-A652-3E2A731F47FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38169043-17DF-4CF9-963A-8770B8882357"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C4537676-A72E-4433-B44F-3664EDD6F240"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8D090B10-68F2-424D-8234-2A280AA96B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"23168B77-645D-4A2A-A6E3-7001104064A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4D085B16-3116-423F-BDE0-2D93E12650A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C59247E9-CDAE-4269-A8E4-F49F617CDD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6019C0C-E9DD-4831-8E6A-785AE1A930FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"16F9CF15-8789-49B6-BB6D-B784C8FF20ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C51E0C88-B19C-408D-AC17-10CE7462D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"2AC41482-B3BC-4C93-A850-73A179BAB763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"ADC80BE1-28A6-4348-A061-8FD9C805E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D8201FF6-53A8-4850-A2B2-47AA65B2CB75"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30287","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30302","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30317","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30324","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30330","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30338","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30355","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31939","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-20.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3902","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174","source":"secalert@redhat.com"},{"url":"http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1581","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/252626","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:106","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0489.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0492.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492282/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492464/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29292","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020058","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-613-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1582/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1583/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42530","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2552","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9519","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/252626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0489.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0492.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492282/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492464/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-613-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1582/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1583/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1950","sourceIdentifier":"secalert@redhat.com","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"The vendor has released a statement regarding this issue:\r\n\r\nhttp://lists.gnupg.org/pipermail/gnutls-dev/2006-September/001208.html","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3."},{"lang":"es","value":"Error en signo de entero de la función the _gnutls_ciphertext2compressed en lib/gnutls_cipher.c de libgnutls en GnuTLS versiones anteriores a la 2.2.4, permite a atacantes remotos provocar una denegación de servicio (sobre-lectura de búfer y caída) a través de determinados valores de entero en el campo Random de un mensaje Client Hello encriptado dentro de un registro TLS con una longitud de registro no válida, lo cual conlleva una longitud de relleno de cifra no válido, también conocido como GNUTLS-SA-2008-1-3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"A9CF40D3-CE03-4C2A-8EEF-EB5989291806"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"EC60D4CC-922C-4941-A400-0CBEAC7F31D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"754A0D19-A17A-4007-8355-497D14CFCBF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8140DBE1-8116-4051-9A57-07535586E0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F1CC840D-AD01-4EE2-8652-06742A6286BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"84224A82-6D58-4000-A449-20C1632DAE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"A466931C-769A-4A28-B072-10930CE655E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"10F621DC-7967-4D97-A562-02E7033C89C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"776E5481-399F-45BC-AD20-A18508B03916"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"63D7F972-9128-4A4D-8508-B38CE2F155E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"C5D56873-E8C5-4E4B-BB85-6DCF6526B453"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"54FE4766-32D0-491E-8C71-5B998C468142"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"7F980857-2364-466A-8366-BD017D242222"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"0A2E649D-5C45-4412-927B-E3EDCE07587C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"066175C2-6E96-4BAE-B1A6-B23D25547FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"869D3010-67AE-44D0-BB8F-D9C410AEA1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"052B40C1-C29B-4189-9A45-DAE873AB716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B588AAE0-8C3F-47C7-812F-8C97BD8795E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EBB9154B-4254-4F33-8DB2-5B96E2DA4931"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2EA79D1-2EA8-4040-A5B5-C93EE937945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"61D05BC3-1315-4AC7-884D-41459272C94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"738F29DA-9741-4BA5-B370-417443A3AC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"52173492-1031-4AA4-A600-6210581059D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB636C36-2884-4F66-B68A-4494AEAF90C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC4231BD-201D-4B10-9E35-B9EEFC714F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4C9200C3-0F46-4238-918B-38D95BF11547"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"024A9511-7CB4-4681-8429-0FE7FC34DF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"34CEF5ED-87A5-44B2-8A4A-9896957C057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B84A4F5-CED7-4633-913F-BE8235F68616"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"97564ABD-F9CE-4B3C-978A-1622DE3E4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3DB6EC88-DCE0-439B-89CD-18229965849B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1E2C89DD-CDBD-4772-A031-089F32006D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8C2FD618-91F4-48E7-B945-90CC0A367DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"65DC9555-E76F-4F8D-AE39-5160B34A87FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8B61D180-9EEA-4258-9A59-7F004F2C83F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"00DE1208-BDDC-405B-A34A-B58D00A279DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B8EF689E-59AA-4619-ADB2-E195CFD4094A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"22314ED6-D0CD-442E-A645-A9CCFE114AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1C5B2-27BF-4328-9336-98B8828EE4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C952BF-A135-4B15-8A51-94D66B618469"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6ADED309-0A25-478D-B542-96217A0DD63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DC0403DE-76B1-4E24-8014-64F73DCB53DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7F714D22-873A-4D64-8151-86BB55EFD084"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E9181F9-50FF-4995-9554-022CF93376C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AED0B40F-3413-40D6-B1EF-E6354D2A91F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4E99A7D8-2303-4268-8EF8-6F01A042BEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"86C70F69-FB80-4F32-A798-71A5153E6C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B2A1E604-500E-4181-BF66-BB69C7C3F425"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"0C8120E3-B60F-44E4-B837-4707A9BAEDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F7073EAD-06C9-4309-B479-135021E82B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"1895868E-E501-42C2-8450-EEED4447BAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"199AA36A-3B23-438C-9109-CC9000372986"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD6FFF05-37B2-4D69-86AF-921591382D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*","matchCriteriaId":"82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"04C40F0E-B102-4FE8-9E93-0ACFBF35226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*","matchCriteriaId":"22802660-D33F-4683-B82F-C94AC6170A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*","matchCriteriaId":"3623E9BE-F513-4301-BF0C-6A7F87E78E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*","matchCriteriaId":"B5DBAF08-1441-4F14-A740-E90044B77042"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*","matchCriteriaId":"4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*","matchCriteriaId":"5D3B6684-3890-4B60-BE67-D06045A86B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81C6C982-21D5-4FE3-A342-FC45BD78D2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F9D61596-01EB-4936-923B-63537625F926"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"599EB59C-7717-47A8-84C6-78B6D79AEB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"26E9005E-5034-43F2-B96E-7829E19FE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A5EE-2892-4548-A0CB-D3289CD64D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"83F22BF4-A738-438B-8D0B-6993640F0D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D3193B7-8FB9-45E4-BFF6-891A3F14F021"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF269AE-121B-4982-A765-5C7E806FA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A1C9F604-7FBE-4759-B039-8F5894574203"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"191821CD-E4CB-4269-B04C-284A9F9783B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B2A71474-958D-4689-A652-3E2A731F47FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38169043-17DF-4CF9-963A-8770B8882357"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C4537676-A72E-4433-B44F-3664EDD6F240"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8D090B10-68F2-424D-8234-2A280AA96B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"23168B77-645D-4A2A-A6E3-7001104064A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4D085B16-3116-423F-BDE0-2D93E12650A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C59247E9-CDAE-4269-A8E4-F49F617CDD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6019C0C-E9DD-4831-8E6A-785AE1A930FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"16F9CF15-8789-49B6-BB6D-B784C8FF20ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C51E0C88-B19C-408D-AC17-10CE7462D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"2AC41482-B3BC-4C93-A850-73A179BAB763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"ADC80BE1-28A6-4348-A061-8FD9C805E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D8201FF6-53A8-4850-A2B2-47AA65B2CB75"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30287","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30302","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30317","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30330","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30331","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30338","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30355","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31939","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-20.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3902","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174","source":"secalert@redhat.com"},{"url":"http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1581","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/659209","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:106","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0489.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0492.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492282/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492464/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29292","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020059","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-613-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1582/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1583/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42533","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2552","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11393","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/659209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/20/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0489.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0492.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492282/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492464/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-613-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1582/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1583/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1951","sourceIdentifier":"secalert@redhat.com","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus."},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en ciertas secuencias de comandos web usadas para \"construir\" Standards Based Linux Instrumentation for Manageability (sblim) bibliotecas anteriores a 1-13a.el4_6.1 en Red Hat Enterprise Linux (RHEL) 4 y anteriores a 1-31.el5_2.1 en RHEL 5. Permite a usuarios locales elevar sus privilegios a través de una biblioteca maliciosa en cierto directorio de var/tmp, relacionado con una incorrecta configuración RPATH, como se muestra en una librería maliciosa libc.so para tog-pegasus."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4:*:*:*:*:*:*:*","matchCriteriaId":"CA2C244C-82F6-49BC-B7F7-54AB989C43E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30803","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29913","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020354","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447705","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43315","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9635","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0497.html","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0497.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-1952","sourceIdentifier":"secalert@redhat.com","published":"2008-06-23T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory."},{"lang":"es","value":"El backend para XenSource Xen Para Virtualized Frame Buffer (PVFB) en Xen ioemu, no restringe apropiadamente el tamaño del búfer de trama, lo que permite a los atacantes causar una denegación de servicio (bloqueo) mediante la asignación de una cantidad arbitraria de memoria de invitado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xensource:xen_para_virtualized_frame_buffer:*:*:*:*:*:*:*:*","matchCriteriaId":"D15EECC5-918E-4B05-AB3F-C096F75A8567"}]}]}],"references":[{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32088","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/9","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30646","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020957","source":"secalert@redhat.com"},{"url":"http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43362","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0892.html","source":"secalert@redhat.com"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0892.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1953","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la plantilla de búsqueda Sitedesigner versiones anteriores a 1.1.5 de Magnolia Enterprise Edition permite a atacantes remotos inyectar web script o HTML de su elección a través de un parámetro query.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magnolia:site_designer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.13","matchCriteriaId":"5C1877E9-89C5-4909-BEF0-18268ED138C1"}]}]}],"references":[{"url":"http://jira.magnolia.info/browse/MGNLSD-175","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29918","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28897","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41962","source":"cve@mitre.org"},{"url":"http://jira.magnolia.info/browse/MGNLSD-175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1954","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en one_day.php de Web Calendar Pro 4.1 y versiones anteriores permite atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:web_calendar_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"FA5DAD17-339C-4EB3-9348-A8D96B601958"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:web_calendar_pro:4.0:*:*:*:*:*:*:*","matchCriteriaId":"491DB88D-974C-4CAE-BD7F-33192AEB0B49"}]}]}],"references":[{"url":"http://secunia.com/advisories/29933","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28921","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1343/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41963","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1343/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1955","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject arbitrary web script or HTML via the id parameter. information."},{"lang":"es","value":"Una vulnerabilidad de tipo XSS en el archivo rep.php en Martin BOUCHER MyBoard versión 1.0.12, permite a atacantes remotos inyectar script web o HTML arbitrario por medio de la información del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toocharger:myboard:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"22475A6D-0624-458A-BBFC-66C3163F05F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28823","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/52-MyBoard-1.0.12-XSS.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42024","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/52-MyBoard-1.0.12-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1956","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbitrary web script or HTML via the wiki parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Wikepage Opus 13 2007.2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro wiki."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikepage:opus:13_2007.2:*:*:*:*:*:*:*","matchCriteriaId":"39FF860A-87B0-4ED8-84B2-7DCDAAB5FEA8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1938445&group_id=128991&atid=713448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491065/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28842","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42058","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1938445&group_id=128991&atid=713448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491065/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1957","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php de Tr Script News 2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro nb en modo voir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyscripts:tr_script_news:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0FEE8BE5-EE23-4ABB-ADB6-3C03D718BA76"}]}]}],"references":[{"url":"http://secunia.com/advisories/29814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28876","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1319/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41946","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5483","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1319/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1958","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with a .php extension."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricciones en el modo ajout_cat de dmin/main.php en Tr Script News 2.1 permite a usuarios autenticados ejecutar código de su elección mediante la subida de un ficheros con extensión .php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyscripts:tr_script_news:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0FEE8BE5-EE23-4ABB-ADB6-3C03D718BA76"}]}]}],"references":[{"url":"http://secunia.com/advisories/29814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5483","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1959","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función get_remote_video_port_media de call.cpp en SIPp 3.0 permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección a través de un mensaje SIP manipulado.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sipp:sipp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54EC6E6B-641F-4604-BD06-561A37EB3B19"}]}]}],"references":[{"url":"http://secunia.com/advisories/29890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30193","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=593806&group_id=104305","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28884","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1322/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41945","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=593806&group_id=104305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1322/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1960","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cgi-bin/contray/search.cgi de ContRay 3.x permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro search.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:contray:contray:3:*:*:*:*:*:*:*","matchCriteriaId":"FBE60FDD-106A-4B01-962C-A6C909650330"}]}]}],"references":[{"url":"http://secunia.com/advisories/29888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28883","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41937","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1961","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMG_id parameter in a comments action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Voice Of Web AllMyGuests 0.4.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro AMG_id en una acción comments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_resource:voice_of_web_allmyguests:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2D676F10-E426-4DED-B06C-59D0BA366179"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28850","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41910","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5469","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1962","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) class parameter to include/functions.inc.php and the (2) file parameter to include/common.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Aterr 0.9.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro 1) class de include/functions.inc.php y el parámetro (2) file de include/common.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chimaera:aterr:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"209911AF-35A6-42E2-BB5B-39EB8ED35E83"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28861","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41903","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5474","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1963","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/functions.php de Quate Grape Web Statistics 0.2a permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quate:grape_web_statistics:0.2a:*:*:*:*:*:*:*","matchCriteriaId":"E371A052-8563-486C-959A-0520F50DA4CF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28838","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41883","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5463","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1964","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878.  NOTE: a third party claims that the copyright field always has a safe length"},{"lang":"es","value":"** CUESTIONADA ** Desbordamiento de búfer basado en pila en la función demux_nsf_send_headers de src/demuxers/demux_nsf.c en xine-lib permite a atacantes remotos tener un impacto desconocido a través de un campo copyright largo en una cabecera NSF de un fichero NES Sound, una cuestión diferente a CVE-2008-1878. \r\nNOTA: un tercero afirma que el campo copyright siempre tiene una longitud segura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinehq:xine_lib:*:*:*:*:*:*:*:*","matchCriteriaId":"8749AC8F-CC5C-4976-810F-0DF39547E17E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491248/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491274/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28908","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491248/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491274/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1965","sourceIdentifier":"cve@mitre.org","published":"2008-04-25T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname."},{"lang":"es","value":"Una vulnerabilidad de inyección de argumento en el manejador del URI CAI: en rcplauncher en IBM Lotus Expeditor Client for Desktop versiones  6.1.1 y 6.1.2, tal como es usado Lotus Symphony y posiblemente otros productos, permite a atacantes remotos ejecutar código arbitrario inyectando una opción -launcher por medio  de un URI cai:, como es demostrado mediante una referencia hacia un nombre de ruta (path) compartido UNC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_expeditor_client:6.1.1:*:desktop:*:*:*:*:*","matchCriteriaId":"FDC09505-8217-4996-AF4F-874626279504"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_expeditor_client:6.1.2:*:desktop:*:*:*:*:*","matchCriteriaId":"78F117CA-5D38-4A48-B348-A774E79BBB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_symphany:*:*:*:*:*:*:*:*","matchCriteriaId":"C57B6093-72BE-49CC-A784-60CAE8C0FEBD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29958","source":"cve@mitre.org"},{"url":"http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303813","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491343/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28926","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019951","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019952","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1394/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41990","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491343/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1394/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1966","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"http://www-1.ibm.com/support/docview.wss?uid=swg21255572http://www-1.ibm.com/support/docview.wss?uid=swg21287889\r\nhttp://www-1.ibm.com/support/docview.wss?uid=swg21256235","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar."},{"lang":"es","value":"Múltiples desbordamientos de búfer en las rutinas de administración de archivos JAR en el subcomponente BSU JAVA en IBM DB2 versión 8 anteriores a FP16, versión 9.1 anteriores a FP4a y versión 9.5 anteriores a FP1, permite a usuarios autenticados remotos causar una denegación de servicio (por ejemplo, un bloqueo de instancia) por medio  de una llamada al procedimiento (1) RECOVERJAR o (2) REMOVE_JAR_JAR con un parámetro  diseñado, relacionado con (a) sqlj.install_jar y (b) sqlj.replace_jar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CC1FC760-D058-4DE6-80B3-F3AA22757A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*","matchCriteriaId":"72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*","matchCriteriaId":"BB299EAB-31AA-4BAA-B477-0F909A8418AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*","matchCriteriaId":"6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4a:*:*:*:*:*:*","matchCriteriaId":"1CA96F81-E7BD-4BEB-9B4F-6CEA95B57742"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*","matchCriteriaId":"222C1B84-0C28-451F-BB02-4CB925263312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*","matchCriteriaId":"08177181-660C-4BF4-9031-74EE89297CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*","matchCriteriaId":"AB51AF7F-6D09-4EEE-AE8E-E6CCF06C28E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*","matchCriteriaId":"64BC5E59-361E-4343-9BB9-9772D47E57B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*","matchCriteriaId":"A2E1FC49-96AF-4933-BBE8-71DAEAEDD855"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*","matchCriteriaId":"0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*","matchCriteriaId":"56B7F547-3519-4A12-AB65-C1768153A7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*","matchCriteriaId":"FE9D14B8-5B4E-4D27-88B9-EBAC46D8282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*","matchCriteriaId":"19584860-5ADF-4647-AF39-88C236407FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*","matchCriteriaId":"6669F847-ED6A-422F-85F7-DAF9B0159F01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*","matchCriteriaId":"20FE296C-25D0-4689-BAA3-AFCA2C1CC388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*","matchCriteriaId":"E8D354AD-995D-4FC8-A7C4-7860549A1634"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*","matchCriteriaId":"A39759EE-5166-4122-8EFD-93CD79909403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"}]}]}],"references":[{"url":"http://osvdb.org/46268","source":"cve@mitre.org"},{"url":"http://osvdb.org/46269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29022","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08512","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08945","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ15496","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org"},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-04.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491071/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28835","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41955","source":"cve@mitre.org"},{"url":"http://osvdb.org/46268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ15496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-04.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1967","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to inject arbitrary web script or HTML via the SleUserName parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de órdenes en sitios cruzados (XSS) en CFLogon/CFLogon.asp en Cezanne 6.5.1 y 7 permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"SleUserName\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cezannesw:cezanne:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DABA24AE-9313-4E33-81DD-F7EF72603DF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cezannesw:cezanne:7:*:*:*:*:*:*:*","matchCriteriaId":"C57E6C11-24B1-4DC6-A0FB-E408F7738F87"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3828","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/avisos/s21sec-41-en.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490842/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28774","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41813","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/avisos/s21sec-41-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490842/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1968","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to (1) CFLookup.asp and (2) CznCommon/CznCustomContainer.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Cezanne 7 permiten a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro FUNID de (1) CFLookup.asp y (2) CznCommon/CznCustomContainer.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cezannesw:cezanne:7:*:*:*:*:*:*:*","matchCriteriaId":"C57E6C11-24B1-4DC6-A0FB-E408F7738F87"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3830","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/avisos/s21sec-43-en.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490843/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28773","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41816","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/avisos/s21sec-43-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490843/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1969","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) LookUPId and (2) CbFun parameters to (a) CFLookUP.asp; (3) TitleParms, (4) WidgetsHeights, (5) WidgetsLinks, and (6) WidgetsTitles parameters to (b) CznCommon/CznCustomContainer.asp, (7) CFTARGET parameter to (c) home.asp, (8) PersonOid parameter to (d) PeopleWeb/Cards/CVCard.asp, (9) DESTLINKOID and PersonOID parameters to (e) PeopleWeb/Cards/PayrollCard.asp, and the (10) FolderTemplateId and (11) FolderTemplateName parameters to (f) PeopleWeb/CznDocFolder/CznDFStartProcess.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Cezanne 6.5.1 y 7 permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) LookUPId y (2) CbFun de (a) CFLookUP.asp; los parámetros (3) TitleParms, (4) WidgetsHeights, (5) WidgetsLinks, y (6) WidgetsTitles de (b) CznCommon/CznCustomContainer.asp, el parámetro (7) CFTARGET  de (c) home.asp, el parámetro (8) PersonOid de (d) PeopleWeb/Cards/CVCard.asp, los parámetros (9) DESTLINKOID y PersonOID de (e) PeopleWeb/Cards/PayrollCard.asp, y los parámetros (10) FolderTemplateId y (11) FolderTemplateName de (f) PeopleWeb/CznDocFolder/CznDFStartProcess.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cezannesw:cezanne:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DABA24AE-9313-4E33-81DD-F7EF72603DF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cezannesw:cezanne:7:*:*:*:*:*:*:*","matchCriteriaId":"C57E6C11-24B1-4DC6-A0FB-E408F7738F87"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3829","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/es/avisos/s21sec-042-en.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490846/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28772","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41821","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/es/avisos/s21sec-042-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490846/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1970","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials."},{"lang":"es","value":"muCommander versiones anteriores a 0.8.2 almacena credentials.xml con permisos inseguros, lo cual permite a usuarios locales obtener credenciales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"91B3E7B3-80BA-440D-A2B2-77C852E0AC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.1:*:*:*:*:*:*:*","matchCriteriaId":"CD654FFB-44FF-4EC3-875C-2F414C839EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.2:*:*:*:*:*:*:*","matchCriteriaId":"B746704F-D025-4ED1-8AF5-AF56B91CD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5314C4AE-B5B9-4DDD-ABDB-19819CCD3100"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.4:*:*:*:*:*:*:*","matchCriteriaId":"AB7E9160-A4BA-4E7D-A077-FA0AE0D35CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1D3EA0A4-C79A-419F-A9AA-9AA10B51BB22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E321EB09-7B65-4C38-AA65-BDEA4A9A9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.7:*:*:*:*:*:*:*","matchCriteriaId":"023CF501-ADA4-4EAF-A7C7-65CA70FEF99C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.8:beta1:*:*:*:*:*:*","matchCriteriaId":"AE7F03C7-BE88-434F-8F97-59E26C8C73CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.8:beta2:*:*:*:*:*:*","matchCriteriaId":"DE872B53-F079-4BD9-8012-16781D98CCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mucommander:mucommander:0.8:beta3:*:*:*:*:*:*","matchCriteriaId":"D0AE5402-B11C-417D-AF77-32D4E7D3C103"}]}]}],"references":[{"url":"http://secunia.com/advisories/29893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mucommander.com/changes.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28875","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41908","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mucommander.com/changes.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1971","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain privileges by setting the (1) phadmin cookie to admin.php, or (2) in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php."},{"lang":"es","value":"phShoutBox Final 1.5 y versiones anteriores sólo comprueba contraseñas cuando están especificadas en $_POST, lo cual permite a atacantes remotos conseguir privilegios por la asignación de la cookie (1) phadmin a admin.php, o (2) en 1.4 y versiones anteriores, la cookie ssbadmin de shoutadmin.php.\r\n\r\n \t\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phphq:phshoutbox_final:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"B5BA1A22-CF89-4D3F-B8BD-EFBB018F4CA8"}]}]}],"references":[{"url":"http://secunia.com/advisories/29892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28856","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41901","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1972","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Link: http://www.exponentcms.org/index.php?action=view&id=64&module=newsmodule&src=%40random44fe03276195","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la característica creación de la cuenta de usuario en Exponent CMS 0.96.6-GA20071003 y versiones anteriores, cuando la opción de configuración Allow Registration? está activa, permiten a atacantes remotos inyectar web script o HTML de su elección a través de los campos (1) username, (2) firstname, (3) lastname, y (4) e-mail address.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.96.6-ga20071003","matchCriteriaId":"6F95BE89-FAB8-4837-8FD2-F62760C70911"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.94:*:*:*:*:*:*:*","matchCriteriaId":"195E44F8-A725-488D-B48D-B9D35195E716"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.95:*:*:*:*:*:*:*","matchCriteriaId":"6B58BF21-749F-4FA8-BBFF-6CE46017C236"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.96.1:*:*:*:*:*:*:*","matchCriteriaId":"294437EA-5F43-4FFD-BAA4-885A00DDE08D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.96.3:*:*:*:*:*:*:*","matchCriteriaId":"FBFDA38A-EC14-4257-9078-4166CA21DB8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.96.4:*:*:*:*:*:*:*","matchCriteriaId":"61A88451-9D03-4509-9E14-6916F8B7E4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.96.5:rc1:*:*:*:*:*:*","matchCriteriaId":"26134569-3328-4275-863A-1DFCE9629B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.96.6:*:*:*:*:*:*:*","matchCriteriaId":"A1B2F711-6E9C-4DC5-8883-9522331FA608"},{"vulnerable":true,"criteria":"cpe:2.3:a:oicgroup:exponent_cms:0.96.6:alpha:*:*:*:*:*:*","matchCriteriaId":"4C4C3D9D-115A-4ABE-B638-91529F455D45"}]}]}],"references":[{"url":"http://secunia.com/advisories/29875","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=592961&group_id=118524","source":"cve@mitre.org"},{"url":"http://www.exponentcms.org/index.php?action=view&id=64&module=newsmodule&src=%40random44fe03276195","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28834","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=592961&group_id=118524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exponentcms.org/index.php?action=view&id=64&module=newsmodule&src=%40random44fe03276195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1973","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T18:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long subtitle file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en SubEdit Player build 4056 y 4066 permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un fichero largo de subtítulos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artur_sikora:subedit_player:4056:*:*:*:*:*:*:*","matchCriteriaId":"15967DE3-2227-41A5-AFD4-E766F225D3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:artur_sikora:subedit_player:4066:*:*:*:*:*:*:*","matchCriteriaId":"898AB7C2-8497-4F84-9ACA-DCFC77D4B8EF"}]}]}],"references":[{"url":"http://secunia.com/advisories/29904","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28858","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41913","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5472","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1974","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de órdenes en sitios cruzados (XSS) en addevent.php de Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, y Groupware 1.0.5 permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"url\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B3AB0176-9CB3-4D49-B644-2C413C9B6E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"842159D1-E30C-4077-8E92-07979E52C10B"}]}]}],"references":[{"url":"http://forum.aria-security.com/showthread.php?t=49","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.horde.org/archives/kronolith/Week-of-Mon-20080421/006807.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29920","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30649","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491230/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019934","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1373/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41974","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2008/dsa-1560","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00427.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00444.html","source":"cve@mitre.org"},{"url":"http://forum.aria-security.com/showthread.php?t=49","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.horde.org/archives/kronolith/Week-of-Mon-20080421/006807.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491230/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1373/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2008/dsa-1560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00427.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1975","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via the ID_loc parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en index.php en E-RESERV 2.1 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro ID_loc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cogites:e_reserve:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BB637FCC-14C4-4963-8F14-6B74D4057844"}]}]}],"references":[{"url":"http://secunia.com/advisories/29914","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28899","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1345/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41970","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5487","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1345/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1976","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de órdenes en sitios cruzados (XSS) en los módulos de Drupal \r\n(1) Internacionalización (i18n) 5.x anteriores a 5.x-2.3 y 5.x-1.1 y 5.x anteriores a 6.x-1.0 beta 1; y \r\n(2) Localizador 5.x anteriores a 5.x-3.4, 5.x-2.1, y 5.x-1\r\npermiten a atacantes remotos inyectar 'script' web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"A9A5EAB1-51F3-4BBA-8A21-568C3EA9A4F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.1:*:*:*:*:drupal:*:*","matchCriteriaId":"5933E296-D891-4722-B44F-C16CF3507E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.2:*:*:*:*:drupal:*:*","matchCriteriaId":"7C4A5B7E-88D2-427A-B24D-F97DE08958D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.3:*:*:*:*:drupal:*:*","matchCriteriaId":"1D700746-E85F-4208-8D82-8BC55BC3D6CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.4:*:*:*:*:drupal:*:*","matchCriteriaId":"431F376A-5AA1-4C90-8D0F-8D5B3C5ED39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.5:*:*:*:*:drupal:*:*","matchCriteriaId":"0F93D520-28FD-4137-9F13-0AF7A7FAD140"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.6:*:*:*:*:drupal:*:*","matchCriteriaId":"E1B4D518-8843-4D81-8A47-07EFAD018D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.7:*:*:*:*:drupal:*:*","matchCriteriaId":"5AEB9BA0-4C2C-4A54-970C-429AA8FF38D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.8:*:*:*:*:drupal:*:*","matchCriteriaId":"3FA09E56-0E33-4562-81AA-42282248C8A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.9:*:*:*:*:drupal:*:*","matchCriteriaId":"67A08533-0015-42B0-BDF3-5FF3D8D071B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.10:*:*:*:*:drupal:*:*","matchCriteriaId":"565A1CCA-3838-407F-A68D-D2960D8126EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"B5F3D455-29D9-4D75-B7DF-AF9E6AA0B27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-2.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"6C2B24B6-8AD3-4D84-B771-73B0F83B3F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.0:*:*:*:*:drupal:*:*","matchCriteriaId":"0730C4B8-F6BD-4CF6-AC2D-CE106095156E"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.1:*:*:*:*:drupal:*:*","matchCriteriaId":"59870EA5-1C94-4F6D-AC6C-82822204E7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.2:*:*:*:*:drupal:*:*","matchCriteriaId":"84119CF8-FB09-46EC-9741-F0B3B07CB1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.3:*:*:*:*:drupal:*:*","matchCriteriaId":"9F7A1132-549F-4B97-A190-4572A2AD5A87"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"0E973F30-C5B7-4565-B8C3-320C5C2A9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"A7BFDE90-9A5C-4ED0-BE47-115D3163D485"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-2.0:*:*:*:*:drupal:*:*","matchCriteriaId":"3E7CEF1C-198D-45CF-8969-C10CA7F1B4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-2.1:*:*:*:*:drupal:*:*","matchCriteriaId":"0C5003E2-FEF5-44AB-BBFB-873D0A6EFE51"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-2.2:*:*:*:*:drupal:*:*","matchCriteriaId":"7816782E-7B34-4DFD-8A8B-FAAC4BAB7C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:6.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"335440B4-794F-40DC-8414-A396D7568E0F"}]}]}],"references":[{"url":"http://drupal.org/node/250344","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29961","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28916","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1352/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41977","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/250344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1352/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1977","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad falsificación de petición (CSRF) en el módulo de Drupal Internationalization  (i18n) 5.x anteriores a 5.x-2.3 y 5.x-1.1, y 6.x anteriores a 6.x-1.0 beta 1, permite a atacantes remotos cambiar relaciones de traducción de nodos mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"A9A5EAB1-51F3-4BBA-8A21-568C3EA9A4F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.1:*:*:*:*:drupal:*:*","matchCriteriaId":"5933E296-D891-4722-B44F-C16CF3507E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.2:*:*:*:*:drupal:*:*","matchCriteriaId":"7C4A5B7E-88D2-427A-B24D-F97DE08958D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.3:*:*:*:*:drupal:*:*","matchCriteriaId":"1D700746-E85F-4208-8D82-8BC55BC3D6CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.4:*:*:*:*:drupal:*:*","matchCriteriaId":"431F376A-5AA1-4C90-8D0F-8D5B3C5ED39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.5:*:*:*:*:drupal:*:*","matchCriteriaId":"0F93D520-28FD-4137-9F13-0AF7A7FAD140"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.6:*:*:*:*:drupal:*:*","matchCriteriaId":"E1B4D518-8843-4D81-8A47-07EFAD018D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.7:*:*:*:*:drupal:*:*","matchCriteriaId":"5AEB9BA0-4C2C-4A54-970C-429AA8FF38D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.8:*:*:*:*:drupal:*:*","matchCriteriaId":"3FA09E56-0E33-4562-81AA-42282248C8A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.9:*:*:*:*:drupal:*:*","matchCriteriaId":"67A08533-0015-42B0-BDF3-5FF3D8D071B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.10:*:*:*:*:drupal:*:*","matchCriteriaId":"565A1CCA-3838-407F-A68D-D2960D8126EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"B5F3D455-29D9-4D75-B7DF-AF9E6AA0B27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-2.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"6C2B24B6-8AD3-4D84-B771-73B0F83B3F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.0:*:*:*:*:drupal:*:*","matchCriteriaId":"0730C4B8-F6BD-4CF6-AC2D-CE106095156E"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.1:*:*:*:*:drupal:*:*","matchCriteriaId":"59870EA5-1C94-4F6D-AC6C-82822204E7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.2:*:*:*:*:drupal:*:*","matchCriteriaId":"84119CF8-FB09-46EC-9741-F0B3B07CB1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:localizer_project:localizer:5.x-3.3:*:*:*:*:drupal:*:*","matchCriteriaId":"9F7A1132-549F-4B97-A190-4572A2AD5A87"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"0E973F30-C5B7-4565-B8C3-320C5C2A9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"A7BFDE90-9A5C-4ED0-BE47-115D3163D485"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-2.0:*:*:*:*:drupal:*:*","matchCriteriaId":"3E7CEF1C-198D-45CF-8969-C10CA7F1B4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-2.1:*:*:*:*:drupal:*:*","matchCriteriaId":"0C5003E2-FEF5-44AB-BBFB-873D0A6EFE51"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:5.x-2.2:*:*:*:*:drupal:*:*","matchCriteriaId":"7816782E-7B34-4DFD-8A8B-FAAC4BAB7C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:internationalization_project:internationalization:6.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"335440B4-794F-40DC-8414-A396D7568E0F"}]}]}],"references":[{"url":"http://drupal.org/node/250344","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29961","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28916","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1352/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41982","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://drupal.org/node/250344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1352/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1978","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428."},{"lang":"es","value":"Vulnerabilidad de secuencias de órdenes en sitios cruzados (XSS) en el módulo Ubercart 5.x anteriores a 5.x-1.0 rc3 de Drupal permite a usuarios remotos autenticados inyectar 'script' web o HTML de su elección mediante títulos de nodos relacionados con características del producto no especificadas, un vector distinto de CVE-2008-1428."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"FCC34C73-08D5-44FA-8F21-CE0DA7622BA0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:ubercart_module:*:rc3:*:*:*:*:*:*","versionEndIncluding":"5-1.0","matchCriteriaId":"C0625A63-0EFB-41BC-86CB-09594833C7AB"}]}]}],"references":[{"url":"http://drupal.org/node/250343","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28914","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1351/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41975","source":"cve@mitre.org"},{"url":"http://drupal.org/node/250343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1351/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1979","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read."},{"lang":"es","value":"El Discovery Service (casdscvc) en CA ARCserve Backup versión 12.0.5454.0 y anteriores, permite a atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un paquete con un valor entero largo usado en un incremento al puerto TCP 41523, lo que desencadena una lectura excesiva del búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0.5454.0","matchCriteriaId":"079786A9-90C2-43FD-88BF-E8254124BC96"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/carcbackazz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29855","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493430/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28927","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020324","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41869","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/carcbackazz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493430/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1980","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de órdenes (XSS) en el módulo de Drupal \"E-Publish\" 5.x anteriores a 5.x-1.1 y 6.x anteriores a 6.x-1.0 beta1, permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante vectores no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"FCC34C73-08D5-44FA-8F21-CE0DA7622BA0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:e-publish:*:*:*:*:*:*:*:*","versionEndIncluding":"5-1.1","matchCriteriaId":"0249B02B-DD47-4F62-BEEB-C64654CD4082"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:e-publish:*:beta1:*:*:*:*:*:*","versionEndIncluding":"6-1.0","matchCriteriaId":"F3504B86-FEA4-4300-9538-A7B6148FA373"}]}]}],"references":[{"url":"http://drupal.org/node/250408","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/29960","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1353/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41979","source":"cve@mitre.org"},{"url":"http://drupal.org/node/250408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/29960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1353/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1981","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo de Drupal E-Publish 5.x anteriores a 5.x-1.1 y 6.x anteriores a 6.x-1.0 beta1 permite a atacantes remotos llevar a cabo acciones no autorizadas como otros usuarios mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-publish_project:e-publish:5.x-1.0:*:*:*:*:drupal:*:*","matchCriteriaId":"744D493F-3B35-49C1-8E5E-3D744DA8CDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-publish_project:e-publish:5.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"2771ECCB-D3CE-4059-9D28-21CCE4054CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-publish_project:e-publish:6.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"2BEEC332-B3B3-4A82-B94E-10BD9CA8820A"}]}]}],"references":[{"url":"http://drupal.org/node/250408","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29960","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1353/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41978","source":"cve@mitre.org","tags":["Tool Signature","VDB Entry"]},{"url":"http://drupal.org/node/250408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1353/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1982","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ss_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en ss_load.php en la extensión de WordPress Spreadsheet (wpSS) 0.6 y anteriores permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro \"ss_id\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wpss:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6","matchCriteriaId":"2470C300-DAD3-4C66-8BF7-E32ACD49DCE4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29938","source":"cve@mitre.org"},{"url":"http://timrohrer.com/blog/?p=120","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28894","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1344/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41968","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://timrohrer.com/blog/?p=120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1344/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1983","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the beg parameter in a members action to index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de órdenes en sitios cruzados (XSS) en Advanced Electron Forum (AEF) 1.0.6 permite a atacantes remotos inyectar 'script' web o HTML de su elección mediante el parámetro \"beg\" en una acción \"members\" de index.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7A193235-7F51-4528-9289-6B9FE44A8CF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/29923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/60-Advanced-Electron-Forum-AEF-1.0.6-XSS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41951","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/60-Advanced-Electron-Forum-AEF-1.0.6-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1984","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service (crash or CPU consumption) via a malformed packet to TCP port 1882."},{"lang":"es","value":"El Demonio de Servicios Comunes (Transporte) eTrust en CA Secure Content Manager 8.0.28000.511 y anteriores permite a atacantes remotos causar una denegación de servicio (caída o consumición de CPU) mediante un paquete malformado al puerto TCP 1882."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.28000.511","matchCriteriaId":"A12B03BD-5FEC-4FC9-A925-0EA938DDED31"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ecsqdamn-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28888","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019913","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1355/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41890","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ecsqdamn-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1355/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1985","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en base.php en DigitalHive 2.0 RC2 permite a atacantes remotos inyectar 'script' web arbitrario o HTML mediante el parámetro mt, posiblemente relacionada con \"membres.php\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digital_hive:digitalhive:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"58A5188C-4FE1-4EEA-AA60-2B55251D827F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28918","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1986","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbitrary web script or HTML via the jours parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en liste_article.php en Blog Pixel Motion (o PixelMotion) permite a atacantes remotos inyectar código HTML o 'script' de su elección mediante el parámetro \"jours\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixel_motion:pixel_motion_blog:*:*:*:*:*:*:*:*","matchCriteriaId":"10852BB8-8028-49C5-A40C-112190649BB1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/63-Blog-PixelMotion-XSS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/63-Blog-PixelMotion-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1987","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en \"search.php\" de EncapsGallery 2.0.2 permite a atacantes remotos inyectar 'script' o HTML de su elección mediante el parámetro \"search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:encaps:encapsgallery:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6931F415-C922-4F0D-987D-399788AE22B2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.encaps.net/software/encapsgallery/download-image-album.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28887","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.encaps.net/software/encapsgallery/download-image-album.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1988","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file in the rwx_gallery directory.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricciones en la función \"file_upload\" en \"core/misc.class.php\" en EncapsGallery 2.0.2 permite a administradores remotos autenticados subir y ejecutar ficheros PHP de su elección subiendo un fichero con una extensión de ejecutable, a continuación accediendo a este mediante una petición directa al fichero en el directorio rwx_gallery. NOTA: La proveniencia de esta vulnerabilidad es desconocida; los detalles han sido obtenidos sólo de información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:encaps:encapsgallery:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6931F415-C922-4F0D-987D-399788AE22B2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28887","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1989","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de fichero PHP remoto en 123flashchat.php en el módulo 123 Flash Chat 6.8.0 de e107, cuando 'register_globals' está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"e107patch\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:123flashchat:123_flash_chat_module:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"8D8C7D14-E586-458B-98FE-F23A1182ADAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]}]}],"references":[{"url":"http://secunia.com/advisories/29870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28828","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41867","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5459","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1990","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Acidcat CMS 3.4.1 permiten a atacantes remotos ejecutar órdenes SQL de su elección mediante \r\n(1) el parámetro \"cID\" de \"default.asp\" y \r\n(2) el parámetro \"username\" de \"main_login2.asp\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acidcat:acidcat_cms:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B4836277-1552-4EB4-A4B9-EF645EDC1B0C"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28868","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41918","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5478","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1991","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the field parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en \"admin_colors_swatch.asp\" en Acidcat CMS 3.4.1 permite a atacantes remotos inyectar 'script' web de su elección mediante el parámetro \"field\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acidcat:acidcat_cms:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B4836277-1552-4EB4-A4B9-EF645EDC1B0C"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28868","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41919","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5478","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1992","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields."},{"lang":"es","value":"Acidcat CMS 3.4.1 no restringe adecuadamente el acceso a \r\n(1) default_mail_aspemail.asp, \r\n(2) default_mail_cdosys.asp o\r\n(3) default_mail_jmail.asp,\r\nlo que permite a atacantes remotos evitar restricciones y transmitir mensajes de correo electrónico con campos \"From\", \"FromName\" y \"To\" modificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acidcat:acidcat_cms:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B4836277-1552-4EB4-A4B9-EF645EDC1B0C"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28868","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41921","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5478","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1993","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files."},{"lang":"es","value":"Acidcat CMS 3.4.1 no restringe el acceso al componente FCKEditor, lo que permite a atacantes remotos subir ficheros de su elección.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acidcat:acidcat_cms:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B4836277-1552-4EB4-A4B9-EF645EDC1B0C"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28868","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41922","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5478","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1994","sourceIdentifier":"cve@mitre.org","published":"2008-04-27T21:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en la pila en \r\n(a) acon.c,\r\n(b) menu.c, y \r\n(c) child.c en Acon 1.0.5-5 a 1.0.5.7 permiten a usuarios locales ejecutar código de su elección mediante \r\n(1) una variable de entorno HOME larga, o \r\n(2) un gran número de columnas de terminal.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahmed_abdel-hamid_mohamed:acon:1.0.5-5:*:*:*:*:*:*:*","matchCriteriaId":"0A13B9D8-6AEB-4C87-A14C-B68F15E79AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahmed_abdel-hamid_mohamed:acon:1.0.5-6:*:*:*:*:*:*:*","matchCriteriaId":"1EBB9004-122D-46BF-BD03-8DD81AA87978"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahmed_abdel-hamid_mohamed:acon:1.0.5-7:*:*:*:*:*:*:*","matchCriteriaId":"5178570E-D3B6-402F-B190-778D6F637BA5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29909","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28862","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41915","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1995","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the \"bind-dn\" criteria, which can cause an incorrect application of policy and allows remote attackers to bypass intended access restrictions for the server."},{"lang":"es","value":"Sun Java System Directory Proxy Server 6.0, 6.1, y 6.2 clasifica una conexión utilizando el criterio \"bind-dn\", lo cual puede provocar una aplicación incorrecta de políticas y permitir a atacantes remotos evitar restricciones de acceso previstas por el servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DB3F1C2E-7BB6-41A7-8FFC-4E00F6E35FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"379A742A-38AD-4A9D-B177-47899F0A9C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ACE4DE2E-AB97-43BA-A55C-455958AA954B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235381-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28941","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019925","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1374/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235381-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1374/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1996","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"More information located: http://www.securityfocus.com/bid/28679/info","cveTags":[],"descriptions":[{"lang":"en","value":"licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections."},{"lang":"es","value":"licq antes de 1.3.6 permite a atacantes remotos provocar una denegación de servicio (agotamiento de descriptores de ficheros y caída de la aplicación) mediante gran número de conexiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.61:*:*:*:*:*:*:*","matchCriteriaId":"BF5C07FE-E369-45A5-BAD8-D12B6CCA3AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.71:*:*:*:*:*:*:*","matchCriteriaId":"B3504C4C-B292-4DF7-8AB2-B012667546DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.75:*:*:*:*:*:*:*","matchCriteriaId":"99DF4EC3-7CD1-48C1-921E-0644444A0565"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"7B31462B-CF61-40C9-98BC-4FE6FBE9049E"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.75.2:*:*:*:*:*:*:*","matchCriteriaId":"211009EF-2C6C-4463-B3D2-C7B406A303AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.75.3:*:*:*:*:*:*:*","matchCriteriaId":"3531894C-321C-4E91-A3DB-CDD5D38FDF91"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.75.3a:*:*:*:*:*:*:*","matchCriteriaId":"D0AECEB0-3D0D-4C64-A928-0E52AA4F4F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.75_991219:*:*:*:*:*:*:*","matchCriteriaId":"8615B703-A767-4F1D-8B56-8CB7BBCDF2BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.76:*:*:*:*:*:*:*","matchCriteriaId":"5632AE68-5842-4D3E-93B0-266345697D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.80:*:*:*:*:*:*:*","matchCriteriaId":"3B64A9DE-78EA-457E-A4BD-4446A8C096D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.81:*:*:*:*:*:*:*","matchCriteriaId":"EAE6AF6A-ABDA-401A-B5DF-343AB8A656F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.84a:*:*:*:*:*:*:*","matchCriteriaId":"CD25CC42-5156-4E43-8EBF-CB9804333715"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.84b:*:*:*:*:*:*:*","matchCriteriaId":"7C55845B-A772-4B54-B794-0D4EECEC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:0.85:*:*:*:*:*:*:*","matchCriteriaId":"12D66C44-8AA4-4874-BD74-E959CEC26F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6BA200C7-5602-418C-B1B3-2825680BEA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6DD313EF-B6BA-41C1-96F0-645D872242FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A8E40E03-411D-4EFA-9620-574BACE357B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"60C3EEA7-56B7-4F20-8701-8D26EF853697"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"47334B83-4DC7-4EDD-B10D-3A8A4D0D81C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.2:*:*:*:*:*:*:*","matchCriteriaId":"5B06B0DE-4303-4F19-868B-821939F37A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"19922E12-CC67-4177-B4FB-CD958ABE9E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"555C61F1-1518-480D-A5C7-03DFA2680CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5847F57C-E596-42D6-AFCA-88DA1AADF040"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1825DF7D-12D5-4467-8F2A-67DCD12F83A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AE3A0651-CDD9-4E72-BE33-F6446DCE7387"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.3.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"E80CB706-CAE3-4E9A-96C5-8A4E147736F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9BE97E63-2913-4B4E-A9E6-22FCA297FA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.3.2_rc:*:*:*:*:*:*:*","matchCriteriaId":"966D7E45-582F-47F5-8183-E924D442AC71"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"FEA6A213-E65A-4B63-B745-CDED7A1499D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C2A195F8-A150-4560-8528-17804D284A0A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Apr/0100.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30236","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3851","source":"cve@mitre.org"},{"url":"http://www.licq.org/changeset/6146","source":"cve@mitre.org"},{"url":"http://www.licq.org/ticket/1623","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:159","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/25/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490717","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28679","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1446/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41732","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00186.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2008/Apr/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.licq.org/changeset/6146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.licq.org/ticket/1623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/04/25/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1446/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00186.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1997","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699."},{"lang":"es","value":"Vulnerabilidad no especificada en el procedimiento ADMIN_SP_C2 de IBM DB2 8 anterior a FP16, 9.1 anterior a FP4a, y 9.5 anterior a FP1; permite a usuarios autenticados en remoto ejecutar código de su elección mediante vectores desconocidos. NOTA: la vulnerabilidad de ADMIN_SP_C ya fue tratada en CVE-2008-0699."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:-:*:*:*:*:*:*","matchCriteriaId":"19386DED-6408-4847-99D8-6F81D7FE19FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak1:*:*:*:*:*:*","matchCriteriaId":"23EC0378-B132-42CA-96DD-D619ED43A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak10:*:*:*:*:*:*","matchCriteriaId":"5B327E56-B3E5-4B07-AE82-495810B6900B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak11:*:*:*:*:*:*","matchCriteriaId":"4293077A-4B50-4FEC-8207-EEDCC6033116"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak12:*:*:*:*:*:*","matchCriteriaId":"7D460D0D-FAFC-4853-B038-986AF1F1E397"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak13:*:*:*:*:*:*","matchCriteriaId":"3E820357-5155-47BE-8208-8518D2583860"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak14:*:*:*:*:*:*","matchCriteriaId":"73D0B6FA-A20B-4727-B121-6A5A702018D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak15:*:*:*:*:*:*","matchCriteriaId":"E5F03532-D08E-4EF8-BF16-B3918F468F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak2:*:*:*:*:*:*","matchCriteriaId":"751E6CF3-8636-4D41-9E45-2F05BB0AF464"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak3:*:*:*:*:*:*","matchCriteriaId":"AD43F7F3-8E3B-4403-8FAF-6119056209D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak4:*:*:*:*:*:*","matchCriteriaId":"5FF90CBD-D93B-4DC9-B0EC-DDF2C379ABB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak5:*:*:*:*:*:*","matchCriteriaId":"650850D8-9362-4BDF-8B3A-39AAB590C58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak6:*:*:*:*:*:*","matchCriteriaId":"F96DDBB5-746D-43C5-980E-884461756F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak6a:*:*:*:*:*:*","matchCriteriaId":"5D400C0F-98E9-4FF9-816E-291826EBC38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak6b:*:*:*:*:*:*","matchCriteriaId":"7232D973-A512-41AF-BE16-9601A9DF5507"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak6c:*:*:*:*:*:*","matchCriteriaId":"7D442CF9-BC39-4A4B-A375-CFDF8799BA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak7:*:*:*:*:*:*","matchCriteriaId":"42551089-19BF-4DB4-8E5F-E06D5A915275"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak7a:*:*:*:*:*:*","matchCriteriaId":"FB262F52-C896-4F7B-BA7C-6EFAE800199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak7b:*:*:*:*:*:*","matchCriteriaId":"00805878-F85D-4947-98C1-ABD15F2B49DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak8:*:*:*:*:*:*","matchCriteriaId":"2A355BEC-4334-4ED1-9E39-4D112F7C770D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak8a:*:*:*:*:*:*","matchCriteriaId":"8920EDF4-8FFD-4207-8F9D-E33C50025642"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak9:*:*:*:*:*:*","matchCriteriaId":"0F4F1D2C-DAC5-4B6E-A9C1-8E939E90E764"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fixpak9a:*:*:*:*:*:*","matchCriteriaId":"D3F31C8D-74FF-4B8D-A857-03608E07F7D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:-:*:*:*:*:*:*","matchCriteriaId":"5F16B9B1-7B1C-499A-BD5B-537D4E97B95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*","matchCriteriaId":"A39759EE-5166-4122-8EFD-93CD79909403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:-:*:*:*:*:*:*","matchCriteriaId":"76FB7626-3E88-4FFC-BCAB-85965E49B3F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/29022","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://securityreason.com/securityalert/3841","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/491075/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://securityreason.com/securityalert/3841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/491075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1998","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter."},{"lang":"es","value":"El procedimiento NNSTAT (también conocido como SYSPROC.NNSTAT) en IBM DB2 8 versiones anteriores a FP16, 9.1 versiones anteriores a FP4a, y 9.5 versiones anteriores a FP1 en Windows permite a usuarios remotos autenticados sobrescribir ficheros de su elección a través del parámetro log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*","matchCriteriaId":"72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*","matchCriteriaId":"BB299EAB-31AA-4BAA-B477-0F909A8418AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*","matchCriteriaId":"6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*","matchCriteriaId":"222C1B84-0C28-451F-BB02-4CB925263312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*","matchCriteriaId":"08177181-660C-4BF4-9031-74EE89297CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*","matchCriteriaId":"AB51AF7F-6D09-4EEE-AE8E-E6CCF06C28E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*","matchCriteriaId":"64BC5E59-361E-4343-9BB9-9772D47E57B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*","matchCriteriaId":"A2E1FC49-96AF-4933-BBE8-71DAEAEDD855"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*","matchCriteriaId":"0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*","matchCriteriaId":"56B7F547-3519-4A12-AB65-C1768153A7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*","matchCriteriaId":"FE9D14B8-5B4E-4D27-88B9-EBAC46D8282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*","matchCriteriaId":"19584860-5ADF-4647-AF39-88C236407FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*","matchCriteriaId":"6669F847-ED6A-422F-85F7-DAF9B0159F01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*","matchCriteriaId":"20FE296C-25D0-4689-BAA3-AFCA2C1CC388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*","matchCriteriaId":"E8D354AD-995D-4FC8-A7C4-7860549A1634"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"}]}]}],"references":[{"url":"http://secunia.com/advisories/29022","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29784","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3840","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06977","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-03.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491073/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28836","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41960","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-03.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491073/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-1999","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many \"invisible\" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences."},{"lang":"es","value":"Apple Safari 3.1.1 permite a atacantes remotos falsificar la barra de direcciones colocando varios caracteres \"invisibles\" en el subcomponente userinfo del componente authority de la URL -también conocido como el fichero del usuario (user file)-; como se ha demostrado con las secuencias %E3%80%80."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"}]}]}],"references":[{"url":"http://es.geocities.com/jplopezy/pruebasafari3.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491192/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1347","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41981","source":"cve@mitre.org"},{"url":"http://es.geocities.com/jplopezy/pruebasafari3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491192/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2000","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in an infinite loop."},{"lang":"es","value":"Vulnerabilidad no especificada en Apple Safari 3.1.1 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante un código JavaScript que llama a document.write en un bucle infinito."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"}]}]}],"references":[{"url":"http://es.geocities.com/jplopezy/pruebasafari3.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491192/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1347","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41985","source":"cve@mitre.org"},{"url":"http://es.geocities.com/jplopezy/pruebasafari3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491192/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2001","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that triggers an out-of-bounds access, possibly due to a NULL pointer dereference."},{"lang":"es","value":"Apple Safari 3.1.1 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un enlace file:///%E2 que dispara un acceso fuera del límite, posiblemente debido a un puntero a referencia NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"}]}]}],"references":[{"url":"http://es.geocities.com/jplopezy/pruebasafari3.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491192/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1347","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41984","source":"cve@mitre.org"},{"url":"http://es.geocities.com/jplopezy/pruebasafari3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491192/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2002","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to (1) cause a denial of service (device reboot) via the \"Restart Cable Modem\" value in the BUTTON_INPUT parameter to configdata.html, and (2) cause a denial of service (hard reset) via the \"Reset All Defaults\" value in the BUTTON_INPUT parameter to configdata.html."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Motorola Surfboard con software SB5100-2.3.3.0-SCM00-NOSH permiten a atacantes remotos (1) provocar una denegación de servicio (reinicio del dispositivo) mediante el valor \"Restart Cable Modem\" en el parámetro BUTTON_INPUT a configdata.html y (2) provocar una denegación de servicio (reset duro) mediante el valor \"Reset All Defaults\" en el parámetro BUTTON_INPUT a configdata.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:surfboard:sb5100:*:*:*:*:*:*:*","matchCriteriaId":"DBCE9917-8A66-4E98-87F4-DA66ACD1CA62"}]}]}],"references":[{"url":"http://secunia.com/advisories/30026","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3839","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/643049","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.rooksecurity.com/blog/?p=4","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491143/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1390/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/643049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.rooksecurity.com/blog/?p=4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491143/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1390/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2003","sourceIdentifier":"cve@mitre.org","published":"2008-04-28T20:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via (2) badblue.exe and (3) dyndns.exe.  NOTE: this can be leveraged for arbitrary remote code execution in conjunction with CVE-2007-6378."},{"lang":"es","value":"BadBlue 2.72 Personal Edition almacena múltiples programas en el raíz de un documento web con insuficientes controles de acceso, lo cual permite a atacantes remotos (1) provocar una denegación de servicio a través de invocaciones múltiples de uninst.exe, y tiene un impacto desconocido a través de (2) badblue.exe y (3) dyndns.exe.\r\nNOTA: esto puede ser utilizado para ejecuciones de código remoto de su elección en relación con CVE-2007-6378."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:badblue:badblue:2.72:*:personal:*:*:*:*:*","matchCriteriaId":"3C1027B7-0BFB-4E25-91C5-FC3F9170D55E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491282/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42090","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491282/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2004","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted."},{"lang":"es","value":"La función drive_init en QEMU 0.9.1 determina el formato de una imagen de disco en bruto basada en la cabecera, lo que permite a usuarios locales invitados leer archivos de su elección en el host modificando la cabecera para identificar un formato distinto, lo que se usa cuando el invitado se reinicia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6205775B-4A83-498F-A60E-54473F5D5704"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/qemu-devel/2008-04/msg00675.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30717","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35062","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=4277","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:162","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29101","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42268","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11021","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2008-04/msg00675.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=4277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2005","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown) and possibly execute arbitrary code via a large length value in a Registration packet to TCP port 5413, which causes a memory allocation failure."},{"lang":"es","value":"El servicio SuiteLink Service (también conocido como slssvc.exe) en WonderWare SuiteLink anterior a 2.0 Patch 01, como el usado en WonderWare InTouch 8.0, permite a atacantes remotos provocar una denegación de servicio(referencia a puntero nulo y apagado de servicio) y posiblemente ejecutar código de su elección mediante un valor de longitud largo en un paquete Registration (registro) al puerto TCP 5413, que provoca un fallo de asignación de memoria."}],"vendorComments":[{"organization":"Wonderware","comment":"Wonderware, a business unit of Invensys, is a pioneer in the secure use of Microsoft Windows software for industrial applications and a leader in the field of Industrial Automation security. Wonderware is also committed to active collaboration and involvement with customers and industry standards authorities to provide secure applications, security best practices, deployment guidelines, tools and prescriptive guidance for maintaining a secure automation environment. \n\nRecently, a vulnerability was discovered in SuiteLink Version 2.0 which could potentially expose an unsecured automation network to a denial of service attempt. While there is no indication whatsoever of the existence of an exploit for this issue, Wonderware published a Technical Alert describing the issue and released a Patch in April to resolve the problem. \n\nThe vulnerability is closed in SuiteLink Version 2.0 Patch 01 and Wonderware is urging Customers to install the patch as soon as possible. More details can be found in Tech Alert 106 posted on the Wonderware Technical Support website.  Customers who have not yet signed up for access to the Wonderware Technical Support website can register here free of charge to read the Tech Alert and receive the patch. \n\nFor customers on an active support program, Wonderware has also created the Wonderware Security Central Home Page to help our customers with security issues. Here we have posted “Securing Industrial Control Systems”, a security guidance manual describing recommended security protocols for automation enterprises and installations in a Microsoft environment. Customers, System Integrators, and IT professionals who build and maintain automation networks are advised to read and understand the manual, and to apply the design recommendations to their automation environment to mitigate security risks properly for all forms of security threats.  \n\nWonderware Technical Support is also available to help customers needing advanced security assistance.  More information is available about Wonderware Customer Support Programs by clicking here or by telephone at 1-800-WONDER-1 or by email at support@wonderware.com. \n\nWonderware also makes every effort to support Microsoft Security Updates within 15 business days of release.  Information regarding Microsoft Security Update compatibility can be found on the Wonderware Security Central Home Page.   \n\nWonderware will continue to provide guidance on security issues and to respond responsibly to security issues to serve our customers and to help them protect their operations.","lastModified":"2008-05-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wonderware:intouch:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4DFAB9E3-4400-4F08-A82A-336C697C06ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:wonderware:suitelink:2.0:*:*:*:*:*:*:*","matchCriteriaId":"870F3923-597C-4B5A-A8EE-D9434805C31A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30063","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2187","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/596268","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/491623/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28974","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019966","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42221","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6474","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/596268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/491623/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2006","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a .ics file containing (1) a large 16-bit integer on a TRIGGER line, or (2) a large integer in a COUNT field on an RRULE line."},{"lang":"es","value":"Apple iCal versión 3.0.1 en Mac OS X, permite a los servidores remotos CalDAV y los atacantes remotos asistidos por el usuario causar una denegación de servicio (desreferencia del puntero NULL y bloqueo de aplicación) o posiblemente ejecutar código arbitrario por medio de un archivo .ics que contiene (1) un entero grande de 16 bits en una línea TRIGGER, o (2) un entero grande en un campo COUNT en una línea RRULE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ical:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"51C6DC88-A4E7-4077-9BBF-7C1D482BA87C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3901","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2219","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492414/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492638/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492682/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28629","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28632","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020094","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1601","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42569","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492414/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492638/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492682/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2007","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2023-11-07T02:02:07.120","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1035.  Reason: This candidate is a reservation duplicate of CVE-2008-1035.  Notes: All CVE users should reference CVE-2008-1035 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"references":[]}},{"cve":{"id":"CVE-2008-2008","sourceIdentifier":"cve@mitre.org","published":"2008-04-29T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message."},{"lang":"es","value":"Desbordamiento de búfer en la característica del mensaje Display Names en Cerulean Studios Trillian Basic y Pro 3.1.9.0 permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un nickname largo en un mensaje de protocolo MSN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*","matchCriteriaId":"79B4DE7F-9854-4D56-9376-007FA794E032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:*","matchCriteriaId":"F7299CCB-32EF-47E8-AFE6-A78DCC5EC9E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/29952","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3849","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491281/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28925","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1368/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491281/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1368/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2009","sourceIdentifier":"secalert@redhat.com","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://svn.xiph.org/trunk/vorbis/CHANGES, 1.0 is the first stable release of libvorbis.  No version of libvorbis before 1.0 has been confirmed at this time.","cveTags":[],"descriptions":[{"lang":"en","value":"Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function."},{"lang":"es","value":"Xiph.org libvorbis versiones anteriores a 1.0 no comprueba apropiadamente para árboles poco poblados Huffman, lo cual permite a atacantes remotos provocar una denegación de servicio (caída) a través de ficheros OGG manipulados que disparan una corrupción de memoria durante la ejecución de la función _make_decode_tree."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"6F469817-2DAF-4184-AE56-2AF9609E8D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6EC995B3-2BEB-464B-B30A-0B32615F7228"},{"vulnerable":true,"criteria":"cpe:2.3:a:xiph.org:libvorbis:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D01CA748-6299-4776-BC29-19D487BEC0DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30247","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1020029","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-861-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=444443","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42521","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1020029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-861-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1510/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=444443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2010","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a crafted QuickTime media file.  NOTE: as of 20080429, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en Apple QuickTime Player de Windows XP SP2 y Vista SP1 permite a atacantes remotos ejecutar código de su elección a través de un fichero media QuickTime manipulado.\r\nNOTA: a fecha 29/04/2008, la única revelación es un vago preaviso sin información de uso inmediato. Sin embargo, dado que proviene de un investigador reputado, se le ha asignado un identificador CVE con propósito de seguimiento.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","matchCriteriaId":"EA5969D4-3D98-490E-89B6-FF7765E78C40"}]}]}],"references":[{"url":"http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28959","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019950","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42098","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2011","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script or HTML, and execute arbitrary code, via a response body, as demonstrated by a SCRIPT element that references a vbscript: URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el accesorio National Rail Enquiries Live Departure Boards antes de 1.1 permite a servidores remotos de National Rail Enquiries o atacantes man-in-the-middle inyectar secuencias de comandos web o HTML de su elección y ejecutar código de su elección, mediante un cuerpo de respuesta, como se demostró por un elemento SCRIPT que referencia un vbscript: URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_rail_enquiries:national_rail_enquiries_live_departure_boards:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"08FA6D1D-456D-4AEE-88B0-0B8945A24E17"}]}]}],"references":[{"url":"http://www.mwrinfosecurity.com/news/1690.html","source":"cve@mitre.org"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_national-rail-enquiries-gadget-advisory_2008-04-24.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28933","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42043","source":"cve@mitre.org"},{"url":"http://www.mwrinfosecurity.com/news/1690.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_national-rail-enquiries-gadget-advisory_2008-04-24.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2012","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo PostSchedule 1.0 para PostNuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro eid en una acción event."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postschedule:1.0:*:*:*:*:*:*:*","matchCriteriaId":"303F6FEB-F213-434F-96E8-26870FEB5E8A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28931","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42010","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2013","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T00:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del módulo pnFlashGames de 1.5 a 2.5 para PostNuke, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción display."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pnflashgames:pnflashgames:1.5:*:*:*:*:*:*:*","matchCriteriaId":"910802C5-880F-4E7F-A3A0-F55A48C373BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnflashgames:pnflashgames:2.5:*:*:*:*:*:*:*","matchCriteriaId":"69350C06-7DC9-4D37-80B8-3F4572B54952"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28948","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42019","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5500","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2014","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in an infinite loop."},{"lang":"es","value":"Mozilla Firefox 3.0 beta 5 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de código JavaScript que llama a document.write en un bucle infinito.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"}]}]}],"references":[{"url":"http://es.geocities.com/jplopezy/pruebamozilla.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3835","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491196/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491197/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491354/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491355/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42154","source":"cve@mitre.org"},{"url":"http://es.geocities.com/jplopezy/pruebamozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491197/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491355/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2015","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSave and (2) SaveSession method in one control, and the (3) saveRecordedExploreToFile method in a different control.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de ruta absoluta en determinados controles ActiveX en WatchFire AppScan 7.0, permiten a atacantes remotos crear o sobrescribir ficheros de su elección mediante un nombre de ruta completo  en el argumento de los métodos (1) CompactSave y (2) SaveSession en un control, y (3) saveRecordedExploreToFile de otro control. NOTA: esto puede aprovecharse para ejecutar código escribiendo en una carpeta Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:watchfire:appscan:7.0:*:*:*:*:*:*:*","matchCriteriaId":"ACCD5CA3-D9DF-43B3-8AEB-655A4EEAE5DC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28940","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019948","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42077","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5496","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2016","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter to the default URI under install/.  NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en Chilek Content Management System (también conocido como ChiCoMaS) 2.0.4 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro lang a el URI por defecto bajo install/. NOTA: esto se puede aprovechar para incluir y ejecutar archivos locales arbitrarios mediante secuencias de salto de directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:chicomas:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F465C799-CEBF-4F8F-9067-3AD12E9553C8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491369/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42144","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491369/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2017","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the operation parameter to the default URI under install/."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Chilek Content Management System (aka ChiCoMas) 2.0.4 permite que atacantes remotos añadan y ejecuten ficheros locales arbitrarios a  .. (punto punto) en el parámetro operation en la URI por defecto bajo install/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:chicomas:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F465C799-CEBF-4F8F-9067-3AD12E9553C8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491369/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42144","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491369/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2018","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a \"{user.password}\" comment in the profile of the admin user."},{"lang":"es","value":"La función AssignUser en template.class.php de PHPizabi 0.848b C1 HFP3 realiza macro expansiones peligrosas en cadenas delimitadas por caracteres '{' y '}', que permiten a atacantes remotamente autentificados obtener información sensible mediante un comentario que contiene un macro, como se demostró con un comentario \"{user.password}\" en el perfil del usuario admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpizabi:phpizabi:0.848b:*:*:*:*:*:*:*","matchCriteriaId":"9FBF85FD-A330-4543-9AEC-16790850ED6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28954","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42143","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2019","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple Machines Forum (SMF), probably 1.1.4, relies on \"randomly generated static\" to hinder brute-force attacks on the WAV file (aka audio) CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances.  NOTE: this issue reportedly exists because of an insufficient fix for CVE-2007-3308."},{"lang":"es","value":"Simple Machines Forum (SMF), probablemente 1.1.4, se basa en \"estática generada aleatoriamente\" para obstaculizar ataques de fuerza bruta en el fichero WAV (también conocido como audio) CAPTCHA, lo cual permite a atacantes remotos pasar el test CAPTCHA a través de un ataque automatizado que considera distancias Hamming.\r\nNOTA: esta cuestión existe al parecer a causa de un insuficiente aprieto para CVE-2007-3308."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"FDDB4318-5FB1-409F-81FA-9A4F660EEE47"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3836","source":"cve@mitre.org"},{"url":"http://www.rooksecurity.com/blog/?p=6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491128/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28866","source":"cve@mitre.org"},{"url":"http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42150","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rooksecurity.com/blog/?p=6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491128/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2020","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T01:07:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux 2.3, (5) e107 0.7.11, (6) WebZE 0.5.9, (7) Open Media Collectors Database (aka OpenDb) 1.5.0b4, and (8) Labgab 1.1 uses a code_bg.jpg background image and the PHP ImageString function in a way that produces an insufficient number of different images, which allows remote attackers to pass the CAPTCHA test via an automated attack using a table of all possible image checksums and their corresponding digit strings."},{"lang":"es","value":"La implementación CAPTCHA como se utiliza en (1) Francisco Burzi PHP-Nuke 7.0 y 8.1, (2) my123tkShop e-Commerce-Suite (también conocido como 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux 2.3, (5) e107 0.7.11, (6) WebZE 0.5.9, (7) Open Media Collectors Database (también conocido como OpenDb) 1.5.0b4, y (8) Labgab 1.1; utiliza una imagen de fondo code_bg.jpg y la función de PHP ImageString de una forma que no produce un número suficiente de imágenes diferentes; esto permite a atacantes remotos pasar el test CAPTCHA mediante un ataque automático utilizando una tabla con todas las sumas de validación (checksum) de imágenes posibles y sus cadenas de dígitos correspondientes."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:labgab:labgab:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3310461-272D-43C7-A8AA-589A7254FEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:my123tkshop:e-commerce-suite:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"ADC59E14-E4F7-4E9F-BE4E-98CD5797B45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opendb:opendb:1.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"0D1D7CD9-80EA-4D43-AB3A-BF833DB9F144"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmybittorrent:phpmybittorrent:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"20B593A2-9634-4AA0-8D63-CECA6391BEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D5E8572B-43BE-4068-929F-2B6FAA9EF959"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:8.1:*:*:*:*:*:*:*","matchCriteriaId":"B8442671-45B5-48F6-905F-41A8FD3BF301"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrentflux_project:torrentflux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E8B86EC9-2E6B-4BDE-B131-8BD82500D041"},{"vulnerable":true,"criteria":"cpe:2.3:a:webze:webze:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"2AA1E599-AC63-40AA-A3B9-6585CDABFFE1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3834","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.rooksecurity.com/blog/?p=6","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491127/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28877","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42152","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/3834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.rooksecurity.com/blog/?p=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491127/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2021","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T12:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Lhaplus anterior a 1.57 permite a atacantes remotos ejecutar código arbitrario mediante un campo de comentario largo en el fichero ZOO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lhaplus:lhaplus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.56","matchCriteriaId":"E7588232-44D2-4C6B-AA95-14692253A9F5"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2374468481/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080428","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28953","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1369/references","source":"cve@mitre.org"},{"url":"http://www7a.biglobe.ne.jp/~schezo/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42032","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2374468481/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1369/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www7a.biglobe.ne.jp/~schezo/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2022","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T12:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) toid parameter to send-private-message.asp and the (2) redirect parameter to admin/impersonate.asp.  NOTE: vector 2 requires authentication."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PD9 Software MegaBBS 2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante los parámetros (1) toid a send-private-message.asp y (2) redirect a admin/impersonate.asp. NOTA: el vector 2 requiere autentificación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7B612825-DEE1-4344-B15E-B81757C29CAB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/37","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28961","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42042","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5507","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2023","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T12:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invisible and (2) timeoffset parameters to profile/controlpanel.asp and the (3) attachmentid parameter to forums/attach-file.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el programa MegaBBS 2.2 de PD9 Software, que permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros (1) invisible y (2) timeoffset en profile/controlpanel.asp y el (3) parámetro attachmentid en forums/attach-file.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7B612825-DEE1-4344-B15E-B81757C29CAB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/37","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28961","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42044","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5507","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2024","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T12:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the glang[] parameter in a registernew action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de miniBB 2.2 y posiblemente anteriores, cuando está habilitado register_globals, permite a atacantes remotos inyectar secuencias de comandos o HTML de su elección mediante el parámetro glang[] en una acción registernew."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4D218F1D-66F9-4DF4-9F83-1D731B443C04"}]}]}],"references":[{"url":"http://secunia.com/advisories/29997","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.minibb.net/forums/9_5110_0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28930","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42013","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.minibb.net/forums/9_5110_0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2026","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T14:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258, and other versions before 5.3.3.378, allows remote attackers to inject arbitrary web script or HTML via a URL-encoded postdata parameter.  NOTE: this is different than CVE-2005-1118, but it might be the same as CVE-2008-1470."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebID/IISWebAgentIF.dll del RSA Authentication Agent (Agente de Autentificación RSA) 5.3.0.258 y otras versiones anteriores a 5.3.3.378, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un parámetro postdata codificado como un URL. NOTA: este es distinto a CVE-2005-1118, pero podría ser el mismo que CVE-2008-1470."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:authentication_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"81D1C0D6-46DB-448C-BD4D-E027D4755467"}]}]}],"references":[{"url":"http://secunia.com/advisories/14954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3848","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491247/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491247/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2027","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T14:10:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an ftp URL in the url parameter to a Redirect action."},{"lang":"es","value":"Vulnerabilidad de redirección libre en WebID/IISWebAgentIF.dll de RSA Authentication Agent 5.3.0.258 para Web para IIS; cuando se accede desde determinados navegadores como Mozilla Firefox, permite a atacantes remotos redirigir a los usuarios a sitios web elegidos por el atacante y realizar ataques de phishing mediante una URL de tipo ftp en el parámetro url de una acción Redirect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:authentication_agent:5.3.0.258:*:*:*:*:*:*:*","matchCriteriaId":"AE68BB0C-CEB1-4F08-BD12-A30FFCF33BEC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3850","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR07-43.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491237/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28907","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42184","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR07-43.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491237/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2028","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to the glang parameter in a registernew action to index.php, which leaks the path in an error message."},{"lang":"es","value":"miniBB 2.2, y puede que versiones anteriores, cuando register_globals está habilitado permite a atacantes remotos obtener la ruta completa a través de una solicitud directa al parámetro glang en una acción registernew en index.php, esto hace que se filtre la ruta en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4D218F1D-66F9-4DF4-9F83-1D731B443C04"}]}]}],"references":[{"url":"http://secunia.com/advisories/29997/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.minibb.net/forums/9_5110_0.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42012","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29997/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.minibb.net/forums/9_5110_0.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2029","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary SQL commands via the xtr parameter in a userinfo action to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en 1) setup_mysql.php y (2) setup_options.php de miniBB 2.2 y posiblemente anteriores, cuando está habilitado register_globals, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro xtr en una acción userinfo a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"4D218F1D-66F9-4DF4-9F83-1D731B443C04"}]}]}],"references":[{"url":"http://secunia.com/advisories/29997","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.minibb.net/forums/9_5110_0.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28930","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42014","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.minibb.net/forums/9_5110_0.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2030","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query string.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en installControl.php3 de F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 y 6.0-6.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la cadena query. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_4100:*:*:*:*:*:*:*:*","matchCriteriaId":"B8BA182D-6515-45F9-A73B-A1F4749ECA72"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"00CB3458-5459-4E40-AE68-0FC73FD0C089"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4976941E-BDAA-4AD2-AB70-7B4A2E134246"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01AFA837-B856-482A-8192-5E92FD40EA65"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:6.2:*:*:*:*:*:*:*","matchCriteriaId":"E81599EA-E8A4-49CB-858E-1FCED94DA71F"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28902.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28902","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42078","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28902.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2031","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a NULL pointer dereference.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"VicFTPS 5.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un comando LIST manipulado, esto lanza una referencia a un puntero NULO. NOTA: se desconoce el origen de esta información; los detalles han sido obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vicftps:vicftps:5.0:*:*:*:*:*:*:*","matchCriteriaId":"277689B4-A3F0-40C0-85A1-9130B8D1E898"}]}]}],"references":[{"url":"http://secunia.com/advisories/29943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28967","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2032","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending multiple crafted RETR commands.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"El servicio FTP en Acritum Femitter Server 1.03 permite a atacantes remotos provocar una denegación de servicio (caída) enviando múltiples comandos RETR manipulados. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acritum:femitter_server:1.03:*:*:*:*:*:*:*","matchCriteriaId":"FB7463BD-FDB3-4E59-B1AC-B5B88B5A1F9C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28973","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2033","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2023-11-07T02:02:07.360","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1381.  Reason: This candidate is a duplicate of CVE-2008-1381.  Notes: All CVE users should reference CVE-2008-1381 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"references":[]}},{"cve":{"id":"CVE-2008-2034","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in wp-download_monitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en wp-download_monitor/download.php, el pluging Download Monitor 2.0.6 para WordPress permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id. NOTA: El origen de esta información es desconocido; los detalles han sido obtenidos exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:download_monitor_plugin:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"96965D87-1DE8-4EDB-A9B4-25078DDBA9AD"}]}]}],"references":[{"url":"http://secunia.com/advisories/29876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28975","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42094","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2035","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and earlier, (3) newbb_fileup 1.83 and earlier, (4) News_embed (news_fileup) 1.44 and earlier, and (5) PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en los módulos Bluemoon, Inc. (1) BackPack 0.91 y anteriores, (2) BmSurvey 0.84 y anteriores, (3) newbb_fileup 1.83 y anteriores, (4) News_embed (news_fileup) 1.44 y anteriores y (5) PopnupBlog 3.19 y anteriores para XOOPS 2.0.x, XOOPS Cube 2.1 e ImpressCMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:backpack:*:*:*:*:*:*:*:*","versionEndIncluding":"0.91","matchCriteriaId":"B3A71096-13E8-4357-8DC2-8D28F2AE6C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:bmsurvey:*:*:*:*:*:*:*:*","versionEndIncluding":"0.84","matchCriteriaId":"9606165B-67E3-41DA-BA62-EFAB2632509F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:newbb_fileup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.83","matchCriteriaId":"D29194E7-B6FB-40A7-BA2B-8D58BB75B0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:news_fileup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.44","matchCriteriaId":"36D4BC0A-90C8-461A-920B-A7803FF093FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:popnupblog:*:*:*:*:*:*:*:*","versionEndIncluding":"3.19","matchCriteriaId":"B6917491-BDB8-43A4-9030-D87D278C5473"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D649637-9772-4B71-B219-DD505CDB3549"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops_cube:2.1:*:*:*:*:*:*:*","matchCriteriaId":"180F736F-0814-4B3C-AB0C-6D1F5D691E3A"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN%2331351020/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29993","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bluemooninc.biz/~xoops/modules/news/article.php?storyid=69","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28966","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42072","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN%2331351020/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bluemooninc.biz/~xoops/modules/news/article.php?storyid=69","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2036","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter in a poll action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en dream4 Koobi Pro 6.25, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro poll_id en una acción poll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dream4:koobi:6.25:pro:*:*:*:*:*:*","matchCriteriaId":"338A166F-F8FE-4271-B125-5B7E9EA59686"}]}]}],"references":[{"url":"http://secunia.com/advisories/29789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3843","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490889/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28779","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1242/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41817","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5448","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490889/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1242/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2037","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to inject arbitrary web script or HTML via the msg parameter to (1) login.php, (2) importer.php, (3) add_groupe.php, (4) contacts.php, (5) groupes.php, and (6) search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en EditeurScripts EsContacts 1.0, permiten a usuarios autenticados en remoto inyectar secuencias de comandos Web o HTMl de su elección mediante el parámetro msg de (1) login.php, (2) importer.php, (3) add_groupe.php, (4) contacts.php, (5) groupes.php, and (6) search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts:escontacts:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C1D3DC3B-E016-463F-B506-A2F314D07720"}]}]}],"references":[{"url":"http://secunia.com/advisories/29877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28825","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/50-EScontacts-XSS.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41879","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/50-EScontacts-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2038","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) orderby and (2) sort parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/adminindex.php de Turnkey Web Tools SunShop Shopping Cart 4.1.0; permiten a administradores autenticados en remoto ejecutar comandos SQL de su elección mediante los parámetros (1) orderby y (2) sort. NOTA: se desconoce el origen de esta información; los detalles han sido obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2A88F741-7FD3-4173-9D1F-48D7D90A57F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/29811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28832","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2040","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Basic Authentication string with a long (1) username or (2) password."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función HTTP::getAuthUserPass (core/common/http.cpp) en Peercast 0.1218 y gnome-peercast permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de una cadena de Autenticación Básica con un (1) nombre de usuario o (2) contraseñas largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peercast:peercast:0.1218:*:*:*:*:*:*:*","matchCriteriaId":"F7C02485-0F15-44D7-8041-9DEBACE92905"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478573","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478680","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30020","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30325","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31182","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-11.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1582","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1583","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28986","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1409/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1410/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42092","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1409/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1410/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2041","sourceIdentifier":"cve@mitre.org","published":"2008-04-30T16:17:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors and \"grave\" impact when the web server has write access to a directory under the web document root."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en eGroupWare anterior a 1.4.004, tienen vectores de ataque no especificados y un impacto \"grave\" cuando el servidor web tiene acceso de escritura a un directorio bajo la raíz de los documentos web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.003","matchCriteriaId":"B589C7DD-4BCE-454D-8CB6-C15BC6C1FFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.4.001:*:*:*:*:*:*:*","matchCriteriaId":"F22F0392-6D7A-4133-83AA-C14F1B69A167"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.4.002:*:*:*:*:*:*:*","matchCriteriaId":"896271FE-50B1-436B-8926-1CE685667D03"}]}]}],"references":[{"url":"http://secunia.com/advisories/30073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.egroupware.org/news","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28817","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.egroupware.org/news","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2042","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function."},{"lang":"es","value":"La API de JavaScript en Adobe Acrobat Professional versiones 7.0.9 y posiblemente 8.1.1 se expone a un método peligroso, el cual permite a atacantes remotos (1) ejecutar comandos de arbitrarios o (2) provocar un desbordamiento de búfer a través de un fcihero PDF manipulado que invoca un app.checkForUpdate con una función de llamada mal intencionada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"3A068220-ADFE-46F0-AE35-3355BEFEECD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"465F9134-DD86-4F13-8C39-949BE6E7389A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB041EDF-EFF8-4AA6-8D59-411975547534"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AABA4FE3-662B-4956-904D-45086E000890"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"998CD79C-458E-46A8-8261-1C40C53D9FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"0155FB0B-7FAD-4388-96C8-A8543B4FDFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*","matchCriteriaId":"201F059D-33D1-4D9F-9C6F-FC8EB49E4735"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B025E795-5713-485E-8A15-EBE4451A1A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B453FA1D-0FE9-4324-9644-E167561926C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FDEA946E-B6D2-463B-89D0-F2F37278089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"183B5940-2310-4D2E-99F0-9792A801A442"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F8BB13E-2732-4F9E-A588-EA1C00893C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5FCDCBF-597B-439C-8D8B-2819FC70C567"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"440B890A-90E9-4456-B92A-856CD17F0C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8976A7DC-1314-4C4A-A7C5-AA789D2DAB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"37854E7C-2166-48D7-AE8C-44C9468C38C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F9C17896-8895-4731-B77A-F488A94F0CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF9F1050-B6BE-4B99-882B-36D6E187304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"82321E60-2553-41E2-A4F4-375CFF011C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1C92642-7C8D-411A-8726-06A8A6483D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"3CBE2E6C-AF0E-4A77-9EB0-3593889BC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"4B5C5C14-383C-4630-858E-D40D6C32FD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F509566A-6D4A-40C0-8A16-F8765C5DCAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"200FFAE3-CC1C-4A11-99AD-377D54A67195"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"8A990E86-07C0-49E2-92D6-55E499F30FAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*","matchCriteriaId":"6AED985D-60D7-489E-9F1E-CE3C9D985B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F7AA1BA3-9FFA-46AB-A92A-7247D5F7EA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"3F5F7424-1E19-4078-8908-CD86A0185042"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F2402B40-6B72-48B5-A376-DA8D16CA43FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"0D968113-340A-4E5A-B4FD-D9702D49E3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF742B8-5F7A-487B-835C-756B1BB392F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B9351C2-16ED-4766-B417-8DB3A8766C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74667860-0047-40AD-9468-860591BA9D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9628AFF9-6EE1-4E85-858F-AE96EE64B7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B95511FD-C8F1-478F-B6DF-1D0E068845D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"32049561-270C-4B18-9E96-EA0F66ACECAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1976F77D-D8D2-4107-A1C4-05D776A02FAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"}]}]}],"references":[{"url":"http://secunia.com/advisories/30840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3861","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019971","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491735/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491735/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1966/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2043","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional information can be found at:\r\n\r\nhttp://secunia.com/advisories/30027/\r\n\r\nhttp://www.frsirt.com/english/advisories/2008/1401\r\n\r\nhttp://blog.cpanel.net/?p=39","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to (1) execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via (2) frontend/x2/sql/adddb.html, (3) frontend/x2/sql/adduser.html, and (4) frontend/x2/ftp/doaddftp.html."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en cPanel, posiblemente 11.18.3 y 11.19.3, permite a los atacantes remotos (1) ejecutar código arbitrario a través del parámetro command1 en frontend/x2/cron/editcronsimple.html, y realizar varias acciones administrativas a través de (2) frontend/x2/sql/adddb.html  (3) frontend/x2/sql/adduser.html, y (4) frontend/x2/ftp/doaddftp.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*","matchCriteriaId":"53A19523-B3B1-48E6-A202-CEB1CBD2DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.19.3:*:*:*:*:*:*:*","matchCriteriaId":"04480CFC-EA47-4723-B23D-0C415598D254"}]}]}],"references":[{"url":"http://secunia.com/advisories/30027","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/584089","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.rooksecurity.com/blog/?p=7","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1401/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42114","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/584089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.rooksecurity.com/blog/?p=7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1401/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2044","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean literal, which allows remote attackers to bypass authentication and execute arbitrary code by setting this variable to 1, as demonstrated by uploading a PHP script via an add action to projects_site/uploadfile.php."},{"lang":"es","value":"includes/library.php en netOffice Dwins 1.3 p2 compara la variable demoSession con la cadena literal \"true\" en lugar de compararla con el valor lógico true, lo que permite a los atacantes remotos saltarse la autenticación y ejecutar código arbitrario fijando el valor de la variable a 1, como se demuestra subiendo un script PHP a través de la acción add a projects_site/iploadfile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netoffice:dwins:1.3:*:*:*:*:*:*:*","matchCriteriaId":"034660B1-1064-4657-A421-7BF4734A573A"}]}]}],"references":[{"url":"http://netofficedwins.sourceforge.net/modules/news/article.php?storyid=47","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29193","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3845","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=814851","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488958","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491542/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28051","source":"cve@mitre.org"},{"url":"http://netofficedwins.sourceforge.net/modules/news/article.php?storyid=47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=814851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491542/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2045","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en SugarCRM Sugar Community Edition 4.5.1 y 5.0.0, permite a atacantes remotos leer los ficheros que deseen escribiendo una ruta completa en el parámetro URL de modules/Feeds/Feed.php, esto guarda el contenido en un fichero de caché relacionado, en el directorio .cache/feeds."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.5.1:*:community_edition:*:*:*:*:*","matchCriteriaId":"D0D2A567-7389-4984-BE45-414BB37CCFD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:community_edition:*:*:*:*:*","matchCriteriaId":"6B389680-9097-4034-9590-4F172EFFEF2E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3844","source":"cve@mitre.org"},{"url":"http://www.security-assessment.com/files/advisories/2008-04-29_SugarCRM_local_file_disclosure.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491417/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28981","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sugarcrm.com/docs/Release_Notes/CommunityEdition_ReleaseNotes_5.0d/Sugar_Release_Notes_5.0d.2.6.html","source":"cve@mitre.org"},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=31688","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=32252","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1388/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42087","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-assessment.com/files/advisories/2008-04-29_SugarCRM_local_file_disclosure.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491417/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sugarcrm.com/docs/Release_Notes/CommunityEdition_ReleaseNotes_5.0d/Sugar_Release_Notes_5.0d.2.6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=31688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=32252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1388/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2046","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to inject arbitrary web script or HTML via the user parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Softpedia SiteXS CMS 0.1.1 Pre-Alpha permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softpedia:sitexs_cms:0.1.1:pre-alpha:*:*:*:*:*:*","matchCriteriaId":"937C4B39-8442-4A80-8EF8-B0B6A018A611"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120950161507846&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28984","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42093","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120950161507846&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2047","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hpz/profil.asp and (2) hpz/prodetail.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Angelo-Emlak 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id a (1) hpz/profil.asp y (2) hpz/prodetail.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:angelo-emlak:1.0:*:*:*:*:*:*:*","matchCriteriaId":"56EB05D7-3851-4604-BFA6-A1D1A483053B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28949","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1385","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42018","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2048","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) de hpz/admin/Default.asp in Angelo-Emlak 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro sayfa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:angelo-emlak:1.0:*:*:*:*:*:*:*","matchCriteriaId":"56EB05D7-3851-4604-BFA6-A1D1A483053B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28949","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1385","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42155","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2049","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message."},{"lang":"es","value":"El servidor POP3 (EPSTPOP3S.EXE) 4.22 en E-Post Mail Server 4.10 permite a atacantes remotos conseguir información sensible a través de múltiples comandos APOP manipulados para una cuenta POP3 conocida, la cual mostrará la contraseña en un mensaje de error del POP3.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-post_corporation:mail_server:4.10:*:*:*:*:*:*:*","matchCriteriaId":"28DFC94C-AED4-42CC-992D-7EBE538BE006"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-post_corporation:mail_server:enterprise_4.10:*:*:*:*:*:*:*","matchCriteriaId":"27AD36A1-B0F4-4085-B0A7-FF95F5FB693B"}]}]}],"references":[{"url":"http://secunia.com/advisories/29990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/epostmailserver410-en.html","source":"cve@mitre.org"},{"url":"http://www.e-postinc.jp/Mail_Server.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28951","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019930","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1389/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/epostmailserver410-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.e-postinc.jp/Mail_Server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1389/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2050","sourceIdentifier":"secalert@redhat.com","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el FastCGI SAPI (fastcgi.c) en PHP en versiones anteriores a 5.2.6 tiene impacto y vectores de ataque desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue does not affect the version of PHP shipped in Red Hat Enterprise Linux 2.1, 3, or 4.\n\nWe do not consider this issue to be a security flaw for Red Hat Enterprise Linux 5 since no trust boundary is crossed.  More information can be found here:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2050","lastModified":"2008-05-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.5","matchCriteriaId":"18255FF5-3F40-483F-85DC-21D9B6B4FE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/fastcgi.c?r1=1.44&r2=1.45&diff_format=u","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30048","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30083","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30158","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30345","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30967","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31200","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32746","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1572","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29009","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42133","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"secalert@redhat.com"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/fastcgi.c?r1=1.44&r2=1.45&diff_format=u","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2051","sourceIdentifier":"secalert@redhat.com","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to \"incomplete multibyte chars.\""},{"lang":"es","value":"La función escapeshellcmd API en PHP anterior a 5.2.6 tiene impacto desconocido y vectores de ataque dependientes del contexto relacionados con \"caracteres multibyte incompletos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.5","matchCriteriaId":"18255FF5-3F40-483F-85DC-21D9B6B4FE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30048","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30083","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30158","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30288","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30345","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30411","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30757","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30828","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30967","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31119","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31124","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31200","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31326","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32746","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1572","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1578","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0544.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0545.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0546.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0582.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/492671/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29009","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10256","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0582.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492671/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2052","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T17:05:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en redirect.php en Bitrix Site Manager 6.5, permite a atacantes remotos redireccionar a usuarios hacia sitios web de su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro \"goto\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*","matchCriteriaId":"339641BD-BEF4-4A84-B266-41BF09E63225"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/62/45/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42157","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://holisticinfosec.org/content/view/62/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2053","sourceIdentifier":"psirt@cisco.com","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco Unified Customer Voice Portal (CVP) 4.0.x anterior a 4.0(2)_ES14, 4.1.x  anterior a 4.1(1)_ES11 y 7.x anterior 7.0(1), permite a usuarios autenticados remotamente con privilegios del rol de administrador el crear, modificar o eliminar cuentas de superusuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_customer_voice_portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9B1D46F0-DEC9-418B-8973-6EC44201B0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_customer_voice_portal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"270E39D1-6F71-4C6F-AE91-B0A86057CCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_customer_voice_portal:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6796545D-C15C-4ADA-8491-31FC26560809"}]}]}],"references":[{"url":"http://secunia.com/advisories/30289","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020080","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099beae.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29315","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1603/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42564","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099beae.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1603/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2054","sourceIdentifier":"psirt@cisco.com","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco CiscoWorks Common Services 3.0.3 a la 3.1.1, permite a atacantes remotos ejecutar código arbitrario en una máquina cliente a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2C905C4D-58D5-46E3-944F-53DCB147B34C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6B91D77A-A96A-4A64-AFFE-7ECE001D2038"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"88AD3EC2-36B1-4E34-BD7F-B1D02B32178A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5CC9C408-0BE2-45A6-ACB3-B9EBB22BC773"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.1:*:*:*:*:*:*:*","matchCriteriaId":"499CD64C-8692-4BE7-8F5E-5964ACDA1972"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D2152A29-7074-4659-AA8A-BB3E793ED4A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30422","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a1f14.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.liquidmatrix.org/blog/2008/05/28/advisory-ciscoworks-arbitrary-code-execution-vulnerability/","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020127","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1687/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42702","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a1f14.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.liquidmatrix.org/blog/2008/05/28/advisory-ciscoworks-arbitrary-code-execution-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1687/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2055","sourceIdentifier":"psirt@cisco.com","published":"2008-06-04T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface."},{"lang":"es","value":"Adaptive Security Appliance (ASA) de Cisco  y PIX security appliance de Cisco versión 7.1.x anterior a 7.1(2)70, versión 7.2.x anterior a 7.2 (4) y versión 8.0.x anterior a 8.0(3)10, permite a los atacantes remotos causar una denegación de servicio por medio de un paquete TCP ACK creado para la interfaz del dispositivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7452143C-0F6D-42B2-B61E-311AA66B184D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.2:*:*:*:*:*:*:*","matchCriteriaId":"ACF15BCE-C6B3-47CB-B716-51B95398A253"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5E623855-FB2B-4B8A-85E8-B8DC29A3FBB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"95627941-30D8-452F-B6C8-76D2BEE93514"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30552","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020176","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020177","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42835","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2056","sourceIdentifier":"psirt@cisco.com","published":"2008-06-04T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a denial of service (device reload) via a crafted Transport Layer Security (TLS) packet to the device interface."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) y Cisco PIX security appliance 8.0.x anterior a 8.0(3)9 y 8.1.x anterior a 8.1(1)1, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de un paquete Transport Layer Security (TLS)manipulado a la interfaz del dispositivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:8.1:*:*:*:*:*:*:*","matchCriteriaId":"7873F341-1F9D-433A-814F-A8DDCFB64D7B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.1:*:*:*:*:*:*:*","matchCriteriaId":"50740BFB-0C41-4C9C-ACA7-A4DE9382F1C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30552","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020178","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020179","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42836","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2057","sourceIdentifier":"psirt@cisco.com","published":"2008-06-04T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet."},{"lang":"es","value":"Motor de inspección  Instant Messenger  en  Cisco Adaptive Security Appliance ASA) y Cisco PIX security appliance 7.2.x anterior 7.2(4), 8.0.x anterior a 8.0(3)10, y 8.1.x anterior a 8.1(1)2, permite a atacantes remotos provocar una denegación de servicio a trasvés de un paquete manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.2:*:*:*:*:*:*:*","matchCriteriaId":"ACF15BCE-C6B3-47CB-B716-51B95398A253"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"95627941-30D8-452F-B6C8-76D2BEE93514"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30552","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020180","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020181","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2058","sourceIdentifier":"psirt@cisco.com","published":"2008-06-04T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service (device reload) via a port scan against TCP port 443 on the device."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) y Cisco PIX security appliance 7.2.x anterior a 7.2(3)2 y v8.0.x  anterior a 8.0(2)17, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) mediante un escaneo de puerto hacia el 443."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.2:*:*:*:*:*:*:*","matchCriteriaId":"ACF15BCE-C6B3-47CB-B716-51B95398A253"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"95627941-30D8-452F-B6C8-76D2BEE93514"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30552","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020182","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1020183","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2059","sourceIdentifier":"psirt@cisco.com","published":"2008-06-04T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors."},{"lang":"es","value":"Cisco Adaptive Security Appliance (ASA) y Cisco PIX security appliance 8.0.x anterior a 8.0(3)9, permite a atacantes remotos evitar las ACLs del plano de control a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30552","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020184","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020185","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42841","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2060","sourceIdentifier":"psirt@cisco.com","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a \"specific series of jumbo Ethernet frames.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco Intrusion Prevention System (IPS) 5.x anterior a 5.1(8)E2 y 6.x anterior 6.0(5)E2, cuando el modo inline y el soporte Jumbo Ethernet están activados, permite a atacantes remotos provocar una denegación de servicio (caída), y posiblemente evitar restricciones previstas sobre el tráfico de red a través de \"series específicas de estructuras Jumbo Ethernet\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:intrusion_prevention_system:5.1:*:*:*:*:*:*:*","matchCriteriaId":"D846D9B7-CB24-40C6-B7A4-2ABFF0D43442"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:intrusion_prevention_system:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B010D14A-7275-454B-B2F8-31EE0D34C24F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30767","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29791","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020326","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1872/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43166","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1872/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2061","sourceIdentifier":"psirt@cisco.com","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3c) and 6.x before 6.1(2) allows remote attackers to cause a denial of service (TSP crash) via malformed network traffic to TCP port 2748."},{"lang":"es","value":"El Servicio Computer Telephony Integration (CTI) Manager de Cisco Unified Communications Manager (CUCM) 5.x versiones anteriores a la 5.1(3c) y 6.x versiones anteriores a la 6.1(2) permite a atacantes remotos provocar una denegación de servicio (caída TSP) a través de tráfico mal formado de red al puerto TCP 2748."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3c\\)","matchCriteriaId":"DB3C4551-63D4-4FB6-9871-8E9C8E634B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1\\(2\\)","matchCriteriaId":"C9E12823-198D-41FC-969E-2304CDC39EFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30848","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29933","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020360","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1933/references","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43349","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1933/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2062","sourceIdentifier":"psirt@cisco.com","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151."},{"lang":"es","value":"El Servicio Real-Time Information Server (RIS) Data Collector de Cisco Unified Communications Manager (CUCM) versiones anteriores a la 4.2(3)SR4 y 4.3 versiones anterieos a la 4.3(2)SR1, permite a atacantes remotos evitar la autenticación y obtener información sobre la configuración en cluster y estadísticas, a través de una conexión directa TCP al puerto de servicio, también conocida como Bug ID CSCsq35151."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2","versionEndExcluding":"4.2\\(3\\)sr4","matchCriteriaId":"6D27236B-0B95-4899-B1AF-0E75D8B6044F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3","versionEndExcluding":"4.3\\(2\\)sr1","matchCriteriaId":"C428C26F-7960-4884-8202-372EBC214506"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3c\\)","matchCriteriaId":"DB3C4551-63D4-4FB6-9871-8E9C8E634B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1\\(2\\)","matchCriteriaId":"C9E12823-198D-41FC-969E-2304CDC39EFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30848","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29935","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020361","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1933/references","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43355","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1933/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2063","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en browse.videos.php en Joovili 3.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro categoría."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:3.1:*:*:*:*:*:*:*","matchCriteriaId":"439578A0-DB6D-48FC-AE99-C194AC5DB95F"}]}]}],"references":[{"url":"http://secunia.com/advisories/29991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28979","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42086","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2064","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to \"a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en PhpGedView versiones anteriores a  4.1.5, presenta un impacto desconocido y vectores de ataque relacionados con \"a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"B72A5889-BB71-4B29-85F0-54301AC39A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E2023444-2ED3-493B-BAD4-E1CB35E5AEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:0.8:*:*:*:*:*:*:*","matchCriteriaId":"08CC63D1-93D0-4824-9462-F881D775E3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:0.95:*:*:*:*:*:*:*","matchCriteriaId":"B3E12DB8-EAD0-4F5C-B785-D4C3C24345D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F39A506-086F-4A95-AA7B-44B2CA45D9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6F92B851-F2A2-4BDE-A5D5-FCFEB7737992"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:1.04:*:*:*:*:*:*:*","matchCriteriaId":"D3E4F77A-FC26-41AB-B5CA-13D433BB5B8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.0:*:*:*:*:*:*:*","matchCriteriaId":"395FAED4-94DE-4C7D-AF1B-BE0586189587"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.12:*:*:*:*:*:*:*","matchCriteriaId":"7F58F44C-F317-4AEF-9394-A18DEE8E52A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.13:*:*:*:*:*:*:*","matchCriteriaId":"52600D9B-44DC-4C5E-9105-F514FD6EF19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.50:*:*:*:*:*:*:*","matchCriteriaId":"3C00EF07-DA5D-4F60-879A-83C3FC376049"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*","matchCriteriaId":"EDA13EED-7C5F-4F5E-AEC2-D5DA0206B238"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*","matchCriteriaId":"12A0E38B-C9E3-4619-B1A1-94C11546D6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CA5AC706-5C75-422A-9C70-09EA3827002B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:3.2:*:*:*:*:*:*:*","matchCriteriaId":"328757A4-D90E-46A2-9B4A-AF0F4D5BDFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"3F1A017B-DC5C-41F6-A489-D37C9223124C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B3442CF0-EBFC-40DD-930C-1EAC1CAF06C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"30317A7C-91E3-4D25-9A5D-A8F49674C67D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BCE3A384-54FC-4672-B395-A73696B64FCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/29989","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30256","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=55456&release_id=595222","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1580","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phpgedview.net/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28978","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=55456&release_id=595222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phpgedview.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2065","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jokes.php en YourFreeWorld Jokes Site Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"categoría\" (category)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:jokes_site_script:*:*:*:*:*:*:*:*","matchCriteriaId":"F9EA37C6-9896-4431-A83E-02057A115158"}]}]}],"references":[{"url":"http://secunia.com/advisories/29981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28963","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42047","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5508","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2066","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action.  NOTE: it was later reported that other versions before 3.0.1 are also vulnerable."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en bb_admin.php en miniBB, permite a atacantes remotos  inyectar código web o HTML de su elección a través del parámetro \"whatus\" en una acción de \"searchusers2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"F9CBC3FA-DCC8-48B2-A042-46F8551807C0"}]}]}],"references":[{"url":"http://osvdb.org/95122","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2013/Jul/102","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3846","source":"cve@mitre.org"},{"url":"http://www.minibb.com/download.php?file=minibb_update","source":"cve@mitre.org"},{"url":"http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491375/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28957","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/61116","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42076","source":"cve@mitre.org"},{"url":"https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/","source":"cve@mitre.org"},{"url":"http://osvdb.org/95122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2013/Jul/102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.minibb.com/download.php?file=minibb_update","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491375/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/61116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2067","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action.  NOTE: it was later reported that other versions before 3.0.1 are also vulnerable."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bb_admin.php en miniBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"whatus\" en una accción \"searchusers2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"F9CBC3FA-DCC8-48B2-A042-46F8551807C0"}]}]}],"references":[{"url":"http://osvdb.org/95121","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2013/Jul/102","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3846","source":"cve@mitre.org"},{"url":"http://www.minibb.com/download.php?file=minibb_update","source":"cve@mitre.org"},{"url":"http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491375/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/61116","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42270","source":"cve@mitre.org"},{"url":"https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/","source":"cve@mitre.org"},{"url":"http://osvdb.org/95121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2013/Jul/102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.minibb.com/download.php?file=minibb_update","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491375/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/61116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2068","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WordPress 2.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29965","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wordpress.org/development/2008/04/wordpress-251/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42029","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wordpress.org/development/2008/04/wordpress-251/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2069","sourceIdentifier":"cve@mitre.org","published":"2008-05-02T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI."},{"lang":"es","value":"Desbordamiento de búfer en Novell GroupWise 7 permite a atacantes remotos provocar una denegación de servicio o la ejecución de código de su elección a través de un un argumento largo en una URI: mailto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A9FBB457-FDC0-485F-951A-C0A7661A92B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8661AFFB-5CAF-4D44-A617-E0330C764BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"CF66EFEE-DAB2-4455-96F2-50D3E9456485"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491576/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491594/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28969","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019942","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1393/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42052","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5515","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491576/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491594/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1393/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2070","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered \"<\" and \">\" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors."},{"lang":"es","value":"La interfaz WHM 11.15.0 para cPanel 11.18 anterior a 11.18.4 y 11.22 anterior a 11.22.3 permite a atacantes remotos evitar la protección XSS e inyectar secuencias de comandos o HTML de su elección mediante caracteres \"<\" y \">\" repetidos ordenados incorrectamente en los parámetros 1) issue a scripts2/knowlegebase, (2) user a scripts2/changeip, (3) search a scripts2/listaccts y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18:*:*:*:*:*:*:*","matchCriteriaId":"CF562242-C032-4D52-9464-91EF5C9EEA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.1:*:*:*:*:*:*:*","matchCriteriaId":"80AD4CE4-714E-4949-B676-F1F692172773"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.2:*:*:*:*:*:*:*","matchCriteriaId":"6FAC2F2A-3A9C-4B7D-8B20-4DBEB6DF9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*","matchCriteriaId":"53A19523-B3B1-48E6-A202-CEB1CBD2DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22:*:*:*:*:*:*:*","matchCriteriaId":"67891987-C727-45FF-B027-11B25D2849D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.1:*:*:*:*:*:*:*","matchCriteriaId":"011314F7-1977-453B-B308-DB776DF604E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.2:*:*:*:*:*:*:*","matchCriteriaId":"051B4B2E-BF9B-4EA8-973B-6D96A1618F24"}]}]}],"references":[{"url":"http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30166","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491864/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29125","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1522/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42305","source":"cve@mitre.org"},{"url":"http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1522/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2071","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en la interfaz WHM 11.15.0 para cPanel 11.18 anterior a 11.18.4 y 11.22 anterior a 11.22.3 permite a atacantes remotos realizar acciones sin autorización como administradores cPanel mediante peticiones a cpanel/whm/webmail y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18:*:*:*:*:*:*:*","matchCriteriaId":"CF562242-C032-4D52-9464-91EF5C9EEA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.1:*:*:*:*:*:*:*","matchCriteriaId":"80AD4CE4-714E-4949-B676-F1F692172773"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.2:*:*:*:*:*:*:*","matchCriteriaId":"6FAC2F2A-3A9C-4B7D-8B20-4DBEB6DF9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*","matchCriteriaId":"53A19523-B3B1-48E6-A202-CEB1CBD2DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22:*:*:*:*:*:*:*","matchCriteriaId":"67891987-C727-45FF-B027-11B25D2849D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.1:*:*:*:*:*:*:*","matchCriteriaId":"011314F7-1977-453B-B308-DB776DF604E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.2:*:*:*:*:*:*:*","matchCriteriaId":"051B4B2E-BF9B-4EA8-973B-6D96A1618F24"}]}]}],"references":[{"url":"http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30166","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491864/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29125","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1522/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42306","source":"cve@mitre.org"},{"url":"http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1522/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2072","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Virtual Design Studio vlbook 1.21 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro l, un vector distinto de CVE-2006-3260."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_design_studios:vlbook:1.21:*:*:*:*:*:*:*","matchCriteriaId":"7E449CB8-38DC-4F9F-AFEC-08F59484750A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3854","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491519/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29006","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42126","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491519/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2073","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/global.inc.php de Virtual Design Studio vlbook 1.21 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro l."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_design_studios:vlbook:1.21:*:*:*:*:*:*:*","matchCriteriaId":"7E449CB8-38DC-4F9F-AFEC-08F59484750A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3854","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491519/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29006","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42127","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491519/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2074","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos remotos en Harris Yusuf Arifin Harris Wap Chat 1.0, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro sysFileDir a (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php y (11) eng.searchMember.php en src/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:successkid:harris_wap_chat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"96AD0A9E-3542-4C47-AC7C-703C63AC8456"}]}]}],"references":[{"url":"http://secunia.com/advisories/30022","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28995","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42112","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2075","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) de pic.php en AstroCam de 2.5.0 a 2.7.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro picfile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"99A2AFD9-24AD-454E-87FA-83A27AD3BA0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCCCF051-AFDB-40DA-B93C-C07F7CAD564D"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"80AA1DCC-99B7-4E82-9BF6-093EA98E60CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9EB62D68-2A7A-45EE-BAF2-CD3394F49A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7224E832-287B-4378-A360-F90D87549426"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"08B0E5A9-D77F-43A3-BD11-8A14466F6D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.5:p1:*:*:*:*:*:*","matchCriteriaId":"6EAB72BB-787C-4B30-B7E6-CF9AD550CAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"43164F7D-31FF-48FB-B2F3-FA34F8C7A030"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.6:p1:*:*:*:*:*:*","matchCriteriaId":"49C4A05D-9942-417D-A133-66A366F14AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"712F6277-3B1A-4133-92C9-1DDA455815E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"EE50D24B-F7A8-48C9-B18D-119D5671FB8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.8:p1:*:*:*:*:*:*","matchCriteriaId":"ADBC9462-E244-4F7F-ACAE-A592C6C87D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.8:p2:*:*:*:*:*:*","matchCriteriaId":"9CA42049-7501-4D92-B97E-4E8C8FBD62E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"86D14520-5C29-48B6-96B0-33977A34A8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9802B372-246A-4D77-8DE7-252F4D454309"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B5EF667B-4C7F-4451-A96F-E642C77FC939"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"7F1B00A4-D450-4B41-AF0A-E427EA2004DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9E578C5A-F420-430B-8B29-0946AD628AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"07852EC5-6F5A-47E8-8EF2-E403CDC88C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"C9F52BA6-E167-4721-A069-CB8B200BD167"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"2B757B86-AAE8-4632-9FC2-4BCBDDA4536A"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4FB38BA9-8EA4-4C59-9E40-7398C7E96F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"EFE5C68C-1CD1-4991-8D61-A597EEB1E928"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6210F08A-A2AB-4E9B-A6F5-CA49256510CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0C14920D-A4A5-4B18-9304-41C7589D6614"}]}]}],"references":[{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup","source":"cve@mitre.org"},{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup","source":"cve@mitre.org"},{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125&r2=126","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/30039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3852","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491513/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28998","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.wendzel.de/?sub=showpost&blogid=5&postid=56","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42122","source":"cve@mitre.org"},{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125&r2=126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/30039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491513/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.wendzel.de/?sub=showpost&blogid=5&postid=56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2076","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin.php de ActualScripts ActualAnalyzer Lite 2.78 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro style."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_lite:2.78:*:*:*:*:*:*:*","matchCriteriaId":"2A3E0227-DE7E-404A-927D-DB66D572B79B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29007","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42128","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2077","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to \"data form list view.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Plain Black WebGUI 7.4.34 tiene impacto desconocido y vectores de ataque relacionados con \"vista como lista de formulario de datos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plain_black:webgui:7.4.34:*:*:*:*:*:*:*","matchCriteriaId":"7EA98346-F46C-4476-A593-94CCCD0BED86"}]}]}],"references":[{"url":"http://secunia.com/advisories/29985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=595907&group_id=51417","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.plainblack.com/getwebgui/advisories/webgui-7_4_35-stable-released","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28988","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42118","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=595907&group_id=51417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.plainblack.com/getwebgui/advisories/webgui-7_4_35-stable-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2078","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Robocode before 1.6.0 allows user-assisted remote attackers to \"access the internals of the Robocode game\" via unspecified vectors related to the AWT Event Queue."},{"lang":"es","value":"Robocode anterior a 1.6.0 permite a atacantes remotos asistidos por el usuario \"acceder al interior del juego Robocode\" mediante vectores no especificados relacionados con la cola AWT Event Queue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robocode:robocode:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.4","matchCriteriaId":"56487CA3-3CB8-44BA-A47A-D49207875E20"},{"vulnerable":true,"criteria":"cpe:2.3:a:robocode:robocode:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DF687848-FC1F-48E3-BB42-D574A6FFBDD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:robocode:robocode:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"AB3D41F9-6EC5-4A3C-82E9-DD2E928A661E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30043","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=596393","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=596393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2079","sourceIdentifier":"secalert@redhat.com","published":"2008-05-05T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://www.securityfocus.com/bid/29106 and http://secunia.com/advisories/32222, this vulnerability is remotely exploitable.","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future."},{"lang":"es","value":"MySQL 4.1.x anterior a 4.1.24, 5.0.x antes de 5.0.60, 5.1.x anterior a 5.1.24 y 6.0.x antes de 6.0.5 permite a usuarios locales evitar ciertas comprobaciones de privilegios llamando a CREATE TABLE en una tabla MyISAM con argumentos (1) DATA DIRECTORY or (2) INDEX DIRECTORY modificados que están dentro del directorio MySQL home data, que puede apuntar a tablas que se crearán en el futuro."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect MySQL as supplied with Red Hat Enterprise Linux 3.\n\nThis issue was addressed for Red Hat Enterprise Linux 4, 5, and Red Hat Application Stack v1, v2:\nhttps://rhn.redhat.com/cve/CVE-2008-2079.html\n","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndExcluding":"4.1.24","matchCriteriaId":"56C895D3-2949-4B14-B059-F0E29D977982"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.60","matchCriteriaId":"027481EF-83CF-40AF-8223-572B7915845F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndExcluding":"5.1.24","matchCriteriaId":"7F5416CD-0CEB-4C41-AE28-2A9C2B5600A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"CA6A87CA-DA11-4B91-A3E9-6437042BDC1A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=32167","source":"secalert@redhat.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30134","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31066","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31226","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32769","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1608","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:149","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:150","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0510.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0768.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29106","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019995","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1472/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42267","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://bugs.mysql.com/bug.php?id=32167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0510.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0768.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1472/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2080","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función Read32s_64 de src/lib/cdfread64.c en la librería NASA Goddard Space Flight Center Common Data Format (CDF) anterior a 3.2.1 permite a atacantes dependientes del contexto ejecutar código de su elección mediante un archivo .cdf con etiquetas de longitud largas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"41A21366-AE55-4CB8-B425-01528FD23D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0027323F-5D3F-414D-A123-9EF129FA541F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E159F33-74D3-46BA-BB77-93E8002A6945"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.2:*:*:*:*:*:*:*","matchCriteriaId":"42BDA289-612E-44D7-8894-C36D70B8516C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.3:*:*:*:*:*:*:*","matchCriteriaId":"724374E5-F56C-4133-81DC-CD190A67119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0BD4B2FA-522D-453A-8C3A-C7700247D3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.5:*:*:*:*:*:*:*","matchCriteriaId":"DA061A11-74B3-4F67-937A-6E683368303A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.6:*:*:*:*:*:*:*","matchCriteriaId":"4558EA11-DB7B-4B74-8ECE-CBB6F9BDF49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.7:*:*:*:*:*:*:*","matchCriteriaId":"EA741B5E-EB75-46C2-A3D6-7E2BFCEF1F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B185C0-2DF9-4FD2-BD05-2C9487DDD96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B17EAF8B-6AC6-481D-A4F5-0E1B57EA92CD"}]}]}],"references":[{"url":"http://cdf.gsfc.nasa.gov/CDF32_buffer_overflow.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30053","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30169","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200805-14.xml","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/29045","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019965","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1440/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42219","source":"cve@mitre.org"},{"url":"http://cdf.gsfc.nasa.gov/CDF32_buffer_overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/29045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1440/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2081","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter."},{"lang":"es","value":"Vulnerabilidad de sato de directorio en index.php de Siteman 2.0.x2 permite a administradores autentificados remotamente incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CBEF2544-1283-4633-A854-632244BE487D"}]}]}],"references":[{"url":"http://ircrash.com/english/index.php?topic=29.0","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42022","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5499","source":"cve@mitre.org"},{"url":"http://ircrash.com/english/index.php?topic=29.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2082","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the path in an error message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Siteman 2.0.x2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro module, que filtra la ruta en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CBEF2544-1283-4633-A854-632244BE487D"}]}]}],"references":[{"url":"http://ircrash.com/english/index.php?topic=29.0","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42020","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5499","source":"cve@mitre.org"},{"url":"http://ircrash.com/english/index.php?topic=29.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2083","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php de Prozilla Hosting Index, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetr cat_id en una acción list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:hosting_index:*:*:*:*:*:*:*:*","matchCriteriaId":"0E74E4DD-F06B-4283-B053-55AE28E88923"}]}]}],"references":[{"url":"http://advisories.echo.or.id/adv/adv88-K-159-2008.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29936","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3853","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491395/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28970","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42269","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5516","source":"cve@mitre.org"},{"url":"http://advisories.echo.or.id/adv/adv88-K-159-2008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491395/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2084","sourceIdentifier":"cve@mitre.org","published":"2008-05-05T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en topics.php del módulo MyArticles 0.6 beta-1 para RunCMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro topic_id en una acción listarticles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myarticles:myarticles:0.6:beta1:*:*:*:*:*:*","matchCriteriaId":"313DA492-A9AC-41EA-870A-8EBAFAE843C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:myarticles_module:0.6:beta1:*:*:*:*:*:*","matchCriteriaId":"F9E9695E-EC45-41BD-BB58-3F9F11098169"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42016","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5505","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2085","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the (1) get_remote_ip_media and (2) get_remote_ipv6_media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted SIP message."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en las funciones (1) get_remote_ip_media y (2) get_remote_ipv6_media en call.cpp de SIPp 3.1 permiten a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección mediante un mensaje SIP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewalkers:sipp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"8C675836-B483-4BD8-B552-F99AB1E6B6DC"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=479039","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30095","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30993","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29064","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1447/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42234","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00311.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00318.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=479039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1447/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00311.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00318.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2086","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T02:30:00.190","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka \"Java Web Start File Inclusion\" and CR 6694892."},{"lang":"es","value":"Sun Java Web Start y Java Plug-in para JDK y JRE v6 Update 10 y anteriores;JDK y JRE v5.0 Update 16 y anteriores; y SDK y JRE v1.4.2_18 y anteriores permite a atacantes remotos ejecutar código a su elección a través de un fichero manipulado jnlp que modifica las propiedades del sistema (1) java.home, (2) java.ext.dirs, o (3) user.home, anteriormente conocido como \"Java Web Start File Inclusion.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50510","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4693","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498907/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32620","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021318","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498907/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2087","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the host_id parameter, a different vector than CVE-2005-3817."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search_result.php de Softbiz Web Host Directory Script, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro host_id, un vector distinto a CVE-2005-3817."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbiz:web_hosting_directory_script:*:*:*:*:*:*:*:*","matchCriteriaId":"DF5EB0E2-6BFA-4D2F-8D08-EFBB32B09398"}]}]}],"references":[{"url":"http://advisories.echo.or.id/adv/adv89-K-159-2008.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29983","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3855","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491396/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42096","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5517","source":"cve@mitre.org"},{"url":"http://advisories.echo.or.id/adv/adv89-K-159-2008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491396/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2088","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/news.php de PHP Forge 3.0 beta 2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en el módulo news a admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpforge:php_forge:3.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"3FD24586-917E-401C-B690-3DD75293EEA5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28950","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1386/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42017","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5504","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1386/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2089","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet."},{"lang":"es","value":"Vulnerabilidad sin especificar en la implementación del protocolo SCTP en Sun Solaris 10 permite a atacantes remotos provocar una denegación de servicio (pánico) mediante un paquete SCTP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236321-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29023","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019961","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1429/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42160","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236321-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1429/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2090","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplification) via a crafted SCTP packet."},{"lang":"es","value":"Vulnerabilidad sin especificar en la implementación del protocolo SCTP en Sun Solaris 10 permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU y amplificación del tráfico de red) mediante un paquete SCTP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/29973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236521-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29024","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019962","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1429/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42160","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236521-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1429/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2091","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en ipn.php de KubeLabs Kubelance 1.6.4 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante el parámetro i."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kubelabs:kubelance:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0A1E5F5-7607-4E8F-8C77-DE2EFEEA4912"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28873","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1341/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41905","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5477","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1341/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2092","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet (\"ping of death\"). NOTE: the severity of this issue has been disputed since there are limited attack scenarios."},{"lang":"es","value":"Linksys SPA-2102 Phone Adapter 3.3.6 permite a atacantes remotos provocar una denegación de servicio (caída) mediante un paquete ping largo (\"ping de la muerte\"). NOTA: la gravedad de este asunto se ha cuestionado ya que hay escenarios de ataque limitados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linksys:spa-2102_phone_adapter:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"8FAD01A5-265E-4D8C-9C08-B906CBBF6B3F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120637257800425&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120637551306325&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120638162819268&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120638296821936&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120645736414059&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28414","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41436","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120637257800425&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120637551306325&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120638162819268&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120638296821936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120645736414059&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2093","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Profiler (com_comprofiler) en Community Builder para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro user en una acción userProfile a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_comprofiler:*:*:*:*:*:*:*:*","matchCriteriaId":"56B40FE3-DCD9-46ED-952C-7F46256A5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlapolis:community_builder:*:*:*:*:*:*:*:*","matchCriteriaId":"F53570E9-BB62-46A2-A521-93CE0E613CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_comprofiler:*:*:*:*:*:*:*:*","matchCriteriaId":"80485315-3C80-4909-841E-5E045CDA5FC8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28911","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42008","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5491","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2094","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en article.php del módulo Article para XOOPS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:article_module:*:*:*:*:*:*:*:*","matchCriteriaId":"0CE93747-ABEF-4FEC-A75D-9C4B256D2B80"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491150/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28879","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41943","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491150/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2095","sourceIdentifier":"cve@mitre.org","published":"2008-05-06T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del componente FlippingBook (com_flippingbook) 1.0.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro book_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_flippingbook:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"091A698D-C690-4DC3-83E3-67805CE29BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_flippingbook:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FD13BB84-7378-4799-98C4-672F98B9AF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:page-flip-tools:flipping_book:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"49075A0E-9CCE-4DBA-ABA4-98136B8AC1A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1342/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41942","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1342/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2096","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T19:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to a site-specific component name such as link.php or backlinkspider.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en BackLinkSpider que permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro cat_id de un nombre de componente específico de un sitio como link.php o backlinkspider.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:backlinkspider:backlink_spider:*:*:*:*:*:*:*:*","matchCriteriaId":"38AFCB30-60AF-4124-A641-860014187060"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3857","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491612/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29054","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42189","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5546","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491612/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2097","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an \"invalid Content-Length.\""},{"lang":"es","value":"Un desbordamiento de búfer en el servicio de administración openwsman en VMware ESXi versión 3.5 y ESX versión 3.5, permite a los usuarios autenticados remotos alcanzar privilegios por medio de una \"invalid Content-Length.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3922","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020199","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29547","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42875","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5640","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5759","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2098","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el VMware Host Guest File System (HGFS) en VMware Workstation versiones 6 anteriores a 6.0.4 build 93057, VMware Player versiones 2 anteriores a 2.0.4 build 93057, VMware ACE versiones 2 anteriores a 2.0.2 build 93057 y VMware Fusion versiones anteriores a 1.1.2 build 87978, cuando el uso compartido de carpetas es utilizado, permite a los usuarios del SO invitado ejecutar código arbitrario sobre el SO host por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace_2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8476A347-FBF2-4235-8483-7365BAF700A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace_2:2.01:*:*:*:*:*:*:*","matchCriteriaId":"B7AD3DFD-6211-438F-9483-E82B346DBA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6BDF5387-1F1B-42AF-B33D-E4392D61D89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.01:*:*:*:*:*:*:*","matchCriteriaId":"6A7B9138-51C8-433D-80B5-70FBB09732DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.02:*:*:*:*:*:*:*","matchCriteriaId":"5CF74F13-1247-4D40-816A-FF5B2E00FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.03:*:*:*:*:*:*:*","matchCriteriaId":"6B6F83E6-1325-4B96-B253-7B031B5BA563"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.03:*:*:*:*:*:*:*","matchCriteriaId":"652DCCCA-2C0F-482F-AD1C-F3913BD3430D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492831/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020148","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0008.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1707/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492831/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1707/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2099","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en VMCI en VMware Workstation versiones 6 anteriores a 6.0.4 build 93057, VMware Player versiones 2 anteriores a 2.0.4 build 93057 y VMware ACE versiones 2 anteriores a 2.0.2 build 93057 en Windows, permite a los usuarios del SO invitado ejecutar código arbitrario en el SO host por medio de vectores no especificados"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace_2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8476A347-FBF2-4235-8483-7365BAF700A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace_2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D7994893-F7CA-489F-9EC8-0FC4151C0499"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6BDF5387-1F1B-42AF-B33D-E4392D61D89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0FF78F-4952-4061-9BF8-E365D1267E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"552F3E26-7689-4365-8BA8-3BEC755303F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player_2:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D0DEBC79-6ECB-40E1-8B92-4376E65DA050"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02EBBFDD-AC46-481A-8DA7-64619B447637"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492831/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29443","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020149","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0008.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1707","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42757","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492831/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2100","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de buffer en VIX API 1.1.x anteriores a 1.1.4 build 93057 en VMware Workstation 5.x y 6.x, VMware Player 1.x y 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, y VMware ESX 3.0.1 hasta la 3.5, permite a los usuarios del sistema huésped, ejecutar código arbitrario en el sistema anfitrión a través de vectores no específicos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.5","matchCriteriaId":"C67E8ABD-4BC9-4A68-A1A8-517574B54FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.0.3","matchCriteriaId":"13B407FC-39E6-4504-AA38-28F45B10B462"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3BE184CF-CD55-4F32-9294-A680A4DD3870"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"16EFF4E2-CA32-4FA4-AC4B-82D8C50769D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"C5AE1C86-62E7-470E-BB1B-1AAEE3192D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.6","matchCriteriaId":"093FA9F6-A59D-4C09-B133-002573AB05BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.0.3","matchCriteriaId":"318E110E-C2E3-4332-BD84-7ABBFBF2309B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"BEC0931F-7BB8-4CFD-9533-A62367661810"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndIncluding":"5.5.6","matchCriteriaId":"0E456E5A-C2F5-4FA1-94F0-2BBD81A766D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.0.3","matchCriteriaId":"40ED2686-C461-4C16-A50F-D56E369879CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1BA6DF4-4D53-482A-8820-B9B0E6EBD51D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ECFD8D25-7FDF-48DF-8728-5875C44FFB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"974D84A6-F5AB-4F0A-B9B5-9095A0E4733C"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C3613B7-CA1B-4C9A-9076-A2894202DDA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE7ECF1C-285C-4AA3-8B66-28EDAB0763E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3922","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020200","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29552","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42872","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2101","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command line, which allows local users to obtain sensitive information by listing the process."},{"lang":"es","value":"La utilidad de línea de comandos VMware Consolidated Backup (VCB) de VMware ESX 3.0.1 hasta 3.0.3 y ESX 3.5 coloca una contraseña en la línea de comandos, lo cual permite a usuarios locales obtener información sensible listando el proceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1FF9283C-D8F6-4175-A976-CF7E451A9D11"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"78322B97-DBE0-4C7E-9826-11727254500E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B6F7416-E694-4EC9-9FE5-0C24448ECB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020794","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30937","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44797","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2103","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote attackers to inject arbitrary web script or HTML via the id parameter to the \"Format for Printing\" view or \"Long Format\" bug list."},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados (XSS) en Bugzilla 2.17.2 y versiones posteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente a través del parámetro id en la vista \"Format for Printing\" (Vista preliminar) o en la lista bug \"Long Format\" (Formato largo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*","matchCriteriaId":"930AF809-CA52-41CB-985A-066B8239C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9EC243-3E25-4234-A88A-FDD5B594BFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*","matchCriteriaId":"02846865-D124-4C72-85C8-59A7C6F43E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*","matchCriteriaId":"99B59422-ED6E-4F82-8D0C-091058D1C438"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*","matchCriteriaId":"F658844A-6253-4A18-8A5D-1E818BE7A367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.3:*:*:*:*:*:*:*","matchCriteriaId":"4753AB35-B95C-4544-A874-5E6D83929AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C4880D54-CA42-4CCA-B01E-2C125002BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"5E608E27-D43C-4F34-952D-2F49A71B1E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"585F05F2-B294-4218-9209-C487B4D2994B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3246890-8D66-474F-AC9C-BC556426467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7090332F-4CC2-4ADD-AEEC-75238BCA55CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F960BE59-05B1-4438-A854-279612E13A7B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30167","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.20.5/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019967","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1428/references","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425665","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42216","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00036.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00098.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.20.5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1428/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00098.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2104","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check."},{"lang":"es","value":"El WebService en Bugzilla versión 3.1.3, permite a usuarios autentificados remotos sin privilegios canconfirm crear entradas de bug NEW o ASSIGNED por medio de una petición a la interfaz XML-RPC, que omite la comprobación de canconfirm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7090332F-4CC2-4ADD-AEEC-75238BCA55CC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/2.20.5/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29038","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019968","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1428/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=415471","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/2.20.5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1428/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=415471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2105","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"email_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote authenticated users to more easily spoof the changer of a bug via a @reporter command in the body of an e-mail message, which overrides the e-mail address as normally obtained from the From e-mail header.  NOTE: since From headers are easily spoofed, this only crosses privilege boundaries in environments that provide additional verification of e-mail addresses."},{"lang":"es","value":"El archivo email_in.pl en Bugzilla versión 2.23.4, versiones 3.0.x anteriores a 3.0.4, y versiones 3.1.x anteriores a 3.1.4, permite a usuarios autentificados remotos falsificar más fácilmente al cambiador de un bug por medio  de un comando @reporter en el cuerpo de un mensaje de correo electrónico, que inválida la dirección de correo electrónico tal y como es obtenida normalmente desde el encabezado de correo electrónico From. NOTA: puesto que los encabezados From son fácilmente falsificados, esto sólo cruza los límites de privilegios en entornos que proporcionan una comprobación adicional de direcciones de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*","matchCriteriaId":"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*","matchCriteriaId":"64434BFC-DDC0-4C7D-B578-472B0610C89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*","matchCriteriaId":"A30F28D9-B000-4C26-A911-5E1B8A867BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*","matchCriteriaId":"4A123F78-A671-4FB5-AE78-83762E9323C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*","matchCriteriaId":"28C34288-A326-4B71-99B0-DA9FFD28160F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*","matchCriteriaId":"73648879-BB08-4BE4-A7FF-1E8DF4E264B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*","matchCriteriaId":"1B4CC7E4-617D-498E-A367-374478158FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*","matchCriteriaId":"930AF809-CA52-41CB-985A-066B8239C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9EC243-3E25-4234-A88A-FDD5B594BFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*","matchCriteriaId":"02846865-D124-4C72-85C8-59A7C6F43E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*","matchCriteriaId":"99B59422-ED6E-4F82-8D0C-091058D1C438"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*","matchCriteriaId":"F658844A-6253-4A18-8A5D-1E818BE7A367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.3:*:*:*:*:*:*:*","matchCriteriaId":"4753AB35-B95C-4544-A874-5E6D83929AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C4880D54-CA42-4CCA-B01E-2C125002BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"45C36666-518F-4956-816A-940930425955"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"154EA18F-534C-4095-837D-BB9865D25F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"585F05F2-B294-4218-9209-C487B4D2994B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3246890-8D66-474F-AC9C-BC556426467D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30167","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.20.5/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29038","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019969","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1428/references","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419188","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42235","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00036.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00098.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.20.5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1428/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00098.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2106","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type 7 stats packet, which triggers a memcpy with a negative value."},{"lang":"es","value":"Call of Duty 4 (CoD4) 1.5 y versiones anteriores permite a usuarios remotos autenticados provocar una denegación de servicio (caída) a través de un paquete de estadísiticas tipo 7, que provoca un memcpy de valor negativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activision:call_of_duty_4:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"B218A86A-9CED-401C-9D44-2FD16A301D86"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/cod4statz-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30050","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491564/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42163","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/cod4statz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491564/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2107","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T21:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed."},{"lang":"es","value":"La macro GENERATE_SEED de PHP 4.x versiones anteriores a la 4.4.8 y 5.x versiones anteriores a la 5.2.5, cuando se ejecuta en sistemas de 32 bits, realiza un producto usando valores que pueden generar una semilla cero en circunstancias excepcionales, lo cual permite a atacantes según contexto, adivinar valores posteriores de la secuencia generada y las funciones mt_rand, y posiblemente evitar los mecanismos de protección que dependen de una semilla inicial desconocida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.7","matchCriteriaId":"25A322B4-9EBB-449F-A678-33BAD936A606"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30757","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30828","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31119","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3859","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:129","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:130","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0544.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0545.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0546.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0582.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491683/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42226","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42284","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10644","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0582.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2108","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T21:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions."},{"lang":"es","value":"La macro GENERATE_SEED de PHP 4.x versiones anteriores a la 4.4.8 y 5.x versiones anteriores a la 5.2.5, cuando se ejecuta en sistemas de 64 bits, realiza un producto que genera una porción de bits cero durante la conversión debido a la falta de precisión, lo que provoca 24 bits de entropía y simplifican los ataques por fuerza bruta contra mecanismos de protección que utilizan la secuencia generada y las funciones mt-rand."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-331"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.4.8","matchCriteriaId":"F6C219FD-2507-491C-B38F-777D1A626FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.2.5","matchCriteriaId":"77177C9F-D96D-4FA7-B8D4-079A4BF52546"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/30757","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30828","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31119","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31124","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31200","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3859","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:129","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:130","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0544.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0545.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0546.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0582.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491683/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.sektioneins.de/advisories/SE-2008-02.txt","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42226","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10844","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/30757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0505.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0582.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/491683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.sektioneins.de/advisories/SE-2008-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-2109","sourceIdentifier":"secalert@redhat.com","published":"2008-05-07T21:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0', which triggers an infinite loop."},{"lang":"es","value":"La librería field.c de libid3tag 0.15.0b, permite a atacantes según contexto provocar una denegación de servicio (consumo de CPU) a través de un campo ID3_FIELD_TYPE_STRINGLIST que termina en '\\0', lo que genera un bucle infinito."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:media-libs:libid3tag:0.15.0b:*:*:*:*:*:*:*","matchCriteriaId":"FCAF58F1-1C61-49E6-83AF-7F85A595AD91"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=210564","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/30173","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30182","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200805-15.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:103","source":"secalert@redhat.com"},{"url":"http://www.mars.org/mailman/public/mad-dev/2008-January/001366.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29210","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42271","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00159.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=210564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200805-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mars.org/mailman/public/mad-dev/2008-January/001366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00159.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2110","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request."},{"lang":"es","value":"Vulnerabilidad de subida de archivo sin restricciones en qtofm.php de QTOFileManager 1.0, permite a atacantes remotos ejecutar código PHP arbitrariamente mediante la subida de un archivo con una extensión ejecutable, accediendo a él después a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qto:qtofilemanager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C01BAAC3-1909-4D69-80CB-F68FA10516AA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491699/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491756/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29072","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42236","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491699/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491756/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2111","sourceIdentifier":"cve@mitre.org","published":"2008-05-07T23:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption."},{"lang":"es","value":"El control ActiveX (yNotifier.dll) de Yahoo! Assistant versión 3.6 y anteriores, permite a atacantes remotos ejecutar código arbitrariamente a través de vectores no especificados en el objeto Ynoifier COM que provoca una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:yahoo_assistant:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"D9FF9C09-6914-4C03-A9A3-59DCB58F3347"}]}]}],"references":[{"url":"http://secunia.com/advisories/30115","source":"cve@mitre.org"},{"url":"http://secway.org/advisory/AD20080506EN.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29065","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020004","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1471/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secway.org/advisory/AD20080506EN.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1471/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2112","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T00:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig."},{"lang":"es","value":"Vulnerabilidad sin especificar en Sun Ray Kiosk Mode 4.0, permite a administradores autenticados locales y remotos de Sun Ray, obtener privilegios a través de vectores desconocidos relacionados con utconfig."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"18BE709B-6EEB-489D-B982-6D0D978D1D20"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D694C584-5A13-4064-B1AA-4C3C02F372FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236944-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29092","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019993","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1454/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236944-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1454/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2113","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en annuaire.php de PHPEasyData 1.5.4; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeasydata:phpeasydata:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"69A9A5DC-C1F3-421E-A72C-27540E1FA229"}]}]}],"references":[{"url":"http://secunia.com/advisories/30076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29068","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42230","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5552","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2114","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the search parameter."},{"lang":"es","value":"Vulnerabildiad de inyección SQL en emall/search.php de Pre Shopping Mall 1.1; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_shopping_mall:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC5A2337-490A-41DB-9F38-66C5B66FC48F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29067","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42227","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5551","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2115","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) te and (2) dir parameters in a tempedit action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en editor.php de ScriptsEZ.net Power Editor 2.0; permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante los parámetros (1)te y (2) dir, en una acción tempedit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:power_editor:2.0:*:*:*:*:*:*:*","matchCriteriaId":"25720EBB-6929-402A-A3D7-FE5BE57FFB50"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3864","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491702/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29063","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42223","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5549","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491702/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2116","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) te and (2) dir parameters in a tempedit action."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en editor.php de ScriptsEZ.net Power Editor 2.0; permiten a atacantes remotos leer los ficheros locales de su elección mediante un .. (punto punto) en los parámetros (1)te y (2)dir, en una acción tempedit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:power_editor:2.0:*:*:*:*:*:*:*","matchCriteriaId":"25720EBB-6929-402A-A3D7-FE5BE57FFB50"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3864","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491702/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29063","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42222","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5549","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491702/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2117","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a news action to index.php, a different vector than CVE-2007-6126."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en pages/news.page.inc de Project Alumni 1.0.9; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro de año (year) en una acción news en index.php; se trata de un vector diferente de CVE-2007-6126."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:project_alumni:project_alumni:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DFB518BD-5B61-40A2-BA10-F66BD1AD6626"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491552/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42149","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491552/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2118","sourceIdentifier":"cve@mitre.org","published":"2008-05-08T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en info.php de Project Alumni 1.0.9; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:project_alumni:project_alumni:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DFB518BD-5B61-40A2-BA10-F66BD1AD6626"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491552/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42148","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491552/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2119","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T19:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer."},{"lang":"es","value":"Asterisk Open Source 1.0.x y 1.2.x anterior 1.2.29  y Business Edition A.x.x y B.x.x anterior B.2.5.3, cuando \"pedantic parsing\" (también conocido como pedanticsipchecking) está activado, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de un mensaje SIP INVITE que carece de una cabecera From, relacionado con la invocación de la función ast_uri_decode y el manejo incorrecto de (1) una cadena const vacía y (2) un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"b2.5.2","matchCriteriaId":"366DB62C-2E86-4614-AD9D-90C2F21434CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"802F8680-AB38-41AF-BFC8-F6927F6B1626"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BCAE8D90-B032-4C60-B487-BE655D00FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB64A872-B7B8-46A8-81E4-49EDAC160531"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"21000270-C9B9-430C-A252-763887A15835"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12F7CF45-5482-4947-8F1D-48C746987475"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B64995D-7892-49AB-A89D-A5D15615C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0397DBD4-EA00-444A-9008-4932F99DF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8936B494-E647-498B-8380-AE4DAD458533"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.28","matchCriteriaId":"6CF7D9C2-C6B3-40E9-92B8-C504656BB176"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*","matchCriteriaId":"678DB154-4363-42FF-8B28-367923FC6595"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F2C378-FF0E-4765-9F66-625C4064D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A55A9295-F632-4856-90A1-38371EB98589"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FAE6AF1-884D-41F7-B174-9E13C7719C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCA9E35B-9A6B-42F2-9315-9C7D09F62227"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF7EC20-A424-45E5-B7E4-3CC86075858C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C790E105-55C8-4CDC-9FA8-E1FF6F130A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"44C860EF-2B29-4995-B942-000CC43FDD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADB80EF-C724-44BA-88FC-24087799D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"78B39BE8-7E2D-42DF-8633-44CAD5662777"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F39036E3-0027-4C72-9DEB-9A6E2B4512C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A037E6F9-3EF7-4EEB-AC16-081421BCE40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A7EC02A-9C9E-4589-BBB3-1908D3078A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6C70FA9C-6F3B-4BDF-97FB-81D06AB0EE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"7435F043-F92B-4635-93CC-A2C39AAE1BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*","matchCriteriaId":"C7B2F43B-8B69-4BF6-86B7-A225175FF068"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"}]}]}],"references":[{"url":"http://bugs.digium.com/view.php?id=12607","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-008.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30517","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://svn.digium.com/view/asterisk?view=rev&revision=120109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493020/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020166","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1731","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42823","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5749","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=12607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.digium.com/pub/security/AST-2008-008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.digium.com/view/asterisk?view=rev&revision=120109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493020/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2120","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Java System Application Server versión 7 2004Q2 anterior a Update 6, Web Server versión 6.1 anterior a SP8 y and Web Server versión 7.0 anterior a Update 1 permite a atacantes remotos obtener el código fuente de los ficheros JSP mediante vectores no conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"8B4BBA10-5199-45B0-9288-4DD492D8D9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:*:sp7:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"CA9A7000-7E63-472C-9D60-0BEA4D775A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DFAA741F-6B77-44E5-8B84-AB5E49901BD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201255-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29088","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019985","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019986","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1457/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42266","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201255-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1457/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2121","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack."},{"lang":"es","value":"La implementación del protocolo TCP en Sun Solaris versiones 8, 9 y 10 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU excesivo y fin del tiempo de espera en las nuevas conexiones) mediante ataques de saturación de paquetes TCP SYN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30125","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200864-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-206.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29089","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019989","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1453/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1585/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42264","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-200864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-206.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1453/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1585/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2122","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T15:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets."},{"lang":"es","value":"IBM Rational Build Forge versión 7.0.2, permite a atacantes remotos provocar una denegación de servicio (consumo excesivo de CPU) mediante el rastreo de puertos, lo que genera múltiples procesos bfagent en el servidor que intentan leer datos de los conectores (sockets) cerrados."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_build_forge:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2DE48B74-8CC2-4D5C-8D5B-A6011DA0FE75"}]}]}],"references":[{"url":"http://secunia.com/advisories/30081","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303877","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/29036","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019964","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1427/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42173","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/29036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1019964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1427/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2123","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a \"<>\" sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string, a different vector than CVE-2006-5114."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WGate para SAP Internet Transaction Server (ITS)versión 6.20 inyectar secuencias de comandos web o HTML de su elección mediante (1) una secuencia \"<>\" en el parámetro ~service de wgate.dll, o (2) enlazando código Javacript en la cadena de consulta, siendo un vector diferente que CVE-2006-5114."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:6200.1017.50954.0_build_730827:*:*:*:*:*:*:*","matchCriteriaId":"5AE47047-DE79-419E-91A2-0BA46292E9EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.portcullis-security.com/275.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29103","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019998","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1466/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.portcullis-security.com/275.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1019998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1466/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2124","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules/print.asp de fipsASP fipsCMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro lg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fipsasp:fipscms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"642D23DC-3ED1-4C02-85F0-FD0C2DA235B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30103","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29095","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42257","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5553","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2125","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the artistId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewalbums.php de Musicbox versiones 2.3.6 y 2.3.7 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro artistId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:musicbox:musicbox:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"EFE6BEBA-B8BD-44C8-9134-9F89E86C3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:musicbox:musicbox:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"DB8AECF1-FF5F-4C7D-8386-12761BF0C4A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29100","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42259","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5560","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2126","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to index.php and the (2) returnURL parameter to tux-login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Tux CMS versión 0.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) el parámetro q en index.php y (2) el parámetro returnURL en tux-login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tux_cms:tux_cms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"322482D3-2E24-4280-BCEA-8466AC7E9C4C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121019103418967&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/44917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30121","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29090","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42252","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121019103418967&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/44917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2127","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de CMS Faethon versión 2.2 Ultimate permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro what. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms_faethon:cms_faethon:2.2_ultimate:*:*:*:*:*:*:*","matchCriteriaId":"04E05699-3051-4D89-9E5A-B210FCFFAB90"}]}]}],"references":[{"url":"http://secunia.com/advisories/30098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29099","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42258","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5558","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2128","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter, a different vulnerability than CVE-2006-5588 and CVE-2006-3185."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en templates/header.php de CMS Faethon versión 2.2 Ultimate permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mainpath, siendo una vulnerabilidad diferente que CVE-2006-5588 y CVE-2006-3185."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms_faethon:cms_faethon:2.2:*:ultimate:*:*:*:*:*","matchCriteriaId":"A7B29804-86DE-498D-9E1F-2EF24F89B983"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42376","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5558","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2129","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Galleristic 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Galleristic versión 1.0, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cine:galleristic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"66365951-D9AD-4530-8D01-A0B955CDCFAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30123","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29096","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42253","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5554","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2130","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in poll_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en poll_vote.php de iGaming CMS versión 1.5 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igaming:cms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"010A0060-CC80-4E0C-9522-477919CBAB98"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29059.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29059","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42229","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29059.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2131","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the \"quick reply button.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en mvnForum versión 1.1 GA permite a atacantes remotos autenticados inyectar secuencias de comandos web o HTML de su elección mediante el campo field, que posteriormente es mostrado por user/viewthread.jsp cuando se usa el \"botón de respuesta rápida\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myvietnam:mvnforum:1.1:*:*:*:*:*:*:*","matchCriteriaId":"52B6DA0B-FACA-4DF6-B70E-30E9D6DAD950"}]}]}],"references":[{"url":"http://mvnforum.cvs.sourceforge.net/mvnforum/mvnforum/srcweb/mvnplugin/mvnforum/user/viewthread.jsp?r1=1.316&r2=1.317","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3862","source":"cve@mitre.org"},{"url":"http://users.own-hero.net/~decoder/advisories/mvnforum-jsxss.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491713/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42241","source":"cve@mitre.org"},{"url":"http://mvnforum.cvs.sourceforge.net/mvnforum/mvnforum/srcweb/mvnplugin/mvnforum/user/viewthread.jsp?r1=1.316&r2=1.317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://users.own-hero.net/~decoder/advisories/mvnforum-jsxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491713/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2132","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL commands via the cat_fldAuto parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en step1.asp de Systementor PostcardMentor permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_fldAuto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:systementor:postcardmentor:*:*:*:*:*:*:*:*","matchCriteriaId":"D87CE1F3-9282-4D09-8582-322CB0B3FBD0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30127","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29094","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42256","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2133","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demonstrated by a CSS property in the STYLE attribute of a DIV element, a different vulnerability than CVE-2008-1873."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Journal de Tru-Zone Nuke ET versiones 3.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro title en una nueva entrada, tal como se manifiesta en una propiedad CSS del atributo STYLE de un elemento DIV, siendo una vulnerabilida diferente que CVE-2008-1873."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BA2F14C5-6990-49F8-B009-1017D717096B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF251E2C-EA78-4C4B-88AB-35A1077BC4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"362853AC-2DA6-4A6E-856D-8615266B95EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"466815E4-823A-4C77-B844-13DFAA8DBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.4:*:*:*:*:*:*:*","matchCriteriaId":"1FF9E1E6-B28B-4874-AF85-0FB686969967"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.9:*:*:*:*:*:*:*","matchCriteriaId":"657AF5CE-49E2-44E6-B105-92A73B92F6C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/30061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://truzone.org/modules.php?name=Forums&file=viewtopic&t=55141","source":"cve@mitre.org"},{"url":"http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://truzone.org/modules.php?name=Forums&file=viewtopic&t=55141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2134","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie."},{"lang":"es","value":"El módulo Journal de Tru-Zone Nuke ET versiones 3.x permite a atacantes remotos obtener acceso con cuentas de usuario de su elección, y alterar o borrar datos, modificando el nombre de usuario en una cookie no especificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BA2F14C5-6990-49F8-B009-1017D717096B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF251E2C-EA78-4C4B-88AB-35A1077BC4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"362853AC-2DA6-4A6E-856D-8615266B95EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"466815E4-823A-4C77-B844-13DFAA8DBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.4:*:*:*:*:*:*:*","matchCriteriaId":"1FF9E1E6-B28B-4874-AF85-0FB686969967"},{"vulnerable":true,"criteria":"cpe:2.3:a:tru-zone:nukeet:3.9:*:*:*:*:*:*:*","matchCriteriaId":"657AF5CE-49E2-44E6-B105-92A73B92F6C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/30061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://truzone.org/modules.php?name=Forums&file=viewtopic&p=332746","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29080","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://truzone.org/modules.php?name=Forums&file=viewtopic&p=332746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2135","sourceIdentifier":"cve@mitre.org","published":"2008-05-09T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en VisualShapers ezContents versióon 2.0.0 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro contentname de showdetails.php y (2) el parámetro article en printer.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0CB802AF-7017-43DF-9108-B8F5749A9903"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3865","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491813/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29098","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42260","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5559","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491813/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2136","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count."},{"lang":"es","value":"Fugas de memoria en la función ip6_rcv de net/ipv6/sit.c en el núcleo de Linux versiones anteriores a 2.6.25.3 permite a atacantes remotos provocar una denegación de servicio (consumo excesivo de memoria) a través de tráfico de red de una interfaz de túnel Simple Internet Transition (SIT), relacionado a las funciones pskb_may_pull y kfree_skb, y la gestión de una cuenta de referencia skb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"2.4.36.5","matchCriteriaId":"852DACB8-3166-4275-9053-35EA4F8AC916"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.25.3","matchCriteriaId":"3C232451-E012-4C23-8F45-7444F24F629C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-netdev&m=121031533024912&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30198","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30241","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30276","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30368","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30499","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30962","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31198","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31341","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31628","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31689","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33201","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33280","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0607.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0612.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29235","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020118","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1543/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1716/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42451","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-netdev&m=121031533024912&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-362.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1543/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1716/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2137","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls."},{"lang":"es","value":"Las funciones (1) sparc_mmap_check en arch/sparc/kernel/sys_sparc.c y (2) sparc64_mmap_check en arch/sparc64/kernel/sys_sparc.c, en el Kernel de Linux 2.6.25.3, omite ciertas validaciones de rangos de direcciones virtuales (también conocidas como span) cuando el bit nmap MAP_FIXED no está establecido, lo que permite a usuarios locales provocar una denegación de servicio (caída) a través de llamadas a nmpa sin especificar."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. Red Hat Enterprise Linux 2.1, 3, 4, and 5 do not ship for the SPARC architecture.","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"}]}]}],"references":[{"url":"http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29397","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020119","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1716/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42681","source":"cve@mitre.org"},{"url":"http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1716/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2138","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T16:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request containing a trailing \"%0A\" (encoded line feed), then using the session ID that is generated from that request.  NOTE: as of 20080512, Oracle has not commented on the accuracy of this report."},{"lang":"es","value":"Oracle Application Server (OracleAS) Portal 10g permite a atacantes remotos evitar las restricciones de acceso previstas y leer los contenidos de /dav_portal/portal/ mediante una petición que contiene un rastro \"%0A\" (avance de línea codificado) y utilizando a continuación el ID de sesión que se genera de esa petición. NOTA: a fecha del 12-05-2008, Oracle no ha comentado la exactitud de este repote"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_portal:10g:*:*:*:*:*:*:*","matchCriteriaId":"AA321251-DA7D-4D75-97FB-08EB405152AE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30140","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3867","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491865/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020034","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491865/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2139","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account."},{"lang":"es","value":"El plugin rootpw en rPath Appliance Platform Agent 2 y 3 no revalida peticiones de un navegador con una sesión de administrador válida, incluyendo peticiones para cambiar la contraseña, lo que facilita a atacantes próximos físicamente obtener privilegios y conservar el control sobre la cuenta de administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:H/Au:S/C:C/I:C/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":2.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rpath:appliance_platform_agent:2:*:*:*:*:*:*:*","matchCriteriaId":"12171EA4-C258-49BC-880F-E1C628E97D98"},{"vulnerable":true,"criteria":"cpe:2.3:h:rpath:appliance_platform_agent:3:*:*:*:*:*:*:*","matchCriteriaId":"3049D15D-AEA6-43F5-9EF4-F28BE711D944"}]}]}],"references":[{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42393","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42394","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2140","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el plugin rootpw en rPath Appliance Platform Agent 2 y 3 permite a atacantes remotos  reiniciar la contraseña de root como administrador a través de una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rpath:appliance_platform_agent:2:*:*:*:*:*:*:*","matchCriteriaId":"1FE88992-4E0F-4898-B96A-61CEECC397DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rpath:appliance_platform_agent:3:*:*:*:*:*:*:*","matchCriteriaId":"07054DD9-FD4D-418D-BC7A-920798D2CA75"}]}]}],"references":[{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42393","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2142","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T19:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code."},{"lang":"es","value":"Emacs versión 21 y XEmacs cargan y ejecutan automáticamente archivos .flc (fast lock) que están asociados con otros archivos que son editados en Emacs, lo que permite a los atacantes asistidos por el usuario ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:21.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DE5CB6EB-74D8-4CA8-8B86-08E06859E2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:xemacs:*:*:*:*:*:*:*:*","matchCriteriaId":"DE9B14A7-78B9-4229-A165-32C1438EC9C8"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30303","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34004","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200902-06.xml","source":"cve@mitre.org"},{"url":"http://thread.gmane.org/gmane.emacs.devel/96903","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://tracker.xemacs.org/XEmacs/its/issue378","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0177","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:153","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:154","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492657/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29176","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020019","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1539/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1540/references","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=221197","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42362","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2529","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00736.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00782.html","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200902-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://thread.gmane.org/gmane.emacs.devel/96903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://tracker.xemacs.org/XEmacs/its/issue378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492657/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1539/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1540/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=221197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00736.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00782.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2143","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T19:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information."},{"lang":"es","value":"Versiones sin especificar de Microsoft Outlook Web Access (OWA) utilizan la directiva Cache-Control: no-cache HTTP en vez de no-store, lo que podría provocar que navegadores web que siguen RFC-2616 almacenen en caché información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","matchCriteriaId":"3AACB4F5-B05A-4A5F-9062-DEAE75C0CBAD"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/829876","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42301","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/829876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2144","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T19:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el servicio de impresión Solaris para Sun Solaris 8, 9 y 10 permite a atacantes remotos provocar una denegación de servicio o ejecutar código de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30184","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30473","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236884-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-216.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29135","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020003","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1473/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1709/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42322","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236884-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-216.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1473/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1709/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2145","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T19:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the \"forgotten password\" dialog."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Novell Client 4.91 SP4 y anteriores permite a usuarios locales provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un nombre de usuario (username) largo en el diálogo \"forgotten password (contraseña olvidada)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp1:*:*:*:*:*:*","matchCriteriaId":"E98A16C1-2026-4C53-B22E-51F07028DCB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp2:*:*:*:*:*:*","matchCriteriaId":"78A17422-1FFE-4942-A6F1-01F99E4D42F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp3:*:*:*:*:*:*","matchCriteriaId":"F0CBDEB2-98CF-4C6A-A45A-F5B61803E449"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:4.91:sp4:*:*:*:*:*:*","matchCriteriaId":"EDDFB0E9-EF4C-4E9E-9369-453AF2A8481F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30126","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491814/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29109","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020020","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1503","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42359","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491814/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2146","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages."},{"lang":"es","value":"El archivo wp-incluye/vars.php en Wordpress versiones anteriores a  2.2.3, no extrae apropiadamente la ruta (path) actual del PATH_INFO ($PHP_SELF), que permite a atacantes remotos omitir las restricciones de acceso previstas para ciertas páginas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"69753B4C-6097-4E91-928A-2E696D5BFAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E85A88D7-07A1-4A8C-88B5-057AD9C675E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*","matchCriteriaId":"947635DB-A86E-45F0-B946-559202C49503"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEABEFD-E248-42B7-B99E-FFDEE27F7064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"}]}]}],"references":[{"url":"http://osvdb.org/45188","source":"cve@mitre.org"},{"url":"http://trac.wordpress.org/changeset/6029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://trac.wordpress.org/changeset?old_path=tags%2F2.2.2&old=6063&new_path=tags%2F2.2.3&new=6063#file10","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://trac.wordpress.org/ticket/4748","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42379","source":"cve@mitre.org"},{"url":"http://osvdb.org/45188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.wordpress.org/changeset/6029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://trac.wordpress.org/changeset?old_path=tags%2F2.2.2&old=6063&new_path=tags%2F2.2.3&new=6063#file10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://trac.wordpress.org/ticket/4748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2147","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory."},{"lang":"es","value":"Vulnerabilidad de búsqueda en ruta no confiable en VideoLAN VLC anterior a 0.9.0 permite a usuarios locales ejecutar código de su elección a través de una librería bajo los subdirectorios modules/ o plugins/ del directorio actual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6","matchCriteriaId":"6C5ACEC7-D436-49F2-821B-EE4B1D982A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8CBF1B20-1478-472C-B9A1-974A7A5333C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C29EDDF9-DE90-4AA7-8454-D42B4C37ECF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"02AF1C9A-FD6F-4CA4-8275-8B7655F861F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.1a:*:*:*:*:*:*:*","matchCriteriaId":"26768501-C17C-4ABF-AB47-D4BE2C902D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B56B15F-7504-4D55-8C31-1C28F1A8129D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6C6BB497-20F6-4CCB-A24E-7228BE68CA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2855B3-D0ED-4C8E-95A0-151E88F95057"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"56B90DCE-2EA9-49AA-9F63-0515C751E821"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"34C4F8C4-EEA4-4369-BBC8-C726059C8852"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2821324-7A44-40CD-95B8-F4B5B09E6D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4A98AC34-2FAB-4CAE-9D14-B4E11CC2AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"347E213C-83AF-4F98-8096-2113E00C1BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"6A26753D-44F2-49F6-8486-1DD61297C037"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"67C2B1C1-1606-411D-A9CA-D1A654FD4133"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28BBBBAF-71F7-4F47-ADE6-FF7B590832E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"5AC67A7B-21E0-45DA-A70F-EE97079140A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.4a:*:*:*:*:*:*:*","matchCriteriaId":"1062EB82-2A6C-4770-A339-21686FF9E923"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FEA7ECBE-1CAE-47C5-ACC1-F7BBA3946CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6a:*:*:*:*:*:*:*","matchCriteriaId":"9E85F765-D2DF-41C0-A90F-732861CA32F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6b:*:*:*:*:*:*:*","matchCriteriaId":"26981B0C-6A7E-40BA-8F50-0C19870258FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"89FAFEE4-35FE-44BE-90DD-1E067A1A2AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6d:*:*:*:*:*:*:*","matchCriteriaId":"686E1C6D-CDE6-4615-B983-3BCDDDE921AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc:0.8.6e:*:*:*:*:*:*:*","matchCriteriaId":"6545867A-07ED-4E16-AED0-566C5CCD46FE"}]}]}],"references":[{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c7cef4fdd8dd72ce0a45be3cda8ba98df5e83181","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31317","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-13.xml","source":"cve@mitre.org"},{"url":"http://trac.videolan.org/vlc/ticket/1578","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42377","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c7cef4fdd8dd72ce0a45be3cda8ba98df5e83181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.videolan.org/vlc/ticket/1578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2148","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T21:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service."},{"lang":"es","value":"Una llamada de sistema utimensat (sys_utimensat) en el Kernel de Linux versión 2.6.22 y otras versiones anteriores a 2.6.25.3,  no comprueba los permisos de los archivos cuando son usadas ciertas combinaciones UTIME_NOW y UTIME_OMIT, lo que permite a los usuarios locales modificar los tiempos de archivos arbitrarios, posiblemente conllevando a una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f9dfda1ad0637a89a64d001cf81478bd8d9b6306","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30198","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30241","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29134","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1543/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42342","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f9dfda1ad0637a89a64d001cf81478bd8d9b6306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1543/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2149","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T21:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option.  NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función searchwn de Wordnet 2.0, 2.1 y 3.0 podría permitir a atacantes dependientes del contexto ejecutar código de su elección mediante una opción de línea de comandos larga. NOTA: este tema probablemente no cruza límites de privilegios excepto en casos en los que Wordnet se usa como motor interno (back end)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordnet:wordnet:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0161FA05-EC88-497F-A0F0-0BF09BEB2624"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordnet:wordnet:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B2E2D3B7-FE7A-44F3-A08A-16C4383DD6A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordnet:wordnet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"678000ED-F5CE-4FFE-B31A-ED94AF77D9D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31654","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32184","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1634","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:182","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29208","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1527/references","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=211491","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1527/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=211491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2152","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función rtl_allocateMemory en sal/rtl/source/alloc_global.c en OpenOffice.org (OOo) 2.0 through 2.4, permite a atacantes remotos ejecutar código de su elección a través de un archivo manipulado que lanza un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45DD57AC-8CA4-48DB-90F9-2D7260AB7650"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*","matchCriteriaId":"E51167FA-13DD-46DE-AC16-A2AB2A315110"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=714","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30633","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30634","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30635","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31029","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-05.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:138","source":"cve@mitre.org"},{"url":"http://www.openoffice.org/security/cves/CVE-2008-2152.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0537.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0538.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29622","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020219","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1773","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1804/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42957","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2008-2152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0538.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1804/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2157","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500."},{"lang":"es","value":"robotd en la Library Manager de EMC AlphaStor 3.1 SP1 para Windows, permite a atacantes remotos ejecutar comandos de su elección mediante un campo de cadena no especificado en un paquete al puerto TCP 3500."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc_corporation:alphastor:3.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"CFE2C498-2D8F-4941-A2E2-9C446890B100"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=703","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30410","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020116","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1670","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42671","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2158","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el proceso de Interfaz de Línea de Comandos (Command Line Interface) en el Server Agent en EMC AlphaStor 3.1 SP1 para Windows permite a atacantes remotos ejecutar código de su elección mediante paquetes TCP manipulados al puerto 41025."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc_corporation:alphastor:3.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"CFE2C498-2D8F-4941-A2E2-9C446890B100"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30410","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29399","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1670","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42669","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2159","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 can save encrypted pages in the cache even when the DisableCachingOfSSLPages registry setting is enabled, which might allow local users to obtain sensitive information."},{"lang":"es","value":"Microsoft Internet Explorer 7 puede guardar páginas encriptadas en la caché incluso cuando la configuración del registro DisableCachingOfSSLPages está habilitada, lo que podría permitir a usuarios locales obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/468843","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29120","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1470/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42307","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/468843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1470/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2160","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el procesamiento de imágenes JPEG (GDI+) y GIF en Microsoft Windows CE versión 5.0, permite a atacantes remotos ejecutar código arbitrario por medio de imágenes (1) JPEG y (2) GIF diseñadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_embedded_compact:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5C883778-F2AE-4946-A2B2-ABE63F46DD7F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/948812","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29147","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020007","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1469/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/948812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1469/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2161","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en TFTP Server SP 1.4 y 1.5 en Windows y posiblemente otras versiones, permite a atacantes remotos ejecutar código de su elección mediante un paquete de error TFTP largo. NOTA: algunos de estos detalles se han obtenido de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:all_windows:*:*:*:*:*:*:*:*","matchCriteriaId":"3AB4B29F-4C60-48A0-8F58-BCBDC58B697E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftp:tftp_server_sp:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D22E904A-1FA8-488A-85FD-17C1970F7733"},{"vulnerable":true,"criteria":"cpe:2.3:a:tftp:tftp_server_sp:1.5:*:*:*:*:*:*:*","matchCriteriaId":"41B02A27-108D-436C-81B6-5550331328ED"}]}]}],"references":[{"url":"http://secunia.com/advisories/30147","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29111","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1468/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42298","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5563","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1468/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2162","sourceIdentifier":"cve@mitre.org","published":"2008-05-12T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SonicWall Email Security 6.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la cabecera Host en una petición a una página web que no existe, lo que no se limpia correctamente en una página de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:e-mail_security:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"64029CC6-6775-4E9B-AFF1-EC07C352E417"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0226.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29107","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019999","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42283","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2163","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to \"WYSIWYG editors.\""},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados en IBM Lotus Quickr 8.1 versiones anteriores al Hotfix 5 para Windows y AIX, y anteriores al Hotfix 3 para i5/OS, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores desconocidos, relacionada con \"editores WYSIWYG.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:i5os:*:*:*:*:*:*:*:*","matchCriteriaId":"F6EAAC0C-BDB1-4217-9551-684859F2D4E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.1:*:*:*:*:*:*:*","matchCriteriaId":"83B3B388-0438-4806-9F21-2170428739DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018711","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29175","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1502/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42360","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24018711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1502/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2165","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AccessCodeStart.asp de Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 permite a atacantes remotos inyectar web script o HTML a través del parámetro msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:building_broadband_service_manager:5.3:*:*:*:*:*:*:*","matchCriteriaId":"0F77E609-5124-427D-BB5F-6350721CF9A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3895","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020018","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492043/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492093/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29191","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42395","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492093/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2166","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el Módulo de búsqueda de Sun Java System Web Server 6.1 anterior a SP9 y 7.0 previo a la Update 2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de parámetros desconocidos en index.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:aix:*:*:*:*:*","matchCriteriaId":"E8E7D327-AB45-4DDC-A6B5-4A413B76440F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"5318A317-0981-4A5D-9468-50E08219312B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"A695E901-4FFF-4660-B49E-D7CB139536D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"24754087-DC84-4B0B-BBDE-70D288AFC901"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:windows:*:*:*:*:*","matchCriteriaId":"DCFD3C8D-6E79-4DA6-A600-D952C8E5A151"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:x86:*:*:*:*:*","matchCriteriaId":"16E496C0-438E-4262-A54B-3CB69C4A88C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:hp_ux:*:*:*:*:*","matchCriteriaId":"134929FE-2EBA-4B55-904F-111A658160F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"4AB42DB5-10BA-454E-A9F5-A0581BD21FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"53671389-3822-41CD-ABC9-DC19871579AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"F69C48CB-A038-431D-ABE4-A216E5283266"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"6EEB898B-0036-4B7B-B15A-595487D09D72"}]}]}],"references":[{"url":"http://secunia.com/advisories/30133","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231467-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29087","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019987","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1455/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42263","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231467-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1455/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2167","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T20:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page."},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados en ZyWALL 100 de ZyXEL, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la cabecera Referer, la cual no se gestiona correctamente en una página de Error 404"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall_100:*:*:*:*:*:*:*:*","matchCriteriaId":"A042AAA7-22D2-4E82-9D4A-6BA5974F3238"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062152.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3869","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491818/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29110","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020000","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1501/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42282","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062152.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491818/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1501/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2168","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T21:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page."},{"lang":"es","value":"La vulnerabilidad de tipo cross-site-scripting (XSS) en Apache versión 2.2.6 y anteriores, permite a los atacantes remotos inyectar scripts web o HTML arbitrarios por medio de direcciones URL codificadas UTF-7 que no se manejan apropiadamente cuando se muestra la página de error 403 Forbidden ."}],"vendorComments":[{"organization":"Apache","comment":"The Apache security team state that this issue is due to web browsers that are violating RFC2616 and is not a flaw in the Apache HTTPD Server.","lastModified":"2008-05-14T00:00:00.000"},{"organization":"Red Hat","comment":"This is actually a flaw in browsers that do not derive the response character set as required by RFC 2616. This does not affect the default configuration of Apache httpd in Red Hat products and will only affect customers who have removed the &quot;AddDefaultCharset&quot; directive. \nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2168","lastModified":"2008-05-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"154566FB-0D1A-4DC2-AFE6-49DE93850951"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:beta:*:*:*:*:*:*","matchCriteriaId":"1C3E2656-8071-40DA-9480-AC13010A9D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.34:beta:*:*:*:*:*:*","matchCriteriaId":"7C649D2F-A633-456E-899C-6253FDE9A626"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*","matchCriteriaId":"2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*","matchCriteriaId":"19F34D08-430E-4331-A27D-667149425176"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*","matchCriteriaId":"248BDF2C-3E78-49D1-BD9C-60C09A441724"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*","matchCriteriaId":"BB0FDE3D-1509-4375-8703-0D174D70B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*","matchCriteriaId":"449A5647-CEA6-4314-9DB8-D086F388E1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*","matchCriteriaId":"B5A407B7-F432-48F0-916A-A49952F85CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*","matchCriteriaId":"6B5AC769-D07D-43C7-B252-A5A812E7D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*","matchCriteriaId":"ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*","matchCriteriaId":"F2F19D71-0A58-4B03-B351-596EB67ECF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*","matchCriteriaId":"5EBB3FF9-CF5A-4E7B-ACE3-A198343AD485"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*","matchCriteriaId":"D721FFB5-D6D3-4F60-8B09-B3AD07EE6D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.56:*:*:*:*:*:*:*","matchCriteriaId":"97E8F32E-C2E5-44E3-A920-F09AF919D372"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.57:*:*:*:*:*:*:*","matchCriteriaId":"0CF37A82-49B6-45D4-B91D-FDA2D4463A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.58:*:*:*:*:*:*:*","matchCriteriaId":"030D1767-2DF7-48E3-B462-4B49CA751B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.59:*:*:*:*:*:*:*","matchCriteriaId":"5236DC61-5557-4C24-8F5B-F48548448588"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.60:*:*:*:*:*:*:*","matchCriteriaId":"8CB9F19A-5DC0-4C44-8BAF-B8FD047DAB56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.61:*:*:*:*:*:*:*","matchCriteriaId":"3B468F9B-2514-425C-9279-0FCAF73BBD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"00BC31A3-B9AC-4776-83C1-668636B74104"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D72E88F0-AB0F-4B6F-AE86-71B0DE84BD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"840FF871-79EC-472C-91BD-9E9AFC36B408"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"191E8654-5338-4051-A1D5-EE491D594F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B26CC819-7315-456F-9F95-2A64FCE6AC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3774827-AB0B-4A95-844B-9BC904A9FE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D07925-542B-4369-AA21-5587703E12E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ACC83EB5-4E9A-4EA9-8D9F-BDBF5F60C54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"80632488-5C7E-4C70-BB60-BC4756187670"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACBC75F8-C1AF-45AE-91BA-5670EF2D0DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"733D62FE-180A-4AE8-9DBF-DA1DC18C1932"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3889","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491862/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491901/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491930/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491967/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29112","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42303","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491862/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491901/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491930/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2169","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372."},{"lang":"es","value":"Vulnerabilidad no especificada en los routers Avici, permite a atacantes remotos provocar una denegación de servicio (sesión caída) a través de mensajes BGP UPDATE manipulados, provocando cambio continuo de ruta (route flapping), posiblemente sea un problema relacionado con la CVE-2007-6372."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avici:router:*:*:*:*:*:*:*:*","matchCriteriaId":"E16ECB5C-6C62-4EAB-B134-67E2FFB164A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:1b:*:*:*:*:*:*:*","matchCriteriaId":"22F02BA5-0229-44CC-99D7-FF31CA9C663A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:2b:*:*:*:*:*:*:*","matchCriteriaId":"9D6C86A9-6415-4A3A-A55F-183613580279"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:2b\\+:*:*:*:*:*:*:*","matchCriteriaId":"ECCC842D-D459-4049-A096-1900DD621A20"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:bh:*:*:*:*:*:*:*","matchCriteriaId":"8670F404-9160-44E3-AF45-28ADB750388B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr3000:*:*:*:*:*:*:*:*","matchCriteriaId":"6BE18FB6-E292-47B2-8FA2-74EE122C2B02"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr4000:*:*:*:*:*:*:*:*","matchCriteriaId":"D377F14F-44AE-4D74-8C14-BA73AC77FDB7"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/929656","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28999","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2170","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372."},{"lang":"es","value":"Vulnerabilidad no especificada en los routers Century permite a atacantes remotos provocar una denegación de servicio (abandono de sesión) mediante mensajes manipulados de BGP UPDATE, principalmente cambiando de forma continua de ruta; puede que esté relacionado con la vulnerabilidad CVE-2007-6372."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:century_software:router:*:*:*:*:*:*:*:*","matchCriteriaId":"4AF31DA3-3D07-4686-A7C1-648A7EFF1DC3"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/929656","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28999","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2171","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372."},{"lang":"es","value":"Vulnerabilidad sin especificar en los router AlaxalA AX, que permite a atacantes remotos provocar una denegación de servicio (abandono de sesión) a través de mensajes \"BGP UPDATE\" manipulados, principalmente cambiando continuamente de ruta, posiblemente relacionado con  CVE-2007-6372."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alaxala:ax_router:*:*:*:*:*:*:*:*","matchCriteriaId":"59BFC48F-7FA4-46AF-A61F-B11072C1FE73"}]}]}],"references":[{"url":"http://secunia.com/advisories/30054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-79UV2A","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28999","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1407/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-79UV2A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1407/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2172","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372."},{"lang":"es","value":"Vulnerabilidad no especificada en los routers Hitachi GR. Permite a atacantes remotos causar denegación de servicio (sesión cerrada) a través de mensajes BGP UPDATE manipulados y cambio continuo de rutas posiblemente un problema relacionado con CVE-2007-6372."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:*:*:*:*:*:*:*:*","matchCriteriaId":"A48EF6BB-67BB-4FB8-A8AE-4D7CD17E6BE4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:1b:*:*:*:*:*:*:*","matchCriteriaId":"22F02BA5-0229-44CC-99D7-FF31CA9C663A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:2b:*:*:*:*:*:*:*","matchCriteriaId":"9D6C86A9-6415-4A3A-A55F-183613580279"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:2b\\+:*:*:*:*:*:*:*","matchCriteriaId":"ECCC842D-D459-4049-A096-1900DD621A20"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr2000:bh:*:*:*:*:*:*:*","matchCriteriaId":"8670F404-9160-44E3-AF45-28ADB750388B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr3000:*:*:*:*:*:*:*:*","matchCriteriaId":"6BE18FB6-E292-47B2-8FA2-74EE122C2B02"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:gr4000:*:*:*:*:*:*:*:*","matchCriteriaId":"D377F14F-44AE-4D74-8C14-BA73AC77FDB7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-79UV2A","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28999","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1405","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-79UV2A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2173","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372."},{"lang":"es","value":"Vulnerabilidad sin especificar en los routers Yamaha permite a atacantes remotos provocar una denegación de servicio (abandono de sesión) a través de mensajes BGP UPDATE manipulados, principalmente cambiando continuamente de ruta, posiblemente en relación con CVE-2007-6372."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yamaha:router:*:*:*:*:*:*:*:*","matchCriteriaId":"0B49AF70-C2DC-4987-8093-EA224E2C02BA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/929656","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28999","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/929656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/28999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2174","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 have unknown impact and attack vectors, related to \"various areas where security was missing.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Robin Rawson-Tetley Animal Shelter Manager (ASM) versiones anteriores a la 2.2.2, tienen un impacto y vectores de ataque desconocidos, relacionado con “varias áreas donde falta seguridad”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"E5A0E53D-7AD6-40F4-962C-7D0B765D529D"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B3C772C-E108-4336-8377-F12E96097F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0187FA02-69E5-49C6-95DB-85A827E1B517"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.11:*:*:*:*:*:*:*","matchCriteriaId":"1A5F4AB0-24CD-4AF6-A967-765918E835AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.12:*:*:*:*:*:*:*","matchCriteriaId":"58C72FBB-A860-4EE5-A3D9-68E0A1C7F789"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.20:*:*:*:*:*:*:*","matchCriteriaId":"B154ECE6-0CB4-42B8-8B4D-AC0E63490B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.22:*:*:*:*:*:*:*","matchCriteriaId":"67E1A926-8C16-489A-9D3D-B53B3BD00DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30:*:*:*:*:*:*:*","matchCriteriaId":"F1D03D82-12A9-404A-B905-5075F2A64E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.1:*:*:*:*:*:*:*","matchCriteriaId":"5A374254-A812-4EDB-A40F-5A2F2B13A0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.2:*:*:*:*:*:*:*","matchCriteriaId":"04B39BD3-3C21-48D5-8D76-CC8E4413F219"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30_beta:*:*:*:*:*:*:*","matchCriteriaId":"2709633D-7249-434A-B399-2A885EF5AC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.31:*:*:*:*:*:*:*","matchCriteriaId":"FB478882-0319-448E-BBCC-B05CD26138A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.32:*:*:*:*:*:*:*","matchCriteriaId":"AE3447F5-228E-46F2-BDAF-73617E649809"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.33:*:*:*:*:*:*:*","matchCriteriaId":"FD21A6AF-7DE1-450E-96A9-16BD6DD390AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.34:*:*:*:*:*:*:*","matchCriteriaId":"0E074718-259F-4A74-AEEE-4F515299D4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.35:*:*:*:*:*:*:*","matchCriteriaId":"F1C3A310-8CA2-4CAA-BF3C-0F270CD7B3F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.36:*:*:*:*:*:*:*","matchCriteriaId":"9E7AAFA3-29E1-4C80-95F1-7C837D1C6ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.37:*:*:*:*:*:*:*","matchCriteriaId":"B5F67A73-30C4-4D05-B078-3DC3DCD6B989"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.38:*:*:*:*:*:*:*","matchCriteriaId":"DCF9D5B3-542A-4A3F-822F-C5B0B137F814"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.39:*:*:*:*:*:*:*","matchCriteriaId":"B42CF675-826D-4108-A6C5-9858B69B1E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.40:*:*:*:*:*:*:*","matchCriteriaId":"A6B65828-3876-4173-94FA-52E3129759AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EE12865-F9F4-4232-A0AA-1FE272D475F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C2443110-53F3-4BD3-B54E-9593B8C972FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"479C9000-2206-4F23-A570-D26D01D664A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F31F320A-FF20-48C2-9DE1-C09B0DC1FCF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A14D6C86-5912-4B68-9FDB-D4B448F2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"27EA78FF-DB1C-430B-B453-20105FD3C2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D5442F6C-741C-4C31-8033-2C26867CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"2C74338C-EF04-4F9E-AB91-1650D16B8BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"6ED71A13-6477-4A08-9DE5-B135BA3E2A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F58E05A2-C443-4415-98B3-821AF04B7E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"3E1298C5-5B3B-43A0-863E-215B52716227"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BD9F86A2-A440-4762-B26F-385A5A9EEF48"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"11046732-02B9-4ABB-8CF0-8B2DEA697E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CDEF7261-C6D8-429D-80D0-99D7BDF704E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=818214","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42139","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=818214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2175","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comments.php en Gamma Scripts BlogMe PHP, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamma_scripts:blogme_php:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EA61FB22-5B7B-4DB1-BEAF-281495E3A384"}]}]}],"references":[{"url":"http://secunia.com/advisories/30058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29030","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42193","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2176","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/category.php de Zomplog 3.8.2; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante el parámetro catname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zomp:zomplog:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"130782B0-1780-4928-BD30-94595F80DE3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3870","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491553/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42146","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491553/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2177","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php."},{"lang":"es","value":"Múltples vulnerabilidades de inyección SQL en phpDirectorySource 1.1.06 cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) lid de show.php y (2) login de admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_directory_source:phpdirectorysource:1.1.06:*:*:*:*:*:*:*","matchCriteriaId":"959928FE-6B1E-47EB-83AA-18E3FB795EED"}]}]}],"references":[{"url":"http://secunia.com/advisories/30056","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29039","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1432/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42213","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1432/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2178","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation (aka an admin category search)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php de LifeType 1.2.7; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante el parámetro searchTerms en una operación editArticleCategories (también conocido como una búsqueda de categoría de administrador)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lifetype:lifetype:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CDA338BB-4520-4BB8-B150-9B2BE5C592B7"}]}]}],"references":[{"url":"http://lifetype.net/post/2008/05/04/lifetype-1.2.8-released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30075","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3871","source":"cve@mitre.org"},{"url":"http://wiki.lifetype.net/index.php/Release_notes_Lifetype_1.2.8","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/491550/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491597/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29017","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42151","source":"cve@mitre.org"},{"url":"http://lifetype.net/post/2008/05/04/lifetype-1.2.8-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.lifetype.net/index.php/Release_notes_Lifetype_1.2.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/491550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491597/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2179","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote attackers to inject arbitrary web script or HTML via the searchField parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SystemList.jsp de SysAid 5.1.08; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro searchField. NOTA: se desconoce el origen de esta información; los detalles han sido obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ilient:sysaid:5.1.08:*:*:*:*:*:*:*","matchCriteriaId":"486B4CF2-3024-4A1F-A9BD-7824DEF8FFAA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42243","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2180","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) admin_username parameter (aka the username field) to admin/index.php and the (2) search_text and (3) search_category parameters to search.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en cpLinks cuando \"magic_quotes\" está desactivados, permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) admin_username  hacia admin/index.php, (2) search_text y(3) search_category hacia search.php.  NOTA: algunos de estos detalles se han obtenido de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cplinks:cplinks:1.03:*:*:*:*:*:*:*","matchCriteriaId":"1E75FE1C-34C3-4B15-A653-F979FA8B1390"}]}]}],"references":[{"url":"http://secunia.com/advisories/30024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29035","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1431/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42170","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5538","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1431/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2181","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the (1) search_text and (2) search_category parameters.  NOTE: the XSS reportedly occurs in a forced SQL error message.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en search.php de cpLinks 1.03, permiten a atacantes remotos  inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) search_text y (2) seach_category. NOTA: La secuencia de comandos en sitios cruzados (XSS)  mencionada sucede en un mensaje de error SQL forzado. NOTA: Algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cplinks:cplinks:1.03:*:*:*:*:*:*:*","matchCriteriaId":"1E75FE1C-34C3-4B15-A653-F979FA8B1390"}]}]}],"references":[{"url":"http://secunia.com/advisories/30024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29035","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1431/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42171","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5538","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1431/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2182","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabildiad de secuencias de comandos en sitios cruzados (XSS) en la extensión powermail anterior a 1.1.10 para TYPO3; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:in2code:powermail:*:*:*:*:*:typo3:*:*","versionEndExcluding":"1.1.10","matchCriteriaId":"CEEF8256-E3F6-4EC6-9B81-04EA6D55F8DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30079","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080505-2/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/29040","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42188","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080505-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/29040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2183","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en SMartBlog (también conocido como SMBlog) 1.3; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro idt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toocharger:smartblog:1.3:*:*:*:*:*:*:*","matchCriteriaId":"61D3C94D-F9CB-48CE-8258-566D386FC7F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42190","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2184","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login parameter to gestion/logon.php, different vectors than CVE-2008-2183.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SMartBlog (también conocido como SMBlog) 1.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través los parámetros (1) mois, (2)an, (3)jour, e (4) id en index.php; y el parámetro (5) login en gestion/logon.php. NOTA: se desconoce el origen de esta información; los detalles han sido obtenidos únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toocharger:smartblog:1.3:*:*:*:*:*:*:*","matchCriteriaId":"61D3C94D-F9CB-48CE-8258-566D386FC7F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42190","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42245","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2185","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Salto de directorio en index.php de SMartBlog (o SMBlog) 1.3, permite a atacantes remotos incluir ficheros locales arbitrariamente a través de secuencias de salto de directorio en el parámetro page. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toocharger:smartblog:1.3:*:*:*:*:*:*:*","matchCriteriaId":"61D3C94D-F9CB-48CE-8258-566D386FC7F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42192","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2186","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Chilek Content Management System (también conocido como ChiCoMaS) 2.0.4; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro q."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cilekyazilim:chicomas:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5D39315D-920E-48FB-AAE0-DE391EF73B4F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120975560407192&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_59.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44809","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499458/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499459/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29025","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42156","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7532","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120975560407192&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_59.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499459/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2187","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly involving interface/redirect.htm.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en mjguest.php de Mjguest 6.7 GT Rev.01; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro level en una acción redirect, puede que involucre a interface/redirect.htm.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdsjack:mjguest:6.7:gt_rev1:*:*:*:*:*:*","matchCriteriaId":"B18D5CC7-B7F7-4885-BEF0-6BE30528BA51"}]}]}],"references":[{"url":"http://secunia.com/advisories/30049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3872","source":"cve@mitre.org"},{"url":"http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491523/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492384/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29002","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492384/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2188","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T22:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5) estiloCSS parameters to (b) header.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en EJ3 BlackBook 1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) bookCopyright y(2) ver en (a) footer.php, ythe (3) bookName, (4) bookMetaTags y(5) estiloCSS en (b) header.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eejj33:blackbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6EC267C6-DC1D-4B0B-A43A-C3239BB7899E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3873","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491549/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29015","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42147","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491549/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2189","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewfaqs.php de AnServ Auction XL permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anserv:auction_xl:*:*:*:*:*:*:*:*","matchCriteriaId":"D25B011C-31E7-4A4B-879E-C62F04FD6D1A"}]}]}],"references":[{"url":"http://advisories.echo.or.id/adv/adv92-K-159-2008.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3874","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491608/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42214","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5543","source":"cve@mitre.org"},{"url":"http://advisories.echo.or.id/adv/adv92-K-159-2008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491608/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2190","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.  NOTE: it was later reported that 5.0 and earlier are also affected."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Online Rent (también conocido como Online Rental Property Script) 4.5 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro pid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:romedchim_international_srl:online_rent_property_script:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"E123B4D0-C9BE-4885-9C83-AD46088CD325"},{"vulnerable":true,"criteria":"cpe:2.3:a:romedchim_international_srl:online_rent_property_script:4.2:*:*:*:*:*:*:*","matchCriteriaId":"13D67374-E452-42B0-806C-429202E80508"},{"vulnerable":true,"criteria":"cpe:2.3:a:romedchim_international_srl:online_rent_property_script:4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB076BAB-217E-4652-80D1-296797A78D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:romedchim_international_srl:online_rent_property_script:4.4:*:*:*:*:*:*:*","matchCriteriaId":"30A6B332-92D9-4FB9-97D6-43CD5FE4F0AF"}]}]}],"references":[{"url":"http://advisories.echo.or.id/adv/adv91-K-159-2008.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35147","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491607/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491816/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29052","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35005","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42191","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5542","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8711","source":"cve@mitre.org"},{"url":"http://advisories.echo.or.id/adv/adv91-K-159-2008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491607/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491816/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2191","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a display_term action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pnEncyclopedia módulo 0.2.0 y anteriores para PostNuke; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción display_term en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:pnencyclopedia:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0","matchCriteriaId":"F2B7874F-C013-40B4-9E17-2BC3E88A7E7A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3876","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491606/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29046","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42185","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5541","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491606/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2192","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en box/minichat/boxpop.php de IT!CMS (también conocido como itcms) 1.9 permite a atacantes remotos inyectar código PHP de su elección en box/MiniChat/data/shouts.php a través del parámetro shout."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itcms:itcms:1.9:*:*:*:*:*:*:*","matchCriteriaId":"4A19027C-319B-4F60-8270-587512A39262"}]}]}],"references":[{"url":"http://secunia.com/advisories/30059","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42172","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2193","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo en PHP remoto en example.php de Thomas Gossmann ScorpNews 2.0 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scorpnews:scorpnews:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F034E4EC-30CA-4438-B348-F3A1B3B627C0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29041","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1430/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42517","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5539","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1430/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2194","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forums.php de DeluxeBB 1.2 y anteriores; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"A26025D5-190F-4AE1-AC64-4CACC47BF7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"CF5128A2-8DE9-4E00-BA8D-CF162B92ADE6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42224","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2195","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admincp.php de DeluxeBB 1.2 y versiones anteriores permite a administradores remotos autenticados inyectar código PHP de su elección en logs/cp.php a través de una URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"A26025D5-190F-4AE1-AC64-4CACC47BF7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"CF5128A2-8DE9-4E00-BA8D-CF162B92ADE6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42225","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2196","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php de LifeType 1.2.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro newBlogUserName en una acción addBlogUser, un vector distinto a CVE-2008-2178."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lifetype:lifetype:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"3E7EEFA2-41CF-43B2-A1CB-63E062041A1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30092","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491600/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29050","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491600/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2197","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo blogwriter 2.0 para Miniweb permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro historymonth a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miniweb2:blog_writer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B72E22F4-F925-4741-8D53-8A7F4C5F03BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29061","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42220","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5548","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2198","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en PHP en kmitaadmin/kmitat/htmlcode.php de Kmita Tellfriend 2.0 y anteriores, cuando register_globals está habilitado; permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kmita_tellfriend:tellfriend:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"9E1F7B7D-A407-4C0B-AFB0-DC25D99B9D41"}]}]}],"references":[{"url":"http://advisories.echo.or.id/adv/adv93-K-159-2008.txt","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491616/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29042","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42186","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5544","source":"cve@mitre.org"},{"url":"http://advisories.echo.or.id/adv/adv93-K-159-2008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491616/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2199","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter."},{"lang":"es","value":"Inclusión remota de archivos PHP  en kmitaadmin/kmitam/htmlcode.php de Kmita Mail 3.0 y versiones anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrariamente a través de una URL en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kkeim:kmita_mail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"30B36761-98A1-4065-A71E-1A16149E83FB"}]}]}],"references":[{"url":"http://advisories.echo.or.id/adv/adv94-K-159-2008.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491609/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29044","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42187","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5545","source":"cve@mitre.org"},{"url":"http://advisories.echo.or.id/adv/adv94-K-159-2008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491609/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2200","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to admin/index.php in a blogs search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Maian Weblog 4.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) keywords a admin/index.php en una acción blogs search; (2) msg_charset y (3) msg_header9 a admin/inc/header.php; y (4) keywords a index.php en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_weblog:4.0:*:*:*:*:*:*:*","matchCriteriaId":"308448C7-821A-4CBA-B17F-412528A5F029"}]}]}],"references":[{"url":"http://secunia.com/advisories/30060","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3880","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491588/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42207","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491588/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2201","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en admin/inc/header.php en Maian Recipe 1.2 permiten a atacantes remotos inyectar inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros: (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8 y (9) header9."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_recipe:1.2:*:*:*:*:*:*:*","matchCriteriaId":"69E7C740-051E-4C93-90C3-E844D2919461"}]}]}],"references":[{"url":"http://secunia.com/advisories/30067","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491589/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491589/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2202","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to upload/admin/index.php in a search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de comandos en sitios cruzados (XSS) en Maian Uploader 4.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente mediante el parámetro (1) keywords de upload/admin/index.php en una acción search, los parámetros (2) msg_charset y (3) msg_header9 de admin/inc/header.php, y el parámetro (4) keywords de index.php en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_uploader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48DE185-BEEF-4B21-B85F-D415D1A9CC4F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30096","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491599/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42203","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491599/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2203","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php de Maian Search 1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro keywords en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_search:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4B25EC9-F161-4B1C-8AF4-56351CE0C022"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42196","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2204","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/inc/header.php de Maian Search 1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante los parámetros  1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8 y (9) header9."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_search:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4B25EC9-F161-4B1C-8AF4-56351CE0C022"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2205","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Maian Music 1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro album en una acción album."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_music:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7EE1C010-235F-4274-B6C5-C4D8667EBF2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30066","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491590/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42209","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491590/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2206","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter in a search action to index.php, and the (2) msg_script parameter to admin/inc/footer.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en Maian Music 1.1 permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) el parámetro keywords en una acción de búsqueda en index.php, y de (2)el parámetro msg_script de admin/inc/footer.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_music:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7EE1C010-235F-4274-B6C5-C4D8667EBF2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30066","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491590/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42210","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491590/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2207","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/index.php de Maian Gallery 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro keywords en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_gallery:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1EE68D3-B6D3-40D3-B857-82181EB0F5B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30070","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3885","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42195","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2208","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Maian Greeting 2.1; permite a atacantes remotos  ejecutar comandos SQL de su elección a través del parámetro keywords en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_greeting:2.1:*:*:*:*:*:*:*","matchCriteriaId":"76C126AC-0A70-4E89-9D51-E8D0C2058D08"}]}]}],"references":[{"url":"http://secunia.com/advisories/30069","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2209","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script and (2) msg_script2 parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/inc/header.php de Maian Greeting 2.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML mediante los parámetros 1) msg_script y (2) msg_script2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_greeting:2.1:*:*:*:*:*:*:*","matchCriteriaId":"76C126AC-0A70-4E89-9D51-E8D0C2058D08"}]}]}],"references":[{"url":"http://secunia.com/advisories/30069","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2210","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script, (2) msg_script2, and (3) msg_script3 parameters to admin/inc/footer.php; and the (4) msg_script2 parameter to admin/inc/header.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Maian Support 1.3; permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) msg_script, (2) msg_script2, y (3) msg_script3 de admin/inc/footer.php; el parámetro (4) msg_script2 de admin/inc/header.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_support:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2A182099-1E4B-448E-B2E8-7A6A380615F5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30068","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491587/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491587/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2211","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/inc/footer.php de Maian Guestbook 3.2 permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) msg_script2 y (2) msg_script3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_guestbook:3.2:*:*:*:*:*:*:*","matchCriteriaId":"491EBE41-18C8-48FC-830D-6452E242E62C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30071","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491584/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42198","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491584/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2212","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4, and unspecified other parameters to admin/inc/header.php; the (5) msg_script3 and unspecified other parameters to admin/inc/footer.php; and the (6) keywords parameter to index.php in a search action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Maian Cart 1.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML mediante los parámetros (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4 y otros no especificados a admin/inc/header.php; (5) msg_script3 y otros no especificados a admin/inc/footer.php; y (6) keywords a index.php en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_cart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DD9701D1-40E7-49C5-A80F-79B720B0F4E1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491581/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42194","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491581/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2213","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en admin/inc/footer.php en Maian Links 3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) msg_script2 y (2) msg_script3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_links:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C0C4FCAD-1527-45F4-A355-FA698817AE89"}]}]}],"references":[{"url":"http://secunia.com/advisories/30065","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491591/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42208","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491591/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2214","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long community string in an SNMP TRAP packet."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el Network Manager de Castle Rock Computing SNMPc 7.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección mediante una cadena community larga en un paquete SNMP TRAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:castle_rock:snmpc:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"C3E4173A-F0C4-44F0-9BA3-0F2995E2BF0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3886","source":"cve@mitre.org"},{"url":"http://www.ngssoftware.com/advisories/critical-vulnerability-in-snmpc/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/491454/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28990","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019953","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1403/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42104","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngssoftware.com/advisories/critical-vulnerability-in-snmpc/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/491454/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1403/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2215","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) src/yopy_sync.php and (2) system-logger/print_logs.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Salto de directorio en Project-Based Calendaring System (PBCS) 0.7.1-1 permiten a atacantes remotos leer ficheros de su elección mediante un .. (punto-punto) en el parámetro nombre de fichero de (1) src/yopy_sync.php y (2) system-logger/print_logs.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pbcs:project-based_calendaring__system:0.7.1-1:*:*:*:*:*:*:*","matchCriteriaId":"2AADE0C6-894B-4CEC-979E-C52BEDD55862"}]}]}],"references":[{"url":"http://secunia.com/advisories/30015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28991","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42106","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5523","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2216","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads."},{"lang":"es","value":"Vulnerabilidad de subida de archivo sin restricciones en src/yopy_upload.php de Project-Based Calendaring System (PBCS) 0.7.1 permite a usuarios remotos autenticados subir ficheros de su elección a tmp/uploads."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pbcs:project-based_calendaring__system:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61EE27DA-05B8-475A-9477-7F973427A2B8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28991","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42105","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2217","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cm_imgpath parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en cm/graphie.php de Content Management System 0.6.1 para Phprojekt; permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro cm_imgpath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mario_valdez:content_management_system:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"742DA369-0493-4690-9437-086407F28E92"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28958","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42510","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5510","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2218","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (crash) via a flood of \"extraneous\" messages, as demonstrated by the Nessus \"Generic flood\" denial of service plugin."},{"lang":"es","value":"Desbordamiento de búfer en Multimedia PC Client de Nortel Multimedia Communication Server (MCS) versiones anteriores a Maintenance Release 3.5.8.3 y 4.0.25.3 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una inundación de mensajes \"extraños\", tal como lo demostrado por Nessus \"inundación genérica\" en la denegación de servicio del plugin.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:multimedia_communications_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.8.3","matchCriteriaId":"3B859433-7BF3-49DF-8BCD-4544782F6BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:multimedia_communications_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.25.3","matchCriteriaId":"EE394336-6738-42E4-9927-D6CE5F1F88EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30038","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=719698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28994","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019957","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1404/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=719698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1404/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2219","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the etape parameter."},{"lang":"es","value":"Vulnerabildiad de secuencias de comandos en sitios cruzados (XSS) en install.php en C-News.fr C-News 1.0.1; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro etape."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:c-news.fr:c-news:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"898AB06B-60B7-43DB-9467-0D925165F04A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28989","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/70-cnews-1.0.1-XSS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42509","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/70-cnews-1.0.1-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2220","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[LANGUAGE_CPATH] parameter to modules/forum/embedforum.php and the (2) CONFIG[BASE_PATH] parameter to modules/scorm/lib.inc.php, different vectors than CVE-2006-4448."},{"lang":"es","value":"Múltiples vulnerabilidades de PHP de inclusión remota de ficheros en Interact Learning Community Environment Interact 2.4.1 cuando register_globals está habilitado; permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en los parámetros (1)CONFIG[LANGUAGE_CPATH] de modules/forum/embedforum.php y (2) CONFIG[BASE_PATH] de modules/scorm/lib.inc.php. Se trata de vectores diferentes de  CVE-2006-4448."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interact:interact:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EB64C021-6885-4598-9758-4AD4309D0FAD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5526","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2221","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión (plugin) Java de IBM WebSphere Application Server 5.0.2 permite a applets no confiables conseguir privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"}]}]}],"references":[{"url":"http://secunia.com/advisories/29976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK65161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28997","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019956","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1411/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42116","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK65161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1411/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2222","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php de EQdkp 1.3.2f permite a atacantes remotos evitar la autentificación de usuario EQdkp mediante el parámetro user_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eqdkp:eqdkp:1.3.2f:*:*:*:*:*:*:*","matchCriteriaId":"C6761C9E-3DC0-44A2-9611-9EABCCC8F047"}]}]}],"references":[{"url":"http://secunia.com/advisories/30206","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29184","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42381","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2223","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in group_posts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en group_posts.php de vShare YouTube Clone 2.6 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro tid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:buyscripts:vshare_youtube_clone:2.6:*:*:*:*:*:*:*","matchCriteriaId":"4E7B8E45-E7F5-4884-81B0-B93E70B22FC8"}]}]}],"references":[{"url":"http://forums.buyscripts.in/viewtopic.php?f=7&t=3389","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30144","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29114","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42285","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5565","source":"cve@mitre.org"},{"url":"http://forums.buyscripts.in/viewtopic.php?f=7&t=3389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2224","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _saz[settings][site_dir] parameter to layouts/default/header.saz.php and the (2) _saz[settings][site_url] parameter to admin/alayouts/default/pages/login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivo PHP remoto en SazCart 1.5.1, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en los parámetros (1) _saz[settings][site_dir] a layouts/default/header.saz.php y (2) _saz[settings][site_url] a admin/alayouts/default/pages/login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sazcart:sazcart:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D798C42-BC26-43EF-B477-39CBEFBEEA57"}]}]}],"references":[{"url":"http://secunia.com/advisories/30148","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29113","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42289","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2225","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de gameCMS Lite 1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro systemId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamecms:gamecms_lite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"301DAB38-7451-4D3C-B35A-B70D2E3EA2BC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29093","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2226","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the export feature in OpenKM before 2.0 allows remote attackers to export arbitrary documents via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica export de OpenKM versiones anteriores a 2.0 permite a atacantes remotos exportar documentos de su elección a través de vectores no especificados.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openkm:openkm:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"B11C710B-32E3-40AD-8BA4-DCEF1D783EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openkm:openkm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0676B7CD-93C7-4645-8AC2-016A5039D5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openkm:openkm:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC3DC967-4EC3-4869-B0D9-483D12712C55"}]}]}],"references":[{"url":"http://secunia.com/advisories/30137","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=597940","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=597940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2227","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter to (1) forum.php and (2) profile.php in infusions/rank_system/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de Salto de Directorio en PHP-Fusion Forum Rank System 6 permiten a atacantes remotos incluir y ejecutar archivos locales arbitrariamente a través de un .. (punto punto) en el parámetro configuración [local] de (1) forum.php y (2) profile.php en infusions/rank_system/.  NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:forum_rank_system:6:*:*:*:*:*:*:*","matchCriteriaId":"A2842EA9-1A3A-47F5-834B-8290AB4B60C9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29077","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29077/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42244","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29077/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2228","sourceIdentifier":"cve@mitre.org","published":"2008-05-14T18:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión de archivos remotos PHP en el archivo portfolio/commentaires/derniers_commentaires.php en Cyberfolio versión 7.12, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro rep."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:7.2:*:*:*:*:*:*:*","matchCriteriaId":"4825F01D-8166-4356-AF61-2C8CEDDFE694"}]}]}],"references":[{"url":"http://secunia.com/advisories/30154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29124","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42286","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5567","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2230","sourceIdentifier":"cve@mitre.org","published":"2008-06-11T01:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory."},{"lang":"es","value":"Vulnerabilidad en búsqueda de ruta no confiable en (1) reportbug 3.8 y 3.31 y (2) reportbug-ng anterior a 0.2008.06.04, permite a usuarios locales ejecutar código de su elección a través de un archivo de módulo malicioso en el directorio de trabajo actual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug:3.8:*:*:*:*:*:*:*","matchCriteriaId":"58B32764-8C17-4D56-80E4-43C7046A8C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug:3.31:*:*:*:*:*:*:*","matchCriteriaId":"D5E42098-0EBF-4282-BF8D-285B817E5DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.10:*:*:*:*:*:*:*","matchCriteriaId":"FB04ADD7-8C46-4284-88AA-6AFF67846294"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.11:*:*:*:*:*:*:*","matchCriteriaId":"93DA8567-B900-4F0A-B995-F9FDCA1EB285"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.13:*:*:*:*:*:*:*","matchCriteriaId":"0F259110-0A01-45DB-AED5-D877A3505AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.14:*:*:*:*:*:*:*","matchCriteriaId":"04F7172F-F7DA-4A1C-8B8C-8F5B2DA6CD55"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.15:*:*:*:*:*:*:*","matchCriteriaId":"E2B35282-12AD-4418-B45C-9EBA2E2BE575"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.17:*:*:*:*:*:*:*","matchCriteriaId":"430EF0FE-5D29-4F0B-B528-F7C86136046D"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.19:*:*:*:*:*:*:*","matchCriteriaId":"19B505BE-93F1-4591-B02B-D72F1BA99729"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ADCB0ECD-657B-47F6-B5F9-DA0BB1644777"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.20:*:*:*:*:*:*:*","matchCriteriaId":"7DC4DFD6-64EF-48FC-88F8-A44DCB53C684"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.24:*:*:*:*:*:*:*","matchCriteriaId":"B4E36FD5-2086-44D2-93FF-CC865E38C326"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.27:*:*:*:*:*:*:*","matchCriteriaId":"5F480F5C-6CE8-40FA-87D6-827F4A6CF972"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.28:*:*:*:*:*:*:*","matchCriteriaId":"E1F5BAA6-3E83-44CA-BFBA-F11054E76537"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.03.29:*:*:*:*:*:*:*","matchCriteriaId":"AAE37A6E-173D-4B02-9597-EB1A12E5A35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.07:*:*:*:*:*:*:*","matchCriteriaId":"9A6095AA-F44F-4A12-BA53-E5B8A00663B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.07.2:*:*:*:*:*:*:*","matchCriteriaId":"3A669C41-2808-4198-8F6F-47554EF4FA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.13:*:*:*:*:*:*:*","matchCriteriaId":"FC5C4028-A892-43D4-88B3-6B03BE345FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.16:*:*:*:*:*:*:*","matchCriteriaId":"9AB84ADB-0A98-41F4-9AA4-3664A4C12CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.20:*:*:*:*:*:*:*","matchCriteriaId":"0D083431-8CB2-4AC6-8B30-31CBF6815D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.23:*:*:*:*:*:*:*","matchCriteriaId":"8D5FD6C3-1937-4A5F-B080-691CF16D4F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.04.27:*:*:*:*:*:*:*","matchCriteriaId":"89A5AC0F-B6B2-43A4-BC1E-ABCC8AE42B6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.02:*:*:*:*:*:*:*","matchCriteriaId":"DDCD7001-7E60-404D-A656-520939553188"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.27:*:*:*:*:*:*:*","matchCriteriaId":"5D8DAF8A-3EE7-4F1C-81D8-7FEE379CA032"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.28:*:*:*:*:*:*:*","matchCriteriaId":"086EAEFD-7550-46FA-8A9D-9B58EA2CB582"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.05.31:*:*:*:*:*:*:*","matchCriteriaId":"035EF141-C35F-4BC5-B563-BECB9809E3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.06.13:*:*:*:*:*:*:*","matchCriteriaId":"E233020F-A830-4481-94C2-E9D890B57905"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.06.27:*:*:*:*:*:*:*","matchCriteriaId":"1880EEBC-ECA7-4658-B24F-661A01C91285"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.08:*:*:*:*:*:*:*","matchCriteriaId":"8AA0CD14-57B0-45DA-8B1E-E77642034972"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.12:*:*:*:*:*:*:*","matchCriteriaId":"5B12E555-1BFD-4FC4-BF03-A8D7198D3C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.18:*:*:*:*:*:*:*","matchCriteriaId":"27FDAA63-AFDF-4FAD-87D9-0C8AB4DDD89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.07.19:*:*:*:*:*:*:*","matchCriteriaId":"B88A5405-6AC3-45D1-8BD6-B8E3501D2B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.02:*:*:*:*:*:*:*","matchCriteriaId":"1F802FAD-99D3-48F3-9D79-05139199E7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.03:*:*:*:*:*:*:*","matchCriteriaId":"7A80F519-9F50-4B94-ACBA-85479473C321"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.03.2:*:*:*:*:*:*:*","matchCriteriaId":"BE7905C1-3FD3-4C2E-82C0-E7F8BE8186B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.12:*:*:*:*:*:*:*","matchCriteriaId":"E34B0D90-EE9F-4804-A6F5-62AB534386A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.08.20:*:*:*:*:*:*:*","matchCriteriaId":"28C29F2E-305B-46AF-BE73-9E313B9BE749"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2007.10.30:*:*:*:*:*:*:*","matchCriteriaId":"8A0BB4C4-EAEE-4EBF-BE94-E8EC91A2D939"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.01.20:*:*:*:*:*:*:*","matchCriteriaId":"1224A345-6C0A-4410-B206-E52F7E20E5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.03.26:*:*:*:*:*:*:*","matchCriteriaId":"48DFC588-AFDF-47F1-A58E-DD50904AA98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportbug-ng:reportbug-ng:0.2008.03.28:*:*:*:*:*:*:*","matchCriteriaId":"AEF6881A-8C64-4893-938E-195C2B0CC0AE"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43001","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2231","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to execute SQL commands and read table information via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Slashdot Like Automated Storytelling Homepage (Slash) (También conocido como Slashcode) R_2_5_0_94 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección y leer información de las tablas a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slashcode.com:slash:*:*:*:*:*:*:*:*","versionEndIncluding":"r_2_5_0_94","matchCriteriaId":"68A26183-2087-462B-BE7E-8BB15511B105"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484499","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121258731028005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121260265427728&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31691","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3923","source":"cve@mitre.org"},{"url":"http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm?r1=1.223&r2=1.225","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29548","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020206","source":"cve@mitre.org"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/04/1950244&tid=4","source":"cve@mitre.org"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/07/2314232","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42880","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121258731028005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121260265427728&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm?r1=1.223&r2=1.225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/04/1950244&tid=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/07/2314232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2232","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname."},{"lang":"es","value":"La función expand_template en afuse.c en afuse 0.2 que permite a los usuarios locales obtener privilegios a través de metacaracteres de consola en una ruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:afuse:afuse:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1AF94561-831A-4533-8CDC-C318424A6F62"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31086","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36358","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30245","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43834","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00921.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00947.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00921.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00947.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2233","sourceIdentifier":"cve@mitre.org","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors."},{"lang":"es","value":"El cliente en Openwsman 1.2.0 y 2.0.0, en configuraciones desconocidas, permite a servidores Openwsman remotos repetir sesiones SSL mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openwsman:openwsman:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"741FCF27-778E-4C46-B6DF-1ADC88F546A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwsman:openwsman:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"63E09DCA-2B81-4A7A-9694-B616647008AD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31429","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30694","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2397","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2234","sourceIdentifier":"cve@mitre.org","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted \"Authorization: Basic\" HTTP header."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Openwsman 1.2.0 y 2.0.0 permiten a atacantes remotos ejecutar código de su elección mediante una cabecera HTTP \"Autorización: Básica (Authorization: Basic)\" manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openwsman:openwsman:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"741FCF27-778E-4C46-B6DF-1ADC88F546A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwsman:openwsman:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"63E09DCA-2B81-4A7A-9694-B616647008AD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000034.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31410","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31942","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496528/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30694","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0015.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2397","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2624","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44481","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44484","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496528/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2235","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN."},{"lang":"es","value":"OpenSC anterior a 0.11.5 usa permisos débiles (archivo de control de información ADMIN de 00) para el directorio 5015 en smart cards y crypto tokens USB ejecutándose Siemens CardOS M4, que permite a atacantes próximos físicamente cambiar el PIN."}],"vendorComments":[{"organization":"Siemens","comment":"Siemens has analyzed this report and states that no security breach can be found in the Siemens CardOS M4 itself and it thus does not relate to any Siemens component. The reported vulnerability (caused by inappropriate personalization) is due to an issue in the OPENSC middleware detailed information can be found under http://www.opensc-project.org/security.html. \n\nTherefore, Siemens recommends all customers and partners using OPENSC to use either the current version 0.11.5 of OPENSC in which this vulnerability is fixed or to use the bug fix suggested under http://freshmeat.net/articles/view/3333/. \n\nWe hope that we could help you with this recommendation. \n\nIf you have further questions, please contact the Siemens CardOS hotline under:\n\nscs-support.med@siemens.com\n\nPhone: +49 89 636 35996 (Mo.-Fr. 9:00-17:00 German time)\n\n","lastModified":"2008-08-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:siemens:cardos:m4:*:*:*:*:*:*:*","matchCriteriaId":"FEF8B710-EAF0-4381-B1C5-B2EAA91737DE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7D734B35-BA7F-4219-98DA-FCD55E5A37C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"349D5BCA-885C-4948-838E-E3904E49598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"471DBF4E-54B8-4776-A0BA-0F65FE02192E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EA4321E6-1D08-489C-948F-2673C30D762C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8498096A-19A9-4C09-99C3-CC1C45D6BA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"5028CF13-2807-4813-A542-A1CD6E735CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8FD4CB51-068C-4AD2-94AC-59DE20A2AB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2D8CA0B8-AC3B-4D0F-854D-EDF285EC01CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"931CE287-97AF-4B73-BA57-FB9B9AAA7016"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2BA979A3-A34F-4813-8489-C1985E22A398"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6A64E85D-B1A7-48FB-8438-8173249ED817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"940151B8-6466-43D7-A7EB-A28F13DA5B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.7:b:*:*:*:*:*:*","matchCriteriaId":"0BE84E1D-F765-49E6-84E2-6831A535B67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.7:d:*:*:*:*:*:*","matchCriteriaId":"CE85FABD-20F0-4308-B240-0E460E85CA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"3752BA88-CA7A-4B79-96C4-A5EC9A6C2AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"B093D7C9-242E-4CC7-9971-71D9AE19A7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"353AFA23-88C0-45AA-B9EF-EF7A4DC6AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"EA2024C5-238A-4734-B8C6-D4F99EEFBC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"DF611D89-FA24-4421-A8A8-5290629C81D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.3:pre3:*:*:*:*:*:*","matchCriteriaId":"0ECCFF79-6515-42F8-B986-4C06BE1F79D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.4:*:*:*:*:*:*:*","matchCriteriaId":"A74B19CB-8AFB-4A07-9A84-063BFF47E089"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31330","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31360","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32099","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34362","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-09.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:183","source":"cve@mitre.org"},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html","source":"cve@mitre.org"},{"url":"http://www.opensc-project.org/security.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30473","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44140","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2008/dsa-1627","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2008-July/000020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opensc-project.org/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2008/dsa-1627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2236","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T15:07:10.603","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en blosxom.cgi en Blosxom versiones anteriores a v2.1.2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"flav\" (variable \"flavour\").\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"9E3A6413-5CC2-4EFA-8851-A6F874798691"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"33DF0C2A-B10B-4893-A0EB-A7A8CDFF197A"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6C71E946-DDD0-463A-8EB2-674C3D8770F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80C82CC2-6E8D-414B-AD11-8078C0BD6803"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0:*:*:*:*:*:*:*","matchCriteriaId":"91E96923-1E2D-4D35-9F98-35750B222960"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0-3:*:*:*:*:*:*:*","matchCriteriaId":"F7BB3CB8-87D6-4D34-98A4-04E8D0592153"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0-4:*:*:*:*:*:*:*","matchCriteriaId":"9862DB91-E47D-4ABC-B5B6-5150BF8012C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A56B2824-8E8E-449D-9339-B2E0A8A734DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29604CC5-EB56-451A-8003-9A0C263B782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"69CBED7A-933C-4A74-A029-171EF2B166F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E6211F6-E7D6-43A3-BDD4-6961011CC044"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E9ABD2A2-DADD-4828-AE2C-3CA6783210C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7B7A628E-DF1A-4108-AC0B-1E38B0FC1268"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C82D2040-54E6-41E4-96C5-27108D1A12BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:blosxom:blosxom:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0786AA-42CA-4BFB-BD8B-0726E687DECE"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN03300113/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000073.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=630149","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45600","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN03300113/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=630149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2237","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:00:00.873","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en OpenOffice.org (OOo) v2.x anterior a v2.4.2 permite a atacantes remotos ejecutar código de su elección mediante un archivo WMF manipulado asociado con un documento StarOffice/StarSuite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","matchCriteriaId":"88C01AD4-CD39-4DAA-BB5A-42094938D9B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"6EC7A0A3-D6E3-4B74-BC19-DF2766029051"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45DD57AC-8CA4-48DB-90F9-2D7260AB7650"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C065AAB-58E3-4312-AD74-A3E103AC73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4B493F3-833A-47E9-AB60-BE2D635EF8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"54678E59-299F-4236-86C4-95F5B68C11D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BC884B82-CEF3-47B7-A578-B502AD52DBF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*","matchCriteriaId":"E51167FA-13DD-46DE-AC16-A2AB2A315110"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:*","matchCriteriaId":"F8F3702B-7F00-48A2-90A7-7FADF083A523"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32463","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32676","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33140","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-13.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1661","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2008-2237.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0939.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31962","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021120","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-677-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-677-2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2947","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46165","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242627-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2008-2237.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0939.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-677-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-677-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2238","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:00:00.903","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en OpenOffice.org (OOo) v2.x anterior a v2.4.2 permite a atacantes remotos ejecutar código de su elección mediante un archivo EMF manipulado con un documento StarOffice/StarSuite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","matchCriteriaId":"88C01AD4-CD39-4DAA-BB5A-42094938D9B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"6EC7A0A3-D6E3-4B74-BC19-DF2766029051"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45DD57AC-8CA4-48DB-90F9-2D7260AB7650"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C065AAB-58E3-4312-AD74-A3E103AC73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4B493F3-833A-47E9-AB60-BE2D635EF8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"54678E59-299F-4236-86C4-95F5B68C11D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BC884B82-CEF3-47B7-A578-B502AD52DBF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*","matchCriteriaId":"E51167FA-13DD-46DE-AC16-A2AB2A315110"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:*","matchCriteriaId":"F8F3702B-7F00-48A2-90A7-7FADF083A523"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32463","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32676","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33140","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-13.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1661","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2008-2238.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0939.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31962","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021121","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-677-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-677-2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2947","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3103","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3153","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46166","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://neowiki.neooffice.org/index.php/NeoOffice_2.2.5_Patch_3_New_Features#Security_fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243226-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openoffice.org/security/cves/CVE-2008-2238.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0939.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-677-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-677-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00923.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2240","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el Servicio Web Server en IBM Lotus Domino anterior a 7.0.3 FP1 y 8.x anterior a 8.0.1, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) o la posibilidad de ejecutar código de su elección a través de una cabecera HTTP \"Accept-Languaje\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5:*:*:*:*:*:*:*","matchCriteriaId":"53D6F4E6-2C8A-40B6-9DB9-38E15D2AFEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*","matchCriteriaId":"6C3DB9C3-4DAC-4663-9097-95600E13FCDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE8510F6-D054-488E-99E9-A58272C47AA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30310","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303057","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.attrition.org/pipermail/vim/2008-May/001988.html","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-May/001989.html","source":"cve@mitre.org"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_ibm-lotus-domino-accept-language-stack-overflow_2008-05-20.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29310","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020098","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1597","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42552","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.attrition.org/pipermail/vim/2008-May/001988.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-May/001989.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_ibm-lotus-domino-accept-language-stack-overflow_2008-05-20.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2241","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via directory traversal sequences in unspecified input fields, which are used in log messages.  NOTE: this can be leveraged for code execution in many installation environments by writing to a startup file or configuration file."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en caloggerd de BrightStor ARCServe Backup 11.0, 11.1 y 11.5, permite a atacantes remotos añadir datos a archivos arbitrariamente a través de secuencias de salto de directorio en archivos de entrada no especificados, que son utilizados en mensajes de log. NOTA: puede aprovecharse para ejecución de código en muchos entornos de instalación escribiendo en un fichero archivo de inicio o en un archivo de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*","matchCriteriaId":"E37161BE-6AF5-40E0-BD63-2C17431D8B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*","matchCriteriaId":"477EE032-D183-478F-A2BF-6165277A7414"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*","matchCriteriaId":"A8781759-7B4C-47C3-8A60-8CA5520360C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*","matchCriteriaId":"9190C236-0BBF-47CF-94F5-F2408D33C5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:r11.0:*:*:*:*:*:*:*","matchCriteriaId":"1812E8C2-895E-4179-B313-22C8EB527544"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_premium:*:*:*:*:*","matchCriteriaId":"1366038C-7552-44C7-BB01-316AA0D088F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_small_business_server_standard:*:*:*:*:*","matchCriteriaId":"D24EEBF9-8301-4E8E-8AE1-E41774EDEFD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30300","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492266/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492274/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29283","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020043","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1573/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-027/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42524","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492266/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492274/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1573/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-027/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-2242","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by a stack-based buffer overflow via a long parameter to the xdr_rwsstring function."},{"lang":"es","value":"Múltiples desbordamientos de buffer de las funciones xdr en el servidor de CA BrightStor ARCServe Backup 11.0, 11.1 y 11.5, permiten a atacantes remotos ejecutar código arbitrariamente, tal y como se ha demostrado mediante un desbordamiento de búfer basado en pila a través de un parámetro largo de la función xdr_rwsstring."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*","matchCriteriaId":"E37161BE-6AF5-40E0-BD63-2C17431D8B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*","matchCriteriaId":"477EE032-D183-478F-A2BF-6165277A7414"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*","matchCriteriaId":"9190C236-0BBF-47CF-94F5-F2408D33C5CD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30300","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492274/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492291/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29283","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020044","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1573/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-026/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42527","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492274/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492291/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1573/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-026/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=176798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2244","sourceIdentifier":"secure@microsoft.com","published":"2008-07-09T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc."},{"lang":"es","value":"Microsoft Office Word 2002 SP3 permite a atacantes remotos ejecutar código de su elección a través de ficheros .doc que contienen datos mal formados, tal y como se realiza en exploits públicos desde Julio del 2008 y como se demuestra en adjuntos .doc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"}]}]}],"references":[{"url":"http://blogs.technet.com/msrc/archive/2008/07/08/vulnerability-in-microsoft-word-could-allow-remote-code-execution.aspx","source":"secure@microsoft.com"},{"url":"http://isc.sans.org/diary.html?storyid=4696","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/30975","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/953635.mspx","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30124","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020447","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2028","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43663","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5897","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/msrc/archive/2008/07/08/vulnerability-in-microsoft-word-could-allow-remote-code-execution.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=4696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/953635.mspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2245","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM) component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted image file."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la función InternalOpenColorProfile en la biblioteca mscms.dll en Windows Image Color Management System (MSCMS) de Microsoft en el componente Image Color Management (ICM) sobre Windows 2000 SP4, XP SP2 y SP3 y Server 2003 SP1 y SP2, permiten a los atacantes remotos ejecutar código arbitrario por medio de un archivo de imagen diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=742","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31385","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/309739","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30594","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020675","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2350","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-046","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5923","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6732","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/309739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2246","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Microsoft Windows Vista SP1 y Server 2008 no importan de forma apropiada la política IPsec por defecto de un dominio Windows 2003 Server, lo que evita que las reglas de IPsec puedan ser reforzadas y permite a los atacantes que eviten las restricciones pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31411","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30634","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020678","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2351","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-047","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6060","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2247","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified e-mail fields, a different vulnerability than CVE-2008-2248."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en Outlook Web Access (OWA) para Exchange Server versión 2003 SP2,  permite a atacantes remotos inyectar script web o HTML arbitrario por medio de campos de correo electrónico no especificados, una vulnerabilidad diferente de CVE-2008-2248."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"71A2E549-5F21-4842-BEB3-380CD4029C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:-:*:*:*:*:*:*","matchCriteriaId":"1C02EC1D-5707-4F3F-BA98-6B27BA8C5D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"9C218952-1BB8-4915-B31F-9D23543FC83E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30964","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30130","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020439","source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["Not Applicable","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2021/references","source":"secure@microsoft.com","tags":["Permissions Required"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-039","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43328","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5354","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2021/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2248","sourceIdentifier":"secure@microsoft.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247."},{"lang":"es","value":"La vulnerabilidad de tipo Cross-site scripting (XSS) en Outlook Web Access (OWA) para Exchange Server 2003 SP2, permite a atacantes remotos inyectar script web o HTML por medio de HTML no especificado, una vulnerabilidad diferente a la CVE-2008-2247."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"71A2E549-5F21-4842-BEB3-380CD4029C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:-:*:*:*:*:*:*","matchCriteriaId":"1C02EC1D-5707-4F3F-BA98-6B27BA8C5D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"9C218952-1BB8-4915-B31F-9D23543FC83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","matchCriteriaId":"3AACB4F5-B05A-4A5F-9062-DEAE75C0CBAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30964","source":"secure@microsoft.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30078","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020439","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"secure@microsoft.com","tags":["Not Applicable","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2021/references","source":"secure@microsoft.com","tags":["Permissions Required"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-039","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43329","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5695","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-190A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2021/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2249","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka \"GDI Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en GDI en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 permite a atacantes remotos ejecutar código de su elección mediante una cabecera malformada en un fichero WMF manipulado, lo que dispara un desbordamiento de búfer, alias \"Vulnerabilidad de Desbordamiento de Entero en GDI\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:x64:*:*:*:*:*:*","matchCriteriaId":"39956C56-FB39-485B-9BD6-B92807681676"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=762","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021365","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3383","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-071","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5984","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2250","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.647","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Window Creation Vulnerability.\""},{"lang":"es","value":"El kernel de Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1 y Server 2008 no valida correctamente las propiedades de ventana enviadas por una ventana padre a una hija durante la creación de una ventana nueva, lo que permite a usuarios locales obtener privilegios mediante una aplicación manipulada, también conocida como \"Windows Kernel Window Creation Vulnerability (Vulnerabilidad de Creación de Ventana en el Kernel de Windows)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*","matchCriteriaId":"59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32247","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31651","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021046","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2812","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45541","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45544","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5902","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2251","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.677","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that makes system calls within multiple threads, aka \"Windows Kernel Unhandled Exception Vulnerability.\" NOTE: according to Microsoft, this is not a duplicate of CVE-2008-4510."},{"lang":"es","value":"Vulnerabilidad de doble liberación en el núcleo en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 permite a usuarios locales conseguir privilegios a través de aplicaciones manipuladas que hacen llamadas al sistema dentro de múltiples hilos, también conocido como \"vulnerabilidad de Excepción no controlada del Núcleo de Windows\".\r\nNOTA: de acuerdo con Microsoft, esto no es un duplicado de CVE-2008-4510."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*","matchCriteriaId":"59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32247","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31653","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021046","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2812","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45542","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45544","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6010","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2252","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.693","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Memory Corruption Vulnerability.\""},{"lang":"es","value":"El kernel de Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1 y Server 2008 no valida correctamente los parámetros enviados por el modo usuario al kernel, lo que permite a usuarios locales obtener privilegios mediante una aplicación manipulada, también conocida como \"Windows Kernel Memory Corruption Vulnerability (Vulnerabilidad de Corrupción de Memoria del Kernel de Windows)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7B311834-DF02-4F7A-B960-E4C1C7519A39"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*","matchCriteriaId":"DBE4A4EA-A0DE-4FDE-B9EC-D8729E17A1F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7211B5C5-6B6E-4A33-88BC-1D64CD684204"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:x64:*","matchCriteriaId":"949AD335-71B5-4C93-8698-6C17119CE7A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"BADB0479-3E0E-4326-B568-9DBDCACF0B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32247","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31652","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021046","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2812","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45543","source":"secure@microsoft.com","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45544","source":"secure@microsoft.com","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2253","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:10:13.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/Bulletin/MS08-054.mspx\r\n\r\n\r\nSecurity updates are available from Microsoft Update, Windows Update, and Office Update. Security updates are also available from the Microsoft Download Center. You can find them most easily by doing a keyword search for \"security update.\r\n\r\n*Windows Server 2008 server core installation not affected. The vulnerability addressed by this update does not affect supported editions of Windows Server 2008 if Windows Server 2008 was installed using the Server Core installation option, even though the files affected by this vulnerability may be present on the system. However, users with the affected files will still be offered this update because the update files are newer (with higher version numbers) than the files that are currently on your system. For more information on this installation option, see Server Core. Note that the Server Core installation option does not apply to certain editions of Windows Server 2008; see Compare Server Core Installation Options.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka \"Windows Media Player Sampling Rate Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en Microsoft Windows Media Player 11, permite a atacantes remotos ejecutar código de su elección a través de un archivo \"audio-only\" manipulado cuyo origen del flujo es un Server-Side Playlist (SSPL) sobre Windows Media Server, también conocida como \"Vulnerabilidad Windows Media Player Sampling Rate.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*","matchCriteriaId":"B27BB8B0-BC24-4A3F-A18B-63D57AB4799B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:x64:*","matchCriteriaId":"70865C35-CABD-4731-8043-BF358E0EFC7F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:*:*:*:gold:*:x64:*","matchCriteriaId":"5DF33FF8-899B-40B2-AF84-E37D8CC6B422"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp2:*:*:pro:*:x64:*","matchCriteriaId":"97A263BB-2103-4047-A8AB-1AB46EC73120"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30550","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020831","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2522","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-054","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5615","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2254","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, aka \"HTML Object Memory Corruption Vulnerability.\""},{"lang":"es","value":"Internet Explorer de Microsoft versiones 6 y 7, accede a la memoria no inicializada, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo) y ejecutar código arbitrario por medio de vectores desconocidos, también se conoce como \"HTML Object Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31375","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30614","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020674","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5820","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2255","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, a different vulnerability than CVE-2008-2254, aka \"HTML Object Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 5.01, 6 y 7 accede a memoria no inicializada, lo que permite a atacantes remotos provocar una denegación de servicio (caída) y ejecutar código de su elección mediante vectores desconocidos, una vulnerabilidad distinta a CVE-2008-2254, también conocida como \"HTML Object Memory Corruption Vulnerability (Vulnerabilidad de Corrupción de Memoria de Objeto HTML)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31375","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020674","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5602","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2256","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 6, and 7 does not properly handle objects that have been incorrectly initialized or deleted, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 5.01, 6 y 7 no gestiona correctamente objetos que han sido inicializados o borrados incorrectamente, lo que permite a atacantes remotos provocar una denegación de servicio (caída) y ejecutar código de su elección mediante vectores desconocidos, también conocido como \"Uninitialized Memory Corruption Vulnerability (Vulnerabilidad de Corrupción de Memoria No Inicializada)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31375","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30611","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020674","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5366","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2257","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object \"appended in a specific order,\" aka \"HTML Objects Memory Corruption Vulnerability\" or \"XHTML Rendering Memory Corruption Vulnerability,\" a different vulnerability than CVE-2008-2258."},{"lang":"es","value":"Internet Explorer de Microsoft versiones 5.01, 6 y 7, accede a la memoria no inicializada en determinadas condiciones, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo) y ejecutar código arbitrario por medio de vectores relacionados con un objeto de documento \"appended in a specific order\", también se conoce como \"HTML Objects Memory Corruption Vulnerability\" o \"XHTML Rendering Memory Corruption Vulnerability\", una vulnerabilidad diferente de CVE-2008-2258."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31375","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495430/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30613","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020674","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-050/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5266","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495430/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-050/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2258","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object \"appended in a specific order\" with \"particular functions ... performed on\" document objects, aka \"HTML Objects Memory Corruption Vulnerability\" or \"Table Layout Memory Corruption Vulnerability,\" a different vulnerability than CVE-2008-2257."},{"lang":"es","value":"Internet Explorer de Microsoft versiones 5.01, 6 y 7, accede a la memoria no inicializada en determinadas condiciones, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo) y ejecutar código arbitrario por medio de vectores relacionados con un objeto de documento \"appended in a specific order\" con \"particular functions ... performed on\", también se conoce como \"HTML Objects Memory Corruption Vulnerability\" o \"Table Layout Memory Corruption Vulnerability\", una vulnerabilidad diferente de CVE-2008-2257."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31375","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495431/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30610","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020674","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-051/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6025","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495431/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-051/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2259","sourceIdentifier":"secure@microsoft.com","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 does not perform proper \"argument validation\" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka \"HTML Component Handling Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 6 y 7 no hace una \"validación de argumentos\" correcta durante la previsualización de la impresión, lo que permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos, también conocida como \"HTML Component Handling Vulnerability (Vulnerabilidad de Gestión de Componentes HTML)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31375","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30612","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020674","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5913","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2263","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.  NOTE: linking.page.php is commonly renamed to link.php, links.php, etc."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en linking.page.php de Automated Link Exchange Portal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id.\r\nNOTA: linking.page.php es comúnmente renombrado a link.php, links.php, etc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsnx:automated_link_exchange_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"CFF0AD1D-F25D-4BBB-81C5-0585D828EBD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29205","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42401","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5611","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2264","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the msg_erreur parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de CyrixMED 1.4 permite a atacantes remotos inyectar web script o HMTL de su elección a través del parámetro msg_erreur.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos sólamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oued:cyrixmed:1.4:*:*:*:*:*:*:*","matchCriteriaId":"E4BB7CBE-D5B0-414F-A028-FF197A848FE1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29153","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42353","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2265","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the ida parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php de EMO Realty Manager permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emophp:emo_realty_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"3C33E5A5-C8F0-4C52-945F-A4EB88A45DB7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30245","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1525/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42404","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1525/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2266","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function.  NOTE: this may be a CVE-2004-2265 regression."},{"lang":"es","value":"En la biblioteca uulib/uunconc.c en UUDeview versión 0.5.20, como es usado en nzbget versiones anteriores a 0.3.0 y posiblemente en otros productos, permite a usuarios locales sobrescribir archivos arbitrarios por medio  de un ataque de tipo symlink sobre un nombre de archivo temporal generado por la función tempnam. NOTA: este puede ser una regresión de CVE-2004-2265."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nzbget:nzbget:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2","matchCriteriaId":"3F0E718E-22D6-4C6F-AD52-8ABEC11ADE9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nzbget:nzbget:0.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"9F64E6FB-0130-468F-B4CD-40980F72CAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nzbget:nzbget:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6F0AB021-5192-41B7-AC3A-991EFF70D6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nzbget:nzbget:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"376DBF2C-76EC-4B01-82B6-C6178254F764"},{"vulnerable":true,"criteria":"cpe:2.3:a:nzbget:nzbget:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"707996F6-E50E-4D68-872E-8305E16D37DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nzbget:nzbget:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BD5DE978-1657-449A-9BFB-41CF18AB219A"},{"vulnerable":true,"criteria":"cpe:2.3:a:uudeview:uudeview:0.5.20:*:*:*:*:*:*:*","matchCriteriaId":"FD07DA0F-7E63-4166-A833-ED51DEFFC939"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200808-11.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/14/10","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/30/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29211","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42407","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200808-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/14/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/30/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2267","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, or (7) .jar, then accessing it via a direct request to the file in modules/FileManager/postlet/."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en javaUpload.php de Postlet en el módulo FileManager de CMS Made Simple 1.2.4 y versiones anteriores permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con un nombre finalizado en (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, o (7) .jar, entonces accede a través de una petición directa a el fichero en modules/FileManager/postlet/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms_made_simple:cms_made_simple:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A97D2BF2-A198-468B-9752-BF8C7A3E58A4"}]}]}],"references":[{"url":"http://blog.cmsmadesimple.org/2008/05/12/announcing-cms-made-simple-125/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30208","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-May/001978.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29170","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42371","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5600","source":"cve@mitre.org"},{"url":"http://blog.cmsmadesimple.org/2008/05/12/announcing-cms-made-simple-125/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-May/001978.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2268","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php.  NOTE: this is user-assisted because there is a delay and a notification before redirection occurs."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en interface/redirect.htm.php de Mjguest 6.7 GT Rev.01 permite a atacantes remotos ayudados por el usuario redireccionar usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro goto en una acción que redirecciona a mjguest.php. \r\nNOTA: esto es ayudado por el usuario porque sucede la redirección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdsjack:mjguest:6.7_gt_rev1:*:*:*:*:*:*:*","matchCriteriaId":"84D5BCF2-B2E5-4801-9F2A-750D414297C5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3872","source":"cve@mitre.org"},{"url":"http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491523/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492384/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42130","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492384/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2269","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastracker_admin cookie to TRUE."},{"lang":"es","value":"AustinSmoke GasTracker (AS-GasTracker) 1.0.0 permite a atacantes remotos evitar la autenticación y conseguir privilegios mediante el envío a la cookie gastracker_admin de TRUE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_ludlow:austinsmoke_gastracker:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FC2318B0-0884-4982-82F7-86ED5A0DD1AE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30266","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29224","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42435","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2270","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the (1) main_page_directory and (2) page_to_include parameters in template\\index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos en PHP en PHPWAY Kostenloses Linkmanagementscript permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) main_page_directory y (2) page_to_include de template\\index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpway:kostenloses_linkmanagementscript:*:*:*:*:*:*:*:*","matchCriteriaId":"C9214007-4EF4-49A2-BE98-D878EBF815C1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29234","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42446","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2271","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the \"access content\" permission to list tables and obtain session IDs from the database."},{"lang":"es","value":"El módulo Site Documentation Drupal 5.x versiones anteriores a 5.x-1.8 y 6.x versiones anteriores a 6.x-1.1 permite a usuarios remotos autenticados conseguir privilegios de otros usuarios utilizando el permiso \"acceso a contenidos\" de la lista de tablas y obtener la sesión IDs de una base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:site_documentation_project:site_documentation:*:*:*:*:*:drupal:*:*","versionStartIncluding":"5.x-1.0","versionEndExcluding":"5.x-1.8","matchCriteriaId":"66B50EBE-BEB7-4C31-845A-D8D0FA155348"},{"vulnerable":true,"criteria":"cpe:2.3:a:site_documentation_project:site_documentation:*:*:*:*:*:drupal:*:*","versionStartIncluding":"6.x-1.0","versionEndExcluding":"6.x-1.1","matchCriteriaId":"9F070B6A-E3F5-41DE-B93B-A4FA793F21D1"}]}]}],"references":[{"url":"http://drupal.org/node/258547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30257","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29242","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1541/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42453","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/258547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1541/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2272","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en la interfaz web de Aruba Mobility Controller versiones 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x y 3.3.1.x, permite a atacantes remotos inyectar script web o HTML arbitrarios por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"A9370CBF-36C3-4FF9-85BB-2FC76F903904"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:2.4.8:*:fips:*:*:*:*:*","matchCriteriaId":"F0D8A18D-85FB-4E55-91E6-3A61728610AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F024C347-E06C-49E5-89E7-BFD6E86625B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"09AEB099-80D8-46F9-ABAC-00CAAD2F0BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"46097FBB-3FAD-42CB-A31F-93E4684DB536"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"98FC75AA-54C5-46D5-B11B-E23F6B154214"},{"vulnerable":true,"criteria":"cpe:2.3:a:aruba_networks:aruba_mobility_controller:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FDE0E1C8-2329-4614-875B-B0955FA2B24A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-051408.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492113/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-051408.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492113/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2273","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente de autenticación TACACS  en Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x permite a usuarios remotos autenticados conseguir privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3","matchCriteriaId":"E079F26E-4778-467D-90CA-2CB352DDD0AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57570C0F-C6A2-45B2-AADE-F555E2C8630C"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.2:*:*:*:*:*:*:*","matchCriteriaId":"99F8E4DB-64D1-4668-A2B2-77AFDD79E689"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:arubanetworks:aruba_mobility__controller:*:*:*:*:*:*:*:*","matchCriteriaId":"5433365A-0E35-48E8-BB9E-74EBB0632131"}]}]}],"references":[{"url":"http://secunia.com/advisories/30262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-051408.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492113/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42434","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-051408.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492113/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2274","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulneranilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, y 2.5.0 to 2.5.9 para TYPO3 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E1D4AE1-F62C-4C17-858F-CE269BBF2203"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B69E-092D-4579-ADA0-9BB8FBFCAA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"85DDFF28-5B60-4757-853C-82B97C3744C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5D81DDE7-FD8F-4564-A808-4F4C22F1F1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"23615B6F-120A-4F4B-A6B9-01FD1794EFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"761F8A77-2E93-4116-8FF3-D1D6F8085248"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1F258019-4C83-4A28-8F47-5B0DEF788706"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"61B59628-6391-4ACC-9D43-52AA93F31CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4E0A8760-E098-4409-9FF0-13FE532A367B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B052AD1C-F293-4B5B-9A96-F527ED2E66B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2969BC82-0931-46F0-A005-F1C1C50DB330"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"9E222547-2B82-43EC-B80C-CA94815C6D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"E3290006-FA7B-49D0-B944-A32E7D454CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"2BB1C3C6-3855-4006-A20C-E499898BF8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1497C18C-18F9-433A-BF85-36FE1BDDE824"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"674FE3A7-1189-4F7A-864B-05CF3F2C1823"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"85BFBFC8-1573-44BD-8FD0-A7AF34819734"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"366F4DDF-D184-4D89-81E7-64FECB72F87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F3DE826E-1DA0-4EBC-AC04-F212EF01CAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"238E7EC9-5876-45D6-BACE-914C7D513587"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A879A171-CE7A-4759-BF3B-D33EE6061F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"60F64805-8FCA-4F22-9BCE-62B13D46481C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"EF57F551-000E-49D0-AEF3-816D677934AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"4C9BD2DB-E8AF-4175-808A-DD4562E38F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5EA47435-AC11-4D73-9C7A-6C59EED6611F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30275","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29239","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42443","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2275","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, y 2.5.0 to 2.5.9 para TYPO3 permite a atacantes remotos ejecutar código y borrar ficheros de su elección a través de vectores de ataque no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E1D4AE1-F62C-4C17-858F-CE269BBF2203"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B69E-092D-4579-ADA0-9BB8FBFCAA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"85DDFF28-5B60-4757-853C-82B97C3744C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5D81DDE7-FD8F-4564-A808-4F4C22F1F1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"23615B6F-120A-4F4B-A6B9-01FD1794EFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"761F8A77-2E93-4116-8FF3-D1D6F8085248"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1F258019-4C83-4A28-8F47-5B0DEF788706"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"61B59628-6391-4ACC-9D43-52AA93F31CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4E0A8760-E098-4409-9FF0-13FE532A367B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1497C18C-18F9-433A-BF85-36FE1BDDE824"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"674FE3A7-1189-4F7A-864B-05CF3F2C1823"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"85BFBFC8-1573-44BD-8FD0-A7AF34819734"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"366F4DDF-D184-4D89-81E7-64FECB72F87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F3DE826E-1DA0-4EBC-AC04-F212EF01CAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"238E7EC9-5876-45D6-BACE-914C7D513587"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A879A171-CE7A-4759-BF3B-D33EE6061F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"60F64805-8FCA-4F22-9BCE-62B13D46481C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"EF57F551-000E-49D0-AEF3-816D677934AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"4C9BD2DB-E8AF-4175-808A-DD4562E38F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sr_feuser_register_extension:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5EA47435-AC11-4D73-9C7A-6C59EED6611F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30275","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29239","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42445","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2276","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site request forgery  (CSRF) en el archivo manage_user_create.php en Mantis versión 1.1.1, permite a atacantes remotos crear nuevos usuarios administrativos por medio de un enlace diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matisbt:mantis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B7090297-3B82-4D20-A3E8-8B42E0B0A9C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121130774617956&w=4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31171","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31972","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=14963&release_id=595025","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1598/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42447","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5657","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00801.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00813.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121130774617956&w=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=14963&release_id=595025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1598/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00813.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2277","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.php de Feedback y Rating Script 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro listingid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsnx:feedback_and_rating_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5D5B6F7C-15D5-4D18-933D-3FF0F2FE3E91"}]}]}],"references":[{"url":"http://secunia.com/advisories/30267","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42428","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5614","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2278","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browseproject.php de Freelance Auction Script 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid en una acción pdetails."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freelanceauction:freelance_auction_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8A05BE32-D19E-4BCA-B9C6-4D3525735DD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29225","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42424","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5613","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2279","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table."},{"lang":"es","value":"Freelance Auction Script 1.0 almacena contraseñas de usuarios en texto plano en la tabla tbl_users, lo cual permite a atacantes conseguir privilegios mediante la lectura de la tabla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freelance_auction:freelance_auction_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5ED9770C-C627-4E86-853D-36E3D2380983"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42426","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5613","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2280","sourceIdentifier":"cve@mitre.org","published":"2008-05-16T12:54:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/index.php in Script PHP PicEngine 1.0 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro l.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptphp:picengine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B9E4C0E5-9E11-4F73-8090-4F6248F8B182"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29214","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29214/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42421","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29214/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2281","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluated by a resource script when a user prints this document."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica Print Table of Links de Internet Explorer 6.0, 7.0 y 8.0b permite a atacantes remotos asistidos por el usuario inyectar secuencias de comandos web o HTML en la Zona de Máquina Local mediante un documento HTML con un enlace que contiene secuencias JavaScript, que se evalúan por un script de recurso cuando un usuario imprime el documento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:8.0b:*:*:*:*:*:*:*","matchCriteriaId":"587DAAD1-F33D-41EB-B752-36B9D87FC19B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"}]}]}],"references":[{"url":"http://aviv.raffon.net/2008/05/14/InternetExplorerQuotPrintTableOfLinksquotCrossZoneScriptingVulnerability.aspx","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29217","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1529/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42416","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5619","source":"cve@mitre.org"},{"url":"http://aviv.raffon.net/2008/05/14/InternetExplorerQuotPrintTableOfLinksquotCrossZoneScriptingVulnerability.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1529/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2282","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the login_admin cookie to true."},{"lang":"es","value":"admin.php en Internet Photoshow e Internet Photoshow Special Edition (SE) permite a atacantes remotos evitar la autentificación poniendo la cookie login_admin a verdadero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_voecking:internet_photoshow:null:*:special_edition:*:*:*:*:*","matchCriteriaId":"632111AE-0409-4AC7-9FAD-93D274F963E7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29227","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42422","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5617","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2283","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEnhWMF methods in (a) the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll (aka IDAutomation Linear BarCode) 1.6.0.6, (b) the IDAuto.Datamatrix.1 ActiveX control in IDAutomationDMATRIX6.DLL (aka IDautomation Datamatrix Barcode) 1.6.0.6, (c) the IDAuto.PDF417.1 ActiveX control in IDAutomationPDF417_6.dll (aka IDautomation PDF417 Barcode) 1.6.0.6, and (d) the IDAuto.Aztec.1 ActiveX control in IDAutomationAZTEC.dll (aka IDautomation Aztec Barcode) 1.7.1.0."},{"lang":"es","value":"IDAutomation permite a atacantes remotos sobrescribir archivos de su elección mediante el argumento a los métodos (1) SaveBarCode y (2) SaveEnhWMF en (a) el control ActiveX IDAuto.BarCode.1 de IDAutomationLinear6.dll (también conocido como IDAutomation Linear BarCode) 1.6.0.6, (b) el control ActiveX IDAuto.Datamatrix.1 de IDAutomationDMATRIX6.DLL (también conocido como IDautomation Datamatrix Barcode) 1.6.0.6, (c) el control ActiveX IDAuto.PDF417.1 de IDAutomationPDF417_6.dll (también conocido como IDautomation PDF417 Barcode) 1.6.0.6 y (d) el control ActiveX IDAuto.Aztec.1 de IDAutomationAZTEC.dll (también conocido como IDautomation Aztec Barcode) 1.7.1.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idautomation:aztec_barcode:1.7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"50C5A34D-F83D-4E00-A0F1-76E26D6D3254"},{"vulnerable":true,"criteria":"cpe:2.3:a:idautomation:datamatrix_barcode:1.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA7EFE2C-520A-410D-9CB0-69E06DD44807"},{"vulnerable":true,"criteria":"cpe:2.3:a:idautomation:linear_barcode:1.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4851A4F5-D1BB-4799-BBB4-6CB92DA98A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:idautomation:pdf417_barcode:1.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EBC42FFA-661E-4F59-9F7E-A43DF18E0628"}]}]}],"references":[{"url":"http://secunia.com/advisories/30246","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29204","source":"cve@mitre.org"},{"url":"http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1210750552.ff.php&page=last","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42406","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5612","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1210750552.ff.php&page=last","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2284","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOX_APPLICATION_PATH parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto en PHP en fusebox5.php de Fusebox 5.5.1 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro FUSEBOX_APPLICATION_PATH. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fusebox:fusebox:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"057D1023-1E46-430B-93A8-50ED39F1BA60"}]}]}],"references":[{"url":"http://secunia.com/advisories/30178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42389","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2285","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool."},{"lang":"es","value":"La herramienta ssh-vulnkey en Ubuntu Linux 7.04, 7.10 y 8.04 LTS no reconoce líneas authorized_keys que contienen opciones, lo que facilita a atacantes remotos explotar CVE-2008-0166 adivinando una clave que no fue identificada por esta herramienta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubuntu:linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"56B142DE-FA94-4134-A615-E14BC4B640CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubuntu:linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"C70B23CB-E55B-435C-9925-F8DBDA6964DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubuntu:linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"993FA9E6-0ECB-443F-BD28-3FD5C594DFBC"}]}]}],"references":[{"url":"http://www.ubuntu.com/usn/usn-612-5","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42568","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-612-5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2286","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en axengine.exe en Symantec Altiris Deployment Solution 6.8.x y 6.9.x en versiones anteriores a 6.9.176 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de campos de cadena no especificado en un paquete de notificación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F838B26-BCE1-4663-95B1-B40BAB4F614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/45313","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30261","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/29552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492127/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492229/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29198","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020024","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-024/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42436","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/show/osvdb/45313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/29552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492127/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492229/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-024/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2287","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse."},{"lang":"es","value":"Symantec Altiris Deployment Solution 6.8.x y 6.9.x anterior a 6.9.176 no protege correctamente el directorio install, lo que podría permitir a usuarios locales obtener privilegios reemplazando un componente de una aplicación por un troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F838B26-BCE1-4663-95B1-B40BAB4F614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29197","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020024","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42442","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2288","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information."},{"lang":"es","value":"Symantec Altiris Deployment Solution 6.8.x y 6.9.x anterior a 6.9.176 no tiene suficiente control de acceso para eliminación y modificación de claves de registro, que permite a usuarios locales provocar una denegación de servicio u obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F838B26-BCE1-4663-95B1-B40BAB4F614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29196","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020024","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42441","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2289","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en un elemento tooltip en Symantec Altiris Deployment Solution 6.8.x y 6.9.x anterior a 6.9.176 permite a usuarios locales obtener privilegios mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D8B38C75-7D5A-47ED-A59D-2E5798325C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.5.248:*:*:*:*:*:*:*","matchCriteriaId":"FF1EB7F9-0268-4969-A907-D6859962CE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.5.299:*:*:*:*:*:*:*","matchCriteriaId":"C3AA5883-D184-490E-BFA4-3B329C1A843E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F838B26-BCE1-4663-95B1-B40BAB4F614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.378:*:*:*:*:*:*:*","matchCriteriaId":"57F30D89-6939-4BE7-B1FA-2F3C3CD6989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8.380.0:*:*:*:*:*:*:*","matchCriteriaId":"1BE8C69C-6604-4244-9634-D8D1CE2B3AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8_sp1:*:*:*:*:*:*:*","matchCriteriaId":"38FC8F7A-0730-4386-A54E-579CFC8481BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8_sp2:*:*:*:*:*:*:*","matchCriteriaId":"2D1295BD-1A1E-43EF-B99A-44D45051B41C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*","matchCriteriaId":"BA744B2A-B81E-4E97-A720-307041478B97"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29218","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020024","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42440","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2290","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la interfaz de usuario Agent de Symantec Altiris Deployment Solution 6.8.x y 6.9.x anterior a 6.9.176 permite a usuarios locales obtener privilegios mediantes vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F838B26-BCE1-4663-95B1-B40BAB4F614E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29194","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020024","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42438","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2291","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials."},{"lang":"es","value":"axengine.exe en Symantec Altiris Deployment Solution 6.8.x y 6.9.x en versiones anteriores a 6.9.176 genera credenciales con un sal fijado o sin sal, lo que hace que sea más fácil para atacantes remotos adivinar las credenciales de dominio cifradas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*","versionStartIncluding":"6.9","versionEndExcluding":"6.9.176","matchCriteriaId":"EA261C52-F28F-4815-B7E4-A32CCAD4E976"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:-:*:*:*:*:*:*","matchCriteriaId":"5327C051-309B-4E80-B96F-6F71C0294C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*","matchCriteriaId":"A1363995-0647-4C83-B3DA-360D5433DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*","matchCriteriaId":"9834A783-AB15-489F-A146-0D0D5A9DB5E1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30261","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.insomniasec.com/advisories/ISVA-080516.2.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492128/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/492228/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29199","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020024","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-025/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42437","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122167472229965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.insomniasec.com/advisories/ISVA-080516.2.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492128/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/492228/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.05.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1542/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-025/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2292","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP)."},{"lang":"es","value":"Desbordamiento de búfer en la función __snprint_value de snmp_get en Net-SNMP 5.1.4, 5.2.4 y 5.4.1, como se usa en SNMP.xs para Perl, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un OCTETSTRING grande en un par atributo valor (AVP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E5DDCC25-3B6A-4051-BE2A-5B8553B2D904"},{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7537C748-FACE-421C-95E0-3841EA1F87CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"282A2385-57A4-477D-BA0F-6C76751E945C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31155","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31351","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33003","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-02.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1826174&group_id=12694&atid=112694","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239785-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1663","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:118","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0529.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29212","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020527","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-685-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1528/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2141/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42430","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11261","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1826174&group_id=12694&atid=112694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239785-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0529.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-685-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1528/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2141/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2293","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1."},{"lang":"es","value":"admin.php en Multi-Page Comment System (MPCS) 1.0 y 1.1 permite a atacantes remotos evitar la autentificación y obtener privilegios poniendo la cookie CommentSystemAdmin a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tpvgames:mpcs:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB602202-ECB9-48A9-84DA-8F291969D5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tpvgames:mpcs:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BED9B1AA-F5E2-4681-A0F6-2477F0D4AC69"}]}]}],"references":[{"url":"http://secunia.com/advisories/30255","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29244","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42463","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2294","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for \"admin.\""},{"lang":"es","value":"Pet Grooming Management System 2.0 permite a atacantes remotos obtener privilegios mediante una petición directa a useradded.php con un nombre de usuarios modificado para \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mreaves:pet_grooming_management_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3B559428-C636-47CD-9B86-FCD19AD0C59D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29252","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42466","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5627","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2295","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the s_text parameter and other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en rg_search.php de Rgboard 3.0.12 y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro s_text y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rgboard:rgboard:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"E03D728F-C29F-485F-BFC0-A70758B34002"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29230","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42432","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2296","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter."},{"lang":"es","value":"Inclusión de archivos remotos en PHP en include/bbs.lib.inc.php de Rgboard 3.0.12 permite a atacantes remotos ejecutar código PHP arbitrario mediante un URL en el parámetro site_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rgboard:rgboard:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"3D5BDAEF-746F-4C47-B9AD-E7EE6B87AF51"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42431","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2297","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to \"<?php\" or \"?>\", which is present in the password file and probably passes an insufficient comparison."},{"lang":"es","value":"El archivo admin.php en Rantx permite a atacantes remotos evitar la autentificación y obtener privilegios estableciendo la cookie logininfo a \"<?php\" o \"?>\", lo que está en el archivo password y probablemente pase una comparación insuficiente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roticv:rantx:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1999CDAB-AECC-4706-B2C0-BD27CE46CD31"}]}]}],"references":[{"url":"http://secunia.com/advisories/30279","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29243","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42464","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2298","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1."},{"lang":"es","value":"Admin.php en Web Slider 0.6 permite a atacantes remotos evitar la autentificación y obtener privilegios poniendo la cookie admin a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:web_slider:0.6:*:*:*:*:*:*:*","matchCriteriaId":"A50BFB7E-83FC-4045-84BA-82800EB8F59F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42468","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5629","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2299","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions."},{"lang":"es","value":"Vulnerabilidad no especificada en SecureICA e ICA Basic encryption de Citrix Presentation Server 4.5 y anteriores, Access Essentials 2.0 y anteriores y Desktop Server 1.0 puede provocar que los clientes usen configuraciones de encriptado más débiles que las configuradas por el administrador, lo que podría permitir a los atacantes evitar las restricciones previstas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"BF5A8250-7C4A-4AEB-A850-3FF59D453F61"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"96365CE2-22BF-408E-939F-22FFABF63061"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08AEEC3F-E8DD-4535-98D2-4CFD83439A69"}]}]}],"references":[{"url":"http://secunia.com/advisories/30271","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX114893","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29233","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020026","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1531/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX114893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1531/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2300","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en Citrix Presentation Server 4.5 y anteriores, Citrix Access Essentials 2.0 y anteriores y Citrix Desktop Server 1.0 permite a atacantes autentificados remotamente acceder a escritorios no autorizados mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"96365CE2-22BF-408E-939F-22FFABF63061"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2FF9F197-991D-4920-BE9A-2E3495E76CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:1.5:*:*:*:*:*:*:*","matchCriteriaId":"21B89150-1806-481D-B0D9-FD37BA4798D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:citrix_presentation_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"8A571EDD-12ED-4398-8AED-5916A4580294"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08AEEC3F-E8DD-4535-98D2-4CFD83439A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_presentation_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"15137D61-8E46-4F46-B475-098429A79484"}]}]}],"references":[{"url":"http://secunia.com/advisories/30271","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX116941","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29232","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020027","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1530/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42439","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX116941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1530/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2301","sourceIdentifier":"cve@mitre.org","published":"2008-05-18T14:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) top_view.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Kostenloses Linkmanagementscript permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id a (1) view.php y (2) top_view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpway:kostenloses_linkmanagementscript:*:*:*:*:*:*:*:*","matchCriteriaId":"C9214007-4EF4-49A2-BE98-D878EBF815C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492111/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29236","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42455","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5623","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492111/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2302","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el formulario de login en la aplicación de administración en Django 0.91 anteriores a 0.91.2, 0.95 anteriores a 0.95.3 y 0.96 anteriores a 0.96.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través de la URI de ciertas peticiones previas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.91:*:*:*:*:*:*:*","matchCriteriaId":"B1CE5394-8883-47DB-9214-CCDD05811179"},{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.95:*:*:*:*:*:*:*","matchCriteriaId":"1D617048-648D-4EA1-A779-F6B157AB641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.96:*:*:*:*:*:*:*","matchCriteriaId":"3F54F75F-B2BC-4A44-B93B-DB75856BEC45"}]}]}],"references":[{"url":"http://secunia.com/advisories/30250","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30291","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020028","source":"cve@mitre.org"},{"url":"http://www.djangoproject.com/weblog/2008/may/14/security/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29209","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1618","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42396","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.djangoproject.com/weblog/2008/may/14/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2303","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307."},{"lang":"es","value":"Error de presencia de signo en entero en Safari de Apple iPhone anterior a 2.0 e iPod touch anterior a 2.0 , permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) mediante vectores que contienen índices de arrays JavaScript que provocan un acceso fuera de límites. Se trata de una vulnerabilidad diferente a CVE-2008-2307."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6430229D-ACD4-46AE-A6B5-95D3CC1AF514"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CA40173B-5F79-400E-9540-7E0BF7A78E35"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7A0EBA08-CE54-4AE3-9AED-514392372B7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E969C4E-45A5-4767-9959-A1AD2DE4E1C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43736","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2304","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string XML element that contains many characters."},{"lang":"es","value":"Desbordamiento de búfer en Apple Core Image Fun House 2.0 y anteriores en CoreImage Examples de Xcode tools anterior a 3.1, permite a atacantes con la ayuda del usuario ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) mediante un fichero .funhouse con un elemento de cadena XML que contiene muchos caracteres."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:core_image_fun_house:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"0A53780F-3B32-40A2-8EF8-643468C6ECD8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31060","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3988","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2352","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494230/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30189","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020472","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2093/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43733","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6043","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494230/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2093/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2305","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:00.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to \"PostScript font names.\""},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apple Type Services (ATS) en Apple Mac OS X 10.4.11 y 10.5 a la v10.5.4, permite a atacantes remotos ejecutar código de su elección a través de un documento que contiene un tipo de fuente manipulado, relacionado con \"PostScript font names.\" (Nombres de fuentes postscript)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020873","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45162","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2306","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files."},{"lang":"es","value":"Apple Safari anterior a la versión 3.1.2 en Windows no interpreta apropiadamente la configuración de zona de Internet Explorer URLACTION_SHELL_EXECUTE_HIGHRISK, que permite a los atacantes remotos omitir las restricciones de acceso previstas y forzar a un sistema cliente a descargar y ejecutar archivos arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.1","matchCriteriaId":"E618E967-379B-46AA-973E-EBBBBA44FDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30775","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/127185","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29835","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020329","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1882/references","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/127185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1882/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2307","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption."},{"lang":"es","value":"Una vulnerabilidad no especificada en WebKit en Apple Safari anterior a la versión 3.1.2, distribuida en Mac OS X anterior a la versión 10.5.4, e independiente para Windows y Mac OS X versión 10.4, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o ejecutar código arbitrario por medio de vectores que involucra a la matriz JavaScript que desencadena una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.3","matchCriteriaId":"44248469-2B47-43FC-9B9F-8DBDD6BC9F3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*","matchCriteriaId":"ED946D47-0E49-4A56-A509-72D936167D2D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*","matchCriteriaId":"6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*","matchCriteriaId":"666E67AD-6097-4D69-810D-2D4403A6B31D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.1","matchCriteriaId":"E618E967-379B-46AA-973E-EBBBBA44FDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30801","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT2092","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT2165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/361043","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29836","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020330","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1882/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00279.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT2092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT2165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/361043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1882/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00279.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2308","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information."},{"lang":"es","value":"Vulnerabilidad sin especificar en Alias Manager en Apple Mac OS X 10.5.1 y versiones anteriores sobre plataformas Intel, permite a usuarios locales obtener provilegios o provocar una denegación de servicio (caída de aplicación o corrupción de memoria) resolviendo un alias que contiene una información AFP manipulada del volumen montado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020390","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43474","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2309","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht or (2) .xhtm file, which does not trigger a \"potentially unsafe\" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en CoreTypes en Apple Mac OS X anterior a 10.5.4, permite a atacantes asistidos por el usuario ejecutar código de su elección a través de ficheros (1) .xht o (2) .xhtm, que no provocan un mensaje de advertencia \"potentially unsafe\" en (a) la característica de validación de descarga en Mac OS X 10.4 o (b) la característica Quarantine en Mac OS X 10.5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020391","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43493","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2310","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string in (1) C++ or (2) Java source code."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en c++filt en Apple Mac OS X 10.5 anterior a la v10.5.4, permite a atacantes asistidos por el usuario ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una cadena manipulada en código (1) C++ o (2) Java."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue does not affect the version of c++filt as shipped with binutils in Red Hat Enterprise Linux 3 or 4.  Although this bug is present in the version of c++filt as shipped with binutils in Red Hat Enterprise Linux 5, the format string protection from FORTIFY_SOURCE makes this unexploitable.","lastModified":"2008-07-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.3","matchCriteriaId":"44248469-2B47-43FC-9B9F-8DBDD6BC9F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.3","matchCriteriaId":"FFC987D4-6ABD-4EBB-8C09-CD26FF43033A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020392","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43494","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2311","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file."},{"lang":"es","value":"Ejecución de servicios en Apple MAc OS X anterior a 10.5, cuando Open Safe Files está activado, permite a atacantes remotos ejecutar código de su elección a través de un ataque de enlace simbólico, probablemente en relación con una condición de carrera y la ejecución automática de la descarga de un fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020393","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43495","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2312","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:00.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file."},{"lang":"es","value":"Network Preferences en Apple Mac OS X 10.4.11, almacena contraseñas PPP en texto planto en un fichero de \"lectura por todos\", lo que permite a usuarios locales obtener información sensible mediante la lectura de este fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45173","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2313","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory."},{"lang":"es","value":"Apple Mac OS X anterior a 10.5 usa permisos débiles para el directorio User Template, lo que permite a usuarios locales elevar sus privilegios insertando un troyano en este directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020394","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43496","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2314","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors."},{"lang":"es","value":"Dock en Apple Mac OS X 10.5 anterior a la versión  10.5.4, cuando las zonas activas de Exposé están habilitadas, permite a los atacantes físicamente próximos obtener acceso a una sesión bloqueada en (1) modo de suspensión o (2) modo de protector de pantalla a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020395","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43497","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2315","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."},{"lang":"es","value":"Múltiples desbordamientos de enteros en Python 2.5.2 y anteriores. Permite a atacantes dependientes de contexto a tener un impacto desconocido a través de vectores relacionados con el (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, y los módulos (6) stropmodule, (7) gcmodule, and (8) mmapmodule."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"9E0806D1-04EA-492A-8587-1886F47ECC80"}]}]}],"references":[{"url":"http://bugs.gentoo.org/attachment.cgi?id=159418&action=view","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=230640","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31332","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32793","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38675","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.gentoo.org/attachment.cgi?id=159418&action=view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=230640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-2316","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to \"partial hashlib hashing of data exceeding 4GB.\""},{"lang":"es","value":"Desbordamiento de entero en _hashopenssl.c en el módulo hashlib en Python 2.5.2 y anteriores. Podría permitir a atacantes dependientes del contexto vencer resúmenes criptográficos, relativos a \"comprobación parcial hashlib de datos que exceden de 4GB.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of python as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.  Affected module was only introduced upstream in python 2.5.","lastModified":"2008-08-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"9E0806D1-04EA-492A-8587-1886F47ECC80"}]}]}],"references":[{"url":"http://bugs.gentoo.org/attachment.cgi?id=159422&action=view","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=230640","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31332","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31473","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44174","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://bugs.gentoo.org/attachment.cgi?id=159422&action=view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=230640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2317","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590."},{"lang":"es","value":"WebCore en Safari de Apple no realiza apropiadamente garbage collection de elementos de documentos JavaScript, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de pila y bloqueo de aplicación) por medio de una referencia a la propiedad ownerNode de un objeto CSSStyleSheet copiado de un elemento STYLE, tal y como es demostrado originalmente en el iPhone anterior a la versión 2.0 y en el iPod touch anterior a la versión 2.0, de Apple, una vulnerabilidad diferente de CVE-2008-1590."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F382364-1B45-4C62-AB29-A20512AA77D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1:*:*:*:*:*:*:*","matchCriteriaId":"583ED2CE-1AD1-42A6-AB52-5C721E8C9385"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"F5CF94D4-F05A-4F5A-B778-7FD4154DAB6B"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7A0EBA08-CE54-4AE3-9AED-514392372B7D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"F675A1E4-BAB9-44D2-BBA0-FCBF8A8FE858"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494777/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-045/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43737","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494777/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2094/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-045/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2318","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs."},{"lang":"es","value":"La implementación WOHyperlink de WebObjects de Apple Xcode tools anterior a 3.1 , añade los IDs de sesiones locales a URLs no generadas en local, esto permite a atacantes remotos obtener información potencialmente sensible leyendo las solicitudes de estas URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B66C7172-0104-41B7-8291-62B7E72B3AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode:2.2:*:*:*:*:*:*:*","matchCriteriaId":"56E8F424-A343-414E-BA02-F70B20DE101A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"DD352A40-6418-4B0A-83E4-9A2BFFED2328"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54AC4EC4-B812-441D-B96D-51D713A99C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.0:*:*:*:*:*:*:*","matchCriteriaId":"34B7CE28-9AC7-492D-8544-1E69100E7C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.1:*:*:*:*:*:*:*","matchCriteriaId":"89F1A293-BD40-4C49-B162-B2EDF804DB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D5C480CA-0D92-4BC5-9C40-BB1F6B35F12F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B3F383E8-F88B-4FFC-8C3A-3F92AB5DE662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A155A7B8-F502-4FB3-8C8E-3802713F325B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FDE331D0-B883-4D87-8499-6EEE8C6792DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode_tools:2.5:*:*:*:*:*:*:*","matchCriteriaId":"6B198F65-77F2-4FD5-AE3F-3FC2C423F154"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31060","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2352","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30191","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020473","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2093/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43735","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2093/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2320","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en CarbonCore en Mac OS X versiones 10.4.11 y 10.5.4, iPhone OS versiones 1.0 hasta 2.2.1, y iPhone OS para iPod touch versiones 1.1 hasta 2.2.1, de Apple, permite a los atacantes dependiendo del contexto ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un nombre de archivo largo en la API de administración de archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:carboncore:*:*:*:*:*:*:*:*","matchCriteriaId":"3008C4EC-85B8-4707-BF23-6B7CFFEAE157"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495040/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30483","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30487","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020602","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44126","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495040/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2321","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unknown vectors involving \"processing of arguments.\""},{"lang":"es","value":"Vulnerabilidad no especificada en CoreGraphics de Apple Mac OS X 10.4.11 and 10.5.4, permite a atacantes ejecutar código arbitrariamente o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de vectores desconocidos que implican el \"procesado de argumentos\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:coregraphics:*:*:*:*:*:*:*:*","matchCriteriaId":"869701C0-E7C3-45A1-B887-6FA97089A9CB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30483","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30488","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020603","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44127","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2322","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a long Type 1 font, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de Entero en CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2 y 10.5.4, permite a atacantes remotos ejecutar código arbitrariamente o provocar una denegación de servicio (caída de aplicación) mediante un archvo PDF con una fuente Type 1 larga, la cual provoca un desbordamiento de búfer basado en monticulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:coregraphics:*:*:*:*:*:*:*:*","matchCriteriaId":"869701C0-E7C3-45A1-B887-6FA97089A9CB"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=730","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30489","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020604","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44128","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2323","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource consumption) via crafted textual content in messages."},{"lang":"es","value":"Vulnerabilidad no especificada de Data Detectors Engine en Apple Mac OS X 10.5.4, permite a los atacantes provocar una denegación de servicio (consumo de recursos) mediante una manipulación del texto contenido en los mensajes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:data_detectors_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"646985D2-46D9-4F54-8927-7DFBDB6D9706"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30490","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020606","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44130","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2324","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs."},{"lang":"es","value":"La herramienta Repair Permissions de Disk Utility en Apple Mac OS X 10.4.11, añade el bit setuid al archivo ejecutable emacs, lo cual permite a los usuarios locales obtener privilegios ejecutando comandos sin emacs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30492","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020605","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44132","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2325","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office file, related to insufficient \"bounds checking.\""},{"lang":"es","value":"QuickLook en Apple Mac OS X 10.4.11 y 10.5.4, permite a atacantes remotos ejecutar código arbitrariamente o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de Microsoft Office, relacionado con la \"comprobación de límite\" insuficiente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicklook:*:*:*:*:*:*:*:*","matchCriteriaId":"B6531E1C-C35A-494E-B287-843C0D7E8DAD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30493","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020607","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44135","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2326","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:10:25.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label."},{"lang":"es","value":"mDNSResponder de Bonjour Namespace Provider \r\nen Apple Bonjour para Windows versiones anteriores a la 1.0.5, permite a atacantes provocar una denegación de servicio (puntero NULO sin referencia y caída de aplicación) resolviendo un nombre de dominio .local manipulado que contiene una etiqueta larga.ñ"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:bonjour:1.0.4:unknown:windows:*:*:*:*:*","matchCriteriaId":"1ACABF55-DE3F-463A-A469-A76589C3AAB9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*","matchCriteriaId":"EAA86830-BEA8-4943-83EA-C267FA534223"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31822","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31091","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020845","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2524","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45005","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2327","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code."},{"lang":"es","value":"Múltiples desbordamientos de búfer en las funciones (1) LZWDecode, (2) LZWDecodeCompat y (3) LZWDecodeVector en el archivo tif_lzw.c en el decodificador LZW en LibTIFF versión 3.8.2 y anteriores, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de un archivo TIFF diseñado, relacionado con el manejo inapropiado del código CODE_CLEAR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.2","matchCriteriaId":"36B8B853-0FF0-4E2F-983D-683A0951CEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*","matchCriteriaId":"CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"261FAE51-5207-4136-9FFE-2330A281266C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B32C83B9-F7DA-450A-A687-9A73734CD712"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9485283A-B73E-4567-914A-42A86F5FFCB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"95892168-0FB6-4E3F-9303-2F9B3CF60D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A5021564-5E0A-4DDC-BC68-200B6050043E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"11C50750-FE1D-42BA-9125-7D8E872AA2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"19AA66E5-FDDD-4243-B945-DFEBDD25F258"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D2C8C550-3313-4266-B4B3-E9E9047CFE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"ABEEBA7B-81D5-4148-912B-9AD448BBE741"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"448555FE-8E91-4EA7-BA05-6915F5508319"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F2850FD9-8BE8-410E-8A24-28549DAACEB3"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234080","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31610","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31623","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31668","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31698","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31838","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security-tracker.debian.net/tracker/CVE-2008-2327","source":"cve@mitre.org"},{"url":"http://security-tracker.debian.net/tracker/DSA-1632-1","source":"cve@mitre.org"},{"url":"http://security-tracker.debian.net/tracker/DTSA-160-1","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-07.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265030-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3276","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1632","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:184","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0847.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0848.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0863.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496033/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30832","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020750","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-639-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458674","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11489","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5514","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00102.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00121.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security-tracker.debian.net/tracker/CVE-2008-2327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-tracker.debian.net/tracker/DSA-1632-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-tracker.debian.net/tracker/DTSA-160-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0847.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0848.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0863.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496033/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00121.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2329","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:00.960","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window."},{"lang":"es","value":"Directory Services en Mac OS X de Apple versiones 10.5 hasta 10.5.4, cuando es usado Active Directory, permite a los atacantes enumerar los nombres de usuario por medio de caracteres comodín (o wildcard) en la Ventana de Inicio de Sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020874","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45163","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2330","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:00.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an \"insecure file operation issue.\""},{"lang":"es","value":"slapconfig en Directory Services en Apple Mac OS X 10.5 a la v10.5.4, permite a usuarios locales seleccionar un fichero con permisos de lectura de salida en el que ha sido escrito la contraseña del servidor mediante el administrador de sistema OpenLDAP, relacionado con la función \"mkfifo\", también conocido como \"cuestión insegura de operación con fichero\"(insecure file operation issue)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020874","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45164","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2331","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator."},{"lang":"es","value":"Finder en Apple Mac OS X 10.5 a la 10.5.4 no actualiza adecuadamente los permisos en la ventana \"Get Info\" después de una operación \"Lock\" (bloqueada) que modifica los permisos de Sharing & Permissions en el sistema de ficheros, lo que permite a usuarios locales aprovechar permisos débiles que no han sido previstos por el administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45165","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2332","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted TIFF image."},{"lang":"es","value":"ImageIO en Apple Mac OS X  y 10.5 a la v10.5.4, permite a atacantes dependientes de contexto provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o ejecución de ficheros de su elección a través de una imagen TIFF manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3276","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020876","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3107","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45167","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2333","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados enl dap_test.cgi en Barracuda Spam Firewall (BSF) anteriores a 3.5.11.025, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través del parámetro \"email\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.11.020","matchCriteriaId":"BD01511D-F23B-4C4C-9CB6-BC8483DCAC96"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"1DDCA1D8-886C-405F-8BBF-50D4CC20BB3F"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"BE4584BC-B194-4848-8539-9A39D696C8C8"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"7A9DC6C5-D228-43AC-8ED1-5A7E5315E275"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"47F9E0B8-8BCF-4259-A415-909FD349DB2A"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.0.54:*:*:*:*:*:*:*","matchCriteriaId":"159185A2-272C-46EC-A96A-84FB80B6473E"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.01.001:*:*:*:*:*:*:*","matchCriteriaId":"4499AB68-D449-4A36-A243-F13F02C0EF95"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5BC3E5FA-1A08-4D4C-865E-547D50E21349"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*","matchCriteriaId":"E9E13260-BC29-45D9-98F3-0C2D7CF72A42"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.055:*:*:*:*:*:*:*","matchCriteriaId":"3DB02038-4858-4D43-9FB6-492E131227CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.15.026:*:*:*:*:*:*:*","matchCriteriaId":"FAA3E09E-6F3C-4ED9-AD6C-3F8938A629B2"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E5A431D3-D4D1-43F0-9D2F-C3D0CB58EA36"},{"vulnerable":true,"criteria":"cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.4.10.102:*:*:*:*:*:*:*","matchCriteriaId":"8F3314EF-568B-41C1-87F9-7A20DC6D3A09"}]}]}],"references":[{"url":"http://secunia.com/advisories/30362","source":"cve@mitre.org"},{"url":"http://www.barracudanetworks.com/ns/support/tech_alert.php","source":"cve@mitre.org"},{"url":"http://www.irmplc.com/index.php/168-Advisory-027","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492475/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29340","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020108","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1627/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.barracudanetworks.com/ns/support/tech_alert.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.irmplc.com/index.php/168-Advisory-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492475/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1627/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2334","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) forumid parameter to (a) admin/philboard_admin-forumedit.asp, (b) admin/philboard_admin-forum.asp, and (c) W1L3D4_foruma_yeni_konu_ac.asp; the (2) id parameter to (d) W1L3D4_konuoku.asp and (e) W1L3D4_konuya_mesaj_yaz.asp; and the (3) topic parameter to W1L3D4_konuya_mesaj_yaz.asp, different vectors than CVE-2008-1939, CVE-2007-2641, and CVE-2007-0920.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en W1L3D4 Philboard 0.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1)forumid en (a) admin/philboard_admin-forumedit.asp, (b) admin/philboard_admin-forum.asp y (c) W1L3D4_foruma_yeni_konu_ac.asp; el parámetro (2)id en (d) W1L3D4_konuoku.asp y (e) W1L3D4_konuya_mesaj_yaz.asp; y el parámetro (3)topic en to W1L3D4_konuya_mesaj_yaz.asp. Vectores diferentes de CVE-2008-1939, CVE-2007-2641 y CVE-2007-0920. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:philboard:0.5:*:*:*:*:*:*:*","matchCriteriaId":"E6CB7EF3-1C57-4F43-8814-07B6D9A0E5A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29229","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29229/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42452","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29229/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2335","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter.  NOTE: some of these details are obtained from third party information.  NOTE: it was later reported that 1.2.3 is also affected."},{"lang":"es","value":"Vulnerabilidad de XSS en search_results.php en Vastal I-Tech phpVID 1.1 y 1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parametro query. NOTA: algunos de estos detalles han sido obtenidos de información de terceros. NOTA: más tarde se informó que también se ve afectada la versión 1.2.3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:phpvid:1.1:*:*:*:*:*:*:*","matchCriteriaId":"465C4D44-E4C0-4662-A660-523EEFA115B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:phpvid:1.2:*:*:*:*:*:*:*","matchCriteriaId":"535CBED6-BFC6-42F4-BA3E-3967F344ED0E"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/65/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/45171","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/130755/Vastal-I-tech-phpVID-1.2.3-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/59","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30152","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tetraph.com/security/xss-vulnerability/vastal-i-tech-phpvid-1-2-3-multiple-xss-cross-site-scripting-security-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/27519","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29238","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2552","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42450","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6422","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/65/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/show/osvdb/45171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/130755/Vastal-I-tech-phpVID-1.2.3-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2015/Mar/59","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tetraph.com/security/xss-vulnerability/vastal-i-tech-phpvid-1-2-3-multiple-xss-cross-site-scripting-security-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/27519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2336","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en 68 Classifieds, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:68_classifieds:68_classifieds:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9FBADBBA-822F-41C2-9FB2-67B03647DBBC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29249","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42465","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5626","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2337","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot parameter to (b) popup/koment.php and (c) popup/opis.php in, different vectors than CVE-2006-3163."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL cuando las magic_quotes_gpc están desactivadas en IMGallery, permite a atacantes remotos ejecutar comandos de su elección a través del parámetro (kategoria) a (a) galeria.php; y el parámetro (2) id_phot en (b) popup/koment.php y (c) popup/opis.php, vectores diferentes de los del CVE-2006-3163."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imgallery:imgallery:2.5:*:*:*:*:*:*:*","matchCriteriaId":"89A3F6B6-4992-45B3-AE34-F1B2DDD9CC39"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29250","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42474","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2338","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin."},{"lang":"es","value":"Interspire ActiveKB 1.5 y versiones anteriores permiten a atacantes remotos obtener privilegios estableciendo la cookie de autorización a \"true\" cuando al acceder a scripts no especificados en /admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interspire:activekb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"1797B9C5-EAC0-4B41-9310-099AFC1EC47D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29226","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020035","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42427","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2339","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Turnkey Web Tools SunShop Shopping Cart 3.5.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"item\", vector diferentes de CVE-2008-2038, CVE-2007-4597 y CVE-2007-2549."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7D7B3FAF-32B7-4267-B5B1-D370BB97234F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30282","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3894","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492120/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29241","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492120/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2340","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid parameter to (d) list_tagitems.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en News Manager 2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro  (1) lang a (a) advsearch.php, (b) archive.php, y (c) index.php y del parámetro (2) pid a (d) list_tagitems.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:news_manager:news_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AB24054-C170-473B-9674-75701B597414"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29251","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42461","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2341","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the read_xml_include parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en ch_readalso.php en News Manager 2.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro read_xml_include."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avalonnet:news_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B7752E95-F17F-4838-BF17-71B57F267935"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29251","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42459","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2342","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en attachments.php en News Manager 2.0, permite a atacantes remotos leer ficheros de su elección a través de la secuencia .. (punto punto) el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:news_manager:news_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AB24054-C170-473B-9674-75701B597414"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29251","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42460","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2343","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect_str.php and (2) login/info.php."},{"lang":"es","value":"News Manager 2.0 permite a atacantes remotos evitar restricción y obtener información sensible a través de una petición directa a (1) db/connect_str.php y (2) login/info.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:news_manager:news_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AB24054-C170-473B-9674-75701B597414"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29251","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42462","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2344","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión  air_filemanager 0.6.0 y anteriores para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:air_filemanager:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"39E84195-5AD9-4686-8029-C65EB70EBF8F"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42448","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2345","sourceIdentifier":"cve@mitre.org","published":"2008-05-19T13:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to \"insufficient file filtering.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión air_filemanager 0.6.0 y anteriores para TYPO3, permite a atacantes remotos ejecutar código PHP de su elección  a través de vectores no especificados relativos a la \"Insuficiencia de filtrado de archivos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:air_filemanager:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.0","matchCriteriaId":"4E7690A9-4280-4BA7-A765-D53AF9E2782A"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42449","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080515-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2346","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AlkalinePHP 0.77.35 and earlier allows remote attackers to bypass authentication and gain administrative access by creating an admin account via a direct request to adduser.php."},{"lang":"es","value":"AlkalinePHP 0.77.35 y anteriores, permite a atacantes remotos evitar la autenticación y obtener acceso de administrador creando una cuenta de administrador a través de una petición directa a adduser.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkalinephp:alkalinephp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.77.35","matchCriteriaId":"C0AC01E7-815F-4CFB-B7DB-09DC782F93DE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29267","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42502","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5645","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2347","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to \"admin\" in a direct request to admin/addUser.php."},{"lang":"es","value":"MyPicGallery 1.0 permite a atacantes remotos evitar la autenticación de la aplicación y obtener acceso de administrador estableciendo  el parámetro userID a \"admin\" en una petición directa a admin/addUser.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mypicgallery:mypicgallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FDE7A4BE-53C5-460C-917D-5B9CBE1A20D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29272","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42507","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5650","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2348","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and exceed application quotas via a direct request to admin/adduser.php."},{"lang":"es","value":"MeltingIce File System 1.0 permite a atacantes remotos evitar la autenticación de la aplicación, crear nuevas cuentas de usuario y sobrepasar los límites de la aplicación mediante una petición directa a admin/adduser.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:meltingicefs:meltingice_file_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2B65497F-1EA9-496F-9CB2-B186599D8F9F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29271","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42503","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2349","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1."},{"lang":"es","value":"Zomplog 3.8.2 y anteriores permite a atacantes remotos obtener acceso de administrador creando una cuenta de administrador mediante una petición directa a install/newuser.php con el parámetro admin a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zomp:zomplog:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.2","matchCriteriaId":"705FEBE3-4726-4973-B98A-772AF159243C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30062/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42476","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5634","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30062/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2350","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en highlight.php de bcoos 1.0.9 hasta 1.0.13; permite a atacantes remotos leer ficheros de su elección mediante las secuencias (1) .. (punto punto) o (2) carpeta C: en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"804AE6B2-78AC-4F30-B32E-750DC34E65CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3149225-061C-4DD4-A8E2-AFC1EA346403"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"22C78428-E995-46A4-9AFA-7B91963B744F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2C0D78D1-7BAB-4B08-A761-73A91F557B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"6BC539C7-3ED6-4ABB-AECB-5FF1A09C31F9"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/05/bcoos-highlightphp-traversal-file.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29275","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42506","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/05/bcoos-highlightphp-traversal-file.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2351","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the (1) lang_id and (2) menu_id parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de CMS WebManager-Pro; permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) lang_id y (2) menu_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmanager-pro:cms_webmanager-pro:*:*:*:*:*:*:*:*","matchCriteriaId":"C7D48F6C-CF7F-4DC7-8394-6CFFE1C8CCD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1562/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42508","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1562/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2352","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Smeego 1.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en la cookie de idioma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smeego:smeego:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A938CBFB-7C6A-4609-8C63-B64C449D0CE3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30138","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492227/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29264","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1563/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42498","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492227/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1563/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2353","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin.php de GNU/Gallery 1.1.1.0 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnugallery:gnugallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1.0","matchCriteriaId":"BC0634C4-3D09-43DE-8CDF-8A5BC0D26B32"}]}]}],"references":[{"url":"http://secunia.com/advisories/30301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29270","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1560/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42501","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1560/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2354","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the data export function in testMaker before 3.0p10 allows test authors to obtain access to export data via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la función de exportación de datos (data export) de testMaker anterior a 3.0p10, permite a los autores test obtener acceso a los datos exportados a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0p10","matchCriteriaId":"61E65643-0031-4024-BAA3-28B24FB26BAA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30251","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=194778&release_id=599729","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29273","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=194778&release_id=599729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2355","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the msnum parameter in a coment event."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de WR-Meeting 1.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro msnum en un evento coment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wr-script:wr-meeting:1.0:*:*:*:*:*:*:*","matchCriteriaId":"03EB4F09-E194-407A-A66D-C3A27C29E851"}]}]}],"references":[{"url":"http://secunia.com/advisories/30296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29262","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1566/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42497","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1566/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2356","sourceIdentifier":"cve@mitre.org","published":"2008-05-20T17:20:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the post_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Archangel Weblog 0.90.02 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro post_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:archangelmgt:archangel_weblog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.90.02","matchCriteriaId":"E5780CD4-D3DA-4050-9A96-B84BE499B328"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29257","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42475","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2357","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record.  NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr."},{"lang":"es","value":"Desbordamiento de Búfer basado en pila de la función spot_redraw en split.c de mtr versiones anteriores a la 0.73, cuando se realiza una llamada a la función con la opción –p  (también conocida como --split), permite a atacantes remotos ejecutar código arbitrariamente a través de registros DNS PTR manipulados. NOTA: es discutible que esta es una vulnerabilidad de la función _name_ntop en resolv/ns_name.c de glibc cuyo parche correspondiente estaría en glibc; si así fuera, entonces esto no debería tratarse como una vulnerabilidad de mtr."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue does not affect the versions of mtr as shipped with Red Hat Enterprise Linux 4 or 5.\n\nFor Red Hat Enterprise Linux 2.1 and 3, this issue can only be exploited if an attacker can convince victim to use mtr to trace path to or via the IP, for which an attacker controls PTR DNS records. Additionally, the victim must run mtr in &quot;split mode&quot; by providing -p or --split\ncommand line options.  The Red Hat Security Response Team has therefore rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-06-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:*:*:*:*:*:*:*:*","versionEndIncluding":"0.72","matchCriteriaId":"03F4DF3D-5E0D-4D68-B462-30308E5E13A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.21:*:*:*:*:*:*:*","matchCriteriaId":"F7853B18-8111-4D6E-9A80-AB7AAB1D66AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.22:*:*:*:*:*:*:*","matchCriteriaId":"8E9ED651-D6AC-4948-9F02-D5E20F00F0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.23:*:*:*:*:*:*:*","matchCriteriaId":"4D1F6687-B716-4858-BE73-026BE69A0BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.24:*:*:*:*:*:*:*","matchCriteriaId":"F1FA88B7-0254-463D-8F53-06E3D0F94019"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.25:*:*:*:*:*:*:*","matchCriteriaId":"8B06FCDB-68D7-4A90-9B9D-E68C1988AE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.26:*:*:*:*:*:*:*","matchCriteriaId":"71958EE1-4E50-4D48-A44A-9BBDBC51BCFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.27:*:*:*:*:*:*:*","matchCriteriaId":"20EA1E63-4547-4341-8823-2150F1BDA9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.28:*:*:*:*:*:*:*","matchCriteriaId":"374B0A57-7231-403F-B339-1F0E8051E62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.29:*:*:*:*:*:*:*","matchCriteriaId":"42F67AEF-6500-4C93-94AA-996AAB9D7A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.30:*:*:*:*:*:*:*","matchCriteriaId":"8024A2B3-3F77-4090-91F7-F3D1F36C07B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.31:*:*:*:*:*:*:*","matchCriteriaId":"0171C37E-345A-4934-92FB-7527AAF0F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.32:*:*:*:*:*:*:*","matchCriteriaId":"2645AD6F-4219-42A1-AF41-D3DF3E00EC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.33:*:*:*:*:*:*:*","matchCriteriaId":"ECBB8635-988E-4C10-B48D-F01DD480D2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.34:*:*:*:*:*:*:*","matchCriteriaId":"C505F066-86C8-433D-BCEE-FBCC420F6B45"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.35:*:*:*:*:*:*:*","matchCriteriaId":"12E9959F-11DD-4AA2-960A-505486E313A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.36:*:*:*:*:*:*:*","matchCriteriaId":"102D8451-F90A-4DCF-BD67-D80EECBF6204"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.37:*:*:*:*:*:*:*","matchCriteriaId":"04EE1273-A619-4101-8998-5B93B89D0E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.38:*:*:*:*:*:*:*","matchCriteriaId":"0AF1F3A1-6078-413A-BCE1-6586AE39D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.39:*:*:*:*:*:*:*","matchCriteriaId":"EFE66E77-0054-44C5-93F8-F156C02F32C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.40:*:*:*:*:*:*:*","matchCriteriaId":"15895BE3-0E68-4BDD-9F91-E5CD0F889AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.41:*:*:*:*:*:*:*","matchCriteriaId":"CED7EB1A-43A1-40C8-BA1C-AE826986E89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.42:*:*:*:*:*:*:*","matchCriteriaId":"FC8D031C-EF4D-4909-AFB2-B388B463234D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.43:*:*:*:*:*:*:*","matchCriteriaId":"B3CCD558-3EB8-4541-8854-CFFE1BCE4A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.44:*:*:*:*:*:*:*","matchCriteriaId":"246C99CD-B83C-4918-8283-840CE0930ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.45:*:*:*:*:*:*:*","matchCriteriaId":"8F65329B-2CA9-483E-BD78-EF0EFEF6FBE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.46:*:*:*:*:*:*:*","matchCriteriaId":"167DDB18-E0FF-4FE0-9070-CBEEF4D00AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.47:*:*:*:*:*:*:*","matchCriteriaId":"6585D8B7-3BD9-4577-878D-5140C6EAD16D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.48:*:*:*:*:*:*:*","matchCriteriaId":"5F2B7CF7-11D0-42EC-908E-3AD686F918BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.49:*:*:*:*:*:*:*","matchCriteriaId":"CE6AFE6B-BAE2-43A0-A969-08A0D19CA3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.50:*:*:*:*:*:*:*","matchCriteriaId":"D9E93793-1883-4562-90AC-F054FC71F7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.51:*:*:*:*:*:*:*","matchCriteriaId":"A1624E70-8A0F-423A-8205-7C27260C9278"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.52:*:*:*:*:*:*:*","matchCriteriaId":"7E7AEC9D-210E-45D5-92E9-76502A4088F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.53:*:*:*:*:*:*:*","matchCriteriaId":"378C925D-E6B2-4569-825F-1F02A1C53E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.54:*:*:*:*:*:*:*","matchCriteriaId":"BFBDD8C1-A741-479F-A521-B5E990C83C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.55:*:*:*:*:*:*:*","matchCriteriaId":"A36351D6-635F-470C-B32A-AC0D81E4F6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.56:*:*:*:*:*:*:*","matchCriteriaId":"11C682D2-8708-449C-A195-72D609B55462"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.57:*:*:*:*:*:*:*","matchCriteriaId":"7EA9A3EE-3CC8-4154-AC61-DC92B2213C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.58:*:*:*:*:*:*:*","matchCriteriaId":"44DFA818-A31A-4D1F-8583-3BF9A8DBDE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.59:*:*:*:*:*:*:*","matchCriteriaId":"D99B8176-7A2D-4DF6-B9EF-9F6A681BCE66"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.60:*:*:*:*:*:*:*","matchCriteriaId":"EE1F33CC-1F45-439A-B082-639A1E4F8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.61:*:*:*:*:*:*:*","matchCriteriaId":"88E62548-9BC1-48B4-A6DC-CAF5E5802298"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.62:*:*:*:*:*:*:*","matchCriteriaId":"F3D7D899-02F5-4D56-875D-56252BA6228B"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.63:*:*:*:*:*:*:*","matchCriteriaId":"F5322BE5-43B4-48DA-826A-C82F78F4DE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.64:*:*:*:*:*:*:*","matchCriteriaId":"34BAFF2F-A106-47A6-8C9D-A5E0AB0F9320"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.65:*:*:*:*:*:*:*","matchCriteriaId":"6AA9702E-52A5-4AC3-B30B-CACEED6456F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.66:*:*:*:*:*:*:*","matchCriteriaId":"BFADC518-86EB-45EB-A65A-5065CF2984BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.67:*:*:*:*:*:*:*","matchCriteriaId":"FD3AA825-EC60-4B24-92B8-E5CB47460E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.68:*:*:*:*:*:*:*","matchCriteriaId":"C9FE1CCC-214B-421D-8A10-039BDDFB36CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.69:*:*:*:*:*:*:*","matchCriteriaId":"D480960D-56DF-4CD9-B088-54F5AD2EC3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.70:*:*:*:*:*:*:*","matchCriteriaId":"D5570E29-C4CE-4161-A91B-98D3CE63BA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.71:*:*:*:*:*:*:*","matchCriteriaId":"2CBB23A6-F7D8-482E-9411-BF152F68CBFF"}]}]}],"references":[{"url":"ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/May/0488.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30340","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30359","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3903","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1587","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:176","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492260/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29290","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42535","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2558","source":"cve@mitre.org"},{"url":"ftp://ftp.bitwizard.nl/mtr/mtr-0.73.diff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/May/0488.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/05/21/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492260/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2358","sourceIdentifier":"secalert@redhat.com","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information can be found at the following location:\r\n\r\nhttp://lists.debian.org/debian-security-announce/2008/msg00172.html","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en la función dccp_feat_change en el archivo net/dccp/feat.c en el subsistema Datagram Congestion Control Protocol (DCCP) en el kernel de Linux versión 2.6.18, y versiones 2.6.17 hasta 2.6.20, permite a los usuarios locales alcanzar privilegios por medio de una longitud de funcionalidad no válida, lo que conlleva a un desbordamiento de búfer en la región heap de la memoria."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0519.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30849","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30920","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1592","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:112","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0519.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29603","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020211","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447389","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43034","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9644","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2359","sourceIdentifier":"secalert@redhat.com","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8 lacks the USER=root directive, which allows local users of the workstation console to gain privileges and change the network configuration."},{"lang":"es","value":"La configuración predeterminada de consolehelper en system-config-network versiones anteriores a 1.5.10-1 en Fedora versión 8, carece de la directiva USER=root, lo que permite a los usuarios locales de la consola de la estación de trabajo alcanzar privilegios y cambiar la configuración de la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A211D52F-7305-457C-8155-1EAB48BA804C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"09C3F8C3-A036-43E8-A61C-CFA9293A122E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BA7DE87A-6FB9-4790-A030-C081797EDC9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B39845D3-6613-4DCE-82D9-15EAE5711C37"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A7CAC23E-3C38-4A99-97D2-A20670EB6786"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"06365D39-9EBE-4A08-890F-D06804675292"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2A7B65FB-0D99-4D79-BB52-249FB0C039BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"07B4E348-64D1-4ACE-A8C8-89359B28058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9EE402E4-3527-4BBE-AFE4-103FB93ED50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B8559FDD-C219-4B33-9A27-DAC9C3BF0647"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"778BA6A8-2248-4A95-BBF9-4CCE1354EC35"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1DFD179E-AFBB-4982-A4D5-C049459E48A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C984080-AFC5-4DD9-BF60-9CC6ABA61212"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"0CB334E5-41F8-4166-96EF-E77CA45B4D61"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedora_8:consolehelper:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"8450DA26-EEF5-43AB-BCEA-5E3E0BEA6D3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1B89C796-07A5-4B2C-8A3E-D2771D13DD92"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9632FAF4-9819-4B76-BB32-68EDBF0F03BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"89E20205-6680-479C-ADCC-8642137132D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"A15A9615-BB8D-4FFB-901F-B04263AC632B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.:*:*:*:*:*:*:*","matchCriteriaId":"82F0F091-6551-47AA-BF78-7635ECC7088A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A3680916-6519-4B47-AE1B-CA6DCE88C931"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B0B42C1A-0040-4618-A6BA-64BB81EB7F41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C206782C-AEA1-4F75-8B12-31AFB854BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E27A128F-F42E-4704-8E88-D9EB5AC7BC1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"FCB55EE7-D477-4C2E-A54C-D9BE9144EEC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"CD6519AF-E0E1-4E69-B1DA-8838EBB17344"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"BC708674-B69F-45CB-8522-53DF4BC14E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"CAF1159F-9386-4C55-97C6-520BE5ED788E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"EC6C08AD-39C8-4C06-AE65-0FB389D0C186"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"9AA87679-C78E-4CC6-A305-6872FA189B7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_8:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"69E15299-3B24-4FC9-BB43-BD1AB9933B31"}]}]}],"references":[{"url":"http://secunia.com/advisories/30399","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448557","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42867","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00974.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2360","sourceIdentifier":"secalert@redhat.com","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desboramiento de entero en la función AllocateGlyph de la extensión Render del servidor X-window 1.4 en X.org X11R7.3 permite a atacantes, dependiendo del contexto, ejecutar código arbitrario a través de campos de solicitud no especificados, que son usados para calcular el tamaño del montículo del buffer, que dispara un desbordamiento de buffer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*","matchCriteriaId":"1F156D71-455F-4B66-9E0C-E8A085B8206A"}]}]}],"references":[{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2360.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=718","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0512.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/30627","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30628","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30715","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31109","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32099","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020243","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9329","source":"secalert@redhat.com"},{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2360.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0512.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2361","sourceIdentifier":"secalert@redhat.com","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory."},{"lang":"es","value":"Desbordamiento de entero en la función ProcRenderCreateCursor de la extensión Render del X server 1.4 en X.Org X11R7.3; permite a atacantes dependientes del contexto provocar una denegación de servicio (caída del demonio) a través de campos de solicitud no determinados que se utilizan para calcular un tamaño del búfer glyph, esto produce un referencia a una memoria sin mapear."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xorg:x11:r7.3:*:*:*:*:*:*:*","matchCriteriaId":"C62FB755-8F02-411D-A858-4CE6C9E71AE4"}]}]}],"references":[{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2361.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=719","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30627","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30715","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31109","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32099","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020244","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29665","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8978","source":"secalert@redhat.com"},{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2361.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2362","sourceIdentifier":"secalert@redhat.com","published":"2008-06-16T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption."},{"lang":"es","value":"Múltiples desbordamientos de entero en la extensión Render en el servidor X 1.4 de X.Org X11R7.3 permite a atacantes dependientes de contexto ejecutar código de su elección a través de una petición (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, o (3) SProcRenderCreateConicalGradient con un campo inválido especificando el número de bytes a intercambiar en la petición de datos, lo cual dispara una corrupción de memoria en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*","matchCriteriaId":"1F156D71-455F-4B66-9E0C-E8A085B8206A"}]}]}],"references":[{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2362.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=720","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30627","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30715","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31109","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32099","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020245","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29670","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11246","source":"secalert@redhat.com"},{"url":"ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2362.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg/2008-June/036026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-616-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1983/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2363","sourceIdentifier":"secalert@redhat.com","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow."},{"lang":"es","value":"La clase PartsBatch en Pan versión 0.132 y anteriores, no gestiona apropiadamente las estructuras de datos para lotes de Parts, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) y posiblemente ejecutar código arbitrario por medio de un archivo .nzb diseñado que activa un desbordamiento de búfer en la región heap de la memoria."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of pan as shipped with Red Hat Enterprise Linux 2.1.  No other versions of Red Hat Enterprise Linux have shipped Pan.","lastModified":"2008-06-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:*:*:*:*:*:*:*:*","versionEndIncluding":"0.132","matchCriteriaId":"8C0BCC82-DE99-4C9D-A165-9FBD7DE3148D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.105:*:*:*:*:*:*:*","matchCriteriaId":"4C2DEFDB-0430-4A24-9410-5AA5A8D6E6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.106:*:*:*:*:*:*:*","matchCriteriaId":"D56435AD-8216-401A-8F2F-86DA27BFE7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.107:*:*:*:*:*:*:*","matchCriteriaId":"7D96A12C-3BAB-47CB-88FB-F15AC0F078BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.108:*:*:*:*:*:*:*","matchCriteriaId":"1C0A4FC9-28B9-4562-8FD3-7399A75BC38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.109:*:*:*:*:*:*:*","matchCriteriaId":"F8177221-6E52-4B0B-A521-DCD522120CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.110:*:*:*:*:*:*:*","matchCriteriaId":"7D658A45-3886-429C-B8BC-F36DD5247D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.111:*:*:*:*:*:*:*","matchCriteriaId":"FBD5C3F5-D748-47A3-8471-18491EAB0852"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.112:*:*:*:*:*:*:*","matchCriteriaId":"E1F1444F-8290-4589-B37A-411D024740C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.113:*:*:*:*:*:*:*","matchCriteriaId":"C48373A9-FFF9-46C0-9A0F-E180DAFEE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.114:*:*:*:*:*:*:*","matchCriteriaId":"BDDF3558-EE2F-4710-B8A0-E38C686474BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.115:*:*:*:*:*:*:*","matchCriteriaId":"06B19920-0911-4078-A646-517AA8F4C933"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.116:*:*:*:*:*:*:*","matchCriteriaId":"B6FA1ED5-1252-4711-8244-2D1E6800147C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.117:*:*:*:*:*:*:*","matchCriteriaId":"062159F1-4094-4355-8EAB-9BECD1F469AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.118:*:*:*:*:*:*:*","matchCriteriaId":"951B12B7-7313-4200-AB5D-F70065502722"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.119:*:*:*:*:*:*:*","matchCriteriaId":"4DD8557F-4FAD-4EEC-9EC3-041BBE437E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.120:*:*:*:*:*:*:*","matchCriteriaId":"97B76EC9-B238-42E4-90CE-F35F039B782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.121:*:*:*:*:*:*:*","matchCriteriaId":"08FC4F0B-B92E-4C9E-8DA9-4B5782C2359B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.122:*:*:*:*:*:*:*","matchCriteriaId":"B8901478-3413-43E7-A21E-28F920E12B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.123:*:*:*:*:*:*:*","matchCriteriaId":"8D185E00-F55D-4101-9952-D35D49B15ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.124:*:*:*:*:*:*:*","matchCriteriaId":"D878570C-D363-4E37-8581-A76DC5DBB370"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.125:*:*:*:*:*:*:*","matchCriteriaId":"515419E8-50F6-454D-8224-9EE4CEA40ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.126:*:*:*:*:*:*:*","matchCriteriaId":"DA214133-C80D-47AA-B8AC-F79FB2BE6779"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.127:*:*:*:*:*:*:*","matchCriteriaId":"43BEFDEE-C200-48BF-94D2-B74070178546"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.128:*:*:*:*:*:*:*","matchCriteriaId":"868189F7-3A9C-4318-84E4-6F455AB99E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.129:*:*:*:*:*:*:*","matchCriteriaId":"709FCD8C-F8CC-4604-8ED2-DCBDC7CE59E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.130:*:*:*:*:*:*:*","matchCriteriaId":"B982CC3C-90D7-4F62-A6D3-990F3C33D7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan:pan:0.131:*:*:*:*:*:*:*","matchCriteriaId":"D58629D2-E6B3-462E-8C0C-C8307EE85835"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=224051","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=535413","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=121207185600564&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/30717","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31315","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-15.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:201","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29421","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=446902","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42750","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=224051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=535413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=121207185600564&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2008_13_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=446902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2364","sourceIdentifier":"secalert@redhat.com","published":"2008-06-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses."},{"lang":"es","value":"La función ap_proxy_http_process_response en mod_proxy_http.c en el modulo mod_proxy en el Servidor HTTP Apache 2.0.63 y 2.2.8 no limita el número de respuestas de desvío provisionales, lo que permite a servidores HTTP causar una denegación de servicio (memory consumption) a través de un gran número de respuestas provisionales."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.2.9.  http://httpd.apache.org/security/vulnerabilities_22.html","lastModified":"2008-07-02T00:00:00.000"},{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-2364\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-06-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.64","matchCriteriaId":"838655CB-43E7-4BDA-A80C-2314C9870717"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.9","matchCriteriaId":"34357005-C9AF-472E-8189-60713E340DF7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CA1D49-76E7-4195-98AF-BE916040ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4814716C-514C-40F7-A59B-ED61F14658DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0967.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30621","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31026","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31404","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31416","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31651","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31904","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32685","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32838","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33156","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33797","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34219","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34259","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34418","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27008517","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67579","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:195","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:237","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0966.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494858/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498567/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29653","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020267","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1798","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42987","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6084","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9577","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00153.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0967.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27008517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0966.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494858/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498567/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2365","sourceIdentifier":"secalert@redhat.com","published":"2008-06-30T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to \"late ptrace_may_attach() check\" and \"race around &dead_engine_ops setting,\" a different vulnerability than CVE-2007-0771 and CVE-2008-1514.  NOTE: this issue might only affect kernel versions before 2.6.16.x."},{"lang":"es","value":"Una condición de carrera en el soporte de ptrace and utrace en el kernel de Linux  versión 2.6.9 hasta 2.6.25, tal y como es usado en Red Hat Enterprise Linux (RHEL) versión 4, permite a los usuarios locales causar una denegación de servicio (oops) por medio  de una larga serie de llamadas ptrace de PTRACE_ATTACH  hacia otros procesos de usuario que desencadena un conflicto entre utrace_detach y report_quiescent, relacionado con \"late ptrace_may_attach() check\" y \"race around &dead_engine_ops setting,\" una vulnerabilidad diferente de los CVE-2007-0771 y CVE-2008-1514. NOTA: este problema solo puede afectar a las versiones del kernel anterior a 2.6.16.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:as:*:*:*:*:*","matchCriteriaId":"49EF5B77-9BC9-4AE8-A677-48E5E576BE63"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:es:*:*:*:*:*","matchCriteriaId":"36389D32-61C1-4487-8399-FA7D2864FACD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:ws:*:*:*:*:*","matchCriteriaId":"49B67F74-AF8F-4A27-AA8A-A8479E256A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=5ecfbae093f0c37311e89b29bfc0c9d586eace87","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f358166a9405e4f1d8e50d8f415c26d95505b6de","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=linux-kernel&m=117863520707703&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/30850","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3965","source":"secalert@redhat.com"},{"url":"http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/26/1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/14/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29945","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020362","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449359","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43567","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=5ecfbae093f0c37311e89b29bfc0c9d586eace87","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f358166a9405e4f1d8e50d8f415c26d95505b6de","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=f5b40e363ad6041a96e3da32281d8faa191597b9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=117863520707703&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sources.redhat.com/cgi-bin/cvsweb.cgi/~checkout~/tests/ptrace-tests/tests/late-ptrace-may-attach-check.c?cvsroot=systemtap","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/26/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/14/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2366","sourceIdentifier":"secalert@redhat.com","published":"2008-06-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path."},{"lang":"es","value":"Vulnerabilidad de búsqueda de  ruta no confiable en ciertas secuencias de comandos web usadas para \"construir\" OpenOffice.org (OOo) 1.1.x sobre Red Hat Enterprise Linux (RHEL) 3 y 4, permite a usuarios locales elevar sus privilegios a través de una biblioteca maliciosa en el directorio actual de trabajo en relación a un entrecomillado incorrecto del símbolo  ORIGIN para su uso en la ruta de la  biblioteca RPATH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E26BB59D-11F5-4D53-B4BA-1D4A534A82B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30633","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020278","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0538.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29695","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=450532","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43322","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11361","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0538.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=450532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2369","sourceIdentifier":"secalert@redhat.com","published":"2008-08-14T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements."},{"lang":"es","value":"manzier.pxt en Red Hat Network Satellite Server en versiones anteriores a la 5.1.1 tiene una clave de autenticación fijada en codigo (\"Hard-coded\"), que permite a atacantes remotos conectarse al servidor y obtener información sensible sobre cuentas de usuario y derechos."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*","versionEndExcluding":"5.1.1","matchCriteriaId":"4716BC2A-BEE9-48CF-859B-6EB21A62A7AD"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2008-0630.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31493","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020694","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30679","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44452","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0630.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2370","sourceIdentifier":"secalert@redhat.com","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter."},{"lang":"es","value":"Apache Tomcat 4.1.0 hasta la 4.1.37, 5.5.0 hasta la 5.5.26 y 6.0.0 hasta la 6.0.16, cuando se utiliza RequestDispatcher, realiza una regularización de ruta antes de eliminar la cadena de consulta desde la URI, lo cual permite a atacantes remotos dirigir ataques de salto de directorio y leer archivos arbitrariamente mediante un .. (punto punto) en  un parametro request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31379","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31381","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31639","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31865","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31891","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31982","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32120","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32266","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33999","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34013","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35393","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36249","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4099","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495022/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30494","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020623","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2305","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0503","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1535","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2215","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44156","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10577","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5876","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495022/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2371","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en pcre_compile.c en la biblioteca Perl-Compatible Regular Expression (PCRE) 7.7, permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) o la posibilidad de ejecutar código de su elección a través de expresiones regulares que comienzan con un opción y contienen múltiples ramas."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PCRE as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pcre:pcre:7.7:*:*:*:*:*:*:*","matchCriteriaId":"02EE6AD6-3A1D-4D53-83DB-C5FA6598FC03"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.7","matchCriteriaId":"7C110295-EB1A-4B94-B252-B1062A51E864"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=228091","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"http://ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30916","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30944","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30945","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30958","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30961","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30967","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30972","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30990","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31200","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32454","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32746","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35650","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/39300","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-624-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0305","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1602","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-03.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:147","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497828/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30087","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-624-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2005","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2006","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0833","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=228091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"http://ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/30990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/39300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-624-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200807-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497828/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-624-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2372","sourceIdentifier":"secalert@redhat.com","published":"2008-07-02T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of \"useless newly zeroed pages.\""},{"lang":"es","value":"El núcleo de Linux 2.6.24 y 2.6.25 versiones anteriores a 2.6.25.9 permite a usuarios locales provocar una denegación de servicio (consumo de memoria) a través de un número largo de llamadas a la función get_user_pages, la cual carece de optimización ZERO_PAGE y resulta en la asignación de \"páginas puestas a cero recientemente sin uso\".\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"secalert@redhat.com"},{"url":"http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30901","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30982","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31202","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31628","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32393","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32485","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"secalert@redhat.com"},{"url":"http://www.ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43550","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2629","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2374","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read."},{"lang":"es","value":"src/sdp.c de bluez-libs 3.30 en BlueZ, y otras bluez-libs anteriores a 3.34 y bluez-utils anteriores a 3.34, no validan la longitud de los campos de cadena en paquetes SDP, lo que permite a servidores SDP provocar una denegación de servicio y es posible que tenga otros efectos, a través de una longitud de campo manipulada que dispara la reserva excesiva de posicionamiento en memoria o sobre-lectua del buffer.     \r\n\r\n"}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1284"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-1284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluez:bluez-libs:*:*:*:*:*:*:*:*","versionEndExcluding":"3.34","matchCriteriaId":"E07F4288-8279-44F6-A0CA-CBBAB38B9CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluez:bluez-utils:*:*:*:*:*:*:*:*","versionEndExcluding":"3.34","matchCriteriaId":"1DF2F11E-16A5-40DF-9D61-886FFFD1834D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30957","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31057","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31833","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32099","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32279","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34280","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-29.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=b32d44000806161327u680c290au54fd21f2fef1d58e%40mail.gmail.com","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"http://www.bluez.org/bluez-334/","source":"secalert@redhat.com","tags":["Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:145","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0581.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30105","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020479","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2096/references","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9973","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00396.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00233.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=b32d44000806161327u680c290au54fd21f2fef1d58e%40mail.gmail.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.bluez.org/bluez-334/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0581.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2096/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00233.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-2375","sourceIdentifier":"secalert@redhat.com","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962."},{"lang":"es","value":"Fuga de memoria en cierta implementación de Red Hat de vsftpd anterior a 2.0.5 en Red Hat Enterprise Linux (RHEL) 3 y 4, cuando se utiliza PAM, permite a atacantes remotos  provocar una denegación de servicio (consumo de memoria) mediante un gran número de intentos de autenticación no válidos en la misma sesión. Se trata de una vulnerabilidad diferente de CVE-2007-5962."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F425AD1B-0D85-4294-9E9F-3EC1EFE0B658"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D305ED07-C6C8-437F-9B32-0E4A3AEEA3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A9E40C59-2A21-4CC5-BADA-AFB46386ADCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"21DC1316-FF41-49F3-BF0C-09E0CFF70AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C6D4739B-BA4D-4D58-8C0C-F4DA1AC09D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"79542EF5-EEED-4FBE-8722-D07907942643"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"87C483DE-8DC5-4A74-8F7F-DB30AD63BB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A24362D-12C1-4121-9E40-EA3A67A8BF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"36708BE2-A437-4FF1-9A1E-772765C8FD5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FA26B597-CA83-4F62-90DF-CC103395B412"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"64B83EAF-BE04-4DA4-B868-2A15B0D0C5BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2B27B315-0C20-49F7-B638-E27C677CBAF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2FF5AC4C-397E-4AF7-846F-CAA72E93DA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"5001819C-C4DF-444D-945C-2577AD91A014"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"DA3FCFD0-A79F-447E-B5CF-7CF599E9BFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"05DC66F1-ECC4-47AD-8F47-135FDA2E0A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"5EBF66A8-685E-4357-BC8C-D9E8CBFED91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFBEABE0-DA68-4037-B044-0DD8E83A21F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"160A31D8-A7B2-425A-9D7F-124575D18825"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D266656-4DAD-4FA6-9874-21CA15952AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"42FBD1A1-CB90-4EE8-B192-2659AA3F961B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3D50A535-D0C4-4A88-A6E3-23830B82BC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"97626749-3A3C-4F91-971B-01CB01ED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38A8564D-8301-4F77-8349-06A723F20C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88280371-39DB-45B5-BC79-85B05984123B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F149C664-511D-497F-84F7-90D9214F9E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1EDDC295-24D7-4E8B-A681-FD8099B1F1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB23F46F-C33B-4CEA-AC7D-2A517A54D199"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B403417-3384-4E0E-A20A-F11D3572533D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C0D786E6-7D73-45D1-88D8-2966E5FD237F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:vsftpd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"54922D08-A055-41EE-A818-BD3E6FA85494"}]}]}],"references":[{"url":"http://secunia.com/advisories/31007","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31223","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32263","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-398.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0217","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/2","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0579.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0680.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494081/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30364","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020546","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2820","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=201051","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://issues.rpath.com/browse/RPL-2640","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10138","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-398.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0579.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0680.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494081/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=201051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://issues.rpath.com/browse/RPL-2640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2376","sourceIdentifier":"secalert@redhat.com","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE.  NOTE: this issue exists because of an incomplete fix for other closely related integer overflows."},{"lang":"es","value":"Desbordamiento de entero en la función rb_ary_fill en array.c en Ruby antes de la revisión 17756 que permite a los atacantes dependientes de contesto causar una denegación de servicios (caída) o posiblemente otro impacto no especificado a través de la llamada al método Arrray#fill con un argumento de entrada (alias beg) mayor que ARY_MAX_SIZE NOTA: esto existe por un parche incompleto para otros desbordamientos de enteros"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora_8:1.8.6.230:*:*:*:*:*:*:*","matchCriteriaId":"6ACD50EB-CCC6-4D91-BF65-9EA96422393C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6.230:*:*:*:*:*:*:*","matchCriteriaId":"F05E84E7-AE21-4AA4-A595-459F4B87901B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30927","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31006","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31062","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31090","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31181","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31256","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32219","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33178","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"secalert@redhat.com"},{"url":"http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0218","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0218","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/02/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494104/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2639","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9863","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/651-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00112.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00161.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/02/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494104/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00161.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2377","sourceIdentifier":"secalert@redhat.com","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via TLS transmission of data that is improperly used when the peer calls gnutls_handshake within a normal session, leading to attempted access to a deallocated libgcrypt handle."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación en la función _gnutls_handshake_hash_buffers_clear de lib/gnutls_handshake.c en libgnutls de GnuTLS 2.3.5 hasta 2.4.0 permite a atacantes remotos provocar una denegación de servicio (caida) o posiblemente ejecutar código de su elección a través de transmisiones TLS de datos que no son usadas apropiadamente cuando las llamadas pares gnutls_handshake dentro de una sesión normal, conducen a intentos de acceso a manejadores libgcrypt no asignados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of gnutls as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2008-08-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C51E0C88-B19C-408D-AC17-10CE7462D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"2AC41482-B3BC-4C93-A850-73A179BAB763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"ADC80BE1-28A6-4348-A061-8FD9C805E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB33002-E5C6-4573-BC94-647DDE4E6F89"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2947","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/31505","source":"secalert@redhat.com"},{"url":"http://www.gnu.org/software/gnutls/security.html","source":"secalert@redhat.com"},{"url":"http://www.nabble.com/Details-on-the-gnutls_handshake-local-crash-problem--GNUTLS-SA-2008-2--td18205022.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30713","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2398","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44486","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2650","source":"secalert@redhat.com"},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnu.org/software/gnutls/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/Details-on-the-gnutls_handshake-local-crash-problem--GNUTLS-SA-2008-2--td18205022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2378","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T23:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of the -k option."},{"lang":"es","value":"Vulnerabilidad de búsqueda en ruta no confiable en hfkernel en hf 0.7.3 y 0.8 permite a usuarios locales obtener privilegios a través de un programa killall troyano en un directorio en la ruta, relacionado con una manipulación incorrecta de la opción -k."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hf:hf:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"8E1AEAF5-8BA0-43E0-B5D2-DAE7101E69F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hf:hf:0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F89F12D-631B-4065-A9A4-F9321B048342"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504182","source":"cve@mitre.org"},{"url":"http://osvdb.org/50231","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32831","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32855","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1668","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32421","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46806","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2379","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.237","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en SquirrelMail anteriores a la v1.4.17 permitiría a atacantes remotos inyectar secuencia de código web o HTML a su elección a través de un hiperenlace manipulado en la parte HTML de un mensaje de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.16","matchCriteriaId":"4A189210-833E-473D-A4C6-380380C48AC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2C2F0267-47D5-436F-B9F6-505CEC582AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"565E131D-56A9-46AB-800D-12B097FE3B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A2805F37-B8E6-4647-9E90-50763C7E4952"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*","matchCriteriaId":"284E543F-6AC3-45CD-8448-3A1D4D3DD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6C7E957E-81C0-4FA3-9944-5E514874BED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0DACB-F875-448B-86DF-D40531A2A762"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*","matchCriteriaId":"651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E11C84D0-13B5-4298-B9F3-BF5C6F927793"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*","matchCriteriaId":"DEE72FA1-E635-436B-A650-A8D4040925B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*","matchCriteriaId":"512F2AB5-EB24-4846-B924-377D040C131A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*","matchCriteriaId":"25F42A76-BF06-4DA9-8667-0E81D17B5B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*","matchCriteriaId":"02410BAB-C1D7-4883-A27B-C13A72707CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*","matchCriteriaId":"8509AAEE-225C-4907-884D-F9796ACA40F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DD41781D-1F7E-43A7-AD59-ADFE1D04D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78650B7E-9638-46FF-9656-38E8DFE3FA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4C1E1172-9D9E-439E-BD4B-4EF372344F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB15C5DD-2D76-47ED-883C-D1901B96F391"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*","matchCriteriaId":"E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*","matchCriteriaId":"ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"BA516843-2A45-4705-9669-4B719F722192"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C059835E-8FD9-40DF-BA6F-7E313E49F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E28A825-56F4-4EC5-9D62-661C0F4B477F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F22E1FA6-7C9C-4D01-A645-CF41939C1988"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F886B99-E996-4BF7-9BE3-14A6713A997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"65801122-2E5D-4244-9D37-5483F5C731F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5A29559D-0DB8-40C8-A6E6-4F37DDD27571"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C8F869F3-6D8D-4C95-95F7-5AE42C67362B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*","matchCriteriaId":"3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"79E6734C-EE1C-40B6-9759-15298707A6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B08E51F1-3764-4146-89C1-20B9B8EE1222"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*","matchCriteriaId":"CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BF6591E5-5F36-4663-85A6-9D870FD49FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D062B70A-E5FF-403B-8BD1-777D6462B7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D58980B8-6D4B-4E90-8410-80FDD7CF15C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3A884536-4D27-4350-B815-AB4E625879DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BD89F143-EEBF-472D-9653-E7534F5799FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"796C453E-D59A-4988-BD91-24F31646D8FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B9851AD9-5093-4482-A632-487C6D104C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.9a:*:*:*:*:*:*:*","matchCriteriaId":"5BA5BA42-F53A-4E0D-B04C-D70D2291E408"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*","matchCriteriaId":"77776503-3258-400D-8404-233EAFA940AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B85F80F3-DC0E-4228-9FA3-D870BC2200D2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33054","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security-net.biz/wsw/index.php?p=254&n=190","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1682","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32603","source":"cve@mitre.org"},{"url":"http://www.squirrelmail.org/index.php","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47024","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9764","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00223.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00449.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-net.biz/wsw/index.php?p=254&n=190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squirrelmail.org/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00223.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2380","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en authpgsqllib.c de Courier-Authlib anterior a v0.62.0, cuando se está utilizando una base de datos local Postgres no Latina, permite a atacantes remotos ejecutar comandos SQL de su elección a través de parámetros de consulta que contengan apóstrofes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.52:*:*:*:*:*:*:*","matchCriteriaId":"954C40B7-41B3-46D2-B3F5-2188BA3EF211"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.53:*:*:*:*:*:*:*","matchCriteriaId":"05A17C5E-A0E8-41CF-9186-A93CF620FCD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.54:*:*:*:*:*:*:*","matchCriteriaId":"7D9D9346-553A-462E-99CC-038A82C6F2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.55:*:*:*:*:*:*:*","matchCriteriaId":"C78B60DA-57C9-4E8F-ACC5-3813E28B2ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.56:*:*:*:*:*:*:*","matchCriteriaId":"2417C8E8-1ED9-4E83-9BC7-B210C0AFBF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.57:*:*:*:*:*:*:*","matchCriteriaId":"4DCEB5A9-0BC5-4FBE-BF27-F795367CCC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.58:*:*:*:*:*:*:*","matchCriteriaId":"6130571E-C84B-48C9-86B1-415C537A6B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59:*:*:*:*:*:*:*","matchCriteriaId":"A009E489-2DF5-47F6-B2E8-D92A0753AF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"C2FCBA05-3939-42FC-AC2C-963B9F79E9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59.2:*:*:*:*:*:*:*","matchCriteriaId":"EE017547-4CD3-40EF-8942-84304196CEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59.3:*:*:*:*:*:*:*","matchCriteriaId":"673194C2-F2CB-45F9-B0AA-FB9D148FBD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60:*:*:*:*:*:*:*","matchCriteriaId":"5B58E03D-2E5D-4662-B40F-54DDAFC52002"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.1:*:*:*:*:*:*:*","matchCriteriaId":"26C43975-C21F-4635-A2B8-489401CCE2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC2BF1E-2C85-47CF-98E1-623F61ADD239"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.3:*:*:*:*:*:*:*","matchCriteriaId":"04AA9833-06AE-4604-8F9D-387D584A8C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.4:*:*:*:*:*:*:*","matchCriteriaId":"B9FF48F3-75A4-43FB-BEE2-16E52E13E72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.5:*:*:*:*:*:*:*","matchCriteriaId":"38946F5B-9F91-45F2-A4E6-AC51800C6A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.6:*:*:*:*:*:*:*","matchCriteriaId":"B3F3028E-07C1-4CDB-9DDE-500E5BB8454E"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.61.0:*:*:*:*:*:*:*","matchCriteriaId":"200EBBA1-5787-4510-9675-3B11CF70F81A"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.61.1:*:*:*:*:*:*:*","matchCriteriaId":"F642E442-6CBB-4A1B-AD9E-824BE134E7D5"}]}]}],"references":[{"url":"http://osvdb.org/50811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34234","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-25.xml","source":"cve@mitre.org"},{"url":"http://www.courier-mta.org/authlib/changelog.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32926","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47494","source":"cve@mitre.org"},{"url":"http://osvdb.org/50811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.courier-mta.org/authlib/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2382","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message."},{"lang":"es","value":"La función protocol_client_msg en vnc.c en el servidor VNC en (1) Qemu 0.9.1 y anteriores y (2) KVM kvm-79 y anteriores permite a atacantes remotos provocar una denegación de servicio (bucle infinito) mediante un cierto mensaje."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of the Xen package as shipped with Red Hat Enterprise Linux 5.\n","lastModified":"2009-01-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.1","matchCriteriaId":"A8674DEE-1197-4B49-BC90-D27D6F3A254A"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC82CD08-F151-489C-9BC4-50C8C9583718"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"75D04344-C6CE-40D5-97ED-42B3DBA1AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"71CC4D45-66BE-4C23-B541-DD4604ACC9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2E41058D-380C-4098-96FB-53CC158ED420"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BFE12226-C599-45A2-8CFD-32753F94204B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C06F8832-B32F-4352-B048-A4ADCE85373E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5278C685-988B-40D7-9AE9-B4FB8AF41C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C6C6B20B-2E5D-4D25-885A-227A4BE5EEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F2FF7251-031D-4A9B-9AF0-1FFE556456D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D942D17-1AA9-4D5A-8F5E-0F4F762522D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5A2519BF-5F68-4096-8DE2-2C7BCF7200D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6B00BD71-2AE5-47BA-999A-7E89590B86C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CA6701A9-78CC-49D0-A40A-CB1C774400AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"40B5A7F2-B5B2-46CF-BBD0-AB986A8E55EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DBEBD56F-EFBC-4620-A77C-E215A7AFDAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5C45EA44-ECD1-40A7-89CE-D770BDC9DB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"83088B0F-A6F8-4F47-99C0-09FEA234272F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"17E948D4-6C1A-43D2-B128-1A728FD61703"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"6470915C-CA3C-42CA-B69B-0FC40A33D02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"759505BA-6F19-4BAE-8297-D8F30EEC8D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0A98CC34-2DB7-46CD-AA60-A7C08DDF22B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E424B63B-DCD8-4209-A4CB-84C1EDF5B255"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F9576AA2-2FDD-4063-8D84-DE8DB063AC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"544368B2-37BE-41DD-8DC2-F04B6A394696"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"14A6B570-09CE-4AFF-AC8C-51F37FC79811"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"EC5670FB-B9EA-4B9C-BB7B-575494F12CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"27650033-1C9F-4175-A26F-D9082A36F079"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F1D35E0-2033-4ADE-9ADA-3B45996B53B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:*:*:*:*:*:*:*:*","versionEndIncluding":"79","matchCriteriaId":"01CEC7D9-BE2D-47CF-992A-D1DA1290BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:1:*:*:*:*:*:*:*","matchCriteriaId":"927856FD-699A-455E-872C-4619F13CC696"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:2:*:*:*:*:*:*:*","matchCriteriaId":"80D7EB5C-208E-4AC9-A7E6-CA45FE39F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:3:*:*:*:*:*:*:*","matchCriteriaId":"FC3B46FB-B418-4C72-AAC6-EFBACBB6CA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:4:*:*:*:*:*:*:*","matchCriteriaId":"9F798498-A8A5-490C-8B45-ABD51F9DB6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:5:*:*:*:*:*:*:*","matchCriteriaId":"8B0F495D-5A7E-4433-A3C2-40B77FCA0193"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:6:*:*:*:*:*:*:*","matchCriteriaId":"61CDEC11-6914-4BF0-832D-A0E9F4E6B325"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:7:*:*:*:*:*:*:*","matchCriteriaId":"87B44D5E-D4D0-4070-8C8D-62E5EFFA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:8:*:*:*:*:*:*:*","matchCriteriaId":"085BB420-696B-4F9D-BCF8-943324C815B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:9:*:*:*:*:*:*:*","matchCriteriaId":"D96F3802-0B67-4B13-9CA3-648E273C9AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:10:*:*:*:*:*:*:*","matchCriteriaId":"A9ED5DA0-B05A-414F-8C48-C760B9E48D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:11:*:*:*:*:*:*:*","matchCriteriaId":"4B16CC7E-3BA7-4EAF-9573-F748D3F70895"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:12:*:*:*:*:*:*:*","matchCriteriaId":"C3E3EDE6-FD2C-428B-BC30-4450B560EE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:13:*:*:*:*:*:*:*","matchCriteriaId":"7C4C3C34-A494-4103-9744-F97B189EB139"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:14:*:*:*:*:*:*:*","matchCriteriaId":"A7DB261C-022F-4E87-8817-220D708B7BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:15:*:*:*:*:*:*:*","matchCriteriaId":"3F8081B6-B115-40F4-85BF-44D95FEB2DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:16:*:*:*:*:*:*:*","matchCriteriaId":"A1509F71-4739-4BB0-89BC-09102E64B2BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:17:*:*:*:*:*:*:*","matchCriteriaId":"D8B819D5-CE12-4A47-B5C7-E393FE53B8D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:18:*:*:*:*:*:*:*","matchCriteriaId":"F97A5763-16A3-476A-BEAB-9BD6433B704C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:19:*:*:*:*:*:*:*","matchCriteriaId":"79D201B5-1033-4F06-8914-FA84AFEC220C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:20:*:*:*:*:*:*:*","matchCriteriaId":"F8C5D978-48F5-4A5F-B124-18CF242FD1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:21:*:*:*:*:*:*:*","matchCriteriaId":"711DFBBE-5122-4052-956F-5D29D30F4393"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:22:*:*:*:*:*:*:*","matchCriteriaId":"5ACBEF01-CE36-4740-98FD-D76A8ED3E73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:23:*:*:*:*:*:*:*","matchCriteriaId":"43068D90-D790-4058-9EB6-7A7679F17020"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:24:*:*:*:*:*:*:*","matchCriteriaId":"F6C1BC7B-CD0C-458E-8535-431FD5D2096A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:25:*:*:*:*:*:*:*","matchCriteriaId":"035D2991-9E2C-4EF9-A5E5-CE3E1BDF37C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:26:*:*:*:*:*:*:*","matchCriteriaId":"FCD45965-2843-4B07-9FAC-A167BA2669AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:27:*:*:*:*:*:*:*","matchCriteriaId":"D51C2378-CC9A-474A-A376-9552383AFDBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:28:*:*:*:*:*:*:*","matchCriteriaId":"9D9A43C4-8646-472A-818F-4EB4A4FF3FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:29:*:*:*:*:*:*:*","matchCriteriaId":"10429C36-01BD-434B-86F3-5477817C63F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:30:*:*:*:*:*:*:*","matchCriteriaId":"09A28F5F-6766-4691-9B96-A8D5B567857E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:31:*:*:*:*:*:*:*","matchCriteriaId":"B64E6D75-F837-404D-877F-91486B086B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:32:*:*:*:*:*:*:*","matchCriteriaId":"5B8ACEE0-EF9A-47B0-B06A-CB738A23BB39"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:33:*:*:*:*:*:*:*","matchCriteriaId":"90B0EC10-B23B-4AF2-B655-91DCA4C5DBF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:34:*:*:*:*:*:*:*","matchCriteriaId":"05D88B54-D07F-4AA4-B18B-717A84401B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:35:*:*:*:*:*:*:*","matchCriteriaId":"E95C02AD-7EDB-4CF3-BB0E-24BCECDC29C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:36:*:*:*:*:*:*:*","matchCriteriaId":"4E0E6873-855B-4766-B003-2EE7730C7C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:37:*:*:*:*:*:*:*","matchCriteriaId":"A085C91B-F83F-4DC1-88DB-7F0C0C567994"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:38:*:*:*:*:*:*:*","matchCriteriaId":"D514CCFA-C0DE-4368-ACBA-810404389040"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:39:*:*:*:*:*:*:*","matchCriteriaId":"4A862A1C-9CAA-4440-A3C1-6186E76B82A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:40:*:*:*:*:*:*:*","matchCriteriaId":"DB7DF720-CA08-4B4B-AA67-AED22739FE00"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:41:*:*:*:*:*:*:*","matchCriteriaId":"0CFB6CE0-70F9-412C-A6F6-2ACF4B28620F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:42:*:*:*:*:*:*:*","matchCriteriaId":"69C45BE5-525F-4825-B3C1-617DF4DCFE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:43:*:*:*:*:*:*:*","matchCriteriaId":"514A7CEC-8F4A-44E1-AC8C-80F8D356F81A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:44:*:*:*:*:*:*:*","matchCriteriaId":"06C95D8F-D0FB-4C1A-954B-D7EFA4308E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:45:*:*:*:*:*:*:*","matchCriteriaId":"B8A7E3D2-1569-4C3C-8F61-162B39AFDCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:46:*:*:*:*:*:*:*","matchCriteriaId":"5BC15957-6926-456F-A932-1A8DBA4BFAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:47:*:*:*:*:*:*:*","matchCriteriaId":"21CAEE0A-43B7-451F-A411-704BDBA75E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:48:*:*:*:*:*:*:*","matchCriteriaId":"AECBA134-17A0-4DFF-A351-F0FA20B8072C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:49:*:*:*:*:*:*:*","matchCriteriaId":"6BBB47DA-52A3-4698-AEE6-3E4B862142D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:50:*:*:*:*:*:*:*","matchCriteriaId":"F249D4DF-4039-40FC-8DE8-2E84BACADE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:51:*:*:*:*:*:*:*","matchCriteriaId":"8D266CE5-B627-44A0-8B6A-1D5EC01359AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:52:*:*:*:*:*:*:*","matchCriteriaId":"65017E24-FD9E-4868-B5B5-E6770C3D1F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:53:*:*:*:*:*:*:*","matchCriteriaId":"5AD0FD4D-FD25-4C3E-80E0-C7BD2D44B68D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:54:*:*:*:*:*:*:*","matchCriteriaId":"85BB06DD-A688-40A0-919E-70CF7DD1692E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:55:*:*:*:*:*:*:*","matchCriteriaId":"94F52513-FA65-4C72-995A-2AC1745AAEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:56:*:*:*:*:*:*:*","matchCriteriaId":"A894ED7A-90F3-4E31-B464-3BDBB56E3BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:57:*:*:*:*:*:*:*","matchCriteriaId":"8B8D6DEF-CDA9-46D1-8CF6-3601D21FA736"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:58:*:*:*:*:*:*:*","matchCriteriaId":"AED843EB-8EC6-44BC-ABB6-85EE36798575"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:59:*:*:*:*:*:*:*","matchCriteriaId":"2A39450A-E07D-4D1A-B5F4-681F20681F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:60:*:*:*:*:*:*:*","matchCriteriaId":"96DBF33A-C16A-4854-8B23-60BC282437D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:61:*:*:*:*:*:*:*","matchCriteriaId":"63B79460-EB85-4074-9882-B600D821A92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:62:*:*:*:*:*:*:*","matchCriteriaId":"0F65C6C6-109D-4FED-8E3C-CE356C8FCFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:63:*:*:*:*:*:*:*","matchCriteriaId":"596165F0-F3A3-42FA-93B6-95850B28F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:64:*:*:*:*:*:*:*","matchCriteriaId":"0F86B298-74A8-47E3-9B2D-A996D31AE0DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:65:*:*:*:*:*:*:*","matchCriteriaId":"84996052-A402-491D-88CC-C666579086BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:66:*:*:*:*:*:*:*","matchCriteriaId":"9244EA69-EAA0-4682-AE12-74C394E4018C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:67:*:*:*:*:*:*:*","matchCriteriaId":"92496E8A-B197-4AAE-8A5B-F3F1A876662D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:68:*:*:*:*:*:*:*","matchCriteriaId":"39941844-34AB-424E-A462-22413324B616"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:69:*:*:*:*:*:*:*","matchCriteriaId":"4CA9FB34-D170-4382-BF7F-682BB0089B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:70:*:*:*:*:*:*:*","matchCriteriaId":"C038FDF9-33C4-4370-A0AC-ADAD1081BA7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:71:*:*:*:*:*:*:*","matchCriteriaId":"60B158F8-5E75-4B3C-A7BC-147DD848FA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:72:*:*:*:*:*:*:*","matchCriteriaId":"8BB1B11C-ADA4-42C3-9716-1E4B9E9A6244"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:73:*:*:*:*:*:*:*","matchCriteriaId":"71D11E82-0E03-4954-B831-4971602E723F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:74:*:*:*:*:*:*:*","matchCriteriaId":"72274EE0-85CA-40CE-9801-FA3703D85AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:75:*:*:*:*:*:*:*","matchCriteriaId":"779529DA-B95C-4DCD-9D13-E1378696770C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:76:*:*:*:*:*:*:*","matchCriteriaId":"1D7DEBB9-6D2A-4EE2-AEBA-945E9085AC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:77:*:*:*:*:*:*:*","matchCriteriaId":"F49BE82E-2C61-423F-B913-614EFFC6B0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:78:*:*:*:*:*:*:*","matchCriteriaId":"FD75E472-9DA6-4D64-A0E8-4D222B79CA96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33350","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35062","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4803","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021488","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/vnc-remote-dos","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499502/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32910","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3488","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3489","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47561","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/vnc-remote-dos","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499502/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2388","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors.  NOTE: the vendor states that these \"can be considered no security problem.\""},{"lang":"es","value":"Múltiples errores de superación de límite (off-by-one) en el actualizador de opensuse (opensuse-updater) en openSUSE 10.2 tienen un impacto no especificado y vectores de ataque.  NOTA: el fabricante afirma que estos errores \"no pueden ser considerados un problema de seguridad\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2389","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack."},{"lang":"es","value":"Actualizador de opensuse (opensuse-updater) en openSUSE 10.2 permite a ususarios locales acceder a archivos arbitrarios a través de ataque symlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30581","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29608","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2390","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument."},{"lang":"es","value":"Hpufunction.dll 4.0.0.1 de HP Software Update expone los métodos inseguros (1) ExecuteAsync y (2)Execute, lo cual permite a atacantes remotos ejecutar código arbitrariam0<1.2 ente a través de un nombre de ruta absoluto en el primer argumeto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:software_update:4.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"94C701F8-ED7F-48A9-9531-14C672E72DAE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42249","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5511","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2391","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1."},{"lang":"es","value":"SubSonic permite a atacantes remotos saltarse los límites de tamaño de página y provocar una denegación de servicio (consumo de CPU) mediante un índice de página (también conocido como número de página) de -1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeplex:subsonic:*:*:*:*:*:*:*:*","matchCriteriaId":"8B88933C-97E3-441C-B963-2A42BED783D4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3898","source":"cve@mitre.org"},{"url":"http://www.codeplex.com/subsonic/WorkItem/View.aspx?WorkItemId=16112","source":"cve@mitre.org"},{"url":"http://www.portcullis-security.com/uplds/wildcard_attacks.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492233/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42562","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.codeplex.com/subsonic/WorkItem/View.aspx?WorkItemId=16112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.portcullis-security.com/uplds/wildcard_attacks.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492233/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2392","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en WordPress 2.5.1 y versiones anteriores podría permitir a administradores remotos autenticados subir y ejecutar  archivos PHP arbitrariamente mediante la sección de Subidas en el área de Escribir Pestañas del panel de Gestión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"383AECB8-75AA-47DA-83BF-2FF595779BFF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3897","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492230/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29276","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42561","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/3897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492230/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2393","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en play.php de EntertainmentScript 1.4.0, permite a atacantes remotos ejecutar comandos SQL arbitrariamente mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entertainmentscript:entertainmentscript:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"46A20999-5E58-409D-BE68-8534561CEDD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42538","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5654","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2394","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to contact.php and the (2) nid parameter to news.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en TAGWORX.CMS 3.00.02, permiten a atacantes remotos ejecutar comandos SQL arbitrariamente  mediante (1) el parámetro cid de contact.php y (2) el parámetro nid de news.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tagworx:tagworx_cms:3.00.02:*:*:*:*:*:*:*","matchCriteriaId":"F3A47E44-E037-494C-8FEA-B430C102FC66"}]}]}],"references":[{"url":"http://secunia.com/advisories/30149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.tagworx.net/webdesign_seo_muenchen.php?cid=79&pid=5","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1561/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42512","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.tagworx.net/webdesign_seo_muenchen.php?cid=79&pid=5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1561/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2395","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección sql en thread.php de AlkalinePHP 0.80.00 beta y versiones anteriores permite a atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alkalinephp:alkalinephp:*:beta:*:*:*:*:*:*","versionEndIncluding":"0.80.00","matchCriteriaId":"9E255BD9-8113-4D66-91FE-653F418041B8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29281","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42520","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2396","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in an arbitrary element of the PAGES array parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos PHP en index.php de Wajox Software microSSys CMS 1.5 y versiones anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrariamente a través de una URL en un elemento arbitrario del parámetro PAGES del array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wajox_software:mircrossys_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"0AFFB3E6-08EC-4C8A-8DC7-9A5241158F14"}]}]}],"references":[{"url":"http://secunia.com/advisories/30264","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29278","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42518","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2397","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en search-results.dot de dotCMS, permite a atacantes remotos, inyectar secuencias de comandos web o HTML a través del parámetro search_query. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"37298AD1-83F2-4867-A5B6-3B12DD2A11F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D944537A-F52A-4A85-AF65-CC457510F251"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"16A3F622-0167-45E1-92CB-07FAD3DE85D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2F0BFFD-05B0-478E-A9F1-DBE1C2436D1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4D264EC4-7EBF-4F9A-AFD9-CD8344ACF358"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6:*:*:*:*:*:*:*","matchCriteriaId":"89B95310-DBFF-4F7D-A88E-36914F35728C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"60A2015E-A402-4DB7-9813-953966EB9535"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6:rc2:*:*:*:*:*:*","matchCriteriaId":"11F01F77-ECE6-479A-982F-FD2A5E0E4649"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6:rc3:*:*:*:*:*:*","matchCriteriaId":"E60AB5F8-67BC-47C4-B96F-0FAD27948B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3F80CB-4690-4D42-8EDA-01472A5313DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EFA52291-A260-487E-8530-3BC2C80905A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D5F1E965-6878-4296-9D02-8A9C42C62468"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2603C264-C7B0-4B24-A099-64BDF2C91F6F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29287","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2398","sourceIdentifier":"cve@mitre.org","published":"2008-05-21T13:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php de AppServ Open Project 2.5.10 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro appservlang"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.10","matchCriteriaId":"357DA904-542F-4E21-9633-DE813B6DF82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4FAA36DC-B99C-40C5-B614-C451B7FBBFAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5E3074DE-9611-4A65-B7CE-9131AB8E72CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE07EC69-518C-4B89-A1FD-465A0A587B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F66A15D2-6689-47EC-97B4-00D95F78E5F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"24A8198E-5466-49E9-9177-98D827A7C0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"146CCDCF-E814-40B3-A9D0-AB02B117E9DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7F4C7348-03B4-4C3C-AB0C-A07582995A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"03439C26-6D02-498A-BA69-77501770D014"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"0D9141BA-1404-4985-A75B-3BDA082FB08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B8E93EC1-5308-469F-9443-1B26E1309FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2DC735E4-E61A-40D5-8A9B-290A61CDC516"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"59FEEF6C-6348-46BD-A804-66122524A0AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2374B0-CAD6-4545-BB09-F6AC5781B6B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4:*:*:*:*:*:*:*","matchCriteriaId":"6E57680A-6CEB-4E72-97F0-A80A6551CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"816B562D-31CB-40DE-B221-EC391E39DDAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"770FE42B-6F4D-4633-8306-14FFD590FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0D150045-AF98-4494-826D-97056E8A11D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"DE9B317E-5439-45DB-8E10-258703823C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.4a:*:*:*:*:*:*:*","matchCriteriaId":"42661CC5-F4DB-42CC-B5F3-6EFDF0B207F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"FE92F7BE-72CC-4F7D-8B96-52C088F5C54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3704D7CB-D8AB-4A6B-B7FD-4AB816B97C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DE3F10B6-1C1A-4BDE-9E28-2FCB69E23D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"616DC2B0-B5C6-4180-B885-91CD407E663D"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"4B3A07D6-3407-4805-9FAE-CD450674C35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BA7AE5BB-05DA-4E2D-AD41-749990292F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3A7907A6-B27B-4E0E-BA3F-9EC28B00BEF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5252E8E-DACA-4A87-B374-461035E0B6CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4E8CD53E-5AE3-43A4-8F38-ED907DF3FB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3BED7E21-B7CF-4DB3-B3A9-ABE14E9DBCD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.4a:*:*:*:*:*:*:*","matchCriteriaId":"E8E9E73C-D1E5-4326-B93D-10E8A5BC16EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AF76C69E-0CC8-4864-90D3-7A3932BB1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EAA2608C-148D-4FF6-879A-D706FEE85D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"68DD67F8-A7DF-4D01-9EE1-9C8F253DCFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1CD47131-2333-4735-ABA7-628D53D8E3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B53F0EB6-DB19-454A-9AB7-D920E8971FEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30333","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3896","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29291","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2399","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to create or overwrite arbitrary files via ..\\ (dot dot backslash) sequences in responses to (1) MLSD and (2) LIST commands, a related issue to CVE-2002-1345.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el add-on FireFTP anterior a 0.98.20080518 para Firefox, permite a los servidores FTP remotos crear o sobreescribir ficheros de su eleccción a través de secuencias \"..\\\" (punto punto barra invertida) en respuesta a los comandos (1)MLSD y (2) LIST. Cuestión relativa al CVE-2002-2345. NOTA: esto puede aprovecharse para la ejecución de código mediante la escritura en la carpeta de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fireftp:fireftp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.98","matchCriteriaId":"1648A444-E0E1-42E0-9ACD-375D1BE9CA62"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp0971-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/906907","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.58%3Br2=1.59%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29289","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1596/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42516","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp0971-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/906907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.58%3Br2=1.59%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1596/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2400","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en stunnel anterior a 4.23, cuando es ejecutado como un servicio en Windows, permite a usuarios locales obtener privilegios a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E27CAA87-6971-4CFB-8299-931952B5157D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.0:*:*:*:*:*:*:*","matchCriteriaId":"579E37FC-51E6-4ECA-B05F-F4468772496B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B56E5F0-6FFC-4188-AF11-F7583253F56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"8797A96C-B660-45DC-B218-38B8DB85B451"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B01D02DC-F570-47CE-AC1B-37DFEC9C1A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B283AD3E-A27E-4B76-BEA8-05334DBF0A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.5:*:*:*:*:*:*:*","matchCriteriaId":"69F0D8C8-3BCE-4AF7-953B-CEA2633E4179"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.6:*:*:*:*:*:*:*","matchCriteriaId":"503A7976-C3A6-447A-9531-0DB699C4A625"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9BAFC4E2-FDB5-489C-B9C3-DF13A5186FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D60C3DB-4185-484A-8275-D3541A40C046"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0FB236EF-0F97-4656-AB49-1D7829A63FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b1:*:*:*:*:*:*","matchCriteriaId":"3073CCF6-5312-4FB2-AA43-D3B285EE32C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b2:*:*:*:*:*:*","matchCriteriaId":"49E5FD63-32E3-4C40-A55C-B70546FDD866"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b3:*:*:*:*:*:*","matchCriteriaId":"0B6444AC-588D-4154-B78E-3EB34129F1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b4:*:*:*:*:*:*","matchCriteriaId":"EC36154E-6006-45BB-A7CB-5293195602CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b5:*:*:*:*:*:*","matchCriteriaId":"12C931B9-DDBE-4E94-8361-6A4D55886CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b6:*:*:*:*:*:*","matchCriteriaId":"3EBE0C35-0FB9-44D6-8FA2-8712A2BF9A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b7:*:*:*:*:*:*","matchCriteriaId":"5FFA8AD2-CAE2-4818-9D0C-0C32E62F3A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F4CA2A0A-B7DE-49DD-940D-C19801CF5D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0D68D250-CA5B-4311-AF3C-48605948A067"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.3:*:*:*:*:*:*:*","matchCriteriaId":"2E4A0103-713D-4E56-B32F-EB1649F26EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"7D009335-E83C-4B35-ADB0-CBD6B82C0EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7F4B0933-7D3A-43C9-9E42-FF5DAE94EDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F317B556-717B-46B9-A81E-63FC61723B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.7:*:*:*:*:*:*:*","matchCriteriaId":"185B6AF8-18E7-4E6A-A7B9-60DFB17F33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:*:*:*:*:*:*:*","matchCriteriaId":"400FE849-D547-44DE-B06F-5B68E5B20E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p1:*:*:*:*:*:*","matchCriteriaId":"E0845ED5-9C1A-4F1F-B6E5-AAF8B6893A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p2:*:*:*:*:*:*","matchCriteriaId":"1A23EB22-BD30-4FA3-9BAA-0B4B65C49F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p3:*:*:*:*:*:*","matchCriteriaId":"6EB00100-8EF0-463E-9C17-05525B7B5852"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p4:*:*:*:*:*:*","matchCriteriaId":"466B14A9-B16C-41F3-B2A0-C3194A6D1C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.9:*:*:*:*:*:*:*","matchCriteriaId":"C236DC35-A2F7-47FB-AD51-17D2A0FD7DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.10:*:*:*:*:*:*:*","matchCriteriaId":"B256301B-9C6A-4BA6-8318-675C0EF4C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.11:*:*:*:*:*:*:*","matchCriteriaId":"EC33DAEE-8F51-404F-B5C4-B8A30B467E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.12:*:*:*:*:*:*:*","matchCriteriaId":"1FCDC66D-3BF5-4763-8877-38B0D3326E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.13:*:*:*:*:*:*:*","matchCriteriaId":"75772E28-BD93-4981-96FA-CDF41DAF65AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.14:*:*:*:*:*:*:*","matchCriteriaId":"2415230E-4F66-4DDE-9E34-F685E8F4085A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.15:*:*:*:*:*:*:*","matchCriteriaId":"5121749D-3E19-4A9B-8C2D-84420A4E289B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.16:*:*:*:*:*:*:*","matchCriteriaId":"6E14DE44-69E6-4D0E-AD06-A829AFCDE528"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.17:*:*:*:*:*:*:*","matchCriteriaId":"3D5B202D-D93D-4E33-BC9F-DA44B727C0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.18:*:*:*:*:*:*:*","matchCriteriaId":"CCC62D42-832D-4E6E-93D9-E7BA0CBC7799"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.19:*:*:*:*:*:*:*","matchCriteriaId":"B5D49F98-9A24-464A-8695-58218C14B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.20:*:*:*:*:*:*:*","matchCriteriaId":"ADFFE78D-90EC-46C6-B215-2EADD9E0D146"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21:*:*:*:*:*:*:*","matchCriteriaId":"6132108C-C344-4ABC-AF40-1925830A6723"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21a:*:*:*:*:*:*:*","matchCriteriaId":"8362D330-E286-4534-8560-B4B38E21767F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21b:*:*:*:*:*:*:*","matchCriteriaId":"D0496D60-BE45-45FF-B360-60E59443DB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21c:*:*:*:*:*:*:*","matchCriteriaId":"DA2EA0D4-05B6-4500-9374-74BBDAB6001F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.22:*:*:*:*:*:*:*","matchCriteriaId":"F16BDA03-BFAB-4839-A83A-370865928225"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.24:*:*:*:*:*:*:*","matchCriteriaId":"EB5A2E06-A98E-409C-9A90-460AF4CCF101"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6FC396CE-FDA7-480C-9E94-1A26B7FB208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.01:*:*:*:*:*:*:*","matchCriteriaId":"C7B30722-13DD-41C5-9CFA-0719B351CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.02:*:*:*:*:*:*:*","matchCriteriaId":"722BA04D-BA9B-427C-B129-06EFEC3F2859"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.03:*:*:*:*:*:*:*","matchCriteriaId":"2891FF7D-E62E-47F4-8873-1E4066247348"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.04:*:*:*:*:*:*:*","matchCriteriaId":"6A129110-60C1-46FC-9817-6E3802ADB389"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.05:*:*:*:*:*:*:*","matchCriteriaId":"AF52167B-1109-4E02-A02F-17465F4C47FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.06:*:*:*:*:*:*:*","matchCriteriaId":"61536049-1C52-42E2-96DC-E5FF88BCC850"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.07:*:*:*:*:*:*:*","matchCriteriaId":"AE0EE4B5-C9D3-4DF1-B7B7-377B281FA313"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.08:*:*:*:*:*:*:*","matchCriteriaId":"2811F3BC-03F8-4781-8D01-BAAE1BDE8895"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.09:*:*:*:*:*:*:*","matchCriteriaId":"82C4D865-9641-4E28-935C-BDCBDB9C2CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.10:*:*:*:*:*:*:*","matchCriteriaId":"2BF1DADF-BD26-41CF-BFA3-3C2928CDF9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.11:*:*:*:*:*:*:*","matchCriteriaId":"75CF8185-A8FC-4EEE-B937-34924834AB43"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.12:*:*:*:*:*:*:*","matchCriteriaId":"A1561B7D-78BC-4910-85F4-113E84B97B3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.13:*:*:*:*:*:*:*","matchCriteriaId":"63DDF225-57D2-40E5-9BCA-672FBB3E2A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.14:*:*:*:*:*:*:*","matchCriteriaId":"04043E99-5F67-4FE9-89FC-695B981FBD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.15:*:*:*:*:*:*:*","matchCriteriaId":"FD11753B-1993-4DE5-B172-AF4839B5620E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.16:*:*:*:*:*:*:*","matchCriteriaId":"711059F5-ACB3-4D2A-931F-BA1C4422FC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.17:*:*:*:*:*:*:*","matchCriteriaId":"5DDB6C42-0837-462B-BE2B-11A81B43C590"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.18:*:*:*:*:*:*:*","matchCriteriaId":"5EEAAF27-156A-40FF-ADBF-79D851E744AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.19:*:*:*:*:*:*:*","matchCriteriaId":"EB202677-DDC6-42D1-9A90-CD4A79198553"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.20:*:*:*:*:*:*:*","matchCriteriaId":"F2C3EF02-B456-4506-94E8-5C41CB4FF69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.21:*:*:*:*:*:*:*","matchCriteriaId":"B07502AA-E3E7-4143-B194-7C366CEA4A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.22:*:*:*:*:*:*:*","matchCriteriaId":"97C554E8-62F4-4C73-821D-AB93D8EE841C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000034.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29285","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020049","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1568/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42526","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1568/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2401","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications."},{"lang":"es","value":"EL Admin Server en Sun Java Active Server Pages (ASP) Server anterior a 4.0.3, permite a atacantes remotos añadir (información, contenido,etc) a ficheros nuevos de su elección o a los ya existentes, a través del primer argumento en cierto fichero que es incluido por multitud de aplicaciones ASP sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_active_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DFFABA-0024-4AA2-8D1B-0334FC43248B"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30523","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020186","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42832","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2402","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents."},{"lang":"es","value":"EL Admin Server en Sun Java Active Server Pages (ASP) Server anterior a 4.0.3 almacena información sensible bajo el archivo web raíz sin el suficiente control de acceso, lo que permite a atacantes remotos leer hashes de contraseñas y datos de configuración a través de una petición directa a documentos sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"27EAD95D-2E45-4DE1-95A2-3D1B71330774"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC116F1-D43C-439E-BD12-2566D693032D"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30523","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29540","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020187","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42828","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2403","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en  Sun Java Active Server Pages (ASP) Server anterior a 4.0.3, permite a atacantes remotos leer o escribir ficheros de su elección a través de .. (punto punto) en el parámetro Path hacia el método MapPath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"27EAD95D-2E45-4DE1-95A2-3D1B71330774"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC116F1-D43C-439E-BD12-2566D693032D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"60DCC8EB-2AAE-44E3-886A-01FF4BD581B3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30523","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29538","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020188","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42831","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2404","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field."},{"lang":"es","value":"Desbordamiento de búfer en la implementación del manejo de petición en  Sun Java Active Server Pages (ASP) Server anterior a 4.0.3, permite a atacantes remotos ejecutar código de su elección a  través de un campo cadena sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"27EAD95D-2E45-4DE1-95A2-3D1B71330774"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC116F1-D43C-439E-BD12-2566D693032D"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30523","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020189","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42830","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2405","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications."},{"lang":"es","value":"Sun Java Active Server Pages (ASP) Server anterior a 4.0.3, permite a atacantes remotos ejecutar comandos de su elección a través de metacaractéres en la consola en una petición HTTP hacia una aplicación ASP sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_active_server_pages:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"B05F750F-59A6-4B8E-BAF9-7525D3D70E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_active_server_pages:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FF516B17-0302-4E0C-8A50-4E1DE25CCF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_active_server_pages:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"832DF910-A4F6-4BD4-9AE4-9B6958C5D1E1"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30523","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020190","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42829","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2406","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102."},{"lang":"es","value":"El servidor de administración de aplicaciones de Sun Java Active Server Pages (ASP) Server anterior a 4.0.3, permite a atacantes remotos evitar la autenticación a través de una petición directa al puerto TCP 5102."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"27EAD95D-2E45-4DE1-95A2-3D1B71330774"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_asp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC116F1-D43C-439E-BD12-2566D693032D"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30523","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29539","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020191","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42833","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1742/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2407","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message."},{"lang":"es","value":"Desbordamiento de Búfer basado en pila en AIM.DLL en Cerulean Studios Trillian anterior a 3.1.10.0, permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario a través de un valor largo en el atributo, en una etiqueta FONT de un mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.9.0","matchCriteriaId":"9CA8AE4F-088E-4A3D-95B6-47E6D6D03693"}]}]}],"references":[{"url":"http://secunia.com/advisories/30336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020104","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492433/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29330","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1622","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-029/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42582","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492433/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-029/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2408","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la funcionalidad del analizador sintáctico XML en talk.dll en Cerulean Studios Trillian Pro anteriores a 3.1.10.0, permite a atacantes remotos ejecutar código arbitrario a través de un atributo mal formado en una etiqueta IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.9.0","matchCriteriaId":"93E7B69B-B384-4E6B-9EE8-D18714EDC6EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-05/0284.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020105","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29330","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1622","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-030/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42581","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-05/0284.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-030/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2409","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Cerulean Studios Trillian Pro anteriores a 3.1.10.0, permite a atacantes remotos ejecutar código arbitrario a través de atributos no especificados en la cabecera X-MMS-IM-FORMAT en un mensaje MSN.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*","matchCriteriaId":"12BB96CE-AEA5-4644-A41E-F317083B11CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74i:*:*:*:*:*:*:*","matchCriteriaId":"9BEF2AD0-094A-4AFF-8F20-D39E8BA72EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*","matchCriteriaId":"256C630F-3F51-4825-A7AB-EE20F5B6EB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2CDD3B6B-7AFD-4AD2-AC9A-9652010D3331"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E189B6C6-A516-4C23-A67F-F1505D977DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D922E4FB-BAD1-45B6-B45D-4B7A3B338EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"28B0FC73-E06D-4FCE-8555-E448AE8B468A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"24E329DC-435A-4201-916D-2460A18BA9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CC4D997-E8CB-45B7-860B-7C8BC64C2CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0967000-D0D6-479A-BBCD-E9CCE0C9686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"86ED2E92-F8E5-4DDC-A5FD-8B12557BC8F9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-05/0285.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29330","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1622","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-031/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42576","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-05/0285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-031/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2410","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el motor de servlets y el contenedor Web en el servicio  Web Server de IBM Lotus Domino anterior a 7.0.3 FP1 y 8.x anterior al 8.0.1, permite a usuarios autenticados remotamente inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"DC0B5C12-70BE-461B-9C58-E013BCA05D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_web_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3FB51B8A-58CF-4F26-B1D3-9C572658EE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_web_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2F86B710-6F83-4145-BABD-A742C0BB88A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_web_server:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1E23B4E9-2AF5-407F-87AE-4F49F78B07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_web_server:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E344283F-CC85-424D-B19D-A41366937653"}]}]}],"references":[{"url":"http://secunia.com/advisories/30310","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303296","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29311","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1597","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42553","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21303296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2411","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en SazCart 1.5.1 y anteriores, cuando están las magic_quotes desactivadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro prodid en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sazcart:sazcart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"FB9632BA-4BF3-4C59-922B-9D05C9EC0AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sazcart:sazcart:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C2B5C064-80C1-4295-B949-75EC26FF93E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sazcart:sazcart:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C370D171-8E54-4A7D-B512-0623D9FE767F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30148","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3900","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491892/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29129","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42542","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491892/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2412","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en glossaire.php en ACGV Neews 0.9.1, permite a atancates remotos ejecutar comandos SQL arbitrarios, a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acgv.free:acgv_news:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"84BA1043-9AEC-402E-8269-C0371A064496"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29253","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/84-ACGV-News-v0.9.1-2003-SQL-inj.-XSS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42490","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/84-ACGV-News-v0.9.1-2003-SQL-inj.-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2413","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en glossaire.php de ACGV News 0.9.1, permite a los atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acgv.free:acgv_news:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"84BA1043-9AEC-402E-8269-C0371A064496"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29253","source":"cve@mitre.org"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/84-ACGV-News-v0.9.1-2003-SQL-inj.-XSS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42491","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/84-ACGV-News-v0.9.1-2003-SQL-inj.-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2414","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in send_email.php in AN Guestbook (ANG) 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en send_email.php de AN Guestbook (ANG) 0.4, permite a los atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través del parámetro postid.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.4:*:*:*:*:*:*:*","matchCriteriaId":"31FF7A7A-CA8C-4132-9CB7-085A963F0917"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29254","source":"cve@mitre.org"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/86-ANG-AN-Guestbook-version-0.4-xss.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42489","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/86-ANG-AN-Guestbook-version-0.4-xss.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2415","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka hive) 2.0 RC2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en template/purpletech/base_include.php de DigitalHive (también conocido como hive) 2.0 RC2, permite a atacantes remotos añadir y ejecutar ficheros locales arbitrarios a traves de la secuencia .. (punto punto) en el parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digitalhive:digitalhive:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4421DDCB-7BB2-47C0-A2A5-ED8B2EF7249E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29255","source":"cve@mitre.org"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/85-hive-v2.0-RC2-LFi.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/85-hive-v2.0-RC2-LFi.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2416","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo index.php en FicHive versión 1.0, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro category en una acción Fiction, posiblemente relacionada con el archivo sources/fiction.class.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fichive:fichive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A6B6DA5C-112B-476F-B0EF-35DE03176D52"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29265","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1564/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42515","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1564/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2417","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary SQL commands via the qNo parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showQAnswer.asp en How2ASP.net Webboard 4.1, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"qNo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:how2asp:webboard:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0BA98989-2C02-4BB0-9C8C-B65E0F6732E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30295","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29263","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1565/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42496","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1565/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2418","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de condición de carrera en el controlador administrativo STREAMS (sad) en Sun Solaris 10, permite a usuarios locales provocar una denegación de servicio (pánico) a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30357","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237584-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29326","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020096","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1606/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42587","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5346","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237584-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1606/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2419","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by triggering an error condition during certain Iframe operations between a JSframe write and a JSframe close, as demonstrated by an error in loading an empty Java applet defined by a 'src=\"javascript:\"' sequence."},{"lang":"es","value":"Mozilla Firefox 2.0.0.14, permite a atacantes remotos provocar una denegación de servicio (corrupción de montículo y caída de aplicación) o posiblemente ejecute código arbitrario lanzando una condición de error durante ciertas operaciones IFRAME entre la escritura JSframe y el cierre del JSframe, como se demostró por un error cargando un applet Java definidos por una secuencia 'src=\"javascript:\"'\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"}]}]}],"references":[{"url":"http://www.0x000000.com/?i=576","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29318","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42589","source":"cve@mitre.org"},{"url":"http://www.0x000000.com/?i=576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2420","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates."},{"lang":"es","value":"Vulnerabilidad en la funcionalidad OCSP en stunnel anteriores a 4.24 no busca de forma adecuada la lista de revocación de certificado (CRL), que permite a atacantes remotos intentar saltarse las restricciones de acceso utilizando certificados revocados.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. OCSP protocol support was only implemented in upstream stunnel version 4.16.  Therefore OCSP protocol is not available in the versions of stunnel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n\n","lastModified":"2008-05-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"7D009335-E83C-4B35-ADB0-CBD6B82C0EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7F4B0933-7D3A-43C9-9E42-FF5DAE94EDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F317B556-717B-46B9-A81E-63FC61723B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.7:*:*:*:*:*:*:*","matchCriteriaId":"185B6AF8-18E7-4E6A-A7B9-60DFB17F33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:*:*:*:*:*:*:*","matchCriteriaId":"400FE849-D547-44DE-B06F-5B68E5B20E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p1:*:*:*:*:*:*:*","matchCriteriaId":"E4AEA6DC-1A98-433F-B916-597395D5914A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p2:*:*:*:*:*:*:*","matchCriteriaId":"DB24165B-92FD-48BA-94C3-87A922DDC6E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p3:*:*:*:*:*:*:*","matchCriteriaId":"B04F4BE4-34DE-4B8A-A1F1-32D12D33A5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p4:*:*:*:*:*:*:*","matchCriteriaId":"A04CF19D-9C30-4433-A5E2-F3949479BE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.9:*:*:*:*:*:*:*","matchCriteriaId":"C236DC35-A2F7-47FB-AD51-17D2A0FD7DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.10:*:*:*:*:*:*:*","matchCriteriaId":"B256301B-9C6A-4BA6-8318-675C0EF4C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.11:*:*:*:*:*:*:*","matchCriteriaId":"EC33DAEE-8F51-404F-B5C4-B8A30B467E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.12:*:*:*:*:*:*:*","matchCriteriaId":"1FCDC66D-3BF5-4763-8877-38B0D3326E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.13:*:*:*:*:*:*:*","matchCriteriaId":"75772E28-BD93-4981-96FA-CDF41DAF65AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.14:*:*:*:*:*:*:*","matchCriteriaId":"2415230E-4F66-4DDE-9E34-F685E8F4085A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.15:*:*:*:*:*:*:*","matchCriteriaId":"5121749D-3E19-4A9B-8C2D-84420A4E289B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.16:*:*:*:*:*:*:*","matchCriteriaId":"6E14DE44-69E6-4D0E-AD06-A829AFCDE528"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.17:*:*:*:*:*:*:*","matchCriteriaId":"3D5B202D-D93D-4E33-BC9F-DA44B727C0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.18:*:*:*:*:*:*:*","matchCriteriaId":"CCC62D42-832D-4E6E-93D9-E7BA0CBC7799"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.19:*:*:*:*:*:*:*","matchCriteriaId":"B5D49F98-9A24-464A-8695-58218C14B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.20:*:*:*:*:*:*:*","matchCriteriaId":"ADFFE78D-90EC-46C6-B215-2EADD9E0D146"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21:*:*:*:*:*:*:*","matchCriteriaId":"6132108C-C344-4ABC-AF40-1925830A6723"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21a:*:*:*:*:*:*:*","matchCriteriaId":"8362D330-E286-4534-8560-B4B38E21767F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21b:*:*:*:*:*:*:*","matchCriteriaId":"D0496D60-BE45-45FF-B360-60E59443DB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21c:*:*:*:*:*:*:*","matchCriteriaId":"DA2EA0D4-05B6-4500-9374-74BBDAB6001F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.22:*:*:*:*:*:*:*","matchCriteriaId":"F16BDA03-BFAB-4839-A83A-370865928225"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.23:*:*:*:*:*:*:*","matchCriteriaId":"CDC6F568-DB15-40BD-906B-A4ED4804C40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.24:*:*:*:*:*:*:*","matchCriteriaId":"EB5A2E06-A98E-409C-9A90-460AF4CCF101"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.25:*:*:*:*:*:*:*","matchCriteriaId":"9DF66986-248A-4EE8-B60F-182C774A4066"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.26:*:*:*:*:*:*:*","matchCriteriaId":"BB8991F3-A5F5-41EE-8809-31E09BAC4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.00:*:*:*:*:*:*:*","matchCriteriaId":"CD371A76-9729-487E-AA15-775FFEBE3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.01:*:*:*:*:*:*:*","matchCriteriaId":"C7B30722-13DD-41C5-9CFA-0719B351CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.02:*:*:*:*:*:*:*","matchCriteriaId":"722BA04D-BA9B-427C-B129-06EFEC3F2859"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.03:*:*:*:*:*:*:*","matchCriteriaId":"2891FF7D-E62E-47F4-8873-1E4066247348"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.04:*:*:*:*:*:*:*","matchCriteriaId":"6A129110-60C1-46FC-9817-6E3802ADB389"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.05:*:*:*:*:*:*:*","matchCriteriaId":"AF52167B-1109-4E02-A02F-17465F4C47FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.06:*:*:*:*:*:*:*","matchCriteriaId":"61536049-1C52-42E2-96DC-E5FF88BCC850"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.07:*:*:*:*:*:*:*","matchCriteriaId":"AE0EE4B5-C9D3-4DF1-B7B7-377B281FA313"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.08:*:*:*:*:*:*:*","matchCriteriaId":"2811F3BC-03F8-4781-8D01-BAAE1BDE8895"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.09:*:*:*:*:*:*:*","matchCriteriaId":"82C4D865-9641-4E28-935C-BDCBDB9C2CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.10:*:*:*:*:*:*:*","matchCriteriaId":"2BF1DADF-BD26-41CF-BFA3-3C2928CDF9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.11:*:*:*:*:*:*:*","matchCriteriaId":"75CF8185-A8FC-4EEE-B937-34924834AB43"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.12:*:*:*:*:*:*:*","matchCriteriaId":"A1561B7D-78BC-4910-85F4-113E84B97B3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.13:*:*:*:*:*:*:*","matchCriteriaId":"63DDF225-57D2-40E5-9BCA-672FBB3E2A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.14:*:*:*:*:*:*:*","matchCriteriaId":"04043E99-5F67-4FE9-89FC-695B981FBD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.15:*:*:*:*:*:*:*","matchCriteriaId":"FD11753B-1993-4DE5-B172-AF4839B5620E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.16:*:*:*:*:*:*:*","matchCriteriaId":"711059F5-ACB3-4D2A-931F-BA1C4422FC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.17:*:*:*:*:*:*:*","matchCriteriaId":"5DDB6C42-0837-462B-BE2B-11A81B43C590"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.18:*:*:*:*:*:*:*","matchCriteriaId":"5EEAAF27-156A-40FF-ADBF-79D851E744AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.19:*:*:*:*:*:*:*","matchCriteriaId":"EB202677-DDC6-42D1-9A90-CD4A79198553"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.20:*:*:*:*:*:*:*","matchCriteriaId":"F2C3EF02-B456-4506-94E8-5C41CB4FF69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.21:*:*:*:*:*:*:*","matchCriteriaId":"B07502AA-E3E7-4143-B194-7C366CEA4A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.22:*:*:*:*:*:*:*","matchCriteriaId":"97C554E8-62F4-4C73-821D-AB93D8EE841C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.23:*:*:*:*:*:*:*","matchCriteriaId":"061A0C84-B26C-4ED6-9771-8B7D29DB7053"}]}]}],"references":[{"url":"http://secunia.com/advisories/30335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31438","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-08.xml","source":"cve@mitre.org"},{"url":"http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000035.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:168","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29309","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1569/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42528","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00856.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00907.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00942.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1569/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00856.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00907.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00942.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2421","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under bc/gui/sap/its/webgui/."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Web GUI en SAP Web Aplication Server (WAS) 7.0, Web Dynpro para ABAP (también conocido como WD4A o WDA), y Web Dynpro para BSP permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través de PATH_INFO a la URI por defecto bajo bc/gui/sap/its/webgui/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_web_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5F89AF4D-B15A-4D91-B6A4-0A206772BC69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dynpro:abap:*:*:*:*:*:*:*","matchCriteriaId":"0F6B7DE6-A9B0-482F-8A58-6294584C8AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:web_dynpro:bsp:*:*:*:*:*:*:*","matchCriteriaId":"5DF6DFD4-74EC-4A0E-8ED0-F92A13CBFC4B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020097","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1599/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1599/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2422","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Web Slider 0.6 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro slide, en una acción slide. NOTA: El origen de esta información es desconocido; los detalles se han obtenido exclusivamente de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webslider:webslider:0.6:*:*:*:*:*:*:*","matchCriteriaId":"60E69A08-A147-4869-92E8-B39D496EE36F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29296","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2423","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests.  NOTE: this might overlap CVE-2007-2635."},{"lang":"es","value":"Vulnerabilidad no especificada en Interchange anteriores a 5.6.0 permite a atacantes remotos provocar una denegación de servicio a través de  una petición HTTP manipulada. NOTA: Esto pueder ser solado con CVE-2007-2635"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D9940525-76CD-49B7-827A-6FD0262E559B"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3442CBE-86D6-4FA8-AC79-29F18BB6F2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"50FA48BD-CAA7-40E3-8672-871CF61A3AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4B329F4D-9B47-41E0-979F-72DA04CFA90E"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"DE32376A-4A29-4510-938C-9CBE052CDFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.5:*:*:*:*:*:*:*","matchCriteriaId":"3DE765B9-338F-4C32-99C8-C3F1BDD259A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.6:*:*:*:*:*:*:*","matchCriteriaId":"2AC3C90B-5058-460A-99AF-E79A80B116D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6166A6EA-551E-4E0E-AC38-53776D817207"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.8:*:*:*:*:*:*:*","matchCriteriaId":"C1AC40E4-2568-45FF-A857-61234C81E8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.9:*:*:*:*:*:*:*","matchCriteriaId":"7815F8C9-2435-446A-B808-45CC91FA70FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D66EB2C6-C7A9-4A4B-8D86-252E2C72E7A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"4C602361-6AC9-440F-A8A6-E51D6C8BCB03"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"66BB5C11-E04E-4C46-928D-12E7CBB1CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"D4499946-FEA7-422D-BCF7-E44F2F110304"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"D6355504-3928-4F42-BE82-E8D336D88114"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"002E154B-7FB4-4732-8290-89DC9624177D"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.0:*:*:*:*:*:*:*","matchCriteriaId":"89CD71AD-539A-4529-B617-14E667D98F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE3EF221-D1FD-4906-8167-AC2BE6C275AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"51BB18BE-B4F8-4C57-BBCE-4016BDEE5E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B0E58845-8F7B-4F31-8305-E6542902E1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A49479E-B8B1-4EE3-9615-65A59DE59DDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.2:*:*:*:*:*:*:*","matchCriteriaId":"77D13F78-193F-44ED-84F5-A4FC935860F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26EF260D-C8AC-445F-918F-D094863C2FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"92B9F655-F091-4CC8-8033-5E73EA8CCDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A6C06660-5FE8-48D5-9D73-D7A823FDE79D"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8DDF9AE6-6710-4F6C-8F65-0EE5ECD3E6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"15FCEEE0-7D46-4EB3-A1AD-E8EF85B5E262"}]}]}],"references":[{"url":"http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28987","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1621/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42120","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42580","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42801","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1621/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2424","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the 404 error page for the \"Standard demo\" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la página de error 404 de la \"Standard demo\" en interchange anterior a 6.5.0 tiene un impacto como los vectores de ataque son desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.3","matchCriteriaId":"9A5D4075-9DB1-46E6-92EA-CCD20624E4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"853D836B-179E-45CD-9F05-0DE3A3D1D764"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"0FCD1A4B-8690-4F41-AB13-7394D8A2C203"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"878159BC-59F0-48FD-B656-7D1F1A87ED3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"057A7EDB-77B6-4DE3-93F6-08FC946D2131"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"77E31CD8-EE85-4776-9E24-B1BEB2A3FC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B97929E-D4A5-4D1A-97A1-1FEA5E00E969"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8088935E-CE42-407A-895C-E335CF302913"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3BD0B521-E0F3-4719-9854-EDA8A13108EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"AE2C65C8-6B36-45F3-9420-6F641C40CB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F5E3D640-02A6-4AEE-B7AF-4D51729CA577"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E91E6EA3-AFED-48C8-A851-A6D649C2D1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"30E9217B-2504-4385-A5E3-6084C9A8EACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"C1ED45C8-6AEC-4E8B-8865-DE5B7A6EE174"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.5:*:*:*:*:*:*:*","matchCriteriaId":"33C65E11-EF2D-4104-B3C3-4AAECDA68193"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4E4E95-EEE3-405D-88B2-182183CE4999"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.7:*:*:*:*:*:*:*","matchCriteriaId":"86B0A02A-DA2B-4CD6-BC3C-A4620B048E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6F2842DE-4AA4-49B3-B820-FA5F2D029B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"2A168FD3-C36A-4F28-860D-0FA49F08CD33"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"92DF697D-3D34-4D00-90ED-CD5A3A272956"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"B55D41AB-AB8A-4548-BEB5-E55A38DDCF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"C213971E-BC01-4C7B-94F0-E76BEB2826AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F377D254-BD22-4EE9-A3E8-6CF1A5F241DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"5A3D938E-636D-4D39-AF28-2B2CEF989057"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73A070F1-8F04-4379-B850-D3802AA35068"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"741CC7E8-F531-40A0-8747-77B4EBD4C813"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C1667991-B819-4276-BECC-C42320F6AAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D102067C-E4D0-42B0-B36F-22D89F23FF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4727F286-E256-4D2C-A108-3C65CCF6D3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0F1723CB-0088-42C9-9CBC-7D28BA828BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3D807056-97BA-42F4-980B-814895EDB020"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BA9547B6-91A7-49F5-9013-F7B5B1853F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"665111F3-8F4C-496F-8F1C-F95F63486F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D29016C3-479F-4B05-BC2F-95A0E84E562F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"49F92D2A-A75E-4956-A909-A6030EE938DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8581A875-17AB-4587-AAE7-F9DE2E374625"}]}]}],"references":[{"url":"http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30346","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1621/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42583","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1621/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2425","sourceIdentifier":"cve@mitre.org","published":"2008-05-23T15:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de FicHive 1.0 permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro letra en una acción de búsqueda, un vector distinto a CVE-2008-2416. NOTA: La procedencia de esta información es desconocida, los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fichive:fichive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A6B6DA5C-112B-476F-B0EF-35DE03176D52"}]}]}],"references":[{"url":"http://secunia.com/advisories/30281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42800","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2426","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en Imlib 2 (también se conoce como imlib2) versión 1.4.0, permiten a los atacantes remotos asistidos por el usuario causar una denegación de servicio (bloqueo) o posiblemente ejecutar código arbitrario por medio de (1) una imagen PNM con un encabezado diseñado, relacionado con la función load en el archivo src/modules/loaders/loader_pnm.c; o (2) una imagen XPM diseñada, relacionada con la función load en el archivo src/modules/loader_xpm.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carsten_haitzler:imlib2:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D9A90700-F599-4C09-B76A-9FB47DE6BFC3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30401","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30485","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30572","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30727","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-25/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020146","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1594","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:123","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/492739/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29417","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/USN-697-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1700","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42732","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-25/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-697-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2427","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file."},{"lang":"es","value":"Desbordamiento de búfer basado en Pila en NConvert 4.92, GFL SDK 2.82, y XnView 1.93.6 sobre Windows y 1.70 sobre Linux y FreeBSD, lo que permite a los atacantes remotos asistidos por usuarios para ejecutar código arbitrario a través de un formato clave manipuda en un fichero Sun TAAC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagesperso-orange:gfl_sdk:2.82:*:*:*:*:*:*:*","matchCriteriaId":"214EC4CD-CB47-4941-A6ED-19D751D80896"},{"vulnerable":true,"criteria":"cpe:2.3:a:pagesperso-orange:nconvert:4.92:*:*:*:*:*:*:*","matchCriteriaId":"9A0776C8-0E4C-437A-9EAD-B9636EB72BB0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagesperso-orange:xnview:1.93.6:*:*:*:*:*:*:*","matchCriteriaId":"48CB0A06-1BBC-495E-9FFF-48E07161DAB1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","matchCriteriaId":"D9EC02F3-3905-460D-8949-3B26394215CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagesperso-orange:xnview:1.70:*:*:*:*:*:*:*","matchCriteriaId":"97668A1C-61F7-4DF4-880B-1AA977BA3F02"}]}]}],"references":[{"url":"http://secunia.com/advisories/30416","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30789","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-24/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3956","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securitytracker.com/id?1020340","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/493505/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29851","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1896","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1897","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.exploit-db.com/exploits/5951","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-24/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493505/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2428","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantusername parameter to account-signup.php, or the (3) receiver parameter to account-inbox.php in a msg action."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en TorrentTrader 1.08 Classic, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de (1) correo electrónico o (2) parámetro wantusername para account-signup.php, o el (3) parametro receiver para account-inbox.php en una acción msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.08:*:*:*:*:*:*:*","matchCriteriaId":"DACD4754-4637-42CD-B188-5FBF24EBCC90"}]}]}],"references":[{"url":"http://secunia.com/advisories/30565","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-15/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/493434/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/29787","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.torrenttrader.org/index.php?showtopic=8879","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43165","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-15/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.torrenttrader.org/index.php?showtopic=8879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2429","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-11-26T01:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via (1) the catsearch parameter to cal_search.php or (2) the catview parameter to cal_cat.php.  NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap CVE-2005-1865.2."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Calendarix Basic 0.8.20071118 que permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro (1) catsearch para cal_search.php o (2) el parámetro catview para cal_cat.php.  NOTA: vector 1 podría solaparse con CVE-2007-3183.3, y el vector 2 podría solaparse CVE-2005-1865.2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calendarix:basic:0.8.20071118:*:*:*:*:*:*:*","matchCriteriaId":"4292FE37-DCC0-454E-ABA4-3F6C5403F091"}]}]}],"references":[{"url":"http://secunia.com/advisories/30710","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-28/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-28/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2430","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file."},{"lang":"es","value":"Desbordamiento de entero en la Función Open en modules/demux/wav.c en VLC Media Player 0.8.6h ejecutado sobre Windows, permite a atacantes remotos ejecutar código de su elección a través de un fragmento fmt de gran tamaño en un archivo WAV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6h:*:*:*:*:*:*:*","matchCriteriaId":"725D145D-C3F6-4810-96D8-E8AC871093F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30601","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31317","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-29/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-13.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/3976","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/493849/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/30058","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020429","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.videolan.org/developers/vlc/NEWS","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/1995/references","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14344","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14769","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-29/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493849/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/developers/vlc/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1995/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2431","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-11-26T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control (aka ienipp.ocx) with (1) a long third argument to the GetDriverFile method; a long first argument to the (2) GetPrinterURLList or (3) GetPrinterURLList2 method; (4) a long argument to the GetFileList method; a long argument to the (5) GetServerVersion, (6) GetResourceList, or (7) DeleteResource method, related to nipplib.dll; a long uploadPath argument to the (8) UploadPrinterDriver or (9) UploadResource method, related to URIs; (10) a long seventh argument to the UploadResource method; a long string in the (11) second, (12) third, or (13) fourth argument to the GetDriverSettings method, related to the IppGetDriverSettings function in nipplib.dll; or (14) a long eighth argument to the UploadResourceToRMS method."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Novell iPrint Client anterior a v5.06; permiten a atacantes remotos ejecutar código de su elección al llamar al control ActiveX Novell iPrint (también conocido como ienipp.ocx) con (1) un tercer argumento largo al método GetDriverFile; un primer argumento largo a los métodos (2) GetPrinterURLList o (3) GetPrinterURLList2; (4) un argumento largo al método GetFileList; un argumento largo a los métodos (5) GetServerVersion, (6) GetResourceList o (7) DeleteResource relacionados con nipplib.dll; un argumento largo uploadPath a los métodos (8) UploadPrinterDriver o (9) UploadResource relacionados con URIs; (10) un séptimo argumento largo al método UploadResource; una cadena larga en los argumentos (11) segundo, (12) tercero o (13) cuarto al método GetDriverSettings relacionado con la función IppGetDriverSettings de nipplib.dll o (14) un octavo argumento largo al método UploadResourceToRMS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*","versionEndIncluding":"5.04","matchCriteriaId":"A5538B39-4C1E-42AE-9B93-6203C77A9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*","matchCriteriaId":"3332CB43-D2ED-4720-8ED4-AE222C6F7FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*","matchCriteriaId":"E9AD9057-2218-481E-96CB-BF568AD3A9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*","matchCriteriaId":"0D044326-00CB-4158-A652-7D7FBDB380C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*","matchCriteriaId":"3BDA0CD3-3E49-42E9-8D41-2B93FEE53610"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*","matchCriteriaId":"AAB01661-76E1-4181-A798-6325EFD681FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*","matchCriteriaId":"16769BC0-66AE-4AA3-B504-03389717A56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*","matchCriteriaId":"25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*","matchCriteriaId":"CCCA90D8-A320-43B0-A667-DAFC0D00924F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30667","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-27/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30813","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44616","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-27/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2432","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-11-26T01:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el método GetFileList en un control ActiveX no especificado en Novell iPrint Client anterior a v5.06 permite a atacantes remotos listar los archivos de imagen en un directorio de su elección mediante un nombre de directorio en el argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*","versionEndIncluding":"5.04","matchCriteriaId":"A5538B39-4C1E-42AE-9B93-6203C77A9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*","matchCriteriaId":"3332CB43-D2ED-4720-8ED4-AE222C6F7FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*","matchCriteriaId":"E9AD9057-2218-481E-96CB-BF568AD3A9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*","matchCriteriaId":"0D044326-00CB-4158-A652-7D7FBDB380C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*","matchCriteriaId":"3BDA0CD3-3E49-42E9-8D41-2B93FEE53610"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*","matchCriteriaId":"AAB01661-76E1-4181-A798-6325EFD681FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*","matchCriteriaId":"16769BC0-66AE-4AA3-B504-03389717A56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*","matchCriteriaId":"25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*","matchCriteriaId":"CCCA90D8-A320-43B0-A667-DAFC0D00924F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30667","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-30/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30813","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/30667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-30/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2433","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks.  NOTE: this can be leveraged for code execution through an unspecified \"manipulation of the configuration.\""},{"lang":"es","value":"La consola de administración web en Trend Micro OfficeScan 7.0 hasta 8.0, Worry-Free Business Security 5.0, y Client/Server/Messaging Suite 3.5 y 3.6 crea una sesión de modo aleatorio basada sólo en el tiempo de acceso, lo cual hace más fácil para atacantes remotos secuestrar sesión a través de ataques de fuerza bruta.\r\nNOTA: esto puede ser aprovechado para la ejecución de código a través de una indeterminada \"manipulación de la configuración\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:client_server_messaging_suite:3.5:*:*:*:*:*:*:*","matchCriteriaId":"8A52DAF7-6BAE-49BB-8D2B-D55E6F8D224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:client_server_messaging_suite:3.6:*:*:*:*:*:*:*","matchCriteriaId":"92B2575D-83A5-4D0B-AC4B-ED8F54F88AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:officescan:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"8.0","matchCriteriaId":"F2B08044-1420-4425-B341-31039DA04291"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:worry-free_business_security:5.0:*:*:*:*:*:*:*","matchCriteriaId":"99FDC9B1-1D65-4F09-9308-B602B78F4C5A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31373","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-31/advisory/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4191","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495670/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30792","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020732","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2402_readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5%200_EN_CriticalPatch1404.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2421","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44597","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-31/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495670/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2402_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5%200_EN_CriticalPatch1404.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2434","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-12-23T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646\r\n\r\nTo resolve the issue:\t\t\r\n\r\nRequest the HouseCall 6.6 Hot Fix Build 1285 file from Trend Micro Technical Support.","cveTags":[],"descriptions":[{"lang":"en","value":"The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a \"custom update server\" argument.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"El control ActiveX de Trend Micro HouseCall v6.51.0.1028 y v6.6.0.1278 en Housecall_ActiveX.dll permite a atacantes remotos descargar un fichero de biblioteca arbitrario en un sistema cliente a través del parámetro \"custom update server\". NOTE: puede aprovecharse para ejecución de código escribiendo en la carpeta de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:housecall:6.6:*:server:*:*:*:*:*","matchCriteriaId":"503EBD0A-F452-41A8-9E3A-A8F08F860511"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:housecall:6.6.0.1278:*:*:*:*:*:*:*","matchCriteriaId":"2B17DAA4-964E-462E-AAE1-9092FCF7572E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:housecall:6.51.0.1028:*:*:*:*:*:*:*","matchCriteriaId":"9DEEC569-540D-4E83-A3CE-468C38C02099"}]}]}],"references":[{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50941","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31337","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-32/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4802","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.kb.cert.org/vuls/id/541025","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/499495/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/32965","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/3464","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47524","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-32/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/541025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/499495/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2435","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-12-23T18:30:03.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to execute arbitrary code via a crafted notifyOnLoadNative callback function."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en el control ActiveX de HouseCall de Trend Micro v6.51.0.1028 y v6.6.0.1278 en Housecall_ActiveX.dll, permite a atacantes remotos ejecutar código arbitrario a través de una función de retorno notifyOnLoadNative manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:housecall:6.6.0.1278:*:*:*:*:*:*:*","matchCriteriaId":"2B17DAA4-964E-462E-AAE1-9092FCF7572E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:housecall:6.51.0.1028:*:*:*:*:*:*:*","matchCriteriaId":"9DEEC569-540D-4E83-A3CE-468C38C02099"}]}]}],"references":[{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31583","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-34/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021481","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.kb.cert.org/vuls/id/702628","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/50843","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/499478/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/32950","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/3464","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47523","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-34/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/702628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/50843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499478/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2436","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en la función nipplib.dll de Novell iPrint Client 4.x anteriores a la 4.38 y 5.x anteriores a la 5.08, permite a atacantes remotos ejecutar código arbitrariamente a través de un argumento largo a las funciones (1) GetPrinterURLList, (2) GetPrinterURLList2, o (3) GetFileList2 en el control ActiveX iPrint de Novell en ienipp.ocx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:4.26:*:windows:*:*:*:*:*","matchCriteriaId":"D3187C03-C732-477F-9844-87F8F74F60E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:4.32:*:windows:*:*:*:*:*","matchCriteriaId":"3BF2F4A1-8908-46AF-9164-C20200AC001A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:4.35:*:windows:*:*:*:*:*","matchCriteriaId":"C97797F6-B8BD-48A1-92B9-E27BC02CC40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:4.36:*:windows:*:*:*:*:*","matchCriteriaId":"A5752EB2-4AC5-40C4-AF02-D82E904BFC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:5.06:*:vista:*:*:*:*:*","matchCriteriaId":"2519BE4B-63CF-4BFC-9B22-472B02FBF65D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31370","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-33/advisory","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4228","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/495940/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/30986","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020806","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2481","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44853","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-33/advisory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495940/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2437","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-09-16T22:00:00.710","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP request containing a long ComputerName parameter."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en  cgiRecvFile.exe en Trend Micro OfficeScan 7.3 patch 4 build 1362 y otras, OfficeScan 8.0 y 8.0 SP1, y Client Server Messaging Security 3.6, permite a atacantes remotos ejecutar código de su elección a través de peticiones HTTP que contienen un parámetro largo \"ComputerName\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:client-server-messaging_security:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5608EC01-6625-4B55-BB2F-7EDD2A2C5F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:client-server-messaging_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1C7AAB1-847F-41AC-8324-3B96ACDF42C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:client-server-messaging_security:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C0F900AA-550D-4D41-8777-B470EF8E5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:client-server-messaging_security:3.6:*:*:*:*:*:*:*","matchCriteriaId":"241286A4-320A-4F3A-B5B2-2C19BBDFCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0B4D4F2B-4B34-42DA-A23A-16490F19EF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:7.3:*:*:*:*:*:*:*","matchCriteriaId":"38BD1ADE-408F-45D0-BD0B-FBC83ED976F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:7.3:patch_4:*:*:*:*:*:*","matchCriteriaId":"9788F679-89C2-4228-BD38-283C03D3E415"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A05A70AB-32D4-4948-94B2-DCFED9155DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"}]}]}],"references":[{"url":"http://secunia.com/advisories/31342","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-35/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4263","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/496281/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31139","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020860","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/CSM_3.6_OSCE_7.6_Win_EN_CriticalPatch_B1195_readme.txt","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1367_readme.txt","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Patch1_Win_EN_CriticalPatch_B3060_readme.txt","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2424_readme.txt","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_Win_EN_CriticalPatch_B1361_readme.txt","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2555","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45072","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-35/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496281/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/CSM_3.6_OSCE_7.6_Win_EN_CriticalPatch_B1195_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1367_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Patch1_Win_EN_CriticalPatch_B3060_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2424_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_Win_EN_CriticalPatch_B1361_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2439","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-03T15:07:10.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and Worry-Free Business Security 5.0 before build 1220 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función UpdateAgent en TmListen.exe en el servicio OfficeScanNT Listener del cliente de Trend Micro OfficeScan v7.3 Patch 4 build v1367 y otros builds versiones anteriores a v1372, OfficeScan 8.0 SP1 versiones anteriores a build v1222, OfficeScan 8.0 SP1 Patch 1 versiones anteriores a build 3087, y Worry-Free Business Security 5.0 versiones anteriores a build v1220 permite a atacantes remotos leer ficheros de su elección a través de secuencias de salto de directorio en una petición HTTP.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:7.3:*:*:*:*:*:*:*","matchCriteriaId":"38BD1ADE-408F-45D0-BD0B-FBC83ED976F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1_patch1:*:*:*:*:*:*","matchCriteriaId":"8FCFB646-3649-454D-8492-1640D98ED0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:worry_free_business_security:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BB06F18F-DE90-43FE-8B23-AC2784BBB2C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31343","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32097","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-39/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496970/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31531","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1020975","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1372_Readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5.0_EN_CriticalPatch1414.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2711","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/2712","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45597","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-39/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496970/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1372_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5.0_EN_CriticalPatch1414.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2441","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11, and 4.2.x before 4.2(0) Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users to cause a denial of service (CSRadius and CSAuth service crash) or possibly execute arbitrary code via a crafted RADIUS (1) EAP-Response/Identity, (2) EAP-Response/MD5, or (3) EAP-Response/TLS Message Attribute packet."},{"lang":"es","value":"Cisco Secure ACS versiones 3.x anteriores a 3.3 (4) Build 12, Parche 7, versiones 4.0.x, versiones 4.1.x anteriores a 4.1 (4) Build 13, Parche 11 y versiones 4.2.x anteriores a 4.2 (0) Build 124, Parche 4 no maneja apropiadamente un paquete de EAP Response en el que el valor del campo length excede la longitud actual del paquete, lo que permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del servicio CSRadius y CSAuth) o posiblemente ejecutar código arbitrario por medio de un paquete RADIUS diseñado (1) EAP-Response/Identity, (2) EAP-Response/MD5, o (3) EAP-Response/TLS Message Attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_acs:*:*:*:*:*:*:*:*","matchCriteriaId":"E137A796-4F14-4BFB-81C5-11A145DDD1F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_access_control_server:*:*:*:*:*:*:*:*","matchCriteriaId":"7ACD712D-B8B8-4551-925E-27E541C8001F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31731","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4216","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495937/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30997","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020814","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44871","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495937/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2443","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en dpage.php de The Real Estate Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro docID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:therealestatescript:the_real_estate_script:*:*:*:*:*:*:*:*","matchCriteriaId":"DB05374D-1530-4143-8BF7-E3BB57B3D9D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30244","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29200","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1524/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5610","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1524/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2444","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en userreg.php de CaLogic Calendars 1.2.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro langsel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calogic:calogic_calendars:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B9F3A94B-F5D9-43CA-AB4E-6C4E7DB310D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29193","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42391","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5607","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2445","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profile.php de Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 y versiones anteriores permite a atacntes remotos inyectar web script o HTML de su elección a través del parámetor userid en una acción show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wgcc:web_group_communication_center:1.0.3:prerelease1:*:*:*:*:*:*","matchCriteriaId":"98C79F2F-2501-49B7-B7F0-1C2459794E43"}]}]}],"references":[{"url":"http://secunia.com/advisories/30235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42383","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5606","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2446","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) userid parameter to (a) profile.php in a \"show moreinfo\" action; the (2) bildid parameter to (b) picturegallery.php in a shownext action; the (3) id parameter to (c) filebase.php in a freigeben action, (d) schedule.php in a del action, and (e) profile.php in an observe action; and the (4) pmid parameter in a delete action and (5) folderid parameter in a showfolder action to (f) message.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SLQ en Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 y versiones anteriores permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro (1) userid de (a) profile.php en una acción \"show moreinfo\"; el parámetor (2) bildid de (b) picturegallery.php en una acción shownext; el parámetro (3) id de (c) filebase.php en una acción freigeben, (d) schedule.php en una acción del, y (e) profile.php en una acción observe; y el parámetro (4) pmid en una acción delete y el parámetro (5) folderid en una acción showfolder de (f) message.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wgcc:web_group_communication_center:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3_prerelease1","matchCriteriaId":"17174AE9-9CC9-4679-9A66-E9D440BBEE80"}]}]}],"references":[{"url":"http://secunia.com/advisories/30235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42385","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5606","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2447","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en products.php de la extensión (plugin) Mytipper ZoGo-shop 1.15.5 y 1.16 Beta 13 para e107 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mytipper:zogo_shop:1.15.5:*:*:*:*:*:*:*","matchCriteriaId":"E9CE8FEB-0EDF-487C-B564-F089962558ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mytipper:zogo_shop:1.16:beta13:*:*:*:*:*:*","matchCriteriaId":"95EDBA63-60B3-4F94-83C2-E70E60C86259"}]}]}],"references":[{"url":"http://secunia.com/advisories/30232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29185","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42384","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2448","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) admin/duzenle.asp and (b) admin_oku.asp; the (2) kid parameter to (c) kategori.asp and (d) admin_kategori.asp; and unspecified parameters to (e) uye.asp and (f) oku.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Meto Forum 1.1 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) id de (a) admin/duzenle.asp y (b) admin_oku.asp; el parámetro (2) kid de (c) kategori.asp y (d) admin_kategori.asp; y parámetros no especificados de (e) uye.asp y (f) oku.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:meto_forum:1.1:*:*:*:*:*:*:*","matchCriteriaId":"04A8D043-D20F-4B30-8ADD-E5DA5F5AF68E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42390","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42398","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2449","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gallery parameter to (a) index.php and (b) image.php, and the (2) imgnum parameter to image.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Isaac McGowan phpInstantGallery 2.0 permiten a atacantes remotos inyectar web script o HTML de su elección a través del parámetro (1) gallery de (a) index.php y (b) image.php, y el parámetro (2) imgnum de image.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikemcg:phpinstantgallery:2.0:*:*:*:*:*:*:*","matchCriteriaId":"442D4259-D8EF-4B74-A99E-67F67C18B552"}]}]}],"references":[{"url":"http://secunia.com/advisories/30524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29152","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2450","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la extensión Statistics (también conocido como ke_stats) 0.1.2 y versiones anteriores para TYPO3 permiten a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inmedias:statistics:0.0.1:alpha:*:*:*:typo3:*:*","matchCriteriaId":"2C5A9A39-E4CD-461F-8CF2-BBDF4BCB8F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:inmedias:statistics:0.1.0:beta:*:*:*:typo3:*:*","matchCriteriaId":"2A382F81-F48F-48F0-BA76-83ACFE2761E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:inmedias:statistics:0.1.1:beta:*:*:*:typo3:*:*","matchCriteriaId":"02FAF11C-42BC-4B11-A317-2547A6AF2D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:inmedias:statistics:0.1.2:beta:*:*:*:typo3:*:*","matchCriteriaId":"30BC374F-C1FD-4FB1-9E9D-8A2A88FEF1BE"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-4","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42366","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2451","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la extensión Statistics (también conocido como ke_stats) extension 0.1.2 y versiones anteriores para TYPO3 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inmedias:statistics:*:*:*:*:*:typo3:*:*","versionEndIncluding":"0.1.2","matchCriteriaId":"60889B8D-0E00-49D5-B0DD-45F53FB5A286"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-4","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42368","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2452","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Questionaire (aka pbsurvey) extension 1.2.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión Questionaire (también conocido como pbsurvey) 1.2.0 y versiones anteriores para TYPO3 permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inmedias:questionaire:*:*:*:*:*:typo3:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"EA5F118C-4F8A-4BFA-89D4-00FE5D328326"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-2","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42365","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2453","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to (1) browse.php and (2) search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHP Classifieds Script permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro fatherID de (1) browse.php y (2) search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpclassifiedsscript:php_classifieds_script:*:*:*:*:*:*:*:*","matchCriteriaId":"B1DD0116-0D22-41E4-9FD4-E25D0EB105A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29169","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42380","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5599","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2454","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente xsstream-dm (com_xsstream-dm) 0.01 Beta para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro movie de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_xsstream-dm:0.01_beta:*:*:*:*:*:*:*","matchCriteriaId":"2DC4B5EE-1816-4961-912C-7BABF5AEFF2B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491943/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29144","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42323","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5587","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491943/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2455","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comment.php de la extensión (plugin) MacGuru BLOG Engine 2.2 para e107 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro rid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107coders:e107_blog_engine:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4CE196E7-7177-41F0-9D1C-9A4EF02FD4FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29181","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42386","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2456","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the comic_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php deComicShout 2.5 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro comic_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comicshout:comicshout:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"65E35CAC-C087-4C73-910B-3D13409752BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.comicshout.com/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29301","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1594/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42547","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5658","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.comicshout.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1594/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2457","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jokes_category.php de PHP-Jokesite 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitmixsoft:php-jokesite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"60B3F8A9-683E-4887-97C1-C6EA7A6D8432"}]}]}],"references":[{"url":"http://secunia.com/advisories/30314","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29308","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1592/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42554","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1592/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2458","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Starsgames Control Panel 4.6.2 y versiones anteriores permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro st."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4shared:starsgames_control_panel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.2","matchCriteriaId":"3B43C1B2-53BF-4C80-ACF2-E4EE20A37228"}]}]}],"references":[{"url":"http://secunia.com/advisories/30321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492264/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42544","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492264/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2459","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en page.php de EntertainmentScript 1.4.0 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entertainmentscript:entertainmentscript:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"46A20999-5E58-409D-BE68-8534561CEDD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42540","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2460","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en faq.php de vBulletin 3.7.0 Gold permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro q en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.0:gold:*:*:*:*:*:*","matchCriteriaId":"308AD785-7497-4809-BD98-3F6CCF5F520B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492290/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29293","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492290/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2461","sourceIdentifier":"cve@mitre.org","published":"2008-05-27T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands via the pageid parameter, a different vector than CVE-2006-4047."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Netious CMS 0.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pageid, un vector diferente a CVE-2006-4047."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netious:netious_cms:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2B16DA0-3DF3-4260-9C81-96271E4240D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29319","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1591/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42726","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5661","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1591/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2462","sourceIdentifier":"cret@cert.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el comando de documentación viewfile de Caucho Resin antes de 3.0.25 y 3.1.x anterior a 3.1.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.25","matchCriteriaId":"79A3FAAD-1AAA-435A-815F-010D7310BAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.4","matchCriteriaId":"DB11056E-BDF0-406F-ACA6-BD143A193232"}]}]}],"references":[{"url":"http://secunia.com/advisories/30845","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/305208","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29948","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020372","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1930/references","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43367","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/305208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1930/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2463","sourceIdentifier":"cret@cert.org","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"El control ActiveX Microsoft Office Snapshot Viewer en snapview.ocx, distribuido en Snapshot Viewer and Microsoft Office Access 2000 through 2003, permite a atacantes remotos descargar archivos de su elección a un equipo cliente a través de un documento HTML o mensaje de correo manipulados. NOTA: esto puede ser aprovechado para ejecutar código si se escribe la carpeta de inicio (StartUp)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_snapshot_viewer_activex:office_2003:*:*:*:*:*:*:*","matchCriteriaId":"C2AA6000-5E18-4F7A-8B06-9B7505675262"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_snapshot_viewer_activex:office_xp:*:*:*:*:*:*:*","matchCriteriaId":"B3353323-E1FF-4167-8DE8-EB3CD66AF721"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_snapshot_viewer_activex:office2000:*:*:*:*:*:*:*","matchCriteriaId":"7A067607-DFCE-44A7-91B9-E5EAF98CB5AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/30883","source":"cret@cert.org"},{"url":"http://www.exploit-db.com/exploits/6124","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/837785","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/955179.mspx","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/30114","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1020433","source":"cret@cert.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-189A.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2012/references","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43613","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6120","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/6124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/837785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/955179.mspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-189A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2012/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2464","sourceIdentifier":"cret@cert.org","published":"2008-09-11T01:10:39.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value."},{"lang":"es","value":"La Función mld_input en sys/netinet6/mld6.c in the kernel en NetBSD 4.0, FreeBSD, y KAME, cuando INET6 está habilitado, permite a atacantes remotos provocar una denegación de servicio (Error de división entre 0 y caída) a través de una petición ICMPv6 Multicast Listener Discovery (MLD) mal formada  con un determinado valor de \"Maximum Response Delay\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kame:kame:*:*:*:*:*:*:*:*","matchCriteriaId":"0594C59E-DF58-437D-9DD4-E8CF82DDB3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","matchCriteriaId":"D9EC02F3-3905-460D-8949-3B26394215CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"}]}]}],"references":[{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-netbsd.html","source":"cret@cert.org","tags":["Exploit"]},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c","source":"cret@cert.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.46&r2=1.47&f=h","source":"cret@cert.org"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-011.txt.asc","source":"cret@cert.org"},{"url":"http://securitytracker.com/id?1020822","source":"cret@cert.org"},{"url":"http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c","source":"cret@cert.org"},{"url":"http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.34%3Br2=1.35%3Bf=h","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/817940","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31026","source":"cret@cert.org"},{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-netbsd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.46&r2=1.47&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-011.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.34%3Br2=1.35%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/817940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2468","sourceIdentifier":"cret@cert.org","published":"2008-09-18T15:04:27.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments."},{"lang":"es","value":"Múltiples desbordamientos del búfer en el Servicio Servidor QIP (también conocido como qipsrvr.exe) en LANDesk Management Suite, Security Suite y Server Manager 8.8 y anteriores; permiten a atacantes remotos ejecutar código de su elección a través de una solicitud de cierre manipulada. Está relacionado con los argumentos StringToMap y StringSize."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_management_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"AAACB75E-6E9E-47E9-95C8-7C5431680EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_management_suite:8.7:*:*:*:*:*:*:*","matchCriteriaId":"76A064EF-94BD-44FC-BA24-1D09FCBA950E"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_security_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"0874ECC6-1DE7-4010-8203-DB7EA0DEC2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_security_suite:8.7:*:*:*:*:*:*:*","matchCriteriaId":"9C4236A8-403A-4946-A819-E60E9F743025"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_server_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"4B3DDEF2-9868-4CF8-AE6F-4157490E1CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_server_manager:8.7:*:*:*:*:*:*:*","matchCriteriaId":"6E82F56E-16A2-4567-A11F-281EAF65FEB5"}]}]}],"references":[{"url":"http://community.landesk.com/support/docs/DOC-3276","source":"cret@cert.org","tags":["Patch"]},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-06","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/31888","source":"cret@cert.org"},{"url":"http://securityreason.com/securityalert/4269","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/538011","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/496369/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/31193","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020888","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2588","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45154","source":"cret@cert.org"},{"url":"http://community.landesk.com/support/docs/DOC-3276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/538011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/496369/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2469","sourceIdentifier":"cret@cert.org","published":"2008-10-23T22:00:01.073","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función SPF_dns_resolv_lookup en Spf_dns_resolv.c en libspf2 antes de 1.2.8 permite a atacantes remotos ejecutar código de su elección mediante un archivo DNS TXT largo con un campo longitud modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.7","matchCriteriaId":"D84281EF-A1B8-43C1-B1EA-1AA3D6EFF71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6916DA20-4EAE-4AB7-B0D8-8E711DA87D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9B66D6DC-EB51-48A0-B157-70962F05DC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E9927C3A-B001-4B95-A65C-8C86449E71F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B857F114-B720-493C-8E57-965D1C56C550"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"66AFDC69-65BE-477A-A9E5-1B7C51E120EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8A115543-F06C-4C45-97BE-62A603AD6FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5A946E9A-F440-4772-9939-553A883FEE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libspf:libspf2:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FF0F5AF-854F-4270-A33B-0D7B06E83639"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32396","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32450","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32496","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32720","source":"cret@cert.org"},{"url":"http://security.gentoo.org/glsa/glsa-200810-03.xml","source":"cret@cert.org"},{"url":"http://securityreason.com/securityalert/4487","source":"cret@cert.org"},{"url":"http://up2date.astaro.com/2008/11/up2date_7305_released.html","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2008/dsa-1659","source":"cret@cert.org"},{"url":"http://www.doxpara.com/?p=1263","source":"cret@cert.org"},{"url":"http://www.doxpara.com/?page_id=1256","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/183657","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31881","source":"cret@cert.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2896","source":"cret@cert.org"},{"url":"https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1","source":"cret@cert.org"},{"url":"https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46055","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/6805","source":"cret@cert.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200810-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2008/11/up2date_7305_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.doxpara.com/?p=1263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.doxpara.com/?page_id=1256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/183657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2470","sourceIdentifier":"cret@cert.org","published":"2008-09-18T18:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response."},{"lang":"es","value":"El control ActiveX InstallShield Update Service Agent en isusweb.dll que permite a los atacantes remotos causar una denegación de servicios (corrupción de memoria y caída del navegador) y posiblemente ejecutar arbitrariamente código a través de una llamada a ExecuteRemote con una URL que resulta de una respuesta de error 404."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macrovision:flexnet_connect:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2B07D756-3DB4-4ECD-83FD-CB60830F9267"}]}]}],"references":[{"url":"http://support.installshield.com/kb/view.asp?articleid=Q113020","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/630017","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31235","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2625","source":"cret@cert.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45248","source":"cret@cert.org","tags":["VDB Entry"]},{"url":"http://support.installshield.com/kb/view.asp?articleid=Q113020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/630017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2474","sourceIdentifier":"cret@cert.org","published":"2008-09-29T17:17:29.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"This issue is corrected in version 3.5.5 of the x87 executable. To obtain a patch or upgrade software please contact your vendor. The x87 executable is considered obsolete in newer versions of the PCU 400 and should be replaced\r\nby the newer x88 or x89 executable where applicable.\r\n\r\nLink to contact information: http://www.abb.com/industries/db0003db004333/c12573e7003305cbc1257074003d0702.aspx?productLanguage=us&country=US&tabKey=Contacts","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface."},{"lang":"es","value":"Desbordamiento de búfer en x87 anteriores a v3.5.5 en ABB Process Comunicatión Unit 400 (PCU400) v4.4 hasta v4.6, permite a atacantes remotos ejecutar código arbitrario a través de un paquete manipulado utilizando los protocolos de comunicación (1)IEC60870-5-101 o (2) IEC60870-5-104 para el interfaz web del X87."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:abb:pcu400:4.4:*:*:*:*:*:*:*","matchCriteriaId":"053989DE-274C-4000-83E2-3B6BB13C72A3"},{"vulnerable":true,"criteria":"cpe:2.3:h:abb:pcu400:4.5:*:*:*:*:*:*:*","matchCriteriaId":"7F189832-AAE9-467D-ACC0-F1DD81C1DA5E"},{"vulnerable":true,"criteria":"cpe:2.3:h:abb:pcu400:4.6:*:*:*:*:*:*:*","matchCriteriaId":"50B1D03E-E73B-4759-A841-CEBE6CA7F4F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32047","source":"cret@cert.org"},{"url":"http://securityreason.com/securityalert/4320","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/343971","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CTAR-7JTNRX","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/496739/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/31391","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/343971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CTAR-7JTNRX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2476","sourceIdentifier":"cret@cert.org","published":"2008-10-03T15:07:10.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB)."},{"lang":"es","value":"La implementación IPv6 Neighbor Discovery Protocol (NDP) en (1) FreeBSD v6.3 hasta v7.1, (2) OpenBSD v4.2 y v4.3, (3) NetBSD, (4) Force10 FTOS versiones anteriores a vE7.7.1.1, (5) Juniper JUNOS, y (6) Wind River VxWorks 5.x hasta v6.4 no valida los mensaje originales de Neighbor Discovery, lo cual permite a atacantes remotos provocar una denegación de servicio (pérdida de conectividad) o leer tráfico de red privado a través de mensajes falsos que modifica la Forward Information Base (FIB)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2017-09-28T21:31:11.053"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:force10:ftos:*:*:*:*:*:*:*:*","matchCriteriaId":"4941A848-A02E-4234-82A3-076AABC94476"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:jnos:*:*:*:*:*:*:*:*","matchCriteriaId":"9BD3413A-DD12-4C60-88F4-E2D6C1264319"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","matchCriteriaId":"DFCBBA4F-BD05-4044-98A0-2825A413D299"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:5:*:*:*:*:*:*:*","matchCriteriaId":"F69B80D9-E6A6-4761-9EE3-3EF5E55EFA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:5.5:*:*:*:*:*:*:*","matchCriteriaId":"FE3680A0-7B0C-4E91-97D7-B3F33EE1569A"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32112","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32116","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32117","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32133","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32406","source":"cret@cert.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020968","source":"cret@cert.org"},{"url":"http://support.apple.com/kb/HT3467","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/472363","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata42.html#015_ndp","source":"cret@cert.org"},{"url":"http://www.openbsd.org/errata43.html#006_ndp","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/31529","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1021109","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1021132","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2750","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2751","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2752","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/0633","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670","source":"cret@cert.org"},{"url":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view","source":"cret@cert.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/472363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata42.html#015_ndp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata43.html#006_ndp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2477","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.pho en MxBB (también conocido como  MX-System) Portal 2.7.3. permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mx-system:mxbb_portal:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"02573A39-7FBC-4AE3-9891-293EEF5251D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29307","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1593/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42551","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1593/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2478","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box).  NOTE: the vendor disputes this, stating \"I'm unable to reproduce such an issue on multiple servers running different versions of cPanel."},{"lang":"es","value":"** CUESTIONADA ** scripts/wwwacct en cPanel 11.18.6 STABLE y anteriores, y 11.23.1 CURRENT y anteriores, permite a usuarios autenticados remotamente con privilegios de re-vendedor ejecutar código arbitrario a través de meta caracteres de consola en el campo de dirección en un Email (también conocido como campo de texto de Email). NOTA: el fabricante cuestiona que, \"Me es imposible reproducir ese fallo en distintos servidores ejecutando diferentes versiones de cPanel.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:*:stable:*:*:*:*:*:*","versionEndIncluding":"11.8.6","matchCriteriaId":"DBB5DAB4-FCFE-4E45-9DB8-A3F2783D8CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:*:current:*:*:*:*:*:*","versionEndIncluding":"11.23.1","matchCriteriaId":"3B9223E1-8A55-4614-99FC-92C84A4D6E0B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492223/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492259/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020042","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492223/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492259/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2479","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en phpFix 2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1)kind a fix/browsw.php y (2)account a auth/00_pass.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:badongo:phpfix:2.0:*:*:*:*:*:*:*","matchCriteriaId":"925DA216-DEF9-4E58-967E-F7D8F5604F76"}]}]}],"references":[{"url":"http://secunia.com/advisories/30397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29371","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42636","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2480","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the _pages_dir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en plus.php de plusPHP Short URL Script  1.6, permite a atacantes remotos ejecutar código PHP arbitrario mediante una URL en el parámetro the_pages_dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plusphp:plusphp_short_url_multi-user_script:1.6:*:*:*:*:*:*:*","matchCriteriaId":"78230E14-0E5A-4A3F-87A3-8F8CE12C7ADB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29357","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1645/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42623","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1645/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2481","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_auth[phpbb_path] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en authentication/phpbb3/phpbb3.functions.php de phpRaider 1.0.7 y 1.0.7a, cuando register_globals se encuentra activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL mediante el parámetro pConfig_auth[phpbb_path]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpraider:phpraider:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"82B44E2E-BB9F-48F2-B669-C7A5DF76DCF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpraider:phpraider:1.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"FFB62328-93DB-4EDB-A281-487BCB184443"}]}]}],"references":[{"url":"http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29356","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1646/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42622","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5671","source":"cve@mitre.org"},{"url":"http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1646/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2482","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter in a go action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en install_mod.php en insanevisions OneCMS 2.5, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de la secuencia .. (punto punto) en el parámetro \"load\" en una acción \"go\" (ir)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insanevisions:onecms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"89EE97C6-1088-45BD-BA99-35E421407B10"}]}]}],"references":[{"url":"http://secunia.com/advisories/30378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492513/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29374","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1648/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42600","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492513/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1648/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2483","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the op parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Xomol CMS 1.20071213, permite a atacantes remotos incluir y ejecutar ficheros locales a través de la secuencia ..(punto punto) en el parámetro \"op\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xomol:xomol_cms:1.20071213:*:*:*:*:*:*:*","matchCriteriaId":"37B7AEFE-F0F7-4526-AEA7-C0D2954E10E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29359","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1644/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42632","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1644/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2484","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Xomol CMS 1.20071213, cuando las magic_quotes están desactivadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"email\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xomol:xomol_cms:1.20071213:*:*:*:*:*:*:*","matchCriteriaId":"37B7AEFE-F0F7-4526-AEA7-C0D2954E10E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29358","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1644/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42631","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1644/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2485","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc.php) in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en la script de redirección de URL (archivo inc/url_redirection.inc.php) en PCPIN Chat versiones anteriores a 6.11, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pcpin:pcpin_chat:*:*:*:*:*:*:*:*","versionEndIncluding":"6.11","matchCriteriaId":"8FF33454-6760-4A87-B17C-3A496D31ACA5"}]}]}],"references":[{"url":"http://community.pcpin.com/?include=700&thread_id=6918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30371","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492563/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29363","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42627","source":"cve@mitre.org"},{"url":"http://community.pcpin.com/?include=700&thread_id=6918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492563/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2486","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in eMule Plus before 1.2d has unknown impact and attack vectors related to \"staticservers.dat processing.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en eMule Plus anterior a 1.2d tiene un impacto y vectores de ataque desconocidos en relación al \"procesamiento de staticservers.dat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emule:emule_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2d","matchCriteriaId":"F0C754F3-5205-4047-AB40-80D9A131E5BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600155","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1651/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42620","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=600155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1651/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2487","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MAXSITE 1.10 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro categoría en una acción \"webboard\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxsite:maxsite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10","matchCriteriaId":"2F08AEB5-DD11-474B-8B85-4AE3CB9B9EF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1656/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42634","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5676","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1656/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2488","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts."},{"lang":"es","value":"admin/userform.php en RoomPHPlanning 1.5 no requiere el uso de credenciales administrativas, esto permite a usuarios autenticados remotamente la creación de nuevas cuentas de administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beaussier:roomphplanning:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F11BBEFF-68A4-4A15-85F4-DC4F044DD722"}]}]}],"references":[{"url":"http://secunia.com/advisories/30376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29377","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42629","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2489","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified \"user input.\""},{"lang":"es","value":"Inyección SQL en la biblioteca para la extensión Frontend Plugins (también conocido como sg_zfelib) 1.1.512 y anteriores para TYPO3, permite a atacantes remotos la ejecución arbitraria de comandos SQL a través de un \"user input\" no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sg_zfelib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.512","matchCriteriaId":"7D7BBC05-7DA6-4088-BF7D-99ADC4B9362D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080527-2/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1665/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42625","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080527-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1665/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2490","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified \"user input.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión  KJ Image Lightbox 2 (también conocida como kj_imagelightbox2) 1.4.2 y anteriores, para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una \"user input\" no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:kj_imagelightbox2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2","matchCriteriaId":"47409DA0-8768-47EA-BB9F-E30639E2B6E7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080527-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1666/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080527-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1666/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2491","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in adv_cat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en adv_cat.php en AbleSpace, permite a atacantes remotos jecutar comandos SQL de su elección a través del parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotscripts:ablespace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1DDB0EE5-6E2B-47DA-869B-C86AC8B4C910"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492576/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29369","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492576/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2492","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Campus Bulletin Board 3.4, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) id a post3/view.asp y (2) review a post3/book.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:badongo:campus_bulletin_board:3.4:*:*:*:*:*:*:*","matchCriteriaId":"28C1C574-112A-4044-A286-10B9D1BD1BDE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29375","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42660","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2493","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en Book.asp en Campus Bulletin Board 3.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"review\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:badongo:campus_bulletin_board:3.4:*:*:*:*:*:*:*","matchCriteriaId":"28C1C574-112A-4044-A286-10B9D1BD1BDE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29375","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42661","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2494","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Zina 1.0 RC3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"l\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pancake:zina:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"57C1B442-7CC8-4C53-9BB2-FD41D9DE6CF4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492593/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29367","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42642","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492593/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2495","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot) in the p parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Zina 1.0 RC3, permite a atacantes remoto provocar un impacto desconocido a través de la secuencia .. (punto punto) en el parámetro \"p\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pancake:zina:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"57C1B442-7CC8-4C53-9BB2-FD41D9DE6CF4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492593/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29367","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42641","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492593/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2496","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) login.php, and (3) credits.php in admin/, and (4) upgrade/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Quate CMS 0.3.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de PATH_INFO hacia (1) index.php, (2) login.php, (3) credits.php en admin/ y (4) upgrade/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quate:quate_cms:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4F1F8A34-31DB-4475-96C9-75C423883877"}]}]}],"references":[{"url":"http://secunia.com/advisories/30377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29348","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42603","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2497","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Mambo anterior a 4.6.4, permite a atacantes inyectar arbitrariamente cabeceras HTTP y llevar a cabo respuestas HTTP dividiendo ataques a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.4","matchCriteriaId":"FA9494EA-CE03-42EF-B67E-B274EC61C096"}]}]}],"references":[{"url":"http://forum.mambo-foundation.org/showthread.php?t=11799","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29373","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1660/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42645","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=11799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1660/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2498","sourceIdentifier":"cve@mitre.org","published":"2008-05-28T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) articleid and (2) mcname parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en Mambo anterior a 4.6.4, cuando magic_quotes_gpc están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) articleid y (2)mcname. NOTA: algunos de estos detalles has sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.4","matchCriteriaId":"FA9494EA-CE03-42EF-B67E-B274EC61C096"}]}]}],"references":[{"url":"http://forum.mambo-foundation.org/showthread.php?t=11799","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29373","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1660/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42644","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=11799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1660/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2499","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el Community Services Multiplexer (también conocido como MUX o StMux.exe) de IBM Lotus Sametime 7.5.1 CF1 y anteriores, y 8.x anterior a 8.0.1, permite a atacantes remotos ejecutar código de su elección mediante una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"9D250D7E-88E7-46B7-8C63-C067D9889A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_sametime:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.0.1","matchCriteriaId":"A811D9B9-99EF-4324-87ED-F13A311EAB67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_sametime:7.5.1:cf1:*:*:*:*:*:*","matchCriteriaId":"F8A12AF0-F301-4661-AD90-21077BF203B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29328","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020093","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1595/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-028/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42575","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1595/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-028/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2500","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T16:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the MOStlyContent Editor (MOStlyCE) component before 3.0 for Mambo allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el Componente MOStlyContent Editor anterior a la v3.0(MOStlyCE) para Mambo, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mostlyce:*:*:*:*:*:*:*:*","versionEndIncluding":"2","matchCriteriaId":"ECF347AF-A47D-4224-8D69-2B1E77328BE0"}]}]}],"references":[{"url":"http://forum.mambo-foundation.org/showthread.php?t=11799","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42749","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=11799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2501","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHPhotoalbum 0.5, permite a atacantes remotos ejecutar comandos SQL a través de (1) parámetro album en thumbnails.php y (2) parametro pid en displayimage.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:henning_stoverud:phphotoalbum:0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9F0B92-6041-44BF-8A19-28A08EBDABB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42670","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2502","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the web server in eMule X-Ray before 1.4 allows remote attackers to trigger memory corruption via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor web en eMule X-Ray anteriores a la versión 1.4 permite a atacantes remotos provocar una corrupción de memoria mediante vectores de ataque desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emule:x_ray:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"86B76F35-927B-474A-80BA-CAD93C0BE430"}]}]}],"references":[{"url":"http://secunia.com/advisories/30292","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=599894","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1685/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42686","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=599894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1685/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2503","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors."},{"lang":"es","value":"Desbordamiento de búfer en Uploadlist de eMule X-Ray versiones anteriores a la 1.4, tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:emule_x-ray:1.2:*:*:*:*:*:*:*","matchCriteriaId":"8D45621C-AF26-47CD-B597-A7DFC0C65726"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:emule_x-ray:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E440CBBB-E4D6-4FA0-94FB-97E43841E8FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=599894","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1685/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=599894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1685/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2504","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to netbutik.php and the (2) id parameter to product.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Simpel Side Netbutik 1 hasta 4, permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) cat a netbutik.php y (2) id a product.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:netbutik:1:*:*:*:*:*:*:*","matchCriteriaId":"BF4B9E60-CC7F-413E-80BE-F7FB7E7EF51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:netbutik:2:*:*:*:*:*:*:*","matchCriteriaId":"3C31457C-C0DB-4CCA-9022-801C7BAF0FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:netbutik:3:*:*:*:*:*:*:*","matchCriteriaId":"19313E3D-E567-4F5A-ACAD-607A4D371884"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:netbutik:4:*:*:*:*:*:*:*","matchCriteriaId":"2673A6F2-3173-4150-9765-929D42DEB363"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29333","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1658","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42572","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2505","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en result.php en Simpel Side Weblosning 1 a la 4, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosninger:1:*:*:*:*:*:*:*","matchCriteriaId":"488D4B30-6E83-4A46-BBAF-F45F8C16AB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosninger:2:*:*:*:*:*:*:*","matchCriteriaId":"6C3E968D-0233-4B14-A311-4D46B438BFEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosninger:3:*:*:*:*:*:*:*","matchCriteriaId":"228D1399-43C0-4B47-A0A4-4D4454858048"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosninger:4:*:*:*:*:*:*:*","matchCriteriaId":"E3AD1939-EF97-4388-A14F-59CFF1B1708A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29332","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42574","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2506","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via the (1) mainid and (2) id parameters to index2.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Simpel Side Weblosning de la v1 a la v4, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) mainid y (2) id al index2.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosning:1:*:*:*:*:*:*:*","matchCriteriaId":"602BF7A8-D805-4687-8D14-07B00744C7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosning:2:*:*:*:*:*:*:*","matchCriteriaId":"32D6D8CA-7158-4DEC-B02B-22BDD1DA6B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosning:3:*:*:*:*:*:*:*","matchCriteriaId":"82935D6F-B44E-4060-B848-4F0A07E8F74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpel_side:weblosning:4:*:*:*:*:*:*:*","matchCriteriaId":"ACFC85AB-C33C-43D0-8F4B-0ECAA7831EDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42573","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2507","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the CalendarName parameter in a ShowIt action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Calcium40.pl en Brown Bear Software Calcium 3.10 y 4.0.4, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro CalendarName in una acción ShowIt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brown_bear_software:calcium:3.10:*:*:*:*:*:*:*","matchCriteriaId":"6D85AB2F-6BCF-4955-A697-571093648C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:brown_bear_software:calcium:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F9BEC824-65E4-4D99-AAC5-FCDE2BDC94EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30431","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492719/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29411","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492719/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2508","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML via the \"nb\" parameter in voir mode."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) de news.php en Tr Script News 2.1 permite a atacantes remotos inyectar script web o HTML de su elección a través del parámetro \"nb\" en modo voir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tr_script_news:tr_script_news:2.1:*:*:*:*:*:*:*","matchCriteriaId":"AC184BEA-14AA-45F8-8084-211BA534E715"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29388","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/91-TR-News-v2.1-xss.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/91-TR-News-v2.1-xss.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2509","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pwd.asp en Excuse Online, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:excuse_online:excuse_online:*:*:*:*:*:*:*:*","matchCriteriaId":"A85C67E7-22C7-4055-92F6-F0D34BD53F58"}]}]}],"references":[{"url":"http://www.chroot.org/exploits/chroot_uu_002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492580/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29370","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42643","source":"cve@mitre.org"},{"url":"http://www.chroot.org/exploits/chroot_uu_002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492580/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2510","sourceIdentifier":"cve@mitre.org","published":"2008-05-29T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the f_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en archivo wp-uploadfile.php en el plugin UploadFile para WordPress, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro f_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:upload_file_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"B77668F7-D5E0-47DB-B8E1-FCDDA38A7FE5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492555/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29352","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492555/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2511","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the argument to the SaveToFile method.  NOTE: this can be leveraged for code execution by writing to a Startup folder.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el control ActiveX UmxEventCli.CachedAuditDataList.1 (también se conoce como UmxEventCliLib) en biblioteca UmxEventCli.dll en CA Internet Security Suite 2008, permite a los atacantes remotos crear y sobrescribir archivos arbitrarios por medio de un .. (punto punto) en el argumento al método SaveToFile . NOTA: esto puede ser aprovechado para la ejecución del código mediante la escritura en una carpeta Startup. NOTA: algunos de estos detalles fueron obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"33F7E184-EA23-487C-83ED-65CF8DD2DB18"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_CA_poc.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492679/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020129","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1696/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42712","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5682","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_CA_poc.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492679/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1696/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2512","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en Symantec Backup Exec System Recovery Manager versiones 7.x anteriores a 7.0.4 y versiones 8.x anteriores a 8.0.2, permite a los atacantes remotos leer archivos arbitrarios por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17E843F0-6A21-4778-864C-CAADB1AC1457"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EB10B9F3-8A94-4730-B50F-E1CCBD8424A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C2B8CF4-D6C1-4E3A-962D-06D6E33BFDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5AD6023F-C2E2-4FD2-ADE5-61A79914845C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FCAA9653-3E7E-47C9-A93E-E4F1956A5D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backupexec_system_recovery:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAF07C48-B5B8-4C98-8087-48E9DDD7F979"}]}]}],"references":[{"url":"http://secunia.com/advisories/30432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29350","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020128","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1686/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42714","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1686/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2513","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 allows local users to execute arbitrary code in kernel mode via unknown attack vectors."},{"lang":"es","value":"Un desbordamiento de búfer en el kernel en IBM AIX versiones 5.2, 5.3 y 6.1, permite a los usuarios locales ejecutar código arbitrario en modo kernel por medio de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/unix_advisory.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30349","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020083","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ19911","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ21481","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22368","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22369","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29329","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1626/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42577","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5684","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/unix_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ19911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ21481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1626/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2514","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown attack vectors."},{"lang":"es","value":"Un desbordamiento de búfer en errpt en IBM AIX versiones 5.2, 5.3 y 6.1, permite a los usuarios locales alcanzar privilegios por medio de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/errpt_advisory.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30349","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020084","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ19905","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ21494","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22346","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22347","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22348","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29323","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1626/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42578","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5629","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/errpt_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ19905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ21494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1626/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2515","sourceIdentifier":"cve@mitre.org","published":"2008-06-02T21:30:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an \"environment variable handling error.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en iostat en IBM AIX versiones 5.2, 5.3 y 6.1 permite a los usuarios locales alcanzar privilegios por medio de vectores desconocidos relacionados con un \"environment variable handling error.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020085","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ20635","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ21506","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22349","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22350","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22351","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29325","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1626/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42579","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/iostat_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ20635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ21506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ22351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1626/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2516","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_sm_authenticate in pam_pgsql.c in libpam-pgsql 0.6.3 does not properly consider operator precedence when evaluating the success of a pam_get_pass function call, which allows local users to gain privileges via a SIGINT signal when this function is executing, as demonstrated by a CTRL-C sequence at a sudo password prompt in an \"auth sufficient pam_pgsql.so\" configuration."},{"lang":"es","value":"pam_sm_authenticate en pam_pgsql.c de libpam-pgsql 0.6.3 no considera apropiadamente la prioridad de los operadores cuando evalúan el éxito de una llamada a la función pam_get_pass, lo cual permite a usuarios locales conseguir privilegios a través de una señal SIGINT cuando esta función se está ejecutando, tal y como lo demostrado por la secuencia CTRL-C en la introducción de la contaseña de sudo en una configuración \"auth sufficient pam_pgsql.so\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpam-pgsql:libpam-pgsql:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7537CF9B-687D-4522-B7DF-A5B86FA2878F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=601775","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29360","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020111","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1654/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42653","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=601775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1654/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2517","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain sensitive information by listing the process."},{"lang":"es","value":"La secuencia de comandos (script) sarab.sh de SaraB versiones anteriores a 0.2.4 pone la clave del programa de encriptación dar en la línea de comandos, lo cual permite a usuarios locales obtener información sensible mediante el listado de procesos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sarab:sarab:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.3","matchCriteriaId":"B8E380DB-8049-4CA6-B0CB-12477D172BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sarab:sarab:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4D92892D-06A9-4BFC-8790-A9E3BDD63D0F"}]}]}],"references":[{"url":"http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34&r2=36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29364","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1659/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42621","source":"cve@mitre.org"},{"url":"http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?r1=34&r2=36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sarab.svn.sourceforge.net/viewvc/sarab/sarab/sarab.sh?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=601603&group_id=91804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1659/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2518","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el mecanismo de búsqueda avanzada (webapps/search/advanced.jsp) de Sun Java System Web Server 6.1 versiones anteriores a SP9 y 7.0 versiones anteriores a  Update 3 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados, probablemente relacionados al parámetro next."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"044D96F6-7A18-4295-A665-16F1A6630963"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"85A181D1-C261-4C29-BC8C-A7A815A63E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"3A10F68F-4A2F-44A0-A039-1A34C6E2D083"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"021DC080-18ED-41F4-9FBD-1DD0C332F871"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"C878B2FD-88A1-44E2-9234-C40CA1DDC5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"BABE9BB1-E968-4EC9-A13A-6ECBCDC0D9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"B6606659-59FE-4E17-9643-2267223DE6F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:*:*:*:*:*:*","matchCriteriaId":"9BC77D08-B591-4824-AC47-F14F4F53C63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:*:*:*:*:*:*","matchCriteriaId":"F79805E6-ED7E-4BD1-9A2F-2D3B23B05981"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DFAA741F-6B77-44E5-8B84-AB5E49901BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:update_1:*:*:*:*:*:*","matchCriteriaId":"F44ABA9C-D281-4C9D-A313-013F82E5BFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:update_2:*:*:*:*:*:*","matchCriteriaId":"60712BCA-1AE2-4F19-B8EF-462A1F0BDED3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30381","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236481-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29355","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020110","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1649/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42624","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-236481-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1649/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2519","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T14:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via .. (dot dot) sequences in responses to LIST commands, a related issue to CVE-2002-1345.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Core FTP client 2.1 Build 1565 permite a servidores FTP remotos crear o sobrescribir ficheros de su elección a través de secuencias .. (punto punto) en respuesta a comandos LIST, una cuestión relacionada a CVE-2002-1345.  \r\nNOTA: esto puede ser utilizado para ejecutar código escribiendo en la carpeta Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:core_ftp:core_ftp:2.1:build_1565:le:*:*:*:*:*","matchCriteriaId":"D8AEF280-28C0-4847-A4E3-C26093D7C7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:core_ftp:core_ftp:2.1:build_1565:pro:*:*:*:*:*","matchCriteriaId":"3A3D254F-4A38-4C5E-B269-80AAA3B62AA8"}]}]}],"references":[{"url":"http://secunia.com/advisories/30389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/coreftp211565-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.coreftp.com/forums/viewtopic.php?t=6078","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29362","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1643/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/coreftp211565-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.coreftp.com/forums/viewtopic.php?t=6078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1643/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2520","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][addon] parameter to (a) addon/smarty/plugins/function.captcha.php and (b) system/classes/sql/AdoDBConnection.php; and the (2) GLOBALS[_BIGACE][DIR][admin] parameter to (c) item_information.php and (d) jstree.php in system/application/util/, and (e) system/admin/plugins/menu/menuTree/plugin.php, different vectors than CVE-2006-4423."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos PHP en BigACE 2.4, cuando register_globals  está activado, permite a atacantes remotos ejecutar código PHP arbitrariamente a través de una URL en el parámetro (1) GLOBALS[_BIGACE][DIR][addon] de (a) addon/smarty/plugins/function.captcha.php y (b) system/classes/sql/AdoDBConnection.php; y el parámetro (2) GLOBALS[_BIGACE][DIR][admin] de (c) item_information.php y (d) jstree.php in system/application/util/ y (e) system/admin/plugins/menu/menuTree/plugin.php, ´vectores diferentes al CVE-2006-4423."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigace:bigace:2.4:*:*:*:*:*:*:*","matchCriteriaId":"DC69D46E-E401-4EBA-A0C2-BB0B75A9B615"}]}]}],"references":[{"url":"http://secunia.com/advisories/30183","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29157","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42343","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2521","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en members.php de YABSoft Mega File Hosting Script (también conocido como MFH o MFHS) versión 1.2, permite a usuarios remotos  autenticados, ejecutar comandos SQL arbitrariamente a través del parámetro fid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:mega_file_hosting_script:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3A06E0F8-5235-4C71-9473-C75051AF5C00"}]}]}],"references":[{"url":"http://secunia.com/advisories/30210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29167","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42355","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2522","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showmember parameter in a members action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en members.php de Battle.net Clan Script para PHP versión 1.5.3  y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro showmember en una acción members."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:battlenet_clan_script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.3","matchCriteriaId":"F47187AC-FC18-4E44-A339-5985FD942A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:battlenet_clan_script:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DB786C84-0860-40F0-836D-97E7917F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:battlenet_clan_script:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A51DCC11-7C75-4620-87D6-09F4B4B3DD2B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29166","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42354","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5597","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2523","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL del plugin de seridor Autopatcher en RakNet versiones anteriores a la 3.23, permite a atacantes remotos ejecutar comandos SQL arbitrariamente mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.22","matchCriteriaId":"55D695DB-ABA4-4CC6-B65C-E1E83E9D536E"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.001:*:*:*:*:*:*:*","matchCriteriaId":"5B05E334-6E8C-4D2A-A338-FED78A607AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F288C3B-D90F-4024-BF5E-89BFA38A2353"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D0BEFB4F-893A-4FB9-BD64-D10F87D60ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.02:*:*:*:*:*:*:*","matchCriteriaId":"FAA63DE7-FA4F-4E29-B0C8-A30D1A8B34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"CF15673C-C324-46A5-B4C6-738F8C7E65B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.03:*:*:*:*:*:*:*","matchCriteriaId":"A3DC4CD9-80F6-464D-A939-748B65264D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.004:*:*:*:*:*:*:*","matchCriteriaId":"4621E3B5-8032-4422-8102-89B2B151965A"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.005:*:*:*:*:*:*:*","matchCriteriaId":"E3838AC9-328E-4206-BAC0-4E96F549E3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.05:*:*:*:*:*:*:*","matchCriteriaId":"E28CEE5A-987D-46BA-A91A-2063FE441F05"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.06:*:*:*:*:*:*:*","matchCriteriaId":"7BA9AB55-CCA1-42D8-8769-436D15222B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.007:*:*:*:*:*:*:*","matchCriteriaId":"E2FD3932-F12C-4959-BCF0-9F9C7EF4F2D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.08:*:*:*:*:*:*:*","matchCriteriaId":"4CDE6E04-EA09-4EA2-8549-8B662AF114DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.009:*:*:*:*:*:*:*","matchCriteriaId":"D4FF399C-16B6-4AA3-9384-ADA4ECAFDAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"D1E46B85-1610-40B4-818F-88929F116A1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:raknet:autopatcher_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"1F6B18C6-3E56-4C84-8417-FBB8A453B74D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.jenkinssoftware.com/raknet/forum/index.php?topic=1787.0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29178","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.jenkinssoftware.com/raknet/forum/index.php?topic=1787.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2524","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie."},{"lang":"es","value":"BlogPHP 2.0 permite a atacantes remotos evitar la autenticación y publicar (1) mensajes o (2) comentarios como un usuario arbitrario, mediante un campo \r\nblogphp_username modificado en una cookie.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogphp:blogphp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B791B20C-7AE9-41C2-9C90-1E3A01EA9998"}]}]}],"references":[{"url":"http://secunia.com/advisories/30165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/soapbox/blogphp.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42372","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/soapbox/blogphp.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2525","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en la extensión Event Database (también conocida como rlmp_eventdb) versiones anteriores a la 1.1.2 para TYPO3, permite a atacantes remotos inyectar secuencias de código web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:rlmp_eventdb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"720D0F9C-250F-4277-9000-B339348A3C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:rlmp_eventdb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B9A1BF3-4D29-4544-BBC8-BD4C266A3D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:rlmp_eventdb:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B8533F-231B-4D51-95C7-BB8623103042"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:rlmp_eventdb:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CAE969E2-49E3-424B-907F-4BB8BB7FA7B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:rlmp_eventdb:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD742F0-7C7D-40C9-9AE5-9D71FCFABF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:rlmp_eventdb:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"086B2B29-84FC-4C82-AF03-B077A08C7C88"}]}]}],"references":[{"url":"http://secunia.com/advisories/30218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-3/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29180","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42361","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2526","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en la extensión WT Gallery (también conocida como wt_gallery) versiones 2.6.2 y anteriores para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wt_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.62","matchCriteriaId":"B79F27D1-AFAC-4A53-B0EC-435B8ACA07F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wt_gallery:2.50:*:*:*:*:*:*:*","matchCriteriaId":"908BDED5-6CE2-4E58-A851-78DE567B95CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29182","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42363","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2527","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the language parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en view.php de ActualScripts ActualAnalyzer Server 8.37 y versiones anteriores, ActualAnalyzer Gold 7.74 y versiones anteriores, ActualAnalyzer Pro 6.95 y versiones anteriores, y ActualAnalyzer Lite 2.78 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.21:*:*:*:*:*:*:*","matchCriteriaId":"84C4C0A4-C302-48FF-A846-798FB5F741B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.22:*:*:*:*:*:*:*","matchCriteriaId":"9CB150B0-6627-4885-8156-23FBEC90CC8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.23:*:*:*:*:*:*:*","matchCriteriaId":"6BF0D23B-EC1E-4283-B828-62518272264F"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.24:*:*:*:*:*:*:*","matchCriteriaId":"A9C2DEDB-1FC6-41B9-9B46-9250CE96A92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.25:*:*:*:*:*:*:*","matchCriteriaId":"EE990B6A-A462-4911-BABF-15BE06F11953"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.31:*:*:*:*:*:*:*","matchCriteriaId":"62239E3B-9683-47D6-9C6E-B258FCF0B5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.32:*:*:*:*:*:*:*","matchCriteriaId":"47D1914D-EAE7-41E0-8595-F3E411C2107F"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.33:*:*:*:*:*:*:*","matchCriteriaId":"3EDDE8B2-272F-469E-93FB-521648C20923"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.34:*:*:*:*:*:*:*","matchCriteriaId":"F131CE41-DF5B-4028-A569-12DCD83E84EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.35:*:*:*:*:*:*:*","matchCriteriaId":"51EC963F-85B0-4AC6-B9F4-C5207ACC8ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.41:*:*:*:*:*:*:*","matchCriteriaId":"3C351BD4-FD34-4163-8576-96AF03AD2FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.42:*:*:*:*:*:*:*","matchCriteriaId":"D0FF13AF-94DA-45DC-9B02-2285D3D1A0A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.43:*:*:*:*:*:*:*","matchCriteriaId":"80254CC7-2095-4DCA-89A8-79A165A06CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.51:*:*:*:*:*:*:*","matchCriteriaId":"CAA67108-D81C-4441-9430-79C6C809233A"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.61:*:*:*:*:*:*:*","matchCriteriaId":"CE9D366A-2FBB-4851-B3B4-F8A28BAAEDBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.62:*:*:*:*:*:*:*","matchCriteriaId":"C1414F9D-8BC9-4184-A4DF-D8F652FBA698"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.63:*:*:*:*:*:*:*","matchCriteriaId":"63925B25-2D98-4C15-9551-43C08DAEFA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.64:*:*:*:*:*:*:*","matchCriteriaId":"4B170756-152F-41C6-B01C-43D47F27FC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.71:*:*:*:*:*:*:*","matchCriteriaId":"7D008E5B-274F-4B48-9AC9-2E2D9D2D63C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.72:*:*:*:*:*:*:*","matchCriteriaId":"F44D339C-A99B-4CF2-B33C-05332E920201"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.73:*:*:*:*:*:*:*","matchCriteriaId":"6296CB47-CC05-4B19-B585-47B0B8CCBCEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_gold:7.74:*:*:*:*:*:*:*","matchCriteriaId":"A92292B9-190F-4739-B1A4-F698DC1A414B"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_lite:*:*:*:*:*:*:*:*","versionEndIncluding":"2.78","matchCriteriaId":"1EB47481-B5E5-4A16-A1BB-AE54B9DAFCC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_lite:2.77:*:*:*:*:*:*:*","matchCriteriaId":"9891C9AE-4771-425B-BC69-DFD9DD1EC15D"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"6.95","matchCriteriaId":"6C4DE876-8E46-41B6-B5BC-486B1AB41BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.65:*:*:*:*:*:*:*","matchCriteriaId":"B8A4F891-6BC3-4CFB-85C0-16D517471003"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.67:*:*:*:*:*:*:*","matchCriteriaId":"1F1EE755-89E9-4A9C-936B-09FF21199242"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.68:*:*:*:*:*:*:*","matchCriteriaId":"943123CD-C7BE-4DAE-B15B-ED0C8AF3CE91"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.69:*:*:*:*:*:*:*","matchCriteriaId":"0ADEEE15-3B3D-4F02-AC08-F0225BC4796F"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.71:*:*:*:*:*:*:*","matchCriteriaId":"03A7A0AA-146D-4E46-B91E-8A0F834C8389"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.72:*:*:*:*:*:*:*","matchCriteriaId":"A69A1D73-13CB-4CA3-A9B0-E3FEEF7169A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.73:*:*:*:*:*:*:*","matchCriteriaId":"B97B37AE-B7E4-4BC7-9416-D81B597A6570"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.81:*:*:*:*:*:*:*","matchCriteriaId":"AE522273-5E82-4F3D-8444-27120CFB5AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.82:*:*:*:*:*:*:*","matchCriteriaId":"AAAE21ED-FA96-4C1D-B4B5-A53A6E0A5DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.83:*:*:*:*:*:*:*","matchCriteriaId":"A2C66F75-D9A7-4D0A-BE6A-43794E2216A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.85:*:*:*:*:*:*:*","matchCriteriaId":"8F840ACB-2135-476C-A3FE-0E47DA783CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.86:*:*:*:*:*:*:*","matchCriteriaId":"CBA5B7B0-4FF8-4A0B-B3DA-4A18B2F9737E"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.87:*:*:*:*:*:*:*","matchCriteriaId":"D4FA123C-F306-493E-8654-6F1DCAC13FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.88:*:*:*:*:*:*:*","matchCriteriaId":"1B1169E4-2D5D-4E97-BA4D-324CF22E3537"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.89:*:*:*:*:*:*:*","matchCriteriaId":"0EE9EA11-CAB9-40F7-9370-52EBCC899688"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.91:*:*:*:*:*:*:*","matchCriteriaId":"8544DE68-4397-4896-960B-A165CEC0BCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.92:*:*:*:*:*:*:*","matchCriteriaId":"030F6DFE-435A-4336-B109-3B852885B765"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.93:*:*:*:*:*:*:*","matchCriteriaId":"369D9B53-A0AB-4BD4-B999-3F101F9DDAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_pro:6.94:*:*:*:*:*:*:*","matchCriteriaId":"7E1A3DE1-2A1C-4B01-B54B-96B20624C796"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:*:*:*:*:*:*:*:*","versionEndIncluding":"8.37","matchCriteriaId":"7D31537A-343E-49AC-B899-81BEEC4DA33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.02:*:*:*:*:*:*:*","matchCriteriaId":"7D93B9A5-8ECA-48E5-83FC-8BC18A9DEFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.11:*:*:*:*:*:*:*","matchCriteriaId":"D780330E-6E98-4B68-AA8C-DFD2F3A69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.21:*:*:*:*:*:*:*","matchCriteriaId":"A7C13DAD-D135-4726-8B69-3E8C484F4E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.22:*:*:*:*:*:*:*","matchCriteriaId":"E4C2839D-ED01-4D74-B4CC-193096F4380F"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.23:*:*:*:*:*:*:*","matchCriteriaId":"BBF44AC0-C254-4530-8DAD-A3CB751D7715"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.24:*:*:*:*:*:*:*","matchCriteriaId":"2749EFC0-CA16-4E4C-B874-DE1F3736F713"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.25:*:*:*:*:*:*:*","matchCriteriaId":"EC10445F-6106-412F-B8B5-3780C31CCDDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.31:*:*:*:*:*:*:*","matchCriteriaId":"1A2D684F-851B-4FD1-8722-B8D838853DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.32:*:*:*:*:*:*:*","matchCriteriaId":"4E6D9E30-ED22-4F1C-AABB-3C4C996AA8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.33:*:*:*:*:*:*:*","matchCriteriaId":"ED190E87-D032-4924-93D1-F8136BACC62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.34:*:*:*:*:*:*:*","matchCriteriaId":"B5782A31-64CE-448C-9330-8EFF35BF6476"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.35:*:*:*:*:*:*:*","matchCriteriaId":"D74B64ED-F2D6-4456-9063-1E4DCD6E1F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:actualscripts:actualanalyzer_server:8.36:*:*:*:*:*:*:*","matchCriteriaId":"EB220C92-1132-4A3B-83B7-20047C8D4054"}]}]}],"references":[{"url":"http://secunia.com/advisories/30205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls52","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491982/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29177","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42367","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls52","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491982/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2528","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain \"access to network resources\" via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix Access Gateway Standard Edition 4.5.7 y versiones anteriores y Advanced Edition 4.5 HF2 y versiones anteriores permite a atacantes remotos evitar la autenticación y conseguir \"acceso a los recursos de red\" a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:advanced:hf2:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"DCD35E50-E0CF-4FDA-9101-7243926EA8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*","versionEndIncluding":"4.5.7","matchCriteriaId":"7C22982D-8CEC-4DAB-9F94-1D30895C186F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:4.5.5:*:standard:*:*:*:*:*","matchCriteriaId":"94618DF7-4882-4205-89F2-DD8B22BB9D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:4.5.6:*:standard:*:*:*:*:*","matchCriteriaId":"3EAEF2D7-EBE5-4B14-AE70-24B2C4770287"}]}]}],"references":[{"url":"http://secunia.com/advisories/30175","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.citrix.com/article/CTX116930","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29174","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020025","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1474/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.citrix.com/article/CTX116930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1474/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2529","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en read.php de Advanced Links Management (ALM) 1.5.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advanced_links_management:advanced_links_management:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D38F650F-57EF-482B-8D47-B8D42FFC4C6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42320","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5581","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2530","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter to (a) frontend/news.php, the (2) id parameter to (b) events3.php and (c) videos2.php in frontend/, the (3) y parameter to (d) frontend/events2.php, and the (4) ser parameter to (e) frontend/fotos2.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Concepts & Solutions QuickUpCMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) nr de (a) frontend/news.php, el parámetro (2) id de (b) events3.php y (c) videos2.php de frontend/, el parámetro (3) y de (d) frontend/events2.php, y el parémetro (4) ser de (e) frontend/fotos2.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickupcms:quickupcms:*:*:*:*:*:*:*:*","matchCriteriaId":"807CFAFF-F70E-4041-8414-F994F49A4C85"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42325","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5588","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2531","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el script de búsqueda en Build A Niche Store (BANS) versión 3.0, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro q."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:buildanichestore3:bans:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D20D4F50-5E04-44DF-BB36-0DF1FBCD4AF5"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/64/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30153","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29187","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42373","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/64/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2532","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum/topic_detail.php de AJ Square aj-hyip (también conocido como AJ HYIP Acme) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_hyip:*:*:*:*:*:*:*:*","matchCriteriaId":"6554B46E-12B0-4FAE-B75A-5E7A75A35CD5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42382","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5602","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2533","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ltarget parameter to (a) admin/admin_frame.php and the (2) conf parameter to (b) gbuch.admin.php, (c) links.admin.php, (d) menue.admin.php, (e) news.admin.php, and (f) todo.admin.php in admin/module/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Phoenix View CMS Pre Alpha2 y versiones anteriores permiten a atacantes remotos inyectar web script o HTML a través del parámetro (1) ltarget de (a) admin/admin_frame.php y el parámetro (2) conf de(b) gbuch.admin.php, (c) links.admin.php, (d) menue.admin.php, (e) news.admin.php, y (f) todo.admin.php de admin/module/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fkrauthan:phoenix_view_cms:2-pre-alpha:*:*:*:*:*:*:*","matchCriteriaId":"DED6ED36-87DC-4BF6-A364-B29933B69EC4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29130","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5578","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2534","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ltarget parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/admin_frame.php de Phoenix View CMS Pre Alpha2 y versiones anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro ltarget."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fkrauthan:phoenix_view_cms:2-pre-alpha:*:*:*:*:*:*:*","matchCriteriaId":"DED6ED36-87DC-4BF6-A364-B29933B69EC4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42315","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5578","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2535","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to (1) gbuch.admin.php, (2) links.admin.php, (3) menue.admin.php, (4) news.admin.php, and (5) todo.admin.php in admin/module/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Phoenix View CMS Pre Alpha2 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través de comandos SQL de su elección a través del parámetro del de (1) gbuch.admin.php, (2) links.admin.php, (3) menue.admin.php, (4) news.admin.php, y (5) todo.admin.php de admin/module/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fkrauthan:phoenix_view_cms:2-pre-alpha:*:*:*:*:*:*:*","matchCriteriaId":"DED6ED36-87DC-4BF6-A364-B29933B69EC4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5578","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2536","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en out.php de YABSoft Advanced Image Hosting (AIH) Script 2.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a travñes del parámetro t."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:advanced_image_hosting_script:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"CA4E0958-A88E-44CB-9608-5316DFDC17E7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30207","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29172","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42405","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2537","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQl en cat.php de HispaH Model Search permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hispah:model_search:*:*:*:*:*:*:*:*","matchCriteriaId":"171AA88C-A6FB-40EA-9C95-2648E67474DB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29128","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42312","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2538","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en crontab de Sun Solaris 8 hasta 10, y OpenSolaris versiones anteriores a snv_93, permite a usuarios locales insertar trabajos planificados en cron dentro  de ficheros crontab de usuarios de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020151","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237864-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-222.htm","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1714","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42763","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-222.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2539","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users to read data from arbitrary deleted files, or corrupt files in global filesystems, via unspecified vectors."},{"lang":"es","value":"El sistema de ficheros Sun Cluster Global de Sun Cluster 3.1 en Sun Solaris 8 hasta 10, cuando un sistema de ficheros subyacente ufs es utilizado, puede permitir a usuarios locales leer datos de ficheros borrados de su elección, o corromper ficheros en sistemas de ficheros globales, a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:3.1:*:solaris_10:*:*:*:*:*","matchCriteriaId":"112072E9-9754-426D-A23E-DA2C1E6184B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:3.1:*:solaris_8:*:*:*:*:*","matchCriteriaId":"5260CC96-1BE9-4276-A576-D2C2AB8FCA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:3.1:*:solaris_9:*:*:*:*:*","matchCriteriaId":"08504772-D91A-4842-9F79-508DCB0F210F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30483","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201341-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29458","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020152","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1713","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201341-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2540","sourceIdentifier":"cve@mitre.org","published":"2008-06-03T15:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a \"Carpet Bomb\" and a \"Blended Threat Elevation of Privilege Vulnerability,\" a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X."},{"lang":"es","value":"Apple Safari en Mac OS X y en versiones anteriores a 3.1.2 en Windows, no apunta al usuario después de descargar un objeto que tiene un tipo de contenido no reconocido, lo que permite a atacantes remotos incluir malware dentro de (1) el directorio Desktop en Windows o (2) el directorio Downloads en Mac OS X, y posteriormente permite a atacantes remotos ejecutar código arbitrario en Windows aprovechando una vulnerabilidad de ruta de búsqueda no confiable en (a) Internet Explorer 7 en Windows XP o (b) la función SearchPath en Windows XP, Vista y Server 2003 y 2008, vulnerabilidad también conocida como \"Carpet Bomb\" y \"Blended Threat Elevation of Privilege Vulnerability\", un problema diferente de CVE-2008-1032. NOTA: Apple considera esto como vulnerabilidad solo porque los productos Microsoft pueden cargar bibliotecas de aplicaciones del escritorio y, como 20080619, no ha cubierto el problema en un aviso para Mac OS X."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1.2","matchCriteriaId":"203C193C-F044-4B1F-84E6-2AB332AF581B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blogs.zdnet.com/security/?p=1230","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30467","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020150","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.dhanjani.com/archives/2008/05/safari_carpet_bomb.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.microsoft.com/technet/security/advisory/953818.mspx","source":"cve@mitre.org","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29445","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022047","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1706","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1029","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42765","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5782","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6108","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8509","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blogs.zdnet.com/security/?p=1230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.dhanjani.com/archives/2008/05/safari_carpet_bomb.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.microsoft.com/technet/security/advisory/953818.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2541","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en el Servicio de Puerta de Enlace HTTP (icihttp.exe) en CA eTrust Secure Content Manager versión 8.0, permiten a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio por medio de respuestas FTP largas, relacionadas con (1) el campo file month en un comando LIST; (2) el comando PASV; y (3) directorios, archivos y enlaces en un comando LIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB54A16-5E56-46FC-A49C-56C98C0B8F1A"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-05","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36408","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493082/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493084/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493087/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493124/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29528","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020167","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1741/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-035/","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-036","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42821","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/SolutionResults?aparNo=QO99987&os=NT&actionID=3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493082/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493084/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493087/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1741/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-035/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/SolutionResults?aparNo=QO99987&os=NT&actionID=3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-2542","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote attackers to execute arbitrary code via a crafted PNM file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función getline en Ppm/ppm.C en NASA Ames Research Center BigView 1.8, permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario a través de un fichero PNM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_ames_research_center:bigview:1.8:*:*:*:*:*:*:*","matchCriteriaId":"AF77DE9C-CE6D-4C62-830F-C1D3E620FAE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30546","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3924","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493112/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29517","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1745/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42847","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493112/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1745/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2543","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets."},{"lang":"es","value":"El controlador de canal ooh323 channel en Asterisk Addons 1.2.x anteriores a 1.2.9 y Asterisk-Addons 1.4.x anteriores a 1.4.7 crea un puerto TCP accesible remotamente previsto únicamente para comunicaciones localhost, e interpreta algunos campos application-data como direcciones de memoria para liberar, lo que permite a atacantes remotos provocar una denegación de servicio (caída de demonio) mediante paquetes TCP manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"350F5808-0521-4028-A72D-43089F7994FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2B616443-8A71-46DB-A466-DC033FFAB89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2593E04-D237-4A55-BD51-BE3232AECD84"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D73F78F-24FB-4B12-AAD2-BA94F2005375"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FACD9D9F-A515-409F-A015-3CB04DB7166E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"2201F683-8215-45A9-82D6-8A3A9170A09B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3BD6C363-CEE3-4171-BF9D-C8B5B8FFED36"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8062FED1-6D52-4DE1-9925-F5BF71606237"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"BD025C66-9050-450B-9503-23DE880D7E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CA3DEBB6-4A23-40AC-8BC6-19D8948635D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"61F8B87D-D5F0-4C95-8F5F-4EB5902780C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CDD9442B-1DFB-4ACF-AA6E-8D523744B359"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D867E549-1D20-4986-862C-44BCA35227FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E8B7DC4E-39B7-40C1-B051-ECA1E09BB22D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"75295192-AE60-4342-A058-43EBFDB2BADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk-addons:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"14797CEA-CC0E-4BC8-A6A1-B34C54CF6BA5"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30555","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493122/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493144/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29567","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1747/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42869","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493122/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493144/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1747/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2545","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case."},{"lang":"es","value":"Skype 3.6.0.248 y otras versiones anteriores a 3.8.0.139, utiliza comparaciones sensibles a mayúsculas y minúsculas cuando revisa extensiones peligrosas, las cuales permiten a  atacantes remotos asistidos por el usuario evitar diálogos de aviso y posibilita la ejecución de código de su elección a través de un archivo: URI con una extensión peligrosa que utiliza un caso diferente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.0.115","matchCriteriaId":"9AF92A12-1646-4C60-8EF0-EE32FFD0AB65"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.106:beta:*:*:*:*:*:*","matchCriteriaId":"299E4795-0202-42D5-83A9-6CEE9063A556"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.123:beta:*:*:*:*:*:*","matchCriteriaId":"D8EB8746-D7A3-4393-A765-23B44432F10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.137:beta:*:*:*:*:*:*","matchCriteriaId":"051A0E63-C02E-4FB4-9A7E-F4AD46782272"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.154:beta:*:*:*:*:*:*","matchCriteriaId":"76F03F89-83E6-4558-8675-83A8CD691D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.190:*:*:*:*:*:*:*","matchCriteriaId":"12E90F91-50CB-422D-8535-2B52275484DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.198:*:*:*:*:*:*:*","matchCriteriaId":"952D150E-46C0-454D-A3D9-7DD19A255366"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.205:*:*:*:*:*:*:*","matchCriteriaId":"78886104-B6C1-4855-97B6-D2F59583DDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.209:*:*:*:*:*:*:*","matchCriteriaId":"B8F77926-096E-4F67-8818-2C089356F328"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.214:*:*:*:*:*:*:*","matchCriteriaId":"AE9B5B52-2513-4D8A-A3A7-BDE5F1B7A979"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.216:*:*:*:*:*:*:*","matchCriteriaId":"6E1FB0E2-E124-45B2-9209-97699BC431E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.217:*:*:*:*:*:*:*","matchCriteriaId":"D93968CE-9479-4EEE-B972-A6E375F9C0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.0.0.218:*:*:*:*:*:*:*","matchCriteriaId":"EB65C69E-5B05-4BDC-86F1-9DC0306D6EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.112:beta:*:*:*:*:*:*","matchCriteriaId":"05A80FAC-2E2B-4733-A0C2-B18332274C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.134:beta:*:*:*:*:*:*","matchCriteriaId":"881122D2-80E8-4414-AF69-505A0FE22246"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.144:*:*:*:*:*:*:*","matchCriteriaId":"76299BE8-B49E-4FA9-87DF-835CB0DCEF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.147:*:*:*:*:*:*:*","matchCriteriaId":"DFC6A6C1-0C22-42C4-A935-A7A87DD87025"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.150:*:*:*:*:*:*:*","matchCriteriaId":"1DFDCC89-F71C-4D0E-B0E6-1590FE95B8AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.1.0.152:*:*:*:*:*:*:*","matchCriteriaId":"6818B6E0-8076-41BA-A754-92E3601DD042"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.53:beta:*:*:*:*:*:*","matchCriteriaId":"ADCD5ECD-1B01-4F68-B2A7-8EB9CCA5B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.63:beta:*:*:*:*:*:*","matchCriteriaId":"F3D08B9A-BF09-4903-A322-3E578FB09284"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.82:beta:*:*:*:*:*:*","matchCriteriaId":"6938D9C6-8254-4AAF-9332-39088AC1C027"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.115:beta:*:*:*:*:*:*","matchCriteriaId":"2EF81382-A61A-4A48-9251-FBAA076B7149"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.145:*:*:*:*:*:*:*","matchCriteriaId":"57EA3CE4-F19D-46DD-A3BA-4AAE0B19CC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.148:*:*:*:*:*:*:*","matchCriteriaId":"2542EED5-83A3-496C-8A8B-D85A31814AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.152:*:*:*:*:*:*:*","matchCriteriaId":"E69AEBB5-0571-4AB8-8DB7-E7C9D98CDC0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.158:*:*:*:*:*:*:*","matchCriteriaId":"CFA1F1F0-D394-40BD-B88C-CA7D095C6130"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.163:*:*:*:*:*:*:*","matchCriteriaId":"61FC737C-EBB2-4B85-8A50-DC12B4C3CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.2.0.175:*:*:*:*:*:*:*","matchCriteriaId":"3761EF03-CAA9-4B7B-A4A6-2D9BCF51273D"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.107:beta:*:*:*:*:*:*","matchCriteriaId":"55FAFD26-50E2-426A-8AB4-710592C4DAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.158:beta:*:*:*:*:*:*","matchCriteriaId":"15CA94B8-692A-4A05-8AA5-AD8C59C73868"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.178:beta:*:*:*:*:*:*","matchCriteriaId":"9191D269-3F5D-4F49-A12C-5E87A545C6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.202:*:*:*:*:*:*:*","matchCriteriaId":"6D1AA43F-6A09-4D8C-A766-7224EDB0D8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.214:*:*:*:*:*:*:*","matchCriteriaId":"5B285100-B72C-46AD-A765-F051E50508A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.229:*:*:*:*:*:*:*","matchCriteriaId":"4C564D31-1BFE-49B6-9F17-0DD1E6DF75F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.234:*:*:*:*:*:*:*","matchCriteriaId":"FE08B27C-D397-4B16-BD1C-887FEFEFF78B"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.5.0.239:*:*:*:*:*:*:*","matchCriteriaId":"F7AE9DCD-577F-4F91-A193-28E56573D4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.127:beta:*:*:*:*:*:*","matchCriteriaId":"4FF70951-D17A-48E0-95D7-29F8284E5339"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.159:beta:*:*:*:*:*:*","matchCriteriaId":"6B020197-18F2-44B9-AFE8-7D7759FF8344"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.216:*:*:*:*:*:*:*","matchCriteriaId":"AC0CF569-D829-4230-BECB-E9EA2BC4F0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.244:*:*:*:*:*:*:*","matchCriteriaId":"95648140-386E-4D8B-BE7E-9542333F0A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.6.0.248:*:*:*:*:*:*:*","matchCriteriaId":"0DD8EA54-6762-4411-9146-82F7D780FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:3.8.0.96:beta:*:*:*:*:*:*","matchCriteriaId":"BB7841CC-B54C-4EDC-B17A-A2DD97F01476"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30547","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29553","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020201","source":"cve@mitre.org"},{"url":"http://www.skype.com/security/skype-sb-2008-003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1749/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43044","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.skype.com/security/skype-sb-2008-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1749/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2546","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2023-11-07T02:02:14.687","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1805.  Reason: This candidate is a reservation duplicate of CVE-2008-1805.  Notes: All CVE users should reference CVE-2008-1805 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-2547","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T19:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) option.  NOTE: this issue might cross privilege boundaries if msiexec.exe is reachable via components such as ActiveX controls, and might additionally require a separate vulnerability in the control."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en msiexec.exe 3.1.4000.1823 y 4.5.6001.22159 en Microsoft Windows Installer, permite a atacantes dependientes del contexto ejecutar código de su elección a través de un valor GUID largo para la opción /x (también conocida como /uninstall). NOTA: esta cuestión podría cruzar los límites de privilegios si msiexec.exe fuera  alcanzable a través de componentes como controles ActiveX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_installer:*:*:*:*:*:*:*:*","matchCriteriaId":"6231D8EA-667C-4F22-837B-F774D1EAC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_installer:3.1.4000.1823:*:*:*:*:*:*:*","matchCriteriaId":"437990EF-269B-44AA-82EF-C4D2980844F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_installer:4.5.6001.22159:*:*:*:*:*:*:*","matchCriteriaId":"4D326779-EB10-4911-B6D3-5D8C4BD11C37"}]}]}],"references":[{"url":"http://www.aushack.com/200806-msiexec.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492986/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492992/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42887","source":"cve@mitre.org"},{"url":"http://www.aushack.com/200806-msiexec.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492986/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492992/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2548","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T19:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el componente thumprint en el validador EXIF sobre móviles Motorola con firmware RAZR, permite a atacantes asistidos por el usuario ejecutar código de su elección a través de la transmisión de un MMS con una imagen JPG mal formada, lo que lanza un corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:motorola:razr:*:*:*:*:*:*:*:*","matchCriteriaId":"B6E1CF4C-15BF-41D8-A9AC-BA2739D44A1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492668/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020117","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1671/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-033/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492668/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1671/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-033/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2549","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T19:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf."},{"lang":"es","value":"Adobe Acrobat Reader 8.1.2 y versiones anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente la ejecución arbitraria de código a través de un documento PDF mal formado, como se ha demostrado por 2008-HI2.pdf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"B696DE60-BE96-4590-A903-AB792881A38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1C92642-7C8D-411A-8726-06A8A6483D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F509566A-6D4A-40C0-8A16-F8765C5DCAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*","matchCriteriaId":"6AED985D-60D7-489E-9F1E-CE3C9D985B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F7AA1BA3-9FFA-46AB-A92A-7247D5F7EA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"3F5F7424-1E19-4078-8908-CD86A0185042"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F2402B40-6B72-48B5-A376-DA8D16CA43FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"0D968113-340A-4E5A-B4FD-D9702D49E3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF742B8-5F7A-487B-835C-756B1BB392F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B9351C2-16ED-4766-B417-8DB3A8766C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74667860-0047-40AD-9468-860591BA9D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9628AFF9-6EE1-4E85-858F-AE96EE64B7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35163","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29420","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42886","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5687","source":"cve@mitre.org"},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2550","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header."},{"lang":"es","value":"Vulnerabilidad sin especificar del componente Web Services Security en Web Services Security (WAS) versiones 6.1 anteriores a la 6.1.0.17 tiene un impacto desconocido y vectores de ataque relacionados con un atributo de la cabecera de seguridad SOAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.0.16","matchCriteriaId":"46B0B8F0-48BB-4C52-A927-E14D2900D591"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020168","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2551","sourceIdentifier":"cve@mitre.org","published":"2008-06-04T23:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to \"run.\""},{"lang":"es","value":"El Control  DownloaderActiveX  en Icona SpA C6 Messenger 1.0.0.1, permite a atacantes remotos forzar la descarga y la ejecución arbitraria de archivos a través de una URL en el parámetro propDownloadUrl con el parámetro propPostDownloadAction establecido a \"run\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icona:instant_messenger:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B0305435-6E56-4A58-94BC-48ED7408777E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493019/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29519","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1733/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42825","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1733/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2552","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service (disk consumption) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el Service Tag Registry de Sun Solaris 10, y Sun Service Tag anterior a 1.1.3, permite a usuarios locales provocar una denegación de servicio (consumo del disco) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:service_tag:1.0:*:*:*:*:*:*:*","matchCriteriaId":"52029D29-1ABA-4438-852A-1CCFD79327F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:service_tag:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D9827C46-691F-44D4-ACD9-BDC735D3085E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:service_tag:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E9FC83B-5BF3-4148-A566-077AD0CFA5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:service_tag:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71AE1495-4972-4591-A4FF-F91ED05FBF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:service_tag:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FFD0E62C-65F4-4891-81A2-D815DC29BDDE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30545","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238414-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019316.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29561","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020203","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1748/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42874","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238414-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019316.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1748/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2553","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T20:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en Slashdot Like Automated Storytelling Homepage (Slash) (También conocido como Slashdot) R_2_5_0_94 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web de su elección a través del parámetro userfield."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slashcode.com:slash:*:*:*:*:*:*:*:*","versionEndIncluding":"r_2_5_0_94","matchCriteriaId":"68A26183-2087-462B-BE7E-8BB15511B105"}]}]}],"references":[{"url":"http://secunia.com/advisories/30551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31691","source":"cve@mitre.org"},{"url":"http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm?r1=1.223&r2=1.225","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29548","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020207","source":"cve@mitre.org"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/04/1950244&tid=4","source":"cve@mitre.org"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/07/2314232","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm?r1=1.223&r2=1.225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/04/1950244&tid=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slashcode.com/article.pl?sid=08/01/07/2314232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2554","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp and (2) cat parameter to template_archives_cat.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en BP Blog 6.0, permite a atacantes remotos ejecutar comandos de su elección a través  de los parámetros (1)id a template_permalink.asp y (2) cat a template_archives_cat.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bp_blog:bp_blog:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FCD3DD-8F51-4888-A44E-E49C59C98E76"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3925","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492902/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29460","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42894","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5705","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492902/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2555","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional resources found during analysis:\r\n\r\nhttp://secunia.com/advisories/30494/","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección Sql en Index.php de EasyWay CMS, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro mid"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyway:cms:*:*:*:*:*:*:*:*","matchCriteriaId":"E7659E44-7F73-4B8F-A6D9-DE2E0BEECCAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30494","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42787","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2556","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en read.php en PHP Visit Counter 0.4 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro datespan en la acción read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hessel_brouwer:php_visit_counter:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"E25A5C15-C33A-451F-9B2A-C19A8CB2A3F0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42789","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5703","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2557","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Links and (2) Links Submit pages."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CRE Loaded 6.2.13.1 y anteriores, permite a atacantes remotos inyectar web script o HTML de su elección a través de (1) enlaces y (2) páginas de envío de enlaces.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cre_loaded:cre_loaded:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.13.1","matchCriteriaId":"241ECBCF-F797-490B-97F9-770796829B28"}]}]}],"references":[{"url":"http://oscommerceuniversity.com/lounge/index.php?topic=249.0","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29786","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42888","source":"cve@mitre.org"},{"url":"http://oscommerceuniversity.com/lounge/index.php?topic=249.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/30655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2558","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T21:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRE Loaded 6.2.13.1 and earlier does not set the \"Secure\" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP."},{"lang":"es","value":"CRE Loaded 6.2.13.1 y versiones anteriores no cumple el atributo \"Secure\" para cookies que son enviadas sobre HTTPS, lo que puede permitir a atacantes remotos analizar las cookies si son enviadas sobre HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cre_loaded:cre_loaded:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.13.1","matchCriteriaId":"241ECBCF-F797-490B-97F9-770796829B28"}]}]}],"references":[{"url":"http://oscommerceuniversity.com/lounge/index.php?topic=255.0","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42889","source":"cve@mitre.org"},{"url":"http://oscommerceuniversity.com/lounge/index.php?topic=255.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2559","sourceIdentifier":"cve@mitre.org","published":"2008-06-05T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute arbitrary code via a malformed packet to TCP port 3050, which triggers a stack-based buffer overflow.  NOTE: this issue might be related to CVE-2008-0467."},{"lang":"es","value":"Desbordamiento de entero en Borland Interbase 2007 SP2 (8.1.0.256) permite a atacantes remotos ejecutar código de su elección mediante te un paquete TCP malformado al puerto 3050, uqe dispara un desbordamiento de búfer basado en pila. NOTA: podría estar relacionado con CVE-2008-0467."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:damian_frizza:borland_interbase:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"6B304BBB-0937-4DB0-A0E9-F1F102C5A7F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020092","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2278","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29302","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1590","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42558","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2560","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showpost.php en 427BB 2.3.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro post."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fourtwosevenbb:427bb:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A66CBDA0-8D0E-416A-8982-97EE55ED9ED1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29564","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42876","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5742","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2561","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to (a) register.php, (b) reminder.php, and (c) search.php; the (2) uname, (3) email, and (4) email2 parameters to register.php; the (5) email parameter to reminder.php; and the (6) keywords parameter to search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) in 427BB 2.3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del (1) PATH_INFO a (a) register.php, (b) reminder.php, y (c) search.php; el (2) uname, (3) email, y parámetros (4) email2 a register.php; el parametro (5) email parameter a reminder.php; y el parámetro (6) keywords parameter a search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fourtwosevenbb:427bb:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A66CBDA0-8D0E-416A-8982-97EE55ED9ED1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29564","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42877","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5742","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2562","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the css_str parameter in an edit action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en edCss.php en PowerPhlogger 2.2.5 y anteriores permite a usuarios remotos autenticados, ejecutar comandos SQL arbitrariamente a través del parámetro css_str en una acción edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"339BF4B5-7F38-4B69-9427-B59877E6FDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EEEA724B-27B6-4542-A480-A6D96086821D"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7984E0B-1DA6-4B1F-80D1-488882EF99C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:2.2.2a:*:*:*:*:*:*:*","matchCriteriaId":"3176D208-293F-4CF3-83AA-98A7B73C908B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29566","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42870","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2563","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) dsp_main.php and (2) dsp_task_editor.php in SamTodo 1.1 allow remote attackers to inject arbitrary web script or HTML via the (a) tid parameter in a main.taskeditor edit action, and the (b) completed parameter in a main.default action, to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en (1) dsp_main.php and (2) dsp_task_editor.php in SamTodo 1.1 permiten a atacantes remotos inyectar web script o HTML de su elección a través del parámetro (a) tid en main.taskeditor edit action, y el parámetro (b) completed en una acción main.default a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samtodo:samtodo:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E59862CB-8550-4725-9B9F-C21473117F99"}]}]}],"references":[{"url":"http://secunia.com/advisories/30557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/soapbox/samtodo.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29568","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29569","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42868","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/soapbox/samtodo.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2564","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de injección SQL en el componente JotLoader (com_jotloader) 1.2.1.a y anteriores de Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_jotloader:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1.a","matchCriteriaId":"F866DFDD-7857-4A4C-889B-AAC28A949706"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_jotloader:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8ABBE68E-F547-4761-96B9-069B0DED88B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/30541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29554","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42840","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2565","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php.  NOTE: it was later reported that 4.0.x is also affected."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHP Address Book 3.1.5 y en versiones anteriores permiten a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en (1) view.php y (2) edit.php. NOTA: más tarde se informó que también se ve afectada la versión 4.0.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"BDFDADFC-193B-463B-942D-F6863AD73211"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC51D21-A5A5-443B-B2F9-293F1C402CAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:1.2:*:*:*:*:*:*:*","matchCriteriaId":"24570B05-955E-4304-AB7D-4A7FB5BC8626"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7A3367D1-78D8-4A2C-A841-6BC11ECFE872"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.1:*:*:*:*:*:*:*","matchCriteriaId":"830CA43A-E3DE-4084-9A1A-302002871F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3816C93-4BC9-49E5-B8FF-2132955B2EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4A6C5ADB-D36E-4C5B-96E7-1039565C590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.3:*:*:*:*:*:*:*","matchCriteriaId":"ACCFD670-EA54-4C06-B6F1-CD1F0605CA86"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.4:*:*:*:*:*:*:*","matchCriteriaId":"3236E66F-FA39-43BD-8BAB-911E732E3C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:2.6:*:*:*:*:*:*:*","matchCriteriaId":"7F0AB28E-3801-407B-AB24-7541CE77FF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.0:*:*:*:*:*:*:*","matchCriteriaId":"56C246C0-4870-4CA8-979C-618D5A3E09B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.1:*:*:*:*:*:*:*","matchCriteriaId":"464682B9-DEFB-48A4-B991-D9EB95D7B8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0BA1F770-4A4A-4B45-819A-03072084EAC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F63047E-144C-4FA7-A38C-39096840DC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E9161AF9-BCB8-4CC4-9322-AEB076E67553"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CE43EBA3-6067-46B8-A508-54F359CC98A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"963B094C-4BF7-426B-BBD0-EBDA2C17A086"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.3.16:*:*:*:*:*:*:*","matchCriteriaId":"50E9922B-A95B-4CE9-B0F8-529BA2CD4057"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.3.17:*:*:*:*:*:*:*","matchCriteriaId":"98AE2D6D-F8A3-4056-8039-0F51B6FF5DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.3.18:*:*:*:*:*:*:*","matchCriteriaId":"96914364-02D5-4ACF-91D6-2B476682CF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4:*:*:*:*:*:*:*","matchCriteriaId":"320D33D1-82E3-4D14-B70F-BC4DD59B13F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"582DAE00-4F47-432C-8B51-A43F742029C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8367E82F-57BC-4BF4-A92A-D5E15FBAA7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"C988DFC5-903D-47C9-962A-BD7D40ACA798"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BB86312B-0BC4-4C92-82BC-1B548808F39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"CC0410C5-FC80-4BE2-9A01-FA7394647BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"98703992-C562-4CA8-B202-EBFE2BB05793"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BBE7EBFD-8591-489E-9FC4-4EFE206008AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"880D8F5E-A9E1-4506-B695-3E979E13E196"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504595/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35511","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42855","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99622","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5739","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9023","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504595/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2566","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PHP Address Book 3.1.5 y anteriores. Permite a atacantes remotos inyectar secuencias de comandos web de su elección a través del parámetro group a (1) index.php o la (2) URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-address_book:php-address_book:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.5","matchCriteriaId":"CC537BA2-A3BA-46A8-98C9-363817064F0C"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42856","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99624","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5739","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2567","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search, a different vulnerability than CVE-2007-6002."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Fenriru Sleipnir 2.7.1 Release2 y anteriores, Portable Sleipnir 2.7.1 Release2 y anteriores, and Grani 3.1 y anteriores. Permite a atacantes remotos inyectar secuencias de comandos web de su elección a través de vectores no especificados relativos a una historia de mecanismo y búsqueda de favoritos, una vulnerabilidad diferente de CVE-2007-6002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fenrir:grani:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"9FEC60B3-254C-4DAE-89A3-56AFB4C448ED"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN25448394/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30487","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fenrir.co.jp/sleipnir/note.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29555","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42827","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN25448394/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fenrir.co.jp/sleipnir/note.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2568","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Simple Shop Galore (com_simpleshop) 3.4 y anteriores de Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetrothe catid en una acción browse a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_simpleshop:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"F78E3780-2A3B-4163-88F0-FE26DFE87ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/30461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42871","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5743","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2569","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a deleteentry action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente EasyBook (com_easybook) 1.1 for Joomla!. Permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gbid en una acción deleteentry a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:easybook_component:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CA645F57-EFBE-449F-A835-A2D57336246D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42853","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2570","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in LimeSurvey (formerly PHPSurveyor) before 1.71 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas in LimeSurvey (formerly PHPSurveyor) anteriores a 1.71 tienen un desconocido impacto en los vectores de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.70","matchCriteriaId":"578825AE-210F-4AE0-89E7-50CD954199FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922","source":"cve@mitre.org"},{"url":"http://www.limesurvey.org/content/view/102/1/lang%2Cen/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29506","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.limesurvey.org/content/view/102/1/lang%2Cen/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2571","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a \"modify quota\" action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en LimeSurvey (formerly PHPSurveyor) anterior a 1.71. Permite a atacantes remotos cambiar los límites arbitrariamente como administradores a través de una acción \"modify quota\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.70","matchCriteriaId":"578825AE-210F-4AE0-89E7-50CD954199FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.49:*:*:*:*:*:*:*","matchCriteriaId":"47F08F65-3E66-48BE-845B-4FD12A720798"},{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:*","matchCriteriaId":"FEA28520-E888-4A29-8D02-E63E810C7683"}]}]}],"references":[{"url":"http://secunia.com/advisories/30495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922","source":"cve@mitre.org"},{"url":"http://www.limesurvey.org/content/view/102/1/lang%2Cen/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29506","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42807","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.limesurvey.org/content/view/102/1/lang%2Cen/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2572","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articulo_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en php/leer_comentarios.php en FlashBlog permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro articulo_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theflashblog:flashblog:*:*:*:*:*:*:*:*","matchCriteriaId":"6EAB4753-BD63-4CC4-AA89-B8095C2E5F14"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3927","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492748/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43040","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5685","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492748/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2573","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en SFTP en freeSSHd 1.2.1 permite a usuarios remotos autenticados ejecutar código de su elección a través a un nombre de directorio largo en un comando SSH_FXP_OPENDIR (aka opendir)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freesshd:freesshd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F810FB16-1D91-4996-BD80-39E5ED9FD951"}]}]}],"references":[{"url":"http://secunia.com/advisories/30498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493180/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29453","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020212","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1711/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5709","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5751","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493180/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1711/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2574","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en admin/Editor/imgupload.php en FlashBlog 0.31 beta permite a atacantes remotos ejecutar código a su elección mediante la subida de un archivo .php, entonces accede a través de una petición directa al fichero en tus_imagenes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flashblog:flashblog:0.31:beta:*:*:*:*:*:*","matchCriteriaId":"4F4BC14B-FB69-4CCF-BDD0-4F28245E95B5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3928","source":"cve@mitre.org"},{"url":"http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.flashblog.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492738/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42820","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5728","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.flashblog.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492738/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2575","sourceIdentifier":"cve@mitre.org","published":"2008-06-06T22:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename."},{"lang":"es","value":"cbrPager anteriores a 0.9.17, permite a atacantes remotos asistidos por el usuario ejecutar comandos de su elección a través de metacaracteres de consola en un archivo con nombre de fichero (1) ZIP (aka .cbz) o (2) RAR (aka .cbr)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jcoppens:cbrpager:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.17","matchCriteriaId":"A520A7F9-42F8-45EB-AD1F-F50ED0647642"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*","matchCriteriaId":"E3EFD171-01F7-450B-B6F3-0F7E443A2337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://cvs.fedoraproject.org/viewcvs/rpms/cbrpager/devel/cbrpager-0.9.16-filen-shell-escaping.patch?rev=1.2","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/30417","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30438","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30701","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=827120","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=601538&group_id=119647","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.jcoppens.com/soft/cbrpager/log.en.php","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.vupen.com/english/advisories/2008/1693/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448285","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42741","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://cvs.fedoraproject.org/viewcvs/rpms/cbrpager/devel/cbrpager-0.9.16-filen-shell-escaping.patch?rev=1.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/30417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=827120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=601538&group_id=119647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.jcoppens.com/soft/cbrpager/log.en.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.vupen.com/english/advisories/2008/1693/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2576","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite de Oracle versiones 9.2, 9.1, 9.0 y 8.1 SP6, presenta un impacto desconocido y vectores de ataque locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp6:*:*:*:-:*:*","matchCriteriaId":"A99E15B3-455E-40E4-A98A-5A180C6E87C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:-:*:*:*:-:*:*","matchCriteriaId":"097579DE-AEC3-4A76-8E76-009677F75DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:-:*:*:*:-:*:*","matchCriteriaId":"74431845-CEBF-423A-AD64-1DC177DB9282"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:-:*:*:*:-:*:*","matchCriteriaId":"B60784D4-7540-4D7B-9701-0FF6DF6FF122"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43828","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2577","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite de Oracle versiones 9.2 MP1, presenta un impacto desconocido y vectores de ataque autenticados remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack1:*:*:*:*:*:*","matchCriteriaId":"A0B5729A-6AD1-4006-99C4-89238ABBF3B2"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43826","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2578","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite de Oracle versiones 10.0 y 9.2 MP1, presenta un impacto desconocido y vectores de ataque locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack1:*:*:*:*:*:*","matchCriteriaId":"A0B5729A-6AD1-4006-99C4-89238ABBF3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:-:*:*:*:*:*:*","matchCriteriaId":"8A5AE044-5118-487C-A00D-CEA9FC286A46"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43827","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2579","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server Plugins para Apache, servidores web Sun e IIS en BEA Product Suite de Oracle versiones 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7 y 6.1 SP7, presenta un impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:-:*:*:*:apache:*:*","matchCriteriaId":"E43B18F0-47F0-4C52-84A9-E16412AA11EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"BB1EAE5D-3785-4E81-938A-F958FDFC84EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:-:*:*:*:sun:*:*","matchCriteriaId":"ECF910A3-E34D-47BC-A3F8-08A217D58C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp1:*:*:*:apache:*:*","matchCriteriaId":"572464F2-BA8E-4959-8A7D-D28A236EECE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp1:*:*:*:internet_information_services:*:*","matchCriteriaId":"5F252F84-01FE-4888-B53A-BFA6CAB26216"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp1:*:*:*:sun:*:*","matchCriteriaId":"D1146945-531E-4580-8053-24BC56BE1373"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp2:*:*:*:apache:*:*","matchCriteriaId":"90DDCE84-39A0-4803-9CE0-40DF773C0662"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp2:*:*:*:internet_information_services:*:*","matchCriteriaId":"EA030DC7-EF2A-4B79-ADB8-512B9CE8EF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp2:*:*:*:sun:*:*","matchCriteriaId":"21FBA4F6-EA8E-4F8A-A302-AB72071FD800"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp3:*:*:*:apache:*:*","matchCriteriaId":"E8A8FA50-834E-456D-8C98-EE3E9C10A0E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp3:*:*:*:internet_information_services:*:*","matchCriteriaId":"1932701E-91D9-4CD4-B638-F08E2C31249A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp3:*:*:*:sun:*:*","matchCriteriaId":"0AB6AA30-6FEE-404B-AB02-86761D8292E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp4:*:*:*:apache:*:*","matchCriteriaId":"0546FC1E-398A-472B-9BCA-66E25C1609D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp4:*:*:*:internet_information_services:*:*","matchCriteriaId":"4EA30379-D3CB-4855-B173-0D66F1A8DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp4:*:*:*:sun:*:*","matchCriteriaId":"53F70A3E-F0CF-4E5F-BD0C-A2FCCD445751"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp5:*:*:*:apache:*:*","matchCriteriaId":"7056642D-2BB6-46AA-811B-C1E13664D75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp5:*:*:*:internet_information_services:*:*","matchCriteriaId":"90B880DB-DF75-4288-B851-3D89CA878B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp5:*:*:*:sun:*:*","matchCriteriaId":"BCC2A90C-0047-4B59-AF08-3BBA59AC9E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp6:*:*:*:apache:*:*","matchCriteriaId":"B1D6291B-8E48-4BCB-8A07-C3F5412C7428"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp6:*:*:*:internet_information_services:*:*","matchCriteriaId":"DD552EC5-347B-4531-8EEA-E59437EEA31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp6:*:*:*:sun:*:*","matchCriteriaId":"C9D10658-03C8-4851-8704-175BBB7311EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp7:*:*:*:apache:*:*","matchCriteriaId":"D830D8DD-1961-4253-8D46-799323AEB6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp7:*:*:*:internet_information_services:*:*","matchCriteriaId":"C904ADAB-F88B-43F8-BB27-4C9C0F6B2852"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:6.1:sp7:*:*:*:sun:*:*","matchCriteriaId":"A6E954B4-BE8D-4D01-A8CF-C41B7323B64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:-:*:*:*:apache:*:*","matchCriteriaId":"53D5FE9F-2257-45F0-A4DA-A5353EDC41B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"8D21D045-53F9-4C82-9E41-DF57E0501E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:-:*:*:*:sun:*:*","matchCriteriaId":"E6CE412C-27FE-46E7-A031-29E3CCE56F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp1:*:*:*:apache:*:*","matchCriteriaId":"F5D08F2B-0F07-4F47-B42E-B32CC08B41FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp1:*:*:*:internet_information_services:*:*","matchCriteriaId":"FA064E05-4837-4889-BD06-1EB1DB2BF41C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp1:*:*:*:sun:*:*","matchCriteriaId":"632C8D94-5C82-4811-A6DA-DC81C23A8933"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp2:*:*:*:apache:*:*","matchCriteriaId":"6178B9BA-90B6-4125-A4D0-D61163964906"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp2:*:*:*:internet_information_services:*:*","matchCriteriaId":"FB4C2A78-CEF7-42A8-B14E-61A54D3CAECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp2:*:*:*:sun:*:*","matchCriteriaId":"D3E58951-01C8-4A15-A115-E640DC6CD6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp3:*:*:*:apache:*:*","matchCriteriaId":"DD9F4E94-5232-449E-B27E-5654FEB6B0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp3:*:*:*:internet_information_services:*:*","matchCriteriaId":"A6E7775D-2A02-40EF-A94D-1C8316D7116B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp3:*:*:*:sun:*:*","matchCriteriaId":"2DE7CBE2-37F1-4250-8ACF-6E7A1E29D2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp4:*:*:*:apache:*:*","matchCriteriaId":"2A3E3090-12B7-49F1-B33E-18F1CA875DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp4:*:*:*:internet_information_services:*:*","matchCriteriaId":"1F430843-4C31-4CF9-B5F8-C4D2B61B2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp4:*:*:*:sun:*:*","matchCriteriaId":"5DFC1E55-880C-481D-A4E0-24CFB6E7CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp5:*:*:*:apache:*:*","matchCriteriaId":"87FAECDC-4B58-405D-AEF3-F7CD6706D07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp5:*:*:*:internet_information_services:*:*","matchCriteriaId":"366A3C71-505F-49E3-8B06-D2E3DC8ED458"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp5:*:*:*:sun:*:*","matchCriteriaId":"87646B76-6B7B-410E-8049-3492111CB52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp6:*:*:*:apache:*:*","matchCriteriaId":"00946481-536A-4202-8CAA-C36A234F1BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp6:*:*:*:internet_information_services:*:*","matchCriteriaId":"AD51247A-3D9C-41F0-A339-BAFA12A6D9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp6:*:*:*:sun:*:*","matchCriteriaId":"1239B3C8-657D-4E53-810E-69CCC42D3A22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp7:*:*:*:apache:*:*","matchCriteriaId":"8E20FCB4-CFCD-4323-9455-B3EB781FEF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp7:*:*:*:internet_information_services:*:*","matchCriteriaId":"8776D7B7-64C7-46AC-B966-30468DA2501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:7.0:sp7:*:*:*:sun:*:*","matchCriteriaId":"F4B3C431-7242-4F5E-969D-F5F0DA0A8F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:-:*:*:*:apache:*:*","matchCriteriaId":"71F17F89-E92B-4D9C-B716-7763BDB212C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"DEE183EF-7FDA-4A6C-9383-B146367B667F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:-:*:*:*:sun:*:*","matchCriteriaId":"AAFB9DFF-D096-4627-9DCA-1A5F67D44BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp1:*:*:*:apache:*:*","matchCriteriaId":"238D1D0F-E1F0-49DA-9109-98DAEF9B7BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp1:*:*:*:internet_information_services:*:*","matchCriteriaId":"2E8DAAE1-DEB0-4121-BE3C-A1AE6CC05915"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp1:*:*:*:sun:*:*","matchCriteriaId":"3D369B05-EB1C-45F7-BB27-B7FEE20E62A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp2:*:*:*:apache:*:*","matchCriteriaId":"0F79DAE8-413F-4287-BF51-680CB47F5E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp2:*:*:*:internet_information_services:*:*","matchCriteriaId":"C2ABE1D8-7BAE-4B30-9B51-AEF2878F09C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp2:*:*:*:sun:*:*","matchCriteriaId":"1BF0B362-C5A6-41A6-B333-7835DEBD71A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp3:*:*:*:apache:*:*","matchCriteriaId":"39F54918-9C4D-40EF-A23E-47761DA374A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp3:*:*:*:internet_information_services:*:*","matchCriteriaId":"175DD532-2221-4FF7-8B87-89F01B5D91E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp3:*:*:*:sun:*:*","matchCriteriaId":"2DB01146-81F5-45D1-9590-E37C4216618F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp4:*:*:*:apache:*:*","matchCriteriaId":"065415C0-1C0E-49D3-8F00-0BC703BE2F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp4:*:*:*:internet_information_services:*:*","matchCriteriaId":"62E605DA-64A4-43B3-A9CC-8AB60636AFF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp4:*:*:*:sun:*:*","matchCriteriaId":"D38D058D-0BBF-41FC-8BA7-6B318E0D9FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp5:*:*:*:apache:*:*","matchCriteriaId":"F658C32E-C751-4D6E-ACB0-015B65B31BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp5:*:*:*:internet_information_services:*:*","matchCriteriaId":"F72742DD-2682-4E7F-9A01-E93EF2C70F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp5:*:*:*:sun:*:*","matchCriteriaId":"E57BC804-B660-4165-8CD8-727254869133"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp6:*:*:*:apache:*:*","matchCriteriaId":"6513014C-7DE6-4D28-852C-787A8E9CF970"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp6:*:*:*:internet_information_services:*:*","matchCriteriaId":"D8892EFD-2EB8-4FA5-84E1-447D47D608FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:8.1:sp6:*:*:*:sun:*:*","matchCriteriaId":"92808D75-AE0B-44A2-BC26-17B7BCBBA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:-:*:*:*:apache:*:*","matchCriteriaId":"675BDBAC-1956-493E-B493-BB6C098DA65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"875D5372-2807-42B2-8688-9160794E897E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:-:*:*:*:sun:*:*","matchCriteriaId":"1328142F-E9B8-4D44-B4F1-4CBC2FCB5504"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:maintenance_pack3:*:*:*:apache:*:*","matchCriteriaId":"AA0C1AEE-124D-41C9-815B-BCE5FA0B146C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:maintenance_pack3:*:*:*:internet_information_services:*:*","matchCriteriaId":"307716C2-D09B-4B43-9435-A62106909ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.0:maintenance_pack3:*:*:*:sun:*:*","matchCriteriaId":"D4106FD7-CEB0-41E2-9A32-850C11F3A39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:-:*:*:*:apache:*:*","matchCriteriaId":"CF3915B8-1D82-4306-A7D4-0C72D04C653B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"D9F541C4-3A4B-4647-81A1-9BD6E106A0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:-:*:*:*:sun:*:*","matchCriteriaId":"9137FA52-1E72-495A-9440-05F4BA71CB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:maintenance_pack3:*:*:*:apache:*:*","matchCriteriaId":"E3A83D20-89F3-4D9C-9D21-E5A2FDBA248D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:maintenance_pack3:*:*:*:internet_information_services:*:*","matchCriteriaId":"D6B43644-C1D5-44AC-B6BF-9935EBC604C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.1:maintenance_pack3:*:*:*:sun:*:*","matchCriteriaId":"247B2940-F6BC-417C-9D5A-46E0202900AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:-:*:*:*:apache:*:*","matchCriteriaId":"12D35456-F34C-49C3-86BB-C58D5F7C0616"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"64A48C05-80EC-4103-8904-855A8EA3FE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:-:*:*:*:sun:*:*","matchCriteriaId":"7F19C69B-64D3-4BF1-A5B0-4C42E00369FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack1:*:*:*:apache:*:*","matchCriteriaId":"C3E8FEAE-8F5D-417E-87CA-A56D05C08846"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack1:*:*:*:internet_information_services:*:*","matchCriteriaId":"07CB3132-5711-48C5-9528-FE020F2C4E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack1:*:*:*:sun:*:*","matchCriteriaId":"C2282A0E-2083-4676-8394-918011E047B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack2:*:*:*:apache:*:*","matchCriteriaId":"E40165F2-3278-4943-AE51-5699653BFDD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack2:*:*:*:internet_information_services:*:*","matchCriteriaId":"D022F5CD-9942-41AF-98A6-1EACFB83B760"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack2:*:*:*:sun:*:*","matchCriteriaId":"22C9B7EA-1EA6-4FC9-82B1-75C03579001E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack3:*:*:*:apache:*:*","matchCriteriaId":"D008650F-05BF-435E-AC81-E42D38AD442E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack3:*:*:*:internet_information_services:*:*","matchCriteriaId":"6EA45D27-74DD-49BC-B574-B77F3186713B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:9.2:maintenance_pack3:*:*:*:sun:*:*","matchCriteriaId":"1512C1C3-17BF-4BA5-A8FD-A3E469FB1A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:-:*:*:*:apache:*:*","matchCriteriaId":"D20F2359-2408-4517-AE0E-2CC9604C8F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:-:*:*:*:internet_information_services:*:*","matchCriteriaId":"35E44B52-683E-4242-8FFC-C28448CE8ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:-:*:*:*:sun:*:*","matchCriteriaId":"C4419213-8283-4C97-BEA5-793475FD03BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:maintenance_pack1:*:*:*:apache:*:*","matchCriteriaId":"A33CB38D-6A2B-477A-B22B-6DE2BE96FB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:maintenance_pack1:*:*:*:internet_information_services:*:*","matchCriteriaId":"A843E056-9160-4834-A5C5-A812EF0CB628"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.0:maintenance_pack1:*:*:*:sun:*:*","matchCriteriaId":"19C2ED85-0A82-41B2-A9B5-BCD35DD5EE97"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://jvn.jp/en/jp/JVN81667751/index.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43823","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://jvn.jp/en/jp/JVN81667751/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2580","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite de Oracle versiones 10.0 MP1, 9.2 MP3, 9.1 y 9.0, presenta un impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"E8E54E31-39FC-47D3-BE5D-FF8295229317"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:*:*:*:*:*:*:*:*","matchCriteriaId":"24CDCBAA-583E-4B6F-8A8A-B349A32A300E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43829","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2581","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite de Oracle versiones 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6 y 7.0 SP7, presenta un impacto desconocido y vectores de ataque remotos relacionados con UDDI Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"A7946A2F-378A-4A19-8B6F-18768E385C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"B3B986B9-A82B-4087-808E-854EC443AC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6AF95249-8970-406B-B874-4B9925471C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DD536DD6-AF76-4075-8B28-322FB65793AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"9BDA1940-A3F4-4CEC-BDD0-B098B2E27CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"3BB8A45D-95E5-4F14-A51A-29B5A6E45F43"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43824","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2582","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite  de Oracle versiones 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6 y 7.0 SP7, presenta un impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:*:*:*:*:*:*:*:*","matchCriteriaId":"24CDCBAA-583E-4B6F-8A8A-B349A32A300E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020498","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43825","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2583","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors."},{"lang":"es","value":"Vulnerabilidad en el Foro de Discusión Portlet para el componente Oracle Portal en Oracle Application Server, como está disponible desde OTN anterior 20080715, tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_portal_component:*:*:*:*:*:*:*:*","matchCriteriaId":"A66638E5-CDC3-42B5-A03E-283129C8A475"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2585","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Report Manager de Oracle E-Business Suite 12.0.4 tiene impacto desconocido y vectores de ataque autentificados remotamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:report_manager_component:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"252DBBC9-8FAF-493C-ADE7-8A3132DC8591"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2586","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite 12.0.4 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2606."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:*:*:*:*:*:*:*:*","matchCriteriaId":"C9339E2E-A3EC-46A6-BCC2-02EAF9632C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2587","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Advanced Replication component de Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, y 10.2.0.3 tiene un impacto desconocido y vectores de ataque locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.5},"baseSeverity":"LOW","exploitabilityScore":2.7,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:advanced_replication:*:*:*:*:*:*:*:*","matchCriteriaId":"8263AE39-B1BA-405C-8AFE-40CF0672B590"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.0.1.5:*:fips\\+:*:*:*:*:*","matchCriteriaId":"6C64DE7C-5A32-4C73-8A3D-4B646FB24D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"5949CA3A-7B77-44D1-9232-361B82E1400B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:advanced_replication:*:*:*:*:*:*:*:*","matchCriteriaId":"8263AE39-B1BA-405C-8AFE-40CF0672B590"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2588","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:11:10.833","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle JDeveloper en Oracle Application Server v10.1.2.2 permite a usuarios locales afectar a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdeveloper:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8EE422EB-0F67-48D1-AAB0-9C43D452F5B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021054","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45877","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2589","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Oracle Portal en Application Server de Oracle versiones 9.0.4.3, 10.1.2.2 y 10.1.4.1,  presenta un impacto desconocido y vectores de ataque remotos. NOTA: la información anterior fue obtenida de la CPU de julio de 2008 de Oracle. Oracle no ha comentado sobre las afirmaciones de un investigador confiable de que este problema es una vulnerabilidad de inyección SQL en el paquete WWV_RENDER_REPORT que permite a atacantes remotos ejecutar comandos SQL (PL/SQL) arbitrarios por medio del segundo argumento en el procedimiento SHOW."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E9A3EA86-0C95-4260-8E11-ECCE161BDF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_portal_component:*:*:*:*:*:*:*:*","matchCriteriaId":"A66638E5-CDC3-42B5-A03E-283129C8A475"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494410/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494410/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2590","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Instance Management de Oracle Database 10.1.0.5 y Enterprise Manager 10.1.0.6 tiene impacto desconocido y vectores de ataque autentificados remotamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_10g:10.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C7793BD7-1CBB-4B6A-877A-F8E07397CA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:instance_management_component:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9D501146-7A53-4C4C-855F-D1C57127F270"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:instance_management_component:10.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B23CE4E1-0DAB-49C4-AB75-A569E72EBA66"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020496","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2591","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Componente Oracle Database Vault en Oracle Database 9.2.0.8DV, 10.2.0.3, y 11.1.0.6, tiene vectores de ataque e impacto desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2592","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a SQL injection vulnerability in the DELETE_TRAN procedure."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Replicación Advanced en Database de Oracle versiones  9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque autenticados remotos relacionados con SYS.DBMS_DEFER_SYS. NOTA: la información anterior fue obtenida de la CPU de julio de 2008 de Oracle. Oracle no ha comentado sobre las afirmaciones de un investigador confiable de que se trata de una vulnerabilidad de inyección SQL en el procedimiento DELETE_TRAN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:advanced_replication_component:*:*:*:*:*:*:*:*","matchCriteriaId":"2A3412AF-6FEF-44D6-80FD-043E49A65EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:9.0.1.5:*:fips\\+:*:*:*:*:*","matchCriteriaId":"8DBD37FD-CBB1-4E43-B2D7-DF2044D96EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"63010FB6-E7B0-4C71-959C-57F53E4A0CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"58F6C6F7-99A1-4A2B-B848-6821217A33FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9409476A-5766-450B-BFA1-CDEE25F7CD35"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495094/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495336/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495094/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495336/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2593","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2594."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 tiene impacto desconocido y vectores de ataque remotos, una vulnerabilidad diferente a CVE-2008-2594."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"415018EB-2D62-49B5-BBBE-E8276400A1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C64FECA-B451-4648-AFDE-194F36527A59"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-2594","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 tiene impacto desconocido y vectores de ataque remotos, una vulnerabilidad diferente a CVE-2008-2593."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EDB920B2-4EF9-41A8-88C6-1C029F2B8516"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:10.1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"18B4BD09-2F99-4898-9DE8-6728174B1512"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-2595","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.  NOTE: the previous information was obtained from the Oracle July 2008 CPU.  Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Componente Internet Directory de Oracle Application Server 9.0.4.3, 10.1.2.3, y 10.1.4.2, tienen un impacto y vectores de ataque desconocidos. NOTA: la información previa se ha obtenido de Oraclew July 2008 CPU.\r\nOracle no ha comentado al investigador oficial que puede tratarse de una denegación de servicio (caída) provocada por una petición LDAP mal formada que dispara una deferencia a un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5EA4C2F5-D4B8-4597-8840-566A737B78E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F2114C0F-6C86-4B37-B32C-60305D4F7920"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"11A2E6FB-8454-4677-943A-AF41FB7E8993"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6101","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2596","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Mobile Application Server de Oracle E-Business Suite 12.0.3; tienen un impacto y vectores de ataques de autenticación remota desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mobile_application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8CBAD62F-134E-41A2-B91F-9FB3A33F74CC"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2597","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2598 and CVE-2008-2599."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente TimesTen Client/Server de Oracle Times Ten In-Memory Database 7.0.3.0.0 tiene un impacto desconocido y vectores de ataque remotos, una vulnerabilidad diferente que CVE-2008-2598 y CVE-2008-2599."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:times_ten_client_server_component:*:*:*:*:*:*:*:*","matchCriteriaId":"16005010-6356-4ADC-9F99-FDAC0C83F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:times_ten_in_memory_database:7.0.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A06CA83C-AA1C-42DB-B6C4-03B27211602E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020493","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2598","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2599."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente TimesTen Client/Server de Oracle Times Ten In-Memory Database 7.0.3.0.0 tiene impacto desconocido y vectores de ataque remotos, una vulnerabilidad distinta a CVE-2008-2597 y CVE-2008-2599."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:times_ten_client_server:7.0.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3231C4BA-44F4-4D30-8D35-85FCCEF84526"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:times_ten_in_memory_database:7.0.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A06CA83C-AA1C-42DB-B6C4-03B27211602E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020493","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2599","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2598."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente TimesTen Client/Server de Oracle Times Ten In-Memory Database 7.0.3.0.0 tiene un impacto desconocido y vectores de ataque remotos, una vulnerabilidad diferente que CVE-2008-2597 y CVE-2008-2598."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:times_ten_client_server:7.0.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3231C4BA-44F4-4D30-8D35-85FCCEF84526"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:times_ten_in_memory_database:7.0.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A06CA83C-AA1C-42DB-B6C4-03B27211602E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020493","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2600","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to MDSYS.SDO_TOPO_MAP."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Spatial de Oracle Database 10.1.0.5, 10.2.0.3 y 11.1.0.6; tiene un impacto y vectores de ataque de autenticación remota desconocidos, relacionados con MDSYS.SDO_TOPO_MAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9409476A-5766-450B-BFA1-CDEE25F7CD35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:spatial_component:*:*:*:*:*:*:*:*","matchCriteriaId":"638ADDE9-94F1-4D20-B2AA-01AA43864B58"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2601","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle iStore de Oracle E-Business Suite 12.0.4 tiene impacto desconocido y vectores de ataque autentificados remotamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2602","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE role."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente  Data Pump de Oracle Database 10.1.0.5, 10.2.0.4, y 11.1.0.6 tiene un impacto desconocido y vectores de ataque remotos autenticados relacionados al perfil IMP_FULL_DATABASE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:data_pump_component:*:*:*:*:*:*:*:*","matchCriteriaId":"88E45A68-AA4A-449E-80EC-754B62C4467A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2603","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the REFRESHCHOICE parameter in multiple web pages."},{"lang":"es","value":"La vulnerabilidad no especificada en el componente Resource Manager en Database de Oracle versiones  10.1.0.5, 10.2.0.4 y 11.1.0.6, y Database Control en Enterprise Manager, presenta un impacto desconocido y vectores de ataque autenticados remotos. NOTA: la información anterior fue obtenida de la CPU de julio de 2008 de Oracle. Oracle no ha comentado sobre las afirmaciones de un investigador confiable de que se trata de un problema de tipo cross-site scripting (XSS) que permite a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro REFRESHCHOICE en múltiples páginas web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A8AA2911-B4DB-4793-BE98-93D54FB0F1AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"449A3C99-2798-4EF3-883B-5A0146E6E2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4D9CFF9D-CE47-4F30-BC49-CF1B5F1EC625"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495093/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020496","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495093/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2604","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2605."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Authentication de Oracle Database 11.1.0.6, tiene un impacto y vectores de ataque de autenticación remota desconocidos, una vulnerabilidad diferente a CVE-2008-2605."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:authentication_component:*:*:*:*:*:*:*:*","matchCriteriaId":"AF4F6E68-6196-46AE-9FB8-8F5D6E771964"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2605","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2604."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Authentication de Oracle Database 11.1.0.6, tiene un impacto y vectores de ataque de autenticación remota desconocidos, una vulnerabilidad diferente a CVE-2008-2604."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:authentication_component:*:*:*:*:*:*:*:*","matchCriteriaId":"AF4F6E68-6196-46AE-9FB8-8F5D6E771964"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2606","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite 12.0.4 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2586."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_object_library:*:*:*:*:*:*:*:*","matchCriteriaId":"C9339E2E-A3EC-46A6-BCC2-02EAF9632C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2607","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM.  NOTE: the previous information was obtained from the Oracle July 2008 CPU.  Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a long argument to an unspecified procedure."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Advanced Queuing en Database de Oracle versiones  9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.6, presenta  un impacto desconocido y vectores de ataque autenticados remotos relacionados con SYS.DBMS_AQELM. NOTA: la información anterior fue obtenida de la CPU de julio de 2008 de Oracle. Oracle no ha comentado sobre las afirmaciones de un investigador confiable de que este problema es un desbordamiento de búfer que permite a atacantes causar una denegación de servicio (corrupción de base de datos) y posiblemente ejecutar código arbitrario por medio de un argumento largo en un procedimiento no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:advanced_queuing_component:*:*:*:*:*:*:*:*","matchCriteriaId":"BD3DD8C1-F3FB-4E6C-AD9A-1D4D145CB34E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"5949CA3A-7B77-44D1-9232-361B82E1400B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2608","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to SYS.KUPF$FILE_INT."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Componente Data Punmp en Oracle Database 10.1.0.5 y 10.2.0.3, posee un impacto y vectores de ataque autenticados remotamente relacionados con SYS.KUPF$FILE_INT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:data_pump_component:*:*:*:*:*:*:*:*","matchCriteriaId":"88E45A68-AA4A-449E-80EC-754B62C4467A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2609","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Portal de Oracle Application Server 9.0.4.3, 10.1.2.3 y 10.1.4.2 tiene impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EDB920B2-4EF9-41A8-88C6-1C029F2B8516"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:10.1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"18B4BD09-2F99-4898-9DE8-6728174B1512"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_portal_component:*:*:*:*:*:*:*:*","matchCriteriaId":"A66638E5-CDC3-42B5-A03E-283129C8A475"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2610","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Technology Stack de Oracle E-Business Suite 12.0.4 tiene un impacto desconocido y vectores de ataque remoto autenticados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_applications_technology_stack_component:*:*:*:*:*:*:*:*","matchCriteriaId":"45AFB31D-F273-4A0B-91F6-0C1316FEA6D2"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020495","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2611","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el Core RDBMS, componente de la Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, y 11.1.0.6 con un impacto desconocido y vector de ataque de atenticación remota."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:core_rdbms_component:*:*:*:*:*:*:*:*","matchCriteriaId":"317699DC-E79C-43B2-A09E-0997FB239275"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:9.0.1.5:*:fips\\+:*:*:*:*:*","matchCriteriaId":"8DBD37FD-CBB1-4E43-B2D7-DF2044D96EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"63010FB6-E7B0-4C71-959C-57F53E4A0CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"58F6C6F7-99A1-4A2B-B848-6821217A33FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_database:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9409476A-5766-450B-BFA1-CDEE25F7CD35"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2612","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Hyperion BI Plus de Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0 y 9.3.1.0 tiene impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:hyperion_bi_plus_component:*:*:*:*:*:*:*:*","matchCriteriaId":"AA6FB50D-8545-42B4-9B07-D8DDFB24C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:8.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"478727CF-85B6-4F77-A029-708AE2128AD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:8.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E0EC5629-7B30-42D9-B8B8-F006A23C508D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E14EB582-9725-4E6E-BD0A-57227B2410F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:9.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C0FEC97A-A907-4555-98D9-37B00BD281E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:9.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C77393AC-3CA0-4DD2-AF9D-5D76C3115B55"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2613","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Database Scheduler component in Oracle Database 10.2.0.4 and 11.1.0.6 has unknown impact and local attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is an untrusted search path issue that allows local users to gain privileges via a malicious (1) libclntsh.so or (2) libnnz10.so library."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Database Scheduler en Database de Oracle versiones 10.2.0.4 y 11.1.0.6,  presenta un impacto desconocido y vectores de ataque locales. NOTA: la información anterior fue obtenida de la CPU de julio de 2008 de Oracle. Oracle no ha comentado sobre las afirmaciones de un investigador confiable de que se trata de un problema de ruta (path) de búsqueda no confiable que permite a usuarios locales alcanzar privilegios por medio de una biblioteca maliciosa (1) libclntsh.so o (2) libnnz10.so."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_scheduler:*:*:*:*:*:*:*:*","matchCriteriaId":"C31B2191-BC1F-43B5-8DE8-EA0CBC0C0D3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_scheduler:*:*:*:*:*:*:*:*","matchCriteriaId":"C31B2191-BC1F-43B5-8DE8-EA0CBC0C0D3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=727","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494544/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494544/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2614","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle HTTP Server de Oracle Application Server 9.0.4.3, 10.1.2.3, y 10.1.3.3 tiene un impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A79FF0E1-4EEF-49E2-890C-1C8937CF2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EDB920B2-4EF9-41A8-88C6-1C029F2B8516"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle_http_server_component:*:*:*:*:*:*:*:*","matchCriteriaId":"F54F35A1-75AD-4F85-887D-E5653378BE6B"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020494","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2615","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621 y CVE-2008-2622."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*","matchCriteriaId":"8ACE61F1-A1C7-42AC-B0B5-29DB56F7CCB0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43816","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2616","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621 y CVE-2008-2622."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"8E0D527E-B105-463A-9BD2-93DB0B47E0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"F3D9DF9E-B3A2-4FA8-BD17-D6632ACE1754"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43818","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2617","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2615, CVE-2008-2616, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621 y CVE-2008-2622."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*","matchCriteriaId":"8ACE61F1-A1C7-42AC-B0B5-29DB56F7CCB0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43819","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2618","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620, CVE-2008-2621 y CVE-2008-2622."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*","matchCriteriaId":"8ACE61F1-A1C7-42AC-B0B5-29DB56F7CCB0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43820","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2619","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:11:10.847","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Reports Developer de  Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2 y E-Business Suite 11.5.10.2 permite a un atacante remoto autentificado comprometer la disponibilidad por medio de un método desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021054","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021057","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2620","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2621, and CVE-2008-2622."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2621 y CVE-2008-2622."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*","matchCriteriaId":"8ACE61F1-A1C7-42AC-B0B5-29DB56F7CCB0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43821","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2621","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2622."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620 y CVE-2008-2622."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*","matchCriteriaId":"8ACE61F1-A1C7-42AC-B0B5-29DB56F7CCB0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43822","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2622","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2621."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.17 y 8.49.11 tiene impacto desconocido y vectores de ataque remotos autenticados, una vulnerabilidad diferente a CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620 y CVE-2008-2621."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"EFC77BC0-F54E-4037-A87A-BAAB1D52349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"3A2A7608-E35F-43BB-ACCB-1B0E1B71C495"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.17:*:*:*:*:*:*:*","matchCriteriaId":"639F8A00-D20B-4E48-9D74-5DA65143A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.11:*:*:*:*:*:*:*","matchCriteriaId":"CB4CF1E8-B0AA-4225-A042-7DDB8C3CA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools_component:-:*:*:*:*:*:*:*","matchCriteriaId":"8ACE61F1-A1C7-42AC-B0B5-29DB56F7CCB0"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43817","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/31113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2109/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2008/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2624","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:11:10.880","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle OLAP de Oracle Database 10.1.0.5 permite a usuarios autentificados remotamente afectar la confidencialidad, integridad y disponibilidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021050","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45879","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2625","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:11:10.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database versiones 9.2.0.8, 9.2.0.8DV, 10.1.0.5 y 10.2.0.2, permite a los atacantes remotos afectar a la confidencialidad y la integridad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de octubre 2008 de Oracle. Oracle no ha comentado sobre las afirmaciones de un investigador confiable que este problema implica una omisión de autenticación mediante el establecimiento de una conexión TNS y la suplantación de una sesión de usuario por medio de un mensaje de autenticación diseñado durante el modo de autenticación del proxy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"62D38CEF-DC3A-4467-BB9E-1B3DF0DEEFCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497539/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021050","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45880","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497539/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2626","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comment.asp de Battle Blog 1.25 y versiones anteriores permite a atacantes remotos ejecutar comandos SLQ de su elección a través del parámetro entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:*:build_4:*:*:*:*:*:*","versionEndIncluding":"1.25","matchCriteriaId":"698A3BD9-BB45-4148-89F2-6C353144B127"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.0d:build_3:*:*:*:*:*:*","matchCriteriaId":"0DDC011B-0A24-4B3A-AD1F-65028AB9384E"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.0d:build_4:*:*:*:*:*:*","matchCriteriaId":"CA8129DD-20C4-447E-B433-A0B463C7B397"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.0d:build_5:*:*:*:*:*:*","matchCriteriaId":"EBAF68B1-E55F-4EAF-823D-7D0AAC5EA1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.0d:build_5a:*:*:*:*:*:*","matchCriteriaId":"6EDE6424-07F4-478B-85DA-BCBE91574497"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.0d:build_6:*:*:*:*:*:*","matchCriteriaId":"104A8FCF-4C6B-4D17-9AC7-4B6F7F39B2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.05:build_1:*:*:*:*:*:*","matchCriteriaId":"B1C447A0-0024-4970-A153-483DDC9C2884"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.20:build_1:*:*:*:*:*:*","matchCriteriaId":"95B9449B-6711-43EF-8771-83632E433105"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.20:build_2:*:*:*:*:*:*","matchCriteriaId":"E678D6C6-A281-401B-944A-CD03ECCF60E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:1.20:build_3:*:*:*:*:*:*","matchCriteriaId":"C0D0021F-5616-485D-8222-15F952B04639"}]}]}],"references":[{"url":"http://secunia.com/advisories/30503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davethewebguy.com/battleblog/article.asp?entry=24","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29507","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1737/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42818","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5731","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davethewebguy.com/battleblog/article.asp?entry=24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1737/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2627","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente IDoBlog (com_idoblog) b24 y versiones anteriores y 1.0, un componente para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro userid en una acción userblog de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_idoblog:*:*:*:*:*:*:*:*","versionEndIncluding":"b24","matchCriteriaId":"F924C34E-33A8-49B2-A88C-ECD68708AE05"}]}]}],"references":[{"url":"http://secunia.com/advisories/30505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42819","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2628","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the eQuotes (com_equotes) component 0.9.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente  eQuotes (com_equotes) 0.9.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ron_liskey:com_equotes:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"AD711C80-7D59-40AD-A24B-A5BEEF0C9A09"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42805","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5723","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2629","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo LifeType (formerly pLog) para Drupal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro albumId en una acción ViewAlbum de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lifetype:lifetype:*:*:*:*:*:*:*:*","matchCriteriaId":"1B27D45B-9E01-4761-A50D-48117129F2ED"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42808","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2630","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter in a category action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JooBlog (com_jb2) 0.1.1 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro CategoryID en una acción category de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_jb2:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EEFB30CF-AD7A-486F-B139-F3D0FFDF526D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30443","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1736/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42838","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1736/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2631","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"La interfaz WordClient en Alt-N Technologies MDaemon 9.6.5 permite a atacantes remotos provocar una denegación de servicio (puntero a referencia NULL o caída de aplicación) a través de una petición HTTP POST manipulada.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altn:mdaemon:*:*:*:*:*:*:*:*","versionEndIncluding":"9.6.5","matchCriteriaId":"EE9E14B8-120F-4030-82D9-2A53BC1926B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2632","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente acctexp (com_acctexp) 0.12.x y versiones anteriores para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro usage en una acción subscribe de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_acctexp:0.12:*:*:*:*:*:*:*","matchCriteriaId":"ADB52D92-6709-4E1E-BD09-E8BA4F7237F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2633","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video action to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el componente EXP JoomRadio (com_joomradio) 1.0 para Joomla! permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción (1) show_radio o (2) show_video de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_joomradio:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7706EA8-F9D7-4A44-9DF3-9F87C12A512B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0806-exploits/joomlajoomradio-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501069/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29504","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42814","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5729","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0806-exploits/joomlajoomradio-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2634","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.asp de I-Pos Internet Pay Online Store 1.3 Beta y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro item."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bearrivernet.net:i-pos_internet_pay_online_store:*:beta:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"E0AAAA63-6B96-4380-9F16-817C925D579E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bearrivernet.net:i-pos_internet_pay_online_store:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"1F2C1D49-5467-4A76-A521-103357764D18"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42786","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5717","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2635","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in BitKinex 2.9.3 allow remote FTP and WebDAV servers to create or overwrite arbitrary files via a .. (dot dot) in (1) a response to a LIST command from the BitKinex FTP client and (2) a response to a PROPFIND command from the BitKinex WebDAV client.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en BitKinex 2.9.3 permite a FTP remotos y servidores WebDAV crear o sobrescribir ficheros de su elección a través de .. (punto punto) en (1) una respuesta al comando LIST del cliente FTP BitKinex y (2) una respuesta al comando PROPFIND de un cliente WebDAV BitKinex.\r\nNOTA: esto puede ser utilizado para ejecutar código escribiendo en la carpeta Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:barad_dur:bitkinex:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"4F9CB985-A73D-4B13-B40B-2C4065C78851"}]}]}],"references":[{"url":"http://secunia.com/advisories/30532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/bitkinex293-en.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1738/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42842","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/bitkinex293-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1738/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2636","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a \"/./\" sequence, contains many instances of a \"front_page\" sequence, and ends with a \".asp\" sequence."},{"lang":"es","value":"El servicio HTTP en Cisco Linksys WRH54G con software empotrado (firmware) 1.01.03 permite a atacantes remotos provocar una denegación de servicio (parada de la interfaz de administración) o posiblemente ejecutar código de su elección a través de una URI que comience con una secuencia \"/./\", contiene muchos casos de una secuencia \"front_page\", y finalice con una secuencia \"\".asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:linksys_wrh54g_router:1.01.03:*:*:*:*:*:*:*","matchCriteriaId":"E009C865-EE13-46CD-8508-3825D531B061"}]}]}],"references":[{"url":"http://secunia.com/advisories/30562","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020237","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1772/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42890","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1772/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2637","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the sql_matchscope parameter in vdesk/admincon/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en F5 FirePass SSL VPN versiones 6.0.2 hotfix 3, y posiblemente versiones anteriores, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de comillas en (1) el parámetro css_exceptions en el archivo vdesk/admincon/webyfiers.php y (2) el parámetro sql_matchscope en el archivo vdesk/admincon/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:firepass_ssl_vpn:6.0.2:hotfix_3:*:*:*:*:*:*","matchCriteriaId":"40A7BB18-7A3D-4EB3-9878-78F52E17ADBA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3931","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493149/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29574","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020205","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1765/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42884","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493149/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1765/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2638","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T00:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en guestbook.php de 1Book 1.0.1 y versiones anteriores permite a atacantes remotos subir código PHP de su elección a través del parámetro message en un formulario web HTML, lo cual está escrito en data.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1-script:1-book:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"E74E2420-6FD3-420A-AC12-E98F545B068A"}]}]}],"references":[{"url":"http://1scripts.net/php-scripts/index.php?p=16","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1735/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42854","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5736","source":"cve@mitre.org"},{"url":"http://1scripts.net/php-scripts/index.php?p=16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1735/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2639","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"The vulnerability found in CitectSCADA could allow a remote un-authenticated attacker to force an abnormal termination of the vulnerable software (Denial of Service) or to execute arbitrary code on vulnerable systems to gain complete control of the software. The CitectSCADA and CitectFacilities applications include ODBC server capabilities to provide remote SQL access to a relational database. For that purpose, an ODBC Server component is used to service requests from clients on TCP/IP networks. Requests are serviced over a TCP high-port in which the application layer protocol reads an initial packet that specifies the length of data and then a second packet of data, of the same length is then read. Once the data is read from the network, it is then copied to an internal buffer of fixed size allocated in the stack without previously verifying that the buffer is big enough to store all the read data.\r\n\r\nThe vulnerability is related to a lack of a proper length-checking on data read from the network. A specially crafted combination of length and data packets could be used to exploit the vulnerability allowing an un-authenticated attacker to execute arbitrary code on vulnerable systems.\r\n\r\nThe bug is a texbook example of classic simple stack-based buffer overflow vulnerabilities of the 1990s that can be exploited by overwriting the return address of the currently running thread.\r\n\r\nFixes and Workarounds:\r\n\r\nUser organizations should deploy the vendor patch, which is available upon request at http://www.citect.com/ or disable the vulnerable service (ODBC server) if it is not needed in their particular installation.","evaluatorSolution":"Citect will provide a patch upon request to mitigate this vulnerability.  Please see the following press release for more information:\r\n\r\nhttp://www.citect.com/documents/news_and_media/pr-citect-address-security.pdf\r\n\r\nFor further information on properly securing SCADA systems, please see the following whitepaper published by Citect:\r\n\r\nhttp://www.citect.com/documents/whitepapers/scada-security-whitepaper.pdf","evaluatorImpact":"The access complexity for this vulnerability is set at High due to the fact that exploiting this vulnerability requires the SCADA system to be connected to the internet and the client needs to be using ODBC technology.  SCADA systems are not typically installed to connect to the internet for security purposes.  While the vendor acknowledges that this vulnerability exists and will provide a patch upon request, they point out that this can be easily mitigated by ensuring SCADA systems (not limited to Citect products) are not connected to the internet.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servicio del servidor ODBC en CitectSCADA 6 y 7 y CitectFacilities 7, permite a atacantes remotos ejecutar código arbitrario mediante una cadena larga en el segundo paquete de aplicación en una sesión TCP en el puerto 20222."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citect:citectfacilities:7:*:*:*:*:*:*:*","matchCriteriaId":"A1AA63D7-B3D6-40CD-B871-B8BEC70D0EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citect:citectscada:6:*:*:*:*:*:*:*","matchCriteriaId":"5AB59393-7CF9-4AAF-B5D9-4D57198DDBCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:citect:citectscada:7:*:*:*:*:*:*:*","matchCriteriaId":"0239F180-38AC-4ECF-B17E-AC7DEA42EB26"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=4556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3944","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020241","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/?action=item&id=2186","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/476345","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CTAR-7ENQNH","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493272/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29634","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1834/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42992","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6387","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=4556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/?action=item&id=2186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/476345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CTAR-7ENQNH","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493272/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1834/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2640","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to (1) client-side-detection-with-history/history/historyFrame.html, (2) express-installation-with-history/history/historyFrame.html, or (3) no-player-detection-with-history/history/historyFrame.html in templates/html-templates/.  NOTE: Firefox 2.0 and possibly other browsers prevent exploitation."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en Flex 3 History Management en Adobe Flex 3.0.1 SDK, Flex Builder 3 y las aplicaciones generadas con éstos, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del marcador identificador al (1) client-side-detection-with-history/history/historyFrame.html, (2) express-installation-with-history/history/historyFrame.html, o (3) no-player-detection-with-history/history/historyFrame.html en templates/html-templates/. NOTA: Firefox 2.0 y probablemente otros navegadores evitan la explotación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0.1:*:sdk:*:*:*:*:*","matchCriteriaId":"DDB08AFF-83FA-4D5D-8DDF-70AC8AC8275D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex_builder:3:*:*:*:*:*:*:*","matchCriteriaId":"8764CF7F-6DD8-4C3A-9251-70B86FD76B24"}]}]}],"references":[{"url":"http://blog.watchfire.com/wfblog/2008/06/javascript-code.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30746","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020301","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-14.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29778","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1862","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43150","source":"cve@mitre.org"},{"url":"http://blog.watchfire.com/wfblog/2008/06/javascript-code.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2641","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an \"input validation issue in a JavaScript method.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Reader y Acrobat 7.0.9 y anteriores, y 8.0 hasta 8.1.2, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores no conocidos, relacionados con un \"problema de validación de entrada en un método JavaScript.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"8A748890-C102-47C4-8A75-05E5C0064115"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"2AB13B40-EEF8-42EB-A02F-D57D88A812D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.0:*:professional:*:*:*:*:*","matchCriteriaId":"1E7D4E11-F49C-47D5-84EE-7A65BF0EF75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.0:*:standard:*:*:*:*:*","matchCriteriaId":"19BE10C3-1A94-4832-935F-8CC28D7AEF2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"4F7B4494-F02C-4D33-86A6-D126440B44AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"9E9D25AB-0FC8-4E0D-87C1-089FF1A04219"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"57AAAD7B-A053-4AD8-87D6-CF7399BB873F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"BE080136-C078-4B27-983F-307F8DA1C6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"E257B03E-FDE6-40BC-A13A-9F383808B143"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"007CC2B9-1FB1-45EC-8D2B-BD5B15716B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"00DDEA6D-B28A-44E8-A8A3-4CE688CB2C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"EBDA4F47-0E01-42E3-8529-8C2608C9C3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"82E9DE9F-5782-4FD4-BE02-55C8FA79BF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"F9B3007B-4A43-4F40-A9D8-15012607A328"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"0D07A979-15E4-47B3-A412-47702905C687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"72BFBE65-1004-4B22-BA63-5C90E93B8CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"618D991E-0510-427B-80CD-F820A0C1782E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"3B60667F-7818-4959-B923-7EFC55EC19A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CD612ECD-E98A-4C17-B3F6-70BC12CA8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"5A160691-E99D-497B-8FB8-E384B039854D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"E8E51EAF-420E-470A-9903-4D3D10B638D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:7.0.9:*:standard:*:*:*:*:*","matchCriteriaId":"6704EAE6-7729-4631-9E70-A8F1A628CABE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:8.1:*:professional:*:*:*:*:*","matchCriteriaId":"858DFFF0-3CD5-4D70-886F-BF0F4E68EE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"AF2C30B6-2ADA-4695-86F6-6A3DD990641F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"CEBDEC98-39C9-4936-B0AB-F415D02EC8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"1073C404-97AE-4CA2-AD9B-53096A7196B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"14D434F4-82A0-4B23-82DB-1C07AF80042E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_3d:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"147F2EC6-91BF-4BE6-AC56-F285160B70D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1C92642-7C8D-411A-8726-06A8A6483D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F509566A-6D4A-40C0-8A16-F8765C5DCAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*","matchCriteriaId":"6AED985D-60D7-489E-9F1E-CE3C9D985B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F7AA1BA3-9FFA-46AB-A92A-7247D5F7EA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"3F5F7424-1E19-4078-8908-CD86A0185042"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F2402B40-6B72-48B5-A376-DA8D16CA43FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"0D968113-340A-4E5A-B4FD-D9702D49E3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF742B8-5F7A-487B-835C-756B1BB392F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B9351C2-16ED-4766-B417-8DB3A8766C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74667860-0047-40AD-9468-860591BA9D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9628AFF9-6EE1-4E85-858F-AE96EE64B7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=4616","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30832","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31339","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31428","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-15.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200808-10.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/788019","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0641.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29908","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020352","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1906","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2289","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43307","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=4616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200808-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/788019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0641.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2642","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter (aka the User Name field) to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en OtomiGenX 2.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro userAccount hacia el index.php. NOTA: algunos de estos detalles han sido obtenidos a través de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kmrg-itb:otomigenx:2.2:*:*:*:*:*:*:*","matchCriteriaId":"F22065DE-44EA-408E-95C8-DABD41E01EA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492914/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42795","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42817","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492914/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2643","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php."},{"lang":"es","value":"Vulnerabilidad de Inyección de SQL en el Componente Bible Study anterior a 6.0.7c para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción \"mediaplayer\" al index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_biblestudy:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.7b","matchCriteriaId":"7681FC2F-2A94-4719-9948-10E13C7E2470"}]}]}],"references":[{"url":"http://joomlacode.org/gf/project/biblestudy/news/?action=NewsThreadView&id=1454","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42788","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5710","source":"cve@mitre.org"},{"url":"http://joomlacode.org/gf/project/biblestudy/news/?action=NewsThreadView&id=1454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2644","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s parameter to order.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SMEWeb 1.4b y 1.4f, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de los parámetros (1) data hacia catalog.php, the (2) keyword al search.php, the (3) page al bb.php y(4) new_s parameter a order.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smeweb:smeweb:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"A00053B6-CA20-4CC2-855B-734CFDE42007"},{"vulnerable":true,"criteria":"cpe:2.3:a:smeweb:smeweb:1.4f:*:*:*:*:*:*:*","matchCriteriaId":"41F0D730-35D3-4581-8CB1-CDDD0B36A2B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493130/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29496","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42813","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493130/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2645","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in (1) barrel/, (2) barry/, (3) mylook/, (4) oerdec/, (5) penguin/, (6) sidebar/, (7) slashdot/, and (8) text-only/ in templates/.  NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de ficheros PHP en Brim (anteriormente Booby) 1.0.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro de renderizado hacia template.tpl.php en (1) barrel/, (2) barry/, (3) mylook/, (4) oerdec/, (5) penguin/, (6) sidebar/, (7) slashdot/, y (8) text-only/ en templates/.  NOTA: esto puede ser usado para incluir y ejecutar ficheros locales arbitrariamente a través de secuencias de salto de directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brim-project:brim:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"86974F60-F61E-4A29-BAA9-5CCB90A7ECAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29469","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1718/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42784","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5722","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1718/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2646","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, (3) InsertBibliography parameter to insert_mask.inc.php, and (4) LabelYear parameter to search_mask.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en meBiblio 0.4.7, permite a atacantes remotos ejecutar secuencias de comandos web y HTML de su elección a través de los parámetros (1) sql al dbadd.inc.php, (2) InsertJournal al add_journal_mask.inc.php, (3) InsertBibliography al insert_mask.inc.php y (4) LabelYear al search_mask.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mebiblio:mebiblio:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"259FF1AA-E95E-450B-951C-518E2835CF60"}]}]}],"references":[{"url":"http://secunia.com/advisories/30488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29465","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42760","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2647","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/journal_change_mask.inc.php in meBiblio 0.4.7 allows remote attackers to execute arbitrary SQL commands via the JID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/journal_change_mask.inc.php en meBiblio 0.4.7, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro JID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mebiblio:mebiblio:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"259FF1AA-E95E-450B-951C-518E2835CF60"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29465","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42759","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2648","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory."},{"lang":"es","value":"Vulnerabilidad de subida de fichero no restringida en upload/uploader.html in meBiblio 0.4.7, permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero .php y accediendo al él posteriormente a través de una petición directa al directorio /files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mebiblio:mebiblio:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"259FF1AA-E95E-450B-951C-518E2835CF60"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29465","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42761","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2649","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en DesktopOnNet 3 Beta, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro app_path hacia (1) don3_requiem.don3app/don3_requiem.php y (2) frontpage.don3app/frontpage.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:don3:desktoponnet:3:beta:*:*:*:*:*:*","matchCriteriaId":"97644E7B-FF27-423B-B96A-6FF44A1968A9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42790","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5715","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2650","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Upgrade requires login when downloads link is clicked from X-Force site.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php.  NOTE: this can be leveraged for remote file execution by including adm.php and then invoking the upload action. NOTE: on 20080601, the vendor patched 3.1 without changing the version number."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en cmsimple/cms.php in CMSimple 3.1, cuando register_globals se encuentra activado, permite a atacantes remotos incluir y ejecutar ficheros locales a través de la secuencia .. (punto punto) en el parámetro sl al index.php. NOTA: esto puede ser aprovecharlo para realizar una ejecución remota de fichero incluyendo adm.php y posteriormente invocando la acción de upload. NOTA: sobre la 20080601, el fabricante parcheó el producto sin modificar el número de versión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FD595C1-A544-46AF-82B1-025764436FA7"}]}]}],"references":[{"url":"http://osvdb.org/45881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cmsimple.com/forum/viewtopic.php?f=2&t=17","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29450","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42792","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42793","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5700","source":"cve@mitre.org"},{"url":"http://osvdb.org/45881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cmsimple.com/forum/viewtopic.php?f=2&t=17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2651","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the forum parameter in a forum action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Joomla! Bulletin Board 0.5.9, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro forum en una acción al index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_joobb:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"2A8B99B0-C30F-4E57-B67A-EDB08189485E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42791","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5719","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2652","sourceIdentifier":"cve@mitre.org","published":"2008-06-10T18:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters."},{"lang":"es","value":"Múltiples vulnerabilidades en catalog.php en SMEWeb 1.4b y 1.4f, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros  (1) idp y (2) category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smeweb:smeweb:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"A00053B6-CA20-4CC2-855B-734CFDE42007"},{"vulnerable":true,"criteria":"cpe:2.3:a:smeweb:smeweb:1.4f:*:*:*:*:*:*:*","matchCriteriaId":"41F0D730-35D3-4581-8CB1-CDDD0B36A2B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493130/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29496","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42811","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493130/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2654","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler."},{"lang":"es","value":"Error de superación del límite (off-by-one) en la función read_client en webhttpd.c en Motion 3.2.10 y anteriores permite a atacantes remotos ejecutar código de su elección mediante una petición larga al interfaz Motion HTTP Control, que dispara un desbordamiento de búfer basado en pila en algunas combinaciones de arquitectura de procesador y compilador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.10","matchCriteriaId":"2EBD0F21-2FB6-4388-AE60-6F08B7F66BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"4D147C1E-A7CC-4C2D-A737-F8B3B385A70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"BB41C1E0-6D13-4866-A8DC-9FC96FE963D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"B63526C3-4163-47B5-890C-414E9C0BB30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.1.20:*:*:*:*:*:*:*","matchCriteriaId":"D536002E-9A4F-4586-9FA9-6F30BE90885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E277E868-851C-4462-AB0F-E2153F0C7F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1910DE64-CDD2-46F8-A8AE-0FD64F7D58E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"39EBADC9-B374-4FAD-BB32-987D03849911"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"72E7C90C-A1A7-4466-AB7F-58B0A412D9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"28575000-61BD-4477-B16B-69BB12C91071"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0D8A1DB7-80BA-498C-9781-E60C41DA3503"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F469039A-4876-477D-8470-C4F5A5D6B70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F39D6ECA-E207-490F-883C-1484D8B507DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lavrsen:motion:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C24FF31B-C7B7-4030-A46F-C925142897D5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=121311577731820&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121314089321816&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121314329424538&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=121314471626034&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30864","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-02.xml","source":"cve@mitre.org"},{"url":"http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x10/webhttpd-security.diff","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x9/webhttpd-security-video2-backport.diff","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29636","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1796","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42979","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=121311577731820&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121314089321816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121314329424538&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=121314471626034&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x10/webhttpd-security.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x9/webhttpd-security-video2-backport.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2662","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change."},{"lang":"es","value":"Múltiples desbordamientos de entero en la función rb_str_buf_append de Ruby 1.8.4 y anteriores, 1.8.5 antes de 1.8.5-p231, 1.8.6 anterior a 1.8.6-p230, 1.8.7 anterior a 1.8.7-p22 y 1.9.0 antes de 1.9.0-2 permite a atacantes dependientes del contexto ejecutar código de su elección o provocar una denegación de servicio mediante vectores desconocidos que disparan una corrupción de memoria, un problema distinto a CVE-2008-2663, CVE-2008-2664 y CVE-2008-2725. NOTA: a fecha de 24-06-2008, ha habido un uso inconsistente de múltiples identificadores CVE relacionados con Ruby. Esta descripción CVE debe ser tomada como autorizado, aunque probablemente cambie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartExcluding":"1.8.5","versionEndExcluding":"1.8.5.231","matchCriteriaId":"3A289D5F-E8F3-4102-BF83-C63114DFE32C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.6","versionEndExcluding":"1.8.6.230","matchCriteriaId":"ABA0AC75-6B7E-48BD-891F-3FB312B9BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.7","versionEndExcluding":"1.8.7.22","matchCriteriaId":"5EDF7713-E20F-4EED-A323-98902450FD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.9.0","versionEndExcluding":"1.9.0.2","matchCriteriaId":"9DDF08CB-5F01-49ED-9DDB-ED39C8B0423E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43345","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11601","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2663","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."},{"lang":"es","value":"Múltiples desbordamientos de entero en la función rb_ary_store de Ruby 1.8.4 y anteriores, 1.8.5 anterior a 1.8.5-p231, 1.8.6 anterior a 1.8.6-p230 y 1.8.7 anterior a 1.8.7-p22 permite a atacantes dependientes del contexto ejecutar código de su elección mediante vectores desconocidos, un problema distinto a CVE-2008-2662, CVE-2008-2664 y CVE-2008-2725. NOTA: a fecha de 24-06-2008, ha habido un uso inconsistente de múltiples identificadores CVE relacionados con Ruby. La descripción CVE debe tomarse como autorizada aunque probablemente cambie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartExcluding":"1.8.5","versionEndExcluding":"1.8.5.231","matchCriteriaId":"3A289D5F-E8F3-4102-BF83-C63114DFE32C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.6","versionEndExcluding":"1.8.6.230","matchCriteriaId":"ABA0AC75-6B7E-48BD-891F-3FB312B9BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.7","versionEndExcluding":"1.8.7.22","matchCriteriaId":"5EDF7713-E20F-4EED-A323-98902450FD09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43346","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10524","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2664","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."},{"lang":"es","value":"La función rb_str_format en Ruby 1.8.4 y anteriores, 1.8.5 anterior a 1.8.5-p231, 1.8.6 anterior a 1.8.6-p230, 1.8.7 anterior a 1.8.7-p22 y 1.9.0 anterior a 1.9.0-2 permite a atacantes dependientes del contexto disparar una corrupción de memoria mediante vectores no especificados relacionados con alloca, un problema distinto a CVE-2008-2662, CVE-2008-2663 y CVE-2008-2725. NOTA: a fecha de 24-06-2008, ha habido un uso inconsistente de múltiples identificadores CVE relacionados con Ruby. La descripción CVE debe ser tomada como autorizada aunque probablemente cambie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartExcluding":"1.8.5","versionEndExcluding":"1.8.5.231","matchCriteriaId":"3A289D5F-E8F3-4102-BF83-C63114DFE32C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.6","versionEndExcluding":"1.8.6.230","matchCriteriaId":"ABA0AC75-6B7E-48BD-891F-3FB312B9BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.7","versionEndExcluding":"1.8.7.22","matchCriteriaId":"5EDF7713-E20F-4EED-A323-98902450FD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.9.0","versionEndExcluding":"1.9.0.2","matchCriteriaId":"9DDF08CB-5F01-49ED-9DDB-ED39C8B0423E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43348","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2665","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run."},{"lang":"es","value":"Vulnerabilidad de Salto de Directorio en la función posix_access de PHP 5.2.6 y versiones anteriores permite a atacantes remotos saltarse la restricciones safe_mode mediante un .. (punto punto) en una URL hhtp, lo que provoca que la URL se canonicalice (redirija)  a un fichero local después de pasar correctamente la comprobación safe_mode."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n","lastModified":"2008-06-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/54","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3941","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29797","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020327","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43196","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/54","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2666","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function."},{"lang":"es","value":"Múltiples vulnerabilidades de Salto de Directorio en PHP 5.2.6 permiten a los atacantes según contexto saltarse las restricciones safe_mode creando un subdirectorio denominado http: y colocando después secuencias ../ (punto punto barra) en un argumento http URL en la función (1) chdir o (2) ftok."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider these to be security issues.  For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\nand http://www.php.net/security-note.php\n","lastModified":"2008-06-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.6","matchCriteriaId":"9FCD404F-54C5-4DFF-ABC3-F0745C5BC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/55","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3942","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29796","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020328","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43198","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2667","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en Courier Authentication Library (también se conoce como courier-authlib) anterior a versión 0.60.6 en openSUSE de SUSE versiones 10.3 y 11.0, y otras plataformas, cuando se utilizan MySQL y un juego de caracteres non-Latin, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del nombre de usuario y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.52:*:*:*:*:*:*:*","matchCriteriaId":"954C40B7-41B3-46D2-B3F5-2188BA3EF211"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.53:*:*:*:*:*:*:*","matchCriteriaId":"05A17C5E-A0E8-41CF-9186-A93CF620FCD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.54:*:*:*:*:*:*:*","matchCriteriaId":"7D9D9346-553A-462E-99CC-038A82C6F2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.55:*:*:*:*:*:*:*","matchCriteriaId":"C78B60DA-57C9-4E8F-ACC5-3813E28B2ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.56:*:*:*:*:*:*:*","matchCriteriaId":"2417C8E8-1ED9-4E83-9BC7-B210C0AFBF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.57:*:*:*:*:*:*:*","matchCriteriaId":"4DCEB5A9-0BC5-4FBE-BF27-F795367CCC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.58:*:*:*:*:*:*:*","matchCriteriaId":"6130571E-C84B-48C9-86B1-415C537A6B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59:*:*:*:*:*:*:*","matchCriteriaId":"A009E489-2DF5-47F6-B2E8-D92A0753AF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"C2FCBA05-3939-42FC-AC2C-963B9F79E9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59.2:*:*:*:*:*:*:*","matchCriteriaId":"EE017547-4CD3-40EF-8942-84304196CEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.59.3:*:*:*:*:*:*:*","matchCriteriaId":"673194C2-F2CB-45F9-B0AA-FB9D148FBD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60:*:*:*:*:*:*:*","matchCriteriaId":"5B58E03D-2E5D-4662-B40F-54DDAFC52002"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.1:*:*:*:*:*:*:*","matchCriteriaId":"26C43975-C21F-4635-A2B8-489401CCE2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC2BF1E-2C85-47CF-98E1-623F61ADD239"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.3:*:*:*:*:*:*:*","matchCriteriaId":"04AA9833-06AE-4604-8F9D-387D584A8C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.4:*:*:*:*:*:*:*","matchCriteriaId":"B9FF48F3-75A4-43FB-BEE2-16E52E13E72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:courier-mta:courtier-authlib:0.60.5:*:*:*:*:*:*:*","matchCriteriaId":"38946F5B-9F91-45F2-A4E6-AC51800C6A14"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"D71E02A6-5F83-46EC-88C1-687E6EB88F5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:open_suse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D36412C0-FCD1-4B2D-92E4-0CE54EEB420F"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=225407","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-05.xml","source":"cve@mitre.org"},{"url":"http://www.courier-mta.org/authlib/changelog.html","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/courier-users%40lists.sourceforge.net/msg31362.html","source":"cve@mitre.org"},{"url":"http://www.nabble.com/courier-authlib-0.60.6-released-td17720739.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43628","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=225407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.courier-mta.org/authlib/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/courier-users%40lists.sourceforge.net/msg31362.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/courier-authlib-0.60.6-released-td17720739.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2668","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en yBlog 0.2.2.2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro (1) q para search.php, (2) user.php o (3) uss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:y-blog:yblog:0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A1142D1-CB7C-4C93-997A-78A4D2835A28"}]}]}],"references":[{"url":"http://chroot.org/exploits/chroot_uu_009","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30607","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3935","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493222/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29629","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42958","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5773","source":"cve@mitre.org"},{"url":"http://chroot.org/exploits/chroot_uu_009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493222/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2669","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en yBlog 0.2.2.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) q para search.php, (2) n para user.php o (3) uss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:y-blog:yblog:0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A1142D1-CB7C-4C93-997A-78A4D2835A28"}]}]}],"references":[{"url":"http://chroot.org/exploits/chroot_uu_009","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30607","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3935","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493222/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29629","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42959","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5773","source":"cve@mitre.org"},{"url":"http://chroot.org/exploits/chroot_uu_009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493222/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2670","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by CVE-2007-3889."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php in Insanely Simple Blog 0.5 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) id o del parámetro (2) term en una búsqueda.NOTA: El parámetro current_subsection se describe en CVE-2007-3889."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insanelysimple2:isblog:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A789190C-3013-49D9-9074-F2DDED9919B8"}]}]}],"references":[{"url":"http://chroot.org/exploits/chroot_uu_010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493224/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29630","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5774","source":"cve@mitre.org"},{"url":"http://chroot.org/exploits/chroot_uu_010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493224/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2671","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comments.php in DCFM Blog 0.9.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comments.php de DCFM Blog 0.9.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcfm_blog:dcfm_blog:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"6B85C9AC-E0B0-474D-AE80-7A558163349D"}]}]}],"references":[{"url":"http://chroot.org/exploits/chroot_uu_008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3939","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493220/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42976","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5772","source":"cve@mitre.org"},{"url":"http://chroot.org/exploits/chroot_uu_008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493220/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2672","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T02:32:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) ewiki_id and (2) ewiki_action parameters to fragments/css.php, and possibly the (3) id parameter to the default URI.  NOTE: the default URI is site-specific but often performs an include_once of ewiki.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en ErfurtWiki R1.02b y anteriores, cuando register_globals está habilitado, permiten a atacantes remotos incluir y ejecutar archivos locales de su elección a través de un .. (punto punto) en los parámetros (1) ewiki_id y (2) ewiki_action para fragments/css.php y posiblemente en el parámetro (3) id en la URL por defecto. NOTA: La URL por defecto es especifica de cada sitio pero a menudo realiza un include_once de ewiki.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erfurtwiki:erfurtwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"r1.02b","matchCriteriaId":"373D04F1-20AF-45DB-9D7A-FD96B9F3502A"}]}]}],"references":[{"url":"http://chroot.org/exploits/chroot_uu_007","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3936","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493219/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29628","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5771","source":"cve@mitre.org"},{"url":"http://chroot.org/exploits/chroot_uu_007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493219/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2673","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Powie pNews 2.08 y 2.10, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro shownews."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pnews:2.08:*:*:*:*:*:*:*","matchCriteriaId":"86A9D6CA-9BED-45AE-A57C-3711305FF449"},{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pnews:2.10:*:*:*:*:*:*:*","matchCriteriaId":"4DA43306-6059-41DB-90F8-9B392D24CA2D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29617","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42951","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5768","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2674","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Interstage Management Console, as used in Fujitsu Interstage Application Server 6.0 through 9.0.0A, Apworks Modelers-J 6.0 through 7.0, and Studio 8.0.1 and 9.0.0, allows remote attackers to read or delete arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la Interstage Management Console, tal como se utiliza en Fujitsu Interstage Application Server 6.0 a 9.0.0A, Apworks Modelers-J 6.0 a 7.0, y Studio 8.0.1 y 9.0.0, permite a atacantes remotos leer o borrar archivos de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v6.0:*:*:*:*:*:*:*","matchCriteriaId":"0FFABBF1-F6E4-4989-90E8-380F3A097DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1EFA049F-C435-471F-955C-988B5999A6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:v7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"67D6E1BA-2C5E-4553-B7E7-430F9CF7F0E4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9F8B7127-0916-4931-BCEA-0B125DF416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:v7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9534EBCF-ECA8-4E3E-AB39-F937FD067523"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5F38322D-0458-4E4C-8E0D-F3F3D4282F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EC957D11-2D52-4EBC-9AB9-41A2259B0185"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A8B45A-3D51-4013-A23D-E9A5F44CCA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4FCFE64D-676C-4716-8478-61C04B8365BA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24D5EF17-8C4F-4EA3-830E-78F21E2AB7D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0FF96D50-4CE1-4945-AA23-7E517B210B73"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5F38322D-0458-4E4C-8E0D-F3F3D4282F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA9D9EC2-91E3-463D-A878-AECAC40B2C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EC957D11-2D52-4EBC-9AB9-41A2259B0185"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v7.0:*:*:*:*:*:*:*","matchCriteriaId":"60C6E6ED-541F-44AD-ADA0-1DF4C270ECFA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24D5EF17-8C4F-4EA3-830E-78F21E2AB7D3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"44055285-1E0A-4D8A-A12E-BC520E9E414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7F96658B-B045-4EF6-9213-956925E92959"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC713B96-0880-44BD-80BD-9DB3DBE74D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5F38322D-0458-4E4C-8E0D-F3F3D4282F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EC957D11-2D52-4EBC-9AB9-41A2259B0185"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"816F6630-EFAB-4B97-9D75-196267820D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:7.0:*:*:*:*:*:*:*","matchCriteriaId":"99321461-7570-48B8-9D08-B5D5F1B758C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"819D76BD-9405-4B30-B15D-A312DDFF8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A8B45A-3D51-4013-A23D-E9A5F44CCA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4FCFE64D-676C-4716-8478-61C04B8365BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41B2BD75-9841-45DB-A40D-52494226196D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5F38322D-0458-4E4C-8E0D-F3F3D4282F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA9D9EC2-91E3-463D-A878-AECAC40B2C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EC957D11-2D52-4EBC-9AB9-41A2259B0185"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v6.0:*:*:*:*:*:*:*","matchCriteriaId":"0FFABBF1-F6E4-4989-90E8-380F3A097DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v7.0:*:*:*:*:*:*:*","matchCriteriaId":"60C6E6ED-541F-44AD-ADA0-1DF4C270ECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24D5EF17-8C4F-4EA3-830E-78F21E2AB7D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_enterprise:v9.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"3FEB6BC0-0340-4933-BC1B-1DE9A3A4A008"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:v6.0:*:*:*:*:*:*:*","matchCriteriaId":"2C491534-3AC5-48BE-9507-1439DE4A93DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:v7.0:*:*:*:*:*:*:*","matchCriteriaId":"6D94EFF2-7197-4EB6-B57F-524B5664EF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus:v7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9534EBCF-ECA8-4E3E-AB39-F937FD067523"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus_developer:v6.0:*:*:*:*:*:*:*","matchCriteriaId":"B12E1121-8E35-4E0E-85F2-84C8DF70A279"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_plus_developer:v7.0:*:*:*:*:*:*:*","matchCriteriaId":"4565CDAC-E155-4684-BB0A-C978624CEDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A8B45A-3D51-4013-A23D-E9A5F44CCA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4FCFE64D-676C-4716-8478-61C04B8365BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0FF96D50-4CE1-4945-AA23-7E517B210B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server_standard_j:v9.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"87A51B18-FADF-4731-9223-C61458264AF2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_modelers_j:v6.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF9027F-F861-44AF-A25D-E12307818398"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_modelers_j:v6.0a:*:*:*:*:*:*:*","matchCriteriaId":"EBEF144B-8111-458F-8B8F-FF9478B7702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_apworks_modelers_j:v7.0:*:*:*:*:*:*:*","matchCriteriaId":"A961D78B-FDE3-4A7E-AC1D-855F4855A015"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_enterprise:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8B8C1E-611A-4F62-97B3-082015DE4DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_enterprise:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9684D33D-61E2-4B23-BC37-C5B47E19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_standard_j:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CDD79C94-67FD-41A0-B1C9-10DE258258E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_studio_standard_j:v9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6AB800B-9543-4019-A831-D1C9C5D31FAC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_business_application_server_enterprise:v8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBE1DD78-5DA5-401E-9BD6-A37CFAC71C5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200805e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29624","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020235","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1771/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200805e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1771/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2675","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PHP Image Gallery allows remote attackers to inject arbitrary web script or HTML via the action parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en PHP Image Gallery, permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro action. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softcomplex:php_image_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B12C0A2C-9B21-4285-BB99-58C4682B9CD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29643","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2676","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente iJoomla News Portal (com_news_portal) 1.0 y anteriores para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Itemid para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_news_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"98950414-FB8A-4261-89A8-6B28C2FA06B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42936","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2677","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en dit1.php en Telephone Directory 2008 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telephone:telephone_directory_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"789BB115-9833-4420-B5FD-3D3C01325A3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42972","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2678","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) code parameter in a confirm_data action to edit1.php and the (2) id parameter to view_more.php."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en Telephone Directory 2008, cuando magic_quotes_gpc esta deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) code en una petición confirm_data para edit1.php y (2) id para view_more.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telephone:telephone_directory_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"789BB115-9833-4420-B5FD-3D3C01325A3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42971","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2679","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the KeyWordsList function in _includes/inc_routines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI."},{"lang":"es","value":"Vulnerabilidad de Inyección de SQL en la función KeyWordsList en _includes/inc_routines.asp en Realm CMS 2.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro kwrd en una acción \"kwl\" al URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realm_project:realm_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"E6C084D9-019B-47DF-8A4C-D4BBBF025168"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/40","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42952","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5766","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2680","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en _db/compact.asp en Realm CMS 2.3 y anteriores permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro (1) CmpctedDB y (2) Boyut."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realm_project:realm_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"E6C084D9-019B-47DF-8A4C-D4BBBF025168"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/40","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5766","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2681","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message."},{"lang":"es","value":"Realm CMS 2.3 y anteriores permite a atacantes remotos conseguir información sensible a través de una petición directa a _db/compact.asp, lo que revela la ruta de la base de datos en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realm_project:realm_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"E6C084D9-019B-47DF-8A4C-D4BBBF025168"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/40","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5766","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/40","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2682","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID."},{"lang":"es","value":"_RealmAdmin/login.asp en Realm CMS 2.3 y anteriores permiten a atacantes remotos evitar la validación y acceder a las páginas de administración mediante ciertas cookies modificadas, probablemente incluyendo (1) cUserRole, (2) cUserName, y (3) cUserID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realm_project:realm_cms:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DB36B738-AA06-42D4-B01F-35DC8CC06E95"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/40","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42960","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5766","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2683","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second argument.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El control ActiveX BIDIB.BIDIBCtrl.1 en BIDIB.ocx 10.9.3.0 en Black Ice Barcode SDK 5.01 permite a atacantes remotos forzar la descarga y almacenamiento de ficheros de su elección mediante la especificación de la URL de origen en el primer argumento para el método DownloadImageFileURL y el nombre de fichero local en el segundo argumento.NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:black_ice:barcode_sdk:5.01:*:*:*:*:*:*:*","matchCriteriaId":"2A4C49E4-FC2D-481E-B90E-D8BC12585E6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8276","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/8277","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/17415","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/46007","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1768/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42891","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5750","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/8277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/17415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/46007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1768/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2684","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El control ActiveX BIDIB.BIDIBCtrl.1 en BIDIB.ocx 10.9.3.0 en Black Ice Barcode SDK 5.01 permite a atacantes remotos ejecutar código de su elección a través de cadenas largas en los dos argumentos para el método DownloadImageFileURL lo que causa corrupción de memoria. NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackice:black_ice_barcode_sdk:5.01:*:*:*:*:*:*:*","matchCriteriaId":"0D750DE2-0588-4F7E-B670-93D9784DAB3E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29579","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1768/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42896","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5750","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1768/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2685","sourceIdentifier":"cve@mitre.org","published":"2008-06-12T12:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en article.asp en Battle Blog 1.25 Build 4 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro entry, vector distinto a CVE-2008-2626."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battleblog:*:build_4:*:*:*:*:*:*","versionEndIncluding":"1.25","matchCriteriaId":"698A3BD9-BB45-4148-89F2-6C353144B127"}]}]}],"references":[{"url":"http://www.davethewebguy.com/battleblog/article.asp?entry=24","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1737","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43018","source":"cve@mitre.org"},{"url":"http://www.davethewebguy.com/battleblog/article.asp?entry=24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2686","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, then making a direct request for this filename."},{"lang":"es","value":"webinc/bxe/scripts/loadsave.php en Flux CMS 1.5.0 y anteriores permite a atacantes remotos ejecutar código de su elección mediante la sobrescritura de una archivo PHP en webinc/bxe/scripts/ a través de un nombre de archivo en el parámetro XML y secuencias de comandos PHP en el cuerpo de la petición, realizando entonces una petición directa de ese nombre de archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flux_cms:flux_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50","matchCriteriaId":"4F33FBA9-26D8-44D2-8DC6-748D0CD24A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:flux_cms:flux_cms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F208450A-A587-41FA-8A8D-000C4CDD4C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:flux_cms:flux_cms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3E60F331-132D-4EAE-8998-6ABCC4B7906B"},{"vulnerable":true,"criteria":"cpe:2.3:a:flux_cms:flux_cms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D77F330E-E841-421C-91C7-734BDF833ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:flux_cms:flux_cms:1.31:*:*:*:*:*:*:*","matchCriteriaId":"A408092F-B14B-4B8A-B3ED-A533A81EF2E1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29618","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42961","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5767","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2687","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en inc/config.php en ProManager 0.73 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:promanager:promanager:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E9C06AB7-A6E3-41D8-824E-9B014B4E1EC1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29613","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42962","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5762","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2688","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pilot.asp en ASPilot Pilot Cart 7.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro article en una acción kb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilotcart:pilot_cart:7.3:*:*:*:*:*:*:*","matchCriteriaId":"49855F6E-8C37-4F17-AC88-EF39593884B5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30176","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29615","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42946","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2689","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en pub/clients.php en BrowserCRM 5.002.00 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro bcrm_pub_root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:browsercrm:browsercrm:5.002.00:*:*:*:*:*:*:*","matchCriteriaId":"B0D6FCD9-0850-4656-87B0-C73999BFF775"}]}]}],"references":[{"url":"http://secunia.com/advisories/30290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42922","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5757","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2690","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter to (1) kb.php, (2) login.php, (3) index.php, (4) contact_view.php, and (5) contact.php in pub/, different vectors than CVE-2008-2689.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos remotos PHP en BrowserCRM versión 5.002.00, cuando register_globals está habilitado, permiten a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro bcrm_pub_root en los archivos (1) kb.php, (2) login.php, (3) index.php, (4) contact_view.php y (5) contact.php en pub/, vectores diferentes de CVE-2008-2689. NOTA: la procedencia de esta información es desconocida; los datos fueron obtenidos únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:browsercrm:browsercrm:5.002.00:*:*:*:*:*:*:*","matchCriteriaId":"B0D6FCD9-0850-4656-87B0-C73999BFF775"}]}]}],"references":[{"url":"http://secunia.com/advisories/30290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2691","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en read.asp en JiRo's FAQ Manager eXperience 1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro fID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jiro:faq_manager_experience:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F5411880-C49F-4056-B6CE-2AA07D646317"}]}]}],"references":[{"url":"http://secunia.com/advisories/30569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29594","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42919","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2692","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente yvComment (com_yvcomment) 1.16.0 y anteriores para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ArticleID en un comentario a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.1:*:*:*:*:*:*:*","matchCriteriaId":"13BCE75F-12CD-471C-81A5-DF67EA6DD3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5EFA32C-F00E-4A5F-A1B9-3F4AD39A7399"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4E88F359-F491-4AB6-AF47-0E46E6A780AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5882E4CC-CDEB-4CC7-A85F-9119D260FEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F23AD3A6-6BF2-46C6-ACEC-CDA49D467EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.6:*:*:*:*:*:*:*","matchCriteriaId":"59B6C666-679C-47CB-8035-21B01CFEFEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.7:*:*:*:*:*:*:*","matchCriteriaId":"388062DA-B1DE-4CA2-BE1B-0B89E72F2721"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.8:*:*:*:*:*:*:*","matchCriteriaId":"0F87FDF2-93C5-458D-BE35-69646D522197"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.9:*:*:*:*:*:*:*","matchCriteriaId":"31DD99E5-CDF3-427F-954C-A290055EACB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.10:*:*:*:*:*:*:*","matchCriteriaId":"03FFF7F8-4D1B-4064-A3BD-6AEE67870EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.11:*:*:*:*:*:*:*","matchCriteriaId":"80FC39DC-895C-4323-A558-F75C6AA5AA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.12:*:*:*:*:*:*:*","matchCriteriaId":"C4AACF7E-A591-4CD6-961E-0D042CBD124B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.13:*:*:*:*:*:*:*","matchCriteriaId":"96672749-2BC3-45EE-8193-4FC9CF0FAAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.14:*:*:*:*:*:*:*","matchCriteriaId":"8A25A129-BB92-4AA6-9247-B927CF0D45FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.15:*:*:*:*:*:*:*","matchCriteriaId":"F7EA0328-DC61-4CAB-B8D3-DDCEEE299D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_yvcomment:1.16:*:*:*:*:*:*:*","matchCriteriaId":"86F7D9DC-A3AF-40C4-B2F1-AA5C3593E44B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30567","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29596","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42920","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5755","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2693","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX BITIFF.BITiffCtrl.1 en BITiff.ocx 10.9.3.0 en Black Ice Barcode SDK 5.01, permite a atacantes remotos ejecutar código de su elección a través del primer argumento largo para el método SetByteOrder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:black_ice:barcode_sdk:5.01:*:*:*:*:*:*:*","matchCriteriaId":"2A4C49E4-FC2D-481E-B90E-D8BC12585E6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42897","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5746","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5747","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2694","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en phpInv 0.8.0, permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro keyword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpinv:phpinv:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"6204AE56-95F1-4FA4-A3F3-EF946CD8E20E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29597","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42928","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2695","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en entry.php en phpInv 0.8.0, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpinv:phpinv:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"6204AE56-95F1-4FA4-A3F3-EF946CD8E20E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29597","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42926","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2696","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to \"pretty printing\" and the RationalValue::toLong function."},{"lang":"es","value":"Exiv2 0.16 permite a atacantes remotos asistidos por el usuario provocar una denegación de servicio (división por cero y caída de aplicación) a través de un valor 0 en Nikon lens information en los metadatos de una imagen, relacionada con \"pretty printing\" y la funcion RationalValue::toLong."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exiv2:exiv2:0.16:*:*:*:*:*:*:*","matchCriteriaId":"1E739A33-3A1E-4AE8-B3A3-022D3D385354"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=524715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dev.robotbattle.com/bugs/view.php?id=0000546","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32273","source":"cve@mitre.org"},{"url":"http://www.exiv2.org/changelog.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29586","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-655-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1766/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42885","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=524715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://dev.robotbattle.com/bugs/view.php?id=0000546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exiv2.org/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-655-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1766/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2697","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Rapid Recipe (com_rapidrecipe) 1.6.6 y 1.6.7 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro recipe_id,en una acción viewrecipe, para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_rapidrecipe:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"5EF338CD-0705-420A-89BC-73B88C2B450E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_rapidrecipe:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"14427DB4-0505-4851-851F-68D6B0AD1374"},{"vulnerable":true,"criteria":"cpe:2.3:a:rapid-source:rapid_recipe:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"F4FBF8FF-544A-4036-821A-67D766577B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rapid-source:rapid_recipe:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"EDCDBE4E-BDEB-494A-B1C1-3424D3887439"}]}]}],"references":[{"url":"http://secunia.com/advisories/30566","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29593","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42924","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2698","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the \"add comment\" section) in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) id, or (3) category parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en photo_add-c.php en WEBalbum 2.0 y anteriores, permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) comment, (2) id o (3) category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web-album:webalbum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"22CCD06B-0C63-41DA-8B60-5543BB1965D5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3940","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493143/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29580","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42893","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493143/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2699","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Galatolo WebManager (GWM) 1.0, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el (1) parámetro plugin para admin/plugins.php o (2) en el parámetro com para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gwm:galatolo_webmanager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54A005B3-744A-4BAE-9B3A-68A0696AC2E3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29595","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42923","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5758","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2700","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php en Galatolo WebManager 1.0 y anteriores, , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gwm:galatolo_webmanager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54A005B3-744A-4BAE-9B3A-68A0696AC2E3"}]}]}],"references":[{"url":"http://osvdb.org/46443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42934","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5760","source":"cve@mitre.org"},{"url":"http://osvdb.org/46443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2701","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a page action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente GameQ 4.0 y anteriores para Joomla!, , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro category_id en una acción al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_gameq:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2CE06C33-C7A6-4A8F-8677-2E4996324181"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0806-exploits/joomlagameq-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30570","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498903/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498923/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29592","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32633","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42929","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5752","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0806-exploits/joomlagameq-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498903/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498923/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2702","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el cliente FTP en ALTools ESTsoft ALFTP 4.1 beta 2 y 5.0, permite a los servidores FTP remotos sobreescribir fichero aleatorios a través de ..(punto punto) en respuesta al comando LIST, lo que esta relacionado con CVE-2002-1345. NOTA: esto puede ser utilizado para ejecutar código escribiendo en la carpeta Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:estsoft:alftp:4.1:beta2:*:en:*:*:*:*","matchCriteriaId":"D305F6D8-A458-4B20-9989-39F08D79EA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:estsoft:alftp:5.0:*:*:ko:*:*:*:*","matchCriteriaId":"403386E5-BF03-4BE0-A953-9DBAF1810925"}]}]}],"references":[{"url":"http://secunia.com/advisories/30559","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://vuln.sg/alftp41b2-en.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29585","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1763/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42900","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://vuln.sg/alftp41b2-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1763/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2703","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via \"spoofed server responses\" that contain a long string after the NM_A_SZ_TRANSACTION_ID field name."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en GroupWise Messenger (GWIM) Client de Novell anterior a versión 2.0.3 HP1 para Windows, permiten a los atacantes remotos ejecutar código arbitrario por medio de \"spoofed server responses\" que contienen una cadena larga después del nombre del campo NM_A_SZ_TRANSACTION_ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A74668F2-8DFE-4E24-9BB7-91D1F8452C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"142A3EF7-C31E-4CB0-A023-D4DBE081EC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C9D8F4A4-E218-46FE-8F57-5D4CCDEAE622"}]}]}],"references":[{"url":"http://secunia.com/advisories/30576","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/493964/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29602","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020209","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1764/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/493964/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1764/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2704","sourceIdentifier":"cve@mitre.org","published":"2008-06-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert.  NOTE: it is not clear whether this issue crosses privilege boundaries."},{"lang":"es","value":"GroupWise Messenger (GWIM) de Novell anterior a versión 2.0.3 Hot Parche 1, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un ID de usuario largo, que posiblemente implica una alerta emergente. NOTA: no está claro si este problema cruza los límites del privilegio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DDFEE4D7-3B43-4253-AF31-6A3A3930A54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A74668F2-8DFE-4E24-9BB7-91D1F8452C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"142A3EF7-C31E-4CB0-A023-D4DBE081EC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_messenger:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C9D8F4A4-E218-46FE-8F57-5D4CCDEAE622"}]}]}],"references":[{"url":"http://secunia.com/advisories/30576","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493964/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29602","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020209","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1764/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5026700.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493964/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1764/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2705","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition (DSEE), allows remote attackers to bypass authentication via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java System Access Manager (AM) 7.1, cuando se utiliza con determinadas versiones y configuraciones del Sun Directory Server Enterprise Edition (DSEE), permite a atacantes remotos evitar la autenticación a través de  vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0B5B089E-62AC-44E5-9462-DC439C7AA8A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29676","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020273","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1806","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43004","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238416-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2706","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined events, probably related to a NULL dereference."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación del puerto del evento en Sun Solaris 10 permite a usuarios locales provocar una denegación de servicio (panic) enviando y recuperando eventos definidos por el usuario, probablemente relacionados con una referencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235122-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29680","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020274","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1807","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43005","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-235122-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2707","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv_93 allows remote attackers to cause a denial of service (network connectivity loss) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el controlador e1000g de Sun Solaris 10 y OpenSolaris anterior a snv_93, permite a atacantes remotos provocar una denegación de servicio (pérdida de conectividad de la red) mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:opensolaris:10:*:*:*:*:*:*:*","matchCriteriaId":"162ABAEA-16D3-430C-83AD-DF2EEA16359E"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sun:solaris_gigabit_ethernet_driver:e1000g:7d:*:*:*:*:*:*","matchCriteriaId":"BE904FAB-FD70-4AEA-8B81-75880E929F40"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:network_interface_controller:82571:*:*:*:*:*:*:*","matchCriteriaId":"08EE8534-22E2-4C39-867C-54C3B2346150"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:network_interface_controller:82572:*:*:*:*:*:*:*","matchCriteriaId":"A9BBF503-AC5B-4D25-A7D9-C81ED2D5CA68"}]}]}],"references":[{"url":"http://secunia.com/advisories/30700","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020290","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238250-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29730","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1835","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43096","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238250-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2708","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv_93, allows local users to cause a denial of service (panic) via unspecified vectors, probably related to core files."},{"lang":"es","value":"Vulnerabilidad no especificada en los módulos de Sun (1) UltraSPARC T2 y (2) UltraSPARC T2+ kernel de Sun Solaris 10 y OpenSolaris anterior a snv_93, permite a usuarios locales provocar una denegación de servicio (panic) mediante vectores no especificados, probablemente relacionados con archivos del núcleo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"build_snv_92","matchCriteriaId":"43312B77-D602-474C-A780-A447F19C2963"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*","matchCriteriaId":"1E8BFE03-135B-4E3E-B993-7C37C0EF2286"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238688-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29678","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020275","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238688-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2709","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port.  NOTE: there might be limited attack scenarios."},{"lang":"es","value":"Desbordamiento de buffer en la función BrSmRcvAndCheck  en el módulo RCHMGR de IBM OS/400 V5R4M0, V5R4M5, y V6R1M0, permite a atacantes locales provocar una denegación de servicio (parada de tarea y volcado de almacemiento principal), a través de vectores no especificados involucrados en la ejecución de diagnósticos en un puerto de modem. NOTA: Podría haber escenarios de ataque limitados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v5r4m0:*:*:*:*:*:*:*","matchCriteriaId":"F448C696-3FC9-442F-8F01-F1103287274F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v5r4m5:*:*:*:*:*:*:*","matchCriteriaId":"4B18B289-2C9F-46CC-9CDE-4D424A74ACB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v6r1m0:*:*:*:*:*:*:*","matchCriteriaId":"14477D0B-1123-4B93-AD9F-95C78138B6E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/30554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=nas21f21bcbaa63f55268625745e003c6f64","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1799","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42984","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=nas21f21bcbaa63f55268625745e003c6f64","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2710","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory.  NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison."},{"lang":"es","value":"Error de presencia de signo entero en  la función ip_set_srcfilter en el IP Multicast Filter en uts/common/inet/ip/ip_multi.c en el  kernel de Sun Solaris 10 y OpenSolaris anterior a snv_92, permite a usuarios locales ejecutar código de su elección en otras \"Solaris Zones\" a través de una petición SIOCSIPMSFILTER IOCTL con un valor largo del campo imsf->imsf_numsrc, que dispara una escritura de memoria del kernel fuera de rango. NOTA: esto ha sido reportado como un desbordamiento de entero, pero el origen del problema implica una comparación de signo que no se realiza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:10:*:*:*:*:*:*:*","matchCriteriaId":"162ABAEA-16D3-430C-83AD-DF2EEA16359E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"10","matchCriteriaId":"66BE4DAD-3A9D-49A9-A30C-908B43DE9CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"-","matchCriteriaId":"CA87CDAF-BC11-421C-8868-0E6DD035605E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30693","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237965-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29699","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020283","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-003.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1832/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43068","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5731","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237965-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1832/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2711","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages."},{"lang":"es","value":"fetchmail versión 6.3.8 y anteriores, cuando se ejecuta en modo -v -v (también se conoce como verbose), permite a los atacantes remotos causar una denegación de servicio (bloqueo y fallo de correo persistente) por medio de un mensaje de correo malformado con encabezados largos, lo que desencadena unas desreferencias erróneas cuando se utiliza vsnprintf para dar formato a mensajes de registro."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed in fetchmail packages as shipped in Red Hat Enterprise Linux 3, 4, and 5 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2009-1427.html","lastModified":"2009-09-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.8","matchCriteriaId":"BB18D768-33CE-4CB0-84A9-1D8CAF1080E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*","matchCriteriaId":"74D12B67-6E66-419A-A28F-6306402931EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*","matchCriteriaId":"A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"93D03D78-C56E-4189-97FC-916C918EDFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*","matchCriteriaId":"19A66C77-041F-4A12-8A36-233A6B50641C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C945059C-EF39-486D-A804-FBB8704AB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*","matchCriteriaId":"A91C6418-41F0-46EB-ACFC-FCE907F5AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*","matchCriteriaId":"0C020534-7596-496C-B9B0-739F58F6F4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0A77D40C-6FF5-42BD-9EFB-B532824D7606"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F04C6A76-2718-4DBA-8972-A3EECDDB1A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"38ACD96E-5582-4ED0-BBB1-C891094D8217"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"264386DA-747F-492C-B660-D49BE9DB7139"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC4066AC-BE10-4189-86F6-BF94443738DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1C25A146-50D5-4BA2-ABA2-20BF8784D7DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"72E76256-997F-4229-9B03-7BC3074F359D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7A717C50-2C5A-4CD1-B2E6-8CDF450940CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"61F908FF-9986-4F71-B0B6-D6A86555EF56"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B0C1F99C-A246-40D3-B84A-5D11FF24AC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"028F7F83-AF15-443B-A7DB-4E695E62EAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B418C3CE-E6E6-401D-AD83-5BB181009A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre4:*:*:*:*:*:*","matchCriteriaId":"8BF06FD2-0A4C-4557-B8EF-F0F021179498"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre8:*:*:*:*:*:*","matchCriteriaId":"38C949C2-07A0-4FE4-8FBF-86215CB999CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre9:*:*:*:*:*:*","matchCriteriaId":"88B23630-79DD-4B69-BB01-286193BA562E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc10:*:*:*:*:*:*","matchCriteriaId":"5FE21564-68C0-4765-BA40-9D3046C4CB14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc3:*:*:*:*:*:*","matchCriteriaId":"208102ED-6F22-44C5-BAF1-FD85EACF208F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc4:*:*:*:*:*:*","matchCriteriaId":"C1CF7767-EB24-44E2-8E59-B4DBC99AFD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc5:*:*:*:*:*:*","matchCriteriaId":"CF3D6D4C-5FD8-4EE1-A34A-99D397F09E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc7:*:*:*:*:*:*","matchCriteriaId":"D63D88C1-B201-4D48-9659-5802DC4FD3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc8:*:*:*:*:*:*","matchCriteriaId":"16463B23-E884-467E-9F63-6B57EED39856"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc9:*:*:*:*:*:*","matchCriteriaId":"9F2C03AF-666D-4AF6-BC69-F8B081EB41AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"84F90AFA-4B13-46A0-89D7-4065300C94C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5DAD0F05-8B55-43ED-89D5-61A19F41EDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"99053698-7F8B-4E71-8647-1A8B0DF7CEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9314F22D-22A8-4374-A2BF-3C64CF1F69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.4:*:*:*:*:*:*:*","matchCriteriaId":"816E9640-A932-4E2F-9793-689F80D2AA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5D09BB43-6CBA-499B-91D1-BA256A65E40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:*:*:*:*:*:*:*","matchCriteriaId":"ABE76611-08CE-4D85-B57A-021909835A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*","matchCriteriaId":"B98AFEDF-2BAB-4588-94E0-35AEA5F1B514"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*","matchCriteriaId":"4E8BAB5B-4DBC-4D05-B5E2-591573BC05FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3:*:*:*:*:*:*","matchCriteriaId":"02F6E729-A2F2-42AC-A941-F57A0A4E84A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc4:*:*:*:*:*:*","matchCriteriaId":"4143D519-4B49-4E71-8686-FC6A095F0999"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc5:*:*:*:*:*:*","matchCriteriaId":"387ADB82-4FAD-44DA-ABF2-2F4645C4F1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CED4FBCB-B6DF-429D-871D-2A9F7F59E63B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.495740","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0235","source":"cve@mitre.org"},{"url":"http://www.fetchmail.info/fetchmail-SA-2008-01.txt","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:117","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/13/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/08/09/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493391/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494865/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29705","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020298","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1860/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=354291","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43121","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2623","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10950","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01091.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01095.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.495740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fetchmail.info/fetchmail-SA-2008-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2021/08/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493391/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494865/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1860/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=354291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2712","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075."},{"lang":"es","value":"Vim 7.1.314, 6.4 y otras versiones, permiten a atacantes remotos asistidos por el usuario ejecutar comandos de su elección a través de secuencias de comandos Vim que cuyos inputs no son limpiados correctamente previa a la ejecución o las funciones del sistema como se ha demostrado con (1) filetype.vim, (2) zipplugin, (3) xpm.vim, (4) gzip_vim y (5) netrw."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","matchCriteriaId":"CD1BE7C9-D945-49CC-8528-F8BF2278AF28"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.1.314","matchCriteriaId":"524293F0-FD6A-4E9E-B342-A67B48492FF4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30731","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32864","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33410","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3951","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0247","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/16/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0618.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493352/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493353/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495319/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29715","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020293","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-712-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1851/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0033","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43083","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2622","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/16/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493352/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/493353/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495319/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-712-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1851/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2713","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read."},{"lang":"es","value":"libclamav/petite.c de ClamAV versiones anteriores a 0.93.1 permite a atacantes remotos provocar una denegación de servicio a través de un fichero Petite manipulado que dispara una lectura fuera del límite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"06A9B47A-8FC3-4BD2-A55F-9150307619B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"7068873F-E45D-4471-B55E-BF7B0E3AFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"695F0967-1529-42DB-8978-8B9192F7F615"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"BB72ED94-7832-43CF-81CF-27F88CAC6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"802BFF6B-5D9F-49AE-B96A-86A85E0F1034"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"5F7B2943-BC22-4735-8AA5-AADBEA685FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C6257524-7FC5-40CA-9BDA-82B8565C5BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"35EBA938-DC66-40EA-8C66-38296AB57B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"659B4C39-0F0F-40C5-9B7E-0D00330611F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"508C140C-2F87-4270-85B0-00EA6678A344"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"3033A4A2-47E9-434F-BA0A-0F2476A67899"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"0C1EDFB4-B0C8-4832-BCA1-C35D28877581"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"4EF47B2A-4520-4872-987D-2EF88344ADB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*","matchCriteriaId":"12A4541A-2560-482A-BAEA-275579B499B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9006F64F-D72B-49C4-9F51-8AD9273957B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5698AB2-94DE-480D-9E55-C05871562B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*","matchCriteriaId":"A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"FC31E071-6BB8-45FE-AA09-E7E459B549D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C4CBE9C9-A1DE-4C68-B84D-C735A9A700E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"53D884A1-305C-416A-9851-3A7D875FDC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"E58A6CBC-ED1C-430D-8F43-88694971A850"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"E330A535-A376-4BFF-BB1B-31E83370FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F1ADBDEE-1421-42E5-8DE2-404087613B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"EDF94B1E-E8D4-4952-9081-1254F335445D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"8657268E-4C78-4565-9966-7329095A7905"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"8D20F0D5-2291-4F24-94DB-180CDF926B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"A0E2884A-615F-4063-8FB7-EC157C3EC07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BC41B7-272F-44BB-BD48-6C9231402526"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*","matchCriteriaId":"0138546B-3704-45FB-8115-05C12F9935D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"5F56722F-F61A-404B-B0B2-1C92C22D0436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"D00EBC44-B4AB-443F-A063-8C8CB64F5F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"2DB68680-FA6D-4235-90DA-E3DF0E5BB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B116E9A-0646-4AD5-A531-C35124AB02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3F3C25BA-72EF-4588-A90A-B323A3407FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"01FDAEBC-0B2E-4F60-8B59-13A93B1AF206"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*","matchCriteriaId":"E021DD71-1845-4899-BB87-8445147AD93F"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-21.txt","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30657","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30785","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31437","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-07.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=605577&group_id=86638","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1616","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:122","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/15/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/17/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29750","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020305","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1855/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43133","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00763.html","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000","source":"cve@mitre.org"},{"url":"http://kolab.org/security/kolab-vendor-notice-21.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=605577&group_id=86638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/15/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/17/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1855/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00763.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2714","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.26 allows remote attackers to misrepresent web page addresses using \"certain characters\" that \"cause the page address text to be misplaced.\""},{"lang":"es","value":"Opera anterior a la v9.26, permite a atacantes remotos deformar la dirección de una página web empleando \"ciertos caracteres\" que \"provocan que el texto de la dirección de la página sea modificado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.25","matchCriteriaId":"FC9E214E-0347-4D05-BFB7-EE2B3983F372"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30682","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/950/#security","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/950/#security","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/878/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29684","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1812","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43035","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/950/#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/950/#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/878/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2715","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns."},{"lang":"es","value":"Vulnerabilidad no especificada en Opera anterior a 9.5 permite a atacantes remotos leer imágenes de dominios cruzados mediante elementos HTML CANVAS que utilizan imágenes como patrones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta2:*:*:*:*:*:*","versionEndIncluding":"9.50","matchCriteriaId":"9B8EC39C-900B-46EE-8ADD-C18EE4BE8BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30682","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/950/#security","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/950/#security","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/883/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29684","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020291","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1812","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43032","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/950/#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/950/#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/883/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2716","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks."},{"lang":"es","value":"Vulnerabilidad no especificada en Opera versiones anteriores a 9.5 permite a atacantes remotos suplantar los contenidos de marcos de confianza en la misma página padre mediante la modificación de la localización, lo cual puede facilitar los ataques de phishing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1021"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"9.5","matchCriteriaId":"1BA98379-69F0-409C-BD52-A667DDF00F8C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30636","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30682","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/linux/950/#security","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/950/#security","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/search/view/885/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29684","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020292","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1812","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43033","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/linux/950/#security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/950/#security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/search/view/885/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2717","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions."},{"lang":"es","value":"TYPO3 versiones 4.0.x anteriores a 4.0.9, versiones 4.1.x anteriores a 4.1.7, y versiones 4.2.x anteriores a 4.2.1, utiliza un fileDenyPattern predeterminado insuficientemente restrictivo para Apache, que permite a los atacantes remotos omitir las restricciones de seguridad y cargar archivos de configuración como .htaccess, o conducir ataques de carga de archivos mediante varias extensiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apache_webserver:*:*:*:*:*:*:*:*","matchCriteriaId":"B5DF97C8-A5E1-4091-A43D-B8F60E0313E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F271C6-B5A7-4B06-A3DF-4C7F74090CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*","matchCriteriaId":"884B4418-83A4-4BCB-8019-306285EB418E"}]}]}],"references":[{"url":"http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3945","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493270/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29657","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42988","source":"cve@mitre.org"},{"url":"http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493270/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2718","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used in extensions such as (1) direct_mail_subscription, (2) feuser_admin, and (3) kb_md5fepw, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en fe_adminlib.inc de TYPO3 4.0.x antes de 4.0.9, 4.1.x antes de 4.1.7 y 4.2.x antes de 4.2.1, del modo que se utiliza en extensiones como (1) direct_mail_subscription, (2) feuser_admin y (3) kb_md5fepw, permite a atacantes remotos inyectar scripts web o HTMl de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F271C6-B5A7-4B06-A3DF-4C7F74090CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*","matchCriteriaId":"884B4418-83A4-4BCB-8019-306285EB418E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3945","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493270/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29657","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42986","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493270/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2719","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow."},{"lang":"es","value":"Error de superación de límite (off-by-one) en la función ppscan (prepoc.c) de Netwide Assembler (NASM) 2.02; permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) y puede que ejecutar código de su elección mediante un fichero manipulado que produce un desbordamiento del búfer basado en pila."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the versions of NASM as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nasm:netwide_assembler:2.02:*:*:*:*:*:*:*","matchCriteriaId":"BC065B06-BE9F-42D8-9FAC-1031F49067CA"}]}]}],"references":[{"url":"http://repo.or.cz/w/nasm.git?a=commit%3Bh=76ec8e73db16f4cf1453a142d03bcc74d528f72f","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30594","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32059","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:120","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/11/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/11/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29656","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020259","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-648-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1811","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42995","source":"cve@mitre.org"},{"url":"https://sourceforge.net/project/shownotes.php?group_id=6208&release_id=606115","source":"cve@mitre.org"},{"url":"https://sourceforge.net/tracker/?func=detail&atid=106208&aid=1942146&group_id=6208","source":"cve@mitre.org"},{"url":"http://repo.or.cz/w/nasm.git?a=commit%3Bh=76ec8e73db16f4cf1453a142d03bcc74d528f72f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/11/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-648-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/project/shownotes.php?group_id=6208&release_id=606115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/tracker/?func=detail&atid=106208&aid=1942146&group_id=6208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2720","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) host and (2) path components of a URL."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Menalto Gallery anterior a 2.2.5 permite a atacantes remotos inyectar scripts web o HTML mediante los componentes (1) host y (2) path de un URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"9FB76A8F-AADD-4345-AA3D-645E6152F90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"58BB4D3A-34F4-458B-9FB6-28D3B1156A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD9940F-71D9-4AA5-B4C8-C464E371B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"91B47B68-3C6B-4B49-87E4-35489CCAC050"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5373C47-DC8D-4DD9-B15E-707B79478928"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B86E3F23-A7E4-4BF1-AF08-84091490A530"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E64F4ECB-55CA-4B50-A23E-1C91217AD77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E6E813-512A-43DD-AD45-0888F625BD6C"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43024","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2721","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album."},{"lang":"es","value":"Vulnerabilidad sin expecificar en el módulo de album-select en Menalto Gallery anteriores a 2.2.5, permite a atacantes remotos conseguir títulos de los álbunes ocultos cuando intenta añadir un nuevo album a uno oculto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"9FB76A8F-AADD-4345-AA3D-645E6152F90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"58BB4D3A-34F4-458B-9FB6-28D3B1156A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD9940F-71D9-4AA5-B4C8-C464E371B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"91B47B68-3C6B-4B49-87E4-35489CCAC050"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5373C47-DC8D-4DD9-B15E-707B79478928"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B86E3F23-A7E4-4BF1-AF08-84091490A530"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E64F4ECB-55CA-4B50-A23E-1C91217AD77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E6E813-512A-43DD-AD45-0888F625BD6C"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43025","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2722","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive."},{"lang":"es","value":"Menalto Gallery anterior a 2.2.5, permite a atacantes remotos evitar permisos para sub-albums a través de un archivo ZIP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"9FB76A8F-AADD-4345-AA3D-645E6152F90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"58BB4D3A-34F4-458B-9FB6-28D3B1156A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD9940F-71D9-4AA5-B4C8-C464E371B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"91B47B68-3C6B-4B49-87E4-35489CCAC050"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5373C47-DC8D-4DD9-B15E-707B79478928"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B86E3F23-A7E4-4BF1-AF08-84091490A530"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E64F4ECB-55CA-4B50-A23E-1C91217AD77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E6E813-512A-43DD-AD45-0888F625BD6C"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43027","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2723","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to \"spoofing the remote address.\""},{"lang":"es","value":"embed.php de Menalto Gallery versiones anteriores a 2.2.5 permite a atacantes remotos obtener la ruta completa a través de vectores no conocidos relacionados a \"suplantación de dirección remota\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"9FB76A8F-AADD-4345-AA3D-645E6152F90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"58BB4D3A-34F4-458B-9FB6-28D3B1156A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD9940F-71D9-4AA5-B4C8-C464E371B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"91B47B68-3C6B-4B49-87E4-35489CCAC050"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5373C47-DC8D-4DD9-B15E-707B79478928"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B86E3F23-A7E4-4BF1-AF08-84091490A530"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E64F4ECB-55CA-4B50-A23E-1C91217AD77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E6E813-512A-43DD-AD45-0888F625BD6C"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43028","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2724","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Menalto Gallery anterior a 2.2.5 no hace cumplir los permisos para los elementos non-album que han sido protegidos con contraseña; esto puede permitir a atacantes remotos evitar las restricciones de acceso pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"58BB4D3A-34F4-458B-9FB6-28D3B1156A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD9940F-71D9-4AA5-B4C8-C464E371B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"91B47B68-3C6B-4B49-87E4-35489CCAC050"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5373C47-DC8D-4DD9-B15E-707B79478928"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B86E3F23-A7E4-4BF1-AF08-84091490A530"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E64F4ECB-55CA-4B50-A23E-1C91217AD77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E6E813-512A-43DD-AD45-0888F625BD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"78D73880-557C-40F6-8229-BE560321835E"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43031","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.5_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2725","sourceIdentifier":"secalert@redhat.com","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption via unspecified vectors, aka the \"REALLOC_N\" variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."},{"lang":"es","value":"Un desbordamiento de enteros en la función (1) rb_ary_splice en Ruby 1.8.4 y versiones anteriores, 1.8.5 anterior a versión 1.8.5-p231, 1.8.6 anterior a versión 1.8.6-p230 y 1.8.7 anterior a versión 1.8.7-p22; y (2) la función rb_ary_replace en 1.6.x permite a los atacantes dependiendo del contexto desencadenar una corrupción en la memoria por medio de vectores no especificados, también se conoce como la variante \"REALLOC_N\", un problema diferente a los CVE-2008-2662, CVE-2008-2663 y CVE-2008-2664. NOTA: a partir de 20080624, ha habido un uso incoherente de varios identificadores CVE relacionados con Ruby. La descripción del CVE debe considerarse autorizada, aunque es probable que cambie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.5","versionEndExcluding":"1.8.5.231","matchCriteriaId":"C1836C3C-2EE4-43D0-965A-0269948C282B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.6","versionEndExcluding":"1.8.6.230","matchCriteriaId":"ABA0AC75-6B7E-48BD-891F-3FB312B9BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.7","versionEndExcluding":"1.8.7.22","matchCriteriaId":"5EDF7713-E20F-4EED-A323-98902450FD09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/241657","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2727","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43350","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9606","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/241657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2726","sourceIdentifier":"secalert@redhat.com","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption, aka the \"beg + rlen\" issue.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."},{"lang":"es","value":"Un desbordamiento de enteros en la función (1) rb_ary_splice en Ruby versión 1.8.4 y anteriores, versión 1.8.5 anterior a 1.8.5-p231, versión 1.8.6 anterior a 1.8.6-p230, versión 1.8.7 anterior a 1.8.7-p22, y versión 1.9.0 anterior a 1.9.0-2; y (2) la función rb_ary_replace en versión 1.6.x, permite a los atacantes dependiendo del contexto desencadenar una corrupción en la memoria, también se conoce como el problema \"beg + rlen\". NOTA: a partir de 20080624, ha habido un uso incoherente de varios identificadores CVE relacionados con Ruby. La descripción del CVE debe considerarse autorizada, aunque es probable que cambie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"D65BD5CD-5ECE-4294-B8E6-D0276FE8CC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.5","versionEndExcluding":"1.8.5.231","matchCriteriaId":"C1836C3C-2EE4-43D0-965A-0269948C282B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.6","versionEndExcluding":"1.8.6.230","matchCriteriaId":"ABA0AC75-6B7E-48BD-891F-3FB312B9BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.7","versionEndExcluding":"1.8.7.22","matchCriteriaId":"5EDF7713-E20F-4EED-A323-98902450FD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.9.0","versionEndExcluding":"1.9.0.2","matchCriteriaId":"9DDF08CB-5F01-49ED-9DDB-ED39C8B0423E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/241657","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43351","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9959","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT2163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-forum.com/topic/157034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-621-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1907/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1981/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/ruby1.8/+bug/241657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2727","sourceIdentifier":"secalert@redhat.com","published":"2008-09-02T14:24:00.000","lastModified":"2023-11-07T02:02:17.137","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2725.  Reason: This candidate is a duplicate of CVE-2008-2725.  Notes: All CVE users should reference CVE-2008-2725 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-2728","sourceIdentifier":"secalert@redhat.com","published":"2008-09-02T14:24:00.000","lastModified":"2023-11-07T02:02:17.353","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2726.  Reason: This candidate is a duplicate of CVE-2008-2726.  Notes: All CVE users should reference CVE-2008-2726 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-2729","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information."},{"lang":"es","value":"arch/x86_64/lib/copy_user.S en el kernel de Linux anterior a 2.6.19 en algunos sistemas AMD64 no borra las posiciones de memoria de destino después de una excepción, durante la copia de memoria del kernel, lo que permite a usuarios locales obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.19","matchCriteriaId":"B46C2EC7-EC2C-45D6-A7F2-CED2C433271E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a024564821101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30849","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30850","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31551","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31628","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0519.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/29943","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020364","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=451271","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43558","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a024564821101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0508.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0519.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/29943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=451271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2008-2730","sourceIdentifier":"psirt@cisco.com","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsj90843."},{"lang":"es","value":"El Servicio Real -Time Information Server (RIS) Data Collector de Cisco Unified Communications Manager (CUCM) 5.x versiones anteriores a la 5.1(3) y 6.x versiones anteriores a la 6.1(1) permite a atacantes remotos evitar la autenticación y obtener información sobre la configuración en cluster y estadísticas, a través de una conexión directa TCP al puerto de servicio, también conocida como Bug ID CSCsj90843."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"640BFEE2-B364-411E-B641-7471B88ED7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30848","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29935","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020361","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/1933/references","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43355","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/30848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1933/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2732","sourceIdentifier":"psirt@cisco.com","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20, and 8.1 before 8.1(1)8 allow remote attackers to cause a denial of service (device reload) via unknown vectors, aka Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, and CSCsq39315."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en la funcionalidad de inspección SIP en Cisco PIX y Adaptive Security Appliance (ASA) 5500 devices 7.0 versiones anteriores a  7.0(7)16, 7.1 versiones anteriores a 7.1(2)71, 7.2 versiones anteriores a 7.2(4)7, 8.0 versiones anteriores a 8.0(3)20, y 8.1 versiones anteriores a 8.1(1)8 permiten a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de vectores no especificados, también conocido como Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, y CSCsq39315."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31730","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/30998","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020808","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020809","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44866","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2733","sourceIdentifier":"psirt@cisco.com","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service (device reload) via a crafted authentication attempt, aka Bug ID CSCso69942."},{"lang":"es","value":"Cisco PIX  y dispositivos Adaptive Security Appliance 5500(ASA) 7.2 anteriores a 7.2(4)2, 8.0 anterior a 8.0(3)14, y 8.1 anterior a 8.1(1)4, cuando se encuentra configurado como un endpoint VPN, no procesa adecuadamente la autenticación cliente, lo que permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de un intento de autenticación manipulado, también conocido como Bug ID CSCso69942."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31730","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/30998","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020810","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020811","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44867","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2734","sourceIdentifier":"psirt@cisco.com","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472."},{"lang":"es","value":"Fugas de memoria en la funcionalidad crypto en Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 versiones anteriores a 7.2(4)2, 8.0 versiones anteriores a 8.0(3)14, y 8.1 versiones anteriores a 8.1(1)4, cuando está configurado como un SSL VPN endpoint sin cliente, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y cuelgue de VPN) a través de paquetes SSL o HTTP manipulados, también conocido como Bug ID CSCso66472."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31730","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/30998","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020812","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44868","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2735","sourceIdentifier":"psirt@cisco.com","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet, aka Bug ID CSCsq19369."},{"lang":"es","value":"Servidor HTTP en los dispositivos Cisco Adaptive Security Appliance (ASA) 5500 8.0 anterior a 8.0(3)15 y 8.1 anterior a 8.1(1)5, cuando se configura como SSL VPN endpoint sin clientes no procesa adecuadamente las URIs, lo que permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una URI en un paquete SSL o HTTP manipulado, también conocido como Bug ID CSCsq19369."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31730","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/30998","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020812","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44869","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2736","sourceIdentifier":"psirt@cisco.com","published":"2008-09-04T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco Adaptive Security Appliance (ASA) 5500 dispositivos 8.0(3)15, 8.0(3)16, 8.1(1)4, y 8.1(1)5, cuando se configuran como punto final sin cliente SSL VPN; permite a atacantes remotos obtener nombres de usuario y contraseñas a través de vectores desconocidos. También se conoce como Bug ID CSCsq45636."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31730","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/30998","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020813","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44870","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2737","sourceIdentifier":"psirt@cisco.com","published":"2008-08-18T20:41:00.000","lastModified":"2023-11-07T02:02:17.723","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3558.  Reason: This candidate is a duplicate of CVE-2008-3558.  Notes: All CVE users should reference CVE-2008-3558 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-2739","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:43.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device crash or hang) via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447."},{"lang":"es","value":"El motor de firma SERVICE.DNS en  Intrusion Prevention System  (IPS) en Cisco IOS v12.3 y v12.4, permite a atacantes remotos provocar una denegación de servicio (caída o cuelgue de dispositivo) a través de tráfico de red que lanza un firma IPS sin especificar. Vulnerabilidad distinta de CVE-2008-1447."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*","matchCriteriaId":"3870C62F-D086-419C-A0E6-815E9ED5DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-2742","sourceIdentifier":"cve@mitre.org","published":"2008-06-17T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php) in Achievo 1.2.0 through 1.3.2 allows remote attackers to execute arbitrary code by uploading a file with .php followed by a safe extension, then accessing it via a direct request to the file in the Achievo root directory.  NOTE: this is only a vulnerability in environments that support multiple extensions, such as Apache with the mod_mime module enabled."},{"lang":"es","value":"Vulnerabilidad de subida de fichero no restringido en el editor de ficheros mcpuk (atk/attributes/fck/editor/filemanager/browser/mcpuk/connectors/php/config.php) en Achievo 1.2.0 hasta 1.3.2, permite a atacantes remotos ejecutar código de su elección al subir un fichero con .php seguido de una extensión segura y luego accediendo a él mediante una solicitud directa al fichero del directorio raíz de Achievo. NOTA: Se trata sólo es una vulnerabilidad en entornos que soportan múltiples extensiones como Apache con el módulo mod_mime habilitado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8633CE2A-7814-4963-BB65-B4499BBA5186"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B9C0B0D-5E4A-45BD-9150-90FC615357EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"951EC99D-4FFB-4388-AAF0-84A60A67AC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D901628D-D446-45EE-B131-EAA04D48A352"}]}]}],"references":[{"url":"http://secunia.com/advisories/30597","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.achievo.org/blog/archives/631-Achievo-1.3.3-Security-Release.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42980","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5770","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.achievo.org/blog/archives/631-Achievo-1.3.3-Security-Release.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2743","sourceIdentifier":"cve@mitre.org","published":"2008-06-17T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en servidor web incluido en las impresoras/copiadoras Xerox 4110, 4590 y 4595, permite a atacantes remotos inyectar scripts web o HTML, a través de vectores de ataque desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:xerox_4110:*:*:*:*:*:*:*:*","matchCriteriaId":"C3CDE01C-8944-4A4F-B8A9-821F80A31E99"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:xerox_4590:*:*:*:*:*:*:*:*","matchCriteriaId":"837C59EE-9ACE-4554-A6D0-8F7E4AFA3F9A"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:xerox_4595:*:*:*:*:*:*:*:*","matchCriteriaId":"7E7FEB3F-AE7E-401C-ACAB-A83818F7E3B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29690","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020282","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1829/references","source":"cve@mitre.org"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43058","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1829/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2744","sourceIdentifier":"cve@mitre.org","published":"2008-06-17T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an \"obscure method.\" NOTE: the vector is probably in the redirect parameter to the Admin Control Panel (admincp/index.php)."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en vBulletin 3.6.10 y 3.7.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores desconocidos y un \"método oscuro\". NOTA: el vector de ataque probablemente sea el parámetro redirect en el Admin Control Panel (admincp/index.php)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"C16EC27E-E7FE-416C-A518-3BCEEA375E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FFE64221-03E3-4443-A394-A033EA1C4D9C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3946","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493340/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29704","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020322","source":"cve@mitre.org"},{"url":"http://www.vbulletin.com/forum/showthread.php?t=274882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43090","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493340/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbulletin.com/forum/showthread.php?t=274882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2745","sourceIdentifier":"cve@mitre.org","published":"2008-06-17T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows remote attackers to execute arbitrary code via a long parameter to the AnnoSaveToTiff method."},{"lang":"es","value":"Desbordamiento de pila basado en buffer en el control ActiveX BiAnno (BiAnno.ocx) de Black Ice Software Annotation Plugin 10.95 permite a atacantes remotos ejecutar código de su elección a través de un parámetro long del método AnnoSaveToTiff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:black_ice:annotation_software:10.95:*:*:*:*:*:*:*","matchCriteriaId":"AE0B0111-0354-4785-9843-EBB386732D86"}]}]}],"references":[{"url":"http://secunia.com/advisories/30603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29635","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1795/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42982","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5777","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1795/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2746","sourceIdentifier":"cve@mitre.org","published":"2008-06-17T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Gryphon gllcTS2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro detail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gryphon:gllcts2:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"20C333B5-96E5-4488-B726-AB9C9A259D7F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43057","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2747","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\\SOFTWARE\\Vitalwerks\\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values."},{"lang":"es","value":"No-IP Dynamic Update Client (DUC) 2.2.1 sobreWindows usa permisos débiles para la clave de registro HKLM\\SOFTWARE\\Vitalwerks\\DUC, lo que permite a usuarios locales obtener contraseñas ofuscadas y otra información sensible leyendo los valores de registro (1) TrayPassword, (2) Username, (3) Password y (4) Hosts"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:no-ip:dynamic_update_client:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"82ADAF61-8C0C-4231-BD1F-4BB54B786B38"}]}]}],"references":[{"url":"http://secunia.com/advisories/30714","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3952","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493367/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29758","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493367/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2748","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long, malformed connect packets, related to these packets being \"parsed multiple times.\""},{"lang":"es","value":"Skulltag 0.97d2-RC2 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de una serie de paquetes de conexión largos o malformados, relacionados con que son \"parseados en múltiples ocasiones\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95c:*:*:*:*:*:*:*","matchCriteriaId":"E08AE280-B3AB-44FA-9FD6-F9C8B22D169F"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95d:*:*:*:*:*:*:*","matchCriteriaId":"4DB3C295-BE0A-4804-8565-79264AD92A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95e:*:*:*:*:*:*:*","matchCriteriaId":"75CA2F11-52DE-4C6E-9E7F-633BD804B51C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95f:*:*:*:*:*:*:*","matchCriteriaId":"5AF345AE-66EA-49DB-A145-7B6CC147AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95g:*:*:*:*:*:*:*","matchCriteriaId":"CB36C355-2008-4EAE-AEBA-376B7C3E208B"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95h:*:*:*:*:*:*:*","matchCriteriaId":"86912E64-4EF5-438C-8B14-9AA9353BD417"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95i:*:*:*:*:*:*:*","matchCriteriaId":"D7506853-54FC-4908-B0C4-5D5BFE7BEEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95j:*:*:*:*:*:*:*","matchCriteriaId":"E778DEF7-B84F-4813-9449-580A6B071E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.95k:*:*:*:*:*:*:*","matchCriteriaId":"D6F884F3-771F-4D65-8BBD-C9E3952ACC9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.96b:*:*:*:*:*:*:*","matchCriteriaId":"A621B560-4A27-4E89-8834-76BE60CCCBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.96c:*:*:*:*:*:*:*","matchCriteriaId":"336E52F7-6299-45A6-9E9D-03F2C8FC3A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.96d:*:*:*:*:*:*:*","matchCriteriaId":"DE120A44-3949-4115-8B0B-02E002D00525"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.96e:*:*:*:*:*:*:*","matchCriteriaId":"585EC565-42FF-4BAA-B105-05F583FE6E65"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.96f:*:*:*:*:*:*:*","matchCriteriaId":"B2548734-EABD-46A5-9BFB-CB09F1AC7257"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97b:*:*:*:*:*:*:*","matchCriteriaId":"E3D39A0F-938E-42F0-BA02-EB3E7D9E928C"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97c:*:*:*:*:*:*:*","matchCriteriaId":"5B728246-CE98-4AA9-8E05-D266B8349FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97c2:*:*:*:*:*:*:*","matchCriteriaId":"03DF74FF-96EC-40D9-8E4F-03586B3AF149"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97c3:*:*:*:*:*:*:*","matchCriteriaId":"E5C4A89C-EABB-4E3B-818A-104F4433A154"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:*:*:*:*:*:*:*","matchCriteriaId":"FB6EE64A-95E6-409D-A6A1-CD81EDD242A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_1:*:*:*:*:*:*","matchCriteriaId":"EB44B149-7368-4B90-8B86-EA6D1664B691"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_2:*:*:*:*:*:*","matchCriteriaId":"B71BC65B-ECDB-49A2-A322-F201EA7998A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_3:*:*:*:*:*:*","matchCriteriaId":"AD70CF45-2F6D-4618-AEBA-CFEE08F1A7DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_4:*:*:*:*:*:*","matchCriteriaId":"48187081-98A4-440D-B615-E3B0FE78E93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_4.1:*:*:*:*:*:*","matchCriteriaId":"34637E02-713C-4A07-A24E-4AA5A5751671"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_4.2:*:*:*:*:*:*","matchCriteriaId":"7D0D7A0F-6A6C-4B9E-BA60-E3649B4B7C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:beta_4.3:*:*:*:*:*:*","matchCriteriaId":"4252D0DE-3CD0-4481-AAB5-632CE55776E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:rc10:*:*:*:*:*:*","matchCriteriaId":"2C510EA6-998D-442B-B25B-729FF738A86B"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d:rc9:*:*:*:*:*:*","matchCriteriaId":"94AC2093-8D95-4360-9B39-6C105563165A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d2:rc2:*:*:*:*:*:*","matchCriteriaId":"E6E3DC9A-A4DE-4858-B3F7-367F96E2825A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag_team:skulltag:0.97d2:rc3:*:*:*:*:*:*","matchCriteriaId":"6A962844-4FA4-411C-81D7-A145E6359D12"}]}]}],"references":[{"url":"http://aluigi.org/poc/skulltagloop.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30668","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3953","source":"cve@mitre.org"},{"url":"http://skulltag.com/testing/public/Skulltag%20Version%20History.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493386/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29760","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43125","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/skulltagloop.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://skulltag.com/testing/public/Skulltag%20Version%20History.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493386/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2749","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin expecificar en cshttpd in Sun Java System Calendar Server 6 y 6.3, y Sun ONE Calendar Server 6.0, cuando el access logging (tambien conocido como service.http.commandlog.all) está activado, permite a atacantes remotos provocar una denegación de servicio (caida de demonio), a través de vectores no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:2004q2:*:*:*:*:*:*","matchCriteriaId":"7721146B-767F-4ECD-ABB3-A8C9D459DD4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:2005q1:*:*:*:*:*:*","matchCriteriaId":"149BE821-BA69-410A-8A5F-30E0B0384FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:2005q4:*:*:*:*:*:*","matchCriteriaId":"D7C4ADB9-93DF-415E-986E-63A475A9E392"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF59A08-6F91-44B4-8BD7-26F467E527CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A386E396-577A-4A86-B548-BC67841814B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30694","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-235521-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29763","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020299","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1857","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43127","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-235521-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2750","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable."},{"lang":"es","value":"La función pppol2tp_recvmsg de drivers/net/pppol2tp.c en el kernel de Linux 2.6 anterior a 2.6.26-rc6, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria en montículo del kernel y caída del sistema) y puede que tenga otros impactos no especificados, al utilizar un paquete PPPOL2TP que resulta en un valor largo para determinada longitud de variable."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n","lastModified":"2008-06-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*","matchCriteriaId":"9F727CD3-D3C2-4648-9EC5-092DF3F73B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*","matchCriteriaId":"D1765065-ABE5-478C-9ACC-EFFA8E4A7043"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*","matchCriteriaId":"D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*","matchCriteriaId":"95DD4647-564E-4067-A945-F52232C0A33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*","matchCriteriaId":"6E20AD05-586B-4493-9793-3FF8028CF887"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*","matchCriteriaId":"4F76C298-81DC-43E4-8FC9-DC005A2116EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*","matchCriteriaId":"0AB349B2-3F78-4197-882B-90ADB3BF645A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*","matchCriteriaId":"8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*","matchCriteriaId":"F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*","matchCriteriaId":"31523E67-5E4F-43F7-9410-20CB3F287DAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*","matchCriteriaId":"9B627DE3-2702-4EB2-9733-253D315FB594"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*","matchCriteriaId":"C5B76C21-70C8-4911-A24B-270F876EF7C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*","matchCriteriaId":"A89DC9CD-C06F-4B9B-B376-900E65016296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*","matchCriteriaId":"15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*","matchCriteriaId":"8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*","matchCriteriaId":"707ECC75-65B6-4B02-BE85-A4804549A2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*","matchCriteriaId":"E55F2549-F813-4BD6-8933-6788D898ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*","matchCriteriaId":"3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b6707a50c7598a83820077393f8823ab791abf8","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31202","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020297","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/19/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29747","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43111","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2629","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b6707a50c7598a83820077393f8823ab791abf8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/19/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2751","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (a) resourceNode/customResourceNew.jsf; the (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, (8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup, or (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (b) resourceNode/externalResourceNew.jsf; the (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi, (11) propertyForm:propertySheet:propertSectionTextField:nameProp:name, or (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (c) resourceNode/jmsDestinationNew.jsf; the (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi or (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd parameter to (d) resourceNode/jmsConnectionNew.jsf; the (15) propertyForm:propertySheet:propertSectionTextField:jndiProp:jnditext or (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (e) resourceNode/jdbcResourceNew.jsf; the (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name, (18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname, or (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder parameter to (f) applications/lifecycleModulesNew.jsf; or the (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name, (21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType, or (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db parameter to (g) resourceNode/jdbcConnectionPoolNew1.jsf."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en la interfaz webadmin de Glassfish en Java System Application Server de Sun versión 9.1_01, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, o (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc en (a) el archivo resourceNode/customResourceNew.jsf; el parámetro (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, (8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup, o (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc en (b) el archivo resourceNode/externalResourceNew.jsf; el parámetro (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi, (11) propertyForm:propertySheet:propertSectionTextField:nameProp:name, o (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc en (c) el archivo resourceNode/jmsDestinationNew.jsf; el parámetro (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi o (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd en (d) el archivo resourceNode/jmsConnectionNew.jsf; el parámetro (15) propertyForm:propertySheet:propertSectionTextField :jndiProp:jnditext o (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc en (e) el archivo resourceNode/jdbcResourceNew.jsf; el parámetro (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name, (18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname, o (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder en (f) el archivo aplicaciones/lifecycleModulesNew.jsf; o el parámetro (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name, (21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType, o (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db en (g) el archivo resourceNode/jdbcConnectionPoolNew1.jsf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"772D2025-C240-45A5-9B55-2B7F5331444D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:1.0:ur1:*:*:*:*:*:*","matchCriteriaId":"3152B8B7-3B48-492A-8A9E-3DD6638679EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:1.0:ur1_po1:*:*:*:*:*:*","matchCriteriaId":"CAFDA3BE-54A3-49F3-ABF1-76437AD2DBB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6AD5FD-8A44-4184-B5F5-9FC0DF24B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DBDD6781-CF9E-4ED3-861F-99217EE0711C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7B2813A2-A847-45F5-80C9-95E1D82C36FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:9.1_01:*:*:*:*:*:*:*","matchCriteriaId":"19499B09-D94F-4675-8FCA-D75E4EAD0208"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3949","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493370/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29751","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42989","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493370/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2752","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Microsoft Word 2000 9.0.2812 y 2003 11.8106.8172, no gestiona correctamente las listas desordenadas, lo que permite a atacantes asistidos por el usuario, provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrariamente a través de un archivo .doc manipulado. NOTA: alguno de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"5947AFC8-483F-4597-AB8F-214356E857BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C426AFDD-870F-4CAD-9E93-636714984259"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"FEE7CC21-A458-49BB-B437-D5DF09339D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*","matchCriteriaId":"8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*","matchCriteriaId":"379C2A4A-78EF-473D-954B-F5DD76C3D6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"2FD0484E-6FF8-45DC-BFA9-03FC6DF2C602"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A4182673-402A-4801-9A0F-2516EE923DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"80F8E09E-E7F7-4D86-B140-3933EDC54E1C"}]}]}],"references":[{"url":"http://www.nullcode.com.ar/ncs/crash/video.htm","source":"cve@mitre.org"},{"url":"http://www.nullcode.com.ar/ncs/crash/video2.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29769","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-1.doc","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-2.doc","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-3.doc","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-4.doc","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43155","source":"cve@mitre.org"},{"url":"http://www.nullcode.com.ar/ncs/crash/video.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nullcode.com.ar/ncs/crash/video2.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-1.doc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-2.doc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-3.doc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-4.doc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2753","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) xslIdn parameter to (a) utils/getXsl.aspx, and the (2) part parameter to (b) getXml.aspx and (c) getXls.aspx in utils/."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Pooya Site Builder (PSB) 6.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) xslIdn a (a) utils/getXsl.aspx y (2) part a (b) getXml.aspx y (c) getXls.aspx en utils/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paridel:pooya_site_builder:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7D0EB878-148C-4A3F-9CB2-70EAC73A355E"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/42","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/bugtraq/2008/Jun/0115.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30610","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29673","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43007","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5788","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/42","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/bugtraq/2008/Jun/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2754","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en toplist.php \r\nen Efiction 3.0 y 3.4.3, cuando está desactivada la opción magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro list.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efiction:efiction:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDCD7EC6-0A9B-46B6-8559-3B4A98E5A490"},{"vulnerable":true,"criteria":"cpe:2.3:a:efiction:efiction:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"82053162-EA97-4C51-A1E7-36252CE6ED2B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29658","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42998","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5785","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2755","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de JAMM CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamm-media:jamm_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"0C4B468F-F672-44AE-93E3-8CAC382588F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43023","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5789","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2756","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/users.asp en Absolute Control Panel XE 1.0, permite a atacantes remotos inyectar scripts web o HTML \r\na través del parámetro name y otros no especificados. NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_control_panel_xe:1.0:*:*:*:*:*:*:*","matchCriteriaId":"26E3282A-5E1D-48E6-B9D3-BBCB4A94C690"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43048","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2757","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.asp en Xigla Absolute News Manager XE 3.2, permite a usuarios administradores autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro orderby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_news_manager_xe:3.2:*:*:*:*:*:*:*","matchCriteriaId":"07AAC8C4-C549-4071-901C-C40C8410B6DB"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43043","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2758","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) pblname and (2) text parameters to (a) admin/search.asp, (3) name parameter to (b) admin/publishers.asp, and other unspecified vectors to (c) anmviewer.asp and (d) editarticleX.asp in admin/.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Xigla Absolute News Manager XE 3.2; permite a administradores autenticados en remoto inyectar secuencias de comandos Web o HTML a través de los parámetros (1) pblname y (2) text en (a) admin/search.asp, (3) parámetro name en (b) admin/publishers.asp, y otros vectores no especificados en (c) anmviewer.asp y (d) editarticleX.asp en admin/.  NOTA: Parte de esta información ha sido obtenida de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_news_manager_xe:3.2:*:*:*:*:*:*:*","matchCriteriaId":"07AAC8C4-C549-4071-901C-C40C8410B6DB"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43042","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2759","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en Xigla Absolute Form Processor XE 4.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) showfields, (2) text y (3) submissions al search.asp y (4) name al users.asp. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_form_processor_xe:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3D30D88A-A3B6-4158-A50D-94E76D9A7C03"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2760","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en searchbanners.asp en Xigla Absolute Banner Manager XE 2.0, permite a administradores autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro orderby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_banner_manager:2.0:*:asp:*:*:*:*:*","matchCriteriaId":"D232BC7A-3879-44B0-A9D9-200F079C8C98"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43046","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2761","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in (1) searchbanners.asp and (2) listadvertisers.asp, and other unspecified fields.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en Xigla Absolute Banner Manager XE 2.0, permite a administradores autenticados remotamente inyectar secuencias de comandos web y HTML de su elección a través de los campos de texto en (1) searchbanners.asp y(2) listadvertisers.asp, y otros que no han sido especificados. NOTA: algunos de estos detalles han sido obtenidos desde información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_banner_manager:2.0:*:asp:*:*:*:*:*","matchCriteriaId":"D232BC7A-3879-44B0-A9D9-200F079C8C98"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43045","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2762","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo search.asp en Absolute Form Processor XE de Xigla versión 4.0, permite a los administradores autenticados remotos ejecutar comandos SQL arbitrarios por medio del parámetro orderby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_form_processor_xe:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3D30D88A-A3B6-4158-A50D-94E76D9A7C03"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43051","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2763","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.asp de Xigla Absolute Live Support XE 5.1, permite a administradores autenticados en remoto ejecutar comandos SQL de su elección a través del parámetro orderby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_live_support_xe:5.1:*:asp:*:*:*:*:*","matchCriteriaId":"8E388E64-52BB-4975-A812-CCFCC4E1571A"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43050","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2764","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors (\"all fields\")."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en admin/search.asp en Xigla Absolute Live Support XE 5.1, permite a administradores autenticados remotamente inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados (\"todos los campos\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_live_support_xe:5.1:*:asp:*:*:*:*:*","matchCriteriaId":"8E388E64-52BB-4975-A812-CCFCC4E1571A"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43049","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2765","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Gallery.asp en Xigla Absolute Image Gallery XE, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro categoryid en una acción viewimage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_image_gallery_xe:*:*:*:*:*:*:*:*","matchCriteriaId":"640D88E4-3DDB-44F9-8573-8B58F45068BA"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43052","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2766","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Xigla Absolute Image Gallery XE, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección, a través de vectores no especificados en (1) admin/search.asp y (2) gallery.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_image_gallery_xe:*:*:*:*:*:*:*:*","matchCriteriaId":"640D88E4-3DDB-44F9-8573-8B58F45068BA"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43053","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2767","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.asp en Xigla Poll Manager XE, permite a usuarios autenticados remotamente con perfil de administrador ejecutar comandos SQL de su elección a través del parámetro orderby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_poll_manager_xe:*:*:*:*:*:*:*:*","matchCriteriaId":"6953AD13-116F-44E1-9257-00EC75A5810C"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43055","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2768","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors (\"all fields\")."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en admin/search.asp en Xigla Poll Manager XE, permite a usuarios autenticados remotamente con perfil de administrador inyectar secuencias de comandos web o HTML de su elección a través de vectore no especificados (\"todos los campos\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_poll_manager_xe:*:*:*:*:*:*:*:*","matchCriteriaId":"6953AD13-116F-44E1-9257-00EC75A5810C"}]}]}],"references":[{"url":"http://bugreport.ir/index.php?/41","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43054","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index.php?/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=121322052622903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2769","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_auth[smf_path] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en authentication/smf/smf.functions.php de Simple Machines phpRaider 1.0.6 y 1.0.7, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pConfig_auth[smf_path]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpraider:phpraider:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5DE2FE2D-2CBF-4B5A-9E71-1C79FE585BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpraider:phpraider:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"82B44E2E-BB9F-48F2-B669-C7A5DF76DCF0"}]}]}],"references":[{"url":"http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3947","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493275/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42996","source":"cve@mitre.org"},{"url":"http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493275/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2770","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entry_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MycroCMS 0.5, cuando las magic_quotes_gpc están desactivadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro entry_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mycrocms:mycrocms:0.5:*:*:*:*:*:*:*","matchCriteriaId":"91F43C45-DABA-45ED-8303-7CE713B5F7C1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29671","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43002","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5787","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2771","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with \"access content\" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors."},{"lang":"es","value":"El módulo Node Hierarchy 5.x anterior a 5.x-1.1 y 6.x anteriores a 6.x-1.0 para Drupal no implementa adecuadamente los controles de acceso, lo que permite a atacantes remotos con permiso de \"acceso al contenido\", evitar las restricciones y modificar la jerarquía a través de vectores de ataque indeterminados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_hierarchy_module:5:*:*:*:*:*:*:*","matchCriteriaId":"A90F9A0D-BD18-4E25-A5C1-58FAA916C659"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_hierarchy_module:6:*:*:*:*:*:*:*","matchCriteriaId":"FD9CA485-B2C8-43F8-8053-A0EC8772E9BB"}]}]}],"references":[{"url":"http://drupal.org/node/269473","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30622","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29675","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43006","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2772","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly related to a missing \"whitelist of callbacks.\""},{"lang":"es","value":"El módulo Magic Tabs 5.x anterior a 5.x-1.1 para Drupal, permite a atacantes remotos ejecutar código PHP de su elección  a través de argumentos en una URL, posiblemente en relación a \"listas blancas de retorno\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:magic_tabs_module:5:*:*:*:*:*:*:*","matchCriteriaId":"13FC80B7-76CD-4FC3-B882-C9DB5BE5BAAA"}]}]}],"references":[{"url":"http://drupal.org/node/269321","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30632","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29682","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43020","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2773","sourceIdentifier":"cve@mitre.org","published":"2008-06-18T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Taxonomy Image module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Taxonomy Image 5.x anterior a 5.x-1.3 y 6.x anterior a 6.x-1.3, un módulo para Drupal; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_image_module:5:*:*:*:*:*:*:*","matchCriteriaId":"7809BB7A-A535-413B-922F-FF4A3318E5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_image_module:6:*:*:*:*:*:*:*","matchCriteriaId":"2B0DBD10-00E4-4235-A757-880CBEE654B6"}]}]}],"references":[{"url":"http://drupal.org/node/269389","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30631","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29683","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43013","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2774","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the category_id parameter, a different vector than CVE-2007-4736."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en item.php de CartKeeper CKGold Shopping Cart 2.5 y 2.7, permite a atacantes remotos ejecutar commandos SQL arbitrariamente a través del parámetro category_id, un vector diferente del CVE-2007-4736."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cartkeeper:ckgold_shopping_cart:2.5:*:*:*:*:*:*:*","matchCriteriaId":"0AAAC7AD-AB8E-4BB7-8BF8-22D19F0A2D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartkeeper:ckgold_shopping_cart:2.7:*:*:*:*:*:*:*","matchCriteriaId":"D5AF3E22-8588-44CD-A9B6-536383DC1452"}]}]}],"references":[{"url":"http://secunia.com/advisories/30392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42646","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2775","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en search.asp de DT Centrepiece 4.0, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro searchFor. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dt_centrepiece:dt_centrepiece:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EA114921-3B59-4490-A846-33207931121D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2776","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en search.asp de DT Centrepiece 4.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente, a través del parámetro searchFor. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dt_centrepiece:dt_centrepiece:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EA114921-3B59-4490-A846-33207931121D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2777","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en Ortro versiones anteriores a la 1.3.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente, a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"40835590-2047-4849-AA29-11C6044CAD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"65912C0E-53F0-45EB-BD85-DE34967F7C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"53E44325-64FA-4715-A040-08272D0DF595"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C0DEB09-2E3C-4B7E-89B1-B830BBC9F013"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"172B8DC2-02F3-42FF-B70D-923BC3E64949"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8E96B08-A127-41A0-91E9-ADD6B337A4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EDAE1394-6C9A-40D3-AE80-A217564E7AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DBBFAAFD-6585-4E6C-AD65-6FADABBD6FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E504C6-C13C-464D-AB5F-12D0D95BB032"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"42C6B54E-7A53-4CC4-9544-88B1569DA7B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B79D9F35-6F7C-4C3C-9195-4AC4CD25D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F29C4E0-1630-4DC0-A195-A9197203A257"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74990A98-2D00-4B84-AD27-F87CEAFFB800"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"81603306-207C-4AF1-B76D-AA93A9DA8539"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4A986AE9-3590-479F-9C73-A09C3C952CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"C6FD08CE-392F-4004-AB31-57676186BC63"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"936B9621-59AA-42F7-BB97-D8B8EBD48232"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_corbo:ortro:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2E2B3-F6EB-4010-9974-B7A1C91DA2DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30398","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ortro.net/changelog#release_1.3.1_2008.05.27","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1679/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42657","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ortro.net/changelog#release_1.3.1_2008.05.27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1679/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2778","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/class_search.php del Sistema de Búsqueda en RevokeBB 1.0 RC11, permite a atacantes remotos ejecutar comandos SQL arbiotrariamente a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:revokesoft:revokebb:1.0:rc11:*:*:*:*:*:*","matchCriteriaId":"DDB9D6B8-0CA0-484C-A62B-76C0EC5EC5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:revokesoft:revokebb:1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"EA50260D-5A28-410A-8D7F-6E88B2DCD94A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1676/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42647","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5677","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1676/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2779","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 allows remote FTP servers to create or overwrite arbitrary files via ..\\ (dot dot backslash) sequences in responses to LIST commands, a related issue to CVE-2002-1345.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de Salto de Directorio en GlobalSCAPE CuteFTP Home 8.2.0 Build0 2.26.2008.4 y CuteFTP Pro 8.2.0 Build 04.01.2008.1, permite en servidores FTP remotos crear y sobrescribir ficheros arbitrariamente mediante secuencias ..\\ (punto punto barra invertida) en respuesta a comandos LIST, un problema relacionado con la CVE-2002-1345. NOTA: puede aprovecharse para ejecución de código escribiendo en el fichero de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.2.0:*:home:*:*:*:*:*","matchCriteriaId":"12174378-67EA-41D0-B91A-911F81722A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.2.0:*:pro:*:*:*:*:*","matchCriteriaId":"A91A19CF-CEDE-4626-9577-0DF44D2B7586"}]}]}],"references":[{"url":"http://secunia.com/advisories/29760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/cuteftp820-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020113","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1653/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42633","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/cuteftp820-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1653/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2780","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Anubis (aka Anubis+Ripe160) plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file."},{"lang":"es","value":"El Plugin Anubis (también conocido como Anubis+Ripe160) versiones anteriores a la 1.3 para cifrado almacena el tamaño del fichero sin cifrar en texto claro en la cabecera del fichero cifrado, lo cual permite a atacantes remotos distinguir entre datos cifrados y relleno aleatorio al final del fichero cifrado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:albinoloverats:anubis_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"C23F63EE-F528-4751-B6A3-A45FAE1ECDD4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30388","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1663/references","source":"cve@mitre.org"},{"url":"https://albinoloverats.net/index.php?option=com_content&task=view&id=60&Itemid=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1663/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://albinoloverats.net/index.php?option=com_content&task=view&id=60&Itemid=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2781","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL commands via the fname parameter in a members search action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de DZOIC Handshakes 3.5, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro fname en una acción members search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dzoic:handshakes:3.5:*:*:*:*:*:*:*","matchCriteriaId":"5C3C45E3-0AD0-4C6F-92E8-46EB05B9D0A4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3954","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492556/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29353","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42639","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492556/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2782","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) library_rss.php and (2) rss.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en OtomiGenX 2.2 permiten a atacantes remotos incluir y ejecutar archivos locales arbitrariamente mediante un .. (punto punto) en el parámetro lang de (1) library_rss.php y (2) rss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otomigenx:otomigenx:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9D1745FC-8627-40BC-A6A5-0ADAD5271E79"}]}]}],"references":[{"url":"http://sourceforge.net/forum/forum.php?forum_id=834373","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1678/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42665","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5680","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=834373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1678/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2783","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php, (2) workweek.php, and (3) day.php; and (4) the horde parameter in the PATH_INFO to the default URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Horde Groupware, Groupware Webmail Edition y Kronolith, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro timestamp en (1) week.php, (2) workweek.php y (3) day.php; y (4) parámetro horde en PATH_INFO de la URI por defeceto. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","matchCriteriaId":"12221711-3AF8-477A-B61B-E65AD45C06B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"ED443641-1A9E-49FA-8478-BEEC8C692F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith:*:*:*:*:*:*:*:*","matchCriteriaId":"0BF59A10-210E-4590-8334-3A7274705E5D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29365","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42640","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2784","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT commands and a second DATA command."},{"lang":"es","value":"La función smtp_filter en spamdyke versiones anteriores a la 3.1.8 no filtra comandos RCPT después de encontrar el primer comando DATA, lo cual permite a atacantes remotos usar el servidor de open relay enviando comandos RCTP con destinatarios no válidos, seguidos de un comando DATA, seguido de comandos RCPT arbitrarios y un segundo comando DATA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"07A0ACF5-C979-47F9-9BEB-D6C45604F536"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B1BAFC19-C601-46EF-8830-9B0990C0F5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3F28F91C-A3FB-4130-B256-550FB8A9565F"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3E64D359-91C8-43AD-A20E-0789AE496CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9633F036-B7C1-4108-AAAB-841A67E59346"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1127C109-252C-41F1-B6E3-F88D7AA1D95B"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3683DA2F-E22A-427E-A5E1-1FDC8676FFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"02D659E2-36DD-4B20-A471-AC46BE39148A"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"50C05EBB-5061-49CC-B68C-ADC05A7DEF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamdyke:spamdyke:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5D93F2E1-ACAB-4AF5-BA35-43E88B2EB7B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.spamdyke.org/documentation/Changelog.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1684/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42658","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.spamdyke.org/documentation/Changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1684/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2785","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349."},{"lang":"es","value":"Firefox anterior a versión 2.0.0.16 y versiones 3.x anteriores a 3.0.1, Thunderbird anterior a versión 2.0.0.16, y SeaMonkey anterior a versión 1.1.11, de Mozilla, utilizan un tipo de datos enteros incorrecto como contador de referencia de objeto CSS en la estructura de datos cssValue (también se conoce como nsCSSValue:Array), que permite a los atacantes remotos ejecutar código arbitrario por medio de un gran número de referencias a un objeto CSS común, conllevando a un desbordamiento de contador y una liberación de memoria en uso, también se conoce como ZDI-CAN-349."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.15","matchCriteriaId":"4532E6D4-6997-4235-A297-811A6415FC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.10","matchCriteriaId":"39273785-BB90-40D1-A4AD-A918DEAF19C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"562A1FB2-9C22-42B4-AA0A-1D19CA72CEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"}]}]}],"references":[{"url":"http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31157","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31183","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31195","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31261","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31403","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34501","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1614","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:148","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-34.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0597.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0598.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0599.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494504/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494860/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29802","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020336","source":"cve@mitre.org"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380767","source":"cve@mitre.org"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-623-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-626-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-626-2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1873","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-044/","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=440230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43167","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2683","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9900","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00667.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00672.html","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2008/06/18/new-security-issue-under-investigation/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0597.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0598.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0599.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494504/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494860/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-623-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-626-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-626-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-044/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=440230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00667.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00672.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2786","sourceIdentifier":"cve@mitre.org","published":"2008-06-19T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors.  NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785.  A CVE identifier has been assigned for tracking purposes."},{"lang":"es","value":"Desbordamiento de Búfer en Firefox 3.0 y 2.0 tiene un impacto y vectores de ataque desconocidos. NOTA: debido a la ausencia de detalles 20080619, no está claro si es el mismo problema que la CVE-2008-2785. Se ha asignado un identificador CVE para facilitar su seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062832.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29794","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43317","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062832.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2787","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the last_message parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en out.php de OpenDocMan versión 1.2.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro last_message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30750","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3948","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/avisos/s21sec-044-en.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493390/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29765","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020300","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43135","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/avisos/s21sec-044-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493390/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2788","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de OpenDocMan 1.2.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro redirection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30750","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1975163&group_id=69505&atid=524753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1975163&group_id=69505&atid=524753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2789","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo pages/index.php de BASIC-CMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro page_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:basic-cms:*:*:*:*:*:*:*:*","matchCriteriaId":"F20DDA1A-7166-4379-AC76-DB23A1450B67"}]}]}],"references":[{"url":"http://packetstormsecurity.org/1002-exploits/basiccms-sqlxss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29771","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43140","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5836","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/1002-exploits/basiccms-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2790","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.php de MountainGrafix easyTrade versiones 2.x permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mountaingrafix:easytrade:2.x:*:*:*:*:*:*:*","matchCriteriaId":"D66FAF51-7F04-4FF3-89E3-F9F83C49D90D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30673","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://shop.mountaingrafix.at/media/patches/etv_patch_2_3_2.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29775","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43152","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://shop.mountaingrafix.at/media/patches/etv_patch_2_3_2.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2791","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product.detail.php de Kalptaru Infotech Comparison Engine Power Script versión 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptaru_infotech:comparison_engine_power_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"002E02B0-365E-49D1-8663-D05A5F3C55CD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30729","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29768","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43138","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2792","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de eroCMS versión 1.4 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erocms:erocms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"BA076913-FD89-4B2D-AE92-8389B85C50E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/30723","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29781","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43157","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2793","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en group_posts.php de ClipShare versiones anteriores a la 3.0.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro tid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clip-share:clipshare:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"050E6DAA-4EA7-46F9-AEA2-1EBA308B9A58"}]}]}],"references":[{"url":"http://secunia.com/advisories/28313","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29779","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43142","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2794","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el GUI de Symantec Altiris Notification Server Agent versiones 6.x anteriores a 6.0 SP3 R8 permite a usuarios locales obtener mayores privilegios mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"68AF67FB-5FC8-4EAA-AF09-35D4740B967F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:*:sp1:*:*:*:*:*","matchCriteriaId":"214688D3-0653-4FDD-89C3-25E62BA050F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"0C13D2DE-7EA0-4963-BA60-5D01E037D954"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"8D085BB2-1012-4386-AEE9-31870673BF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*","matchCriteriaId":"5E187D85-9F75-4749-9682-29F66D919E12"}]}]}],"references":[{"url":"http://secunia.com/advisories/30741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.06.17.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29708","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020304","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1861/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43154","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.06.17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1861/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2795","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) or a ..\\ (dot dot backslash) in a response to a LIST command."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en los clientes FTP y SFTP de IDM Computer Solutions Inc UltraEdit versión 14.00b permite a servidores FTP remotos crear o sobreescribir ficheros de su elección mediante el uso de caracteres .. (punto punto) o ..\\ (punto punto barra invertida) en una respuesta al comando LIST."}],"vendorComments":[{"organization":"UltraEdit","comment":"This issue was resolved and patched on 6/10/2008.","lastModified":"2012-03-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idm_computer_solutions_inc:ultraedit:14.00b:*:*:*:*:*:*:*","matchCriteriaId":"29FEC619-63D0-42C6-8121-20779E84EB22"}]}]}],"references":[{"url":"http://secunia.com/advisories/30749","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://vuln.sg/ultraedit1400b-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29784","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1864/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43149","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://vuln.sg/ultraedit1400b-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1864/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2796","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de FreeCMS versión 0.2 permite a atacantes remotos  ejecutar comandos SQL de su elección a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freecms.us:freecms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E25143D5-7862-4FBC-9ED0-442DB5CC9439"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3973","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29773","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43141","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5838","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2797","sourceIdentifier":"cve@mitre.org","published":"2008-06-20T11:48:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP graph.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MainLayout.do de ManageEngine OpUtils versión 5.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro hostName, cuando se visualiza un gráfico SNMP. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:oputils:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C7F484A-4B4E-432B-82C9-DB976F5BDC62"}]}]}],"references":[{"url":"http://secunia.com/advisories/30745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29785","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2798","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the layout engine."},{"lang":"es","value":"Múltiples vulnerabilidades en Mozilla Firefox anterior a 2.0.0.15, Thunderbird 2.0.0.14 y anteriores y SeaMonkey anterior 1.1.10, permite a atacantes  remotos provocar una denegación de servicio (caída de aplicación) y posiblemente la ejecución de código de su elección a través vectores no especificados en relación al motor de diseño."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"562A1FB2-9C22-42B4-AA0A-1D19CA72CEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-21.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=378027","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=391178","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430814","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10087","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-21.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=378027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=391178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2799","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en versiones de Mozilla Firefox anteriores a la 2.0.0.15, Thunderbird 2.0.0.14 y anteriores, y SeaMonkey anteriores a la 1.1.10, que permiten a los atacantes remotos causar una denegación de servicios (caída de la aplicación) y posiblemente ejecutar arbitrariamente código a través de vectores desconocidos relativos a JavaScript Engine"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"562A1FB2-9C22-42B4-AA0A-1D19CA72CEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-21.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=356378","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380833","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=418128","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431409","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10743","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-21.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=356378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=418128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2800","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest."},{"lang":"es","value":"Mozilla Firefox anteriores a 2.0.0.15 y SeaMonkey anterior a 1.1.10, permite a atacantes remotos saltar el Same Origin Policy y conducir un ataque de secuencias de comandos en sitios cruzados a través de vectores que involucran (1) un gestor de evento adjuntado a una ventana experna, (2) un elemento SCRIPT en un documento eliminado de memoria o (3) el gestor onreadystatechange en conjunción con una XMLHttpRequest.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-22.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=428672","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=432591","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=433328","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=439035","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=440308","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9386","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-22.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=428672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=432591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=433328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=439035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=440308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2801","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files."},{"lang":"es","value":"Mozilla Firefox anterior a 2.0.0.15 y SeaMonkey anterior a 1.1.10, no implementan de forma correcta las firmas JAR, esto permite a atacantes remotos ejecutar código de su elección mediante (1) la inyección de JavaScript en documentos con un archivo JAR o (2) un archivo JAR que utilizan URLs relativas para los ficheros JavaSrcipt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-23.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=418996","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=424188","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=424426","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11810","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=418996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=424188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=424426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2802","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's \"privilege level.\""},{"lang":"es","value":"Mozilla Firefox y versiones anteriores a 2.0.0.15, Thunderbird 2.0.0.14 y anteriores, y SeaMonkey y anteriores a 1.1.10 permiten a los atacantes remotos ejecutar código arbitrario a través de un documento XUL que incluye una secuencia de comandos desde un chrome: URI que apunta a un archivo de carga rápida, relacionado con el nivel de permisos de este fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"562A1FB2-9C22-42B4-AA0A-1D19CA72CEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-24.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419846","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11121","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-24.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2803","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons."},{"lang":"es","value":"La función mozIJSSubScriptLoader.LoadScript en Mozilla Firefox anteriores a 2.0.0.15, Thunderbird 2.0.0.14 y anteriores, y SeaMonkey anteriores a 1.1.10no aplican XPCNativeWrappers\r\na las secuencias de comandos cargadas desde (1) file: URIs, (2) data: URIs, o (3) certain non-canonical chrome: URIs, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores que implican accesorios de terceros.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"562A1FB2-9C22-42B4-AA0A-1D19CA72CEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-25.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=418356","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=418356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2805","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range."},{"lang":"es","value":"Mozilla Firefox anterior a 2.0.0.15 y SeaMonkey anterior a 1.1.10 , permiten a atacantes remotos forzar la subida de ficheros locales desde un ordenador cliente, mediante los vectores que incluyen originalTarget y DOM Range."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-27.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=423541","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10143","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-27.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=423541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2806","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect."},{"lang":"es","value":"Mozilla Firefox anterior a v2.0.0.15 y SeaMonkey anterior a v1.1.10 sobre Mac OS X, permite a atacantes remotos evitar la misma política de origen y crear conexiones con socket de su elección  a través de un applet Java manipulado, relacionado con el Java Embedding Plugin (JEP) y Java LiveConnect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-28.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408329","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-28.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=408329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2807","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file."},{"lang":"es","value":"Mozilla Firefox y versiones anteriores a la 2.0.0.15 y SeaMonkey y versiones anteriores a la 1.1.10 que no gestionan correctamente una propiedad inválida de un fichero para un complemento, el cual permite a los atacantes remotos leer memorias no inicializadas, como demuestra el cifrado ISO 8859 en lugar del cifrado UTF-8 en un propiedad francesa del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-29.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=397093","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50656","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9432","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-29.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=397093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2808","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename."},{"lang":"es","value":"Mozilla Firefox anterior a 2.0.0.15 y SeaMonkey anterior a 1.1.10 no escapan correctamente el HTML en listados de directorios file:// URLs, lo que permite a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) o tener otros impactos no especificados mediante un nombre de archivo modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:advanced_workstation_for_the_itanium_processor:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3D34CFC7-5112-45FA-A550-07C1174819CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6C8CB34E-02FE-4F90-9642-B56D3B3ACEF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2AB2579A-2BC9-4E16-9641-248222301660"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5_server:*:*:*:*:*:*:*","matchCriteriaId":"4089D3E3-C845-46F4-B4FC-8556D025704E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_2.1:*:*:*:*:*:*:*","matchCriteriaId":"BF3EAB41-5B36-4D27-B319-17687D89868E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*","matchCriteriaId":"421C0021-66EB-4F4C-9D79-6366A4702CC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*","matchCriteriaId":"F23BD8DF-6E8E-4DF2-A700-8E050D967547"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_2.1:*:*:*:*:*:*:*","matchCriteriaId":"627D828A-A35B-4072-AFBA-1D26C68506F6"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*","matchCriteriaId":"5B0FE33D-756C-449F-B54C-8677C9AD002D"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*","matchCriteriaId":"6BF1F027-C9FF-4583-AB40-E0B757F9EE41"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_2.1:*:*:*:*:*:*:*","matchCriteriaId":"4DB10F52-FF81-4297-A4D3-D3298273D894"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_3:*:*:*:*:*:*:*","matchCriteriaId":"6EA8914F-DB6D-4C21-A727-8B94BE0424BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*","matchCriteriaId":"B18EBE6E-482D-435D-851C-73EC301F0A26"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5_client:*:*:*:*:*:*:*","matchCriteriaId":"7C1E0CDD-78D0-4156-8572-6D430EF5499E"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_workstation:5_client:*:*:*:*:*:*:*","matchCriteriaId":"043A85D0-7F3E-4EC9-9065-3F996B9A0A94"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:*:lts_amd64:*:*:*:*:*","matchCriteriaId":"3107F20F-386F-4BF0-814F-4D7CAF0A2CBA"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:*:lts_i386:*:*:*:*:*","matchCriteriaId":"C027333C-8364-407A-B6D6-7B328C384632"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:*:lts_powerpc:*:*:*:*:*","matchCriteriaId":"B608D1D1-F05D-4F1B-BDED-A47EEC0E37FE"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:*:lts_sparc:*:*:*:*:*","matchCriteriaId":"64E79B04-2A84-4A5D-90F3-D4F02FDBA09D"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:amd64:*:*:*:*:*","matchCriteriaId":"7BD79C43-2615-47DE-A100-D21482D866F4"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:i386:*:*:*:*:*","matchCriteriaId":"1856594D-7D84-4830-A8A7-2C9D4C2D61FD"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:powerpc:*:*:*:*:*","matchCriteriaId":"0B20DDF0-2FAB-4EB0-B62D-2351514B2808"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.04:*:sparc:*:*:*:*:*","matchCriteriaId":"B7748895-CE00-4BB8-BFCD-A5559BA15869"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:amd64:*:*:*:*:*","matchCriteriaId":"FB928CC9-0BC3-4AE1-B20B-A58A4C4AAE24"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:i386:*:*:*:*:*","matchCriteriaId":"BB850565-A800-44A6-945E-CB235531C5DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:lpia:*:*:*:*:*","matchCriteriaId":"A1BB8BDA-3F7A-408F-97FC-CBE422A09CCA"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:powerpc:*:*:*:*:*","matchCriteriaId":"3F37A796-E028-4247-A5E6-66B89A583F87"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:sparc:*:*:*:*:*","matchCriteriaId":"61DA44B7-FE1A-4452-843E-EAF1404B86F3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-30.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=411433","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9668","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-30.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=411433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2809","sourceIdentifier":"secalert@redhat.com","published":"2008-07-08T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site."},{"lang":"es","value":"Mozilla 1.9 M8 y anteriores, Mozilla Firefox 2 y anteriores a 2.0.0.15, SeaMonkey 1.1.5 y otras versiones anteriores a 1.1.10, Netscape 9.0, y otras navegadores basados en Mozilla, cuando un usuario aceptar un certificado SSL de servidor sobre las bases del nombre de dominio CN en el campo DN, considerando que el certificado es también aceptado por todos los nombres de dominio en el campo subjectAltName:dNSName, el cual hace más fácil a los atacantes remotos engañar a un usuario aceptando un certificado no válido para una página web falsa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:geckb:*:m8:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"1AE6FF40-5C89-47F1-928C-7BC7DB7A57F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.9","matchCriteriaId":"B0E9314D-0D23-4572-9956-D2E8B53540B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE436EA-9F65-4B62-A11D-B102F5E5E9FC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://nils.toedtmann.net/pub/subjectAltName.txt","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3498","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1018979","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-31.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/483929/100/100/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/483937/100/100/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/483960/100/100/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=240261","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=327181","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=402347","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43524","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10205","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nils.toedtmann.net/pub/subjectAltName.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483929/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483937/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483960/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=240261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=327181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=402347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2810","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut."},{"lang":"es","value":"Mozilla Firefox anterior a 2.0.0.15 y SeaMonkey anterior a 1.1.10, no identifican correctamente el contexto de los ficheros de acceso de directo de Windows, esto permite a atacantes remotos con la ayuda del usuario evitar el Same Origin Policy mediante un sitio Web manipulado en el que el usuario haya guardado previamente un acceso directo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-32.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=410156","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9593","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-32.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=410156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2811","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines."},{"lang":"es","value":"La implemetación del bloque \"reflow\" en Mozilla Firefox anterior a v2.0.0.15, Thunderbird 2.0.0.14 y anteriores y SeaMonkey anterior a v1.1.10, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen cuyo tamaño muestra más píxels  que los indicados en nscoord_MAX, relacionado con nsBlockFrame::DrainOverflowLines."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"90648428-F390-47CC-9B6E-C2A2187649CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"E6878D0B-AB39-40F7-836A-98BEECBE6CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.14","matchCriteriaId":"562A1FB2-9C22-42B4-AA0A-1D19CA72CEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30878","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30898","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30903","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31008","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31076","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31253","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31286","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31403","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/607267","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-33.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30038","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020419","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=439735","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9865","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0616.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.384911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.410484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/607267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-33.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-619-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-629-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1993/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=439735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00295.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2812","sourceIdentifier":"secalert@redhat.com","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/."},{"lang":"es","value":"El núcleo de Linux anterior a 2.6.25.10, no realiza de forma adecuada las operaciones tty, esto permite a usuarios locales provocar una denegación de servicio (caída del sistema) o posiblemente obtener privilegios mediante vectores que contienen referencias a puntero NULO en los punteros a funciones en (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, y (8) wireless/strip.c en drivers/net/."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.25.10","matchCriteriaId":"AFC9ED30-C7E9-498C-8936-4F59CF69C0CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"44320836-E2DE-4A1C-9820-AFFA087FF7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"15E235E9-EC31-4F3F-80F7-981C720FF353"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","matchCriteriaId":"73143989-598B-499C-A6EB-53CE5EB1C1D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:expanded_meet-me_conferencing:*:*:*:*:*:*:*:*","matchCriteriaId":"D49128AC-48BC-4815-8AB8-2689D9D3EB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix_lx:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96733234-88DB-45EB-ACFC-1BCA21BC89E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:meeting_exchange:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDC2D26E-86AE-4FA1-8CBF-A775F1B240AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:message_networking:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E871348D-8FA1-4C77-BB8E-BECF9CF2FFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90E377-B821-4508-B1AB-B10F47975E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:proactive_contact:4.0:*:*:*:*:*:*:*","matchCriteriaId":"51C4F426-8D57-4DC8-AE52-2AEE80A57BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:-:*:*:*:*:*:*:*","matchCriteriaId":"DB636851-8ED1-463C-BC6C-108E4F08F60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BFF25B3-B7C7-479C-8C2A-995E568C3395"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f329dce788","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30982","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31048","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31202","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31229","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31341","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31685","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32103","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32370","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33201","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0612.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0665.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30076","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2063/references","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43687","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f329dce788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0612.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0665.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2063/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2813","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de WallCity-Server Shoutcast Admin Panel 2.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoutcastadmin:wallcity-server_shoutcast_admin_panel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"552A794F-7CAD-4D71-BAC5-9FFCD89E3D5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30678","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43109","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2814","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WallCity-Server Shoutcast Admin Panel 2.0; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro username de la interfaz de registro. NOTA: se desconoce el origen de esta información; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoutcastadmin:wallcity-server_shoutcast_admin_panel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"552A794F-7CAD-4D71-BAC5-9FFCD89E3D5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30678","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43108","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2815","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en shopping/index.php en MyMarket 1.72, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mymarket:mymarket:1.72:*:*:*:*:*:*:*","matchCriteriaId":"21A99CED-9B1C-4774-A731-8C10CC89C666"}]}]}],"references":[{"url":"http://secunia.com/advisories/30692","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29754","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43117","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5832","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2816","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arbitrary SQL commands via the repquote parameter in a reply action, a different vector than CVE-2006-1572."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en post.php de Oxygen (también conocido como O2PHP Bulletin Board) 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro repquote en una acción reply, un vector distinto a CVE-2006-1572."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:o2php:oxygen:2.0:*:*:*:*:*:*:*","matchCriteriaId":"74F0589B-C1A5-4920-B930-FC1BE88C50DC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29729","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5828","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2817","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en albums.php de NiTrO Web Gallery y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro CatIf en una acción \"Show\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nitropowered:nitro_web_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"BF589E9B-DBEB-4E78-B1E8-4E3482D2DB35"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29753","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43100","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5830","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2818","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the section parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Easy-Clanpage 3.0 b1; permite a atacantes remotos incluir y ejecutar los ficheros locales de su elección a través de un .. (punto punto) en la sección del parámetro de la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-clanpage:easy-clanpage:3.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"B7E3D49E-A16F-446F-9623-1E7BCA2E3065"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43073","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5801","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2819","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in BlognPlus (BURO GUN +) 2.5.4 and earlier MySQL and PostgreSQL editions allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en BlognPlus (BURO GUN +) 2.5.4 y anteriores, ediciones MySQL y PostgreSQL; permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blognplus:blognplus:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.4","matchCriteriaId":"777ACD38-227E-45EC-AE48-28501310EDF7"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN14072646/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blogn.org/index.php?e=170","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29764","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43136","source":"cve@mitre.org"},{"url":"http://jvn.jp/jp/JVN14072646/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blogn.org/index.php?e=170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2820","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en lang/lang-system.php en Open Azimyt CMS 0.22 minimal y 0.21 stable; permite a atacantes remotos incluir y ejecutar los ficheros locales de su elección mediante un .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:azimyt:open_azimyt_cms:0.21_stable:*:*:*:*:*:*:*","matchCriteriaId":"4090CFDF-5115-45F7-9D44-DA94B3F55AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:azimyt:open_azimyt_cms:0.22_minimal:*:*:*:*:*:*:*","matchCriteriaId":"62953869-EF3C-45A9-AD67-6780F95E94A5"}]}]}],"references":[{"url":"http://open-azimyt-cms.googlecode.com/files/security_patch.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30691","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3955","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493377/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29756","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43102","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5831","source":"cve@mitre.org"},{"url":"http://open-azimyt-cms.googlecode.com/files/security_patch.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493377/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2821","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el Cliente FTP para Windows de Glub Tech Secure FTP  anterior a 2..5.16, permite a los servidores FTP remotos crear o sobreescribir ficheros de su elección a través de una secuencia \"..\\\" en respuesta a un comando LIST. Relacionada con el CVE-2002-1345."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glub:secure_ftp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.15","matchCriteriaId":"23D3DF3D-6A50-409A-847F-331283482AAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/glubsecureftp2515-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29741","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1852/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43093","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/glubsecureftp2515-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1852/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2822","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a (1) LIST or (2) MLSD command."},{"lang":"es","value":"Múltiples vulnerabilidad de salto de directorio en el cliente FTP de 3D-FTP Client 8.01 (8.0 build 1); permiten a servidores FTP remotos crear o sobrescribir ficheros de su elección mediante un .. (punto punto) en una respuesta a un comando (1) LIST o (2) MLSD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3dftp:3d-ftp_client:8.01:*:*:*:*:*:*:*","matchCriteriaId":"7E7BDABC-9E54-4907-B693-E4C3E2D83D02"}]}]}],"references":[{"url":"http://secunia.com/advisories/30651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/3dftp801-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.3dftp.com/3dftp_versions.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29749","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1853/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43095","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/3dftp801-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.3dftp.com/3dftp_versions.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1853/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2823","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en newsarchive.php de PHPeasyblog (anteriormente phpeasynews) 1.13 RC2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro post."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeasynews:phpeasyblog:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.13","matchCriteriaId":"51D1FBDA-EF86-469A-BEBE-F27AFE2466A7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43104","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5820","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2824","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el Extensible Interface Platform de Web Services de Xerox WorkCentre 7655, 7665 y 7675; permite a atacantes remotos realizar cambios en la configuración a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:*","matchCriteriaId":"D834AA44-1B04-42B2-9E31-0CF9202679B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7665:*:*:*:*:*:*:*","matchCriteriaId":"6297E5B9-28C5-4F7B-A60C-09287D381EDA"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7675:*:*:*:*:*:*:*","matchCriteriaId":"0C69CB8A-DD99-4C73-A789-FACD73316ADF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29691","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020281","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1831/references","source":"cve@mitre.org"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_006.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43059","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1831/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_006.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2825","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en el servidor web embebido en  Xerox WorkCentre M123, M128, y 133 y WorkCentre Pro 123, 128, y 133, permite a atacantes remotos inyectar secuencias de comansdos web y HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:m123:*:*:*:*:*:*:*","matchCriteriaId":"3810671F-9985-49E1-8706-8439BDE51DCD"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:m123:unknown:pro:*:*:*:*:*","matchCriteriaId":"E6A007EB-D8A0-4391-9C38-CEA878C3C1B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:m128:*:*:*:*:*:*:*","matchCriteriaId":"80270025-8B0E-451B-ACAA-DD30CA8C25AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:m128:unknown:pro:*:*:*:*:*","matchCriteriaId":"7687A27D-54A7-4B68-BE83-A0C077882F33"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:m133:*:*:*:*:*:*:*","matchCriteriaId":"32EFB35D-ED35-4F19-A593-F555DB2D3637"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:m133:unknown:pro:*:*:*:*:*","matchCriteriaId":"624A67F3-8EF4-4BEB-A8D2-3942EBF1FA34"}]}]}],"references":[{"url":"http://secunia.com/advisories/30669","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29689","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020280","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1830/references","source":"cve@mitre.org"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_005.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43061","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1830/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_005.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2826","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure."},{"lang":"es","value":"Desbordamiento de entero en la función sctp_getsockopt_local_addrs_old de net/sctp/socket.c en la funcionalidad Stream Control Transmission Protocol (sctp)(Protocolo de Transmisión del Control de Flujo) en el kernel de Linux anterior a 2.6.25.9 permite a usuarios locales provocar una denegación de servicio (agotamiento de recursos y parada de sistema) mediante vectores que involucran un campo addr_num largo en una estructura de datos sctp_getaddrs_old."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.25.9","matchCriteriaId":"24708D5B-48B0-4910-B69E-5172966E1877"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=735ce972fbc8a65fb17788debd7bbe7b4383cc62","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lwn.net/Articles/287350/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30901","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31628","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32370","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29990","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020514","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2511","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43559","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2629","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=735ce972fbc8a65fb17788debd7bbe7b4383cc62","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lwn.net/Articles/287350/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0585.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-625-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-2827","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452."},{"lang":"es","value":"La función rmtree en lib/File/Path.pm de Perl 5.10 no comprueba correctamente los permisos antes de realizar chmod, lo que permite a usuarios locales modificar los permisos de archivos de su elección mediante un ataque de enlaces simbólicos, una vulnerabilidad distinta a CVE-2005-0448 y CVE-2004-0452."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of perl as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5, Red Hat Application Stack 1, or Solaris versions of Red Hat Directory Server 7.1 and 8, Certificate System 7.x.","lastModified":"2008-06-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10:*:*:*:*:*:*:*","matchCriteriaId":"777EC860-FB16-4B15-A8BE-3EAE9FD8A99D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487319","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://rt.cpan.org/Public/Bug/Display.html?id=36982","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30837","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29902","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43308","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01025.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.cpan.org/Public/Bug/Display.html?id=36982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01025.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2828","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in tmsnc allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an MSN packet with a UBX command containing a large UBX payload length field."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en tmsnc permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un paquete MSN con un comando UBX que contiene un campo de longitud de carga útil UBX larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tmsnc:tmsnc:*:*:*:*:*:*:*:*","matchCriteriaId":"E31DAE84-1CCA-41A6-A8F5-89711A76A298"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-26.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29850","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43297","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2829","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an \"rfc822.c legacy routine buffer overflow\" error message, related to the rfc822_write_address function."},{"lang":"es","value":"El archivo php_imap.c en PHP versiones 5.2.5, 5.2.6, 4.x y otras versiones, utiliza llamadas API obsoletas que permiten a los atacantes dependiendo del contexto causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de una larga petición IMAP, que activa un mensaje de error \"rfc822.c legacy routine buffer overflow\", relacionado con la función rfc822_write_address."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PHP as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.  For more details see:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2829","lastModified":"2008-07-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.9","matchCriteriaId":"7EF8F57D-C1B1-4C58-AC6F-A6068B860D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=42862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/46641","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31200","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/19/6","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/24/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29829","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=221969","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43357","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.php.net/bug.php?id=42862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/46641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/19/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/06/24/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=221969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2830","sourceIdentifier":"cve@mitre.org","published":"2008-06-23T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally demonstrated by an osascript tell command to ARDAgent."},{"lang":"es","value":"Open Scripting Architecture en Mac OS X de Apple versiones 10.4.11 y 10.5.4, y algunas otras versiones 10.4 y 10.5, no restringe apropiadamente la carga de plugins de adición de scripting, lo que permite a los usuarios locales alcanzar privilegios mediante comandos de adición de scripting hacia una aplicación privilegiada, como es originalmente demostrado por un comando osascript tell para ARDAgent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"}]}]}],"references":[{"url":"http://it.slashdot.org/it/08/06/18/1919224.shtml","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Sep/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30776","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29831","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020345","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1905/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43294","source":"cve@mitre.org"},{"url":"http://it.slashdot.org/it/08/06/18/1919224.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008//Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2831","sourceIdentifier":"cve@mitre.org","published":"2008-10-02T18:18:05.680","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the delegated spam management feature in the Spam Quarantine Management (SQM) component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via (1) the list of blocked senders or (2) the list of safe senders."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de commandos en sitios cruzados (XSS) en la delegación de la gestión de spam en función del componente Spam Quarantine Management (SQM) en MailMarshal SMTP v6.0.3.8 hasta v6.3.0.0 permite a usuarios remotos autenticados asistidos por el usuario inyectar web script o HTML de su elección a través de (1) la lista de remitentes bloqueados o (2) la lista de remitentes seguros.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailmarshal:e10000_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"2A934236-5CB5-4813-BB82-993D6E33D8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailmarshal:smtp:*:*:*:*:*:*:*:*","matchCriteriaId":"40CE2241-6798-47E6-BF3C-D1147357C6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailmarshal:smtp:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.0.0","matchCriteriaId":"3A0A5B39-59B3-4265-A2C3-22905FAD578E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailmarshal:smtp:6.0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"657E5DFF-67FF-492F-A5FA-E073E9E3F700"}]}]}],"references":[{"url":"http://secunia.com/advisories/32062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dcsl.ul.ie/marshal.htm","source":"cve@mitre.org"},{"url":"http://www.marshal.com/kb/article.aspx?id=12175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31483","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dcsl.ul.ie/marshal.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.marshal.com/kb/article.aspx?id=12175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2832","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/."},{"lang":"es","value":"Vulnerabilidad de subida de archivo no restringido en calendar_admin.asp de Full Revolution aspWebCalendar 2008 permite a atacantes remotos subir y ejecutar código de su elección a través del parámetro FILE1 en una acción uploadfileprocess, probablemente seguido de una petición directa al fichero de calendar/eventimages/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fullrevolution:aspwebcalendar2008:*:*:*:*:*:*:*:*","matchCriteriaId":"C860A199-01F3-412B-9448-CDF63A682B57"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29795.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29795","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43201","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5850","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29795.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2833","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload and execute arbitrary files in images/, via a nonzero value for the submit0 parameter in conjunction with filenames in the filename and upload parameters."},{"lang":"es","value":"admin/upload.php en le.cms 1.4 y versiones anteriores permite a atacantes remotos evitar la autenticación de administrador y subir y ejecutar ficheros de su elección en /images a través de un valor \"nonzero\" para el parámetro submit0 en relación con el nombre de archivo en los parámetro filename y upload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:worldlevel:le.cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"9D708627-3738-45EF-80D5-1EA50441229C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29867","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29872","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43274","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5887","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2834","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en projects.php de Scientific Image DataBase 0.41 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sidb:scientific_image_database:0.41:*:*:*:*:*:*:*","matchCriteriaId":"E8017666-D91D-4639-9EC4-B81789B2A724"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29862","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43255","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5885","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2835","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL commands via the formid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cgi-bin/igsuite de IGSuite 3.2.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro formid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igsuite:igsuite:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8D2E0630-43EF-4CFB-844C-F361A200F422"}]}]}],"references":[{"url":"http://secunia.com/advisories/30756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29879","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43248","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5898","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2836","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP de send_reminders.php en WebCalendar 1.0.4 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro includedir y un valor 0 del parámetro noSet, un vector diferente que CVE-2007-1483."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:k5n:webcalendar:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6CE3BBF1-7F21-440E-83D0-750F046FFE52"}]}]}],"references":[{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=45EAF486.9080902%40k5n.us&forum_name=webcalendar-announce","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29783","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43156","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5847","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=45EAF486.9080902%40k5n.us&forum_name=webcalendar-announce","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2837","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en  CMS-BRD, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro menuclick."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.brdconcept:cms-brd:*:*:*:*:*:*:*:*","matchCriteriaId":"D1134282-F628-4893-B53D-6C21E161D7FF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43183","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2838","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Traindepor 0.1, permite a atacantes remotos leer ficheros de su elección a través de ..(punto punto) en el parámetro \"module\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:traindepot:traindepot:0.1:*:*:*:*:*:*:*","matchCriteriaId":"8C098060-7CF7-4B8A-8CA6-D5BC2E0FBEC6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29790","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43159","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5848","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2839","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en el módulo de búsqueda de Traindepot 0.1, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"query\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:traindepot:traindepot:0.1:*:*:*:*:*:*:*","matchCriteriaId":"8C098060-7CF7-4B8A-8CA6-D5BC2E0FBEC6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29790","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43160","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5848","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2840","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Exero CMS 1.0.0 and 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter to (1) custompage.php, (2) errors/404.php, (3) members/memberslist.php, (4) members/profile.php, (5) news/fullview.php, (6) news/index.php, (7) nopermission.php, (8) usercp/avatar.php, or (9) usercp/editpassword.php in themes/Default/.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Exero CMS 1.0.0 and 1.0.1 permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro theme de (1) custompage.php, (2) errors/404.php, (3) members/memberslist.php, (4) members/profile.php, (5) news/fullview.php, (6) news/index.php, (7) nopermission.php, (8) usercp/avatar.php, o (9) usercp/editpassword.php de themes/Default/.  \r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exerocms:exero_cms:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"59EFB430-1476-4B95-ADC1-9278C2211711"},{"vulnerable":true,"criteria":"cpe:2.3:a:exerocms:exero_cms:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03C9721C-6574-4819-9D18-1F58CC6AF702"}]}]}],"references":[{"url":"http://secunia.com/advisories/30711","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=607502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29788","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=607502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-2841","sourceIdentifier":"cve@mitre.org","published":"2008-06-24T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en XChat 2.8.7b y versiones anteriores de Windows, cuando Internet Explorer es ejecutado, permite a atacantes remotos ejecutar comandos de su elección a través del parámetro --command en una URI ircs://."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of XChat as shipped with Red Hat Enterprise Linux.","lastModified":"2008-07-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.7b","matchCriteriaId":"C4CA9E47-EEFB-4484-B4E3-B3E06DEE71F6"}]}]}],"references":[{"url":"http://forum.xchat.org/viewtopic.php?t=4218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30695","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29696","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43065","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5795","source":"cve@mitre.org"},{"url":"http://forum.xchat.org/viewtopic.php?t=4218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2842","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers to inject arbitrary web script or HTML via the FILE parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) del archivo edit/showmedia.asp del programa doITLive CMS 2.5 y anteriores, que permiten a atacantes remotos injectar arbitrariamente secuencia de comandos web o código HTML a través del archivo de parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:doitlive:cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.50","matchCriteriaId":"CCE35991-2B67-42F0-8D96-50AB3DFE15EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/43","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29789","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43164","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/43","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2843","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter in an USUB action to default.asp and the (2) Licence[SpecialLicenseNumber] (aka LicenceId) cookie to edit/default.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en doITLive CMS 2.50 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) ID en una ación USUB a default.asp y el (2) Licence[SpecialLicenseNumber] (también conocido como LicenceId) cookie to edit/default.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:doitlive:cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.50","matchCriteriaId":"CCE35991-2B67-42F0-8D96-50AB3DFE15EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/43","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29789","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43161","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43163","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/?/43","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2844","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Carscripts Classifieds; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carscripts:carscripts_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"9EC80839-2D5C-4E15-A13D-2452821E650F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29803","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43170","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2845","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MyBizz-Classifieds, permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybizz-classifieds:mybizz-classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"7E4FBA87-0AE0-41B4-98D1-CB92D775BC45"}]}]}],"references":[{"url":"http://secunia.com/advisories/30724","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43195","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5854","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2846","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL commands via the type parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en BoatScripts Classifieds, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boatscripts:boatscripts_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"951A1E50-5AC8-47BB-A874-DB79E4B26924"}]}]}],"references":[{"url":"http://secunia.com/advisories/30743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29801","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43182","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2847","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL commands via the categori parameter in a pocategorisell action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Trade de Maxtrade AIO 1.3.23; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro categori en una acción pocategorisell para modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softdivision:maxtrade_aoi:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"6BBF29A3-9C17-4EB7-90A9-82DFC0DF091D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43203","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5853","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2848","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la funcionalidad de búsqueda en MindTouch DekiWiki anterior a 8.05.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mindtouch:dekiwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"8.05","matchCriteriaId":"D98FF20B-F9B5-4DB9-9356-28DB776FB50E"}]}]}],"references":[{"url":"http://bugs.developer.mindtouch.com/view.php?id=4200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29830","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43189","source":"cve@mitre.org"},{"url":"http://bugs.developer.mindtouch.com/view.php?id=4200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2849","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote authenticated users, with create post permissions, to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo TrailScout 5.x anterior a 5.x-1.4 para Drupal, permite a usuarios autenticados remotamente con permisos de publicación, inyectar secuencias de comando web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:trailscout_module:5:*:*:*:*:*:*:*","matchCriteriaId":"F630F274-3952-4DB7-80F7-5A53B87B57CF"}]}]}],"references":[{"url":"http://drupal.org/node/272191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29807","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43168","source":"cve@mitre.org"},{"url":"http://drupal.org/node/272191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2850","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified cookies, related to improper use of the Drupal database API."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo TrailScout 5.x anterior 5.x-1.4 para Drupal, permite a atacantes remotos ejecutar comandos SQL de su elección a través de cookies no especificadas, relacionada con un uso no apropiado del API de base de datos para Drupal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:trailscout_module:5.x:*:*:*:*:*:*:*","matchCriteriaId":"4CF11D0D-DD2C-448E-BA74-1C3E60FCEA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:trailscout_module:5.x_1.0:*:*:*:*:*:*:*","matchCriteriaId":"DEFB9A88-4F20-4E21-A52C-26B45CA291AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:trailscout_module:5.x_1.1:*:*:*:*:*:*:*","matchCriteriaId":"AD8328EC-270A-4B2F-846A-8C8139DD3D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:trailscout_module:5.x_1.2:*:*:*:*:*:*:*","matchCriteriaId":"F7A9D914-B515-4BA5-B1D1-1F35736AB1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:trailscout_module:5.x_1.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC6FDD4-ADF3-4013-A41B-3F4E2BB0F8AC"}]}]}],"references":[{"url":"http://drupal.org/node/272191","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29807","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43169","source":"cve@mitre.org"},{"url":"http://drupal.org/node/272191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2851","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to \"parsing of http headers.\""},{"lang":"es","value":"Múltiple desbordamiento de búfer en Sistemas OFF anteriores a la versión 0.19.14. Permite a los atacantes remotos tener un impacto desconocido a través de vectores no especificados relacionados con \"analizadores sintácticos de cabeceras http\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"AE9F6882-5BE4-4EB6-B782-2FB6F0ADB59C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.i:*:*:*:*:*:*:*","matchCriteriaId":"656E6BB3-A802-4704-85AD-73C9697AF6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.j:*:*:*:*:*:*:*","matchCriteriaId":"145A6EE3-7996-4E6F-AC23-C77B03943764"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.k:*:*:*:*:*:*:*","matchCriteriaId":"9E729EA6-3C7B-4F79-8369-6EE22FE13052"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.l:*:*:*:*:*:*:*","matchCriteriaId":"45B9F035-3439-4CEB-8F66-6247ACE57DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.m:*:*:*:*:*:*:*","matchCriteriaId":"40189DA9-117B-4821-88E9-14C613B5A8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.n:*:*:*:*:*:*:*","matchCriteriaId":"4948798F-431A-4566-8D1B-2A0CAC2A754C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.o:*:*:*:*:*:*:*","matchCriteriaId":"A9D06139-B866-40A8-82D2-DFF2648E6788"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.p:*:*:*:*:*:*:*","matchCriteriaId":"818B5076-BFC9-4BE2-B857-B7646ACE360C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.10.15.q:*:*:*:*:*:*:*","matchCriteriaId":"B55974F4-B8E5-4A98-AF49-0A0C3B37E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.11.00:*:*:*:*:*:*:*","matchCriteriaId":"AE1F1331-EAD4-40A9-B2EF-262CB87CB22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.11.01:*:*:*:*:*:*:*","matchCriteriaId":"FA4D143F-81E2-4D34-B635-9E0C14C85330"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.00:*:*:*:*:*:*:*","matchCriteriaId":"83568F3A-1B7E-479D-9106-E7CD164EB934"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.01:*:*:*:*:*:*:*","matchCriteriaId":"03C9AF66-85D5-469B-AD49-8A3D15A6B2FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.02:*:*:*:*:*:*:*","matchCriteriaId":"EC6AC659-01FD-4969-A0C9-E3CC84BAD417"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.03:*:*:*:*:*:*:*","matchCriteriaId":"1A0C89DF-1881-4DE5-8246-E68442149939"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.04:*:*:*:*:*:*:*","matchCriteriaId":"033BC839-7FB7-4D26-B4AF-31BF28490999"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.05:*:*:*:*:*:*:*","matchCriteriaId":"1EF6E6E8-7662-4CDB-8CD0-0B3DF4DADAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.06:*:*:*:*:*:*:*","matchCriteriaId":"15004AD0-B717-4E4E-B7BB-A2E7E3D140BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.07:*:*:*:*:*:*:*","matchCriteriaId":"2385C77B-0EDE-4AFE-96B6-4DA64718584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.08:*:*:*:*:*:*:*","matchCriteriaId":"7D49DABA-A041-44F2-B34A-945A2ED4E74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.09:*:*:*:*:*:*:*","matchCriteriaId":"02A6F3BC-35FD-42B4-86A9-7EB8A225E19B"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"D186D20F-82F5-4FD4-BC4B-209A8962984B"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.12.11:*:*:*:*:*:*:*","matchCriteriaId":"28FFD158-6F91-4E64-8520-184E54903037"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.13.00:*:*:*:*:*:*:*","matchCriteriaId":"6E58201A-AF18-41EC-8C7A-358CF9234DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.13.01:*:*:*:*:*:*:*","matchCriteriaId":"C15843B2-C19E-402C-A6EC-E3C01144771F"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.13.02:*:*:*:*:*:*:*","matchCriteriaId":"E7FB50C7-0ADE-4795-82FE-6638D5012340"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.13.03:*:*:*:*:*:*:*","matchCriteriaId":"FD13B379-5A50-4357-95C6-34EDE5471A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.13.04:*:*:*:*:*:*:*","matchCriteriaId":"F45DF7F3-CD35-4091-A962-BC56666A47FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.00:*:*:*:*:*:*:*","matchCriteriaId":"4B4E9676-5F2C-48C9-BD77-4EC163204B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.01:*:*:*:*:*:*:*","matchCriteriaId":"79453488-995D-4A1D-968C-46B589B4628C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.02:*:*:*:*:*:*:*","matchCriteriaId":"87DACA15-8724-48E4-AF69-43BAE72E09C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.03:*:*:*:*:*:*:*","matchCriteriaId":"5F5623E0-683B-4374-9200-374597BDF616"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.04:*:*:*:*:*:*:*","matchCriteriaId":"CBB7BB4E-62A2-4C3A-90A2-1673D228CFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.05:*:*:*:*:*:*:*","matchCriteriaId":"2477E611-28D9-4D65-8C6D-60F4525DD32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.06:*:*:*:*:*:*:*","matchCriteriaId":"3D01A687-8F8C-4C42-9397-1260F85D0B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.07:*:*:*:*:*:*:*","matchCriteriaId":"C911A28B-E6CB-40F9-979F-AEB34CB6622A"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.14.08:*:*:*:*:*:*:*","matchCriteriaId":"04DA48FF-0A6B-4F03-83F0-E49391D1059C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.00:*:*:*:*:*:*:*","matchCriteriaId":"F61D6E33-01DB-45AE-9201-A9D92E37CC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.01:*:*:*:*:*:*:*","matchCriteriaId":"6FC1CF68-4ED1-4F06-A501-2C2B777D2492"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.02:*:*:*:*:*:*:*","matchCriteriaId":"36AC480E-5197-444A-82EA-898244B95927"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.03:*:*:*:*:*:*:*","matchCriteriaId":"35CC51D7-6DC3-4412-B233-9F0E0FBC1174"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.04:*:*:*:*:*:*:*","matchCriteriaId":"81229F2B-3265-4EFD-A043-5F4CF8856D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.05:*:*:*:*:*:*:*","matchCriteriaId":"7AA71FD1-C642-4E34-93D6-89704098F52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.06:*:*:*:*:*:*:*","matchCriteriaId":"89417D1F-74BE-45EE-A0BB-F208A8693C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.07:*:*:*:*:*:*:*","matchCriteriaId":"2034F7DF-68BE-489B-82E9-045F66D51D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.08:*:*:*:*:*:*:*","matchCriteriaId":"F9C98AF4-A8DD-4343-A26C-1B1B1A9259B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.09:*:*:*:*:*:*:*","matchCriteriaId":"96EF08C7-AB57-4EA6-A250-002A48F1D0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"5403B206-6F73-425F-AD21-1A578C9F42E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.00:*:*:*:*:*:*:*","matchCriteriaId":"5071A2CC-5258-49A3-9820-DFBF3BAB71C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.01:*:*:*:*:*:*:*","matchCriteriaId":"946BEEA4-55DF-4773-A62F-5FBDCBAA2CDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.02:*:*:*:*:*:*:*","matchCriteriaId":"64FAC373-5A0E-4F7D-A3E0-1744F1D52F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.03:*:*:*:*:*:*:*","matchCriteriaId":"D5236873-FDF4-4921-B26D-259095568927"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.04:*:*:*:*:*:*:*","matchCriteriaId":"DDFCAF10-7878-42E2-BDED-C64DA79B3900"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.05:*:*:*:*:*:*:*","matchCriteriaId":"94B68B49-62CB-48DE-B5FD-9058E4F486D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.06:*:*:*:*:*:*:*","matchCriteriaId":"0A7EF0D1-8BE6-4865-A24A-C4DDB796B354"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.07:*:*:*:*:*:*:*","matchCriteriaId":"4FB297BF-5031-4127-BD00-E83AB25E617C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.08:*:*:*:*:*:*:*","matchCriteriaId":"387A5E0E-083C-4AE8-BD73-486B32A015ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.09:*:*:*:*:*:*:*","matchCriteriaId":"4472848F-CD55-4CF0-87EB-7BD375EC9E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.10:*:*:*:*:*:*:*","matchCriteriaId":"9E765154-329C-4570-80E1-FE7EAFB99C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.11:*:*:*:*:*:*:*","matchCriteriaId":"123B79B6-8E55-41EA-B7EF-B307E6C787B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.12:*:*:*:*:*:*:*","matchCriteriaId":"D4D88AD9-C55B-46D1-8FDD-AEA949BA1DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.16.13:*:*:*:*:*:*:*","matchCriteriaId":"D8ECA3CF-DB60-4BCF-87A1-FD19099B1610"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.00:*:*:*:*:*:*:*","matchCriteriaId":"04BCEF7D-4DD7-4E0D-B2F2-0BEE6E84ADBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.01:*:*:*:*:*:*:*","matchCriteriaId":"0538DF06-DCC0-4488-9F7E-BD79720940F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.02:*:*:*:*:*:*:*","matchCriteriaId":"813FE3A1-378B-467B-9193-E002E26A6056"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.03:*:*:*:*:*:*:*","matchCriteriaId":"7AD1B708-4636-4745-947B-9D0FC24CD4E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.04:*:*:*:*:*:*:*","matchCriteriaId":"C501505D-DD7D-4244-B04E-AFDB3C4D319C"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.05:*:*:*:*:*:*:*","matchCriteriaId":"2ED1E2B2-741F-414C-87E0-9C27E6AB51B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.06:*:*:*:*:*:*:*","matchCriteriaId":"476C4122-F7DC-400E-8815-AE34898CDED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.07:*:*:*:*:*:*:*","matchCriteriaId":"7CD17912-5BC4-4DC9-A1C8-2CE032D37BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.08:*:*:*:*:*:*:*","matchCriteriaId":"7410FE54-58B1-4305-8146-998EC8F2D5F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.09:*:*:*:*:*:*:*","matchCriteriaId":"B4809D82-30CB-414C-A1CF-A2A598B96111"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.10:*:*:*:*:*:*:*","matchCriteriaId":"83CFBBB2-2B5A-430F-B6BF-FE4A00B22787"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.11:*:*:*:*:*:*:*","matchCriteriaId":"5F9D9EEC-5D1C-42FB-A837-7D44EBE10E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.12:*:*:*:*:*:*:*","matchCriteriaId":"16D4C4CB-004D-4190-9ABD-E0E48ED3138E"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.17.13:*:*:*:*:*:*:*","matchCriteriaId":"F0382FC5-EB34-45FF-8DF6-905C939A4337"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.00:*:*:*:*:*:*:*","matchCriteriaId":"32AF90E8-BC60-443D-B121-59CE2BCD7B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.01:*:*:*:*:*:*:*","matchCriteriaId":"0E2F196C-B677-4F5C-A182-71732A90AF87"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.02:*:*:*:*:*:*:*","matchCriteriaId":"08F48DBE-FFAD-46D0-865D-7EF30240D142"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.03:*:*:*:*:*:*:*","matchCriteriaId":"A142347F-33E5-4C14-BC0D-414EAFE348B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.04:*:*:*:*:*:*:*","matchCriteriaId":"05C36531-6682-4500-8931-B4BB2362BD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.05:*:*:*:*:*:*:*","matchCriteriaId":"4CC2F86D-3E73-44B0-AA72-237E434223EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.06:*:*:*:*:*:*:*","matchCriteriaId":"9B038E7E-4914-4630-8348-F6483D18154B"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.07:*:*:*:*:*:*:*","matchCriteriaId":"17AF7886-E22F-45C0-8118-A6CAC463FC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.08:*:*:*:*:*:*:*","matchCriteriaId":"EEE5E799-512C-4AED-9089-42FD928842DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.09:*:*:*:*:*:*:*","matchCriteriaId":"FAD80B86-ED00-484C-BC33-1313087FDA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.10:*:*:*:*:*:*:*","matchCriteriaId":"DE4AD884-88A1-44EC-AAEF-2E74EBBE3E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.11:*:*:*:*:*:*:*","matchCriteriaId":"AF8504BB-AD9E-48F8-888F-AE786E1A5931"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.12:*:*:*:*:*:*:*","matchCriteriaId":"4F2D615A-EBCE-4134-B566-F2E4B971851F"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.13:*:*:*:*:*:*:*","matchCriteriaId":"8E47CD4D-13ED-4140-A4DD-DDF2D9A1647A"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.14:*:*:*:*:*:*:*","matchCriteriaId":"F6F100B4-1C64-448A-9FD1-BC4A0771EB53"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.15:*:*:*:*:*:*:*","matchCriteriaId":"FC2AA749-DA39-4DD2-98A4-B8D96EF8599B"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.16:*:*:*:*:*:*:*","matchCriteriaId":"F2C7DE23-4F9A-41D6-9F6F-C78CC880C779"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.17:*:*:*:*:*:*:*","matchCriteriaId":"8B8B68B2-4973-44C3-AEFD-9AE70F4F13AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.18:*:*:*:*:*:*:*","matchCriteriaId":"D2C35761-231B-4BE5-86B5-1E51C5A8390E"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.18.19:*:*:*:*:*:*:*","matchCriteriaId":"0D219395-8195-47D4-AFD0-DB84D20C5355"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.00:*:*:*:*:*:*:*","matchCriteriaId":"DB9BD6A8-DB5A-4F5D-A2E3-ACC3FA705EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.01:*:*:*:*:*:*:*","matchCriteriaId":"A7279EFD-E1F8-4C96-AEFE-1E967D076F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.02:*:*:*:*:*:*:*","matchCriteriaId":"1386D830-A208-4F3F-8525-DF114CD5FACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.03:*:*:*:*:*:*:*","matchCriteriaId":"0AA34517-705A-4F0A-B337-7FFA84F475F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.04:*:*:*:*:*:*:*","matchCriteriaId":"D2974EBB-01C5-448F-B04E-0B8E8F4A67F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.05:*:*:*:*:*:*:*","matchCriteriaId":"EE85287C-E03A-43C5-938E-371C3B4EF021"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.06:*:*:*:*:*:*:*","matchCriteriaId":"4018CF0C-7E9F-4ADE-9DE1-BC48B5B0428D"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.07:*:*:*:*:*:*:*","matchCriteriaId":"42792273-A739-4809-9B65-A4095C4D51AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.08:*:*:*:*:*:*:*","matchCriteriaId":"D94150AE-6BB7-459E-9176-A8B55766808E"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.09:*:*:*:*:*:*:*","matchCriteriaId":"37BF20C4-6DF3-4CE4-A6E4-A69CFCAA83F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.10:*:*:*:*:*:*:*","matchCriteriaId":"68B563B4-3055-495C-9DED-CB9E954ABCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.11:*:*:*:*:*:*:*","matchCriteriaId":"42AFA94A-B0C5-4CBA-BD9A-53E6DF6CC264"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.12:*:*:*:*:*:*:*","matchCriteriaId":"FD22D282-AE1C-4A6B-9172-C832C95F675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:offsystem:offsystem:0.19.13:*:*:*:*:*:*:*","matchCriteriaId":"402842A3-2CA7-41F6-95A8-10E989DBEE07"}]}]}],"references":[{"url":"http://secunia.com/advisories/30759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=607827","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29809","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43187","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=607827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2852","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en CGIWrap anterior a la 4.1, cuando se usa un navegador basado en Internet Explorer, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de vectores no especificados relacionados con un fallo a la hora de establecer el conjunto de caracteres en los mensajes de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D350D018-07DF-41BD-8358-B7FEE42D04D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.6:*:*:*:*:*:*:*","matchCriteriaId":"19D94994-FDE9-47FF-A247-0AF138828C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCD73F47-CCA9-4E21-B631-CFB532D7816A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6E64BEE1-0F96-41A2-8AD7-4889EFABF098"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"00F89A6C-FA37-4BCA-B67D-C0CADC7470DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"894D89D7-966C-4709-BE5C-21C0CEC31D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"A860C7A8-D4BE-43D8-9BD0-039C5CE494BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:3.7:*:*:*:*:*:*:*","matchCriteriaId":"4A2CD755-9727-4762-ADE2-74B67DEFB52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6FFCFA04-FE7C-4DB0-911A-2CD7B61C2625"}]}]}],"references":[{"url":"http://cgiwrap.sourceforge.net/changes.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN45389864/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=8209&release_id=607349","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29811","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43176","source":"cve@mitre.org"},{"url":"http://cgiwrap.sourceforge.net/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN45389864/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=8209&release_id=607349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2853","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_path parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Easy Webstore 1.2; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_webstore:easy_webstore:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9A4C022A-87CA-4F05-B03A-2D6954912A0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29806","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43194","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5855","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2854","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] parameter to (1) modules/core/logger/init.php and (2) AJAX/newscat.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Orlando CMS 0.6; permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro GLOBALS[preloc] de (1) modules/core/logger/init.php y (2) AJAX/newscat.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orlando_cms:orlando_cms:0.6:*:*:*:*:*:*:*","matchCriteriaId":"DDC9CCD5-C0C9-4C5C-88BD-979B1543FCE3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43181","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5864","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2855","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en clanek.php en OwnRS Beta 3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ownrs:ownrs:beta_3:*:*:*:*:*:*:*","matchCriteriaId":"4B0DBC04-E3F5-4635-8CAB-BC09436195B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29818","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43186","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2856","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en clanek.php en OwnRS Beta 3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ownrs:ownrs:beta_3:*:*:*:*:*:*:*","matchCriteriaId":"4B0DBC04-E3F5-4635-8CAB-BC09436195B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29818","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43185","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2857","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"AlstraSoft AskMe Pro 2.1 y versiones anteriores almacena las contraseñas en texto sin cifrar en una base de datos MySQL, lo que permite a los atacantes dependientes de contexto obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:askme:*:*:pro:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"89CA395E-55E9-49F4-8678-9E173ED3A1E8"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5821","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2858","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the eml parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en WebChamado 1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro eml. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webchamado:webchamado:1.1:*:*:*:*:*:*:*","matchCriteriaId":"586A618D-615F-4892-9611-C3DF2499E542"}]}]}],"references":[{"url":"http://secunia.com/advisories/30690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2859","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an \"imap command.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el servicio de IMAP en NetWin SurgeMail anterior a 3.9g2; permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante vectores desconocidos relacionados con un \"comando imap\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.9g","matchCriteriaId":"D180C666-C5E6-44C9-B61C-1C7ECFB38F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8a:*:*:*:*:*:*:*","matchCriteriaId":"12FCF5D0-3E98-48E4-840C-5DD47A893AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8b:*:*:*:*:*:*:*","matchCriteriaId":"6B2E8CA7-DAF6-4C30-8ED1-9FA6D4A660D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8d:*:*:*:*:*:*:*","matchCriteriaId":"1C384BC3-603B-4409-B473-F3213D05DB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f:*:*:*:*:*:*:*","matchCriteriaId":"C81E2733-0791-4D5E-990F-B40859EEA7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f2:*:*:*:*:*:*:*","matchCriteriaId":"F1CE77D8-ADB3-4A3E-9D79-4F9739F7549A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:*","matchCriteriaId":"50C06B4F-1DEC-4622-B060-184762418112"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:*","matchCriteriaId":"19390313-1B1C-4388-AA3B-1A470416FADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:*","matchCriteriaId":"EB1FD0B1-DEE5-4765-9538-FBA20E8B1559"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:*","matchCriteriaId":"30495DFC-EC4F-4449-851A-3358C9BCBF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k:*:*:*:*:*:*:*","matchCriteriaId":"1C4BE37B-BA86-4B1D-A1B6-B5910F61171D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k2:*:*:*:*:*:*:*","matchCriteriaId":"DAF32266-AB58-4215-B7FF-CC882835EE79"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k3:*:*:*:*:*:*:*","matchCriteriaId":"A437EB1A-2E12-4AAB-8817-57D17C2E21E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8k4:*:*:*:*:*:*:*","matchCriteriaId":"2AAB36A8-0F51-4424-B6BA-F1A29C759717"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8m:*:*:*:*:*:*:*","matchCriteriaId":"25C21957-FA45-4FCE-AFFE-4A0E1345CFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8o:*:*:*:*:*:*:*","matchCriteriaId":"5F1108C3-E6C1-42F2-8A49-A4DEFB5C4DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8q:*:*:*:*:*:*:*","matchCriteriaId":"2C96445D-DC59-494C-BA42-09A342F39252"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8s:*:*:*:*:*:*:*","matchCriteriaId":"CC095432-C4C3-4566-8DBC-8513D47778AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.8u:*:*:*:*:*:*:*","matchCriteriaId":"970DDF6C-2DDB-44C6-89F7-22314102C4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.9a:*:*:*:*:*:*:*","matchCriteriaId":"5558770D-276A-4136-BB50-C2B6CB8C4AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.9c:*:*:*:*:*:*:*","matchCriteriaId":"DFF5ADB9-B57C-4668-A654-29DAE75792CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.9e:*:*:*:*:*:*:*","matchCriteriaId":"3B7F09A9-9719-47C2-8021-853F699A7553"}]}]}],"references":[{"url":"http://secunia.com/advisories/30739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29805","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020335","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1874/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43171","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1874/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2860","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en AJSquare AJ Auction Pro web 2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cate_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:web_2.0:*:pro:*:*:*:*:*","matchCriteriaId":"B41F858F-E47F-4EEE-99C0-2CFDF9F18292"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29839","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43218","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5867","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2861","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en eLineStudio Site Composer (ESC) 2.6 y anteriores; permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante los parámetros (1) topic y (2) button de ansFAQ.asp y los parámetros (3) id y (4) txtEmail de login.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"F0FD8D51-A4F6-464D-93E3-1EA6C2C50A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:elinestudio:site_composer:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3623BB8-EB16-4DD2-8DA7-02947FA1DB4F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3957","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43191","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5859","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2862","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en eLineStudio Site Composer (ESC) 2.6 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) id al ansFAQ.asp y (2) template_id a preview.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"F0FD8D51-A4F6-464D-93E3-1EA6C2C50A45"}]}]}],"references":[{"url":"http://osvdb.org/46461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3957","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/45","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43190","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5859","source":"cve@mitre.org"},{"url":"http://osvdb.org/46461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/45","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2863","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en eLineStudio Site Composer (ESC)2.6 y anteriores, permite a atacantes remotos crear directorios de su elección a través de un nombre completo de ruta en el parámetro inpCurrFolder a (1) folderdel_.asp o (2) foldernew.asp en cms/assetmanager/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"F0FD8D51-A4F6-464D-93E3-1EA6C2C50A45"}]}]}],"references":[{"url":"http://secunia.com/advisories/30762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3957","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/45","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43193","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5859","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/45","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2864","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path."},{"lang":"es","value":"eLineStudio Site Composer (ESC) 2.6 y versiones anteriores permite a los atacantes remotos obtener información sensible a través de petición directa a (1) trigger.asp o (2) common2.asp en cms/include/, el cual revela la ruta de la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"F0FD8D51-A4F6-464D-93E3-1EA6C2C50A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:elinestudio:site_composer:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3623BB8-EB16-4DD2-8DA7-02947FA1DB4F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3957","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/45","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43192","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5859","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/45","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493473/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2865","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a show_article action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Kalptaru Infotech PHP Site Lock 2.0; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro articleid en una acción show_article."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptaru_infotech:php_site_lock:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D7A7C5E-77E1-46FE-B14A-AFCFF46A3372"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29777","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43147","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2866","sourceIdentifier":"cve@mitre.org","published":"2008-06-25T12:36:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticle[ID] parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en csc_article_details.php in Caupo.net CaupoShop Classic 1.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro saArticle[ID]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caupo.net:cauposhop_classic:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E8474A35-B901-433C-948D-95516954AB38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29834","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43200","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5865","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2867","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en adclick.php de E-topbiz Viral DX 1 2.07 permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro bannerid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:viral_dx_1:2.07:*:*:*:*:*:*:*","matchCriteriaId":"94676588-18EA-4996-A08D-03E7F1FD3AEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29921","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1922/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43342","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1922/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2868","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the iEve parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.asp de DUware DUcalendar 1.0 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro iEve."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duware:ducalendar:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"5AA62451-3C48-4615-A9A3-DB8C3755B8A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29919","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020358","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1924","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43325","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5927","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2869","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en out.php de E-topbiz Link ADS 1 permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro linkid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:link_ads_1:*:*:*:*:*:*:*:*","matchCriteriaId":"E60BA6EE-4D16-4FA8-A55D-26D3947C9653"}]}]}],"references":[{"url":"http://secunia.com/advisories/30798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29923","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1921/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43343","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5930","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1921/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2870","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID parameter to event_info.php and the (2) userID parameter to list_user.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ShareCMS 0.1 Beta, permiten a atacantes remotos ejecutar comandos SQL arbitrariamente a través de los parámetros (1) eventID de event_info.php y (2) userID de list_user.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sharecms:sharecms:0.1:beta:*:*:*:*:*:*","matchCriteriaId":"CE3E1887-7220-4794-8310-38E4B429052C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29916","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1925/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43318","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5925","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1925/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2871","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or HTML via the (1) sitetitle, (2) sitenav, (3) sitemain, and (4) sitealt parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en template2.php de PEGames permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) sitetitle, (2) sitenav, (3) sitemain y (4) sitealt. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pegames:pegames:*:*:*:*:*:*:*:*","matchCriteriaId":"5C2577C0-1B0E-4DCA-93DA-4965F2F80597"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29865","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43314","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2872","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp in sHibby sHop 2.2 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro sayfa.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:shibby_shop:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"90DA28E1-7C85-40BA-B901-6911B1A51D5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29875","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43295","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5895","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2873","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb."},{"lang":"es","value":"sHibby sHop 2.2 y versiones anteriores, almacena información sensible bajo la raíz web con controles de acceso insuficientes, lo cual permite a atacantes remotos descargarse una base de datos a través de una petición directa a Db/urun.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:shibby_shop:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"90DA28E1-7C85-40BA-B901-6911B1A51D5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43296","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5895","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2874","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Softbiz Jokes & Funny Pics Script, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro sbjoke_id, un vector diferente del CVE-2008-1050."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbizscripts:softbiz_jokes_and_funny_pics_script:*:*:*:*:*:*:*:*","matchCriteriaId":"73F2CF51-35C2-40BF-ACAF-6EF337D83C64"}]}]}],"references":[{"url":"http://secunia.com/advisories/30810","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29931","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1951/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43359","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5934","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1951/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2875","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL commands via the hal parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Webdevindo-CMS 1.0.0; permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro hal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdevindo-cms:webdevindo-cms:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20D7D7C5-2CC4-41A1-B552-6C9F4C099DD5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29930","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1949/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43361","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1949/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2876","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the zone parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de mUnky 0.0.1; permite a atacantes remotos incluir y ejecutar ficheros locales mediante un .. (punto punto) en el parámetro zone."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:munky:munky:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B20B0F1-A3E2-42F4-85E6-3806BAA97D3D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/495503","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500380/30/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29934","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30705","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1950/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43360","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5933","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500380/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1950/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2877","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mod_root parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en admin/include/lib.module.php de cmsWorks 2.2 RC4, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mod_root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsworks:cmsworks:2.2:rc4:*:*:*:*:*:*","matchCriteriaId":"0BF23DDA-82F9-47FF-A780-2A39CF7DFB51"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29911","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43310","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5921","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2878","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en rss_getfile.php de Academic Web Tools (AWT YEKTA) 1.4.3.1 y 1.4.2.8 y anteriores; permite a atacantes remotos redireccionar a los usuarios a sitios Web de su elección y provocar ataques de phishing mediante una URL en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.8","matchCriteriaId":"FF4A47D5-5588-4758-91DA-A95FCDD6D4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3.1","matchCriteriaId":"7DB27F56-F120-4673-8E20-DAAB30E7245D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3959","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/44","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/44","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2879","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu."},{"lang":"es","value":"Benja CMS 0.1 no solicita autenticación para acceder a admin/, esto permite a atacantes remotos añadir o borrar un menú."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjacms:benja_cms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B643AC-E982-4175-9FD9-7D581DB21F3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3958","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493568/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29884","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493568/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-2880","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el IBM AFP Viewer Plug-in 2.0.7.1 y 3.2.1.1, permite a atacantes remotos ejecutar código de su elección mediante  un valor largo de la propiedad SRC. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afp_viewer_plug-in:2.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5C6BB276-AEE9-4191-A41F-F4022927C83B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afp_viewer_plug-in:3.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8F97464E-1C7D-4FA5-8F09-1DA96C14676A"}]}]}],"references":[{"url":"http://secunia.com/advisories/27995","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1946/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43338","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1946/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2881","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"Relative Real Estate Systems 3.0 y anteriores, guarda las contraseñas en texto claro (texto sin cifrar) en una base de datos MySQL; esto permite a atacantes dependientes del contacto obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:relative_real_estate_systems:relative_real_estate_systems:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"84E6E980-3B4C-4A4B-9F4D-D7AB888F57DE"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=101","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5924","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2882","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request."},{"lang":"es","value":"upgrade.asp de sHibby sHop 2.2 y anteriores, no requiere la autenticación del administrador; esto permite a atacantes remotos actualizar un fichero o tener otros impactos no especificados mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:shibby_shop:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"90DA28E1-7C85-40BA-B901-6911B1A51D5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3962","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43296","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5895","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2883","sourceIdentifier":"cve@mitre.org","published":"2008-06-26T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en include/plugins/jrBrowser/payment.php de Jamroom 3.3.0 hasta 3.3.5, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro jamroom[jm_dir]. NOTA: algunos de estos detalles han sido obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F953D-8D25-4395-8A86-4E2DD5B2399F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA61EDF9-CF08-407E-861E-98BF3B752834"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A406E79C-13CF-48A3-943E-0AACC8050411"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B97B0CB1-E4D7-4210-933B-AD114EFF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C10A858B-6771-4E23-9E93-CCA37F21089E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.jamroom.net/","source":"cve@mitre.org"},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.jamroom.net/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2884","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en display.php de RSS-aggregator permite a atacantes remotos ejecutar código PHP arbitrario mediante un URL en el parámetro path. NOTA: algunos de estos detalles se ha obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rss_aggregator:rss_aggregator:*:*:*:*:*:*:*:*","matchCriteriaId":"2B23701A-5E69-4C93-8255-70744988DFB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493650/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43283","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493650/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2885","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in src/browser/resource/categories/resource_categories_view.php in Open Digital Assets Repository System (ODARS) 1.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CLASSES_ROOT parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en src/browser/resource/categories/resource_categories_view.php de Open Digital Assets Repository System (ODARS) 1.0.2, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP arbitrario mediante un URL el el parámetro CLASSES_ROOT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:odars:odars:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6F8DE7E5-F801-4C68-9E7C-A02F02A2DED0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29881","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43285","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5906","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2886","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en include/plugins/jrBrowser/purchase.php de Jamroom de 3.3.0 a 3.3.5, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP arbitrario mediante un URL en el parámetro jamroom[jm_dir]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F953D-8D25-4395-8A86-4E2DD5B2399F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA61EDF9-CF08-407E-861E-98BF3B752834"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A406E79C-13CF-48A3-943E-0AACC8050411"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B97B0CB1-E4D7-4210-933B-AD114EFF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C10A858B-6771-4E23-9E93-CCA37F21089E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3961","source":"cve@mitre.org"},{"url":"http://www.jamroom.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29854","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43299","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jamroom.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2887","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de chaozz@work FubarForum 1.5 permite a atacantes remotos incluir y ejecutar archivos locales mediante .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chaozzatwork:fubarforum:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F466A05A-A706-4E5C-9417-27D978E171CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29847","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43228","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2888","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[application][app_root] parameter to (1) collection.class.php and (2) content_image.class.php in lib/obj/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivo PHP remoto en MiGCMS 2.0.5, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP arbitrario en el parámetro GLOBALS[application][app_root] a (1) collection.class.php y (2) content_image.class.php en lib/obj/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:migcms:migcms:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"57EBB5E8-E1B6-4314-8F37-5B827380DEB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29874","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43250","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2889","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el cliente FTP en AceBIT WISE-FTP 4.1.0 y 5.5.8 permite a servidores FTP remotos crear o sobrescribir archivos arbitrarios mediante ..\\ (punto punto barra invertida) en una respuesta a un comando LIST, un problema relacionado con CVE-2002-1345."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wise-ftp:wise-ftp:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA87A68F-F67A-4A0B-BC6D-B0DD9E4817EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wise-ftp:wise-ftp:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"FF8BF683-D173-42E7-AC99-A3D37AFC8C91"}]}]}],"references":[{"url":"http://secunia.com/advisories/30663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30788","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/wiseftp558-en.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29844","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1898/references","source":"cve@mitre.org"},{"url":"http://www.wise-ftp.com/news/index.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/wiseftp558-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1898/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wise-ftp.com/news/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-2890","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fflteam_id parameter to teams.php, the (2) league_id parameter to leagues.php, and the (3) player_id parameter to players.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Online Fantasy Football League (OFFL) 0.2.6 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante los parámetros 1) fflteam_id a teams.php, (2) league_id a leagues.php y (3) player_id a players.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:offl:online_fantasy_football_league:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D22EED3A-C0C1-4D79-96C1-4B554291D8CD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30795","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3960","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29861","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43259","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2891","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a category action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en eMuSOFT emuCMS 0.3 permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro cat_id en una acción category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emusoft:emucms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"9BF9BAC1-821C-4912-A470-697D19049813"}]}]}],"references":[{"url":"http://secunia.com/advisories/30804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29855","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43269","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2892","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente EXP Shop (com_expshop) 1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro catid en una acción show_payment a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:feellove:exp_shop_component:1.0:*:*:*:*:*:*:*","matchCriteriaId":"217885F8-7E03-4BD1-B80E-5D7C92D05E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_expshop:*:*:*:*:*:*:*:*","matchCriteriaId":"866BD4EB-19DF-4E53-924E-B02DEC1F7C69"}]}]}],"references":[{"url":"http://secunia.com/advisories/30791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43246","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5893","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2893","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php de AJ Square aj-hyip (también conocido como AJ HYIP Acme) permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro id, un vector distinto al de CVE-2008-2532."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajhyip:aj_square_aj-hyip:*:*:*:*:*:*:*:*","matchCriteriaId":"03FD3920-68B1-45C3-9D74-D5C3D23025B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30794","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29863","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43247","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5890","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2894","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el cliente FTP de NCH Software Classic FTP 1.02 para Windows permite a servidores FTP remotos crear o sobrescribir archivos arbitrarios mediante .. (punto punto) en una respuesta a un comando LIST, un problema relacionado con CVE-2002-1345."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nch_software:nch_software_classic_ftp:1.02:*:windows:*:*:*:*:*","matchCriteriaId":"948EB252-3CBF-4B82-8EAE-412A1A68857C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30708","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/classicftp102-en.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29846","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1899/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43230","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/classicftp102-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1899/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2895","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerbailidad de salto de directorio en index.php de AproxEngine 5.1.0.4 permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios mediante .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprox:aproxengine:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B66DE67F-45C1-4077-9473-DA6C74528898"}]}]}],"references":[{"url":"http://secunia.com/advisories/30800","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43245","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5884","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2896","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de FireAnt 1.3 permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios mediante .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getfireant:fireant:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D0320AFB-0E5B-42A4-B75B-7BB7ED3D6D2B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29843","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43229","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2897","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de PageSquid CMS 0.3 Beta permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagesquid:pagesquid_cms:0.3:beta:*:*:*:*:*:*","matchCriteriaId":"979FC585-9A6C-4BDA-8ECF-C532AE8DA404"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29870","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43252","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2898","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the c_temp_path parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/header.php de Hedgehog-CMS 1.21 permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios meidante .. (punto punto) en el parámetro c_temp_path. NOTA: en algunos entornos, esto se puede accionar para inclusión de archivos remotos utilizando un nombre de ruta UNC compartido o un URL ftp, ftps, o ssh2.sftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hedgehog-cms:hedgehog-cms:1.21:*:*:*:*:*:*:*","matchCriteriaId":"E158FCBB-C939-4668-B9AB-D1F4E76AF181"}]}]}],"references":[{"url":"http://osvdb.org/46480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43277","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5904","source":"cve@mitre.org"},{"url":"http://osvdb.org/46480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2899","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in includes/classes/page.php in j00lean-CMS 1.03 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en includes/classes/page.php de j00lean-CMS 1.03 tiene impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:j00lean-cms:j00lean-cms:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A5517F97-54B4-4D33-A004-F596FFF28418"}]}]}],"references":[{"url":"http://secunia.com/advisories/30703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=608171","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29885","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=608171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2900","sourceIdentifier":"cve@mitre.org","published":"2008-06-27T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en item.php de PHPAuction 3.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauction:phpauction:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F6DE37F-D3CB-4241-98BE-CE147D2A28D5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29864","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43262","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2901","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Haudenschilt Family Connections CMS (FCMS) 1.4 permiten a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del (1) parámetro address de addressbook.php, el (2) parámetro getnews de familynews.php, y el (3) parámetro poll_id de home.php in en una acción results."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"8C009F6D-C0CB-4CE9-9B0A-9532167FBAB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30680","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29722","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43097","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2902","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en profile.php de AlstraSoft AskMe Pro 2.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id. NOTA: el parámetro que_id a forum_answer.php ya está cubierto por CVE-2007-4085."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:askme_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"A9E4F1A0-7C90-4AB2-B165-B22D846A04AE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30672","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43106","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2903","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo news.php del programa Advanced Webhost Billing System (AWBS) desde la versión 2.3.3 hasta la versión 2.7.1, donde magic_quotes_gpc está deshabilitado. Permite  a los atacantes remotos ejecutar comandos SQL a través de parámetros viewnews"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awbs:advanced_webhost_billing_system:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1A7B6E58-1E7C-47E4-8C32-10435DC396E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:awbs:advanced_webhost_billing_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"72142FBA-29ED-469E-9F12-CB0287E0E371"},{"vulnerable":true,"criteria":"cpe:2.3:a:awbs:advanced_webhost_billing_system:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"2DE91FA9-B746-4C40-A308-FC3283F46F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7:*:*:*:*:*:*:*","matchCriteriaId":"570E875F-AF26-4D66-9825-34EC49572890"},{"vulnerable":true,"criteria":"cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5A88DBD0-9EEA-4784-9B6B-CBB4475DD265"}]}]}],"references":[{"url":"http://secunia.com/advisories/30646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29721","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43110","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2904","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en shop.php de Conkurent PHPMyCart permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmycart:phpmycart:*:*:*:*:*:*:*:*","matchCriteriaId":"44352863-7E72-4FAB-992F-70D183FD10B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29726","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43084","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2905","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto en PHP en includes/Cache/Lite/Output.php en el paquete Cache_Lite de Mambo 4.6.4 y anteriores, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro mosConfig_absolute_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"BDF610B9-1105-4C37-B93E-4677311747F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5:*:*:*:*:*:*:*","matchCriteriaId":"EBF4585E-26D9-434D-998C-AD4F0E2FB91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"17E99D52-609D-4631-AC22-70B07229D887"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"729C14E1-B56D-49E1-81F6-5FA9B4FDC477"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1_1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EAFE201B-A40F-4387-B855-5176A828BA58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"6FE228E6-B001-40C9-85D7-24F8A7C14A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"10120ED3-B42C-4A62-879E-E92FC3F29E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.1a:*:*:*:*:*:*:*","matchCriteriaId":"85B95AF0-CDD3-41FB-B343-46A69E909F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68EE93EF-D273-4DEC-A85C-76290FEE40A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3AC21C1E-131A-4366-8741-7BE7594B6F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"993587DE-DA24-4D52-B190-AB236327D687"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"16ED2979-BB01-44E7-A0A3-D1B7F550F538"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.3h:*:*:*:*:*:*:*","matchCriteriaId":"2E4E3399-C743-4664-A55A-77BF543CBD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E70B2D3E-8F55-45C6-8220-6A5CA6FD06D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49269426-5FA7-4CF1-AF64-BEC97A09E7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"863BE900-E43A-4E0E-BB25-A7403305F4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE971092-FF34-4F5C-A088-82914D46CE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"953A9204-E94E-4756-A687-FBE781ACE158"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2C7E14F4-A0E9-4014-8C3E-E6DCF3393D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.6:*:*:*:*:*:*:*","matchCriteriaId":"8AADCB00-A39A-4AFE-9376-C1FD853215DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3351C3BC-0EDC-4347-9E40-75AAED7A4ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"11907D85-965F-4855-9647-C135E7610C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"476629C5-A427-460B-A076-77714F79C410"}]}]}],"references":[{"url":"http://secunia.com/advisories/30685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29716","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020295","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43101","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5808","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2906","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tsk_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lista_anexos.php de WebChamado 1.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro tsk_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webchamado:webchamado:1.1:*:*:*:*:*:*:*","matchCriteriaId":"586A618D-615F-4892-9611-C3DF2499E542"}]}]}],"references":[{"url":"http://secunia.com/advisories/30690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29711","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43069","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5802","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2907","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo admin/index.php del programa WebChamado 1.1, donde magic_quotes_gpc está deshabilitado, permitiendo a los atacantes remotos ejecutar comandos SQL arbitrariamente a través del parametro eml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webchamado:webchamado:1.1:*:*:*:*:*:*:*","matchCriteriaId":"586A618D-615F-4892-9611-C3DF2499E542"}]}]}],"references":[{"url":"http://secunia.com/advisories/30690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43060","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5798","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2908","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en un determinado control ActiveX de ienipp.ocx en Novell iPrint Client para Windows versiones anteriores a 4.36 permiten a atacantes remotos ejecutar código de su elección a través un valor largo de los parámetros (1) operation, (2) printer-url, o (3) target-frame.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:*:*:windows:*:*:*:*:*","versionEndIncluding":"4.35","matchCriteriaId":"4F724145-E6F3-47C1-BB70-412D993CE70A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30709","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028061.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/145313","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020303","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1837/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/145313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1837/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2909","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo results.php del programa Clever Copy 3.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro searchtype."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clever_copy:clever_copy:3.0:*:*:*:*:*:*:*","matchCriteriaId":"11BE426F-A466-4089-A74E-681FC14BECE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29694","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020294","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43064","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2910","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX DXTTextOutEffect (alias Text-Effect DXT Filter), distribuido en el archivo TextOut.dll 6.0.18.1 y mvtextout.dll, en muvee autoProducer 6.0 y 6.1 permite a los atacantes remotos ejecutar código arbitrario a través del valor largo de la propiedad FontSetting"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:muvee:autoproducer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"11F0EAFF-0809-4543-AD4F-19692EB534E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:muvee:autoproducer:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7A77E419-20AD-41D2-8516-BDF828C9EDA1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43036","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5793","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2911","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) contenido, (2) Belang, and (3) username parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php de Contenido 4.8.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros 1) contenido, (2) Belang y (3) username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:contenido:contendio:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"CBB8E270-D27F-44B7-872B-4EC988B1F04A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30683","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29719","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43107","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2912","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenido_path parameter to (a) contenido/backend_search.php; the (2) cfg[path][contenido] parameter to (b) move_articles.php, (c) move_old_stats.php, (d) optimize_database.php, (e) run_newsletter_job.php, (f) send_reminder.php, (g) session_cleanup.php, and (h) setfrontenduserstate.php in contenido/cronjobs/, and (i) includes/include.newsletter_jobs_subnav.php and (j) plugins/content_allocation/includes/include.right_top.php in contenido/; the (3) cfg[path][templates] parameter to (k) includes/include.newsletter_jobs_subnav.php and (l) plugins/content_allocation/includes/include.right_top.php in contenido/; and the (4) cfg[templates][right_top_blank] parameter to (m) plugins/content_allocation/includes/include.right_top.php and (n) contenido/includes/include.newsletter_jobs_subnav.php in contenido/, different vectors than CVE-2006-5380."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos remotos PHP en Contenido CMS versión 4.8.4, permiten a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el (1) parámetro contenido_path en (a) el archivo contenido/backend_search.php; el (2) parámetro cfg[path][contenido] en los archivos (b) move_articles.php, (c) move_old_stats.php, (d) optimize_database.php, (e) run_newsletter_job.php, (f) send_reminder.php, (g) session_cleanup.php, y (h) setfrontenduserstate.php en contenido/cronjobs/, y los archivos (i) includes/include.newsletter_jobs_subnav.php y (j) plugins/content_allocation/includes/include.right_top.php en contenido/; el (3) parámetro cfg[path][templates] en los archivos (k) includes/include.newsletter_jobs_subnav.php y (l) plugins/content_allocation/includes/include.right_top.php en contenido/; y (4) parámetro cfg[templates][right_top_blank] en los archivos (m) plugins/content_allocation/includes/include.right_top.php y (n) contenido/includes/include.newsletter_jobs_subnav.php en contenido/, vectores diferentes de CVE-2006-5380."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:contenido:contenido_cms:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A68359AE-00EF-42F2-92DA-109E44EE649A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30683","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29719","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43103","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2913","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the currentpath parameter, in conjunction with certain ... (triple dot) and ..... sequences in the currentfile parameter, to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en func.php de Devalcms 1.4a, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro currentpath, junto a ciertas secuencias ... (triple punto) y .... en el parámetro currentfile a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*","matchCriteriaId":"115E1869-2151-48E0-89CA-ADF197BF5A05"}]}]}],"references":[{"url":"http://secunia.com/advisories/30585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43116","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2914","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jobseekers/JobSearch3.php (también conocido como el módulo de búsqueda) de PHP JOBWEBSITE PRO permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) kw or (2) position. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:php_jobwebsite_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"7E54F204-0CB9-4D12-9975-76216D95039D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493374/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29713","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43092","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5807","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493374/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2915","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the (1) position or (2) kw parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en jobseekers/JobSearch.php (también conocido como el módulo de búsqueda) de Pre Job Board permite  a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) position o (2) kw."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_job_board:*:*:*:*:*:*:*:*","matchCriteriaId":"52E6C466-2719-4187-808D-2434835DAA1F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30684","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29717","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.spanish-hackers.com/vuln/joss-42.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43094","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.spanish-hackers.com/vuln/joss-42.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2916","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to showcategory.php and the (2) id parameter to software-description.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Pre ADS Portal 2.0 y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) cid a showcategory.php y (2) id a software-description.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_ads_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"40928AAF-65CA-400B-AA86-281D45871EAE"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=98","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3963","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493371/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29709","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43071","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5804","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=98","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493371/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2917","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL commands via the category_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en productsofcat.asp de E-SMART CART permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro category_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:e-smart_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"A20622B9-22A6-4AE5-8D46-BE639BDCDCE6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3964","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493372/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29712","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020296","source":"cve@mitre.org"},{"url":"http://www.spanish-hackers.com/vuln/joss-40.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43088","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5805","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493372/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spanish-hackers.com/vuln/joss-40.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2918","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en details.php de Application Dynamics Cartweaver 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro prodId, posiblemente una cuestión relacionada a CVE-2006-2046.3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:application_dynamics:cartweaver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C1EAF72-44A2-4FE7-8669-C76FFECA3167"}]}]}],"references":[{"url":"http://secunia.com/advisories/30677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29727","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43099","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2919","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the sort parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listing.php de Gryphon gllcTS2 4.2.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gryphonllc:gryphon_gllcts2:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4E75DF95-CF29-4BED-84D6-42BA9C80BE8F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30688","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29714","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43089","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2920","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/filemanager/ (aka the File Manager) in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which allows remote attackers to create, modify, read, and delete files."},{"lang":"es","value":"El directorio admin/filemanager/ (alias File Manager) en el programa EZTechhelp EZCMS 1.2 y  versiones anteriores no requiere autenticación, lo que permite a los atacantes remotos crear, modificar, leer, y borrar archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezcms:eztechhelp_ezcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"50B229E6-B1F5-4629-A42F-271C47F72741"}]}]}],"references":[{"url":"http://ezcms.eztechhelp.com/index.php?page=3&nid=27","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29738","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43091","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5819","source":"cve@mitre.org"},{"url":"http://ezcms.eztechhelp.com/index.php?page=3&nid=27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2921","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  index.php de EZTechhelp EZCMS 1.2 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eztechhelp_company:ezcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"EC458F2C-827C-44F6-B6AC-D36D0FB1BD60"},{"vulnerable":true,"criteria":"cpe:2.3:a:eztechhelp_company:ezcms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6316DCC1-08BA-4447-A164-82CF2C9242B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:eztechhelp_company:ezcms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F7237C12-4E49-4CD1-83C3-BACD60ACD44C"}]}]}],"references":[{"url":"http://ezcms.eztechhelp.com/index.php?page=3&nid=27","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29737","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43086","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5819","source":"cve@mitre.org"},{"url":"http://ezcms.eztechhelp.com/index.php?page=3&nid=27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2922","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long IRC message."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en artegic Dana IRC client 1.3 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código de su elección mediante un mensaje IRC largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t0pp8uzz:dana_irc_client:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"D62C5E95-0C56-4EDF-B12C-ABEAAC8A2180"},{"vulnerable":true,"criteria":"cpe:2.3:a:t0pp8uzz:dana_irc_client:1.1:*:*:*:*:*:*:*","matchCriteriaId":"91789E0C-7A5A-4C04-AC9B-11F073DD0806"},{"vulnerable":true,"criteria":"cpe:2.3:a:t0pp8uzz:dana_irc_client:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED8401F-C772-46E7-87C1-5EB8E282B014"}]}]}],"references":[{"url":"http://secunia.com/advisories/30681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29724","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43112","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5817","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2923","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en read/search/results en ListManager de Lyris versiones 8.8, 8.95 y 9.3d, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro words."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:8.8:*:*:*:*:*:*:*","matchCriteriaId":"E66D7B04-03B3-4644-9155-588025BD9D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:8.95:*:*:*:*:*:*:*","matchCriteriaId":"73133FFC-F2D6-44FB-A0EB-B8032BE1E45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:9.3d:*:*:*:*:*:*:*","matchCriteriaId":"70802BED-D998-47D4-B98D-EE10DF540B81"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/71/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/46150","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29761","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020323","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1859/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43122","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/71/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/show/osvdb/46150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1859/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2924","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Webmatic antes de 2.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"C9606636-88CD-4733-9E0C-7D4D75BB11DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.4:*:*:*:*:*:*:*","matchCriteriaId":"18475F61-05B8-4DA7-B3F3-685C79F79472"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E7856DF3-B086-4BC1-B76C-13F62BC802A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6:*:*:*:*:*:*:*","matchCriteriaId":"6BE9F342-9168-44CA-9839-31510005D5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"14149962-A35E-4174-B2B9-163BCCB0EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"262D1DD0-8513-44D4-8615-169E231EE5C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4E07A627-980E-4DE4-8EDF-0C11DACA86F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29748","source":"cve@mitre.org"},{"url":"http://www.valarsoft.com/index.php?page=home&notizie=si&notID=154&singlenot=1&no_home=1#2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.valarsoft.com/index.php?page=home&notizie=si&notID=154&singlenot=1&no_home=1#2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2925","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T18:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Webmatic versiones anteriores a 2.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"C9606636-88CD-4733-9E0C-7D4D75BB11DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.4:*:*:*:*:*:*:*","matchCriteriaId":"18475F61-05B8-4DA7-B3F3-685C79F79472"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E7856DF3-B086-4BC1-B76C-13F62BC802A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6:*:*:*:*:*:*:*","matchCriteriaId":"6BE9F342-9168-44CA-9839-31510005D5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"14149962-A35E-4174-B2B9-163BCCB0EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"262D1DD0-8513-44D4-8615-169E231EE5C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4E07A627-980E-4DE4-8EDF-0C11DACA86F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29748","source":"cve@mitre.org"},{"url":"http://www.valarsoft.com/index.php?page=home&notizie=si&notID=154&singlenot=1&no_home=1#2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.valarsoft.com/index.php?page=home&notizie=si&notID=154&singlenot=1&no_home=1#2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2926","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request."},{"lang":"es","value":"El Controlador kmxfw.sys en el Sistema de prevención de intrusiones basado en Host (Host-Based Intrusion Prevention System) r8 (HIPS-r8), como el utilizado en CA Internet Security Suite and Personal Firewall, no verifica de forma adecuada las peticiones IOCTL, lo que permite a usuarios locales provocar una denegación de servicio (caída del sistema) o posiblemente, obtengan privilegios a través de peticiones manipuladas.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"285013A5-E058-4B2B-B8B6-1BFF72388589"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:host_based_intrusion_prevention_system:r8:*:*:*:*:*:*:*","matchCriteriaId":"051FF92A-292B-4F5F-929C-4F0E654F4B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"0281F80B-CF9C-482D-B7A9-3B2651BD0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:personal_firewall_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"9DFE4A13-0C9A-44A9-B74F-7E87D0F8DE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:personal_firewall_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"853DBC05-6624-43CD-A9E3-65F93B58BB99"}]}]}],"references":[{"url":"http://secunia.com/advisories/31434","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30651","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020658","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020659","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44392","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2927","sourceIdentifier":"secalert@redhat.com","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955."},{"lang":"es","value":"Múltiples desbordamiento de enteros en las funciones msn_slplink_process_msg en el manejador de protocolo MSN en los archivos (1) libpurple/protocols/msn/slplink.c y (2) libpurple/protocols/msnp9/slplink.c en Pidgin anterior a versión 2.4.3 y Adium anterior a versión 1.3, permiten a los atacantes remotos ejecutar código arbitrario por medio de un mensaje SLP malformado con un valor de desplazamiento diseñado, una vulnerabilidad diferente de CVE-2008-2955."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.2","matchCriteriaId":"E488E097-EF23-40A0-AF31-489F318D1405"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.7","matchCriteriaId":"29A4013B-81F3-4AB0-8AB9-0A473A2AAD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0:*:*:*:*:*:*:*","matchCriteriaId":"55D44D7E-116F-488C-8566-F7EA78C847FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E8857D0-14C2-49F6-AE8F-287792895776"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56022448-6CEE-4DE9-BC5D-F3F401470257"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B9D4A6BA-AB30-4EFA-BF5E-9212CBF6B141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B33448B4-31F3-434F-96D4-934D65BF65FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ED8C3F99-1E0C-4FDB-8E76-46CF6CBBA7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A7B851E0-5D86-4D7F-A1AD-903ADA6A2C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6B6DEA45-1C3C-432E-9746-F1C548C8E8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE2A0AA-BD45-4A8B-BB3C-D69BFDC7E363"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6A1C31-EA56-406F-AE65-10F838E4292B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7223E59A-FA39-4D8A-A48D-1ACCF0454703"}]}]}],"references":[{"url":"http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30971","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31016","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31105","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31387","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31642","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32859","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32861","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1610","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:143","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:127","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/6","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/04/1","source":"secalert@redhat.com"},{"url":"http://www.pidgin.im/news/security/?id=25","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0584.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493682","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495165/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495818/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29956","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020451","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-675-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2032/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-054","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=453764","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44774","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2647","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11695","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17972","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495165/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495818/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-675-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2032/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=453764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2928","sourceIdentifier":"secalert@redhat.com","published":"2008-08-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted Accept-Language HTTP header."},{"lang":"es","value":"Múltiples desbordamiento de búfer en la biblioteca adminutil de aplicaciones CGI en Red Hat Directory Server 7.1 anteriores a SP7, permiten a atacantes remotos provocar una denegación de servicio (caída de demonio) o posiblemente ejecución arbitraria de código a través de una cabecera http Accept languaje manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2060B92C-72E4-4FAF-9CB6-C6142F6DDE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*","matchCriteriaId":"7A7C6A16-F928-4682-BCCA-D004FB4781B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*","matchCriteriaId":"374634C4-D913-46B3-AB98-1E3573814E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*","matchCriteriaId":"B58F8C3A-C0F5-400A-823F-F92F71B385EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1F47246B-7393-4F61-88F5-2B8A2211C46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp6:*:*:*:*:*:*","matchCriteriaId":"325755C1-03E1-4947-A5A0-9FEBB0DC4E89"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31565","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31702","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31777","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020771","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30869","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=453916","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44738","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5865","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=453916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2929","sourceIdentifier":"secalert@redhat.com","published":"2008-08-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la biblioteca adminutil del interface web de Directory Server Administration Express y Directory Server Gateway (DSGW) en Red Hat Directory Server 7.1 anteriores al SP7 y 8 EL4 y EL5, y Fedora Directory Server, permite a atacantes remotos inyectar web script o HTML de su elección a través de valores de entrada que utilizan el carácter de escape %."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fedora:directory_server:*:*:*:*:*:*:*:*","matchCriteriaId":"325FCDFC-22D9-447B-9B56-D65A09F780A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2060B92C-72E4-4FAF-9CB6-C6142F6DDE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*","matchCriteriaId":"7A7C6A16-F928-4682-BCCA-D004FB4781B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*","matchCriteriaId":"374634C4-D913-46B3-AB98-1E3573814E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*","matchCriteriaId":"B58F8C3A-C0F5-400A-823F-F92F71B385EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1F47246B-7393-4F61-88F5-2B8A2211C46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp6:*:*:*:*:*:*","matchCriteriaId":"325755C1-03E1-4947-A5A0-9FEBB0DC4E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:el4:*:*:*:*:*:*","matchCriteriaId":"26DC5453-A850-4BC8-A9B2-272F9993FD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*","matchCriteriaId":"B06C0597-0694-4B0F-BD82-19E2C6B63095"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31565","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31612","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31702","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31777","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020772","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30870","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454621","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44737","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5877","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0601.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0601.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2930","sourceIdentifier":"secalert@redhat.com","published":"2008-08-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem."},{"lang":"es","value":"Red Hat Directory Server 7.1 anteriores al SP7, Red Hat Directory Server 8, y Fedora Directory Server 1.1.1 permiten a atacantes remotos provocar una denegación de servicio (consumo de CPU y agotamiento de búsqueda) a través de una petición de búsqueda LDAP manipulada con patrones, relativos a los subsistemas de hilo-simple y expresión-regular."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fedora:directory_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"662D91E0-D891-4B30-B4D1-FA7FFACBF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2060B92C-72E4-4FAF-9CB6-C6142F6DDE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*","matchCriteriaId":"7A7C6A16-F928-4682-BCCA-D004FB4781B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*","matchCriteriaId":"374634C4-D913-46B3-AB98-1E3573814E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*","matchCriteriaId":"B58F8C3A-C0F5-400A-823F-F92F71B385EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1F47246B-7393-4F61-88F5-2B8A2211C46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp6:*:*:*:*:*:*","matchCriteriaId":"325755C1-03E1-4947-A5A0-9FEBB0DC4E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5E190C97-A279-4EEE-B9C4-1EA888920F80"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31565","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31627","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31702","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31867","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020773","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0602.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0858.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30871","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454065","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44733","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0602.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0858.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2931","sourceIdentifier":"secalert@redhat.com","published":"2008-07-09T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint."},{"lang":"es","value":"La función do_change_type en fs/namespace.c del núcleo de Linux en versiones anteriores a 2.6.22 no verifica que la persona que llama tiene la capacidad CAP_SYS_ADMIN, lo cual permite a usuarios locales conseguir privilegios o provocar una denegación de servicio mediante la modificación de las propiedades de un punto de montaje."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0885.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.22","matchCriteriaId":"D64B4509-982A-4F74-AEA3-9852D90B91CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:10.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B2599BBC-A2A4-453B-A8F2-1925D14F8DAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:10.0:sp2:*:*:*:*:*:*","matchCriteriaId":"C255F321-4DC0-4A6E-A588-34A20CD68D94"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:10.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B059A516-73F8-46F7-9804-7F555359D488"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:10.0:sp2:*:*:*:*:*:*","matchCriteriaId":"FF576341-1E89-4305-8C60-F6032D762848"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.0","matchCriteriaId":"9A8362BB-5717-4714-BD92-220DDB646D07"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ee6f958291e2a768fd727e7a67badfff0b67711a","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30982","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32023","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30126","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454388","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43696","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10437","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ee6f958291e2a768fd727e7a67badfff0b67711a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/30982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2932","sourceIdentifier":"secalert@redhat.com","published":"2008-09-12T16:56:20.447","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via % (percent) encoded HTTP input to unspecified CGI scripts in Fedora Directory Server.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-2929."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la utilidad adminutil versión 1.1.6 de Red Hat permite a atacantes remotos provocar una denegación de servicio (parada inesperada del demonio) o la posibilidad de ejecutar código de su elección al utilizar caracteres % (tanto por ciento) en las entradas HTTP codificadas de módulos CGI no especificados en Fedora Directory Server. NOTA: esta vulnerabilidad es debida a una errónea corrección de CVE-2008-2929."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:adminutil:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"285B1605-4657-4400-B68E-B30722AD6D8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31777","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31106","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454662","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45203","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2933","sourceIdentifier":"secalert@redhat.com","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"This attack only works if the user is using another internet-connected application with Firefox not running. Using Firefox, or making sure it is at least running, prevents this attack.","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely handled by a vector application, as exploited in conjunction with CVE-2008-2540.  NOTE: this issue exists because of an insufficient fix for CVE-2005-2267."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 2.0.0.16 y 3.x anteriores a 3.0.1, interpreta el caráter (|) tubería en una línea de comando URI como una petición para abrir múltiples pestañas, lo que permite a los atacantes remotos acceso chrome: i URIs o lectura arbitraria de archivos locales a través de manipulación en una serie de URIs que no son completamente controlados por un vector de la aplicación, como un exploit junto con CVE-2008-2540. NOTA: esto existe por un reparación insuficiente de CVE-2005-2267"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.15","matchCriteriaId":"4532E6D4-6997-4235-A297-811A6415FC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31106","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31120","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31121","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31129","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31157","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31176","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31183","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31261","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31270","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31306","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1614","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/130923","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:148","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-35.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0597.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0598.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494860/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30242","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020500","source":"secalert@redhat.com"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-623-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-626-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-626-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441120","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43832","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2683","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11618","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/130923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-35.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5031400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0597.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0598.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494860/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.380974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-623-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-626-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-626-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2934","sourceIdentifier":"secalert@redhat.com","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer."},{"lang":"es","value":"Mozilla Firefox 3 anterior a la versión 3.0.1  sobre Mac OS X permite a atacante remotos causar una denegación de servicio (Con caida de la aplicación) o posiblemente ejecutar codigo arbitrario mediante un fichero GIF manipulado que ocasiona la liberacion de un puntero no inicializado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of firefox as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2008-07-21T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.1","matchCriteriaId":"2DFD12BC-44F1-4410-9FF4-D04FA9A2E048"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31132","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31270","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020516","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-36.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30266","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-626-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2125","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441360","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43850","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-626-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2935","sourceIdentifier":"secalert@redhat.com","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as \"an argument in the XSL input.\""},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en las funciones rc4 de (1) cifrado (aka exsltCryptoRc4EncryptFunction) y (2) descifrado (aka exsltCryptoRc4DecryptFunction) en crypto.c en libexslt en libxslt 1.1.8 hasta 1.1.24 permite a atacantes dependientes de contexto ejecutar código de su elección a través de un fichero XML que contiene una larga cadena de caracteres como \"un argumento en la entrada XSL.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"CBFCEA36-7573-491B-8438-4E3FDF8E97ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"EF38997D-634C-423C-BD82-44E74A99D8DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A9B4CF5A-150E-4814-BA15-EF9FB30AD0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"9D4401FF-84D8-4AD5-BAED-978E31E5DADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"CC004874-3C5D-4932-AD5B-BE7156D7D13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"269892E0-1ABA-4D0F-8266-A4DA8A575967"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"4597D362-AD62-4D58-BC7F-CCED44488466"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D885D06-D6E5-432C-9923-AE2CE73F7654"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"6F5003EF-82E2-49F9-9F74-CB92FE98E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"5C0D6095-2A7B-4328-ADA0-283E8F79AFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"91C70E5E-A987-4BF3-9300-E4A3F2B0B853"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"C5EFA6E9-593B-484A-A8FB-A22BAEE208B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"6C55B5B1-76F1-480B-B7F9-EF4AFE79E3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"58E904DA-889E-44B9-9AF6-EC753FB316BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"A3BC6F57-1DDD-4EA6-83F9-2672B11DF7B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"69A51C1E-21C9-4FA4-8340-345B5E1F1B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxslt:1.1.24:*:*:*:*:*:*:*","matchCriteriaId":"C9D7C38F-EF88-4531-803D-BA911978A176"}]}]}],"references":[{"url":"http://secunia.com/advisories/31230","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31310","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31331","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31363","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31395","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31399","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32453","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-06.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4078","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0306","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1624","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:160","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-009.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ocert.org/patches/exslt_crypt.patch","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0649.html","source":"secalert@redhat.com"},{"url":"http://www.scary.beasts.org/security/CESA-2008-003.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/494976/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495018/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/497829/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30467","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020596","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-633-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2266/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44141","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10827","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00092.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00118.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ocert.org/patches/exslt_crypt.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0649.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scary.beasts.org/security/CESA-2008-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494976/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497829/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-633-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2266/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00118.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2936","sourceIdentifier":"secalert@redhat.com","published":"2008-08-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Please refer to the following links for additional version information (vendor release notes):\r\n\r\n\r\nPostfix 2.3 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.3.15.RELEASE_NOTES\r\n\r\nPostfix 2.4 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.4.8.RELEASE_NOTES\r\n\r\nPostfix 2.5 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.5.4.RELEASE_NOTES\r\n\r\nPostfix 2.6 - ftp://mirrors.loonybin.net/pub/postfix/experimental/postfix-2.6-20080814.RELEASE_NOTES","cveTags":[],"descriptions":[{"lang":"en","value":"Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message.  NOTE: this can be leveraged to gain privileges if there is a symlink to an init script."},{"lang":"es","value":"Postfix antes de 2.3.15, 2.4 anterior a 2.4.8, 2.5 anterior a 2.5.4 y 2.6 antes de 2.6-20080814, cuando el sistema operativo admite enlaces duros (hard links) a enlaces simbólicos, permite a usuarios locales añadir mensajes de correo a un archivo al que apunta un enlace simbólico propiedad de root, creando un enlace duro a este enlace simbólico y enviando un mensaje después. NOTA: esto puede ser utilizado para obtener privilegios si hay un enlace simbólico a un script init."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F08A3C19-AEB6-4E0C-A41D-01024DC0A25D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BAE8A81E-3856-4908-B7B7-9CF511CA2A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B935272-1EC7-4C70-8299-9DC7594809EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1647690F-D015-4DC4-9FB7-F5E9F0C430D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A814997B-A612-493F-AA85-BA5A187A91FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"449E9764-54F4-46F9-9E4D-F2C96EC5F37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"DF4A15A5-0994-4A3B-B4CD-1C5D9F411FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"5E3FB858-1B20-450B-9181-A1FE1C2B9DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"C6BBD449-6F03-4EFE-8C87-B5014F0381F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DEBD42EA-B31E-4E37-BF28-FEBB18369A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"B92BCC42-6E9F-44CB-A755-004B6DBD9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"1B67A4AE-2C1C-49D6-9F53-05CAB51273E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"7A64D948-9441-492F-B9E5-DE5D5A3D7266"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.13:*:*:*:*:*:*:*","matchCriteriaId":"6D7BCB67-AF9E-4343-827B-D783C71BAF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.3.14:*:*:*:*:*:*:*","matchCriteriaId":"265AD494-E5EB-423B-9C20-62BCB1C3B9B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A2138A68-3F3D-4C7E-9FEB-2C8A445F2789"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED5E0EB5-ECC6-4573-9EA7-83E5741DA3CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"790C02A8-95DD-42BE-8A1C-1C6D6DDCC443"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0A0034F2-585D-4A98-8428-996A726712DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"F8B162B5-DEF5-46AD-87D1-734B3B637D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0DF3730A-0FFD-4C23-B758-BBA67CC9CD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"10E8E5E2-5674-40D5-AD86-8C4DDB442EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"690EDC73-47B5-4891-86A5-37B6ED80E145"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CA31260C-1C67-4E76-9F56-2359BFA0B197"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"58F1FC50-B6EB-48FD-A2FA-B8BEB05719DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1DE90BD-B5F9-4762-B086-130AB04F3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CCD5258B-C9DE-47BD-9172-27618F220201"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B3F710-13EF-4A36-B191-E0FCC1D98E23"}]}]}],"references":[{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY","source":"secalert@redhat.com"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.3.15.HISTORY","source":"secalert@redhat.com"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.4.8.HISTORY","source":"secalert@redhat.com"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY","source":"secalert@redhat.com"},{"url":"http://article.gmane.org/gmane.mail.postfix.announce/110","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31469","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31474","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31477","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31485","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31500","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31530","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32231","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-12.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4160","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0259","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1629","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/938323","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:171","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0839.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495474/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495632/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495882/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30691","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020700","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2385","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44460","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2689","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10033","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/636-1/","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/6337","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.3.15.HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.4.8.HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://article.gmane.org/gmane.mail.postfix.announce/110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/938323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0839.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495474/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/636-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2937","sourceIdentifier":"secalert@redhat.com","published":"2008-08-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Please refer to the following links for additional version information (vendor release notes):\r\n\r\nPostfix 2.5 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.5.4.RELEASE_NOTES\r\n\r\nPostfix 2.6 - ftp://mirrors.loonybin.net/pub/postfix/experimental/postfix-2.6-20080814.RELEASE_NOTES","cveTags":[],"descriptions":[{"lang":"en","value":"Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's account name."},{"lang":"es","value":"Postfix 2.5 anterior a 2.5.4 y 2.6 anterior a 2.6-20080814 envía a un archivo buzón incluso cuando este archivo no es propiedad del receptor, lo que permite a usuarios locales leer mensajes de correo creando un archivo buzón correspondiente con el nombre de cuenta de otro usuario."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=456347\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-08-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CA31260C-1C67-4E76-9F56-2359BFA0B197"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"58F1FC50-B6EB-48FD-A2FA-B8BEB05719DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1DE90BD-B5F9-4762-B086-130AB04F3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CCD5258B-C9DE-47BD-9172-27618F220201"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B3F710-13EF-4A36-B191-E0FCC1D98E23"}]}]}],"references":[{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY","source":"secalert@redhat.com"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31477","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31485","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31500","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32231","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200808-12.xml","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0259","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:224","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0422.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495632/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30691","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2385","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44461","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2689","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0422.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2938","sourceIdentifier":"secalert@redhat.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370.  NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio (Directory Traversal) en Apache Tomcat  versión 4.1.0 hasta  4.1.37, versión 5.5.0 hasta  5.5.26  y versión 6.0.0 hasta 6.0.16, cuando están habilitados allowLinking y UTF-8, permite a atacantes remotos leer archivos arbitrarios por medio de secuencias de salto de directorio (Directory Traversal) en el URI, una vulnerabilidad diferente a CVE-2008-2370. NOTA: las versiones anteriores a 6.0.18 se informaron afectadas, pero el aviso del proveedor enumera 6.0.16 como la última versión afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.37","matchCriteriaId":"E2A69982-25CB-4E17-972D-E2957ECF2E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.5.26","matchCriteriaId":"4E43B6B7-1326-4585-B982-946B9EE1E213"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"AC0B6510-25D7-406A-B6F2-25AB6C3EBB67"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31639","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31865","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31891","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32120","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32266","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33797","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37297","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/4148","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/343355","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495318/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507729/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30633","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020665","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2343","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44411","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/6229","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/4148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/343355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0648.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495318/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507729/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/6229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-2939","sourceIdentifier":"secalert@redhat.com","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI."},{"lang":"es","value":"Vulnerabilidad de XSS en proxy_ftp.c en el módulo mod_proxy_ftp en Apache 2.0.63 y en versiones anteriores y mod_proxy_ftp.c en el módulo mod_proxy_ftp en Apache 2.2.9 y en versiones anteriores a 2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un comodín en el último componente del directorio en el nombre de ruta en una URI FTPI."}],"vendorComments":[{"organization":"Red Hat","comment":"These issue was addressed in all affected httpd versions as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0967.html\n\nThis issue is tracked via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-2939\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, future updates may address this flaw in other affected products (such as Red Hat Application Stack).","lastModified":"2008-11-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.63","matchCriteriaId":"AC4A1537-518C-4D4B-A446-7A21E246DD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.9","matchCriteriaId":"AAAFBA9B-793F-4B2A-89F5-2656C1278563"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"536E776F-22D6-437C-B4F4-912071428F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0967.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31384","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31673","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32685","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32838","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33156","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33797","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34219","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=682868","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=682870","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=682871","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0327","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK70197","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK70937","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/663763","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:194","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:195","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.rapid7.com/advisories/R7-0033","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0966.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495180/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498566/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498567/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30560","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020635","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2315","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2461","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44223","source":"secalert@redhat.com","tags":["VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7716","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0967.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=682868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=682870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=682871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK70197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK70937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/663763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.rapid7.com/advisories/R7-0033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0966.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495180/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498566/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498567/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-2940","sourceIdentifier":"secalert@redhat.com","published":"2008-08-14T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"http://securitytracker.com/alerts/2008/Aug/1020684.html\r\n\r\n\"A local user can send specially crafted packets to cause the alert mailing function to execute arbitrary commands on the target system with root privileges. \r\n \r\nImpact:  A local user can obtain root privileges on the target system.\"","cveTags":[],"descriptions":[{"lang":"en","value":"The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message."},{"lang":"es","value":"La implementación del envío de alertas por correo del HP Linux Imaging and Printing (HPLIP)1.6.7 permite a usuarios locales obtener privilegios y enviar mensajes de correo electrónico desde la cuenta de root a través de vectores relacionados con el mensaje \"setalerts\", y una falta de validación del URI del dispositivo asociado con mensaje de evento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:linux_imaging_and_printing_project:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B9637F51-3C9F-41B2-843D-5CD75D93A0B8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31470","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31499","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32316","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32792","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020684","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:169","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0818.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30683","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-674-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-674-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455235","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44441","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10136","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-674-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-674-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2941","sourceIdentifier":"secalert@redhat.com","published":"2008-08-14T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending \"msg=0\" to TCP port 2207."},{"lang":"es","value":"El analizador de mensajes hpssd en hpssd.py HP Linux Imaging and Printing (HPLIP) 1.6.7 permite a los usuarios locales provocar una denegación de servicio (con parada de proceso) a través de un paquete modificado, como se ha demostrado mediante el envío de \"msg = 0\" al puerto TCP 2207."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:linux_imaging_and_printing_project:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B9637F51-3C9F-41B2-843D-5CD75D93A0B8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31470","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31499","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32316","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32792","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020683","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:169","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0818.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30683","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-674-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-674-2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457052","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44440","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10636","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0818.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-674-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-674-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2942","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via \"..\" (dot dot) sequences in a patch file."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en patch.py de Mercurial 1.0.1 permite a atacantes ayudados por el usuario a modificar archivos de su elección mediante secuencias \"..\" (punto punto) en un archivo patch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mercurial:mercurial:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FA70C38E-E806-4CA7-BB01-4E7C4C9FEAD7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31108","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31110","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31167","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-09.xml","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0211","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493881/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30072","source":"cve@mitre.org"},{"url":"http://www.selenic.com/hg/rev/87c704ac92d4","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43551","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2633","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493881/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.selenic.com/hg/rev/87c704ac92d4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2943","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry.  NOTE: the vendor states \"There is no real risk of a vulnerability,\" although there are likely scenarios in which a user is allowed to make administrative LDAP requests but does not have the privileges to stop the server."},{"lang":"es","value":"Vulnerabilidad de doble libreación en IBM Tivoli Directory Server (TDS) 6.1.0.0 hasta 6.1.0.15 que permite a los administradores la  autenticación remota para causar una denegación de servicios (ABEND) y posiblemente ejecutar códico arbitrario utilizando ldapadd para conseguir crear un duplicado en la base de datos de entrada ibm-globalAdminGroup LDAP.\r\nNOTA: el vendedor declara \"no hya un riesgo real  de vulnerabilidad\", aunque hay posibles escenarios en los que un usuario puede hacer peticiones al LDAP administrativo pero no tiene privilegios para parar el servidor"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F468434-0317-435A-B2A6-5923A88A090F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E79197BC-3BDF-4F38-B63F-1B2A658B645F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F7B1402A-B3C3-4210-928F-6EFCCE2DE1CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"92D48F0B-C9E2-4381-8463-83FF47136EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36308D0C-D92C-4857-A857-097F383EE76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A84CEB80-796F-4928-A2A0-73E604543A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"462385FC-F345-42EE-ABF0-E1781CC648A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F10F3910-5616-41A2-A3BF-18FA4DD68631"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"51C34738-5F9B-43A7-987F-EB805B31119E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6AA93B63-9D15-4784-8585-DBC139A382E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"55D84E30-1F23-4A6A-B622-78DBEEBEFB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"50C9A7DF-6968-41CC-911A-B746CB43AA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0EA493E1-F791-4FE5-9F7E-36CAC0D942C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"F7365156-4EA3-476A-A395-FADEDF1BA80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"321B15BC-2653-4B64-A5AE-9FCA6A08713C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"5A1B527B-E07D-4543-92A6-0EE58CB8FECC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IO09113","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30010","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1970","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IO09113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2944","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365."},{"lang":"es","value":"Vulnerabilidad de doble liberación en el soporte utrace del núcleo de Linux, probablemente de 2.6.18, en Red Hat Enterprise Linux (RHEL) 5 y Fedora Core 6 (FC6) permite a usuarios locales provocar una denegación de servicio (OOPS), como lo demostrado por una caída cuando se está ejecutando la testsuite GNU GDB, una vulnerabilidad diferente a CVE-2008-2365."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora_core:6:*:*:*:*:*:*:*","matchCriteriaId":"B77298D3-CFD9-4DF0-954E-090A830256B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:-:*:*:*:*:*:*","matchCriteriaId":"27C7E25A-EC60-460D-8662-016437F7C0FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=207002","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449359","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43556","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=207002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-2945","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289."},{"lang":"es","value":"Sun Java System Access Manager 6.3 hasta 7.1 y Sun Java System Identity Server 6.1 y 6.2 no procesa adecuadamente hojas de estilo XSLT en transformaciones XSLT de firmas XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3:*:*:*:*:*:*:*","matchCriteriaId":"31DEED4B-0AFF-49A2-9DDA-B4D74E3B29A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D88350FE-285D-4144-B7DC-5E1F8579CC56"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0B5B089E-62AC-44E5-9462-DC439C7AA8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"DB8DC1D1-AF26-48BC-A773-5D7CAC70C7D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_server:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9770CADB-E22A-425C-A35B-AFC52CE53C88"}]}]}],"references":[{"url":"http://secunia.com/advisories/30893","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201538-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-294.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29988","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020380","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1967/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-201538-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-294.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1967/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2946","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service (daemon crash) via malformed packets."},{"lang":"es","value":"Subagente mapeador SNMP-DNI (aka snmpXdmid) en Solstice Enterprise Agents en Sun Solaris 8 hasta 10 permite a atacantes remotos causar la denegación e servicios (caída del demonio) a través de paquetes malformados"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237985-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29965","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020381","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1965/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237985-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1965/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2947","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a (1) location or (2) location.href property, related to incorrect determination of the origin of web script, aka \"Window Location Property Cross-Domain Vulnerability.\" NOTE: according to Microsoft, CVE-2008-2948 and CVE-2008-2949 are duplicates of this issue, probably different attack vectors."},{"lang":"es","value":"Vulnerabilidad de dominios cruzados en Microsoft Internet Explorer 6 permite a atacantes remotos acceder a información restringida de otros dominios a través de JavaScript que utiliza tipos de datos Object para el valor de una propiedad (1) location o (2) location.href."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=1348","source":"cve@mitre.org","tags":["Press/Media Coverage"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30857","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/923508","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ph4nt0m.org-a.googlepages.com/PSTZine_0x02_0x04.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29960","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020382","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1940/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5901","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=1348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Press/Media Coverage"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/30857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/923508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ph4nt0m.org-a.googlepages.com/PSTZine_0x02_0x04.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1940/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2948","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener.  NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-domain en Microsoft Internet Explorer versiones 7 y 8, permite a los atacantes remotos cambiar la propiedad de ubicación de una trama por medio del tipo de dato Object y usar una trama de un dominio diferente para observar eventos independientes del dominio, como se demuestra mediante la observación de eventos onkeydown con caballero-listener. NOTA: según Microsoft, este es un duplicado del CVE-2008-2947, posiblemente un vector de ataque diferente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=1348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30851","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html","source":"cve@mitre.org"},{"url":"http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/ghost-busters/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/516627","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1941/references","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=1348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/ghost-busters/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/516627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1941/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2949","sourceIdentifier":"cve@mitre.org","published":"2008-06-30T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener.  NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-domain en Microsoft Internet Explorer versiones 6 y 7, permite a los atacantes remotos cambiar la propiedad de ubicación de una trama por medio del tipo de dato String y usar una trama de un dominio diferente para observar eventos independientes del dominio, como es demostrado mediante la observación de eventos onkeydown con caballero-listener. NOTA: según Microsoft, este es un duplicado del CVE-2008-2947, posiblemente un vector de ataque diferente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=1348","source":"cve@mitre.org"},{"url":"http://sirdarckcat.blogspot.com/2008/05/browsers-ghost-busters.html","source":"cve@mitre.org"},{"url":"http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/516627","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1941/references","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=1348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sirdarckcat.blogspot.com/2008/05/browsers-ghost-busters.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/516627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/1941/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2950","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document."},{"lang":"es","value":"El destructor Page de Page.cc en libpoppler de Poppler 0.8.4 y anteriores, elimina el objeto pageWidgets incluso si éste no ha sido iniciado por un constructor Page, esto permite a atacantes remotos ejecutar código de su elección mediante un documento PDF manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of poppler as shipped with Red Hat Enterprise Linux 5, or other PDF parsing applications derived from the xpdf code as shipped in Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.4","matchCriteriaId":"5739C603-4976-48C9-B28F-9E3FD9D3E2A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31002","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31267","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31405","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200807-04.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3977","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0223","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:146","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493980/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494142/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30107","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020435","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-631-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2024/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43619","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6032","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00161.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493980/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494142/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-631-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2024/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00161.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2951","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function."},{"lang":"es","value":"Una vulnerabilidad de Redireccionamiento Abierto en el script de búsqueda en Trac anterior a versión 0.10.5, permite a los atacantes remotos redireccionar a los usuarios a sitios web arbitrarios y conducir ataques de phishing por medio de una URL en el parámetro q, posiblemente relacionada con la función quickjump."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.5","matchCriteriaId":"C6C4CEF3-92F7-4344-9833-7CBCEF16E94F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/72/45/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31314","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.osvdb.org/46513","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30402","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44043","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://holisticinfosec.org/content/view/72/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.osvdb.org/46513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-2952","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error."},{"lang":"es","value":"El archivo liblber/io.c en OpenLDAP versiones 2.2.4 hasta 2.4.10, permite a los atacantes remotos causar una denegación de servicio (finalización del programa) por medio de datagramas ASN.1 BER diseñados que desencadenan un error de aserción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0F611094-500A-4306-8C15-4878135FA45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"32096DE5-3F2C-4FF7-BDC6-E316DFDC97A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FE197F27-CB34-4B0E-A30A-C9C87295AAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"10A4256F-EC89-425F-86FD-B0DE243EBF2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4A34127E-507D-4F72-9F93-B23F91DB0F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B7A2D5D9-3E7E-4420-A338-B05A8C077229"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D9090B1B-0724-4526-A40D-47044401B6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A5E5AC6E-F43B-404D-BA46-2F4412456ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"61AE77E5-6595-45A4-A233-C36B97F551B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"80224FC0-7DF5-4815-9D3D-63AC462119FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"F821D76D-1592-478B-AE7B-D16B22837C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"67146520-86CF-4EF6-88AC-22E2D167D686"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"2E8C5E2D-52FD-448B-9423-9F51349BEE4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"FCC99DDD-EF08-45B7-8369-1D52A03D6E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"C79D5E35-1F96-4AF5-B89A-A8FCD33D1FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.13:*:*:*:*:*:*:*","matchCriteriaId":"B93B4C9A-5C0E-4226-9975-E26330A287A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.14:*:*:*:*:*:*:*","matchCriteriaId":"0F305125-0477-4C8F-9C94-39EB623E1A35"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.15:*:*:*:*:*:*:*","matchCriteriaId":"BF72A8C3-6DB5-494A-843F-D3CF57AAFDAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.16:*:*:*:*:*:*:*","matchCriteriaId":"45104882-4F43-4437-8B2E-2F6E97952C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.17:*:*:*:*:*:*:*","matchCriteriaId":"2C2BDB6E-B620-4707-A2C4-0AC3E6536B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.18:*:*:*:*:*:*:*","matchCriteriaId":"BC84EA72-7B34-454D-B46D-616596AF41B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.19:*:*:*:*:*:*:*","matchCriteriaId":"4EE3F254-C565-4650-B875-116FD2C29867"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"49B31BEE-944F-40FA-A173-EF55C2232834"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.21:*:*:*:*:*:*:*","matchCriteriaId":"003A1BF0-1C40-4A5B-A724-25692199D2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.22:*:*:*:*:*:*:*","matchCriteriaId":"9D0298B8-44F5-4375-BBB4-107B1A9D1E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.23:*:*:*:*:*:*:*","matchCriteriaId":"E94E748F-3367-4432-AA85-61767541A377"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.24:*:*:*:*:*:*:*","matchCriteriaId":"E628F5CE-4D21-43D4-8789-99B32FA28A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.25:*:*:*:*:*:*:*","matchCriteriaId":"A4ECDC15-67A3-4432-B141-8EC38C440D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.26:*:*:*:*:*:*:*","matchCriteriaId":"BA382EA1-9ED6-4E10-89E7-3DD3A1FE7BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.27:*:*:*:*:*:*:*","matchCriteriaId":"6DCE01E9-3D72-433F-A600-B7359C1197FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.28:*:*:*:*:*:*:*","matchCriteriaId":"75371593-00F5-4F49-B0EC-7835CB1DB97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.29:*:*:*:*:*:*:*","matchCriteriaId":"F45E2CED-46CA-4F85-AA38-DCA5141CCFFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.30:*:*:*:*:*:*:*","matchCriteriaId":"9A1CDD24-F8E3-4C39-BD39-36ADEC814C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.31:*:*:*:*:*:*:*","matchCriteriaId":"64E00372-FD22-45E5-8815-9B0826BE7857"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.32:*:*:*:*:*:*:*","matchCriteriaId":"4C6B5E35-7109-4FE0-8E34-61C5CA0C5D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.33:*:*:*:*:*:*:*","matchCriteriaId":"5C41A0F2-DBB7-48B6-AF89-7963CED8D196"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.34:*:*:*:*:*:*:*","matchCriteriaId":"7B0A12F9-7DEA-4E3F-A3A8-3C9E782AC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.35:*:*:*:*:*:*:*","matchCriteriaId":"06223A03-1598-4D0F-B0F6-576AA3CB1E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.36:*:*:*:*:*:*:*","matchCriteriaId":"87155B64-0AE1-4418-8866-84CEA879665B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.37:*:*:*:*:*:*:*","matchCriteriaId":"A563D3EA-7DE0-4DE7-AD64-8724B6E72A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.38:*:*:*:*:*:*:*","matchCriteriaId":"7AF66FA9-EE80-48DD-B10E-8D047CF4BC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.39:*:*:*:*:*:*:*","matchCriteriaId":"1F11D98D-F23D-45B4-9733-B3C0C781ADCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.40:*:*:*:*:*:*:*","matchCriteriaId":"2EFE64A8-3B40-44C9-983F-8F3BDC9879E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.41:*:*:*:*:*:*:*","matchCriteriaId":"C51880E8-AA9E-43AD-BDC3-3DA530823AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.42:*:*:*:*:*:*:*","matchCriteriaId":"D58AC865-207C-4612-B112-AE430BB76213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.3.43:*:*:*:*:*:*:*","matchCriteriaId":"EF350C0B-E6BF-4626-BA1D-DED83358D86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"473AEC48-FBBF-4BEB-8728-1FA80DD94807"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30996","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31436","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200808-09.xml","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0249","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1650","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:144","source":"cve@mitre.org"},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580","source":"cve@mitre.org"},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580%3Bselectid=5580","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0583.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495320/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30013","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020405","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-634-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1978/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-052/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43515","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10662","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00109.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00129.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200808-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580%3Bselectid=5580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0583.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495320/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-634-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1978/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-052/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00129.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2953","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via \"partial file list requests\" that trigger a NULL pointer dereference."},{"lang":"es","value":"Linux DC++ (linuxdcpp) anterior a 0.707, permite a atacantes remotos provocar una denegación de servicio (Caída) a través de \"peticiones de listado de ficheros parciales\" que lanza una referencia a un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.686:*:*:*:*:*:*:*","matchCriteriaId":"D5BCDF58-CA77-4F8F-A5E4-A6AC0546625C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.699:*:*:*:*:*:*:*","matchCriteriaId":"3AC200D6-54CD-4C55-A907-E6EEF56EDC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.700:*:*:*:*:*:*:*","matchCriteriaId":"79D312BE-FB73-4BE0-B27C-9D85BDF23279"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.701:*:*:*:*:*:*:*","matchCriteriaId":"7E481FC5-ABEE-42FD-B3AF-6AB61E1DCE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.702:*:*:*:*:*:*:*","matchCriteriaId":"D92B96A4-46B2-4518-9B82-E3E21215F337"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.703:*:*:*:*:*:*:*","matchCriteriaId":"9C0DB92F-F964-4E36-A753-0FFC11CB9B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.704:*:*:*:*:*:*:*","matchCriteriaId":"344E9B3B-1E08-4C31-8B2F-1858A2ADB9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.705:*:*:*:*:*:*:*","matchCriteriaId":"90DCE193-D5E3-4979-A97C-044634691769"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.706:*:*:*:*:*:*:*","matchCriteriaId":"91533A76-8F5E-480B-909D-9CF9E63BFC8B"}]}]}],"references":[{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/ShareManager.cpp.diff?r1=1.14&r2=1.15&sortby=date","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30812","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30918","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=608612&group_id=40287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29924","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020407","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020408","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43341","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html","source":"cve@mitre.org"},{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/ShareManager.cpp.diff?r1=1.14&r2=1.15&sortby=date","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=608612&group_id=40287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2954","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read."},{"lang":"es","value":"client/NmdcHub.cpp en Linux DC++ (linuxdcpp) anterior a 0.707, permite a atacantes remotos provocar una denegación de servicio (caída a través de un mensaje privado vacío, lo que dispara una lectura de fuera de rango."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.686:*:*:*:*:*:*:*","matchCriteriaId":"D5BCDF58-CA77-4F8F-A5E4-A6AC0546625C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.699:*:*:*:*:*:*:*","matchCriteriaId":"3AC200D6-54CD-4C55-A907-E6EEF56EDC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.700:*:*:*:*:*:*:*","matchCriteriaId":"79D312BE-FB73-4BE0-B27C-9D85BDF23279"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.701:*:*:*:*:*:*:*","matchCriteriaId":"7E481FC5-ABEE-42FD-B3AF-6AB61E1DCE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.702:*:*:*:*:*:*:*","matchCriteriaId":"D92B96A4-46B2-4518-9B82-E3E21215F337"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.703:*:*:*:*:*:*:*","matchCriteriaId":"9C0DB92F-F964-4E36-A753-0FFC11CB9B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.704:*:*:*:*:*:*:*","matchCriteriaId":"344E9B3B-1E08-4C31-8B2F-1858A2ADB9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.705:*:*:*:*:*:*:*","matchCriteriaId":"90DCE193-D5E3-4979-A97C-044634691769"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:direct_connect:0.706:*:*:*:*:*:*:*","matchCriteriaId":"91533A76-8F5E-480B-909D-9CF9E63BFC8B"}]}]}],"references":[{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/Changelog.txt","source":"cve@mitre.org"},{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dcplusplus.svn.sourceforge.net/viewvc/dcplusplus/dcplusplus/trunk/changelog.txt?r1=1027&r2=1026&pathrev=1027","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30918","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30037","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020409","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020410","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43566","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html","source":"cve@mitre.org"},{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/Changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://dcplusplus.svn.sourceforge.net/viewvc/dcplusplus/dcplusplus/trunk/changelog.txt?r1=1027&r2=1026&pathrev=1027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2955","sourceIdentifier":"secalert@redhat.com","published":"2008-07-01T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function."},{"lang":"es","value":"Pidgin 2.4.1, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un nombre de fichero largo que contiene ciertos caracteres, como se ha demostrado mediante un mensaje MSN que provocaba la caída en la función msn_slplink_process_msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30881","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32859","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33102","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3966","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:025","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1023.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/493682/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29985","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1947","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10131","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18050","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493682/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2956","sourceIdentifier":"secalert@redhat.com","published":"2008-07-01T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"secalert@redhat.com","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via malformed XML documents. NOTE: this issue has been disputed by the upstream vendor, who states: \"I was never able to identify a scenario under which a problem occurred and the original reporter wasn't able to supply any sort of reproduction details.\""},{"lang":"es","value":"** DISPUTED ** Fuga de memoria en Pidgin 2.0.0 y posiblemente otras versiones, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través documentos XML malformados. NOTA: este problema ha sido disputado por el proveedor original, que dice: 'Nunca he podido identificar un escenario en que problema ocurrió y el investigador original no pudo suministrar cualquier tipo de detalles de la reproducción.'"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"}]}]}],"references":[{"url":"http://crisp.cs.du.edu/?q=ca2007-1","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31387","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/27/3","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/495165/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29985","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2647","source":"secalert@redhat.com"},{"url":"http://crisp.cs.du.edu/?q=ca2007-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/27/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495165/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2957","sourceIdentifier":"secalert@redhat.com","published":"2008-07-01T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL."},{"lang":"es","value":"La funcionalidad UPnP en Pidgin 2.0.0 y probablemente otras versiones, permite a atacantes remotos provocar la descarga de ficheros de su elección y causar una denegación de servicio (consumo de memoria o disco) a través de un paquete UDP que especifica una URL de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"}]}]}],"references":[{"url":"http://crisp.cs.du.edu/?q=ca2007-1","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32859","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33102","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:025","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/27/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1023.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29985","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076","source":"secalert@redhat.com"},{"url":"http://crisp.cs.du.edu/?q=ca2007-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/27/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2958","sourceIdentifier":"cve@mitre.org","published":"2008-07-01T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories."},{"lang":"es","value":"Condición de carrera en (1)checkinstall 1.6.1 y (2) installwatch, permite a usuarios locales sobrescribir ficheros de su elección y tener otro tipo de impacto a través de un enlace simbólico y posiblemente otro tipo de ataques sobre directorios temporales de trabajo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkinstall:checkinstall:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7394122F-C484-407B-A713-DA17E65D8602"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488140","source":"cve@mitre.org"},{"url":"http://lists.alioth.debian.org/pipermail/secure-testing-team/2008-June/001672.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30873","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43440","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.alioth.debian.org/pipermail/secure-testing-team/2008-June/001672.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2959","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument to the fCreateShellLink function."},{"lang":"es","value":"Desbordamiento de búfer en un determinado control ActiveX (vb6skit.dll) de Microsoft Visual Basic Enterprise Edition 6.0 SP6 puede permitir a atacantes remotos ejecutar código de su elección a través de un argumento lpstrLinkPath largo de la función fCreateShellLink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic_enterprise_edition:6.0:sp6:*:*:*:*:*:*","matchCriteriaId":"D7964E12-B5F1-4D52-B5E6-68FEC17B5351"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29792","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43180","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5851","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2960","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin antes de 2.11.7, cuando register_globals está habilitado y .htaccess support está deshabilitado, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados que involucran secuencias de comandos en libraries/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8F3A44D6-F174-428E-8456-5B7B093D7A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*","matchCriteriaId":"EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"CD5CB748-A953-4CAD-B8F9-21F43D2992E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*","matchCriteriaId":"A4843917-B7B1-4871-AE2B-2219C6EB85F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5rc1:*:*:*:*:*:*:*","matchCriteriaId":"A217F2AE-185D-4385-8804-475DB12CFA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*","matchCriteriaId":"CC99B93D-2171-40DE-90B3-61D6DB9F6D47"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30813","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/11","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1904/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43320","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1904/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2961","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) path and (2) p parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en view/index.php de CMS Mini 0.2.2 permite a atacantes remotos leer ficheros locales de su elección a través de .. (punto punto) en los parámetros (1) path y (2) p."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmini:cms_mini:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"64FD3F31-D501-448A-A766-4A495E3DF3F8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29890","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43276","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5896","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2962","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) sort parameters to index.php, and the (3) id parameter to post.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en MyBlog, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) s y(2) sort al index.php y el parámetro (3)id a post.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*","matchCriteriaId":"5707DF3F-954A-44ED-A876-99E8B75DE6C3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43293","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5913","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2963","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en MyBlog permite a atacantes remotos ejecutar comandos SQL a través del (1) parámetro view de (a) index.php, y los (2) parámetros id de (b) member.php y (c) post.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*","matchCriteriaId":"5707DF3F-954A-44ED-A876-99E8B75DE6C3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43292","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5913","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2964","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en guide.php en ResearchGuide 0.5, permite a atacantes remotos ejecutar comando SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:researchguide:researchguide:0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FB1F2CB-9BB3-4B99-A6B0-49FD09CAFE8C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43261","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5911","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2965","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo viewforum.php en JaxUltraBB (JUBB) versión 2.0 y anteriores, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro forum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaxbot:jaxultrabb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D40808AC-A560-4762-B204-E00E4597BECD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29853","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43279","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2966","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the user parameter. party information."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo viewprofile.php en JaxUltraBB versión 2.0 y anteriores, permite a los atacantes remotos leer archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro user. información de la partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaxultrabb:jaxultrabb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"CBA28130-575D-4FD7-A3E9-9081DDE45462"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29853","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43278","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2967","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to login.php and the (2) glb_sid parameter to hta/htmlarea.js.php, and allow remote authenticated users to inject arbitrary web script or HTML via an unspecified field in room.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Academic Web Tools (AWT YEKTA) 1.4.3.1 y 1.4.2.8 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante los parámetros (1) query string a login.php y (2) glb_sid a hta/htmlarea.js.php y permite a usuarios autentificados remotamente inyectar secuencias de comandos web o HTML mediante un campo no especificado en room.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.8","matchCriteriaId":"FF4A47D5-5588-4758-91DA-A95FCDD6D4B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3959","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/44","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2968","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rating.php en Academic Web Tools (AWT YEKTA) 1.4.3.1, 1.4.2.8 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro book_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.8","matchCriteriaId":"FF4A47D5-5588-4758-91DA-A95FCDD6D4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3.1","matchCriteriaId":"7DB27F56-F120-4673-8E20-DAAB30E7245D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3959","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/44","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43177","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2969","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the dfile parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php de Academic Web Tools (AWT YEKTA) 1.4.3.1, y 1.4.2.8 y versiones anteriores, permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en un parámetro dfile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.8","matchCriteriaId":"FF4A47D5-5588-4758-91DA-A95FCDD6D4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:1.4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C95E5DC3-8299-4667-9BB7-52C9E9A29659"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3959","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/44","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43175","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2970","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) login.php in homepg/."},{"lang":"es","value":"Múltiples vulnerabilidades de fijación de sesion en Academic Web Tools (AWT YEKTA) 1.4.3.1, 1.4.2.8 y anteriores, permite a atacantes remotos secuestrar sesiones web estableciendo el parámetro PHPSESSID en el (1) index.php y (2) login.php en homepg/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.8","matchCriteriaId":"FF4A47D5-5588-4758-91DA-A95FCDD6D4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yektaweb:academic_web_tools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3.1","matchCriteriaId":"7DB27F56-F120-4673-8E20-DAAB30E7245D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3959","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/?/44","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43179","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/?/44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493472/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2971","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo links-extern.php del programa Ciblog 3.1, permite que los atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cistyle:ciblog:3.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF319C5-E1C1-45D5-AE7E-7430E79028A4"}]}]}],"references":[{"url":"http://secunia.com/advisories/30807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29852","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43267","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5875","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2972","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a comment action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo index.php en KbLance, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro cat_id en una acción comment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kblance:kblance:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"BA5CEAE2-2045-4CCA-877B-8C006ADD8DAA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31123","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29859","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43272","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5883","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2973","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sitename and (2) wmessage parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en chathead.php de MM Chat 1.5 permiten a atacantes remotos inyectar web script o HTML a través de los parámetros (1) sitename y (2) wmessage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mm_chat:mm_chat:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8730285F-2988-43D3-B3C9-739B5F8E3844"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29910","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43331","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5919","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2974","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo chatconfig.php del programa MM Chat 1.5, en el que register_globals está habilitado, permitiendo a los atacantes remotos incluir y ejecutar archivos locales arbitrariamente a través de una secuencia de salto de directorio con el parámetro currentlang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mm_chat:mm_chat:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8730285F-2988-43D3-B3C9-739B5F8E3844"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29910","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43327","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5919","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2975","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/objects/obj_image.php de TinX/cms 1.1 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinx_cms:tinx_cms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6BEDBE6C-A1CE-4273-AC7B-B178DB540134"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43306","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5917","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2976","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) language parameter to (a) include_me.php, (b) admin/ajax.php, and (c) admin/objects/catalog.ajaxhandler.php; and the (2) prefix parameter to (d) admin/inc/config.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en TinX/cms 1.1, cuando register_globals está activo, permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el (1) parámetro language de (a) include_me.php, (b) admin/ajax.php, y (c) admin/objects/catalog.ajaxhandler.php; y el (2) parámetro prefix de (d) admin/inc/config.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinx_cms:tinx_cms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6BEDBE6C-A1CE-4273-AC7B-B178DB540134"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43305","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5917","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2977","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the include_connection parameter to (1) edit_top_feature.php and (2) edit_topics_feature.php in phpi/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en Ourvideo CMS 9.5, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro include_connection a (1) edit_top_feature.php y (2) edit_topics_feature.php en phpi/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ourvideo_cms:ourvideo_cms:9.5:*:*:*:*:*:*:*","matchCriteriaId":"82D7C9F0-8A2F-49ED-A099-A3D8F1E3D868"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29909","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43311","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2978","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en phpi/rss.php de Ourvideo CMS 9.5, cuando register_globals está habilitado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro prefix."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ourvideocms:ourvideo_cms:9.5:*:*:*:*:*:*:*","matchCriteriaId":"717F9A49-2D97-49F6-AC73-0EA82A29EF6B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29909","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43312","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2979","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the (1) top_page and (2) end_page parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en phpi/login.php en Ourvideo CMS 9.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) top_page y (2) end_page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ourvideo_cms:ourvideo_cms:9.5:*:*:*:*:*:*:*","matchCriteriaId":"82D7C9F0-8A2F-49ED-A099-A3D8F1E3D868"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3968","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29909","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5920","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2980","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) error_meldung parameter to admin/features/register/register.php, the (2) feature_language[ueberschrift] parameter to admin/features/memberlist/memberlist.php, the (3) language_array[ueberschrift] parameter to admin/features/lostpassword/lostpassword.php, the (4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] parameter to admin/features/fotogalerie/eingabe.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en HomePH Design 2.10 RC2 permiten a atacantes remotos inyectar web script o HTML de su elección a través del (1) parámetro error_meldung de admin/features/register/register.php, el (2) parámetro feature_language[ueberschrift] de admin/features/memberlist/memberlist.php, el (3) parémtro language_array[ueberschrift] de admin/features/lostpassword/lostpassword.php, el (4) parámetro language_feature[titel] de admin/features/kalender/eingabe.php, y el (5) parámetro language_feature[bildmenu] de admin/features/fotogalerie/eingabe.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*","matchCriteriaId":"F124B91D-BA3E-47DA-93D0-F2B3C6F2F3B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43260","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2981","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin/templates/template_thumbnail.php in HomePH Design 2.10 RC2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the thumb_template parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto PHP en admin/templates/template_thumbnail.php en el programa HomePH Design 2.10 RC2, donde el register_globals está habilitado, permitiendo a los atacantes remotos ejecutar código PHP arbitrariamente a través de URL con el parámetro thumb_template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*","matchCriteriaId":"F124B91D-BA3E-47DA-93D0-F2B3C6F2F3B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43256","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2982","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) thumb_template parameter to (a) admin/templates/template_thumbnail.php, and the (2) language parameter to (b) account/account.php, (c) downloads/downloads.php, (d) forum/forum.php, (e) fotogalerie/delete.php, and (f) fotogalerie/fotogalerie.php in admin/features/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en HomePH Design 2.10 RC2, cuando register_globals está activado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección  a través de secuencias de salto de directorio en los parámetros (1) thumb_template a (a) admin/templates/template_thumbnail.php y (2) language a (b) account/account.php, (c) downloads/downloads.php, (d) forum/forum.php, (e) fotogalerie/delete.php y(f) fotogalerie/fotogalerie.php en admin/features/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:homeph_design:homeph_design:2.10:rc2:*:*:*:*:*:*","matchCriteriaId":"F124B91D-BA3E-47DA-93D0-F2B3C6F2F3B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43258","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2983","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Demo4 CMS 01 Beta permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cwh_underground:demo4_cms:01:beta:*:*:*:*:*:*","matchCriteriaId":"26CA134A-7B5F-4C2F-A870-D533009C50AE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43291","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2984","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers to inject arbitrary web script or HTML via the lang[be_red_text] parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en backend/umleitung.php de CMReams CMS 1.3.1.1 Beta 2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro lang[be_red_text]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmreams:cmreams_cms:1.3.1.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"5669BA85-E25D-4294-B742-F0B55636B1C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29891","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2985","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page_language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en load_language.php de CMReams CMS 1.3.1.1 Beta 2, cuando register_globals está habilitado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante secuencias de salto de directorio en el parámetro page_languag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmreams:cmreams_cms:1.3.1.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"5669BA85-E25D-4294-B742-F0B55636B1C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29891","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43265","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2986","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the ourlinux_root_path parameter to (1) adodb-errorpear.inc.php and (2) adodb-pear.inc.php in adodb/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos en PHP en el progrma phpDMCA 1.0.0 permitiendo a los atacantes remotos ejecutar código PHP de manera arbitraria a través de URL con el parámetro ourlinux_root_path en los archivos (1)adodb-errorpear.inc.php y (2) adodb-pear.inc.php en adodb/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpdmca:phpdmca:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D85256D3-AFCC-4C9E-974D-4523489C07E7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29880","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43253","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5897","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2987","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_edit_submenu.php, (2) admin_new_submenu.php, and (3) admin_edit_topmenu.php in admin/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Benja CMS 0.1 permiten a atacantes remotos inyectar web script o HTML de su elección a través de PATH_INFO de (1) admin_edit_submenu.php, (2) admin_new_submenu.php, y (3) admin_edit_topmenu.php in admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjacms:benja_cms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B643AC-E982-4175-9FD9-7D581DB21F3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3958","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493568/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29884","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493568/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2988","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero no restringido en admin/upload.php en Benja CMS 0.1, permite a atacantes remtos subir y ejecutar ficheros PHP de su elección a través de vectores no especificados seguidos por una petición directa al fichero en billeder/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjacms:benja_cms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B643AC-E982-4175-9FD9-7D581DB21F3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3958","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493568/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29884","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43282","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493568/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2989","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via the go parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de HoMaP-CMS 0.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro go."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:homap:homap:0.1:*:*:*:*:*:*:*","matchCriteriaId":"36D84EFE-A107-477A-BE86-C7165F630C18"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29897","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43257","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5908","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2990","sourceIdentifier":"cve@mitre.org","published":"2008-07-02T17:14:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto en PHP en facileforms.frame.php del componente FacileForms (com_facileforms) 1.4.4 para Mambo y Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro ff_compath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_facileforms:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"AC4AF88F-49D9-41AE-AB84-FBE6249B0C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:com_facileforms:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"8C981290-01E2-427F-A166-3F2866787EB7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3967","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29904","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43290","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5915","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2991","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T18:41:00.000","lastModified":"2025-04-23T16:15:19.307","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe RoboHelp Server 6 y 7 permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores relacionados con el log Help Errors."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*","matchCriteriaId":"462BB435-3230-4045-BDA6-3B51FC6E76F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*","matchCriteriaId":"AE4FAB57-4AE3-492A-9404-F7B925795D9E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31001","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020442","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-16.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2026/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2026/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2992","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T18:29:47.667","lastModified":"2025-10-22T01:15:33.267","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Adobe Reader and Acrobat Input Validation Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Adobe Acrobat y Reader versión 8.1.2 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF que llama a la función JavaScript util.printf con un argumento de cadena de formato creado, un problema relacionado con el CVE-2008-1104."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"7749D5FB-8D70-4734-8C68-CFED772C7AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"B696DE60-BE96-4590-A903-AB792881A38A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/49520","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29773","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35163","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-14/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4549","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/adobe-reader-buffer-overflow","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/593409","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/498027/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498032/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498055/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30035","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32091","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-072/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6994","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7006","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/49520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/29773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-14/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/adobe-reader-buffer-overflow","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/593409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/498027/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498032/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-072/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-2992","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2008-2993","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) fog_lang and (2) fog_skin parameters, probably related to libs/required/share.inc; and possibly the (3) fog_pseudo, (4) fog_posted, (5) fog_password, and (6) fog_cook parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php de FOG Forum 0.8.1 permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en los parámetros (1) fog_lang y (2) fog_skin, posiblemente relacionado a libs/required/share.inc; y posiblemente los parámetros (3) fog_pseudo, (4) fog_posted, (5) fog_password, y (6) fog_cook."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fog:fog_forum:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"166EBEF1-9A02-4CAE-9CBE-6730D87004FB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3971","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42985","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5784","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2994","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (2) by and (3) cat_id parameters to annuaire.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PHPEasyData 1.5.4 permite a atacantes remotos inyectar web script o HTML de su elección a través del (1) parámetro annuaire de (a) last_records.php y (b) annuaire.php y los parámetros (2) by y (3) cat_id de annuaire.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeasydata:phpeasydata:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"69A9A5DC-C1F3-421E-A72C-27540E1FA229"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493273/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29659","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42997","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493273/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2995","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire parameter to annuaire.php or (2) the username field in admin/login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHPEasyData 1.5.4 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del (1) parámetro annuaire de annuaire.php o (2) el campo username en admin/login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeasydata:phpeasydata:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"69A9A5DC-C1F3-421E-A72C-27540E1FA229"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493273/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29659","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493273/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-2996","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de Gravity Board X (GBX) 2.0 Beta, cuando magic_quotes_gpc está inactivo, permiten a atacantes remotos ejecutar comandos SQL de su elección  a través del (1) parámetro searchquery en una acción getsearch, y el (2) parámetro board_id en una acción viewboard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"F03FB72E-B395-412A-BE9B-27FE08A2A2D2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29685","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43022","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5791","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2997","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit (aka create new thread) action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php in Gravity Board X (GBX) 2.0 Beta permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro subject en una acción postnewsubmit (también conocido como creación de un nuevo hilo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"F03FB72E-B395-412A-BE9B-27FE08A2A2D2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29685","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43021","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5791","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2998","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo Aggregation 5.x versiones anteriores a 5.x-4.4 para Drupal permiten a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"},{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8CF7A917-F319-4C29-A843-99A36B4A83B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A64D861C-D011-4CE6-B7C6-EEB4D7CCDC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4CA6032D-27F3-4D80-8714-7F3ACA2E8836"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D6F71C3-0DCB-418A-8FD4-072D49CF9945"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F16FEA3A-265F-4332-A1A1-2879CA5682CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57C2C4F-F4EC-4A25-841D-8597EB1582B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*","matchCriteriaId":"1E8D028E-51F2-4BE9-99F3-85D1BE440FA7"}]}]}],"references":[{"url":"http://drupal.org/node/269479","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43008","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2999","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el módulo Aggregation 5.x versiones anteriores a 5.x-4.4 módulo Aggregation permiten a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8CF7A917-F319-4C29-A843-99A36B4A83B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A64D861C-D011-4CE6-B7C6-EEB4D7CCDC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4CA6032D-27F3-4D80-8714-7F3ACA2E8836"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D6F71C3-0DCB-418A-8FD4-072D49CF9945"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F16FEA3A-265F-4332-A1A1-2879CA5682CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57C2C4F-F4EC-4A25-841D-8597EB1582B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*","matchCriteriaId":"1E8D028E-51F2-4BE9-99F3-85D1BE440FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"}]}]}],"references":[{"url":"http://drupal.org/node/269479","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43010","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3000","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.","cveTags":[],"descriptions":[{"lang":"en","value":"The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions."},{"lang":"es","value":"El módulo Aggregation 5.x versiones anteriores a 5.x-4.4 para Drupal, nodo de acceso cuando se utilizan los módulos, no implementa apropiadamente el control de acceso, lo cual permite a atacantes remotos evitar restricciones previstas.\r\n\t\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8CF7A917-F319-4C29-A843-99A36B4A83B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A64D861C-D011-4CE6-B7C6-EEB4D7CCDC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4CA6032D-27F3-4D80-8714-7F3ACA2E8836"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D6F71C3-0DCB-418A-8FD4-072D49CF9945"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F16FEA3A-265F-4332-A1A1-2879CA5682CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57C2C4F-F4EC-4A25-841D-8597EB1582B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*","matchCriteriaId":"1E8D028E-51F2-4BE9-99F3-85D1BE440FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:5:*:*:*:*:*:*:*","matchCriteriaId":"35595D9F-0DBB-45BF-86A8-6548FFBB588D"}]}]}],"references":[{"url":"http://drupal.org/node/269479","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43017","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3001","sourceIdentifier":"cve@mitre.org","published":"2008-07-03T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.","cveTags":[],"descriptions":[{"lang":"en","value":"The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions."},{"lang":"es","value":"El módulo Aggregation 5.x versiones anteriores a 5.x-4.4 para Drupal permite a atacantes remotos subir ficheros con extensiones de su elección, y posiblemente ejecutar código de su elección, a través de una fuente RSS manipulada que permite subir ficheros con extensiones arbitrarias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8CF7A917-F319-4C29-A843-99A36B4A83B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A64D861C-D011-4CE6-B7C6-EEB4D7CCDC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4CA6032D-27F3-4D80-8714-7F3ACA2E8836"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D6F71C3-0DCB-418A-8FD4-072D49CF9945"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F16FEA3A-265F-4332-A1A1-2879CA5682CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57C2C4F-F4EC-4A25-841D-8597EB1582B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*","matchCriteriaId":"1E8D028E-51F2-4BE9-99F3-85D1BE440FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:aggregation_module:5:*:*:*:*:*:*:*","matchCriteriaId":"35595D9F-0DBB-45BF-86A8-6548FFBB588D"}]}]}],"references":[{"url":"http://drupal.org/node/269479","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43011","source":"cve@mitre.org"},{"url":"http://drupal.org/node/269479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3003","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the \"Excel Credential Caching Vulnerability.\""},{"lang":"es","value":"Office Excel 2007 de Microsoft Gold y SP1, no elimina apropiadamente la cadena PWD (contraseña) del archivo connections.xml cuando se configura un archivo .xlsx para no guardar la contraseña de sesión de datos remota, lo que permite a los usuarios locales obtener información confidencial y obtener acceso a una fuente de datos remota, también se conoce como la \"Excel Credential Caching Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*","matchCriteriaId":"E438882E-1AAE-477E-B885-D4E95D2AE88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31454","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30641","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020669","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5951","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3004","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the \"Excel Indexing Validation Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2000 SP3, 2002 SP3 y 2003 SP2 y SP3; Office Excel Viewer 2003; y Office 2004 y 2008 para Mac no comprueban apropiadamente los valores de índice para los registros AxesSet al cargar archivos de Excel, lo que permite a atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel creado, también se conoce como \"Excel Indexing Validation Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"0BB3D66F-9028-4703-9D6A-629331EEB492"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=740","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31454","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30638","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020670","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5885","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3005","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the \"Excel Index Array Vulnerability.\""},{"lang":"es","value":"La vulnerabilidad del índice de matriz en Microsoft Office Excel 2000 SP3 y 2002 SP3, y Office 2004 y 2008 para Mac permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel con un índice de matriz creado para un registro FORMAT, también se conoce como \"Excel Index Array Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31454","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30639","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020671","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3006","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"This vulnerability has multiple attack vectors and CIA impact.  Please review the following guidance from Microsoft for more information:\r\n\r\nAn attack against a user's local Excel client can result in remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system remotely. An attacker could then install programs or view, change, or delete data; or create new accounts with full user rights.\r\n\r\nAn attack against a Microsoft Office SharePoint Server 2007 site can result in elevation of privilege. An attacker who successfully exploited this vulnerability could gain an elevation of privilege within SharePoint server, as opposed to elevation of privilege within the workstation or server environment.  \r\n\r\nIn an attack against a SharePoint site, an attacker would first need an account on the SharePoint site with sufficient rights to upload a specially crafted Excel file and then create a web part using the file on the SharePoint site.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the \"Excel Record Parsing Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 y SP3, y 2007 Gold y SP1; Office Excel Viewer 2003 Gold y SP3; Office Excel Viewer; Paquete de compatibilidad de Office 2007 Gold y SP1; Office SharePoint Server 2007 Gold y SP1; y Office 2004 y 2008 para Mac no analizan apropiadamente los valores de registro Country al cargar archivos de Excel, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel creado, también se conoce como \"Excel Record Parsing Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*","matchCriteriaId":"E438882E-1AAE-477E-B885-D4E95D2AE88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:*:gold:*:*:*:*:*","matchCriteriaId":"DF7E2389-AE34-4DE5-9974-9F9C383C3E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"0BB3D66F-9028-4703-9D6A-629331EEB492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:*:gold:*:*:*:*:*","matchCriteriaId":"9F367F96-6ADC-4CB7-9542-2B36479210EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"FF147712-EB07-4B2F-AE13-DC8F12CF18BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:*:gold:*:*:*:*:*","matchCriteriaId":"3FE322C4-C86D-4BCD-A232-663A626B7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"CF3C2971-447B-4054-86C6-3169B82E525B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31454","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31455","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495428/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30640","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020672","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-048/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5561","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495428/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-048/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3007","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:11:47.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka \"Uniform Resource Locator Validation Error Vulnerability.\""},{"lang":"es","value":"Microsoft Office XP SP3, 2003 SP2 y SP3, 2007 Office System Gold y SP1, y Office OneNote 2007 Gold y SP1; permiten a atacantes remotos ejecutar código de su elección mediante una URL onenote:// manipulada. También se conoce como \"Vulnerabilidad de Error de Validación en el Localizador Uniforme de Recurso (Uniform Resource Locator - URL)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*","matchCriteriaId":"E438882E-1AAE-477E-B885-D4E95D2AE88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_onenote:2007:gold:*:*:*:*:*:*","matchCriteriaId":"202C71F0-D677-47B5-8A68-68C5EB8771C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_onenote:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"DE9F7984-F68D-4206-8E99-260F98DDB610"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://www.insomniasec.com/advisories/ISVA-080910.1.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/496178/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31067","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020833","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2523","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-055","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5970","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.insomniasec.com/advisories/ISVA-080910.1.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496178/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3008","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:11:47.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka \"Windows Media Encoder Buffer Overrun Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control WMEncProfileManager ActiveX en wmex.dll en Microsoft Windows Media Encoder 9 Series permite a atacantes remotos ejecutar un código arbitrario a través de un primer argumento largo en el método GetDetailsString, también conocido como \"Windows Media Encoder Buffer Overrun Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_encoder:9_series:*:*:*:*:*:*:*","matchCriteriaId":"8494DA8E-2E88-46FE-9FE1-A09DF53BF1FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:*:x64:*:*:*:*:*","matchCriteriaId":"FDDFEA49-9B44-498E-B2DB-E1FC778DE7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2A0607E7-B416-4AF8-ADF6-6E503627DD29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"4D5F7729-A095-43DF-BF2F-B4B6938087FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://www.kb.cert.org/vuls/id/996227","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31065","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020832","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2521","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6454","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.kb.cert.org/vuls/id/996227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3009","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.720","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka \"SPN Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Media Player v6.4, Windows Media Format Runtime v7.1 a v11, y Windows Media Services v4.1, v9, y 2008 no usan apropiadamente el identificador Service Principal Name (SPN) al validar respuestas a peticiones de autenticación, lo que permite a servidores remotos ejecutar código de su elección mediante vectores que emplean reflexión de credenciales NTLM, alias \"Vulnerabilidad SPN\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A375A6D9-5DD3-4DD9-98AF-F513A4C86F88"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3DDE73-E623-45A3-AA49-17BAFB89A2CC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:9:*:*:*:*:*:*:*","matchCriteriaId":"BB5C209B-FF3D-4879-9E75-194462E2E83A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:2008:*:*:*:*:*:*:*","matchCriteriaId":"DB686D09-A33F-408E-9083-F988066FCE66"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:x64:*:*:*:*:*","matchCriteriaId":"0D92470C-AC42-47AA-8580-EB0820D4F726"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*","matchCriteriaId":"87AA5126-90FF-40F5-8664-E8260C2C8CF5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9:*:*:*:*:*:*:*","matchCriteriaId":"0FD41070-7ED7-41D6-AF81-C038A8DB3C0D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://secunia.com/advisories/33058","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32653","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021372","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021373","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3388","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5942","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3010","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.753","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflection attacks, by sending an authentication request, aka \"ISATAP Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 hasta 11, y Windows Media Services 4.1 y 9 incorrectamente asociados a direcciones ISATAP con la zona Intranet local, el cual permite a los servidores remotos capturar credenciales NTLM, y ejecutar arbitrariamente código a través de un ataque \"credential-reflection\", enviado una petición de autenticación, alias \"Vulnerabilidad ISATAP \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:x64:*:*:*:*:*:*","matchCriteriaId":"39956C56-FB39-485B-9BD6-B92807681676"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://secunia.com/advisories/33058","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32654","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021374","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021375","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3388","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5689","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3012","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:11:47.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka \"GDI+ EMF Memory Corruption Vulnerability.\""},{"lang":"es","value":"gdiplus.dll en GDI+ de Microsoft Internet Explorer 6 SP1, Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, Server 2008, Office XP SP3, Office 2003 SP2 y SP3, 2007 Microsoft Office System Gold y SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 y 2008 y Forefront Client Security 1.0 no realiza correctamente la asignación de memoria, lo que permite a atacantes remotos ejecutar código de su elección mediante un archivo de imagen EMF mal formado, también conocido como \"GDI+ EMF Memory Corruption Vulnerability (Vulnerabilidad de Corrupción de Memoria GDI+EMF)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*","matchCriteriaId":"24F42695-7FB7-4C43-A9A7-8A234B6E5937"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"033138E1-82C7-443C-89C1-23D8032674CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*","matchCriteriaId":"30E84216-227B-4074-B65B-6AA399D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:server:2008:*:*:*:*:*:*:*","matchCriteriaId":"FAE680C6-F940-4095-BDD5-05CBD8DA14DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:office_system:*:gold:*:*:*:*:*:*","matchCriteriaId":"D08AE69C-A8E4-4291-AE45-C311BA8168D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:office_system:*:sp1:*:*:*:*:*:*","matchCriteriaId":"9E27318C-A079-40D4-8994-96C6809CA1FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:2003_server:sp1:*:*:*:*:*:*","matchCriteriaId":"CFC4CDAF-F0C4-4B7D-9692-5E73C489F5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:2003_server:sp2:*:*:*:*:*:*","matchCriteriaId":"6265A492-BDB8-4A41-A5D1-9947C8EF002E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*","matchCriteriaId":"85442DDD-DFB0-455D-8078-EFE49ABC60B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32154","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31019","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020835","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6040","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3013","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:11:47.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka \"GDI+ GIF Parsing Vulnerability.\""},{"lang":"es","value":"La biblioteca gdiplus.dll en GDI en Microsoft Internet Explorer versión 6 SP1, Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, Server 2008, Office XP SP3, Office 2003 SP2 y SP3, 2007 Microsoft Office System Gold y SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works versión 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 y 2008, y Forefront Client Security versión 1.0, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de imagen GIF malformado que contiene muchos marcadores de extensión para extensiones de control gráfico y etiquetas desconocidas posteriores, también se conoce como \"GDI+ GIF Parsing Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*","matchCriteriaId":"24F42695-7FB7-4C43-A9A7-8A234B6E5937"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*","matchCriteriaId":"E438882E-1AAE-477E-B885-D4E95D2AE88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"11499249-45FC-4E05-9362-058D1ADA8078"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"033138E1-82C7-443C-89C1-23D8032674CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*","matchCriteriaId":"30E84216-227B-4074-B65B-6AA399D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://ifsec.blogspot.com/2008/09/windows-gdi-gif-memory-corruption.html","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32154","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496154/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31020","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020836","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-056","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-056/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5986","source":"secure@microsoft.com"},{"url":"http://ifsec.blogspot.com/2008/09/windows-gdi-gif-memory-corruption.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-056/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3014","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:11:47.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka \"GDI+ WMF Buffer Overrun Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer en gdiplus.dll en GDI+ en Microsoft Internet Explorer 6 SP1, Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, Server 2008, Office XP SP3, Office 2003 SP2 y SP3, 2007 Microsoft Office System Gold  y SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 y 2008, y Forefront Client Security 1.0, permite a atacantes remotos ejecutar código de su elección a través de un archivo de imagen WMF que lanza una asignación de memoria inadecuada, también conocida como \"Vulnerabilidad GDI+ WMF Buffer Overrun\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*","matchCriteriaId":"24F42695-7FB7-4C43-A9A7-8A234B6E5937"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*","matchCriteriaId":"E438882E-1AAE-477E-B885-D4E95D2AE88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"033138E1-82C7-443C-89C1-23D8032674CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*","matchCriteriaId":"30E84216-227B-4074-B65B-6AA399D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:server:2008:*:*:*:*:*:*:*","matchCriteriaId":"FAE680C6-F940-4095-BDD5-05CBD8DA14DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:server:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"4997ED74-FF5F-43AC-BA74-4DD6B96DEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"C4AC635E-5246-4200-9EC1-81D0F2072934"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:*:gold:*:*:*:*:*","matchCriteriaId":"85442DDD-DFB0-455D-8078-EFE49ABC60B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32154","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31021","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020837","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6004","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3015","sourceIdentifier":"secure@microsoft.com","published":"2008-09-11T01:11:47.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka \"GDI+ BMP Integer Overflow Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de enteros en la biblioteca gdiplus.dll en GDI+ en Office XP SP3, Office 2003 SP2 y SP3, 2007, de Microsoft; Office System Gold y SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2 , SQL Server 2005 SP2, Report Viewer 2005 SP1 y 2008, y Forefront Client Security versión 1.0, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de imagen BMP con una BitMapInfoHeader malformada que desencadena un desbordamiento de búfer, también se conoce como \"GDI+ BMP Integer Overflow Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*","matchCriteriaId":"24F42695-7FB7-4C43-A9A7-8A234B6E5937"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*","matchCriteriaId":"E438882E-1AAE-477E-B885-D4E95D2AE88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"033138E1-82C7-443C-89C1-23D8032674CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*","matchCriteriaId":"30E84216-227B-4074-B65B-6AA399D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32154","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt","source":"secure@microsoft.com"},{"url":"http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/496153/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31022","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020838","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-055","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6619","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6716","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122235754013992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496153/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-253A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3018","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka the \"Malformed PICT Filter Vulnerability,\" a different vulnerability than CVE-2008-3021."},{"lang":"es","value":"Microsoft Office 2000 SP3, XP SP3 y 2003 SP2; Office Converter Pack y Works 8 no analiza sintácticamente correctamente la longitud de un archivo PICT, lo que permite a atacantes remotos ejecutar código de su elección mediante un archivo PICT manipulado, también conocido como \"Vulnerabilidad de Filtro de PICTs Malformados (Malformed PICT Filter Vulnerability)\", una vulnerabilidad distinta a CVE-2008-3021."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"43F7D3B0-B002-4848-B6C4-72866D8A2505"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6C8409-397E-40DF-A645-6409189D450D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31336","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30597","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020673","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5879","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3019","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the \"Malformed EPS Filter Vulnerability.\""},{"lang":"es","value":"Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office converter pack; y Work 8, no analizan gramaticalmente de forma adecuada la longitud del fichero PostScript encapsulado (EPS), lo que permite a los atacantes remotos ejecutar código arbitrario, a través de una fichero EPS manipulado, también conocido como \"Vulnerabilidad de filtro EPS mal formado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6C8409-397E-40DF-A645-6409189D450D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31336","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30595","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020673","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6122","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3020","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the \"Malformed BMP Filter Vulnerability.\""},{"lang":"es","value":"Microsoft Office 2000 SP3 y XP SP3; Office Converter Pack; y Works 8 no parsea apropiadamente la longitud de un fichero BMP, lo cual permite a atacantes remotos ejecutar código de su elección a través de ficheros BMP manipulador, también conocido como \"Vulnerabilidad de Filtros BMP Malformados\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6C8409-397E-40DF-A645-6409189D450D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31336","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30599","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020673","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5868","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3021","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bits_per_pixel field, aka the \"PICT Filter Parsing Vulnerability,\" a different vulnerability than CVE-2008-3018."},{"lang":"es","value":"Office 2000 SP3, XP SP3 y 2003 SP2; Office Converter Pack; y Works versión 8 de Microsoft, no analizan apropiadamente la longitud de un archivo PICT, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PICT diseñado con un campo bits_per_pixel no válido, también se conoce como la \"PICT Filter Parsing Vulnerability\" una vulnerabilidad diferente de CVE-2008-3018."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6C8409-397E-40DF-A645-6409189D450D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31336","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495429/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/30598","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020673","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-049/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5997","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495429/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-049/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3022","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remote attackers to execute arbitrary PHP code via a URL in (1) icerikyolu, (2) sayfaid, and (3) uzanti parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en sablonlar/gunaysoft/gunaysoft.php de PHPortal 1.2 Beta, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en los parámetros (1) icerikyolu, (2) sayfaid, y (3) uzanti."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbbportal:phportal:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"3B6B65EF-19F1-4BCF-9781-5AC1FF31984A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3972","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43569","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5996","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3023","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en FreeStyle Wiki 3.6.2  y anteriores, y 3.6.3 dev3 y versiones de desarrollo previas, cuando se visualizan con Internet Explorer, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, una cuestión distinta de CVE-2005-1799."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fswiki:freestyle_wiki:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.2","matchCriteriaId":"8F0124D3-3ABC-4E74-80BC-1A835A4030C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fswiki:freestyle_wiki:*:dev3:*:*:*:*:*:*","versionEndIncluding":"3.6.3","matchCriteriaId":"F5E03A17-D94B-4076-8C18-45A39E1C85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN77432756/index.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jvn.jp/jp/JVN77432756/index.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30071","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43574","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN77432756/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvn.jp/jp/JVN77432756/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3024","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/."},{"lang":"es","value":"Desbordamiento de búfer basado en pila para phgrafx en QNX Momentics (alias RTOS) 6.3.2 y anteriores que permiten a los usuarios locales obtener privilegios a través de un fichero largo .pal del directorio palette/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:qnx_momentics:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.2","matchCriteriaId":"93D84DF8-481C-4ADC-938A-96C5CC651A32"}]}]}],"references":[{"url":"http://secunia.com/advisories/30808","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3974","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.scanit.net/rd/advisories/adv01","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/493816/100/0/threaded","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30024","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020411","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1996/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43542","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/30808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/3974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.scanit.net/rd/advisories/adv01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/493816/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1996/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3025","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in a redir action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en d.php en plx Ad Trader 3.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"adid\" en un acción \"redir\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plx_web_studio:plx_ad_trader:3.2:*:*:*:*:*:*:*","matchCriteriaId":"CC204E0D-9FF1-446B-8F82-1F87837F5095"}]}]}],"references":[{"url":"http://secunia.com/advisories/30897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43525","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3026","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in OneClick CMS (aka Sisplet CMS) 2008-01-24 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en OneClick CMS (también conocido como Sisplet CMS) 2008-01-24, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oneclick_cms:oneclick_cms:2008-01-24:*:*:*:*:*:*:*","matchCriteriaId":"25A476EE-AD39-4583-99F5-24C80C97DBCA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30032","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43544","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3027","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in get_article.php in VanGogh Web CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the article_ID parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en get_article.php de VanGogh Web CMS 0.9 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro article_ID a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vangogh_web_cms:vangogh_web_cms:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2DB27514-BAA0-4791-BD9A-EB1BF93A3C3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43534","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3028","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Send-A-Card (sr_sendcard) extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en la extensión Send-A-Card (sr_sendcard) 2.2.2 y anteriores para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:send_a_card:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"845D5040-32ED-4035-A977-57ADA7A63ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:send_a_card:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FB39733-9375-424A-9703-9F9640C6E601"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:send_a_card:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E87900C3-CECB-4AC8-AAD9-566924C02D41"}]}]}],"references":[{"url":"http://osvdb.org/46624","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-3/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43510","source":"cve@mitre.org"},{"url":"http://osvdb.org/46624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3029","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión WEC Discussion Forum (wec_discussion) 1.6.2 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"14F19B64-DF0B-4488-A9AE-95D42406C87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A4A7F726-590B-4712-9D54-734C1947C83F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B49C4FCF-8B78-40A2-A602-B02B295CB9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"30AA59A8-CC5F-445F-8BEC-E2BD9876DB42"}]}]}],"references":[{"url":"http://secunia.com/advisories/30905","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-4/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43514","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3030","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in an urunler action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp de EfesTECH Shop 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id en una acción urunler."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efes_tech_shop:efes_tech_shop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"390E073C-E80F-4DBB-95F5-D84A26A5F06F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30896","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43531","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3031","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php in Simple PHP Agenda 2.2.4 y anteriores,permite a atacantes remotos incluir y ejecutar ficheros locales a través de la secuencia .. (punto punto) en el parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"EE1B2DBF-C315-485B-879F-86E6259444A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20A2F2F6-E794-4959-9EB9-31C073BC8F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7427F3-884A-4F7F-8F01-6A76A392ABEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9E49462E-3ECA-48F1-A1BB-303EB974205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"80075A18-B804-44F2-B6D6-B6B498AFFB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F1E829D-BF5D-4092-9EA5-E3C7DFC45681"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_agenda:simple_php_agenda:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EEC6D269-2FCB-4599-8FB7-B7DA1A85FFD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/30909","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30034","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43540","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3032","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the phpMyAdmin (phpmyadmin) extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión phpMyAdmin (phpmyadmin) 3.0.1 y versiones anteriores para TYPO3 permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"5793BA24-7AEB-4438-9090-4373571A918D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:phpmyadmin:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BC23CE4A-1162-406C-A1A2-174228DBD2F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:phpmyadmin:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5DD3DC0B-71D4-465B-A03D-0EE5BE89837B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-2/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43508","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3033","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by (1) an IdFlux request to supprimer_flux.php and (2) a TpsRafraich request to modifier_tps_rafraich.php."},{"lang":"es","value":"RSS-aggregator 1.0 no requiere autentificación de administración para el directorio admin/fonctions/, lo que permite a atacantes remotos acceder a funciones de administración y tener otros impactos no especificados, como se demostró por (1) una petición IdFlux a supprimer_flux.php y (2) una petición TpsRafraich a modifier_tps_rafraich.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rss_aggregator:rss_aggregator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"11E31900-4FCB-420B-BEED-C4EDCE089310"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3975","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493783/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43509","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493783/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3034","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) IdFlux parameter to admin/fonctions/supprimer_flux.php and the (2) IdTag parameter to admin/fonctions/supprimer_tag.php."},{"lang":"es","value":"Múltiples vulerabilidades de inyección SQL en RSS-aggregator 1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) IdFlux a admin/fonctions/supprimer_flux.php y (2) IdTag a admin/fonctions/supprimer_tag.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rss_aggregator:rss_aggregator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"11E31900-4FCB-420B-BEED-C4EDCE089310"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3975","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493783/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43507","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493783/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3035","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary SQL commands via the boardID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo newThread.php del programa XchangeBoard 1.70 Final y anteriores, que permite la utenticación remota de usuarios para ejecutar arbitrariamente comando SQL a través del parámetro boardID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchangeboard:xchangeboard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.70","matchCriteriaId":"AAE4F6CE-A054-483C-9239-49F26995A750"}]}]}],"references":[{"url":"http://secunia.com/advisories/30919","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43529","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3036","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. (dot dot) in the template parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de CMS little 0.0.1 permite a atacantes remotos incluir y ejecutar ficheros locales, y posiblemente ficheros remotos, a través de .. (punto punto) en el parámetro template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms_little:cms_little:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF6B3430-E9F7-415C-AA34-9CB4464BB78C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43539","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5992","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3037","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión Address Directory (sp_directory) 0.2.10 y anteriores para TYPO3, permite atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:address_directory:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.10","matchCriteriaId":"6906BFE7-47B4-4124-A4EF-4B3D919E597E"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30048","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43491","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3038","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Address Directory (sp_directory) 0.2.10 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:address_directory:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.10","matchCriteriaId":"6906BFE7-47B4-4124-A4EF-4B3D919E597E"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30049","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43492","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3039","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión de interfaz externo de DAM (dam_frontend) 0.1.0 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dam_frontend_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"0D4187B2-889A-4AA9-BB67-522CEB7DC4C0"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43477","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3040","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión DAM Frontend (dam_frontend) 0.1.0 y versiones anteriores para TYPO3 permite a atacantes remotos obtener información sensible a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dam_frontend_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"0D4187B2-889A-4AA9-BB67-522CEB7DC4C0"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43478","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3041","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to \"broken access control.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión DAM Frontend (dam_frontend) 0.1.0 y anteriores para TYPO3 tiene un impacto y vectores de ataque desconocidos relacionados con \"broken access control (control de acceso roto)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dam_frontend_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"0D4187B2-889A-4AA9-BB67-522CEB7DC4C0"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43476","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3042","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to \"Improper Error Handling.\""},{"lang":"es","value":"Vulnerabilidad no especificada en DAM Frontend (dam_frontend) extensión 0.1.0 y anteriores para TYPO3, con impacto desconocido y vector de ataque relativo a un \"Inadecuada tratamiento del error\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dam_frontend_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"0D4187B2-889A-4AA9-BB67-522CEB7DC4C0"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43476","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3043","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to \"certain file types.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en la extensión  Discussion Forum WEC (wec_discussion) versión 1.6.2 y anteriores para TYPO3, permite a los atacantes ejecutar código arbitrario a través de vectores relativos a \"ciertos tipos de ficheros\".\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"14F19B64-DF0B-4488-A9AE-95D42406C87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B49C4FCF-8B78-40A2-A602-B02B295CB9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"30AA59A8-CC5F-445F-8BEC-E2BD9876DB42"}]}]}],"references":[{"url":"http://secunia.com/advisories/30905","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-4/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43512","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3044","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the News Calendar (newscalendar) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión News Calendar (newscalendar) 1.0.7 y versiones anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:news_calendar_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7","matchCriteriaId":"206FC2DF-DBBE-4ADE-A115-9A40F37029CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3045","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Industry Database (aka Branchendatenbank pro_industrydb) extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to \"Insufficient Verification of Data Authenticity.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión de base de datos de Industry (también conocido como Branchendatenbank pro_industrydb) 1.0.0 y anteriores para TYPO3, tiene un impacto desconocido y vectores de ataque relacionados con \"Verificación Insuficiente de la Autenticidad de Datos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:industry_database:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"EE827E65-116A-4A3E-A9BB-58A1097B0CB4"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-20080701-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30047","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43490","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3046","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the Packman (kb_packman) extension 0.2.1 and earlier for TYPO3 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en la extensión Packman (kb_packman) 0.2.1 y anteriores para TYPO3 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:packman_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.1","matchCriteriaId":"65D5E9B3-8880-444E-9AB5-5D70253F5541"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:packman_extension:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8F98B3-5D81-466E-8ABE-03F1A5B291E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3047","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the KB Unpack (kb_unpack) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en la extensión KB Unpack (kb_unpack) 0.1.0 y versiones anteriores para TYPO3 tiene un impacto desconocido y vectores de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:kb_unpack_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"C12CD084-FA93-4B8D-9D43-34957B1BB231"}]}]}],"references":[{"url":"http://secunia.com/advisories/30885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43481","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3048","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to \"Unprotected test functionality.\""},{"lang":"es","value":"Vulnerabilidad no especificada en PDF Generator 2 (pdf_generator2) extensión 0.5.0 y anteriores para TYPO3 con impacto desconocido y vector de ataque relativo a \"Desprotección de la funcionalidad de pruebas\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:pdf_generator_2_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.0","matchCriteriaId":"2AC3CB63-4E2C-4E03-AFEF-D1E281DC92F5"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30057","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43487","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3049","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"La extensión de PDF Generator 2 (pdf_generator2) 0.5.0 y anteriores para TYPO3, permite a atacantes obtener información sensible mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:pdf_generator_2_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.0","matchCriteriaId":"2AC3CB63-4E2C-4E03-AFEF-D1E281DC92F5"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30057","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43486","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3050","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión de PDF Generator 2 (pdf_generator2) 0.5.0 y anteriores para TYPO3, permite a los atacantes provocar una denegación de servicio mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:pdf_generator_2_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.0","matchCriteriaId":"2AC3CB63-4E2C-4E03-AFEF-D1E281DC92F5"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30057","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43488","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3051","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Pinboard extension 0.0.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Pinboard extensión 0.0.6 y anteriores para TYPO3 que permiten a los atacantes remotos ejecutar comandos SQL arbitrariamente a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:pinboard_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.6","matchCriteriaId":"FB9DA05D-FE18-42D9-8DD7-E1034790EF17"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43489","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3052","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la extensión SQL Frontendo (ms_omsqlio) 1.0.11 y anteriores para TYPO3, permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.11","matchCriteriaId":"60CE5884-BF2B-48D2-BC34-1105A8F2E67E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43484","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3053","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el FrontEnd (mh_omsqlio), extensión 1.0.11 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.11","matchCriteriaId":"60CE5884-BF2B-48D2-BC34-1105A8F2E67E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"54A45C84-B6EF-4D73-8A86-8F7184896497"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BD2F676A-951A-41B2-9521-A9EBEB616C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E44B371A-5A86-439F-B627-783CCC19739C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F5BDA3E7-DD06-4890-905A-F5C5F071B7AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0ABCAA4E-E381-48A3-9C0F-3CA98C8C93BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5F10CE11-F9FA-49A7-9F8B-37612F6AE85E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"445BA689-07E4-42FF-8351-7398842662ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"38206C4A-6A2B-4EF5-8EBF-7DFA9F36D197"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5009F942-BFC2-49F0-95DE-0BA93E9A7E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F98B7D85-4120-425F-861D-5FBC699B1D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sql_frontend_extension:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"93FF7E59-6852-42D5-BCD4-41F23F6D1962"}]}]}],"references":[{"url":"http://secunia.com/advisories/30885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43483","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3054","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Branchenbuch (aka Yellow Pages o (mh_branchenbuch) extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Branchenbuch (también conocida como Yellow Pages o (mh_branchenbuch) 0.8.1 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:branchenbuch_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.1","matchCriteriaId":"75A380DD-A561-42C9-841B-41836FF420FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3055","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Support view (ext_tbl) extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la Extensión Support view (ext_tbl) 0.0.102 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:support_view_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.102","matchCriteriaId":"C99FF0D5-7B0B-463B-8868-4BC85DB26AAB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43479","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3056","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Codeon Petition (cd_petition) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Codeon Petition (cd_petition) extensión 0.0.2 y anteriores para TYPO3, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:codeon_petition_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.2","matchCriteriaId":"9B794F50-E3E1-4A46-9467-19C948E04FB9"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43475","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3057","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.337","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."},{"lang":"es","value":"Octeth Oempro 3.5.5.1, y posiblemente otras versiones anteriores a 4, no envía una bandera segura (flag) para la cookie PHPSESSID en una sesión https, el cual hace más fácil a los atacantes remotos capturar esta cookie por interceptar su transmisión con una sesión http."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:octeth:oempro:3.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"49F8FE6B-4C4B-4C56-B5DC-36A05678E849"}]}]}],"references":[{"url":"http://octeth.com/blog/category/oempro4/","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/50/oempro.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/50321","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47109","source":"cve@mitre.org"},{"url":"http://octeth.com/blog/category/oempro4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/50/oempro.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/50321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3058","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote attackers to execute arbitrary SQL commands via the FormValue_Email parameter (aka Email field) to index.php in (1) member/, (2) client/, or (3) admin/; or (4) the FormValue_SearchKeywords parameter to client/campaign_track.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Octeth Oempro 3.5.5.1, y posiblemente otras versiones anteriores a 4, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro FormValue_Email (alias Email field) para  index.php en (1) member/, (2) client/, o (3) admin/; o (4) el parámetro FormValue_SearchKeywords para client/campaign_track.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:octeth:oempro:3.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"49F8FE6B-4C4B-4C56-B5DC-36A05678E849"}]}]}],"references":[{"url":"http://octeth.com/blog/category/oempro4/","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/50/oempro.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/50322","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32784","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47112","source":"cve@mitre.org"},{"url":"http://octeth.com/blog/category/oempro4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/50/oempro.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/50322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3059","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.383","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"member/settings_account.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses cleartext to transmit a password entered in the FormValue_Password field, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to the \"Settings - Account Information\" tab."},{"lang":"es","value":"member/settings_account.php en Octeth Oempro 3.5.5.1, y posiblemente otras versiones anteriores a 4, utiliza texto claro para transmitir una contraseña introducida en el campo FormValue_Password, el cual hace más fácil a los atacantes remotos obtener información sensible rastreando la red, en relación a la etiqueta \"Settings - Account Information\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:octeth:oempro:3.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"49F8FE6B-4C4B-4C56-B5DC-36A05678E849"}]}]}],"references":[{"url":"http://octeth.com/blog/category/oempro4/","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/50/oempro.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/50324","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47115","source":"cve@mitre.org"},{"url":"http://octeth.com/blog/category/oempro4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/50/oempro.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/50324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3060","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T00:00:04.070","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message."},{"lang":"es","value":"V-webmail 1.5.0 permite a los atacantes remoto, obtener información privilegiada a través de (1) entrada malformada en la página de login(includes/local.hooks.php) y (2) ID de sesión no inválido, el cual revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v-webmail:v-webmail:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C0C1E37A-DE77-491F-9761-E53681801F42"}]}]}],"references":[{"url":"http://osvdb.org/ref/48/48-v-webmail.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48793","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48794","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45853","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/48/48-v-webmail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3061","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T00:09:07.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en el archivo redirect.php en V-webmail 1.5.0  que permite a los atacantes remotos redirigir a los usuarios a una página web arbitraria y conduce a ataques de phishing a través de una URL en el parámetro to."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v-webmail:v-webmail:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C0C1E37A-DE77-491F-9761-E53681801F42"}]}]}],"references":[{"url":"http://osvdb.org/ref/48/48-v-webmail.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48796","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45855","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/48/48-v-webmail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3063","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T00:00:04.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo login.php en V-webmail 1.5.0, debería permitir a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v-webmail:v-webmail:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C0C1E37A-DE77-491F-9761-E53681801F42"}]}]}],"references":[{"url":"http://osvdb.org/ref/48/48-v-webmail.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48795","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45856","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/48/48-v-webmail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3064","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"RealPlayer has indicated that a version exists called \"enterprise.\"  \r\n\r\nLink: http://service.real.com/realplayer/security/07252008_player/en/","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a \"Local resource reference vulnerability.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en RealNetworks RealPlayer Enterprise, RealPlayer 10, y RealPlayer 10.5 anterior a la build 6.0.12.1675 tiene un impacto y vectores de ataque desconocidos, probablemente relacionados con el acceso a archivos locales, también conocida como \"vulnerabilidad de referencia a un recurso local\"."}],"vendorComments":[{"organization":"Red Hat","comment":"According to RealNetworks this flaw does not affect the Linux version of RealPlayer.","lastModified":"2008-07-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD49D16C-B0AC-4228-9984-010661596232"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"}]}]}],"references":[{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494934/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30378","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020564","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44014","source":"cve@mitre.org"},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494934/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3066","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"RealPlayer has indicated that a version exists called \"enterprise.\"  \r\n\r\nLink: http://service.real.com/realplayer/security/07252008_player/en/","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ciertos controles ActiveX en rjbdll.dll en RealNetworks RealPlayer Enterprise, RealPlayer 10, y RealPlayer 10.5 anterior a la build 6.0.12.1675, permite a atacantes remotos ejecutar código de su elección importando un archivo a una librería de medios y posteriormente eliminando el mencionado archivo."}],"vendorComments":[{"organization":"Red Hat","comment":"According to RealNetworks this issue does not affect the Linux version of RealPlayer.","lastModified":"2008-07-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD49D16C-B0AC-4228-9984-010661596232"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"}]}]}],"references":[{"url":"http://securitytracker.com/id?1020565","source":"cve@mitre.org"},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/461187","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/494778/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30379","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-046/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44013","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/realplayer/security/07252008_player/en/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/461187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/494778/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2194/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-046/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3067","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits."},{"lang":"es","value":"sudo en SUSE de openSUSE 10.3 no limpia el búfer stdin cuando se termina el tiempo de introducción de contraseña, lo que podría permitir a usuarios locales obtener una contraseña leyendo stdin del proceso padre después de que comience un proceso sudo hijo."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of sudo as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"68C88856-5393-4F66-9ECE-62292203A814"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43618","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3068","sourceIdentifier":"cve@mitre.org","published":"2008-07-07T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension."},{"lang":"es","value":"Microsoft Crypto API 5.131.2600.2180 hasta la 6.0, como las usadas en Outlook, Windows Live Mail, y Office 2007, realiza una lista de revocación de certificado (CRL) utilizando una URL arbitraria de un certificado incluido en (1) mensaje de correo electrónico S/MIME o (2) documento firmado, lo que permite a atacantes remotos conseguir tiempos de lectura  y direcciones IP de recipientes, y resultados de escaneo de puerto, a través de \r\nun certificado manipulado con una extensión de de una Authority Information Access (AIA).\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access:2007:*:*:*:*:*:*:*","matchCriteriaId":"1B4D3093-F17C-4BCF-8F4A-F15057C55F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*","matchCriteriaId":"5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*","matchCriteriaId":"5A70D659-F648-4870-852A-4E86D1F4B646"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*","matchCriteriaId":"3C79FEE1-70A3-4A48-BE7B-0D18F0A5FA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"355F60DB-EC9A-4054-8023-BD16D5723C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*","matchCriteriaId":"345BC07E-1558-4C27-BF1A-C13547D175FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:infopath:2007:*:*:*:*:*:*:*","matchCriteriaId":"A007966C-7620-4625-AD2B-6A147577EB54"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:*","matchCriteriaId":"828219FA-E694-46DA-93B0-BE2EC5BBF61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_communicator:2007:*:*:*:*:*:*:*","matchCriteriaId":"61116145-828F-479D-9267-76BAB633B23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*","matchCriteriaId":"36BA88A3-A31F-4F90-8913-67D5BC00E72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"D789259A-034E-40BB-9DFF-76B3104B212F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*","matchCriteriaId":"F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2007:*:*:*:*:*:*:*","matchCriteriaId":"A947639C-B1D3-4297-B4BB-AD799C979BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_professional:2007:*:*:*:*:*:*:*","matchCriteriaId":"1C58C5D7-B6F0-4C95-A305-ED37629E2A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_standard:2007:*:*:*:*:*:*:*","matchCriteriaId":"E8D468F3-894D-409E-A7CE-EAA5919362E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*","matchCriteriaId":"617E8BE3-8AD0-42FC-BDEE-6B1F120AE512"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2007:*:*:*:*:*:*:*","matchCriteriaId":"190A4DF4-EA93-4E18-BA96-7A7AC48831F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_designer:2007:*:*:*:*:*:*:*","matchCriteriaId":"7E057F77-9197-4BC9-A0A1-A71850F59D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio_professional:2007:*:*:*:*:*:*:*","matchCriteriaId":"F9A72192-B10A-4E42-AE68-FE1CB8DA573F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio_standard:2007:*:*:*:*:*:*:*","matchCriteriaId":"9D837BA2-BAC0-4B72-A1DD-CB4A1CA5A347"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_mail:2008:*:*:*:*:*:*:*","matchCriteriaId":"AD3CA537-AAF9-4356-AE7E-0AC14E5AFADF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3978","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493947/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494101/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28548","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019736","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019737","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019738","source":"cve@mitre.org"},{"url":"https://www.cynops.de/advisories/AKLINK-SA-2008-002.txt","source":"cve@mitre.org"},{"url":"https://www.cynops.de/advisories/AKLINK-SA-2008-003.txt","source":"cve@mitre.org"},{"url":"https://www.cynops.de/advisories/AKLINK-SA-2008-004.txt","source":"cve@mitre.org"},{"url":"https://www.cynops.de/techzone/http_over_x509.html","source":"cve@mitre.org"},{"url":"https://www.klink.name/security/aklink-sa-2008-002-outlook-smime.txt","source":"cve@mitre.org"},{"url":"https://www.klink.name/security/aklink-sa-2008-003-live-mail-smime.txt","source":"cve@mitre.org"},{"url":"https://www.klink.name/security/aklink-sa-2008-004-office2007-signatures.txt","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493947/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494101/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cynops.de/advisories/AKLINK-SA-2008-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cynops.de/advisories/AKLINK-SA-2008-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cynops.de/advisories/AKLINK-SA-2008-004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cynops.de/techzone/http_over_x509.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.klink.name/security/aklink-sa-2008-002-outlook-smime.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.klink.name/security/aklink-sa-2008-003-live-mail-smime.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.klink.name/security/aklink-sa-2008-004-office2007-signatures.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3069","sourceIdentifier":"cve@mitre.org","published":"2008-07-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) portal.php and (2) inc/functions_post.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MyBB anterior a 1.2.13, permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante parámetros no especificados en (1) portal.php y (2) inc/functions_post.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.12","matchCriteriaId":"53C7DC96-E461-4181-9555-5DFA116A96DF"}]}]}],"references":[{"url":"http://community.mybboard.net/attachment.php?aid=9272","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/showthread.php?tid=31666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31013","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/attachment.php?aid=9272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://community.mybboard.net/showthread.php?tid=31666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3070","sourceIdentifier":"cve@mitre.org","published":"2008-07-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user['language'] variable, probably related to SQL injection."},{"lang":"es","value":"Vulnerabilidad sin especificar en inc/datahandler/user.php en MyBB anterior a 1.2.13, tiene un impacto y vectores de ataque desconocidos en relación con la variable $user['language'], probablemente relacionado con la inyección SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.12","matchCriteriaId":"53C7DC96-E461-4181-9555-5DFA116A96DF"}]}]}],"references":[{"url":"http://community.mybboard.net/attachment.php?aid=9272","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://community.mybboard.net/showthread.php?tid=31666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31013","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/attachment.php?aid=9272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://community.mybboard.net/showthread.php?tid=31666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3071","sourceIdentifier":"cve@mitre.org","published":"2008-07-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in inc/class_language.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language variable."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en inc/class_language.php de MyBB anterior a 1.2.13, tiene un impacto y vectores de ataque desconocidos relacionados con la variable $language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.12","matchCriteriaId":"53C7DC96-E461-4181-9555-5DFA116A96DF"}]}]}],"references":[{"url":"http://community.mybboard.net/attachment.php?aid=9272","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://community.mybboard.net/showthread.php?tid=31666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31013","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/attachment.php?aid=9272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://community.mybboard.net/showthread.php?tid=31666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3072","sourceIdentifier":"cve@mitre.org","published":"2008-07-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors."},{"lang":"es","value":"Aplicación Simple Machines Forum (SMF) 1.1.x anterior a v1.1.5 y v1.0.x anterior a v1.0.13, cuando es ejecutada sobre PHP anterior a 4.2.0, no inicializa adecuadamente el generador de números aleatorios, que posee un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.12","matchCriteriaId":"F1E2DE6F-5256-404C-88A0-9EB9A1B7586C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"EFF60548-26B3-4213-BC8A-D8CD0D4B76C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30955","source":"cve@mitre.org"},{"url":"http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3073","sourceIdentifier":"cve@mitre.org","published":"2008-07-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to \"use of the html-tag.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Simple Machines Forum (SMF) 1.1.x anterior a 1.1.5 y 1.0.x anterior a 1.0.13, tiene un impacto y vectores de ataque desconocidos, puede que sea una vulnerabilidad de secuencias de comandos en sitios cruzados (XSS), relacionado con el \"uso del html-tag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.12","matchCriteriaId":"F1E2DE6F-5256-404C-88A0-9EB9A1B7586C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"EFF60548-26B3-4213-BC8A-D8CD0D4B76C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/30955","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30108","source":"cve@mitre.org"},{"url":"http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3077","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into the sys32_ptrace function, which allows local users to cause a denial of service (system crash) or have unspecified other impact via unknown vectors, possibly a use-after-free vulnerability."},{"lang":"es","value":"arch/x86/kernel/ptrace.c en el núcleo de Linux  anterior a 2.6.25.10 para plataformas x86_64, filtra referencias task_struct en la función sys32_ptrace, esto permita a usuarios locales provocar una denegación de servicio (caída del sistema) o tener otros impactos no especificados a través de vectores desconocidos. Puede que se trate de una vulnerabilidad de uso después de liberación (use-after-free)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.25.10","matchCriteriaId":"AFC9ED30-C7E9-498C-8936-4F59CF69C0CE"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=1e9a615bfce7996ea4d815d45d364b47ac6a74e8","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31048","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30077","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2063/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=1e9a615bfce7996ea4d815d45d364b47ac6a74e8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2063/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3078","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image."},{"lang":"es","value":"Opera anterior a 9.51, no maneja de forma adecuada la memoria en funciones que soportan el elemento CANVAS, esto permite a atacantes remotos leer contenidos de memoria no iniciada utilizando JavaScript para leer el lienzo de la imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.50","matchCriteriaId":"FB10B9C8-9EA6-401C-93EB-6C6030582953"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31339","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/951/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/951/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/951/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/951/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/951/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/887/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30068","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1997/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43575","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/951/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/951/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/951/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/951/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/951/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/887/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1997/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3079","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Opera anterior a 9.51 en Windows, permite a atacantes ejecutar código de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"5A6BC1AC-5F8E-4CE5-B4B2-4DAB315F64BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/951/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1998/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/951/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1998/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3080","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators.  NOTE: this can be leveraged to execute SQL commands by also exploiting CVE-2007-1899."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF)en admin.php en myWebland myBloggie 2.1.6 que permite a los atacantes remotos realizar acciones como administrador. NOTA: Esto puede ser aprovechado para ejecutar comandos SQL para explotar la vulnerabilidad CVE-2007-1899."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:mybloggie:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"247E690A-5F53-43FB-9B07-113D2F367C3B"}]}]}],"references":[{"url":"http://www.netvigilance.com/advisory0040","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5975","source":"cve@mitre.org"},{"url":"http://www.netvigilance.com/advisory0040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3081","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified \"input validation\" vulnerabilities in the Web management interface (aka Messaging Administration interface) in Avaya Message Storage Server (MSS) 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user vexvm via vectors related to (1) SFTP Remote Store configuration; (2) remote FTP storage settings; (3) name server lookup; (4) pinging another host; (5) TCP/IP Networking parameter configuration; (6) the external hosts configuration main page; (7) adding and changing external hosts; (8) Windows domain parameter configuration; (9) date, time, and NTP server configuration; (10) alarm settings; (11) the command line history form; (12) the maintenance form; and (13) the server events form."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas de \"validación de entrada\" en la interfaz de gestión Web (también conocida como Messaging Administration interface) en Avaya Message Storage Server (MSS) 3.x y 4.0, y puede que en  Communication Manager 3.1.x, permiten a administradores autenticados en remoto ejecutar comandos de su elección como usuario vexvm mediante vectores relacionados con (1) la configuración de SFTP Remote Store; (2) las propiedades de almacenamiento remoto de FTP; (3) las búsquedas en servidores de nombres; (4) haciendo un ping a otro host; (5) la configuración del parámetro TCP/IP Networking; (6) la página inicial de la configuración del host externo; (7) añadiendo y modificando host externos; (8) la configuración del parámetro de dominio de Windows; (9) la configuración de la fecha, hora y servidor NTP; (10) las propiedades de la alarma; (11) el histórico de las líneas de comando; (12) el formato de mantenimiento; y (13) el formato de los eventos del servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:3:*:*:*:*:*:*:*","matchCriteriaId":"910CE044-827E-4B89-AF14-945D81BCCA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0401ED40-3343-4224-9F91-88417F3A57CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90E377-B821-4508-B1AB-B10F47975E54"}]}]}],"references":[{"url":"http://osvdb.org/46587","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-269.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29938","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=100","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=101","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=102","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=103","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=104","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=92","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=93","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=94","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=95","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=96","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=97","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=98","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=99","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1945/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43423","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43424","source":"cve@mitre.org"},{"url":"http://osvdb.org/46587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-269.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=93","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=94","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=96","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=99","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1945/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3082","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en UPM/English/login/login.asp en Commtouch Enterprise Anti-Spam Gateway 4 y 5, permitiendo a los atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través del parámetro PARAMS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:commtouch:enterprise_anti-spam_gateway:4:*:*:*:*:*:*:*","matchCriteriaId":"C11560CA-7411-4D25-8BC7-BB6660226F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:commtouch:enterprise_anti-spam_gateway:5:*:*:*:*:*:*:*","matchCriteriaId":"B805C517-E462-4311-9E51-2A3796BC4F9D"}]}]}],"references":[{"url":"http://blog.commtouch.com/cafe/email-security-news/vulnerability-in-commtouch-gateway-not-anymore/","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062955.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29957","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43442","source":"cve@mitre.org"},{"url":"http://blog.commtouch.com/cafe/email-security-news/vulnerability-in-commtouch-gateway-not-anymore/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3083","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Brightcode Weblinks (com_brightweblinks) componente para  Joomla!, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brightcode:brightcode_weblinks_module:*:*:*:*:*:*:*:*","matchCriteriaId":"EC556B7B-66DE-4015-9332-1DA06A1D7248"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_brightweblinks:*:*:*:*:*:*:*:*","matchCriteriaId":"47006C21-4A11-4B1B-BAA1-7B1829757A71"}]}]}],"references":[{"url":"http://secunia.com/advisories/30922","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30060","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43535","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3087","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to index.php, possibly related to the phpManual module."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Kasseler CMS 1.3.0 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro file de index.php, posiblemente relacionado con el módulo phpManual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9E8ACE0A-F216-4279-B0D7-2FCFF12ABD90"}]}]}],"references":[{"url":"http://secunia.com/advisories/30946","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43600","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3088","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Files en Kasseler CMS 1.3.0 y 1.3.1 Lite permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro cid en la acción Category de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9E8ACE0A-F216-4279-B0D7-2FCFF12ABD90"},{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:1.3.1:*:lite:*:*:*:*:*","matchCriteriaId":"D8C383ED-3665-467D-99C1-567F40C19B0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30946","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30095","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43604","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3089","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en user.html de Xpoze Pro 3.06 (también conocido como Xpoze Pro CMS 2008) permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro uid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpoze:xpoze_pro:3.06:*:*:*:*:*:*:*","matchCriteriaId":"F507FE5A-53C7-472A-8BA7-84317BC1A621"}]}]}],"references":[{"url":"http://secunia.com/advisories/30926","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43607","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3090","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the (1) p, (2) e, (3) d, and (4) m parameters, a different vulnerability than CVE-2008-2819."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de BlognPlus (BURO GUN +) 2.5.5 MySQL y ediciones PostgreSQL permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) p, (2) e, (3) d, y (4) m, una vulnerabilidad diferente a CVE-2008-2819."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blognplus:blognplus:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"40A71CE9-89E2-420A-A165-8E78C98A34A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/blognplus255-en.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.blogn.org/index.php?e=171","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30104","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43592","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43593","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/blognplus255-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.blogn.org/index.php?e=171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3091","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Taxonomy Autotagger 5.x anterior a 5.x-1.8 para Drupal permite a usuarios autentificados remotamente, con permisos para crear o editar posts, inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_autotagger_module:5:*:*:*:*:*:*:*","matchCriteriaId":"8E249C56-C9AE-4ACA-88D2-056A4FCDE173"}]}]}],"references":[{"url":"http://drupal.org/node/277877","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30933","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43570","source":"cve@mitre.org"},{"url":"http://drupal.org/node/277877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3092","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Taxonomy Autotagger 5.x versiones anteriores a 5.x-1.8 para Drupal permite a usuarios remotos autenticados, con permisos de crear o editar post, ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_autotagger_module:5:*:*:*:*:*:*:*","matchCriteriaId":"8E249C56-C9AE-4ACA-88D2-056A4FCDE173"}]}]}],"references":[{"url":"http://drupal.org/node/277877","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30933","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43571","source":"cve@mitre.org"},{"url":"http://drupal.org/node/277877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3093","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and execute arbitrary PHP code by placing a .php filename in the Upload_Avatar parameter and sending the image/gif content type."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en ImperialBB 2.3.5 y anteriores permite a usuarios autentificados remotamente subir y ejecutar código PHP de su elección poniendo un nombre de archivo .php en el parámetro Upload_Avatar y enviando el tipo de contenido image/gif."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplizardo:imperialbb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.5","matchCriteriaId":"CE866002-7403-4979-9948-32949EF69D41"}]}]}],"references":[{"url":"http://phplizardo.breizh-web.net/blog/2008/07/05/advisory-1-imperialbb","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30939","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30100","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43608","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6008","source":"cve@mitre.org"},{"url":"http://phplizardo.breizh-web.net/blog/2008/07/05/advisory-1-imperialbb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3094","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information (private group names) via unspecified vectors."},{"lang":"es","value":"El módulo The Organic Groups (OG) 5.x antes de 5.x-7.3 y 6.x antes de 6.x-1.0-RC1, un módulo para Drupal, permite a atacantes remotos obtener información sensible (nombres de grupo privados) mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-5.x-7.2:*:*:*:*:drupal:*:*","matchCriteriaId":"15F41023-9DBA-429C-8F1A-0D0B7A4A3E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.0:-:*:*:*:drupal:*:*","matchCriteriaId":"75CCBA32-1E76-4CF5-A776-D98E3B3123BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.0:rc1:*:*:*:drupal:*:*","matchCriteriaId":"0FD1B203-1E85-40F7-9389-889276F2602B"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.0:rc2:*:*:*:drupal:*:*","matchCriteriaId":"FF7F6029-CF4F-4284-B329-081A092C5F76"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.0:rc3:*:*:*:drupal:*:*","matchCriteriaId":"424EDA0C-D963-4D7C-8C34-ECA87CD5BA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.0:rc4:*:*:*:drupal:*:*","matchCriteriaId":"FD9E63DF-8FC2-4DFC-9C52-B0E04C3114F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.0:rc5:*:*:*:drupal:*:*","matchCriteriaId":"31DDDBCD-2FB4-416B-A307-A9A03233CC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:5.x-7.1:*:*:*:*:drupal:*:*","matchCriteriaId":"14984E55-52E6-4D69-8E77-68FEFD1DC2BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:6.x-1.0:alpha:*:*:*:drupal:*:*","matchCriteriaId":"50D41261-17C6-4839-BA8E-9914CC123513"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:6.x-1.0:beta:*:*:*:drupal:*:*","matchCriteriaId":"EE31F6F3-2BAE-4CAF-A00C-E86240364A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:organic_groups_project:organic_groups:6.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"26585100-2119-44C2-B1F4-ABB2E65D0677"}]}]}],"references":[{"url":"http://drupal.org/node/277873","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30928","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30070","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43578","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/277873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3095","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Organic Groups (OG) 5.x versiones anteriores a 5.x-7.3 y 6.x versiones anteriores a 6.x-1.0-RC1, un módulo para Drupal, permite a usuarios autenticados remotos, con permisos de propietario de grupo, inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:organic_groups_module:5:*:*:*:*:*:*:*","matchCriteriaId":"48AF8DF9-6ECD-4ED9-A009-C7AF812D31DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:organic_groups_module:6:*:*:*:*:*:*:*","matchCriteriaId":"C078C128-9133-4483-A221-1E46D8409E9F"}]}]}],"references":[{"url":"http://drupal.org/node/277873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43572","source":"cve@mitre.org"},{"url":"http://drupal.org/node/277873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3096","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges."},{"lang":"es","value":"El módulo Outline Designer 5.x anterior a 5.x-1.4 para Drupal cambia cada nivel de autentificación de los contenidos de cada lector para que que sean los mismos que los de autor, lo que podría permitir a atacantes remotos obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:outline_designer_module:5:*:*:*:*:*:*:*","matchCriteriaId":"EE30541F-0D2B-4CDE-B6AD-80900B592DD4"}]}]}],"references":[{"url":"http://drupal.org/node/277883","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30936","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30066","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43548","source":"cve@mitre.org"},{"url":"http://drupal.org/node/277883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3097","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T19:33:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Tinytax module (aka Tinytax taxonomy block) 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Tinytax (también conocido como Tinytax taxonomy block) 5.x anterior a 5.x-1.10-1 para Drupal permite a usuarios autentificados remotamente inyectar secuencias de comandos web o HTML, probablemente creando un término de taxonomía manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:tinytax_taxonomy_block_module:5:*:*:*:*:*:*:*","matchCriteriaId":"74B976B8-29CD-45CE-9B1D-13D86DD3F8CE"}]}]}],"references":[{"url":"http://drupal.org/node/277879","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43549","source":"cve@mitre.org"},{"url":"http://drupal.org/node/277879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3098","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:49.083","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user parameter to the login form."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/usercheck.php de fuzzylime (cms) antes de 3.03 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro user en el formulario de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"152236E5-E47F-4E8B-8111-C419BE638FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.01:*:*:*:*:*:*:*","matchCriteriaId":"A49F2D37-2D21-4B5E-9DF6-9526DA2615E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.01a:*:*:*:*:*:*:*","matchCriteriaId":"2A76FD14-4354-4D82-AFCD-F5B8A12396B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.01b:*:*:*:*:*:*:*","matchCriteriaId":"54AD877B-94BE-453F-BED3-D9FCDF35050C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.02:*:*:*:*:*:*:*","matchCriteriaId":"A18B537B-0FDA-4C16-BB05-89D02613F560"}]}]}],"references":[{"url":"http://cms.fuzzylime.co.uk/st/content/download/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31980","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4303","source":"cve@mitre.org"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-3098-fuzzylime-cms.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496589/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31306","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2650","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45342","source":"cve@mitre.org"},{"url":"http://cms.fuzzylime.co.uk/st/content/download/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-3098-fuzzylime-cms.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496589/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3100","sourceIdentifier":"cve@mitre.org","published":"2008-07-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en lib/owl.lib.php en Steve Bourgeois y Chris Vincent Owl Intranet Knowledgebase 0.95 y versiones anteriores, que permite a los atacantes remotos insertar arbitrariamente una secuencia de comandos web o HTML a través del parámetro username en una acción getpasswd del fichero register.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:owl:intranet_knowledgebase:*:*:*:*:*:*:*:*","versionEndIncluding":"0.95","matchCriteriaId":"F33066B3-A4AB-4289-983C-F3CDCDB3508B"},{"vulnerable":true,"criteria":"cpe:2.3:a:owl:intranet_knowledgebase:0.94:*:*:*:*:*:*:*","matchCriteriaId":"DCC31E21-49E0-41D2-94DB-07B0AEBBFD87"}]}]}],"references":[{"url":"http://secunia.com/advisories/31264","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4057","source":"cve@mitre.org"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-3100-Owl.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/494843/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30410","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44053","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-3100-Owl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/494843/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3101","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the parenttab parameter in an index action to the Products module, as reachable through index.php; (2) the user_password parameter in an Authenticate action to the Users module, as reachable through index.php; or (3) the query_string parameter in a UnifiedSearch action to the Home module, as reachable through index.php."},{"lang":"es","value":"Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en vtiger CRM 5.0.4 permiten a atacantes remotos inyectar web script o HTML a través del parámetro (1) parenttab en una acción index del módulo Products, como se llega a través de index.php; (2) el parámetro user_password en una acción Authenticate del módulo Users, como se llega a través de index.php; o (3) el parámetro query_string en una acción UnifiedSearch del módulo Home, como se llega a través de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE51A9-59AF-47F9-8AFC-5219505FD170"}]}]}],"references":[{"url":"http://secunia.com/advisories/31679","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4208","source":"cve@mitre.org"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-3101-vtigerCRM.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495885/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30951","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vtiger.de/vtiger-crm/downloads/patches.html?tx_abdownloads_pi1%5Baction%5D=getviewdetailsfordownload&tx_abdownloads_pi1%5Buid%5D=128&tx_abdownloads_pi1%5Bcategory_uid%5D=5&cHash=e16be773a5","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2471","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-3101-vtigerCRM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495885/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vtiger.de/vtiger-crm/downloads/patches.html?tx_abdownloads_pi1%5Baction%5D=getviewdetailsfordownload&tx_abdownloads_pi1%5Buid%5D=128&tx_abdownloads_pi1%5Bcategory_uid%5D=5&cHash=e16be773a5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3102","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T11:42:25.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie."},{"lang":"es","value":"Mantis versiones 1.1.x hasta 1.1.2 y versiones 1.2.x hasta 1.2.0a2, no establece el flag de seguridad para la cookie de sesión en https, lo que puede causar que la cookie se envíe en peticiones http y haga mas fácil para los atacantes remotos la captura esta cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"02FE950B-5E29-4FAA-9BE5-79F38B4C38F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6F2BA78-D054-4E49-ABCA-637922898BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4595B1E3-25AB-489E-A847-FDBF2554DD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0a1:*:*:*:*:*:*:*","matchCriteriaId":"5875D457-28EF-4076-8E04-60CF9CF6D27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantisbt:mantisbt:1.2.0a2:*:*:*:*:*:*:*","matchCriteriaId":"301F44D1-21E7-4E00-BF45-2190D1FE21FF"}]}]}],"references":[{"url":"http://int21.de/cve/CVE-2008-3102-mantis.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4298","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496684/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31344","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45395","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00504.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00648.html","source":"cve@mitre.org"},{"url":"http://int21.de/cve/CVE-2008-3102-mantis.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496684/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00648.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3103","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to \"perform unauthorized operations\" via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el agente de administración de Java Management Extensions (JMX) en Sun Java Runtime Environment (JRE) en JDK y JRE 6 Update 6 y anteriores y JDK y JRE 5.0 Update 15 y anteriores, cuando la monitorización local está habilitada, permite a atacantes remotos \"realizar operaciones no autorizadas\" mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DF9D8657-A633-45A1-AADE-30474E03C2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32437","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30146","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020458","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43669","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3104","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Sun Java Runtime Environment (JRE) en JDK y JRE 6 antes de Update 7, JDK y JRE 5.0 antes de Update 16, SDK y JRE 1.4.x antes de 1.4.2_18, y SDK y JRE 1.3.x antes de 1.3.1_23 permiten a atacantes remotos violar el modelo de seguridad para conexiones de salida de un applet conectándose a servicios del localhost que se están ejecutando en la máquina que cargó el applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AAB87D43-2860-43DD-94EE-886D7D75A351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update16:*:*:*:*:*:*","matchCriteriaId":"FD3AC618-7B66-4167-ABE5-87BE6907FB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update18:*:*:*:*:*:*","matchCriteriaId":"2B0EAF17-18D3-45F2-9B6F-66BEC0F49FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update19:*:*:*:*:*:*","matchCriteriaId":"5F861B32-B878-4DFC-A9D1-350B1013AA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update20:*:*:*:*:*:*","matchCriteriaId":"5A469586-4106-48BB-BF92-8FFDC8AA4C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6718104E-82B3-4160-9968-4980C309EC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33236","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1043.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30140","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020459","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43662","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9565","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3105","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving \"processing of XML data\" by a trusted application."},{"lang":"es","value":"Vulnerabilidad no especificada en el cliente y servicio JAX-WS de Sun Java Runtime Environment (JRE), de JDK y JRE 6 Update 6 y anteriores permite a atacantes remotos acceder a URLs o provocar una denegación de servicio mediante vectores desconocidos que involucra \"procesado de datos XML\" por una aplicación de confianza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":8.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30143","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020457","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43654","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43657","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11274","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3106","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java Runtime Environment (JRE), JDK y JRE 6 Update 6 y anteriores y JDK and JRE 5.0 Update 15 y anteriores permite a atacantes remotos acceder a URLs mediante vectores desconocidos que involucran el procesado de datos XML mediante (1) una aplicación o (2) un applet que no son de confianza, una vulnerabilidad distinta a CVE-2008-3105."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DF9D8657-A633-45A1-AADE-30474E03C2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30143","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020457","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43658","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3107","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."},{"lang":"es","value":"Vulnerabilidad no especificada en la Máquina Virtual de Sun Java Runtime Environment (JRE), JDK y JRE 6 antes de Update 7, JDK y JRE 5.0 antes de Update 16, y SDK y JRE 1.4.x antes de 1.4.2_18 permite a atacantes dependientes del contexto obtener privilegios mediante (1) una aplicación o (2) un applet que no son de confianza, como se demostró con una aplicación o un applet que se garantiza privilegios para (a) leer archivos locales, (b) escribir en archivos locales, o (c) ejecutar programas locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_17","matchCriteriaId":"B4D4DE93-903F-48E3-9009-EF6470F8E87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DF9D8657-A633-45A1-AADE-30474E03C2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_17","matchCriteriaId":"15D0F887-8AD6-42B1-8ED6-8E7135690270"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30141","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020455","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43659","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3108","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing."},{"lang":"es","value":"Desbordamiento de búfer en Sun Java Runtime Environment (JRE) de JDK y JRE 5.0 versiones anteriores a Update 10, SDK y JRE 1.4.x versiones anteriores a 1.4.2_18, y SDK y JRE 1.3.x versiones anteriores a 1.3.1_23 permite a atacantes dependientes de contexto conseguir privilegios a través de vectores no especificados relacionados con el procesado de fuentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33236","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33237","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238666-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-300.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1043.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30147","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020461","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43656","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238666-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-300.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3109","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs."},{"lang":"es","value":"Vulnerabilidad no especificada en lenguaje scripting de apoyo en Sun Java Runtime Environment (JRE) de JDK y JRE 6 Update 6 y versiones anteriores permite a atacantes dependientes de contexto conseguir privilegios a través de (1) aplicaciones o (2) applet no confiables, como lo demostrado por una aplicación o applet que se otorga privilegios de (a) lectura de ficheros locales, (b) escritura de ficheros locales, o (c) ejecutar programas locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30144","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020456","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43660","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8540","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3110","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet."},{"lang":"es","value":"Vulnerabilidad no especificada en lenguaje scripting de apoyo en Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 y versiones anteriores permite a atacantes remotos obtener información sensible utilizando un applet para leer información de otra applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30144","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020456","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43661","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10734","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3111","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Sun Java Web Start en JDK y JRE versión 6 anterior a la Actualización 4, JDK y JRE versión 5.0 anterior a la Actualización 16, y SDK y JRE versión 1.4.x anterior a 1.4.2_18, permiten a los atacantes dependiendo del contexto obtener privilegios por medio de una aplicación no confiable, como se ha demostrado por (a) una aplicación que otorga privilegios para sí mismo (1) leer archivos locales, (2) escribir en archivos locales, o (3) ejecutar programas locales; y como lo demuestra por (b) un valor largo asociado con un atributo java-vm-args en una etiqueta j2se en un archivo JNLP, que activa un desbordamiento del búfer en la región stack de la memoria en la función GetVMArgsOption; también se conoce como CR 6557220."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D73559DD-54B4-4DF2-81BC-9109DB29DCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4:*:*:*:*:*:*:*","matchCriteriaId":"BB5DB61B-ED8B-46E6-AF81-8251682D22A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494505/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30148","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020452","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-043/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43664","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10541","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494505/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-043/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3112","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java Web Start de JDK y JRE 6 versiones anteriores a Update 7, JDK y JRE 5.0 versiones anteriores a Update 16, y SDK y JRE 1.4.x versiones anteriores a 1.4.2_18 permite a atacantes remotos crear ficheros de su elección a través de una aplicación no confiable, también conocido como CR 6703909."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_17","matchCriteriaId":"B4D4DE93-903F-48E3-9009-EF6470F8E87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DF9D8657-A633-45A1-AADE-30474E03C2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30148","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020452","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-042/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43666","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11102","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-042/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3113","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java Web Start de JDK y JRE 5.0 versiones anteriores a Update 16 y SDK y JRE 1.4.x versiones anteriores a 1.4.2_18 permite a atacantes remotos crear o borrar ficheros de su elección a través de aplicaciones no confiables, también conocido como CR 6704077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_17","matchCriteriaId":"B4D4DE93-903F-48E3-9009-EF6470F8E87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DF9D8657-A633-45A1-AADE-30474E03C2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30148","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020452","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43667","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10454","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3114","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR 6704074."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java Web Start de JDK y JRE 6 versiones anteriores a Update 7, JDK y JRE 5.0 versiones anteriores a Update 16, y SDK y JRE 1.4.x versiones anteriores a 1.4.2_18 permite a atacantes dependientes de contexto obtener información sensible (la localización de la caché) a través de una aplicación no confiable, también conocido como CR 6704074."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"7E7CD268-A083-43B5-80B7-B7837202CF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_17","matchCriteriaId":"B4D4DE93-903F-48E3-9009-EF6470F8E87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_15:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DF9D8657-A633-45A1-AADE-30474E03C2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_17","matchCriteriaId":"15D0F887-8AD6-42B1-8ED6-8E7135690270"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30148","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020452","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43668","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9755","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0790.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3115","sourceIdentifier":"cve@mitre.org","published":"2008-07-09T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases."},{"lang":"es","value":"Secure Static Versioning de Sun Java JDK y JRE 6 Update 6 y versiones anteriores, y 5.0 Update 6 hasta 15, no previene adecuadamente la ejecución de applets en versiones anteriores de JRE, lo cual puede permitir a atacantes remotos explotar vulnerabilidades en esas versiones anteriores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"94A87B01-2F20-4E1C-8572-395A96C35D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"2A1D1D91-B29F-4335-A7DA-FF988F626907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238966-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30142","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020460","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43665","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-238966-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-193A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2056/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3116","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en dx8render.dll de Snail Game (también conocido como Suzhou Snail Electronic Company) 5th street (también conocido como Hot Step or High Street 5), permite a atacantes remotos ejecutar código arbitrariamente a través de especificadores de formato de cadena en un mensaje chat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hanghai:5th_street:*:*:*:*:*:*:*:*","matchCriteriaId":"5AB46B0E-9E22-415D-8A9D-8371A9410B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:hanghai:high_street_5:*:*:*:*:*:*:*:*","matchCriteriaId":"480E2ABF-E794-4500-9EFC-111E09E5AEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hanghai:hot_step:*:*:*:*:*:*:*:*","matchCriteriaId":"CDB88C39-3A20-4A9E-863C-EBA4F9661DA4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3982","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493649/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29928","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43370","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493649/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3117","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Information from the vendor and further analysis show that the application is not affected by these issues.","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of (1) image/gif, (2) image/jpeg, or (3) image/pjpeg, then accessing it via a direct request to the file under pictures/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en update_profile.php en PHPmotion 2.0 y anteriores, permite a usuarios autenticados remotamente la ejecución de código de su elección subiendo un fichero .php con un contenido de tipo (1) image/gif, (2) image/jpeg, o (3) image/pjpeg y posteriormente accediendo a él a través de una petición directa al fichero en pictures/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D2EDB996-1FEC-40D7-AABE-6D53358CD514"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5BE53E-218B-47E9-A6B1-99BEE23CE9B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29949","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43375","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3118","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"RETIRED: Information from the vendor and further analysis show that the application is not affected by these issues.","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en play.php de PHPmotion 2.0 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro vid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D2EDB996-1FEC-40D7-AABE-6D53358CD514"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5BE53E-218B-47E9-A6B1-99BEE23CE9B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29949","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43376","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3119","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de DreamPics Builder, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dreamlevels:dream_pics_builder:*:*:*:*:*:*:*:*","matchCriteriaId":"3129E5B5-441E-44AB-864D-DBF36F8B5642"}]}]}],"references":[{"url":"http://secunia.com/advisories/31009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3980","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30166","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6034","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3120","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2023-11-07T02:02:24.950","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3363.  Reason: This candidate is a duplicate of CVE-2008-3363.  Notes: All CVE users should reference CVE-2008-3363 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-3121","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Xerox CentreWare Web (CWW) versiones anteriores a la 4.6.46, permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrariamente a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"D8D564A4-3608-4F18-9DA6-A76D551D68D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"59B2F9E1-473B-454F-930D-E7AC2021916B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"3","matchCriteriaId":"97BCBE5A-C085-41A0-AAE2-50DDE7AEA624"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.42","matchCriteriaId":"1F7CD85E-423D-468C-A615-F957A09064F6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30978","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30151","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43671","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3122","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades en Xerox CentreWare Web(CWW) anterior a 4.6.46, permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"D8D564A4-3608-4F18-9DA6-A76D551D68D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"59B2F9E1-473B-454F-930D-E7AC2021916B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"3","matchCriteriaId":"97BCBE5A-C085-41A0-AAE2-50DDE7AEA624"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:centreware_web:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.42","matchCriteriaId":"1F7CD85E-423D-468C-A615-F957A09064F6"}]}]}],"references":[{"url":"http://secunia.com/advisories/30978","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30151","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3123","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Mole Group Real Estate Script 1.1 y versiones anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro listing_id en una acción liftings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole_group:real_estate_script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"95318F2F-294A-4CD8-835C-7AE988565F43"}]}]}],"references":[{"url":"http://secunia.com/advisories/30984","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43639","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3124","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del Mole Group Hotel Script 1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole_group:hotel_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"991EAF35-974D-4B9D-9CF5-C89B936EAA25"}]}]}],"references":[{"url":"http://secunia.com/advisories/30985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30128","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6021","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3125","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php del Mole Group Lastminute Script 4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole_group:lastminute_script:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6BEE1D84-0E5D-4B1C-83C2-EB3635A4C125"}]}]}],"references":[{"url":"http://secunia.com/advisories/31004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2034/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43641","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6020","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6027","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2034/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3126","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the ServerView web interface (SnmpGetMibValues.exe) in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila del interfaz web ServerView (SnmpGetMibValues.exe) en Fujitsu Siemens Computers ServerView 04.60.07 y anteriores permiten a usuarios remotos autenticados ejecutar código arbitrariamente a través de una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:serverview:*:*:*:*:*:*:*:*","versionEndIncluding":"4.60.07","matchCriteriaId":"CA6C5992-D8BF-471E-B079-340993C1ECED"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063043.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30081","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2007/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43611","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2007/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3127","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en hioxBannerRotate.php de HIOX Banner Rotator (HBR) 1.3, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrariamente a través de una URL en el parámetro hm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hiox_india:banner_rotator:1.3:*:*:*:*:*:*:*","matchCriteriaId":"FBB28000-2221-42FC-90DA-C867DFD01495"}]}]}],"references":[{"url":"http://secunia.com/advisories/30900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43501","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3128","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en search.php in Pivot 1.40.5 permite a atacantes remotos para leer archivos arbitrariamente a través de un .. (punto punto) en el parámetro t."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivot:pivot:1.40.5:*:*:*:*:*:*:*","matchCriteriaId":"2D68F87C-CEFC-4428-A6EA-DDA8DCE55999"}]}]}],"references":[{"url":"http://forum.pivotlog.net/viewtopic.php?t=12471","source":"cve@mitre.org"},{"url":"http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog/branches/1.40.x/pivot/modules/module_parser.php?r1=1333&r2=1332&pathrev=1333","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30889","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30012","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020412","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1991/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43470","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5973","source":"cve@mitre.org"},{"url":"http://forum.pivotlog.net/viewtopic.php?t=12471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog/branches/1.40.x/pivot/modules/module_parser.php?r1=1333&r2=1332&pathrev=1333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1991/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3129","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the (1) foreign_key_value parameter in the news page and (2) webpage parameter in the webpage_multi_edit form."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en Catviz 0.4 beta 1 permiten que atacantes remotos ejecuten comandos SQL arbitrarios mediante (1) el parámetro foreign_key_value en la página news y (2) el parámetro webpage en el formulario webpage_multi_edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:catviz:catviz:0.4_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"1031D97E-F8FD-4221-B303-C27649ED9F68"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30014","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43468","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5974","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3130","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenCart 0.7.7 allow remote attackers to inject arbitrary web script or HTML via the (1) firstname and (2) search parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en index.php de OpenCart 0.7.7, permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) firstname y (2) search. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:opencart:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"ED6D2238-6941-4DEA-A771-D23DFED354F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/30177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43504","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43505","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3131","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en chatbox.php de pSys 0.7.0 Alpha, cuando magic_quotes_gpc está desactivada, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro showid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:psys:0.7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"BD1885FC-6DD8-4F8E-ACF1-E720093AB99A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30023","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43499","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5977","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3132","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL  del componente beamospetition (com_beamospetition) para Joomla!, permite a atacantes remotos ejecutar comandos SQL a través del parámetro pet de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_beamospetition:*:*:*:*:*:*:*:*","matchCriteriaId":"42EE8B77-EAF1-4345-880C-653DC633B32C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1975/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43466","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5965","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1975/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3133","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the password parameter."},{"lang":"es","value":"Vulnerabilidad de inyeción SQL en admin/index.php de BareNuked CMS 1.1.0, cuando magic_quotes_gpc está desactivada, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:barenuked:barenuked_cms:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"61476C78-7554-4C60-AC9A-7D814BF051D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43471","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3134","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en GraphicsMAgick anterior a 1.2.4, permite a atacantes remotos provocar una denegación de servicio (caída, bucle infinito o consumo de memoria) a través de vectores no especificados en los decodificadores (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA,  y (9) TGA; y (b) la función GetImageCharacteristics en magick/image.c, desde un fichero (10) PNG, (11) JPEG, (12) BMP, o (13) TIFF manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-3134","lastModified":"2010-05-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E3834A3-8A7E-4914-A20C-EE694150D044"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F96A991C-67A7-4C36-99C4-846BD2175F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BD7E2792-B4BC-4C71-990D-0B7462919568"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10F2FD22-4058-45D6-8352-0AA6382746C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF103AE-6F15-4F2D-A375-F2AF91171EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65929D5C-31B1-4A70-8E9C-AC6749332480"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC45DB14-ABB2-4116-930D-349A81CDB982"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0573F148-0204-4F6B-A7B7-12DDF61C7383"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"489040F9-1992-4030-9AFC-9855CFB8C1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A9942F4B-6608-4828-988C-2F76EB73CC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"12D4C9D5-2A4F-4263-943C-1F46E0BB802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FAA39999-2648-4EBB-A9CD-15FBE9900E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"4AD2742D-41F6-43F4-B90B-B75D54E08326"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2:*:*:*:*:*:*:*","matchCriteriaId":"634E509D-7E46-43EE-BE38-7C3A7690761D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"C656F3BD-3FB8-484C-8853-853C47BDFCE1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32151","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=841176","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=610253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30055","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020413","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1984/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43511","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43513","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=841176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=610253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1984/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3135","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a large numeric value in a 0x80 data block."},{"lang":"es","value":"Soldner Secret Wars 33724 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de un paquete con un valor numérico largo en un bloque de datos 0x80."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:secretwars:soldner_secret_wars:*:*:*:*:*:*:*:*","matchCriteriaId":"D5E06E15-F54C-45BE-8EF3-603035C0954A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/usurdat-adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3983","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493810/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43503","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/usurdat-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493810/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3136","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in catalogue.php in AShop Deluxe 4.x allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en catalogue.php en AShop Deluxe 4.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ashopsoftware:ashop_deluxe:4:*:*:*:*:*:*:*","matchCriteriaId":"3FEDAF3A-5308-4DD8-8863-F3ADBD3113A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/30902","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30022","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43537","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5976","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3137","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors."},{"lang":"es","value":"El analizador GSM SMS en Wireshark (anteriormente Ethereal) 0.99.2 a la v1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020404","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30020","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10860","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15068","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3138","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors."},{"lang":"es","value":"Los analizadores (1) PANA y (2) KISMET en Wireshark (conocido como Ethereal) de la 0.99.3 a la v1.0.0, permite a atacantes remotos provocar una denegación de servicio (parada de aplicación) a través de vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rpath:rpath_linux:1:*:*:*:*:*:*:*","matchCriteriaId":"C0309BD1-170F-4684-AC58-B9FC3EC831C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020404","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30020","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43519","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10536","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14898","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3139","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.  NOTE: this might be due to a use-after-free error."},{"lang":"es","value":"El analizador RTMPT en Wireshark (anteriormente Ethereal) 0.99.8 a la v1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores desconocidos. NOTA: esto puede ser debido a un eror \"user-after-free\" (uso después de liberación)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat\nEnterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rpath:rpath_linux:1:*:*:*:*:*:*:*","matchCriteriaId":"C0309BD1-170F-4684-AC58-B9FC3EC831C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020404","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30020","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43517","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14682","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3140","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an \"incomplete SS7 MSU syslog encapsulated packet.\""},{"lang":"es","value":"El analizador syslog de Wireshark (formerly Ethereal) 1.0.0, permite a atacantes remotos provocar una denegación de servicio (caída de apliación) a través de vectores no conocidos, posiblemente esté relacionada con un “paquete incompleto SS7 MSU syslog encapsulado”."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5","lastModified":"2008-07-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020404","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30020","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43518","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3141","sourceIdentifier":"cve@mitre.org","published":"2008-07-10T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el analizador RMI en Wireshark (anteriormente Ethereal) de la v0.9.5 a la v1.0.0, permite a atacantes remotos leer la memoria del sistema a través de vectores no especificados."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020404","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30020","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43520","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11324","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1982/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3142","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Python 2.5.2 y anteriores en plataformas de 32bit. Permite a atacantes dependientes de contexto causar denegación de servicio (crash) o tener otros impactos no especificados a través de una cadena larga que conduce a una asignación incorrecta de memoria durante el procesamiento de la cadena Unicode, relacionado con la función unicode_resize y el macro PyMem_RESIZE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.6","matchCriteriaId":"9AC83740-7CD8-48B2-8A51-E58ABB6D12B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndExcluding":"2.5.3","matchCriteriaId":"99EC8459-4F64-4433-AA8F-34C45AA83F27"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=232137","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://bugs.python.org/file10825/issue2620-gps02-patch.txt","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://bugs.python.org/issue2620","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31332","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31358","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31473","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32793","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44170","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=232137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://bugs.python.org/file10825/issue2620-gps02-patch.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://bugs.python.org/issue2620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3143","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\""},{"lang":"es","value":"Múltiples desbordamientos de enteros en Python anterior a 2.5.2 permitiría a atacantes dependientes de contexto a tener un impacto desconocido a través de vectores relacionados con (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, y (13) stropmodule.c en Modules/; (14) bufferobject.c, (15) listobject.c, y (16) obmalloc.c en Objects/; (17) Parser/node.c; y (18) asdl.c, (19) ast.c, (20) bltinmodule.c, y (21) compile.c en Python/, como ha sido indicado por \"búsca desbordamiento de enteros, aportado por Google.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.12","matchCriteriaId":"CB298734-933B-4BBD-9E94-2B6BA78833F5"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=232137","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31332","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31473","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32793","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://svn.python.org/view?rev=60793&view=rev","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.python.org/download/releases/2.5.2/NEWS.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.python.org/download/releases/2.6/NEWS.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=232137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.python.org/view?rev=60793&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.python.org/download/releases/2.5.2/NEWS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.python.org/download/releases/2.6/NEWS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3144","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error."},{"lang":"es","value":"Múltiples desbordamientos de enterod en la función PyOS_vsnprintf en Python/mysnprintf.c en Python 2.5.2 y anteriores. Permite a atacantes dependientes de contexto causar denegación de servicio (corrupción de la memoria) o tiene otro impacto no especificado a través de entradas manipuladas a operaciones de formateo de cadenas de caracteres.  NOTA: el manejo de ciertos valores de enteros está también influenciado por  desbordamientos inferiores de enteros relacionados y un error de superación del límite (off-by-one)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"9E0806D1-04EA-492A-8587-1886F47ECC80"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=232137","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugs.python.org/issue2588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.python.org/issue2589","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31332","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31473","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32793","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.python.org/view?rev=63728&view=rev","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://svn.python.org/view?rev=63734&view=rev","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://svn.python.org/view?rev=63883&view=rev","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44171","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=232137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://bugs.python.org/issue2588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.python.org/issue2589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.python.org/view?rev=63728&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://svn.python.org/view?rev=63734&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://svn.python.org/view?rev=63883&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495445/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3145","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read."},{"lang":"es","value":"La función fragment_add_work de epan/reassemble.c en Wireshark versiones 0.8.19 hasta la 1.0.1, permite a atacantes remotos provocar una denegación de servicio (caída) a través de series de paquetes fragmentados con valores de desplazamiento de fragmentación no secuencial, lo cual provoca una sobre-lectua del buffer."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"DA052598-2E72-4568-B783-8B01382736DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"}]}]}],"references":[{"url":"http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31044","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020471","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0237","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:152","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494859/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30181","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2057/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-04.html","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2470","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454984","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43719","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2684","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9020","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"cve@mitre.org"},{"url":"http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494859/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2057/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3146","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T14:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el archivo packet_ncp2222.inc en Wireshark (anteriormente Ethereal) versiones 0.9.7 hasta 1.0.2, permite a atacantes causar una denegación de servicio (bloqueo de aplicación) y posiblemente ejecutar código arbitrario por medio de un paquete NCP diseñado que causa que sea usado un puntero no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"}]}]}],"references":[{"url":"http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020819","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10624","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"cve@mitre.org"},{"url":"http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3147","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%\\WeFi\\Users\\, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files."},{"lang":"es","value":"WeFi 3.2.1.4.1, cuando el modo de diagnóstico está activo, almacena claves de puntos de acceso de (1) WEP, (2) WPA, y (3) WPA2 en (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, y posiblemente (c) un determinado fichero .inf bajo %PROGRAMFILES%\\WeFi\\Users\\, y utiliza texto claro para los ficheros ClientWeFiLog files, lo cual permite a usuarios locales obtener información sensible leyendo esos ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wefi:wefi:3.2.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B6941B73-8A57-460C-9475-5B18C74C8874"}]}]}],"references":[{"url":"http://osvdb.org/51543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30966","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3987","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493946/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494026/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30088","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43621","source":"cve@mitre.org"},{"url":"http://osvdb.org/51543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493946/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494026/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3148","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted DLL file that contains a long string."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en (1) OllyDBG 1.10 y (2) ImpREC 1.7f permite a atacantes asistidos por usuario ejecutar código de su elección a través de un fichero DLL manipulado que contiene una cadena larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mackt:imprec:1.7:f:*:*:*:*:*:*","matchCriteriaId":"B0AB8439-0606-40D1-9392-A0C4B1376606"},{"vulnerable":true,"criteria":"cpe:2.3:a:ollydbg:ollydbg:1.10:*:*:*:*:*:*:*","matchCriteriaId":"232FC92A-8541-4EEA-9CC1-D94D0A88C972"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43673","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43675","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3149","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service (daemon crash) by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB."},{"lang":"es","value":"El demonio SNMP en F5 FirePass 1200 6.0.2 Hotfix 3 permite a atacantes remotos provocar una denegación de servicio (caída del demonio)  mediante la consulta de la rama hrSWInstalled OID en HOST-RESOURCES-MIB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_1200:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0FC157CF-B2D9-49D9-B002-657D2060BE94"}]}]}],"references":[{"url":"http://secunia.com/advisories/30965","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493950/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30090","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43670","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493950/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3150","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions.  NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Neutrino Atomic Edition 0.8.4 permite a atacantes remotos leer y modificar ficheros, como lo demostrado por la manipulación de data/sess.php en las acciones (1) usb y (2) del_pag.\r\nNOTA: esto puede ser aprovechado para la ejecución de código realizando una subida que evita restricciones de acceso previstas que se aplicaron en sess.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neutrino-cms:atomic_edition:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AAB1FB92-E490-4AFC-B10F-29CCA706335E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43616","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3151","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo  4ndvddb 0.91 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción show_dvd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:4ndvddb:0.91:*:*:*:*:*:*:*","matchCriteriaId":"5C1175EB-C5B6-472B-BD6D-1D355ACF7BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:warpspeed:4ndvddb:0.91:*:*:*:*:*:*:*","matchCriteriaId":"84E3C93B-4C98-46F7-9377-AB942B8D3B21"}]}]}],"references":[{"url":"http://secunia.com/advisories/30976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30120","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43626","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3152","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php de SmartPPC y SmartPPC Pro permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro idDirectory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orbitscripts:smartppc:*:*:*:*:*:*:*:*","matchCriteriaId":"E9E4DB2F-7937-4C08-BC12-BA04F0FE3770"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitscripts:smartppc_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"3DA3BA80-4BB6-4057-AD67-CD756CE2D797"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30111","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2013/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43597","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6014","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6019","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2013/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3153","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Triton CMS Pro permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera HTTP X-Forwarded-For."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tritoncms:triton_cms_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"6D841DBA-4D19-4269-BB70-53893DFCD4AA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30122","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2014/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43617","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2014/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3154","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de WebBlizzard CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webblizzard:content_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6F1F10-92A8-4C33-8782-5552AE4E39D3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43595","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3155","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Update method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX (as2guiie.dll) de Panda ActiveScan versiones anteriores a 1.02.00 permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un argumento largo del método Update."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_activescan:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E63FFD6-C269-40BE-AE85-1E3D3E7A2C16"}]}]}],"references":[{"url":"http://karol.wiesek.pl/files/panda.tgz","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020432","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2008/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43588","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6004","source":"cve@mitre.org"},{"url":"http://karol.wiesek.pl/files/panda.tgz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2008/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3156","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method."},{"lang":"es","value":"El control ActiveX ActiveScan (as2guiie.dll) de Panda ActiveScan versiones anteriores a 1.02.00 permite a atacantes remotos descargar y ejecutar ficheros cabinet (CAB) de su elección a través de URLs no especificadas pasando por el método Update."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_activescan:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E63FFD6-C269-40BE-AE85-1E3D3E7A2C16"}]}]}],"references":[{"url":"http://karol.wiesek.pl/files/panda.tgz","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020432","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2008/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43587","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6004","source":"cve@mitre.org"},{"url":"http://karol.wiesek.pl/files/panda.tgz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2008/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3157","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service (resource consumption) via a large number of sessions."},{"lang":"es","value":"Nortel SIP Multimedia PC Client 4.x MCS5100 y MCS5200 no limita el número de sesiones simultáneas, lo cual permite a atacantes provocar una denegación de servicio (agotamiento de recursos) a través de sesiones con números largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:sip_multimedia_pc_client:4.0:*:mcs5100:*:*:*:*:*","matchCriteriaId":"A20FE188-2B3C-42DF-BEFB-6D20EB36F99E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:sip_multimedia_pc_client:4.0:*:mcs5200:*:*:*:*:*","matchCriteriaId":"D0283247-7BEE-42CD-8406-0B196258930F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738961","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020371","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=61","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1942/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43364","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=61","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1942/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3158","sourceIdentifier":"cve@mitre.org","published":"2008-07-11T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL requests that overwrite arbitrary memory."},{"lang":"es","value":"Vulnerabilidad no especificada en NWFS.SYS de Novell Client para Windows 4.91 SP4 tiene un impacto y vectores de ataque desconocidos, posiblemente relacionado con peticiones IOCTL que sobrescriben memoria de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_client_for_windows:4.91_sp4:*:*:*:*:*:*:*","matchCriteriaId":"442CEF97-79B8-46D8-9B41-15E9F344516C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30904","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028543.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30001","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020385","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1968/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028543.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1968/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3159","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to \"flawed arithmetic.\""},{"lang":"es","value":"Desbordamiento de entero en ds.dlm, como el utilizado en dhost.exe de Novell eDirectory 8.7.3.10 anterior a 8.7.3 SP10b y 8.8 anterior a 8.8.2 ftf2, permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados que provocan un desbordamiento del búfer basado en pila. Relacionado con \"aritmética defectuosa\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"}]}]}],"references":[{"url":"http://secunia.com/advisories/30938","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020431","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30085","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1999","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-041/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43589","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-041/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3160","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en IBM Data ONTAP 7.1 anterior a 7.1.3, como se utiliza en IBM System Storage N series Filer e IBM System Storage N series Gateway, tienen un impacto y vectores de ataque desconocidos"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:data_ontap:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"38D44F71-F406-46CD-904A-A6AC4B86EA4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002385","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002386","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002373","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002385&aid=1","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002386&aid=1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30160","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020463","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43699","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002385&aid=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002386&aid=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3161","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en sp/common/system/debug.jsp de IBM Maximo 4.1 y 5.2; permiten a atacantes remotos inyectar secuencias de comandos Web o HTML mediante las cabeceras HTTP (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent  o (6) Cookie. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo:4.1:*:*:*:*:*:*:*","matchCriteriaId":"33E07CA7-21AD-4255-AF4B-7FD99F8CFAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:maximo:5.2:*:*:*:*:*:*:*","matchCriteriaId":"7582C745-7A59-4974-B431-BC3DCBC4C608"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43730","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3162","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función str_read_packet de libavformat/psxstr.c de FFmpeg anterior a r13993 , permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante un fichero STR manipulado que intercala los sectores de audio y vídeo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2649A80-4739-4BBB-AB0B-99AD435BE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4A2E77D-B826-4B49-ADC8-7F704E149A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"18157837-4550-45E3-A12E-AE06E047E253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E9F42611-C3E2-416B-9AE7-A5AE83E4DEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3A20789F-26E3-4871-B24E-25E922BADDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"67C6C243-3ACC-49C3-80CA-D7CA8FEFF0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE6D368-0BA6-4499-B7E1-EE16C03012E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"26C0F6EF-0452-4AFE-AF3E-B88F963A0938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5B4DD372-4D3B-445C-8C38-E083A3C0D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"733C03D7-2780-4D69-A98D-BCFB91D1119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E6979C17-0BC6-47D1-9B73-254D84306A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"204C7C05-3441-4DB0-8702-D99C8FCB381E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"5CD897CA-4F73-437B-9649-951DD2D37B51"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489965","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34385","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34905","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"cve@mitre.org"},{"url":"http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=13993","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1781","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:157","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/09/9","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30154","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-630-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2031/references","source":"cve@mitre.org"},{"url":"https://roundup.mplayerhq.hu/roundup/ffmpeg/issue311","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=13993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/09/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-630-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2031/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://roundup.mplayerhq.hu/roundup/ffmpeg/issue311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3163","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dodosmail_header_file parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en dodosmail.php de DodosMail 2.5, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro dodosmail_header_file. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:regretless:dodos_mail:2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE35FDFB-A88C-4462-9921-98F458B050D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30112","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43625","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3164","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter.  NOTE: it was later reported that 3.01a is also affected."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en blog.php de fuzzylime (cms) 3.01, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.01:*:*:*:*:*:*:*","matchCriteriaId":"A49F2D37-2D21-4B5E-9DF6-9526DA2615E7"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30121.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30121","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2015/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43606","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43939","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6016","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30121.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2015/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3165","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en rss.php de fuzzylime (cms) 3.01a y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro p, como se ha demostrado utilizando content.php. Se trata de un vector diferente de CVE-2007-4805."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:*:a:*:*:*:*:*:*","versionEndIncluding":"3.01","matchCriteriaId":"98600D4B-AF7C-4B8B-9D07-A470A2F7DF4E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3995","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30103","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43605","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43606","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6009","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3166","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en modules/global/inc/content.inc.php de BoonEx Ray 3.5, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro sIncPath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boonex:ray:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E760BBE0-6AAC-44FE-9AE9-3EA323EBB161"}]}]}],"references":[{"url":"http://secunia.com/advisories/30999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3994","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2033/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43644","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6028","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2033/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3167","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in plugins/safehtml/ and the (2) sIncPath parameter to (c) ray/modules/global/inc/content.inc.php. NOTE: vector 1 might be a problem in SafeHTML instead of Dolphin."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en BoonEx Dolphin 6.1.2, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en (1) el parámetro dir[plugins] en (a) HTMLSax3.php y (b) safehtml.php de plugins/safehtml/ y (2) el parámetro sIncPath en (c) ray/modules/global/inc/content.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boonex:dolphin:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C8AA6F2C-1B88-4E50-8C75-CD2B76498428"}]}]}],"references":[{"url":"http://secunia.com/advisories/30981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30995","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3993","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30136","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43647","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6024","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3168","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed."},{"lang":"es","value":"La utilidad de ficheros en Empire Server anterior 4.3.15 revela el tiempo de creación del mundo, esto hace más sencillo a los atacantes determinar la semilla PRNG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.11","matchCriteriaId":"A8F28D39-C0B8-4755-9458-F929560F8E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"97C4498A-81B5-405B-831A-AC85F47A8B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB374BFF-3E33-47CD-88A0-8F512397316E"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"54DFEC4A-F779-4465-B5BE-0CEF8A9C1AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"7146C53E-C190-4FB9-95D9-D8525346CF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"87A5B0F2-D726-4849-9F08-FBC137E2E201"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"AC3A026C-063E-4C83-A741-33AF9DFA9879"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"7A5DDFD5-4A10-42FF-B729-9C1A25B9DC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"AE657661-98D5-499B-8DF7-6C96C27AB332"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"4C9983B0-D36E-4F8D-BA8C-B7B1B12CE6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.19:*:*:*:*:*:*:*","matchCriteriaId":"5713E2CD-6375-4C90-8D66-5B4815899168"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.20:*:*:*:*:*:*:*","matchCriteriaId":"F2FF677B-8DD6-462A-9D0A-2336941C17C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.21:*:*:*:*:*:*:*","matchCriteriaId":"F93CA553-5644-4040-B406-281224E177D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.22:*:*:*:*:*:*:*","matchCriteriaId":"78C9A2B1-FFDA-4300-BFA1-CCE83CECF418"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.23:*:*:*:*:*:*:*","matchCriteriaId":"4B5F23D9-2FED-4DAD-A4E0-FC0C3D3691E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B49FB14B-063B-41F9-A91B-EE5DD56EBDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FA8107F0-F2F2-4DCC-8A47-8A024FA67E96"}]}]}],"references":[{"url":"http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43653","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3169","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a \"coordinate normalization bug.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en Empire Server anterior a 4.3.15, permite a atacantes remotos provocar una denegación de servicio o puede que ejecutar código de su elección mediante vectores no especificados; esto está relacionado con un \"fallo en el normalizador de coordenadas\". NOTA: Algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.11","matchCriteriaId":"A8F28D39-C0B8-4755-9458-F929560F8E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"97C4498A-81B5-405B-831A-AC85F47A8B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB374BFF-3E33-47CD-88A0-8F512397316E"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"54DFEC4A-F779-4465-B5BE-0CEF8A9C1AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"7146C53E-C190-4FB9-95D9-D8525346CF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"87A5B0F2-D726-4849-9F08-FBC137E2E201"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"AC3A026C-063E-4C83-A741-33AF9DFA9879"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"7A5DDFD5-4A10-42FF-B729-9C1A25B9DC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"AE657661-98D5-499B-8DF7-6C96C27AB332"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"4C9983B0-D36E-4F8D-BA8C-B7B1B12CE6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.19:*:*:*:*:*:*:*","matchCriteriaId":"5713E2CD-6375-4C90-8D66-5B4815899168"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.20:*:*:*:*:*:*:*","matchCriteriaId":"F2FF677B-8DD6-462A-9D0A-2336941C17C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.21:*:*:*:*:*:*:*","matchCriteriaId":"F93CA553-5644-4040-B406-281224E177D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.22:*:*:*:*:*:*:*","matchCriteriaId":"78C9A2B1-FFDA-4300-BFA1-CCE83CECF418"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.2.23:*:*:*:*:*:*:*","matchCriteriaId":"4B5F23D9-2FED-4DAD-A4E0-FC0C3D3691E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B49FB14B-063B-41F9-A91B-EE5DD56EBDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:empire_server:empire_server:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FA8107F0-F2F2-4DCC-8A47-8A024FA67E96"}]}]}],"references":[{"url":"http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43655","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3170","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka \"Cross-Site Cooking,\" a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867."},{"lang":"es","value":"Apple Safari permite a los sitios Web establecer cookies para dominios de nivel superior específicos de países, como co.uk Y com.au, esto puede que permita a atacantes remotos realizar un ataque de fijación de sesión y secuestrar la sesión HTTP de un usuario, también conocido como \"Cooking en sitios cruzados\". Vulnerabilidad relacionada con CVE-2004-0746, CVE-2004-0866 y CVE-2004-0867."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31128","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30192","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020539","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43839","source":"cve@mitre.org"},{"url":"http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3171","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data."},{"lang":"es","value":"Apple Safari envía cabeceras Referer que contienen URLs https a diferentes sitios Web https, esto permite a atacantes remotos obtener información potencialmente sensible leyendo la  información de registro almacenada de Referer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30193","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43837","source":"cve@mitre.org"},{"url":"http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3172","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka \"Cross-Site Cooking.\""},{"lang":"es","value":"Opera permite a sitios Web establecer cookies para dominios de nivel superior específicos de países que contienen registros DNS A, como co.tv, esto puede que permita a atacantes remotos ejecutar un ataque de fijación de sesión y secuestrar la sesión HTTP de un usuario, también conocido como \"Cooking de sitios cruzados\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","matchCriteriaId":"E55AA4C5-7075-4336-AFC0-F8981054F8D2"}]}]}],"references":[{"url":"http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html","source":"cve@mitre.org"},{"url":"http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html","source":"cve@mitre.org"},{"url":"http://o.bulport.com/index.php?item=55","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=252342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43951","source":"cve@mitre.org"},{"url":"http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://o.bulport.com/index.php?item=55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=252342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3173","sourceIdentifier":"cve@mitre.org","published":"2008-07-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka \"Cross-Site Cooking.\" NOTE: this issue may exist because of an insufficient fix for CVE-2004-0866."},{"lang":"es","value":"Microsoft Internet Explorer permite a sitios Web establecer cookies para dominios que tienen un dominio público con más de un punto, esto puede que permita a atacantes remotos ejecutar un ataque de fijación de sesión y secuestrar la sesión HTTP de un usuario; también conocido como \"Cooking de sitios cruzados\". NOTA: Puede que esta vulnerabilidad ya exista debido a una insuficiente acotación de CVE-2004-0866."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html","source":"cve@mitre.org"},{"url":"http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43950","source":"cve@mitre.org"},{"url":"http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3174","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to \"insufficient validation.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el controlador kmxfw.sys en CA Host-Based Intrusion Prevention System (HIPS) r8, como lo  utilizado en CA Internet Security Suite y Personal Firewall, permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados, relacionado con \"validación insuficiente\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:host_based_intrusion_prevention_system:r8:*:*:*:*:*:*:*","matchCriteriaId":"94793B1F-E369-4EFC-9A21-C933EDABD402"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:internet_security_suite:2007:*:*:*:*:*:*:*","matchCriteriaId":"2F777415-2F92-49A1-A9B9-05EF2A8438E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:internet_security_suite:2008:*:*:*:*:*:*:*","matchCriteriaId":"31F57EFA-0114-445C-A229-4774C8F5EF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:personal_firewall:2007:*:*:*:*:*:*:*","matchCriteriaId":"D21812DE-B888-46E7-8ED9-4DFA157A122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_associates:personal_firewall:2008:*:*:*:*:*:*:*","matchCriteriaId":"1669EFA7-CC3A-412C-9E08-2F9C8ECB5C31"}]}]}],"references":[{"url":"http://secunia.com/advisories/31434","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30651","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020661","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020662","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020663","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44393","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3175","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow."},{"lang":"es","value":"Subdesbordamiento de enteros en la biblioteca rxRPC.dll en el servicio LGServer en el servidor en CA ARCserve Backup versiones 11.0 hasta 11.5 para ordenadores Portátiles y Escritorios, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio por medio de un mensaje diseñado que desencadena un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*","matchCriteriaId":"E37161BE-6AF5-40E0-BD63-2C17431D8B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*","matchCriteriaId":"477EE032-D183-478F-A2BF-6165277A7414"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*","matchCriteriaId":"22268F99-2F38-481D-A0CC-B1FC96FDB953"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:desktop_management_suite:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E6195AFF-0039-4F48-9E02-ACE8CF052EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.0:*:*:*:*:*:*:*","matchCriteriaId":"C6198653-D0D8-48D4-B2DB-58F92F621DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:*:*:*:*:*:*","matchCriteriaId":"F3B81CE4-F767-4A34-BE39-EEC3DBBF206A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:sp1:*:*:*:*:*","matchCriteriaId":"25BB7845-980B-4085-B07B-CC1AB814B53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.1:*:sp2:*:*:*:*:*","matchCriteriaId":"EE545056-0DFB-4947-B530-F551940DBE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_for_laptops_and_desktops:11.5:*:*:*:*:*:*:*","matchCriteriaId":"0B98A90C-AAA9-44DE-9289-D4E33397B62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:*:*:*:*:*:*","matchCriteriaId":"9190C236-0BBF-47CF-94F5-F2408D33C5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:sp1:*:*:*:*:*","matchCriteriaId":"7D0498FD-4246-427A-8E70-24948EE3A6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:sp2:*:*:*:*:*","matchCriteriaId":"F887250D-D323-4ED7-AA96-829BAC6BB2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:2:*:*:*:*:*:*:*","matchCriteriaId":"533C42DE-8FEA-443A-B250-4CD44A1CFAAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D92D9D51-EBF8-45A2-A315-42DE5768DB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6D020DF6-2016-4901-AC33-FA56C277957C"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495020/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30472","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020590","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44137","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495020/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-3177","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments."},{"lang":"es","value":"El motor de detección de Sophos 2.75 en Linux y Unix, descubierto en Sophos Email Appliance, Pure Message para Unix y Sophos Anti-Virus Interface (SAVI), permite a los atacantes remotos provocar una denegación de servicio (caída del engine) a través del adjunto MIME de longitud cero"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:email_appliance:es1000:*:*:*:*:*:*:*","matchCriteriaId":"8B03E1F8-1ED6-40C5-A164-0581A75634F5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sophos:email_appliance:es4000:*:*:*:*:*:*:*","matchCriteriaId":"881E76E2-3049-49F1-B1FD-322BDBE3C1B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:es1000:*:*:*:*:*:*:*:*","matchCriteriaId":"9B7EE749-CA5F-4348-B39B-E8AA0E61EE0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:es4000:*:*:*:*:*:*:*:*","matchCriteriaId":"29C6192D-4E59-4663-9612-0286CD8AF9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*","matchCriteriaId":"6CCF6E5F-DF9F-4B6A-A826-1268E0EAD4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:sophos_puremessage_anti-virus:*:*:*:*:*:*:*:*","matchCriteriaId":"E44BBA71-625A-4D39-A35F-A87EBE16C95C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31037","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30110","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020462","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2053/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43703","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2053/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3178","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en upload_pictures.php en WebXell Editor 0.1.3, permite a atacantes remotos ejecutar código de su elección subiendo un fichero .php con un tipo de contenido JPG y después accediendo a él a través de una petición directa al archivo en el directorio upload/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webxell:webxell_editor:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"050021F6-0567-4DC9-916D-770263D3237B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30117","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2016/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43596","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2016/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3179","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en website.php de Web 2 Business (W2B) phpDatingClub (también conocido como Dating Club) 3.7 permite a atacantes remotos incluir y  ejecutar ficheros locales de su elección a través de .. (punto punto) en el argumento page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpdatingclub:3.7:*:*:*:*:*:*:*","matchCriteriaId":"CB52A6F3-E7B8-4094-B4BA-B94367FA2B2D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3992","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30176","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2060/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43710","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6037","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2060/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3180","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en upload/file/language_menu.php de ContentNow CMS 1.4.1, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) el parámetro pageid o (2) PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cwh_underground:contentnow_cms:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2ECF9EE7-2A60-4687-8A63-EBB10199CBCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/30888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30102","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43610","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3181","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en upload.php en ContentNow CMS 1.4.1, permite a usuarios autenticados remotamente ejecutar código de su elección subiendo un fichero con una extensión ejecutable y después accediendo a él a través de una petición directa al fichero en el directorio upload/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:content_now:content_now:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED94DC3B-820F-4592-A230-482002708450"}]}]}],"references":[{"url":"http://secunia.com/advisories/30888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30102","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43609","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3182","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U (.m3u) file containing a long MP3 URL."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en DAP.exe de Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, y otras versiones 8.x permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un fichero M3U (.m3u) que contengan una URL larga MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21660E99-4E10-42B9-BA6C-F35BE512146F"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:8:*:*:*:*:*:*:*","matchCriteriaId":"F77AD847-C991-466C-A6E0-41ED0DA0C48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:8.6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1905C440-254B-4FB8-ACFE-32F533CD77D5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30997","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30138","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2027/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43674","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6030","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6039","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2027/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3183","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en ktmlpro/includes/ktedit/toolbar.php de gapicms 9.0.2 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro dirDepth."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gapi_cms:gapicms:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EA18975A-8872-4226-A9D4-80574DA3AFC8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494138/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30173","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2059/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43712","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6036","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494138/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2059/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3184","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated by requests to upload/admincp/faq.php.  NOTE: this issue can be leveraged to execute arbitrary PHP code."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en vBulletin 3.6.10 PL2 y anteriores, y 3.7.2 versiones anteriores a 3.7.x; permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante (1) el PATH_INFO (PHP_SELF) o (2) el parámetro do, como se ha demostrado en peticiones a upload/admincp/faq.php.  NOTA: Esta vulnerabilidad puede ser aprovechada para ejecutar código PHP arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6:*:*:*:*:*:*:*","matchCriteriaId":"75BAA1A3-CA91-402B-8CFE-01778E27B318"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"ABC24504-D78B-45BC-93F1-B5CDCDAA92E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C9129788-2938-4412-96D3-4560EA56825A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"2E8CD7CA-3E0A-428D-A489-F1CC8814D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"04B14DA1-E1BE-4FBF-B4CB-10DEF70EFEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E4EC2725-2150-4EE0-9717-79F444033439"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"36575735-8E55-4497-9A7D-261A136EDADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"A5B2778F-E108-4C6F-AA54-09A6E426A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"5B0BC5E0-7BC9-490C-9C1C-DE089FCA8DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"A41C2C6E-DE18-4FF1-ACC0-4AA6B98C457B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"C16EC27E-E7FE-416C-A518-3BCEEA375E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.10:pl1:*:*:*:*:*:*","matchCriteriaId":"50258677-B723-40C7-A1A0-2F4E9A29E1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0184837A-244A-4603-B699-674F5E00044E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FFE64221-03E3-4443-A394-A033EA1C4D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.1:gold:*:*:*:*:*:*","matchCriteriaId":"5F6E2703-22C1-43ED-B4A1-FB46E8079BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.1:pl1:*:*:*:*:*:*","matchCriteriaId":"3B6EC290-6EFA-4173-835E-B33E1F777F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"77C5D6A7-FF1A-42E5-A787-6351B85DF692"}]}]}],"references":[{"url":"http://secunia.com/advisories/30991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4000","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494049/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30134","source":"cve@mitre.org"},{"url":"http://www.vbulletin.com/forum/showthread.php?t=277945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494049/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbulletin.com/forum/showthread.php?t=277945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3185","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Relative Real Estate Systems 3.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro listing_id en una acción listings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vclcomponents:relative_real_estate_systems:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"31AD53DD-88AB-4AA8-BDF6-C584985FA3A2"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=101","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493663/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29915","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1926/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5924","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493663/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1926/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3186","sourceIdentifier":"cve@mitre.org","published":"2008-07-15T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the membername parameter to (1) members.php, (2) comments.php, (3) photos.php, (4) archive.php, or (5) cat.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Chipmunk Blog (Blogger) permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro membername a (1) members.php, (2) comments.php, (3) photos.php, (4) archive.php, o (5) cat.php. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk_scripts:chipmunk_blogger:*:*:*:*:*:*:*:*","matchCriteriaId":"93C6D65E-3C20-4CBD-B78D-B35687505763"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29883","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43319","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3187","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of service (package data corruption) via a spoofed key."},{"lang":"es","value":"zypp-refresh-patches en zypper en SUSE openSUSE 10.2, 10.3 y 11, no pregunta al usuario antes de aceptar las claves del repositorio, lo que permite a repositorios remotos provocar una denegación de servicio (corrupción en los datos de los paquetes) a través de una clave falsa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:zypper:10.2:*:*:*:*:*:*:*","matchCriteriaId":"5639C450-7C2B-42AF-B48D-16DF0C0ED6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:zypper:10.3:*:*:*:*:*:*:*","matchCriteriaId":"B115BBEF-C8F5-464C-A27A-B1811198D63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:zypper:11.0:*:*:*:*:*:*:*","matchCriteriaId":"06B766BC-A466-444D-8B3D-9C24ECC02979"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31167","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43922","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3188","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords."},{"lang":"es","value":"libxcrypt en SUSE openSUSE 11.0 usa el algoritmo DES cuando la configuración especifica el uso del algoritmo MD5, esto puede facilitar a los atacantes llevar a cabo ataques de fuerza bruta contra las contraseñas (hashed)."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31096","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31339","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30301","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43927","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3189","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en dreamnews-rss.php de DreamNews Manager, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dreamlevels:dreamnews_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"53521BA3-38EC-4138-B285-DF91E40F5F94"}]}]}],"references":[{"url":"http://secunia.com/advisories/31032","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30170","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2058/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43707","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2058/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3190","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de Salto de directorio en list.php de 1Scripts CodeDB 1.1.1, permite a atacantes remotos incluir y ejecutar archivos locales arbitrariamente a través de un .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1scripts:codedb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E7B8C95-8030-41C2-8138-885DBCAFFCC1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31053","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30227","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2105/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43761","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2105/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3191","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, or (6) Yahoo Messenger field in an edit_profile action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en usercp.php de mForum 0.1ª, cuando magic_quotes_gpc está desactivado, permiten a atacantes remotos ejecutar comandos SQL arbitrariamente  a través de the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, o (6) Yahoo Messenger field de una acción edit_profile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcioforum:mforum:0.1a:*:*:*:*:*:*:*","matchCriteriaId":"CAF04BF0-5219-41C0-A255-04C9704EE513"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4003","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30214","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43757","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6068","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3192","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de jSite 1.0 OE, permite a atacante remotos incluir y ejecutar archivos en local arbitrariamente a través de un .. (punto punto) en el parámetro module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sclek:jsite:1.0:*:oe:*:*:*:*:*","matchCriteriaId":"75ADD639-6331-4292-A3F5-C73A12AA22EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30206","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43746","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3193","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jSite 1.0 OE permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro page de la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sclek:jsite:1.0:*:oe:*:*:*:*:*","matchCriteriaId":"75ADD639-6331-4292-A3F5-C73A12AA22EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30206","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43745","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3194","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) langpref, (2) file, (3) blogpost, or (4) cat parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en data/inc/themes/predefined_variables.php de pluck 4.5.1, permiten a atacantes remotos incluir y ejecutar archivos locales arbitrariamente a través de un .. (punto punto) en los parámetros (1) langpref, (2) file, (3) blogpost, o (4) cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pluck:pluck:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A1C91786-390A-40FB-92A1-BC1268128438"}]}]}],"references":[{"url":"http://secunia.com/advisories/31088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3996","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_48.htm","source":"cve@mitre.org"},{"url":"http://www.pluck-cms.org/releasenotes.php#4.5.2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2104/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43741","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_48.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pluck-cms.org/releasenotes.php#4.5.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2104/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3195","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en bin/configure en TWiki anterior a v4.2.3, cuando algún paso en el asistente de instalación es omitido, permite a atacantes remotos leer ficheros de su elección a través de una cadena de consulta que contiene ..(punto punto) en la variable \"image\", y ejecutar archivos de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.2","matchCriteriaId":"92E06542-B556-44C0-901A-0380F09741DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A0E0A8F3-02EE-4A6D-BAAC-1D52DF063197"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F893E121-82FA-41C8-9BA4-606E6DA01408"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"620356EA-F106-41DF-AADA-C1EF5A5A0829"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"979D8BC8-0032-496F-9503-F3BBBC8FA7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0804FF93-6554-4F56-9974-017198ED5F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"41445C95-0309-4B90-B725-87D2FE87C9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9996E5B-36AD-407F-B3B6-839CE8E5913E"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"748325A4-A237-498A-A185-905FC921D2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9FE3EEC6-7E05-4A37-97AA-D73E7D7A0E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"855671F5-C215-4382-B512-4ABD9D66F13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E9C00515-CFEE-427A-BACE-B3140B0D6C67"}]}]}],"references":[{"url":"http://secunia.com/advisories/31849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31964","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4265","source":"cve@mitre.org"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://twiki.org/cgi-bin/view/Codev/TWikiRelease04x02x03#4_2_3_Bugfix_Highlights","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/362012","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7JEQ7L","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2586","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45182","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45183","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-3195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://twiki.org/cgi-bin/view/Codev/TWikiRelease04x02x03#4_2_3_Bugfix_Highlights","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/362012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7JEQ7L","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3196","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack."},{"lang":"es","value":"skeleton.c de yacc, no gestiona correctamente la reducción de una regla con la parte derecha vacía, lo cual permite a los atacantes según contexto provocar un acceso a pila fuera de rango cuando el puntero de yacc stack apunta al final de la pila."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-3196\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.","lastModified":"2008-07-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yacc:yacc:*:*:*:*:*:*:*:*","matchCriteriaId":"75F9A64F-F19E-4289-91D1-1E5D08FD264A"}]}]}],"references":[{"url":"http://marc.info/?l=openbsd-cvs&m=121553004431393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openbsd-cvs&m=121553036432044&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31073","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2151/references","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openbsd-cvs&m=121553004431393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openbsd-cvs&m=121553036432044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2151/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3197","sourceIdentifier":"cve@mitre.org","published":"2008-07-16T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the \"Creating a Database\" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-site request forgery (CSRF) en phpMyAdmin anterior a versión 2.11.7.1, permite a atacantes remotos realizar acciones no autorizadas por medio de un enlace o etiqueta IMG para (1) el parámetro db en la funcionalidad \"Creating a Database\" (en archivo db_create.php), y los parámetros (2)  convcharset y collation_connection relacionados a un programa no especificado que modifica el ajuste de caracteres de conexión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"784EF815-B20A-4D26-8FCA-04BCBAD65BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*","matchCriteriaId":"40B0D6C2-AF9E-4395-861D-64502D82589A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9C3663CE-AF25-4A0A-811E-DE58B7E5D934"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"6F14B08F-6583-4686-B534-616D42B7D90B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"D4CD5425-79A4-4506-8BDA-299449EB51DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F754BBA9-765F-4BDE-9AF3-3DA4300B17C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7A136E97-05EA-4ADF-82F5-E2D0C7737D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"53AE58C1-CB8C-415F-BF58-BD356D3AC000"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F666B78D-5DC9-4256-8A23-A4021AE7044A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"229DE8B7-489B-4848-B1BE-2339CB771573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D9BC58E6-CA26-4760-A6A4-D65184A50539"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"ACE7C97E-60C6-417F-86F7-963ADE52A895"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"ADDE752A-19A1-4910-9C56-0FDFFA367E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3FF189AE-9485-4F8C-AAAE-25088DF6F964"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*","matchCriteriaId":"643C7F9B-B8C5-4C76-B706-F8CB5A800936"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"560BC57D-BDCE-4479-9847-6DB53A89FFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4859644F-E5FF-4AE4-B16D-CC2243964D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"48888218-B238-4F0D-A4C2-E9877D3F3A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A393256A-A5BE-4467-8058-E9CA5D626D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9C4839-2356-4630-BDB3-4A0171F3A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6F6E3468-78AF-471C-A09E-1ACCC6867256"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DF345665-3C1D-4F44-B648-B695D88267BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"F2C525B9-636F-49B9-B528-50AEB0E98F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*","matchCriteriaId":"DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"74632C65-6711-4425-A43F-CCF1664C8542"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*","matchCriteriaId":"BD740315-190A-43B7-8399-9B72FA592AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*","matchCriteriaId":"794AE77E-843C-4CB4-9462-E4FE8C4C2896"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B51601C-EDDC-41B7-82E9-EA4E7745F935"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_dev:*:*:*:*:*:*:*","matchCriteriaId":"704C4359-A80E-456F-AA69-D188E4DFDBA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"5DAB33AF-D8A9-444F-AC69-FACCFA0EEB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D1600D28-5583-4FA2-835F-BCE10813DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"EAEA71B2-99EE-4975-A46B-A38112CD4F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*","matchCriteriaId":"80AAD482-064D-4CFB-A1AE-49095036485A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl2:*:*:*:*:*:*:*","matchCriteriaId":"33423F75-0F5A-49F6-BF70-66DC2CE39E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*","matchCriteriaId":"6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*","matchCriteriaId":"CD3C5C9D-A802-40F3-B3CE-593CFED745CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D8FE9713-54BE-4A70-82F8-03B8E1915E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7:*:*:*:*:*:*:*","matchCriteriaId":"0611660F-F060-453C-8BE2-1599FE3FF9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"2887738D-57A8-4E43-8498-5C8D0FAAA030"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"892F5D72-1814-48A5-8CCA-A74EE9D633CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"E25A359B-8FFD-4941-9419-4E99373D9588"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"1F79633E-19C0-4448-92F1-7C291C9CCD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9FD0D-2786-43BB-938B-A45D9B60E08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"4D3CE1C3-59FF-457F-8579-996CA60CF6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"60F2B3C2-0EDB-48D3-92BC-B1CA0E41F230"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9852676-A91F-4FD6-A734-BF7E048411FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FC64B22B-E415-4510-A0DF-CE4763A423D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"12375469-DD81-42BE-8BC0-FCAB0D2D6253"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FCEF6246-C393-41BE-BABC-840585795D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*","matchCriteriaId":"E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2ACC829-CF64-4F20-8827-AA95002A6F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"05D4C98E-D127-40EB-BE71-A6BB91D4392C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C26B2DE-669F-4F79-99AE-3210662AAB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E4B64201-5B5B-4D22-B341-C601DC54BFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"44DA3E88-1572-484D-A4DB-A99EF7D73129"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E65F392-A841-461A-921C-91F40330F3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5A7F2F4E-7DCC-43F8-BB69-BE553C2F8F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1CDE3326-8B3F-4C3A-BA40-6F91CDFAFA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"36C4A673-5ACD-4D1A-A780-5CD279230051"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*","matchCriteriaId":"0534C39C-A421-4C97-8A96-A74ABFA78B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9BD0DFB0-92F1-4914-A637-A2EBCE0A9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E6354257-6B1A-4729-9EE2-19D3CD2AD62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4686B445-3843-4173-8565-16BF364EF911"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"1519A451-0EC8-4718-991D-948572C08410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9ACAA116-2853-456B-BC9C-B036A0F99FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A8AF5A1A-328E-43A1-8C41-0DAB1F337FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B3130CFD-FF94-48D2-BF9A-D7FDD3CD6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E6C869A-0307-40D9-85D6-05453B6BEA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"795B4F23-BA5E-466B-9FC3-C7A00A110774"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC1F099-04AC-4210-8477-07B21E087162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8F3A44D6-F174-428E-8456-5B7B093D7A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*","matchCriteriaId":"EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"CD5CB748-A953-4CAD-B8F9-21F43D2992E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*","matchCriteriaId":"A4843917-B7B1-4871-AE2B-2219C6EB85F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5rc1:*:*:*:*:*:*:*","matchCriteriaId":"A217F2AE-185D-4385-8804-475DB12CFA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*","matchCriteriaId":"CC99B93D-2171-40DE-90B3-61D6DB9F6D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31097","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613660","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/6","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-5","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2116/references","source":"cve@mitre.org"},{"url":"http://yehg.net/lab/pr0js/advisories/XSRF_ConvertCharset_inPhpMyAdmin2.11.7.pdf","source":"cve@mitre.org"},{"url":"http://yehg.net/lab/pr0js/advisories/XSRF_CreateDB_inPhpMyAdmin2.11.7.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43846","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00590.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00652.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2116/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://yehg.net/lab/pr0js/advisories/XSRF_ConvertCharset_inPhpMyAdmin2.11.7.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://yehg.net/lab/pr0js/advisories/XSRF_CreateDB_inPhpMyAdmin2.11.7.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00590.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00652.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3198","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page.  NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933."},{"lang":"es","value":"Mozilla Firefox en versiones 3.x anteriores a 3.0.1 que permiten a los atacantes remotos insertar código arbitrario de secuencia de comandos web dentro de un documento chrome a través de vectores no especificados, como se demuestra por inyección en una página de error XUL. NOTA: Esto puede ser escalado a ejecutar código arbitrario usando CVE-2008-2933."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-35.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30244","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441169","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44199","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-35.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3199","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via unknown network traffic with a large \"bytes-in-memory/bytes-on-wire ratio.\""},{"lang":"es","value":"Vulnerabilidades múltiples no especificadas en ReSIProcate en versiones anteriores a 1.3.4, que permite a los atacantes remotos causar una denegación de servicios (agotamiento de pila) a través de tráfico desconocido de red con un largo \"bytes-in-memory/bytes-on-wire ratio.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:resiprocate:resiprocate:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"FD11EB58-FA97-4412-9B07-A8B146D30AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:resiprocate:resiprocate:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"246CA566-E38B-4832-A6E9-B44A358E74F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:resiprocate:resiprocate:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8E1FA16-419B-403E-941B-43D028B403D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:resiprocate:resiprocate:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"09EE31F1-6C60-4C1C-8849-28DB007E3CC5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31251","source":"cve@mitre.org"},{"url":"http://www.resiprocate.org/ReSIProcate_1.3.4_Release","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30399","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.resiprocate.org/ReSIProcate_1.3.4_Release","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3200","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affich_message action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en vlc_forum.php en Avlc Forum como de 20080715, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de parámetro id en una acción affich_message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:avlc_forum:*:*:*:*:*:*:*:*","matchCriteriaId":"B2D55385-CC87-4C5B-9E90-CAFED24576C5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43740","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6058","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3201","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) acct_fname and (2) acct_lname parameters in an edit action, and the (3) PID, (4) PGID, and (5) rez parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Pagefusion 1.5 que permite a los atacantes remotos inyectar arbitrariamente un secuencia de comando web o HTMÑ a través de (1) acct_fname y (2) parámetros acct_lname in una accion edit, y el (3) PID, (4) PGID, y (5) parámetros rez. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos únicamente de información de terceros"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagefusion:pagefusion:1.5:*:*:*:*:*:*:*","matchCriteriaId":"01FF2888-98F0-4B36-B87A-6CCB780FAF85"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30155.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31050","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30155","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43711","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3202","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_url parameter in a tellafriend action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Xomol CMS 1.2, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro current_url en una acción tellafriend. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xomol:xomol_cms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CBF6CCA2-FB82-4326-AC1F-DB73BD195F23"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30156.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30156","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44058","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3203","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter."},{"lang":"es","value":"js/pages/pages_data.php en AuraCMS 2.2 hasta 2.2.2 sin realizar autenticación, lo que permite a los atacantes remotos añadir, editar y borrar contenidos web a través del parámetro id modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7506B9A2-A20E-48D3-9809-8E4B34CB243E"},{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CCAA5702-01AB-4238-A4A8-E890F5BDB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:auracms:auracms:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"054E2EA6-5A0F-48D0-BB32-5F5DBDA312BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31000","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.auracms.org/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30169","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43682","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6033","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.auracms.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3204","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tops_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQL commands via the id_cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ops_top.php en E-topbiz Million Pixels 3, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id_cat"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:million_pixels:3:*:*:*:*:*:*:*","matchCriteriaId":"03651DAB-6546-4D18-A1D5-B187002BFAAB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31059","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43729","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3205","sourceIdentifier":"cve@mitre.org","published":"2008-07-17T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Easy-Script Wysi Wiki Wyg 1.0, permite a los atacantes remotos leer arbitrariamente archivos a través de .. (punto punto) en el parámetro c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:wysi_wiki_wyg:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4E7C2A-9991-4FCA-9C77-78DF56F4164D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4007","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30183","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43717","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6042","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3206","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary SQL commands via the category parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browse.groups.php en Yuhhu Pubs Black Cat permite a atacantes remotos ejecutar comandos SQL arbitrario a través del parámetro \"categoría\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iamilkay:yuhhu_pubs_black_cat:*:*:*:*:*:*:*:*","matchCriteriaId":"52302AC6-ADDF-45FF-85F2-7828790283F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494319/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30221","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494319/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3207","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) sourceFolder or (2) moduleFolder parameter."},{"lang":"es","value":"vulnerabilidad de inclusión de ficheros PHP remotos en cms/modules/form.lib.php del Pragyan CMS 2.6.2, cuando register_globals esté habilitado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro (1) sourceFolder o (2) moduleFolder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragyan:praygan_cms:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B24A76-9B0B-41FC-A11E-B09350ABC95F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31101","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4010","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30235","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43777","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6078","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3208","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets."},{"lang":"es","value":"Simple DNS Plus 4.1, 5.0 y posiblemente otras versiones anteriores a la 5.1.101 permiten a atacantes remotos causar una denegación de servicio a través de múltiples paquetes de DNS Reply."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpledns:simple_dns_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.101","matchCriteriaId":"30630DA3-70AF-4CD4-938D-FCF5F649B5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpledns:simple_dns_plus:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C2E61F8D-2495-4D91-95A1-05E7CD13AAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simpledns:simple_dns_plus:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2EDCEF28-CEED-497D-935D-4E5FB6D129A0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4011","source":"cve@mitre.org"},{"url":"http://www.blackhat.org.il/index.php/simple-dns-plus-5041-remote-denial-of-service-exploit/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494304/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30207","source":"cve@mitre.org"},{"url":"http://www.simpledns.com/kb.aspx?kbid=1246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43767","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6059","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.org.il/index.php/simple-dns-plus-5041-remote-denial-of-service-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494304/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.simpledns.com/kb.aspx?kbid=1246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3209","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función OpenGifFile de BiGif.dll en Black Ice  Document Imaging SDK 10.95 permite a atacantes remotos ejecutar código arbitrario a través de un argumento del método GetNumberOfImagesInGifFile con una cadena excesivamente larga en el control ActiveX BIImgFrm Control en biimgfrm.ocx. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackice:black_ice_document_imaging_sdk:10.95:*:*:*:*:*:*:*","matchCriteriaId":"3D4299D1-5CD2-4D20-9A97-2AE42D4BAC84"}]}]}],"references":[{"url":"http://secunia.com/advisories/31095","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4012","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30243","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43830","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6083","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3210","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, which triggers an assert error."},{"lang":"es","value":"rutil/dns/DnsStub.cxx en ReSIProcate 1.3.2, usado por repro, permite a atacantes remotos causar una denegación de servicio (con caída del demonio) a través de un mensaje SIP (1) INVITE o (2) OPTIONS con un nombre de dominio excesivamente largo en una peticion de URI, lo cual ocasiona un error de confirmación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:resiprocate:resiprocate:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"09EE31F1-6C60-4C1C-8849-28DB007E3CC5"}]}]}],"references":[{"url":"http://labs.mudynamics.com/advisories/MU-200807-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4013","source":"cve@mitre.org"},{"url":"http://www.resiprocate.org/ReSIProcate_1.3.3_Release","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30194","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43770","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6046","source":"cve@mitre.org"},{"url":"http://labs.mudynamics.com/advisories/MU-200807-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.resiprocate.org/ReSIProcate_1.3.3_Release","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3211","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1."},{"lang":"es","value":"Scripteen Free Image Hosting Script 1.2 y 1.2.1   permiten a atacantes remotos evitar la autenticación y ganar acceso administrativo estableciendo el valor de la cookie cookid a 1"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripteen:free_image_hosting_script:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D9E2B3B-0E78-464E-B93B-739CBCAF2177"},{"vulnerable":true,"criteria":"cpe:2.3:a:scripteen:free_image_hosting_script:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D8D6A4F6-377F-449E-B539-56A68C1767C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31083","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30217","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2106/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43771","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6070","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2106/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3212","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/login.php, or the (3) uname or (4) pass parameter to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en Scripteen Free Image Hosting Script 1.2.1 permiten a atacantes remotos ejecutar código SQL arbitrario a través de los parámetros (1) Usuario o (2) contraseña de admin/login.php y también de los parámetros (3) uname o (4) pass de login.php. Nota: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripteen:free_image_hosting_script:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D8D6A4F6-377F-449E-B539-56A68C1767C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31083","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30216","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43772","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3213","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T15:13:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en secciones/tablon/tablon.php en el WebCMS Portal Edition permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"id\" de portal /index.php en una acción de tablón. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcms:webcms_portal_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"85E1A0B9-6522-4535-AD04-8168804C73E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30204","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43739","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6056","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3214","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREQUEST for an IP address that is not in the same network, related to the DHCP NAK response from the daemon."},{"lang":"es","value":"dnsmasq versión 2.25, permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) al (1) renovar una concesión inexistente o (2) enviar un DHCPREQUEST para una dirección IP que no está en la misma red, relacionada con la respuesta NAK DHCP del demonio."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of dnsmasq as shipped with Red Hat Enterprise Linux 5.","lastModified":"2008-07-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*","matchCriteriaId":"4ADECE43-F034-43E5-AA84-3EB336877DEC"}]}]}],"references":[{"url":"http://freshmeat.net/projects/dnsmasq/?branch_id=1991&release_id=217681","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/8","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/02/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/8","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/47438","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43929","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/dnsmasq/?branch_id=1991&release_id=217681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/06/30/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/01/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/02/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/03/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/47438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3215","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2713."},{"lang":"es","value":"libclamav/petite.c en ClamAV anterior a 0.93.3 permite a atacantes remotos  causar una denegación de servicio mediante un fichero Petite mal formado que ocasiona un acceso a memoria fuera del rango. NOTA: este problema existe debido a una reparación incompleta de CVE-2008-2713."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"FFFA6F1E-9F25-400C-B626-3B9EDA396913"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p0:*:*:*:*:*:*","matchCriteriaId":"B44285AE-655B-4959-A7DC-4FADFF65F7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p1:*:*:*:*:*:*","matchCriteriaId":"E702EF3E-D8B8-4D98-AFB0-ADB1223BF43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:p0:*:*:*:*:*:*","matchCriteriaId":"1BDC65CA-CE5D-4B69-B71B-CEE18DC85945"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:p0:*:*:*:*:*:*","matchCriteriaId":"E72D92F1-6316-4CCF-89A8-03FBAD10E6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"BC24A055-278C-4A78-8C68-AC7618EF3EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p0:*:*:*:*:*:*","matchCriteriaId":"04440EB7-E69B-4994-B058-9B476E061495"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p1:*:*:*:*:*:*","matchCriteriaId":"01E81F38-9805-4FD8-8867-48C06762349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:p0:*:*:*:*:*:*","matchCriteriaId":"EE5B77A2-99D7-4553-B29F-B9EE15B96218"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:p0:*:*:*:*:*:*","matchCriteriaId":"D8364198-B569-43FB-A946-A46969BCF2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"40F14DB9-8437-4CEB-9D63-098FD9E604E7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"cve@mitre.org"},{"url":"http://lurker.clamav.net/message/20080707.155612.ad411b00.en.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31437","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200808-07.xml","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:166","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44200","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00606.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000#c4","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lurker.clamav.net/message/20080707.155612.ad411b00.en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200808-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00606.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000#c4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3216","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack."},{"lang":"es","value":"La función save en br/prefmanager.d en projectl 1,001 crea un fichero projectL.prf en el directorio de trabajo actual, que permite a usuarios locales sobreescribir archivos arbitrarios a través de un ataque por seguimiento de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:projectl:1.001:*:*:*:*:*:*:*","matchCriteriaId":"C79AD3D0-222E-437B-97EF-BDD8B68E1FC7"}]}]}],"references":[{"url":"http://bugs.debian.org/489988","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/09/8","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44059","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/489988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/09/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3217","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning.  NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637."},{"lang":"es","value":"PowerDNS Recursor anterior a 3.1.6 no utiliza siempre el generador de números aleatorios más robusto para la selección de un puerto de origen, lo que le hace más fácil para los vectores de ataque remotos para llevar a cabo un ataque por envenenamiento de caché DNS. NOTA: Esto está relacionado con la incompleta integración de las mejoras de la seguridad asociados con CVE-2008-1637."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.5","matchCriteriaId":"AA8CA6BA-8533-47D2-99AE-F8AFDEF78A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:3.0:*:*:*:*:*:*:*","matchCriteriaId":"38DDFF27-8CBB-468D-9837-C74538E5EF0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B3920499-3580-4EA6-AD56-6515C3B8495A"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FA1E4934-6690-4A09-8E6E-FE7ED57B9DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D474CF9D-1898-46D3-80B1-2D3743265F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E18F9C22-04BB-4081-89E0-E6989970EBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:recursor:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"FD3E469E-EAE5-4BF1-BB69-6445FBBF96FF"}]}]}],"references":[{"url":"http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31311","source":"cve@mitre.org"},{"url":"http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/09/10","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/12","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30782","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43925","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01353.html","source":"cve@mitre.org"},{"url":"http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/09/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01353.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3218","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified OpenID values."},{"lang":"es","value":"Múltiples vulnerabilidades de cross-site scripting (XSS) en versiones de Drupal 6.x anteriores a 6.3 permiten a atacantes remotos inyectar scripts web o HTML arbitrario a través de vectores relacionados con (1) un etiquetado  libre de términos de taxonomía, que no son manejados correctamente en el módulo de vista previa, y con (2) valores OpenID sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.3","matchCriteriaId":"F2B32D57-2123-41FB-9594-AF40304999A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://drupal.org/node/280571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43704","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/280571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3219","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not \"prevent use of the object HTML tag in administrator input,\" which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mechanism."},{"lang":"es","value":"La función filter_xss_admin en versiones de Drupal 5.X anteriores a la 5.8 y 6.X anteriores a la 6.3 no \"impide la utilización del objeto  etiqueta HTML en la entrada de administrador\" lo cual tiene un impacto desconocido y  vectores de ataque, probablemente relacionados con un mecanismo de protección insuficiente de cross-site scripting (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.8","matchCriteriaId":"9FCAF0FC-E4F0-4F58-BEE1-95E6A27CBCAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.3","matchCriteriaId":"F2B32D57-2123-41FB-9594-AF40304999A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://drupal.org/node/280571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43701","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/280571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3220","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of \"translated strings.\""},{"lang":"es","value":"Vulnerabilidad de Falsificación de petición en sitios cruzados (CSRF) en versiones de Drupal 5.x anteriores a 5.8 y 6.X anteriores a 6.3 permite a atacantes remotos realizar acciones administrativas a través de vectores que impliquen la supresión de \"cadenas traducidas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.8","matchCriteriaId":"9FCAF0FC-E4F0-4F58-BEE1-95E6A27CBCAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.3","matchCriteriaId":"F2B32D57-2123-41FB-9594-AF40304999A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://drupal.org/node/280571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43702","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/280571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3221","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities."},{"lang":"es","value":"Vulnerabilidad de Falsificación de petición en sitios cruzados (CSRF) en versiones de Drupal  6.X anteriores a 6.3 permite a atacantes remotos realizar acciones administrativas a través de vectores que impliquen la supresión de identidades OpenID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.3","matchCriteriaId":"F2B32D57-2123-41FB-9594-AF40304999A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://drupal.org/node/280571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/280571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3222","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules \"terminate the current request during a login event,\" allows remote attackers to hijack web sessions via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de fijación de sesión en Drupal versiones 5.x anteriores a 5.9 y versiones 6.x anteriores a 6.3, cuando los módulos aportados \"terminate the current request during a login event\", permite a los atacantes remotos secuestrar sesiones web por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.9","matchCriteriaId":"6CE0E1C6-D002-485F-9342-B5A59B2E9989"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.3","matchCriteriaId":"F2B32D57-2123-41FB-9594-AF40304999A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://drupal.org/node/280571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/286417","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31211","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30359","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43706","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/280571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/286417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3223","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to \"an inappropriate placeholder for 'numeric' fields.\""},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el Schema API de versiones de Drupal 6.x anteriores a 6.3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores relacionados con un \"inadeacuado marcador de posición para campos 'numéricos'\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.3","matchCriteriaId":"F2B32D57-2123-41FB-9594-AF40304999A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://drupal.org/node/280571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43705","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/280571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3224","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to \"urls gone through redirect() being used within login_box().\""},{"lang":"es","value":"Vulnerabilidad sin especificar en phpBB 3.0.1 tiene un impacto  desconocido y vectores de ataque relacionados con \"URLs a las que se accede a través de redirect() dentro de login_box ()\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"AE17B2D1-1176-4DA8-8177-8FC5918A1A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EFEFD3F1-87C7-45B9-B524-FF6DDD474C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6F9A1BA2-583C-4FFB-8E31-7F89EDC0A5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"87E212D1-431B-4595-B0BF-520AE07A4A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"E5876E29-AFE1-4351-842F-C20055CB68CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc5:*:*:*:*:*:*","matchCriteriaId":"F08C7C49-7B1F-4C0D-BACF-6B80D25DA75C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc7:*:*:*:*:*:*","matchCriteriaId":"BF7CD162-BAF6-43ED-B8B0-1D9C272BFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc8:*:*:*:*:*:*","matchCriteriaId":"3F75B66A-E334-4019-B09D-C5FC21329CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E962E706-3624-44B0-B97F-ABF8F0260957"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/1","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=1059565&sid=2d3a6352a484588e1ad80f09dd19fe33","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44208","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=1059565&sid=2d3a6352a484588e1ad80f09dd19fe33","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3225","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing \"LDAP security fix.\""},{"lang":"es","value":"Versiones de Joomla! anteriores a 1.5.4 permiten a los atacantes el acceso a funciones de administración, con impacto desconocido y vectores de ataque relacionados con la falta de una actualizacion de seguridad de LDAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.3","matchCriteriaId":"46425F76-D765-4432-85F2-49B80BD87097"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"16F243A8-5513-4BB7-AB55-5A715D5AE546"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"F95550B4-3620-42D8-99AC-369126CDDFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BC0429EF-3848-4E72-999E-719DB54A7429"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F12537ED-A4EB-40F9-AC00-B796169E114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"}]}]}],"references":[{"url":"http://www.joomla.org/content/view/5180/1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30125","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43648","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/5180/1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3226","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors."},{"lang":"es","value":"La implementación del caché de archivos en versiones de Joomla! anteriores a la 1.5.4 permite a los atacantes el acceso a páginas cacheadas a través de vectores de ataque  desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.3","matchCriteriaId":"46425F76-D765-4432-85F2-49B80BD87097"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"16F243A8-5513-4BB7-AB55-5A715D5AE546"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"F95550B4-3620-42D8-99AC-369126CDDFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BC0429EF-3848-4E72-999E-719DB54A7429"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F12537ED-A4EB-40F9-AC00-B796169E114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"}]}]}],"references":[{"url":"http://www.joomla.org/content/view/5180/1/","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30125","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43650","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/5180/1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3227","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a \"User Redirect Spam fix,\" possibly an open redirect vulnerability."},{"lang":"es","value":"Vulnerabilidad sin especificar en versiones de Joomla! anteriores a 1.5.4 tienen un impacto desconocido y vectores de ataque relacionados con un \"parche para Spam de redireccionamiento de usuario\", posiblemente una vulnerabilidad abierta de redirección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.3","matchCriteriaId":"46425F76-D765-4432-85F2-49B80BD87097"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"16F243A8-5513-4BB7-AB55-5A715D5AE546"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"F95550B4-3620-42D8-99AC-369126CDDFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BC0429EF-3848-4E72-999E-719DB54A7429"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F12537ED-A4EB-40F9-AC00-B796169E114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"}]}]}],"references":[{"url":"http://www.joomla.org/content/view/5180/1/","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44205","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/5180/1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3228","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that \"block common exploits\" to SEF URLs, which has unknown impact and remote attack vectors."},{"lang":"es","value":"Joomla! anterior a 1.5.4 no aplica a .htaccess determinados controles de seguridad que bloquean exploits comunes a URLs con el plugin  SEF, lo cual tiene un impacto desconocido y  vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.3","matchCriteriaId":"46425F76-D765-4432-85F2-49B80BD87097"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"16F243A8-5513-4BB7-AB55-5A715D5AE546"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"F95550B4-3620-42D8-99AC-369126CDDFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BC0429EF-3848-4E72-999E-719DB54A7429"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F12537ED-A4EB-40F9-AC00-B796169E114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"}]}]}],"references":[{"url":"http://www.joomla.org/content/view/5180/1/","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/5180/1/1/1/#htaccess","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44206","source":"cve@mitre.org"},{"url":"http://www.joomla.org/content/view/5180/1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.joomla.org/content/view/5180/1/1/1/#htaccess","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3229","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable."},{"lang":"es","value":"Desbordamiento de búfer basado pila en versiones de op anteriores a changeset 563, cuando el soporte de xauth está activado, permite a usuarios locales obtener privilegios a través de una variable de entorno XAUTHORITY excesivamente larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"9E5B09D3-5848-4269-9574-36521E0667C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"A67E7264-E8F3-4A3A-B476-1C090A01FC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.20:*:*:*:*:*:*:*","matchCriteriaId":"C91F4524-646F-47B8-89E7-A1EF9E76477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.21:*:*:*:*:*:*:*","matchCriteriaId":"AAA77274-997F-4481-A184-2F3D0CA572F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.22:*:*:*:*:*:*:*","matchCriteriaId":"71B4C85D-145F-495C-8FE9-A0084ACA055E"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.23:*:*:*:*:*:*:*","matchCriteriaId":"3790E8DA-C515-48D8-8699-DBB68B9F1ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.24:*:*:*:*:*:*:*","matchCriteriaId":"8391B195-120D-4B96-88F3-4D39FE3DBF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.25:*:*:*:*:*:*:*","matchCriteriaId":"7DB76FB7-3B2A-4558-9E04-99F38E8479B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.26:*:*:*:*:*:*:*","matchCriteriaId":"84391240-3FC8-4032-9933-462F70B14FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.27:*:*:*:*:*:*:*","matchCriteriaId":"ADD576DE-3A3A-437F-BA7A-2B97CBEF509E"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.28:*:*:*:*:*:*:*","matchCriteriaId":"B27F4F4A-9AF6-4899-A7D9-29588AB78BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.29:*:*:*:*:*:*:*","matchCriteriaId":"4CFF163E-A8FD-4EF9-B214-91C96175D8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.30:*:*:*:*:*:*:*","matchCriteriaId":"FD313A7C-07D0-4AEC-AF2D-1DA499C98348"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.31:*:*:*:*:*:*:*","matchCriteriaId":"0660F09A-BB50-461F-8B94-15A95D14C5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:swapoff:op:1.32:*:*:*:*:*:*:*","matchCriteriaId":"422E4D96-78E5-4605-B99F-38825BCDB619"}]}]}],"references":[{"url":"http://secunia.com/advisories/31103","source":"cve@mitre.org"},{"url":"http://swapoff.org/changeset/563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30226","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://swapoff.org/changeset/563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3230","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif."},{"lang":"es","value":"El FFmpeg lavf Demuxer permite atacantes, con la ayuda del usuario, provocar una denegación de servicio (con caída de aplicación) a través de un archivo GIF manipulado, posiblemente relacionado con gstreamer, como se demuestra con el fichero lol-giftopnm.gif."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:lavf_demuxer:*:*:*:*:*:*:*:*","matchCriteriaId":"C3FAFA13-5B70-4BC5-9679-3C0C1BBAC4AA"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=542643","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31899","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:297","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31234","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44210","source":"cve@mitre.org"},{"url":"https://roundup.mplayerhq.hu/roundup/ffmpeg/issue530","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=542643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://roundup.mplayerhq.hu/roundup/ffmpeg/issue530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-3231","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine."},{"lang":"es","value":"xine-lib en versiones anteriores a 1.1.15, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo OGG diseñado, como es demostrado al reproducir lol-ffplay.ogg con xine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"5EA01448-09E3-4DA9-A817-BFD7A4460F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AEB839B0-408E-4D96-B576-D9300082B7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*","matchCriteriaId":"5FEDBE74-5040-4E61-A34A-2BC36A2A129F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30699","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44040","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3232","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images."},{"lang":"es","value":"Vulnerabilidad sin especificar en versiones de dotclear anteriores a 1.2.8 tiene un impacto desconocido y vectores de ataque relacionados con la falta de un parche para una vulnerabilidad de subida de imágenes a servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.7","matchCriteriaId":"BC570796-5E0E-495E-8758-F80ADD44EBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"94896556-5D43-4C54-A49C-301511B69EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49EEF727-A23D-47AE-BE4E-238290246BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"860F6A6A-717B-4B94-B4D0-26C2BAC1E66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9ED66191-F39E-4D78-9B3D-1A20FD2914B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2AFFAE76-D4DE-4F4C-B165-736EA01B30EC"}]}]}],"references":[{"url":"http://osvdb.org/44441","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29819","source":"cve@mitre.org"},{"url":"http://www.dotclear.net/blog/post/2008/04/18/Dotclear-128","source":"cve@mitre.org"},{"url":"http://www.dotclear.net/blog/post/2008/04/18/Gestionnaire-de-media-et-types-de-fichiers","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/14/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490865/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28787","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41828","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44039","source":"cve@mitre.org"},{"url":"http://osvdb.org/44441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dotclear.net/blog/post/2008/04/18/Dotclear-128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dotclear.net/blog/post/2008/04/18/Gestionnaire-de-media-et-types-de-fichiers","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490865/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3233","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en versiones de WordPress anteriores a la 2.6, sólo en versiones de desarrollo SVN, permite a atacantes remotos inyectar scripts web o HTML arbitrario a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"383AECB8-75AA-47DA-83BF-2FF595779BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E85A88D7-07A1-4A8C-88B5-057AD9C675E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*","matchCriteriaId":"947635DB-A86E-45F0-B946-559202C49503"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEABEFD-E248-42B7-B99E-FFDEE27F7064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"}]}]}],"references":[{"url":"http://trac.wordpress.org/ticket/7220","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/6","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://trac.wordpress.org/ticket/7220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/16/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-3234","sourceIdentifier":"cve@mitre.org","published":"2008-07-18T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username."},{"lang":"es","value":"sshd en OpenSSH 4 sobre Debian GNU/Linux, y el OpenSSH Snapshot 20070303, permiten que usuarios remotos autenticados obtener acceso a roles de usuario SELinux arbitrarios añadiendo al nombre de usuario una secuencia  :/ (dos puntos - barra), seguido por el nombre del rol de usuario que se desee."}],"vendorComments":[{"organization":"Red Hat","comment":"Upon investigating this issue, the Red Hat Security Response Team has determined that this is not a vulnerability.  The ability to specify a desired role when connecting to OpenSSH is a feature of how OpenSSH interacts with SELinux.  Users can only assign themselves SELinux roles which they have permission to access.  They cannot assign themselves arbitrary roles.","lastModified":"2008-07-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E003AB3C-8DF3-4AE8-82A3-984F30E5599B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44037","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3235","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la Utilidad PropFilePasswordEncoder del componente Security en IBM WebSphere Application Server (WAS) 5.1 anterior a 5.1.1.19 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31419896-89F7-43A2-8B7C-3B92744BBC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"559355CF-7FA8-4D90-8393-90C912F571C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"355967D9-475A-49AF-A3FF-E0AC3668B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC04CE9C-82B4-4406-823A-69A5E13ECA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F6A5B3A-E57D-4574-A481-7EDA93664076"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"425890C2-FC96-4191-B512-6A3DB7BCE2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"0CF8ED4D-D2B6-49EC-930A-16A78E729F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"2F215B48-7ED5-45EB-BD26-3D3EAD01506F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C47D1C56-238B-414B-B2D2-D7069E42D001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"625B5901-B0AF-4D00-BC56-525A6F72943D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"BA32E836-172D-45BF-B911-9EA2B026E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"79307DAB-2195-4324-AA40-A4AE98D01513"}]}]}],"references":[{"url":"http://secunia.com/advisories/31149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61436","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30280","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020528","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2140/references","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2140/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3236","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to \"previously encrypted properties\" that are not encrypted."},{"lang":"es","value":"Vulnerabilidad sin especificar en Wsadmin en el cmponente System Management/Repository en IBM WebSphere Application Server (WAS) 5.1 anterior a 5.1.1.19, permite a atacantes remotos obtener información sensible a través de vectores relacionados con \"propiedades previamente encriptadas\" que no están encriptadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31419896-89F7-43A2-8B7C-3B92744BBC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"559355CF-7FA8-4D90-8393-90C912F571C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"355967D9-475A-49AF-A3FF-E0AC3668B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC04CE9C-82B4-4406-823A-69A5E13ECA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F6A5B3A-E57D-4574-A481-7EDA93664076"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"425890C2-FC96-4191-B512-6A3DB7BCE2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"0CF8ED4D-D2B6-49EC-930A-16A78E729F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"2F215B48-7ED5-45EB-BD26-3D3EAD01506F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C47D1C56-238B-414B-B2D2-D7069E42D001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"625B5901-B0AF-4D00-BC56-525A6F72943D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"BA32E836-172D-45BF-B911-9EA2B026E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"79307DAB-2195-4324-AA40-A4AE98D01513"}]}]}],"references":[{"url":"http://secunia.com/advisories/31149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31892","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61941","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006879","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2140","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2566","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45123","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27006879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3237","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en orward_to_friend.php en ITechBids 7.0 Gold, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"productoid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:7.0:gold:*:*:*:*:*:*","matchCriteriaId":"35D6FAC8-2C74-4694-B6E2-1941B04FD171"}]}]}],"references":[{"url":"http://secunia.com/advisories/31084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30215","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2107/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43758","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2107/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3238","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via (1) the seller_id parameter in sellers_othersitem.php, (2) the productid parameter in classifieds.php, and (3) the id parameter in shop.php."},{"lang":"es","value":"Múltiples vulnerabilidades SQL en ITechBids 7.0 Gold, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"seller_id\" en sellers_othersitem.php, (2) \"productid\" en classifieds.php, e (3) \"id\" en shop.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:7.0:gold:*:*:*:*:*:*","matchCriteriaId":"35D6FAC8-2C74-4694-B6E2-1941B04FD171"}]}]}],"references":[{"url":"http://secunia.com/advisories/31084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30215","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2107/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43759","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2107/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3239","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code via a filename in the CONF[CRON_LOGFILE] parameter and file contents in the CONF[LOCALE_LONG_DATE_TIME] parameter."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en la Función writeLogEntry en system/v_cron_proc.php de PHPizabi 0.848b C1 HFP1, cuando register_globals están activadas, permite a atacantes remotos subir y ejecutar código de su elección a través de un nombre de fichero en los parámetros CONF[CRON_LOGFILE] y CONF[LOCALE_LONG_DATE_TIME]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpizabi:phpizabi:0.848b:c1:*:*:*:*:*:*","matchCriteriaId":"105C8961-BDEC-4C5D-B45C-644BC6E388C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpizabi:phpizabi:0.848b:c1_hfp1:*:*:*:*:*:*","matchCriteriaId":"D5611CEF-920E-4FFF-95CF-2612FF713D10"}]}]}],"references":[{"url":"http://secunia.com/advisories/31127","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4022","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30257","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43856","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3240","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en AlstraSoft Affiliate Network Pro, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pgm en una acción \"directory\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:affiliate_network_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"DE6B7467-352D-4732-BAF1-0830AC2FBD26"}]}]}],"references":[{"url":"http://secunia.com/advisories/31112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30259","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2122/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43848","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2122/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3241","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en players-detail.php en UltraStats 0.2.136, 0.2.140 y 0.2.142, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrastats:ultrastats:0.2.136:*:*:*:*:*:*:*","matchCriteriaId":"050DE14D-B52F-4D2B-A279-2B512C51B285"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultrastats:ultrastats:0.2.140:*:*:*:*:*:*:*","matchCriteriaId":"66E21510-F396-465B-88D7-D93E8C375A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultrastats:ultrastats:0.2.142:*:*:*:*:*:*:*","matchCriteriaId":"14AEC672-AFB0-4891-8F2C-F32D0C430F3A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30212","source":"cve@mitre.org"},{"url":"http://www.shooter-szene.de/PNphpBB2-viewtopic-t-12730.phtml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43760","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6067","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shooter-szene.de/PNphpBB2-viewtopic-t-12730.phtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3242","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attackers to execute arbitrary code via a long argument to the StartUrl method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el Control ActiveX PPMedia Class en PPMPlayer.dll in PPMate 2.3.1.93, permite a atacantes remotos ejecutar código de su elección a través de un argumento largo al método StartUrl. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ppmate:ppmedia_class:2.3.1.93:*:*:*:*:*:*:*","matchCriteriaId":"8CEFA052-6B83-4F93-8BCB-13A3BB2EE142"}]}]}],"references":[{"url":"http://secunia.com/advisories/30952","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4019","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30246","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2118/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43831","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6090","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2118/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3243","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop; or (3) an ASPack-compressed file, which triggers an engine crash."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el motor de análisis anterior a 4.4.4 en el  F-Prrot Antivirus anterior a 6.0.9.0, permite a atacantes remotos provocar una denegación de servicio a través de (1) un fichero UPX-comppressed manipulado que provoca una caída del motor; (2) mediante un fichero Microsoft Office manipulado que lanza un bucle infinito o (3) mediante un fichero ASPack-compressed que provoca una caída del motor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.11b:*:*:*:*:*:*:*","matchCriteriaId":"C2E4EE92-115F-48B6-922C-264DDDFDD2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12:*:*:*:*:*:*:*","matchCriteriaId":"040605DB-3DFB-4DF9-946B-D93AE02DB404"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12a:*:*:*:*:*:*:*","matchCriteriaId":"9593E4C5-549D-433D-80CA-DF8138E6B4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12b:*:*:*:*:*:*:*","matchCriteriaId":"D2F33BEF-B8B2-49BE-8B50-3D3771ABFD5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12c:*:*:*:*:*:*:*","matchCriteriaId":"9E55BEF2-413C-4FC9-B18E-50813C6261C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12d:*:*:*:*:*:*:*","matchCriteriaId":"747D2275-25A3-4D50-A200-A9C7C6A40492"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.13:*:*:*:*:*:*:*","matchCriteriaId":"06A14300-3A55-4BBD-8545-C3F935E5884C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.13a:*:*:*:*:*:*:*","matchCriteriaId":"705BF0A5-9F2E-4981-B2B2-7E3B07DBA6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14:*:*:*:*:*:*:*","matchCriteriaId":"FA69A641-C8E7-47B3-8E4E-7147DFD7F45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14a:*:*:*:*:*:*:*","matchCriteriaId":"60EEFB06-71E0-49FE-AFF5-45A56B8EB58F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14b:*:*:*:*:*:*:*","matchCriteriaId":"2B1DC4D8-BEE7-4C3D-A33A-2CA61CD1FAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14c:*:*:*:*:*:*:*","matchCriteriaId":"8A3B42D0-A722-41D4-A462-18F2209ACAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14d:*:*:*:*:*:*:*","matchCriteriaId":"061C6A26-4ADB-4861-BA36-A7543B74EA8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14e:*:*:*:*:*:*:*","matchCriteriaId":"4FBCA221-E399-4B49-9740-38884F618C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.15:*:*:*:*:*:*:*","matchCriteriaId":"386A0CD6-4448-480D-9F30-A3451EEC55AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.15a:*:*:*:*:*:*:*","matchCriteriaId":"F4B4F752-3197-4E94-B563-F7342F2A6C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.15b:*:*:*:*:*:*:*","matchCriteriaId":"5C6EAF4A-B549-4E51-9A05-22841BC1F5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16:*:*:*:*:*:*:*","matchCriteriaId":"AC862A86-5F3A-4E6B-B7E6-3A59AC6EF0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16a:*:*:*:*:*:*:*","matchCriteriaId":"497519D9-FE6A-4956-BBD2-B96F584F781B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16b:*:*:*:*:*:*:*","matchCriteriaId":"156C6D3E-ECAF-456D-BAB6-F3D20480FCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16c:*:*:*:*:*:*:*","matchCriteriaId":"C22F9A01-6B1D-4CE6-B96D-A62891768618"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16d:*:*:*:*:*:*:*","matchCriteriaId":"012133AA-983A-4C8E-BAD8-74446A5B13A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16e:*:*:*:*:*:*:*","matchCriteriaId":"8D1F1043-767A-41E5-9A1C-A03BA53E795C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16f:*:*:*:*:*:*:*","matchCriteriaId":"F2A3D4C5-11E7-4D8B-ABC9-E38D51702EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"6112DACE-C5E8-4013-81C5-E6769F30A7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C5D4D739-DD1E-46F1-B686-8E0360B07846"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1B105F2B-7129-44EA-86C9-50E0BAE17A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0919E321-DD99-41F2-B802-08148708B640"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B1654D1C-92E7-4862-AA5B-5686FEB5EBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"733BF770-151B-47A1-8B33-22E61ABD9145"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"DCCEB557-76D0-415E-9152-3196D2E8B96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC8C7005-B41D-42CD-9507-72ABED19A145"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F61110B5-6A92-4116-BCAE-9817989CF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7AB5A102-3AD4-4657-AA43-6548F41D2CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:scanning_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.2","matchCriteriaId":"C0DCCD35-D5C3-431D-B37C-F53A7D8784D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31118","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.f-prot.com/download/ReleaseNotesWindows.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43868","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43869","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.f-prot.com/download/ReleaseNotesWindows.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3244","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read."},{"lang":"es","value":"Motor de análisis  anterior a 4.4.4 en F-Prot Antivirus anterior a 6.0.9.0, permite a atacantes remotos provocar una denegación de servicio (caída de motor) a través de un fichero CHM con un valor nb_dir largo, lo que provoca una lectura fuera de rango."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.11b:*:*:*:*:*:*:*","matchCriteriaId":"C2E4EE92-115F-48B6-922C-264DDDFDD2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12:*:*:*:*:*:*:*","matchCriteriaId":"040605DB-3DFB-4DF9-946B-D93AE02DB404"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12a:*:*:*:*:*:*:*","matchCriteriaId":"9593E4C5-549D-433D-80CA-DF8138E6B4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12b:*:*:*:*:*:*:*","matchCriteriaId":"D2F33BEF-B8B2-49BE-8B50-3D3771ABFD5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12c:*:*:*:*:*:*:*","matchCriteriaId":"9E55BEF2-413C-4FC9-B18E-50813C6261C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.12d:*:*:*:*:*:*:*","matchCriteriaId":"747D2275-25A3-4D50-A200-A9C7C6A40492"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.13:*:*:*:*:*:*:*","matchCriteriaId":"06A14300-3A55-4BBD-8545-C3F935E5884C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.13a:*:*:*:*:*:*:*","matchCriteriaId":"705BF0A5-9F2E-4981-B2B2-7E3B07DBA6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14:*:*:*:*:*:*:*","matchCriteriaId":"FA69A641-C8E7-47B3-8E4E-7147DFD7F45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14a:*:*:*:*:*:*:*","matchCriteriaId":"60EEFB06-71E0-49FE-AFF5-45A56B8EB58F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14b:*:*:*:*:*:*:*","matchCriteriaId":"2B1DC4D8-BEE7-4C3D-A33A-2CA61CD1FAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14c:*:*:*:*:*:*:*","matchCriteriaId":"8A3B42D0-A722-41D4-A462-18F2209ACAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14d:*:*:*:*:*:*:*","matchCriteriaId":"061C6A26-4ADB-4861-BA36-A7543B74EA8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.14e:*:*:*:*:*:*:*","matchCriteriaId":"4FBCA221-E399-4B49-9740-38884F618C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.15:*:*:*:*:*:*:*","matchCriteriaId":"386A0CD6-4448-480D-9F30-A3451EEC55AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.15a:*:*:*:*:*:*:*","matchCriteriaId":"F4B4F752-3197-4E94-B563-F7342F2A6C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.15b:*:*:*:*:*:*:*","matchCriteriaId":"5C6EAF4A-B549-4E51-9A05-22841BC1F5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16:*:*:*:*:*:*:*","matchCriteriaId":"AC862A86-5F3A-4E6B-B7E6-3A59AC6EF0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16a:*:*:*:*:*:*:*","matchCriteriaId":"497519D9-FE6A-4956-BBD2-B96F584F781B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16b:*:*:*:*:*:*:*","matchCriteriaId":"156C6D3E-ECAF-456D-BAB6-F3D20480FCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16c:*:*:*:*:*:*:*","matchCriteriaId":"C22F9A01-6B1D-4CE6-B96D-A62891768618"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16d:*:*:*:*:*:*:*","matchCriteriaId":"012133AA-983A-4C8E-BAD8-74446A5B13A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16e:*:*:*:*:*:*:*","matchCriteriaId":"8D1F1043-767A-41E5-9A1C-A03BA53E795C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:3.16f:*:*:*:*:*:*:*","matchCriteriaId":"F2A3D4C5-11E7-4D8B-ABC9-E38D51702EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"6112DACE-C5E8-4013-81C5-E6769F30A7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C5D4D739-DD1E-46F1-B686-8E0360B07846"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1B105F2B-7129-44EA-86C9-50E0BAE17A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0919E321-DD99-41F2-B802-08148708B640"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B1654D1C-92E7-4862-AA5B-5686FEB5EBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"733BF770-151B-47A1-8B33-22E61ABD9145"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"DCCEB557-76D0-415E-9152-3196D2E8B96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC8C7005-B41D-42CD-9507-72ABED19A145"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F61110B5-6A92-4116-BCAE-9817989CF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7AB5A102-3AD4-4657-AA43-6548F41D2CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:scanning_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.2","matchCriteriaId":"C0DCCD35-D5C3-431D-B37C-F53A7D8784D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.f-prot.com/download/ReleaseNotesWindows.txt","source":"cve@mitre.org"},{"url":"http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30253","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020507","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2124/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43835","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.f-prot.com/download/ReleaseNotesWindows.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nruns.com/security_advisory_fprot_out-of-bound_memory_access_DoS.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2124/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3245","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execute arbitrary SQL commands via the viewCat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en phpHoo3.php en phpHoo3 4.3.9, 4.3.10, 4.4.8, y 5.2.6, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"viewCat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cable-modems:phphoo3:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"2805F4F5-47DD-4A2C-A385-75A0B7838A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cable-modems:phphoo3:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"A4C3E434-FFC8-4A4A-93AD-C84E63E5E4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cable-modems:phphoo3:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"E09DB39F-13D7-488D-9D06-D94436C01DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cable-modems:phphoo3:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"378EBBB6-C2FC-4D03-A30F-B4C7DE3411E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30271","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43860","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3246","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente PDF distiller en el BlackBerry Attachment Service en BlackBerry Unite! 1.0 SP1 (1.0.1) anterior a bundle 36 y BlackBerry Enterprise Server 4.1 SP3 (4.1.3) a la v4.1 SP5 (4.1.5), permite atacantes remotos asistidos por el usuario ejecutar códigod e su elección a través de un fichero PDF adjunto manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"1B8B0D10-A7DD-4D8A-B994-6A41FD7AA8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"014E79FB-0E10-4BEF-9618-F436A6CF3F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F7B0D729-6092-4A9C-ADE6-2D770417891F"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"965CD573-84C1-4456-9C28-6FBD9B0596A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:unite:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"90B1FF3F-4FF8-409F-B93B-39423FD34CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackberry:unite:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3D2A93A7-823C-48BF-A421-37524CF8DC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B1694E42-9AA5-4503-9714-CBDE388481A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server_for_domino:*:*:*:*:*:*:*:*","matchCriteriaId":"C53C3B7A-7C80-478C-9D69-B9C22D84B48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server_for_exchange:*:*:*:*:*:*:*:*","matchCriteriaId":"3A3B5350-5796-47F1-B2D1-E8AC86D28C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server_for_novell_groupwise:*:*:*:*:*:*:*:*","matchCriteriaId":"C218F357-9BA3-48E7-AD07-8E7A7B70ECAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_unite:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"BB792C74-CD6A-4903-8D11-59B0393F74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_unite:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3FF3712A-46BB-4DC1-947F-228EEF5DBAB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/31092","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31141","source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/289235","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securitytracker.com/id?1020505","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2108/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43840","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/289235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securitytracker.com/id?1020505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2108/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3247","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors."},{"lang":"es","value":"La implementación LDT en el kernel de Linux versiones 2.6.25.x anteriores a 2.6.25.11 en plataformas x86_64 utiliza un tamaño incorrecto para ldt_desc, lo que permite a los usuarios locales causar una denegación de servicio (bloqueo del sistema) o posiblemente alcanzar privilegios por medio de vectores no especificados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped\nwith Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2008-07-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=74454a6a286bfce4bb23d89bd465f856fa6a6e19","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31172","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31202","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.11","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30351","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020544","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43979","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=74454a6a286bfce4bb23d89bd465f856fa6a6e19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3248","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:00.960","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading files."},{"lang":"es","value":"qiomkfile en el  Quick I/O  para la base de datos en Symantec Veritas File System (VxFS) sobre HP-UX, y anterior a la v5.0 MP3 sobre Solaris, Linux, y AIX, no inicializa el bloque de ficheros durante la creación de un archivo, lo que permite obtener información sensible mediante la creación y lectura de archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:aix:*:*:*:*:*","matchCriteriaId":"D696B174-AF11-4E36-BDC8-DF5EB6668303"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:linux:*:*:*:*:*","matchCriteriaId":"5E082D12-5E75-4CC2-B43C-84CE91063C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:solaris:*:*:*:*:*","matchCriteriaId":"3907B274-DCB7-43D2-ADE8-0DFCC536AD34"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:unknown:unknown:hp-ux:*:*:*:*:*","matchCriteriaId":"896CACC1-541E-45C0-8A3E-E8198892BC64"}]}]}],"references":[{"url":"http://secunia.com/advisories/32332","source":"cve@mitre.org"},{"url":"http://seer.entsupport.symantec.com/docs/310872.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt","source":"cve@mitre.org"},{"url":"http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497626/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31678","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021074","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2875","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46008","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.entsupport.symantec.com/docs/310872.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.security-objectives.com/advisories/SECOBJADV-2008-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-objectives.com/advisories/SECOBJSADV-2008-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497626/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3249","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM."},{"lang":"es","value":"Cliente de actualizaciones del sistema de Lenovo anerior a la v 3.14, no valida adecuadamente los certificados cuando establece una conexión SSL, lo que permite a atacantes remotos instalar paquetes de su elección a través de un certificado SSL cuya cabecera X.509 coincide con un certificado público usado por IBM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:thinkvantage_system_update:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13.0005","matchCriteriaId":"310DD62B-8E91-410B-8C43-A831A6F75B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:thinkvantage_system_update:3.13:*:*:*:*:*:*:*","matchCriteriaId":"3804A80E-EDC6-48A9-A7D6-CA04708729DE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30379","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020112","source":"cve@mitre.org"},{"url":"http://www.security-objectives.com/advisories/SECOBJADV-2008-01.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492579","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-objectives.com/advisories/SECOBJADV-2008-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3250","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Artic Issue Tracker 2.0.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"filter\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arctictracker:arctic_issue_tracker:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ADFD432-CA9A-483E-987E-6372D243010B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31139","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4017","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43872","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6097","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3251","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/."},{"lang":"es","value":"Múltiples vulnerabilidades SQL en tplSoccersite 1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) opp a tampereunited/opponent.php; o id a (2) index.php, (3) player.php, (4) matchdetails.php, o (5) additionalpage.php en tampereunited/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tpl_design:tplsoccersite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BF4F406A-8A47-4CAC-8DEB-2FFB0549989C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4018","source":"cve@mitre.org"},{"url":"http://tpl-design.com/index.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30260","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2121/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43849","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6088","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tpl-design.com/index.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2121/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3252","sourceIdentifier":"cve@mitre.org","published":"2008-07-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función read_article en getarticle.c en newsx 1.6, permite a atacantes remotos ejecutar código de su elección a través de un artículo de noticias que contiene un gran número de líneas que empiezan con un período."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"D32A30CD-EA21-4AA6-868F-3448AA50B70D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fedora:newsx:1.6:8.fc8:*:*:*:*:*:*","matchCriteriaId":"AAFFE142-DC63-4F3B-90B6-F48F150714FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fedora:newsx:1.6:9.fc9:*:*:*:*:*:*","matchCriteriaId":"B2890FFB-A98E-477C-8780-E93379756BB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31307","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1622","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30231","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454483","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43844","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00485.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00565.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00485.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00565.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3253","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition (Express and Enterprise) 4.1.0; and HP integrated Citrix XenServer (Select and Enterprise) 4.1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en las interfaces XenAPI HTTP en Citrix XenServer Express, Standard, y Enterprise Edition 4.1.0; Citrix XenServer Dell Edition (Express y Enterprise) 4.1.0;  y HP integrated Citrix XenServer (Select  y Enterprise) 4.1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"A3527267-1796-4C0F-A163-AA2D940F3B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:enterprise_dell_edition:*:*:*:*:*","matchCriteriaId":"003AE52A-6A27-4211-86E8-DC1D7952DEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:enterprise_hp_integrated:*:*:*:*:*","matchCriteriaId":"D60CD827-9BFB-4066-9F8F-01F85ACA19F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:express:*:*:*:*:*","matchCriteriaId":"578D0F60-A229-43DA-9EA9-C1EDB701D0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:express_dell_edition:*:*:*:*:*","matchCriteriaId":"5A8EBBF2-398F-4354-B8B1-84982FC42CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:select_hp_integrated:*:*:*:*:*","matchCriteriaId":"797085C1-701F-4922-956F-0C851CDB4799"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenserver:4.1.0:*:standard:*:*:*:*:*","matchCriteriaId":"39F87F18-348A-40FF-88A2-49111F380864"}]}]}],"references":[{"url":"http://secunia.com/advisories/31133","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX117814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30265","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020515","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2117/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX117814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2117/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3254","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a UserProfil action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en preCMS 1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"UserProfil\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:precoc:precms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B6A36E32-1CD0-4765-A109-8B624E8F8CAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31138","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30278","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43882","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6096","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3255","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en LunarNight Laboratory WebProxy 1.7.8 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7:*:*:*:*:*:*:*","matchCriteriaId":"52B7D920-09F5-4369-959A-F68785BC9048"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5EDFC798-F90F-46A9-B334-30C5B60A36A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"3CF37221-DA0D-469C-A487-8D7F599023BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"77BCB52E-5D55-42ED-A327-97268EF19B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"AA11FFE0-5123-4A70-93A0-23FC895F5C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"D972E410-37AC-4B89-9030-7BAAD508AA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"97B3444B-706D-4B28-860D-E33F2C30A48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"EEC43894-A4E5-4E12-8AE6-F4E343367BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ln-lab:webproxy:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"3A040014-8F5E-48EC-B65A-8C815DAE6129"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN49704543/index.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31042","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30283","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43879","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvn.jp/en/jp/JVN49704543/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ln-lab.net/lunar-night.lab/page-dl_webproxy/design-whiteecuni","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3256","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en folder.php en Siteframe CMS y anteriores, y Siteframe Beaumont 5.0.5 y anteriores, permite a atacantes remotos inyectar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_beaumont:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.5","matchCriteriaId":"BFD0FAE2-4E8D-45F0-A059-F48BEF31A46D"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D461A646-9474-4007-A4F0-4F85FCE3714D"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_beaumont:5.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"84D6E3FB-3AED-4CC5-B41C-BC101D5D87BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_beaumont:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"71C445D1-E912-440E-8C59-8A6A2C0885AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"8AAA2D61-C6E7-4AB2-A5A3-8FC7FA73954D"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"79B5F8AE-1B3F-4C7D-B256-50CB08BEFB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.0.2\\+0005:*:*:*:*:*:*:*","matchCriteriaId":"E55B19B7-7EA9-4C1A-B2D4-A8DB639C8D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.1\\+0001:*:*:*:*:*:*:*","matchCriteriaId":"93F1BDE8-54EE-4323-880C-2370347A6841"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F41DB2F3-3E2E-41B5-BA41-2395EEA53753"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B2F8B9BA-0C53-4270-BE0F-A04225B8FD43"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D25B5BE7-B94E-4440-8F76-A566064E13C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A0A748E0-13D7-406E-A349-7D13BB4A10C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"948C5174-85D6-4059-97C3-6A7FEB2BEA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0575C51A-446A-47F4-ACA2-4FB59D29A327"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E71CA7D4-3609-4E02-B971-4510BB228888"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"ACE8A519-34BD-4167-B620-ECFA51448D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7704C297-F80D-4554-AF6A-912C5D66097C"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1CEF259E-A238-446E-9599-13734392FE18"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27B3DF25-9625-4FBB-A524-938CC9F1CAEB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30294","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43908","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6099","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3257","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \"POST /.jsp\" in an HTTP request."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Apache Connector (mod_wl) en Oracle WebLogic Server (anteriormente BEA Weblogic Server) 10.3 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga HTTP, como se ha demostrado mediante una cadena después del \"POST /.jsp\" en una petición HTTP. NOTA: es probable que esta vulnerabilidad se solape con el CVE-2008-2579 u otra vulnerabilidad revelada en los avisos de Oracle CPUJul2008."}],"vendorComments":[{"organization":"Oracle","comment":"Oracle has released a workaround for CVE-2008-3257.  Information is available at:\n\nhttp://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html","lastModified":"2008-07-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"742DCC2D-B4AD-4D16-8338-21E258C4FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FED57A9-CD22-48C6-AF7B-C361CA843283"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6E3A5C91-82C4-40B6-B8F2-C083AEF76723"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9500F620-FEFE-4CB7-A733-65E7372BD8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"76738B84-33DD-450B-90A2-B22B77D52857"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.1:sp15:*:*:*:*:*:*","matchCriteriaId":"E951CB37-0BFA-48D3-A7FA-8B75A5FD7EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEA67C2-6CD7-49FB-9C18-B23045D272AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.2:sp1:*:*:*:*:*:*","matchCriteriaId":"F9EB3890-9D1F-4F5D-A124-ED109AD0669E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.2:sp2:*:*:*:*:*:*","matchCriteriaId":"77DF4FDA-D9FC-4B20-89BC-EF9D853644E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD5D4AD-0BA3-42F7-852F-524488D74A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2B393A66-08A6-4EBA-B01E-BB6418423F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*","matchCriteriaId":"B2B4C4E8-2862-457F-BDCC-3F54B8F7AADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:*:*:*:*:*:*","matchCriteriaId":"47974FFB-1B28-492B-9A83-78AF16CF62CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*","matchCriteriaId":"6F27425D-1754-44AE-A4B5-F27D5FA6A052"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp13:*:*:*:*:*:*","matchCriteriaId":"034C62E6-3598-4D66-A0BD-8BD2E67048C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"99D0A3A8-1444-4DA4-AEF3-08578482574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"523836A4-0110-4CD3-A81E-988A02AEA68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"A705EB67-3961-445F-8023-F82C7618BE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"BD698DD8-5491-4A73-A527-8C9228992A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*","matchCriteriaId":"86C4679F-F13F-4A97-AE42-BC54BD0F149C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*","matchCriteriaId":"EF96A26E-7284-43A0-BD6A-907E1029197D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*","matchCriteriaId":"C8479B6C-464F-41BC-BF81-31EA74CEF4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*","matchCriteriaId":"B08241CF-0F3D-44E2-8D72-4F98413933EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"BDE9282D-C32F-4D2F-81BE-75E447925A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"3E6644EF-C875-4005-A628-0AED7B7BB94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp6:*:*:*:*:*:*","matchCriteriaId":"703482E8-35A9-4A9F-A9FD-B0F8CEA4A404"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*","matchCriteriaId":"C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*","matchCriteriaId":"2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*","matchCriteriaId":"16E3F943-D920-4C0A-8545-5CF7D792011F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B46A3EBE-B268-427E-AAB5-62DDF255F1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"32E8797D-1B62-4480-A79D-0345E65699E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"2FC1486C-6AC4-44F7-9015-40FD4A341C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"5485722F-5DE4-4CD4-865F-32585537F523"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"3CCEDE54-97F3-457A-9886-5BD91C9AED2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9429D939-FCC4-4BA7-90C4-BBEECE7309D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0653ACAC-B0D9-4381-AB23-11D24852A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA97F1A-49F7-4511-8959-D62155491DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*","matchCriteriaId":"98F632B9-0572-4563-BA41-262628A5CB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E758AF8B-B47F-4CE7-B73E-3638180C9D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"6AC47FAA-AB16-4728-AE0B-C0C90861D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*","matchCriteriaId":"10E284B8-4EBE-459D-87BA-401BC2AE29C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*","matchCriteriaId":"05E4CCAC-8E99-49DE-8E90-18F5C03BBC94"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*","matchCriteriaId":"A585B339-442B-4408-9A44-E872FF4406A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*","matchCriteriaId":"321BC193-5FBF-4F25-996D-1FE74779F34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:9.2:mp2:*:*:*:*:*:*","matchCriteriaId":"E23EB6FE-EA07-426F-9781-87630BC76FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"60F9ABCC-5217-4650-8C71-F8B0EB86789F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:apache_connector_in_weblogic_server:*:*:*:*:*:*:*:*","matchCriteriaId":"6471A8E2-13B4-4506-89D0-86526394FD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea_systems:weblogic_server:10.0_mp1:*:*:*:*:*:*:*","matchCriteriaId":"5D4B4A86-A381-4DB1-AA9D-57DBEC2466CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.3","matchCriteriaId":"40A16573-91F2-42AA-8201-AE2D5962C4E6"}]}]}],"references":[{"url":"http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002035.html","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002036.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/716387","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30273","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020520","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2145/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43885","source":"cve@mitre.org"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6089","source":"cve@mitre.org"},{"url":"http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/716387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2145/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3258","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Zoph anterior a 0.7.0.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A6C51D78-6B7B-4726-BBC5-1597BEBAEC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.4:*:*:*:*:*:*:*","matchCriteriaId":"53C4F1CF-B2BB-48B2-83F4-0520E5C9ACD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.5:*:*:*:*:*:*:*","matchCriteriaId":"856E1497-3819-440B-8062-57FCCFD0E666"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AF492E31-36B8-4F14-AF80-43484C26C96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.6:*:*:*:*:*:*:*","matchCriteriaId":"81989ECB-5AD1-42BB-A54D-06F1D1F6BF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7:*:*:*:*:*:*:*","matchCriteriaId":"5AB3829B-49A8-4B73-88E3-B37D0C396FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"13ABB946-E3B3-4CA7-8A0A-ACAC4C030785"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4590D940-90BA-4726-A800-93A96D2FD26E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E06FA133-F834-4155-9837-848DAC44C777"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"934D81AD-8143-4B0F-928F-1DA47754924B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=614672","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30298","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44036","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=614672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3259","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform."},{"lang":"es","value":"OpenSSH anterior a 5.1 activa la opción del socket SO_REUSEADDR cuando la configuración X11UseLocalhost está desactivada, lo que permite a usuarios locales en determinadas plataformas, secuestrar el puerto de reenvío X11 a través de una única dirección IP como se ha demostrado sobre la plataforma HP-UX."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of openssh as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-07-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"B2583374-A7B3-40B8-96DA-788DBD310EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7BEB67BB-A442-46C2-8BC1-BBEB009AC532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B6E307F1-C765-409C-835C-133026A5179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"114134F3-BDFD-465D-8317-82F9D6EFA5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.3:*:*:*:*:*:*:*","matchCriteriaId":"DAB55300-F90D-45D3-88BC-5ADCEC366264"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3EC5611-31B5-4253-B99A-E81C202768A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"43060323-1B51-45B4-BEB9-0E472896D8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5441C616-D127-42D9-88AA-0FC9AA16EB03"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F2EDC0-3189-4523-882B-9188C852F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEF5203-9D6B-4431-BF0D-C81B1E250AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2991C07-5486-4590-A74E-46A379DD3339"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EB9BE06-0A36-4853-ADF4-9C1A1854278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC57F38-6545-497B-B6DA-FCAF51755988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*","matchCriteriaId":"EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*","matchCriteriaId":"80C55B73-497D-4A22-9230-A4160BF97344"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*","matchCriteriaId":"0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*","matchCriteriaId":"4B235167-9554-4431-88C5-9472DD36FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E05D8E86-EC01-4589-B372-4DEB7845C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*","matchCriteriaId":"764AD252-CA2F-4A87-BCAA-7747E8C410E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*","matchCriteriaId":"269BB9F7-55E5-4CB3-8429-C37C7132799F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F639-31A0-4026-B6D4-51BA79FB1D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0211BCE3-0DED-40BA-8A21-1A97B91F71C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*","matchCriteriaId":"B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5AD7BB30-AC79-4153-852C-1053DCF4DE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F48519C6-0C28-49A5-94C7-EF3AA88E2667"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*","matchCriteriaId":"9039BE91-AF0A-41E7-8F9F-15375890E120"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*","matchCriteriaId":"08BCB2EA-DF9D-4853-805B-29FA6274E2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*","matchCriteriaId":"0F93417F-2498-4576-9F5D-B59F77D39669"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AF3AB42C-B614-4746-99AD-E94140D91BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*","matchCriteriaId":"458167E5-9BC2-40BE-AC8A-9761A4F19494"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*","matchCriteriaId":"86ACA0ED-A3D0-48A7-B06F-13709AD23B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*","matchCriteriaId":"0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8176879B-1875-4AC9-B15A-2ABCFCD04F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*","matchCriteriaId":"FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*","matchCriteriaId":"A02751E9-2D38-4495-9572-8D84D71D4773"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*","matchCriteriaId":"7A36BEA2-DAE4-423C-8D85-0F6036351F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*","matchCriteriaId":"DF23EBA1-D3A9-413F-9E83-43A91492C031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*","matchCriteriaId":"44CCF5CD-B434-4392-A79A-C1945D2AE30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*","matchCriteriaId":"AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*","matchCriteriaId":"C35F4ABE-1B0C-4195-8F99-BF993A17882B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*","matchCriteriaId":"ADC7352D-2916-47F7-A256-F897D763DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"AEC3FC36-B246-4DCB-8984-228525D9A356"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*","matchCriteriaId":"BC861000-37D8-4B0F-BFA0-57E9BE125B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E003AB3C-8DF3-4AE8-82A3-984F30E5599B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*","matchCriteriaId":"5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FF67D77-02AC-4807-984D-C5AE9799F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*","matchCriteriaId":"683B26F0-5EA2-455A-8948-27C100BBA3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E5A75B23-2DD7-4EB2-BEAA-049FF4E51A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*","matchCriteriaId":"7279E1EC-DEBC-4ACC-925D-06A7697C162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7910598E-BEC1-4644-9DE4-D8BE505A4F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*","matchCriteriaId":"FB416D0C-6C86-450F-8917-D4B1BD82AB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3p2:*:*:*:*:*:*:*","matchCriteriaId":"3640CCC9-EC4A-44A4-B747-7BAAAD3460C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2DD362E-9EA9-4E88-9A94-D7B471EB1FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.4p1:*:*:*:*:*:*:*","matchCriteriaId":"E3094069-AC2E-43BD-8094-D48E2526DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9B72CFB3-39C7-469C-AA59-69F5B8993BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.6:*:*:*:*:*:*:*","matchCriteriaId":"2A7154C4-8325-4495-92B1-B7897CD7303E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.7:*:*:*:*:*:*:*","matchCriteriaId":"99BF4471-763B-485A-ABD5-C68AD0A14058"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.8:*:*:*:*:*:*:*","matchCriteriaId":"40B1B209-53B8-48DC-AFFC-BD69D5978A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.9:*:*:*:*:*:*:*","matchCriteriaId":"7212E982-76F2-496C-9F08-EC4137F20804"}]}]}],"references":[{"url":"http://openssh.com/security.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openssh.com/txt/release-5.1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30339","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020537","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43940","source":"cve@mitre.org"},{"url":"http://openssh.com/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openssh.com/txt/release-5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3260","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en Claroline anterior a v1.8.10, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"cwd\" en una acción rqMkHtml a document/rqmkhtml.php, o mendiante una consulta a  (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, o (13) work/work.php en claroline/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.9","matchCriteriaId":"9BB3D6E0-D58C-4E98-8FE9-073062D156D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*","matchCriteriaId":"91188982-B73C-45A1-8FA1-66557D50A6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*","matchCriteriaId":"25E91C51-AA00-452E-B009-CD8EC50F9E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C266BDCB-4533-4697-A13A-22B8DC4A33EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9AE56684-B98B-4642-93F3-8C6297246E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"88E5AD48-31AA-4A9E-969A-6E45E4B6F827"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A0BD0DDD-51EC-40E6-8E6D-635E449478AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*","matchCriteriaId":"54EA479E-E55B-45B2-9DD2-4E2D088AF51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"B3FF8764-0B6C-439B-9333-473F54B9921A"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"A58F1F26-B87D-4445-AB31-0648A7B32E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7:*:*:*:*:*:*:*","matchCriteriaId":"45E88D7C-9610-4052-BBB0-F5FDC596DBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7FF4F90D-CBF7-4539-9AA3-2A667C888670"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"24F49508-B7BC-4971-B3A7-279DCE45E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"34591E8D-FF34-4E78-BA9B-C8C22C38E1A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"9FD502BE-8878-461D-AA04-AA450F652DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"90D5CC64-234C-4519-B902-381A023B83CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"BB99DB46-C0C6-4A46-A0B2-CC71C10C62A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"89AEBCB1-E580-4938-B0F5-9E80CD9F6C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2DEF851B-0A5C-4336-91D4-0A64DB1A260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E1BD4930-4314-476F-8350-F75556CED0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7700C1DE-354E-4ED4-B048-5CB5618CA73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"8AE7AB94-491A-44D5-9F68-D43D4810A63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"A563F517-117B-49F5-AC3F-C2FEA583EBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"D34E7778-31F0-4FC4-98E0-E0C5A3D25538"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"BEC99C89-A159-465D-959A-FE3A17C52515"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"CCABE8BF-C842-41C8-A83F-909948CE8D11"}]}]}],"references":[{"url":"http://claroline.svn.sourceforge.net/viewrc/claroline/branches/1.8/claroline/?sortby=date#dirlist","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31116","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4020","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613634","source":"cve@mitre.org"},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494539/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30269","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43854","source":"cve@mitre.org"},{"url":"http://claroline.svn.sourceforge.net/viewrc/claroline/branches/1.8/claroline/?sortby=date#dirlist","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494539/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3261","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en claroline/redirector.php en Claroline anterior a 1.8.10, permite a atacantes remotos redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing mediante una URL en el parámetro \"url\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.9","matchCriteriaId":"9BB3D6E0-D58C-4E98-8FE9-073062D156D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*","matchCriteriaId":"91188982-B73C-45A1-8FA1-66557D50A6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*","matchCriteriaId":"25E91C51-AA00-452E-B009-CD8EC50F9E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C266BDCB-4533-4697-A13A-22B8DC4A33EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9AE56684-B98B-4642-93F3-8C6297246E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"88E5AD48-31AA-4A9E-969A-6E45E4B6F827"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A0BD0DDD-51EC-40E6-8E6D-635E449478AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*","matchCriteriaId":"54EA479E-E55B-45B2-9DD2-4E2D088AF51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"B3FF8764-0B6C-439B-9333-473F54B9921A"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"A58F1F26-B87D-4445-AB31-0648A7B32E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7:*:*:*:*:*:*:*","matchCriteriaId":"45E88D7C-9610-4052-BBB0-F5FDC596DBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7FF4F90D-CBF7-4539-9AA3-2A667C888670"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"24F49508-B7BC-4971-B3A7-279DCE45E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"34591E8D-FF34-4E78-BA9B-C8C22C38E1A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"9FD502BE-8878-461D-AA04-AA450F652DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"90D5CC64-234C-4519-B902-381A023B83CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"BB99DB46-C0C6-4A46-A0B2-CC71C10C62A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"89AEBCB1-E580-4938-B0F5-9E80CD9F6C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2DEF851B-0A5C-4336-91D4-0A64DB1A260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E1BD4930-4314-476F-8350-F75556CED0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7700C1DE-354E-4ED4-B048-5CB5618CA73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"8AE7AB94-491A-44D5-9F68-D43D4810A63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"A563F517-117B-49F5-AC3F-C2FEA583EBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"D34E7778-31F0-4FC4-98E0-E0C5A3D25538"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"BEC99C89-A159-465D-959A-FE3A17C52515"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"CCABE8BF-C842-41C8-A83F-909948CE8D11"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4020","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613634","source":"cve@mitre.org"},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494539/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30269","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43854","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494539/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3262","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en Claroline 1.8.10, permite a atacantes remotos modificar contraseñas, relacionado con la ausencia del requerimiento de la contraseña anterior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.9","matchCriteriaId":"9BB3D6E0-D58C-4E98-8FE9-073062D156D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*","matchCriteriaId":"91188982-B73C-45A1-8FA1-66557D50A6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*","matchCriteriaId":"25E91C51-AA00-452E-B009-CD8EC50F9E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C266BDCB-4533-4697-A13A-22B8DC4A33EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9AE56684-B98B-4642-93F3-8C6297246E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"88E5AD48-31AA-4A9E-969A-6E45E4B6F827"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A0BD0DDD-51EC-40E6-8E6D-635E449478AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*","matchCriteriaId":"54EA479E-E55B-45B2-9DD2-4E2D088AF51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"B3FF8764-0B6C-439B-9333-473F54B9921A"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"A58F1F26-B87D-4445-AB31-0648A7B32E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7:*:*:*:*:*:*:*","matchCriteriaId":"45E88D7C-9610-4052-BBB0-F5FDC596DBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7FF4F90D-CBF7-4539-9AA3-2A667C888670"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"24F49508-B7BC-4971-B3A7-279DCE45E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"34591E8D-FF34-4E78-BA9B-C8C22C38E1A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"9FD502BE-8878-461D-AA04-AA450F652DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"90D5CC64-234C-4519-B902-381A023B83CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"BB99DB46-C0C6-4A46-A0B2-CC71C10C62A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"89AEBCB1-E580-4938-B0F5-9E80CD9F6C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2DEF851B-0A5C-4336-91D4-0A64DB1A260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E1BD4930-4314-476F-8350-F75556CED0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7700C1DE-354E-4ED4-B048-5CB5618CA73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"8AE7AB94-491A-44D5-9F68-D43D4810A63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"A563F517-117B-49F5-AC3F-C2FEA583EBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"D34E7778-31F0-4FC4-98E0-E0C5A3D25538"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"BEC99C89-A159-465D-959A-FE3A17C52515"},{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"CCABE8BF-C842-41C8-A83F-909948CE8D11"}]}]}],"references":[{"url":"http://secunia.com/advisories/31116","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4020","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613634","source":"cve@mitre.org"},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494539/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=613634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494539/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3263","sourceIdentifier":"cve@mitre.org","published":"2008-07-22T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (call-number exhaustion and CPU consumption) by quickly sending a large number of IAX2 (IAX) POKE requests."},{"lang":"es","value":"La implementación del protocolo IAX2 en Asterisk Open Source versiones 1.0.x, versiones 1.2.x anteriores a 1.2.30 y versiones 1.4.x anteriores a 1.4.21.2; Business Edition versiones A.x.x, versiones B.x.x anteriores a B.2.5.4 y versiones C.x.x anteriores a C.1.10.3; AsteriskNOW; Appliance Developer Kit versiones 0.x.x; y s800i versiones 1.0.x anteriores a 1.2.0.1, permite a los atacantes remotos causar una denegación de servicio (agotamiento del número de llamadas y consumo de CPU) mediante el envío rápido de un gran número de peticiones POKE de IAX2 (IAX)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF8EBD08-B640-42E7-BEDB-E7A279043AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DCEB7358-12E8-4E8C-987E-14493BED32BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A6460CC-1A31-4776-890A-FA3120A85C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9F9B2C53-C767-434C-8A16-356FE39DC3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"81DF3AD9-E2B7-4D65-A7FB-587D97AF418A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C7AC1ACB-A7A4-41C9-B85B-4FA48AA845C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"22521061-EFFB-4EC2-BA8F-D6D55E43CCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"74257EDA-40C0-4762-8184-1526B5682326"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"FAF09DF6-3E23-4139-92A2-DC44D2A2CF89"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"3003B53D-F21C-4D37-903D-D6F51EF6E63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.9_1:*:*:*:*:*:*:*","matchCriteriaId":"BF3E676F-0559-4135-8B01-27A808363F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"93F75E29-3952-4E28-A17C-2EC87203F4F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"3B67F4F2-CDB9-46C1-AE4C-3E183E54693A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.1.12:*:*:*:*:*:*:*","matchCriteriaId":"D61CF0C0-5118-4CBC-BD78-BCF55569C167"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.2:*:*:*:*:*:*:*","matchCriteriaId":"6B4D46FC-06D3-4022-B971-0BA11868486B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5C3C518-8427-40F1-832C-31D414DB9A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.4:*:*:*:*:*:*:*","matchCriteriaId":"77038CD8-F21A-4372-8D23-1A2563865334"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E29B048-41E8-4301-8863-BE73C4AEE178"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"B60E0BAB-6D6E-48DB-92A9-62769E25C024"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AB40890B-5C7C-4BDD-8579-80C75C259570"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"323CDA8E-FBB4-455F-BC72-A3588FE0014B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"09BDB6F9-A258-4537-BEFB-BB18A38B1071"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54F50B72-EFB3-448F-A2B8-C2BE4D4BF341"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0973E099-B757-4845-9A4C-E2DAD3C3336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"02A94415-B792-4CA4-A271-F04D6B8A793E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"358D057C-1C78-43C6-9DB8-3CC8FF2AAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E76012FA-1BD9-4A0D-830A-88B5A319C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"79244AE5-FD84-42B5-A56B-18293B999423"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BF25D879-9A00-48D2-93F8-BE692DE76E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69BE50A7-FCA8-470A-B212-A516224306EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E306F943-ECA2-41C8-8C5D-F6A3D68ECE79"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3C309D90-24ED-4DC7-A770-783A7E28705F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1B6DFD0D-86CE-4423-A0F4-C3581F916038"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"77255177-4EB2-47F5-8B3A-F6164C3C8173"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2145ECD7-D734-4D58-8474-2F38DF9DB94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1BC2FFDF-1E94-4E1F-BABC-8B53D8B986F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"38C3AAB7-EA93-40BA-8ADE-380DA3520747"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"E97310AF-E163-4C4F-A0BE-2940A67C336B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"66A7A018-4EB6-4C15-9A22-E4299A6919C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"16B00825-6346-4A1E-A04C-714A8EDB043A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FC3E1877-27E0-4DB1-BFB1-E70043125724"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E55B3B9A-4D40-470F-ABBD-1D9105EB01F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8BD1092A-B278-4606-A328-3BC38CF535CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7A7F90E-4600-4058-BB10-E39BE8F4968F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5722AD0B-B329-4DA3-A251-A18DD6EE505E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"18B8E66C-B2EB-4F1F-9226-07A957885D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A9A87BEC-8F36-48CB-83CA-7E69B16629E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"ECD3CBC1-1371-440A-9EA1-7495A4FA2C49"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"1B4841AD-96B7-4518-AC3E-3D23C88C083B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"0B89DF1E-8BF7-4907-83BF-B4A1DFFEBC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C89A173C-C64A-440F-BCC6-EDE692521171"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"C716CAB8-5F2D-44DA-982B-3A47B3B59A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"F0FABB45-93A9-49BB-93DA-D13305E2FF84"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"A5F82331-A7C1-4166-AE45-A83BD7FC3D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"26A10E99-3A8C-430A-8FB6-4A55E01A00E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E5DF84B2-A104-4FA2-8B02-D243D76ACEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"B4BA2270-DF93-48FB-A90F-DFBFED05F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"B4FE0264-95E4-4B75-8904-369035DEA2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"A39F4E4E-B3B0-47AE-A36D-823E74C0FCCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"C7381C3C-50A0-41FB-804C-C0D57B7173C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"0D6D1FA9-D83A-4399-86DB-F844F24771B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D2EAE6FD-5A1A-4596-9E01-B6AE9C8ABE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"69B207B9-A4F4-4A3A-B6AD-C3470A7FA226"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"65C8D404-EF04-440E-A134-5A94AEB30DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"A10E0435-D6A4-405A-A855-F755F1A850A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"218B3095-4CC2-4CC3-9ED6-98293DC27FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"5AB9EE91-2388-4FAF-B79F-04025879EFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EA10487-E9DC-4017-BCDF-7D1CC3C84C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"D9FD0788-C8E7-406B-9CA2-72341F71771E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A678E060-6274-40B6-94BD-84C598689694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"3B0F95F5-AFA0-4F75-904F-E9B501FA1FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.28.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3722B7-722B-4EE2-BE30-A00B530768F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"49641F43-FB6C-422A-9482-59B242BAA889"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"9ED92AF3-3C13-4206-BC76-E6B9368C599A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"593AA737-5AF3-4F7C-B74B-D3F37701C435"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D942B911-979A-4AC3-93D6-07E420171E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"84CB8C4A-F001-4DD7-8DFE-CB082B4BB969"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"96DB0240-E93D-4BDB-859B-B44C91996993"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.4_2007-04-27:*:*:*:*:*:*:*","matchCriteriaId":"465DB1C7-D5DD-4A2D-8506-8642AB8363C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0F4BA849-E092-404A-92CD-44C2D99AE971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2C7014B4-1860-49AD-9469-9954C3CC01C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"3D1F0056-0945-476C-982E-7B41EB420A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"A53DEC9D-B288-42CD-9387-57315AC98D72"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"89C1F33F-27B6-4C56-92FF-EB2861ABBC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"64E07CF3-073D-4705-96A6-13367D4F5CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"18D19CB0-E3D7-40DB-B0C0-B62BB6075267"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"77FB7CC1-BD0D-4F34-AB21-59CFD23C494C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"997FA3C7-1894-478A-ABF1-52DD2B0487E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"96E02BE0-BF4A-46C9-AFB5-47E8F18E3D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"292190EE-D9C8-4E3A-BB34-0ECD7B865482"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"7DAC55F9-1D43-4AA8-87C9-DB165442700B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"219760EE-AA86-4423-890D-1BD5D9D3ACEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"613B69C5-4330-46E0-B6DF-322C5BC6D5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"195B012E-0538-4140-9035-F5D1A442778B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"FA65023F-965D-4FA3-A1AB-DB4A7E9D05A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"78AC03A7-41AB-45AF-AD89-291A7429B8A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4.19:*:*:*:*:*:*:*","matchCriteriaId":"A9FE3CC7-74FB-4401-A0D3-924D6A45EB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"181C8E98-2138-4BFC-B6B0-1DA270AEE7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.4_revision_95946:*:*:*:*:*:*:*","matchCriteriaId":"DB08F4FA-8600-4D21-A565-B3BF636634B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FEAE6729-D79A-49B8-9758-BA74A60A238A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:a:*:*:*:*:*:*:*","matchCriteriaId":"9E5B291D-25D6-4629-954C-99722F8B9918"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:a:*:business:*:*:*:*:*","matchCriteriaId":"C6702046-43CF-4C84-9F76-24716C9F7D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"27DA769B-8D20-47EC-95A1-F616243A7BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.2:*:business:*:*:*:*:*","matchCriteriaId":"524CF00B-1B36-4C1F-80B4-28349891669B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3736EFBD-357A-4E9A-8865-7F27FA7052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.3:*:business:*:*:*:*:*","matchCriteriaId":"2942FA48-42CE-4E67-A5BF-7852652EDE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"05515185-52F6-4A69-A32C-BC2F89E4CFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.2.0:*:business:*:*:*:*:*","matchCriteriaId":"4160A834-9194-474C-819B-60627E470D13"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-010.html","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30321.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494675/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30321","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020535","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2168/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43942","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30321.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494675/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2168/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3264","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request."},{"lang":"es","value":"La implementación FWDOWNL firmware-download en Asterisk Open Source 1.0.x, 1.2.x antes de 1.2.30 y 1.4.x antes de 1.4.21.2; Business Edition A.x.x, B.x.x antes de B.2.5.4 y C.x.x antes de C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; y s800i 1.0.x antes de 1.2.0.1 permite a atacantes remotos provocar una denegación de servicio (amplificación del tráfico) mediante una petición IAX2 FWDOWNL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:asterisk:s800i_appliance:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9282AC42-E98A-4BC2-B46D-15B5776C961F"},{"vulnerable":false,"criteria":"cpe:2.3:h:asterisk:s800i_appliance:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"83DBFD69-2500-46C1-827C-1493CF896F49"},{"vulnerable":false,"criteria":"cpe:2.3:h:asterisk:s800i_appliance:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F53C8D19-507A-45B6-9B19-C733460F0739"},{"vulnerable":false,"criteria":"cpe:2.3:h:asterisk:s800i_appliance:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"09AEF231-3438-420E-B2B0-1B876A929033"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05B437-C292-4AA0-8AFE-1CA07CD80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0102C4C0-1A7D-4AB7-9817-44E6B0DB761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4:*:*:*:*:*:*:*","matchCriteriaId":"81DDF486-4185-48EE-869E-0AA6726C31F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CF45A8E1-F6B1-42BD-9168-12062FA6EAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5757B9B-2759-439A-9A6D-CCDD6C8C8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E4548D39-0562-4946-AA51-A7C1A31AEE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FCD71268-EAA2-477B-8AC4-DE4853A262B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8:*:*:*:*:*:*:*","matchCriteriaId":"529B2115-A191-4F3F-8F8C-A38B7C45463A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:a:*:*:*:*:*:*:*","matchCriteriaId":"313B3A38-8DEA-4D62-A1A4-0B6011E81870"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b:*:*:*:*:*:*:*","matchCriteriaId":"B24F3283-4809-40B1-8166-9D1C3A4C9104"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"802F8680-AB38-41AF-BFC8-F6927F6B1626"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BCAE8D90-B032-4C60-B487-BE655D00FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB64A872-B7B8-46A8-81E4-49EDAC160531"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"21000270-C9B9-430C-A252-763887A15835"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12F7CF45-5482-4947-8F1D-48C746987475"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B64995D-7892-49AB-A89D-A5D15615C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0397DBD4-EA00-444A-9008-4932F99DF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"D7203093-7209-4184-92CB-08AD73FAC379"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0F04F844-79C4-41F3-9671-8B46460D0AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8936B494-E647-498B-8380-AE4DAD458533"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1B234F33-5233-42A3-B95A-3A3558B4DDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c:*:*:*:*:*:*:*","matchCriteriaId":"4D47534E-8EBC-44B5-8770-65BBA7C3F3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"5BC80EBD-14D3-44A6-A06F-0549722E0EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta8:*:*:*:*:*:*:*","matchCriteriaId":"7859797F-E9AD-4429-BD2C-A24EC24A5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E5C988FD-CFB9-4763-BE5A-B89FB3538FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"00A6DAD0-D4C3-4A58-A35A-991E04B50EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6413B123-65DE-4483-A8A0-F5F30A809570"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"502AEBA1-2A6D-4367-86AB-F2948207FCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"93DA4919-A365-48B6-84D6-6A7D97941A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:beta_5:*:*:*:*:*:*:*","matchCriteriaId":"B12A09BE-1EE0-46D5-B3F0-E8847409A49A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:beta_6:*:*:*:*:*:*:*","matchCriteriaId":"7A5A734E-1DD3-4924-8AC1-97048FA3270F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:beta_7:*:*:*:*:*:*:*","matchCriteriaId":"3AE2F09E-4B5A-4EDF-A48A-BCBBAA80156B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:pre-release:*:*:*:*:*:*:*","matchCriteriaId":"F420EB4D-5B9C-4BBA-AAC5-5E0E83CD1F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*","matchCriteriaId":"678DB154-4363-42FF-8B28-367923FC6595"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F2C378-FF0E-4765-9F66-625C4064D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A55A9295-F632-4856-90A1-38371EB98589"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FAE6AF1-884D-41F7-B174-9E13C7719C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCA9E35B-9A6B-42F2-9315-9C7D09F62227"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"89B1F293-4F0F-48FD-A1F1-1230B94D87D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF7EC20-A424-45E5-B7E4-3CC86075858C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C790E105-55C8-4CDC-9FA8-E1FF6F130A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"44C860EF-2B29-4995-B942-000CC43FDD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADB80EF-C724-44BA-88FC-24087799D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"78B39BE8-7E2D-42DF-8633-44CAD5662777"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F39036E3-0027-4C72-9DEB-9A6E2B4512C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A037E6F9-3EF7-4EEB-AC16-081421BCE40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A7EC02A-9C9E-4589-BBB3-1908D3078A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6C70FA9C-6F3B-4BDF-97FB-81D06AB0EE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"7435F043-F92B-4635-93CC-A2C39AAE1BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*","matchCriteriaId":"C7B2F43B-8B69-4BF6-86B7-A225175FF068"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"107DA2D8-FE7C-4B70-856D-43D58B988694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5C14614F-4E27-40A6-9E56-2B1DBB10330B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7A2F2F5A-66FD-4057-917C-66332A88D83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"399B0206-B48B-46EF-8CA6-A6E5A2550B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"26E9760F-C0EB-47BB-8DA4-CC7815099DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6BD915CD-A7D3-4305-A6C0-290C648A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"51E5EB34-30AD-4E81-8BD4-4AB905E52B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"99E9EE2A-56AD-42BC-8CB0-D34091849B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96877A3E-B54B-4F31-B281-76CDC98B2D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6D0B4503-42A6-4D88-954E-A662E91EC204"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A4B73813-BCD8-429E-B9B9-D6665E026BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"5BBA3ECC-4F40-41CD-A6D7-BBD680DDBACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBE2156-AF86-4C72-B33D-3FF83930F828"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61408884-FBBF-4D94-A552-F99AB46DCED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"4A527277-D97D-4B74-906F-7481BDBD96D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D8B57A32-7B83-4783-A244-C26301970444"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"88576385-EF03-408B-9775-B52E6AFFE48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:*:*:*:*:*:*:*","matchCriteriaId":"ED2BF36F-CF10-4F24-970B-3D0BB7561C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19.1:*:*:*:*:*:*:*","matchCriteriaId":"FB1593E1-BF21-4DB9-A18E-9F221F3F9022"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19_rc3:*:*:*:*:*:*:*","matchCriteriaId":"2D41604A-21CB-4EF3-85E8-8CD170C8013F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4_revision_95946:*:*:*:*:*:*:*","matchCriteriaId":"E3C6272B-D0C4-4EA5-AEE4-5A45DAA2DDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4beta:*:*:*:*:*:*:*","matchCriteriaId":"2A8012CE-4D4B-4131-87E7-16D7907E3BB3"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-011.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494676/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30350","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020536","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2168/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43955","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494676/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2168/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3265","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a pay_options action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente DT Register (com_dtregister) 2.2.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro eventId en una acción pay_options a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_dtregister:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"595FD469-2923-496B-8B79-632698ADFC83"}]}]}],"references":[{"url":"http://osvdb.org/47061","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4023","source":"cve@mitre.org"},{"url":"http://www.dthdevelopment.com/index.php?option=com_fireboard&Itemid=73&func=view&id=1883&catid=4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30256","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43851","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6086","source":"cve@mitre.org"},{"url":"http://osvdb.org/47061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dthdevelopment.com/index.php?option=com_fireboard&Itemid=73&func=view&id=1883&catid=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3266","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attackers to execute arbitrary SQL commands via the key parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en picture_pic_bv.asp de SoftAcid Hotel Reservation System (HRS) Multi permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softacid:hotel_reservation_system_multi:*:*:*:*:*:*:*:*","matchCriteriaId":"F64905D4-39A0-4326-9596-0785C77DC042"}]}]}],"references":[{"url":"http://secunia.com/advisories/31170","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4028","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30316","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2154/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43947","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2154/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3267","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via the cat_a parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mojoJobs.cgi de MojoJobs permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_a."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mojoscripts:mojojobs:*:*:*:*:*:*:*:*","matchCriteriaId":"85FC7B45-1F59-470A-9D37-1A3CF135BAF0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4029","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2158/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43933","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6110","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2158/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3268","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers with administrator email address knowledge to bypass restrictions and gain privileges via unspecified vectors related to login names.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad no especificada en phpScheduleIt de 1.2.0 a 1.2.9, cuando useLogonName está habilitado, permite a atacantes remotos que conocen direcciones de email de administradores evitar las restricciones y obtener privilegios mediante vectores no especificados relacionados con nombres de login. NOTA: algunos de estos detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7663D802-7547-4FE0-B5A3-D20B18ADB6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"D69ADD45-37E8-480F-8C06-3295A9BB5B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC0D9466-E7BD-4D1C-9AFA-596198A5B65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB149A8-0B97-438B-8351-91446232D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FCC62CE-E455-449C-A03E-23C97D834143"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3019FB4F-E2E1-4E4B-B537-F6E12262950B"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5D209B2F-11D9-4C66-AA9D-ABF706B436A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"82A187A7-6985-464C-B9E5-81FFB815261D"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F79B653B-9D13-4B72-83EB-E3DB806B815B"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8B218350-9512-4C0A-9BDD-3DF7CE26921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"0CDB5CB2-19E6-4CF9-90A5-44FC4E1CC683"}]}]}],"references":[{"url":"http://secunia.com/advisories/31147","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=614202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30300","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=614202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3269","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet to TCP port 4321."},{"lang":"es","value":"WRPCServer.exe en WinSoftMagic WinRemotePC (WRPC) Lite 2008 y Full 2008 permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU) mediante un paquete TCP manipulado al puerto TCP 4321."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winsoftmagic:winremotepc_full:2008:r.2:*:*:*:*:*:*","matchCriteriaId":"1D8710D4-177F-44B7-80DD-549B17B185ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:winsoftmagic:winremotepc_lite:2008:r.2:*:*:*:*:*:*","matchCriteriaId":"8A07B02A-DFE5-4780-9A1D-618EC25CD28E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31102","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30236","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2112/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43784","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6077","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2112/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3270","sourceIdentifier":"secalert@redhat.com","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested."},{"lang":"es","value":"yum-rhn-plugin en Red Hat Enterprise Linux (RHEL) 5 no verifica el certificado SSL para un archivo descargado de un servidor Red Hat Network (RHN), lo que facilita a atacantes man-in-the-middle (hombre en el medio) remotos provocar una denegación de servicio (pérdida de actualizaciones) o forzar la descarga e instalación de paquetes Red Hat oficiales que no fueron solicitados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31472","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020698","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0815.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30695","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457113","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0815.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3271","sourceIdentifier":"secalert@redhat.com","published":"2008-10-13T20:00:02.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a \"synchronization problem\" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve."},{"lang":"es","value":"Apache Tomcat 5.5.0 y 4.1.0 hasta la 4.1.31 permite a atacantes remotos eludir una restricción de dirección IP y obtener información sensible a través de una solicitud \r\nque se tramita simultáneamente con otra petición, pero en otro hilo, lo que lleva a una sobreescritura de una variable de instancia asociada con un \"problema de sincronización\" y con un fallo de seguridad en la implementación de los hilos, relacionada con RemoteFilterValve, RemoteAddrValve, y RemoteHostValve."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN30732239/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000069.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32213","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32234","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32398","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35684","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4396","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200806e.html","source":"secalert@redhat.com"},{"url":"http://www.nec.co.jp/security-info/secinfo/nv09-006.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/497220/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31698","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021039","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2793","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2800","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1818","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45791","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=25835","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN30732239/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200806e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nec.co.jp/security-info/secinfo/nv09-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497220/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=25835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3272","sourceIdentifier":"secalert@redhat.com","published":"2008-08-08T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information."},{"lang":"es","value":"La función snd_seq_oss_synth_make_info de sound/core/seq/oss/seq_oss_synth.c en el subsistema sound de Linux kernel versiones anteriores a 2.6.27-rc2 no verifica que el número de dispositivo esté dentro del rango definido por max_synthdev antes de retornar determinados datos del emisor, lo cual permite a usuarios locales obtener información sensible.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.27","matchCriteriaId":"BF554042-72C3-4933-A7FC-62778030A785"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:-:*:*:*:*:*:*","matchCriteriaId":"B6115C56-3A6D-4A62-A3F1-8AC8E915FC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CA1D49-76E7-4195-98AF-BE916040ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82e68f7ffec3800425f2391c8c86277606860442","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31366","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31614","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31836","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31881","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32023","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32103","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32104","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32370","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32799","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30559","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020636","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2307","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44225","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11182","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=82e68f7ffec3800425f2391c8c86277606860442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3273","sourceIdentifier":"secalert@redhat.com","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about \"deployed web contexts\" via a request to the status servlet, as demonstrated by a full=true query string."},{"lang":"es","value":"JBoss Enterprise Application Platform (también conocido como JBossEAP o EAP) anterior a 4.2.0.CP03 y 4.3.0 anterior a 4.3.0.CP01, permite a atacantes remotos obtener información sensible relacionada con \"deployed web contexts\" (Contextos web desarrollados) a través de una petición al servlet de estado, como se ha demostrado mediante la cadena de consulta full=true."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jboss:enterprise_application_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.0.cp03","matchCriteriaId":"25795168-963E-474F-B312-3B2A8B8382A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jboss:enterprise_application_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"71409A6B-70D7-41E4-8F9F-C7374002DFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp01:*:*:*:*:*:*:*","matchCriteriaId":"254714FE-97B9-48EF-B596-524770B8E2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp02:*:*:*:*:*:*:*","matchCriteriaId":"DB4C28FC-8251-44C4-9B9D-113554331A9F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=132698550418872&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132698550418872&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0825.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0826.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0827.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0828.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30540","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020628","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=457757","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44235","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-544","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132698550418872&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132698550418872&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0825.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0826.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0827.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0828.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=457757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3274","sourceIdentifier":"secalert@redhat.com","published":"2008-09-12T16:56:20.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query."},{"lang":"es","value":"La configuración por defecto de Red Hat Enterprise IPA versión 1.0.0 y FreeIPA versiones anteriores a 1.1.1 pone ldap:///anyone en la ACL de lectura para el atributo krbMKey, lo que permite a atacantes remotos obtener la clave maestra de Kerberos utilizando una consulta LDAP anónima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:enterprise_ipa:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"875F2D78-7C9F-40D1-AA33-6D983CE5577E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:freeipa:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"CBA7BABF-316F-4B56-8A06-99118BE39754"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:freeipa:0.99:*:*:*:*:*:*:*","matchCriteriaId":"CF233FD1-3592-4D75-B941-79CCF00D22D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:freeipa:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"03F76D90-B63A-4169-9FB4-06A027D401C7"}]}]}],"references":[{"url":"http://git.fedorahosted.org/git/freeipa.git/?p=freeipa.git%3Ba=commit%3Bh=9932887f2af38b9701efec27707648c026ec445c","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0860.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31861","source":"secalert@redhat.com"},{"url":"http://www.freeipa.org/page/CVE-2008-3274","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.freeipa.org/page/Downloads","source":"secalert@redhat.com"},{"url":"http://www.freeipa.org/page/News","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31111","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020850","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457835","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00733.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00743.html","source":"secalert@redhat.com"},{"url":"http://git.fedorahosted.org/git/freeipa.git/?p=freeipa.git%3Ba=commit%3Bh=9932887f2af38b9701efec27707648c026ec445c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freeipa.org/page/CVE-2008-3274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.freeipa.org/page/Downloads","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freeipa.org/page/News","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00743.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3275","sourceIdentifier":"secalert@redhat.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories."},{"lang":"es","value":"Las funciones (1) real_lookup y (2) __lookup_hash en el archivo fs/namei.c en la implementación de vfs en el kernel de Linux anterior a  versión 2.6.25.15 no previene la creación de una matriz de elementos secundarios para un directorio eliminado (también se conoce como S_DEAD), que permite a los usuarios locales causar una denegación de servicio (\"overflow\" del área huérfana UBIFS) por medio  de una serie de intentos de creación de archivos sin eliminar los directorios."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.25.15","matchCriteriaId":"AEEB7FCC-A4DF-4849-AE76-C844E3F53C4C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"44320836-E2DE-4A1C-9820-AFFA087FF7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"15E235E9-EC31-4F3F-80F7-981C720FF353"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77","source":"secalert@redhat.com"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2008/7/2/83","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31836","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31881","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32023","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32104","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32190","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32344","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33201","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33280","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33556","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30647","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020739","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2430","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457858","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44410","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2008/7/2/83","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0885.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/637-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3276","sourceIdentifier":"secalert@redhat.com","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field."},{"lang":"es","value":"Desbordamiento de entero en la función dccp_setsockopt_change de net/dccp/proto.c en el subsistema Datagram Congestion Control Protocol (DCCP (Protocolo de Control de Congestión de Datagramas)) del kernel de Linux de 2.6.17-rc1 a 2.6.26.2 permite a atacantes remotos provocar una denegación de servicio (pánico) mediante un valor de entero manipulado, relacionado con opciones Change L y Change R que no tienen al menos un byte en el campo dccpsf_val."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=3e8a0a559c66ee9e7468195691a56fefc3589740","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31509","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31836","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31881","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32190","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32237","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32393","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32485","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/15/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30704","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020705","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2406","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459226","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11506","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=3e8a0a559c66ee9e7468195691a56fefc3589740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/15/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3281","sourceIdentifier":"secalert@redhat.com","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document."},{"lang":"es","value":"libxml2 2.6.32 y anteriores, no detecta correctamente la recursividad durante la expansión de una entidad en un valor de un atributo; esto permite a atacantes dependientes del contexto provocar una denegación de servicio (consumo de la memoria y la CPU) mediante un documento XML manipulado."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-776"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"66E994C3-52FD-41F8-B310-3B1C549D2D62"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"212BF588-5C81-4801-A76D-73FB1DE211EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"3.0","matchCriteriaId":"6717E295-F796-48DE-8F4B-B2B00B3C6589"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CA1D49-76E7-4195-98AF-BE916040ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4814716C-514C-40F7-A59B-ED61F14658DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0F9EF63F-DDA3-448B-92D7-27ED92C51FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53A61204-33CE-422F-8285-20A5E98ADF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1BA6DF4-4D53-482A-8820-B9B0E6EBD51D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ECFD8D25-7FDF-48DF-8728-5875C44FFB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE7ECF1C-285C-4AA3-8B66-28EDAB0763E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000039.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://mail.gnome.org/archives/xml/2008-August/msg00034.html","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/31558","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31566","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31590","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31728","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31748","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31855","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32488","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32807","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32974","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35379","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1631","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:180","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:192","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30783","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020728","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-640-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2419","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2843","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://xmlsoft.org/news.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458086","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0836.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/644-1/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://mail.gnome.org/archives/xml/2008-August/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/31558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/497962/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-640-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0836.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/644-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-3282","sourceIdentifier":"secalert@redhat.com","published":"2008-08-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a \"numeric truncation error,\" a different vulnerability than CVE-2008-2152."},{"lang":"es","value":"Desbordamiento de entero en la función rtl_allocateMemory en sal/rtl/sourcealloc_global.c en el localizador de memoria de OpenOffice.org (OOo) 2.4.1, sobre plataformas 64-bit, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o, posiblemente, ejecución de código arbitrario a través de un documento manipulado, relacionado con \"error de truncamiento numérico\", es una vulnerabilidad distinta de la CVE-2008-2152.\r\n"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-681"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-681"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openoffice:2.4.1:*:*:*:*:*:x64:*","matchCriteriaId":"4B4F7B6E-01C2-4925-96E1-FA4DBCA2C486"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://secunia.com/advisories/31640","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31646","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31778","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020764","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.openoffice.org/issues/show_bug.cgi?id=92217","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0835.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30866","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2449","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455867","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458056","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44742","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11345","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/31640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.openoffice.org/issues/show_bug.cgi?id=92217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00494.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-3283","sourceIdentifier":"secalert@redhat.com","published":"2008-08-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) the authentication / bind phase and (2) anonymous LDAP search requests."},{"lang":"es","value":"Múltiples fugas de memoria en Red Hat Directory Server 7.1 anteriores al SP7, Red Hat Directory Server 8, y Fedora Directory Server 1.1.1 y anteriores, permiten a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de vectores que involucran: (1) la fase de autenticación/asignación y (2) peticiones de búsqueda LDAP anónimas.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fedora:directory_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"662D91E0-D891-4B30-B4D1-FA7FFACBF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2060B92C-72E4-4FAF-9CB6-C6142F6DDE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*","matchCriteriaId":"7A7C6A16-F928-4682-BCCA-D004FB4781B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*","matchCriteriaId":"374634C4-D913-46B3-AB98-1E3573814E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*","matchCriteriaId":"B58F8C3A-C0F5-400A-823F-F92F71B385EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1F47246B-7393-4F61-88F5-2B8A2211C46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:7.1:sp6:*:*:*:*:*:*","matchCriteriaId":"325755C1-03E1-4947-A5A0-9FEBB0DC4E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5E190C97-A279-4EEE-B9C4-1EA888920F80"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31565","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31627","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31702","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31867","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31913","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1020774","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0602.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0858.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30872","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458977","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44731","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6118","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0602.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0858.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2008-0596.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00521.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00708.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3285","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters."},{"lang":"es","value":"El módulo Filesys::SmbClientParser 2.7 y anteriores para Perl permite a servidores SMB remotos ejecutar código de su elección mediante un nombre de carpeta que contiene metacaracteres shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.1:*:*:*:*:*:*:*","matchCriteriaId":"357CE96B-368E-4BCA-A26E-5BF24C25D30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A40FE9D3-3F9A-46C1-9C4C-460A2C4FD299"},{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B8789260-F5D2-4117-A81F-0C24B12F32CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.4:*:*:*:*:*:*:*","matchCriteriaId":"AA1E209F-03DA-4890-B4CF-0C1ABBF659E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.5:*:*:*:*:*:*:*","matchCriteriaId":"656F74B2-2F82-46C1-98AB-72ECC81D253E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.6:*:*:*:*:*:*:*","matchCriteriaId":"AC661907-3306-4515-AC7E-7C92272E4FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:alain_barbet:filesys_smbclientparser:2.7:*:*:*:*:*:*:*","matchCriteriaId":"E246BC92-3454-445B-8DBA-3EFAD4B90640"}]}]}],"references":[{"url":"http://secunia.com/advisories/31175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4027","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494536/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43910","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494536/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3286","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (2) GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or (3) a GAMESPYRESPONSE command followed by a long RS string."},{"lang":"es","value":"SWAT 4 1.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante los comandos (1) VERIFYCONTENT o (2) GAMECONFIG enviados al servidor antes de la inicialización de la sesión de usuario, lo que dispara una referencia a un puntero nulo; o un comando (3) GAMESPYRESPONSE seguido por una cadena RS larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sierra:swat_4:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"A7F00BFF-0E7E-4E7D-AD07-B1A7C4DB490A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/swat4x-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/fakep/unrealfp.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31158","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30299","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2149/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43901","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43902","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/swat4x-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/fakep/unrealfp.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2149/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3287","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via malformed packets to TCP port 497, which trigger a NULL pointer dereference."},{"lang":"es","value":"retroclient.exe en EMC Dantz Retrospect Backup Client 7.5.116 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante paquetes TCP mal formados al puerto 497, lo que dispara una referencia a puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc_dantz:retrospect_backup_client:7.5.116:*:*:*:*:*:*:*","matchCriteriaId":"BF365E84-EFA2-4605-945B-A628C8282F7D"}]}]}],"references":[{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4031","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494562/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30313","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43926","source":"cve@mitre.org"},{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494562/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3288","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a \"weak hash algorithm,\" which makes it easier for context-dependent attackers to recover passwords."},{"lang":"es","value":"El Server Authentication Module de EMC Dantz Retrospect Backup Server 7.5.508 utiliza un \"algoritmo hash débil\", lo que facilita a atacantes dependientes del contexto recuperar contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:dantz_retrospect_backup_server:7.5.508:*:*:*:*:*:*:*","matchCriteriaId":"86CD183A-815D-4170-8FA6-78BF8797591C"}]}]}],"references":[{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4026","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494636/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30319","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020534","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43935","source":"cve@mitre.org"},{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494636/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3289","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet."},{"lang":"es","value":"EMC Dantz Retrospect Backup Client 7.5.116 envía el hash de la contraseña en texto claro en un punto no especificado, lo que permite a atacantes remotos obtener información sensible mediante un paquete manipulado."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:storcentric:retrospect_backup_client:7.5.116:*:*:*:*:-:*:*","matchCriteriaId":"20456311-7EC0-433D-AF55-253AEC29FA03"}]}]}],"references":[{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31186","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4025","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/494560/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30308","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43930","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/494560/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3290","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS version."},{"lang":"es","value":"retroclient.exe en EMC Dantz Retrospect Backup Client 7.5.116 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una serie de paquetes largos que contienen caracteres 0x00 al puerto TCP 497 que dispara corrupción de memoria, involucrando probablemente una versión de producto inglesa en una versión del sistema operativo china."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc_dantz:retrospect_backup_client:7.5.116:*:*:*:*:*:*:*","matchCriteriaId":"BF365E84-EFA2-4605-945B-A628C8282F7D"}]}]}],"references":[{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4024","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494564/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30306","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43928","source":"cve@mitre.org"},{"url":"http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494564/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2150/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3291","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de AproxEngine (también conocido como Aprox CMS Engine) 5.1.0.4 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprox:aprox_cms_engine:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EF24A1DB-B89A-42AF-8E4A-CEB5BC07DA48"},{"vulnerable":true,"criteria":"cpe:2.3:a:aprox:aproxengine:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B66DE67F-45C1-4077-9473-DA6C74528898"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4032","source":"cve@mitre.org"},{"url":"http://www.aprox.de/index.php?id=001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43905","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6098","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aprox.de/index.php?id=001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3292","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php."},{"lang":"es","value":"constants.inc en EZWebAlbum 1.0 permite a atacantes remotos evitar la autentificación y obtener privilegios de administrador instaurando la cookie photoalbumadmin, como se demostró mediante addpage.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezwebalbum:ezwebalbum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D76E1036-EA40-4209-909B-3BE4BB51DCCD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30343","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43938","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6115","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3293","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php de EZWebAlbum permite a atacantes remotos leer archivos de su elección mediante el parámetro dlfilename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezwebalbum:ezwebalbum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D76E1036-EA40-4209-909B-3BE4BB51DCCD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4034","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494573/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30311","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2160/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43920","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6112","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494573/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2160/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3294","sourceIdentifier":"cve@mitre.org","published":"2008-07-24T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it ahead of time with permissions that prevent its modification by configure."},{"lang":"es","value":"El archivo src/configure.in en Vim versiones 5.0 hasta 7.1, cuando es usado para una compilación con soporte de Python, no garantiza que el archivo temporal Makefile-conf tenga la propiedad y los permisos previstos, lo que permite a usuarios locales ejecutar código arbitrario mediante la modificación de este archivo durante una ventana de tiempo o creándolo de antemano con permisos que impiden su modificación al configurarlo."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue can only be exploited during the package build and it does not affect users of pre-built packages distributed with Red Hat Enterprise Linux. Therefore, we do not plan to backport a fix for this issue to already released version of Red Hat Enterprise Linux 2.1, 3, 4, and 5.","lastModified":"2008-07-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F325C23E-BFBC-4371-AF74-E189FC2515F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.1:*:*:*:*:*:*:*","matchCriteriaId":"2527B955-E25A-4A33-A6F4-27DEDA99C7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.2:*:*:*:*:*:*:*","matchCriteriaId":"BEA82FC2-F2A3-4BE2-8EE2-5A3BC3555401"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.3:*:*:*:*:*:*:*","matchCriteriaId":"808C36C4-0523-4FBC-B3B7-3E6E29FF24EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.4:*:*:*:*:*:*:*","matchCriteriaId":"404E256E-B823-4BC4-8F29-C3724604F474"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.5:*:*:*:*:*:*:*","matchCriteriaId":"75F0563C-7156-4166-87AA-4C122F26CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.6:*:*:*:*:*:*:*","matchCriteriaId":"0CDFBFEB-D79E-4CEB-905E-FA89A0F0D494"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.7:*:*:*:*:*:*:*","matchCriteriaId":"AAEC13F6-0526-47FB-BF98-D864CE297D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.8:*:*:*:*:*:*:*","matchCriteriaId":"477A2C0C-5229-4A08-8AB1-B9C8C2D4F3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D9FE70D0-5931-49D1-A750-7D03C8C28228"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.1:*:*:*:*:*:*:*","matchCriteriaId":"8A08C510-8774-4FEB-BCA3-1868F692BF94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.2:*:*:*:*:*:*:*","matchCriteriaId":"464D5E9A-EB5A-47AB-8657-15A68AD30D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4F51CA-18C1-4043-B4E6-F1AD9D3C1346"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D2BAA6B0-4956-4D98-872A-BCCBD0D4CE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97CCAA40-55CE-4AB9-9268-AADA06E29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Jul/0312.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31159","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494532/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494535/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494736/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2146/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Jul/0312.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494532/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494736/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2146/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-3295","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web script or HTML via the fct parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en modules/system/admin.php en XOOPS 2.0.18.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección, a mediante el parámetro fct. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"E8CACFC0-2538-4D62-9061-2FBCF4C7AD6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30330","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43965","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3296","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fct parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de Salto de directorio en modules/system/admin.php de XOOPS 2.0.18 1 que permite a atacantes remotos incluir y ejecutar archivos locales arbitrariamente mediante un .. (punto punto) en el parámetro fct. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"E8CACFC0-2538-4D62-9061-2FBCF4C7AD6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30330","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43966","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3297","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/class_admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SocialEngine (SE) versiones anteriores a la 2.83, permiten a atacantes remotos ejecutar comandos SQL arbitrariamente a través de (1) una cookie se_user en include/class_user.php o (2) una cookie se_admin en include/class_admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.81","matchCriteriaId":"1BFEAB14-2D98-42A6-890A-4FD42FF71D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8E5CF4B-15F0-4C59-ADCA-9CFCDA95280E"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EA0580D5-710E-4538-B184-F0105F547D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC8B9651-72B6-4C1B-ACC1-3831A4322332"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6743DDD0-D0D8-4F56-92B0-FD1352403D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.7:*:*:*:*:*:*:*","matchCriteriaId":"8441BA19-ACB8-4B7C-8231-51F00777278E"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.8:*:*:*:*:*:*:*","matchCriteriaId":"8D293A92-19D5-432F-BF86-B5907EA16E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EFA7193F-BA13-416C-A29B-C50977C3AD71"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.0:online_beta:*:*:*:*:*:*","matchCriteriaId":"37C36CEA-CB12-4808-A3E9-38A11987BCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.1:*:*:*:*:*:*:*","matchCriteriaId":"ECFAC544-223F-4A4C-B5E6-7D57E6F2CD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.4:*:se:*:*:*:*:*","matchCriteriaId":"F2D15D15-278A-4A06-8C65-1D8BC89D27EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3C7D38E4-CE4D-4CA4-8022-E6C47C559E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.7:*:*:*:*:*:*:*","matchCriteriaId":"B7D6F2A4-47D9-4D5C-A81F-E1316C46113C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4035","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494638/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30342","source":"cve@mitre.org"},{"url":"http://www.socialengine.net/news.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494638/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.socialengine.net/news.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3298","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code."},{"lang":"es","value":"SocialEngine (SE) anterior a 2.83, concede determinados privilegios a las plantillas, lo que permite a los administradores autenticados en remoto ejecutar código PHP de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.81","matchCriteriaId":"1BFEAB14-2D98-42A6-890A-4FD42FF71D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8E5CF4B-15F0-4C59-ADCA-9CFCDA95280E"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EA0580D5-710E-4538-B184-F0105F547D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC8B9651-72B6-4C1B-ACC1-3831A4322332"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6743DDD0-D0D8-4F56-92B0-FD1352403D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.7:*:*:*:*:*:*:*","matchCriteriaId":"8441BA19-ACB8-4B7C-8231-51F00777278E"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:1.8:*:*:*:*:*:*:*","matchCriteriaId":"8D293A92-19D5-432F-BF86-B5907EA16E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EFA7193F-BA13-416C-A29B-C50977C3AD71"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.0:online_beta:*:*:*:*:*:*","matchCriteriaId":"37C36CEA-CB12-4808-A3E9-38A11987BCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.1:*:*:*:*:*:*:*","matchCriteriaId":"ECFAC544-223F-4A4C-B5E6-7D57E6F2CD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.4:*:se:*:*:*:*:*","matchCriteriaId":"F2D15D15-278A-4A06-8C65-1D8BC89D27EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3C7D38E4-CE4D-4CA4-8022-E6C47C559E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:social_engine:social_engine:2.7:*:*:*:*:*:*:*","matchCriteriaId":"B7D6F2A4-47D9-4D5C-A81F-E1316C46113C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4035","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494638/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.socialengine.net/news.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43959","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494638/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.socialengine.net/news.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3299","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng cookie value to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"eSyndiCat 1.6 permite a atacantes remotos evitar la autenticación y obtener acceso como administrador estableciendo el valor de la cookie admin_lng a 1. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:esyndicat:esyndicat:1.6:*:*:*:*:*:*:*","matchCriteriaId":"921AE1B3-B521-4C3C-B042-A91310C49432"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30332","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43972","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3300","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the aa_login cookie value to 1.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"AlphAdmin CMS 1.0.5/03 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo a 1 el valor aa_login de cookie. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alphadmin:alphadmin_cms:1.0.5:sp2:*:*:*:*:*:*","matchCriteriaId":"414812C7-1A9E-471B-8D1F-ACE1DE58935F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30333","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3301","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) content parameter to admin/update.php, related to conflicting code in widget.php; and allow remote attackers to inject arbitrary web script or HTML via the (2) titleId parameter to head.php, reachable through index.php; the (3) t_lang[lang_copyright] parameter to footer.php; the (4) content parameter to the default URI under admin/; the (5) url, (6) t_lang[lang_admin_help], (7) t_lang[lang_admin_clear_cache], (8) t_lang[lang_admin_home], and (9) t_lang[lang_admin_logout] parameters to admin/homelink.php; and the (10) t_lang[lang_admin_new_post] parameter to admin/post.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BilboBlog 0.2.1, permite a administradores autenticados en remoto inyectar secuencias de comandos Web o HTML mediante el (1) parámetro content de admin/update.php, relacionado con \r\ncódigo con conflicto en widget.php; y permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante el (2) parámetro titleId de head.php, al que se puede acceder desde index.php; el (3) parámetro t_lang[lang_copyright] de footer.php; el (4) parámetro content de la URI por defecto en admin/; la (5) url, los parámetro (6) t_lang[lang_admin_help], (7) t_lang[lang_admin_clear_cache], (8) t_lang[lang_admin_home] y (9) t_lang[lang_admin_logout] de admin/homelink.php; y el (10) parámetro  t_lang[lang_admin_new_post] de admin/post.php.  NOTE: Algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tuxplanet:bilboblog:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97429690-9059-4389-8CCB-5FE652B70282"}]}]}],"references":[{"url":"http://secunia.com/advisories/31054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30228","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43764","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6073","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3302","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote authenticated administrators to execute arbitrary SQL commands via the num parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en admin/delete.php de BilboBlog 0.2.1, cuando magic_quotes_gpc no está activada, permite a aadministradores remotos autenticados ejecutar comandos SQL arbitrariamente a través del parámetro num."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tuxplanet:bilboblog:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97429690-9059-4389-8CCB-5FE652B70282"}]}]}],"references":[{"url":"http://secunia.com/advisories/31054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4036","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43765","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6073","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3303","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a direct request that sets the login, admin_login, password, and admin_passwd parameters."},{"lang":"es","value":"admin/login.php en BilboBlog 0.2.1, cuando register_globals está habilitado, permite a atacantes remotos evitar la autenticación y obtener acceso como administrador mediante una solicitud directa que indique los parámetros login, admin_login, password y admin_passwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tuxplanet:bilboblog:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97429690-9059-4389-8CCB-5FE652B70282"}]}]}],"references":[{"url":"http://secunia.com/advisories/31054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4036","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30225","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43762","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6073","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3304","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T13:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to footer.php or (2) a direct request to pagination.php, which reveals the installation path in an error message."},{"lang":"es","value":"BilboBlog 0.2.1 permite a atacantes remotos obtener información sensible a través de (1) una cadena de consulta enable_cache=false en footer.php o (2) una petición directa en pagination.php, lo cual revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tuxplanet:bilboblog:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97429690-9059-4389-8CCB-5FE652B70282"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43766","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3305","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to inject arbitrary web script or HTML via the m parameter."},{"lang":"es","value":"Vulnerabilidad Cross-site scripting (XSS) en mensaje.php en C. Desseno YouTube Blog (ytb) 0,1 permite a atacantes remotos inyectar scripts web arbitrarios o HTML a través del parámetro m."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carlos_desseno:youtube_blog:0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB542321-D266-4A0C-B010-5F2278BB4CFE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30345","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3306","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3307.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en info.php en C. Desseno en YouTube Blog (ytb) 0,1 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de la identificación de parámetros, un vector de CVE-2008-3307. NOTA: la procedencia de esta información es desconocida; los detalles son obtenidos exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youtube_blog:youtube_blog:0.1:*:*:*:*:*:*:*","matchCriteriaId":"ECBB6AD4-3F71-41AA-BB52-E2AA42156304"}]}]}],"references":[{"url":"http://secunia.com/advisories/31161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44151","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3307","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3306."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en todos.php en C. Desseno en YouTube Blog (ytb) 0,1 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de la identificación de parámetros, un vector de CVE-2008-3306."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youtube_blog:youtube_blog:0.1:*:*:*:*:*:*:*","matchCriteriaId":"ECBB6AD4-3F71-41AA-BB52-E2AA42156304"}]}]}],"references":[{"url":"http://secunia.com/advisories/31161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30345","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43954","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3308","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the base_archivo parameter."},{"lang":"es","value":"inclusión de archivo remoto PHP en cuenta/cuerpo.php en C. Desseno en YouTube Blog (ytb) 0,1, cuando register_globals esté habilitado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el base_archivo parámetro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carlos_desseno:youtube_blog:0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB542321-D266-4A0C-B010-5F2278BB4CFE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30345","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43952","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3309","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the book_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en info_book.asp en DigiLeave 1,2 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de la book_id parámetro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digiappz:digileave:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"48D0CB78-6046-4025-81CF-DDEEE22CBD98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2153/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43913","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6104","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2153/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3310","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp en Pre Survey Poll permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:pre_survey_poll:*:*:*:*:*:*:*:*","matchCriteriaId":"EA04FB92-4DB4-43D6-900D-C6B7866CEF76"}]}]}],"references":[{"url":"http://secunia.com/advisories/31187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6119","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3311","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en config.php en Adam Scheinberg Flip 3.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"incpath\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adam_scheinberg:flip:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2102D830-DF3A-4137-B470-464F95EB6711"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4040","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494585/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30312","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43943","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494585/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3312","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this might be an issue in FCKeditor."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en lemon_includes/FCKeditor/editor/filemanager/browser/browser.php de Lemon CMS 1.10, permite a atacantes remotos incluir y ejecutar archivos locales arbitrariamente a través de .. (punto punto) en el parámetro dir. NOTA: los detalles son obtenidos exclusivamente a partir de información de terceros. NOTA: Esto puede ser una distribuido por FCKeditor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lemoncms:lemon_cms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"DA78804F-C5A2-4263-B617-58B9E9053FC6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30285","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30285/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43907","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30285/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3313","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) cfg[document_uri] parameter to _administration/edition_article/edition_article.php and the (2) cfg[base_uri_admin] parameter to _administration/fonctions/get_liste_langue.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en CreaCMS 1.0, permite a atacantes remotos ejecutar código PHP mediante una URL en el (1) parámetro cfg[document_uri] de _administration/edition_article/edition_article.php y el (2) parámetro cfg[base_uri_admin] de _administration/fonctions/get_liste_langue. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:creacms:creacms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"10457060-43A4-4B74-B659-7444A292C4BC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43906","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3314","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 command, which triggers a NULL pointer dereference."},{"lang":"es","value":"Zdaemon 1.08.07 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de un comando \"type 6\" manipulado, que lanza una referencia a puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08.07","matchCriteriaId":"4D44C519-9969-4883-9922-572EA00F91B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08:*:*:*:*:*:*:*","matchCriteriaId":"420E8F16-9580-4FC1-82CF-D42084A8D25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08.01:*:*:*:*:*:*:*","matchCriteriaId":"F112A6DF-9775-4BB1-85BA-62177E42C193"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08.02:*:*:*:*:*:*:*","matchCriteriaId":"885EE455-77D6-4DD1-962E-A204DCFC5BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08.03:*:*:*:*:*:*:*","matchCriteriaId":"C339FB6B-2529-4E26-82D8-AAC400FE2929"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08.04:*:*:*:*:*:*:*","matchCriteriaId":"D5E9B58B-1342-4454-9691-F09611FB956D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08.05:*:*:*:*:*:*:*","matchCriteriaId":"26840C22-E4C0-481B-AE42-D7A67D9E94B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zdaemon:zdaemon:1.08.06:*:*:*:*:*:*:*","matchCriteriaId":"2EE2FC25-28A5-4F39-BA7F-B09A39DF1D1A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/zdaemonull-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/zdaemonull.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4043","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494634/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30340","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43946","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/zdaemonull-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/zdaemonull.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494634/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3315","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the (1) query string to (a) announcements/messages.php; (b) lostPassword.php and (c) profile.php in auth/; (d) calendar/myagenda.php; (e) group/group.php; (f) learningPath.php, (g) learningPathList.php, and (h) module.php in learnPath/; (i) phpbb/index.php; (j) courseLog.php, (k) course_access_details.php, (l) delete_course_stats.php, (m) userLog.php, and (n) user_access_details.php in tracking/; (o) user/user.php; and (p) user/userInfo.php; the (2) view parameter to (q) tracking/courseLog.php; and the (3) toolId parameter to (r) tracking/toolaccess_details.php.  NOTE: this may overlap CVE-2006-3257 and CVE-2005-1374."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Claroline 1.8.10 permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante (1) la cadena query en (a) announcements/messages.php; (b) lostPassword.php y (c) profile.php de auth/; (d) calendar/myagenda.php; (e) group/group.php; (f) learningPath.php, (g) learningPathList.php y (h) module.php de learnPath/; (i) phpbb/index.php; (j) courseLog.php, (k) course_access_details.php, (l) delete_course_stats.php, (m) userLog.php y (n) user_access_details.php de tracking/; (o) user/user.php y (p) user/userInfo.php; el parámetro (2) view en (q) tracking/courseLog.php y el parámetro (3) toolId en (r) tracking/toolaccess_details.php.  NOTE: Puede que esta vulnerabilidad se solape con CVE-2006-3257 y CVE-2005-1374."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"5F3A93AA-BDC0-42A1-BCCA-4C768706D813"}]}]}],"references":[{"url":"http://secunia.com/advisories/31201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4041","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615030","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.10_and_1.8.11","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494655/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30346","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2167/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.10_and_1.8.11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494655/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2167/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3316","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to (1) public_html/index.php, (2) config.php, and (3) functions.inc."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la Función de búsqueda en el plugin Forum anterior a 2.7.1 para Geeklog, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, probablemente relacionados con (1) public_html/index.php, (2) config.php y (3) functions.inc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portalparts:forum_plugin:*:*:geeklog:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"1C11EB13-3C2F-47D5-8FCE-FE67FBC686A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:portalparts:forum_plugin:2.3.1:*:geeklog:*:*:*:*:*","matchCriteriaId":"F9D39609-6E51-4B1F-A700-FCC8B2D97E6D"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN60419863/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000045.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31188","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.geeklog.net/article.php/20080719093147449","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43971","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN60419863/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.geeklog.net/article.php/20080719093147449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3317","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary search_cookie cookie."},{"lang":"es","value":"admin/index.php en Maian Search 1.1 y versiones anteriores, permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo  mediante en envío de una cookie search_cookie arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maian_script_world:maian_search:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"48704FD2-15DB-4DC6-9A4F-A5570E72A0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:maian_script_world:maian_search:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5EBE453A-4CCD-483E-BF18-B4070C392282"}]}]}],"references":[{"url":"http://secunia.com/advisories/31075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4042","source":"cve@mitre.org"},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-search/development/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30211","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43753","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6066","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-search/development/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3318","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblog_cookie cookie."},{"lang":"es","value":"admin/index.php en Maian Weblog 4.0 y versiones anteriores permite a atacantes remotos evitar la autenticación y obtención de acceso administrativo, enviando una cookie arbitraria weblog_cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maian:weblog:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"B8AA13F5-CE55-4F45-9FE1-C51626B02AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:maian:weblog:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"C8EFC587-B36F-4408-AA49-177EC7FB3054"}]}]}],"references":[{"url":"http://secunia.com/advisories/30943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-weblog/development/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43751","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-weblog/development/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3319","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie."},{"lang":"es","value":"admin/index.php de Maian Links 3.1 y anteriores, permite a atacantes remotos evitar la autenticación y obtener acceso como administrador enviando una cookie links_cookie de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maian:links:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"E27D2B8D-5D62-4DED-B2D4-764A29B93A35"}]}]}],"references":[{"url":"http://secunia.com/advisories/31068","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-links/development/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30205","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43749","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-links/development/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3320","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbook_cookie cookie."},{"lang":"es","value":"admin/index.php de Maian Guestbook 3.2 y anteriores permite a atacantes remotos evitar la autenticación y obtener acceso como administrador enviando una cookie gbook_cookie de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maian:guestbook:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"C69CCE00-1A17-4344-AD78-60059BF37874"}]}]}],"references":[{"url":"http://secunia.com/advisories/31070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-guestbook/development/index.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6061","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-guestbook/development/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3321","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploader_cookie cookie."},{"lang":"es","value":"admin/index.php en Maian Uploader 4.0 y versiones anteriores permite a atacantes remotos evitar la autenticación y obtener acceso administrativo enviando una cookie arbitraria uploader_cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maian_script_world:maian_uploader:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"3419AA04-C93F-47F4-97FC-B296BE58269F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31045","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-uploader/development/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30210","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43752","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/free-php-scripts/maian-uploader/development/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3322","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie."},{"lang":"es","value":"admin/index.php en Maian Recipe 1.2 y anteriores permite a atacantes remotos evitar la autenticación y obtener acceso como administrador enviando una cookie recipe_cookie de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maian:recipe:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"61160C08-6AE4-4360-B2D0-43B4214801AA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30208","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43750","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6063","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maianscriptworld.co.uk/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3323","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package."},{"lang":"es","value":"setup.exe anterior a v2.573.2.3 en Cygwin no verifica correctamente la autenticidad de los paquetes, lo que permite a los servidores espejo remotos Cygwin o a los atacantes \"man-in-the-middle\" ejecutar código de su elección a través de una lista de paquetes conteniendo una verificación de suma MD5 de un paquete troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cygwin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"CA6AC2AF-EA55-4530-8B2E-9F531FF207FA"}]}]}],"references":[{"url":"http://cygwin.com/ml/cygwin-announce/2008-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31271","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4051","source":"cve@mitre.org"},{"url":"http://www.security-objectives.com/advisories/SECOBJADV-2008-02.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494756/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30375","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2321","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449929","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44047","source":"cve@mitre.org"},{"url":"http://cygwin.com/ml/cygwin-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-objectives.com/advisories/SECOBJADV-2008-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494756/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3324","sourceIdentifier":"cve@mitre.org","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PartyGaming PartyPoker client program 121/120 does not properly verify the authenticity of updates, which allows remote man-in-the-middle attackers to execute arbitrary code via a Trojan horse update."},{"lang":"es","value":"El programa cliente PartyGaming PartyPoker 121/120 no verifica adecuadamente la autenticidad de las actualizaciones, lo que permite a atacantes man-in-the-middle (hombre en el medio) remotos ejecutar código de su elección mediante una actualización caballo de Troya."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:party_gaming:party_poker_client:121-120:*:*:*:*:*:*:*","matchCriteriaId":"4D8B7786-6F34-461E-9C8B-A95B381B71B2"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2008/Aug/0302.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495724/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30693","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44477","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2008/Aug/0302.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495724/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3325","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en Moodle 1.6.x versiones anteriores a la 1.6.7 y 1.7.x versiones anteriores a la 1.7.5, permite a atacantes remotos modificar el perfil de la configuración y obtener privilegios como otro usuario a través de un enlace o etiqueta IMG de la página de edición del perfil de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6","versionEndExcluding":"1.6.7","matchCriteriaId":"B069A088-482B-424F-995B-844F0B1B5102"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.7","versionEndExcluding":"1.7.5","matchCriteriaId":"1667DFC8-BB76-4DB0-A188-BB5E283CB120"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=101405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31196","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31339","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR08-16.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/494658/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43964","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=101405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR08-16.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/494658/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3326","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en blog/edit.php en Moodle 1.6.x anterior a 1.6.7 y 1.7.x anterior a 1.7.5, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante el parámetro etitle (título de la entrada del blog - blog entry title)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"680CE396-5F61-409C-A152-4D1E1CB44EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"98CA6482-0B84-463D-9C81-A92FFC06C9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0794B997-0793-4465-B9BA-5BFF254D600A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DCFEA024-4CA7-4975-802C-1BB9C099C164"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://moodle.org/mod/forum/discuss.php?d=101401","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31196","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31339","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR08-13.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494656/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30348","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43961","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6653","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/mod/forum/discuss.php?d=101401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR08-13.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494656/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3327","sourceIdentifier":"cve@mitre.org","published":"2008-07-25T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1) blog/blogpage.php and (2) course/report/stats/report.php, which reveals the installation path in an error message."},{"lang":"es","value":"Moodle versión 1.6.5, cuando display_errors está habilitado, permite a los atacantes remotos obtener información confidencial por medio de una petición directa a los archivos (1) blog/blogpage.php y (2) course/report/stats/report.php, que revela la ruta (path) de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"}]}]}],"references":[{"url":"http://moodle.org/mod/forum/discuss.php?d=101403","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR08-15.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494657/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44032","source":"cve@mitre.org"},{"url":"http://moodle.org/mod/forum/discuss.php?d=101403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR08-15.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494657/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3328","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el Motor del wiki en Trac anterior a 0.10.5, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.4","matchCriteriaId":"4E3F59DB-563B-40B4-84A5-6264B189D43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.5:*:*:*:*:*:*:*","matchCriteriaId":"27CD4ECA-7609-446F-A3FB-3E6ACA42ABC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5631A575-5CA5-4421-B75A-073DE829E247"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"801E19E5-2CE7-41B3-9727-C4F3222BE23B"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C0A90354-05CE-44CB-B658-3B80795001BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"91A51BD2-A54A-4D3D-B0DA-57055110BF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.7:*:*:*:*:*:*:*","matchCriteriaId":"E8FEEF99-F54D-4542-AF3A-E94D976420A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C8DAF74C-8188-4F29-ACDA-ACEE3B02CB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.8:*:*:*:*:*:*:*","matchCriteriaId":"2FAC175D-2893-45B6-9B4E-AD35571FF08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"4A1430A5-5C85-45FF-9E9F-2FEF9EABC603"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"94221B90-8F50-426D-87C7-3A1ABABAF354"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"C70CF2A2-AE61-4A48-B6A7-108358D55A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4BB9D21E-A75E-4B9A-861E-51F8D99463B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9:*:*:*:*:*:*:*","matchCriteriaId":"ACF7E7DA-385E-4C8E-90BF-308213EA0550"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C62BB91A-3627-4149-9935-86BB5FF5EE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9AF72084-56B5-4E1B-B701-887984789068"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"354FEA3C-9626-4DD1-ADCA-F94F616C6972"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"F8BF7DA3-8B16-4883-9184-817E85B04395"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"CEF7CA9C-2312-405F-8497-E05AB8383976"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"12F2E7FF-B518-4217-A28A-0A8F03CE6B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9b1:*:*:*:*:*:*:*","matchCriteriaId":"3C291732-9D53-4641-BFBB-F9BD5F1D485C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.9b2:*:*:*:*:*:*:*","matchCriteriaId":"DCE33859-583E-4F06-BC30-37DB4D59F904"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.10:*:*:*:*:*:*:*","matchCriteriaId":"380AFEFF-64A3-43A7-8EBB-88829039A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"541460F8-30BC-40B3-ADE7-A0C8FAC7C34E"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"393BF6C4-B455-4DDE-9A29-794AF3900F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"9DF703B1-B485-4D16-90C9-820A2780AE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5DFB2875-DF31-4B5C-BFCF-111E028A50B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall_software:trac:0.50.9:*:*:*:*:*:*:*","matchCriteriaId":"A8196233-19A2-4617-87A9-12D8DB10D91F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31231","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31314","source":"cve@mitre.org"},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30400","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2223/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44016","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2223/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3329","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Links before 2.1, when \"only proxies\" is enabled, has unknown impact and attack vectors related to providing \"URLs to external programs.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Links anterior a 2.1, cuando la opción  \"only proxies\" (solo proxies) está activada, tiene un impacto y vectores de ataques desconocidos relacionado con que proporciona \"URLs a programas externos\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of links as shipped with Red Hat Enterprise Linux 2.1, and versions of elinks as shipped with Red Hat Enterprise Linux 3, 4, or 5. Versions of links / elinks shipped do not support &quot;only proxies&quot; feature.","lastModified":"2008-11-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:*:pre37:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"4A1B253B-922F-4B8E-ACE5-ED3BD3BCBA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.80:*:*:*:*:*:*:*","matchCriteriaId":"FF195B91-91A2-4F4F-A992-E2DAA7EF2484"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.81:pre1:*:*:*:*:*:*","matchCriteriaId":"4F322232-35BE-433D-A277-CF2B3C762D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.81:pre2:*:*:*:*:*:*","matchCriteriaId":"D107180E-FB4E-425C-B152-AA3CDC433822"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.81:pre3:*:*:*:*:*:*","matchCriteriaId":"412B0235-3D71-4D8F-9F82-C61CCD3E6611"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.90:*:*:*:*:*:*:*","matchCriteriaId":"A0B1C610-98E5-4AA4-BC19-F2DDB47A735B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.90:pre1:*:*:*:*:*:*","matchCriteriaId":"843845B4-A8FD-4D8B-9B9A-9E220F9FF651"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.90:pre2:*:*:*:*:*:*","matchCriteriaId":"10D64D7C-A671-4A9B-82F6-5E61ADB96F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.90:pre3:*:*:*:*:*:*","matchCriteriaId":"88D81AF9-401F-4768-8E20-D536FD904FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.91:*:*:*:*:*:*:*","matchCriteriaId":"022CAC33-2D4D-46DC-9178-9DF84520D595"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.92:*:*:*:*:*:*:*","matchCriteriaId":"F2A10725-6345-43A6-B49A-ADA50064BEAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.93:*:*:*:*:*:*:*","matchCriteriaId":"8DEED69D-C9C6-4808-BA31-2767CB16791A"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.93:pre1:*:*:*:*:*:*","matchCriteriaId":"A6468A33-A0B6-4990-857A-DFC0ED310707"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.93:pre2:*:*:*:*:*:*","matchCriteriaId":"A9537ECD-C024-4AEC-B548-0AD112C3C10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.93:pre3:*:*:*:*:*:*","matchCriteriaId":"EB44941E-D99F-4E79-AB15-D60BB9F80C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.93:pre4:*:*:*:*:*:*","matchCriteriaId":"90B02CAF-DED3-4FCE-8209-0D0F978F5784"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:*:*:*:*:*:*:*","matchCriteriaId":"4B04C997-5D7A-49BA-ACF8-2E31EDBF2AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre1:*:*:*:*:*:*","matchCriteriaId":"1E86D214-B72A-4A49-ABC7-4543D1C53315"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre2:*:*:*:*:*:*","matchCriteriaId":"876B3FD8-B2FA-4020-9665-623CA7D31B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre3:*:*:*:*:*:*","matchCriteriaId":"46BB3C8F-A25A-48AB-9250-403E48DE6FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre4:*:*:*:*:*:*","matchCriteriaId":"5A501F83-3E0B-4CD5-9B30-2B8788DE8065"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre5:*:*:*:*:*:*","matchCriteriaId":"4941D28F-A207-4B60-A247-723BD25C818F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre6:*:*:*:*:*:*","matchCriteriaId":"28E1C00D-2212-461E-9414-8940FD0FB7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre7:*:*:*:*:*:*","matchCriteriaId":"806F721C-E36F-4421-A7CE-AE3719CF19E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre8:*:*:*:*:*:*","matchCriteriaId":"A3BE35D1-9A51-44F2-8B70-E66CC1CCEFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.94:pre9:*:*:*:*:*:*","matchCriteriaId":"D404B192-51AC-4F9A-A023-AA1CCB3A32DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.95:*:*:*:*:*:*:*","matchCriteriaId":"8F8E5AFD-A00F-4227-9D38-9F8D47A7347F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:*:*:*:*:*:*:*","matchCriteriaId":"80AF9E68-F8C8-461E-9D05-419425B70AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre1:*:*:*:*:*:*","matchCriteriaId":"EAFF3141-EA06-4CD6-B6DC-41FF0FA43C13"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre2:*:*:*:*:*:*","matchCriteriaId":"14D2FFE6-5009-4511-8DAC-E44CA5379C90"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre3:*:*:*:*:*:*","matchCriteriaId":"74556BD5-9661-460D-8A58-E1302A77136B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre4:*:*:*:*:*:*","matchCriteriaId":"8E5D097E-B5D9-4637-BAFD-0E815722E892"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre5:*:*:*:*:*:*","matchCriteriaId":"98D74773-24AC-4639-B38F-10AE44DFF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre6:*:*:*:*:*:*","matchCriteriaId":"8B0C7D2F-953D-4DD9-AEC7-69C0A3896211"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre7:*:*:*:*:*:*","matchCriteriaId":"A4E164F6-D938-445B-8C16-13B58DCF8CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.96:pre8:*:*:*:*:*:*","matchCriteriaId":"0D931092-DA6C-4C7D-AF2B-C8D0A1F899DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:*:*:*:*:*:*:*","matchCriteriaId":"407C8E07-D1C5-4BB4-866F-D2F15BE7D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre1:*:*:*:*:*:*","matchCriteriaId":"AAB4802B-AC06-4462-8D2B-305530B52DD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre10:*:*:*:*:*:*","matchCriteriaId":"676B44A3-683A-4EAC-87D4-2DE0F0FFE78F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre11:*:*:*:*:*:*","matchCriteriaId":"0CAC243F-FEA9-4AD7-BE39-161084C0EFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre12:*:*:*:*:*:*","matchCriteriaId":"76012999-0DC3-4B9C-BF7E-4D96E6DB90FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre2:*:*:*:*:*:*","matchCriteriaId":"B16BBDAB-A2D0-4D3D-9259-72E4785469E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre3:*:*:*:*:*:*","matchCriteriaId":"8403C9E9-2B4D-47EE-818D-260EBA098A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre4:*:*:*:*:*:*","matchCriteriaId":"6B7D2205-DED9-433E-9B2E-74808BEAC2C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre5:*:*:*:*:*:*","matchCriteriaId":"D6B33158-AB7A-4678-8C2E-4896BABBF2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre6:*:*:*:*:*:*","matchCriteriaId":"5D936E3F-615B-455C-BFEB-356F513F7767"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre7:*:*:*:*:*:*","matchCriteriaId":"06989DF1-9009-4D61-AA41-D0D8A3A0DF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre8:*:*:*:*:*:*","matchCriteriaId":"775DCFFC-6BB9-4ECF-8B82-3ACC44ECA528"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:0.97:pre9:*:*:*:*:*:*","matchCriteriaId":"D1954BBF-D90A-4A3D-9A4B-813BD8F3F3EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9D819DE-BD2D-4D9C-9DF8-C281A6C9A493"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:pre1:*:*:*:*:*:*","matchCriteriaId":"63F669F8-4160-4035-8969-B767C196932F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:pre2:*:*:*:*:*:*","matchCriteriaId":"BE432458-E522-4E32-963D-0C02118D40BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:pre3:*:*:*:*:*:*","matchCriteriaId":"36E3F04C-CEF1-4E14-A502-0231078CEA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:pre4:*:*:*:*:*:*","matchCriteriaId":"1A86732E-684B-4DA5-9329-6F4CF7F295DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:pre5:*:*:*:*:*:*","matchCriteriaId":"ED0CC5D9-6945-4F2D-A4B6-64A26279A95D"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.0:pre6:*:*:*:*:*:*","matchCriteriaId":"CE6E984A-288D-4E43-8148-99704D370A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre1:*:*:*:*:*:*","matchCriteriaId":"A655A2FF-373A-4ACA-B437-3FDBB3E8DD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre10:*:*:*:*:*:*","matchCriteriaId":"CF817275-6092-44CF-9220-5D87CBB787D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre11:*:*:*:*:*:*","matchCriteriaId":"B4580F35-9AF5-4663-99CD-4B05A9A1F89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre12:*:*:*:*:*:*","matchCriteriaId":"11D9F13A-E1F3-42D6-AB38-D7C795D88F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre13:*:*:*:*:*:*","matchCriteriaId":"CF329113-1508-4BE3-B487-CE39E6389E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre14:*:*:*:*:*:*","matchCriteriaId":"91E4CB53-7045-49DA-8C32-3BA602EBBFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre15:*:*:*:*:*:*","matchCriteriaId":"3A9BB040-E84A-4023-82C8-25379704AA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre16:*:*:*:*:*:*","matchCriteriaId":"5FD9ECB3-F914-473C-896E-06E583033524"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre17:*:*:*:*:*:*","matchCriteriaId":"4552C57E-2A52-44F2-B854-6FDAFB86E842"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre18:*:*:*:*:*:*","matchCriteriaId":"C7ED6DC2-0899-4BA9-BB0A-47592A762E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre19:*:*:*:*:*:*","matchCriteriaId":"B333E6D4-7C8E-4138-B8EC-CF21A6091492"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre2:*:*:*:*:*:*","matchCriteriaId":"29C8455D-82EE-4CA8-9759-4376B4B19843"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre20:*:*:*:*:*:*","matchCriteriaId":"51D54E59-EE5B-4E3E-B10E-266766E6F83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre21:*:*:*:*:*:*","matchCriteriaId":"C5430B06-AE8D-4A74-9420-F8C058351399"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre22:*:*:*:*:*:*","matchCriteriaId":"69230FEE-CC08-4A99-A3DE-C229BE9C284A"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre23:*:*:*:*:*:*","matchCriteriaId":"B1553B4B-E1DE-4C93-A50A-47F3CF5545C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre24:*:*:*:*:*:*","matchCriteriaId":"E774201F-F5EF-4FBF-99E1-F7A9F212097F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre25:*:*:*:*:*:*","matchCriteriaId":"28D6A7FC-FF71-4DEC-B17F-5F02D8E60F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre26:*:*:*:*:*:*","matchCriteriaId":"F40AA6FA-4CE2-4BDB-936C-D5989A3084C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre27:*:*:*:*:*:*","matchCriteriaId":"42810358-883A-447D-B361-248123206EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre28:*:*:*:*:*:*","matchCriteriaId":"0ACBB461-5B67-4B56-81B6-A8C1A14D9288"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre29:*:*:*:*:*:*","matchCriteriaId":"F1764B0D-0349-4050-B4BB-BDEC217A4E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre3:*:*:*:*:*:*","matchCriteriaId":"66D2DBDE-50E6-4783-94B7-1BAA708C5A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre30:*:*:*:*:*:*","matchCriteriaId":"DAF29117-7475-49BD-8F93-0E5BFC2BC153"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre31:*:*:*:*:*:*","matchCriteriaId":"D2081093-CA04-46FB-BAF9-A1D1F007B877"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre32:*:*:*:*:*:*","matchCriteriaId":"4F488C12-3BBE-4967-9F20-25A8DBD00B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre33:*:*:*:*:*:*","matchCriteriaId":"AE397782-FE5A-41F7-9A97-70786401C7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre34:*:*:*:*:*:*","matchCriteriaId":"7E037B11-C65E-4589-8887-AB3FFE342B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre35:*:*:*:*:*:*","matchCriteriaId":"78F25DDD-2137-48ED-8C8F-809E2BBBE5BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre36:*:*:*:*:*:*","matchCriteriaId":"B66BAA9D-E991-4275-B5F1-23072E4E0C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre4:*:*:*:*:*:*","matchCriteriaId":"0FE461BB-D42D-49BA-B597-9D7E66EE0DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre5:*:*:*:*:*:*","matchCriteriaId":"B383FD05-4673-4DB1-B9D1-620B6DE8F6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre6:*:*:*:*:*:*","matchCriteriaId":"28B0DBE7-96FA-4FBF-9036-D09F9F71AC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre7:*:*:*:*:*:*","matchCriteriaId":"2986E744-9B44-401E-AFF8-81459FC46A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre8:*:*:*:*:*:*","matchCriteriaId":"806FF4F0-AEF1-42B5-A6F3-F997E0217F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:twibright:links:2.1:pre9:*:*:*:*:*:*","matchCriteriaId":"EA160EB2-1670-455C-99AA-A85227B078D5"}]}]}],"references":[{"url":"http://links.twibright.com/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44035","source":"cve@mitre.org"},{"url":"http://links.twibright.com/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3330","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en services/obrowser/index.php in Horde 3.2 y Turba 2.2, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del nombre contact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"26AD25F6-4269-47BD-A1ED-C75547EB5ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:turba:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E454E17B-60CC-4278-95AF-B7961987F3D7"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34609","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29745","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020566","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020567","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44198","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3331","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://marc.info/?l=bugtraq&m=121130774617956&w=4\r\n\r\n\"We have found an XSS vulnerability in return_dynamic_filters.php. In\r\norder to exploit this vulnerability the attacker must be authenticated.\r\nUsually the anonymous user is allowed on typical installation\"","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en return_dynamic_filters.php en Mantis anterior a 1.1.2, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"filter_target\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"D4A66D23-7343-44B3-A8A8-FD39D88AFCC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B5E88349-E374-4AE9-9C4E-9599C1448D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"99FB3D29-644D-4E5F-875D-C87CCE3EF95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"B419B788-ADDD-4C0A-8E02-CBB58FD21938"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"6E387645-BC7A-4EA5-AE9E-A3C66994391B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"C80575A3-87E7-40BC-9BCB-E12BB7938A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"04989B5F-30B2-43A0-A061-BF43EEA8756C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"065C222C-638F-4303-BE6A-7FED59E21FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*","matchCriteriaId":"70450FAB-7886-418E-B471-8F16A68F9658"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*","matchCriteriaId":"B29FF305-E773-497E-9C47-7D87383F1440"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*","matchCriteriaId":"101BF6DC-0F73-41E0-A0EE-BA1EA7397423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC458D9-12B1-4CF1-980E-BC86E874BBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19:*:*:*:*:*:*:*","matchCriteriaId":"9C6C0D59-A086-4A38-8F94-C35B8A1A0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*","matchCriteriaId":"5419E3AC-4215-4584-9538-AF790DC9BD5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D3C48B8F-633E-4D69-A174-26C19829DE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*","matchCriteriaId":"DD259C18-7111-45C9-B6C3-6A5F29998146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*","matchCriteriaId":"7CBA3B4B-D7E6-4555-969F-66217ACDACDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*","matchCriteriaId":"38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*","matchCriteriaId":"6770FDC6-792D-49B2-942B-282F9012D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C62F6BC-4397-44BD-A7DA-CD4C52425BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"781910F1-C34C-49D6-80D2-62AC80AF17DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C6DB707C-29DF-442C-BBBE-650182692A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"0C420189-4748-465C-96FE-DC89502F7E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3B3A1BAC-F777-413E-BFB7-972C687C2D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc5:*:*:*:*:*:*:*","matchCriteriaId":"B54BEEA5-B671-4BDE-96D1-B235CF8F197E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*","matchCriteriaId":"730BE023-C283-4775-915C-79817723917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*","matchCriteriaId":"337E18A7-07A3-456D-868A-2002F96D7A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*","matchCriteriaId":"84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8B20CB57-A2C4-4491-9A4A-352C699FEF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"DD8DC938-873D-4268-89D1-F16C5796A5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"B4ED69D6-25B5-4199-B950-165A5FCFEBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc4:*:*:*:*:*:*:*","matchCriteriaId":"CF9E3400-610A-4389-B903-9C6CA3D7B9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48069606-59B6-4D20-B909-997CA7EDBD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E42CD1CB-49E7-484B-9629-78A24B754346"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F95B327F-94A8-4D4F-A330-1B9BF4B764FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"215420D5-4690-45BE-AE84-CF1522523299"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5621726F-CA50-4336-9BCE-55F39BE5CDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2B0DF8C-FF2D-4DE8-B0D1-92623974A874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"03F4013F-427E-41EE-969C-169B97A14A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0a1:*:*:*:*:*:*:*","matchCriteriaId":"F9555553-AEA7-42B3-BE94-7C4729259378"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121130774617956&w=4","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31972","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4044","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1598/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42549","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5657","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121130774617956&w=4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1598/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3332","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter."},{"lang":"es","value":"Vulnerabilidad de inyección \"Eval\" en adm_config_set.php en Mantis anterior a 1.1.2, permite a administradores autenticados remotamente ejecutar código de su elección a través del parámetro \"value\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"D4A66D23-7343-44B3-A8A8-FD39D88AFCC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B5E88349-E374-4AE9-9C4E-9599C1448D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"99FB3D29-644D-4E5F-875D-C87CCE3EF95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"B419B788-ADDD-4C0A-8E02-CBB58FD21938"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"6E387645-BC7A-4EA5-AE9E-A3C66994391B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"C80575A3-87E7-40BC-9BCB-E12BB7938A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"04989B5F-30B2-43A0-A061-BF43EEA8756C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"065C222C-638F-4303-BE6A-7FED59E21FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*","matchCriteriaId":"70450FAB-7886-418E-B471-8F16A68F9658"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*","matchCriteriaId":"B29FF305-E773-497E-9C47-7D87383F1440"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*","matchCriteriaId":"101BF6DC-0F73-41E0-A0EE-BA1EA7397423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC458D9-12B1-4CF1-980E-BC86E874BBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19:*:*:*:*:*:*:*","matchCriteriaId":"9C6C0D59-A086-4A38-8F94-C35B8A1A0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*","matchCriteriaId":"5419E3AC-4215-4584-9538-AF790DC9BD5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D3C48B8F-633E-4D69-A174-26C19829DE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*","matchCriteriaId":"DD259C18-7111-45C9-B6C3-6A5F29998146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*","matchCriteriaId":"7CBA3B4B-D7E6-4555-969F-66217ACDACDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*","matchCriteriaId":"38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*","matchCriteriaId":"6770FDC6-792D-49B2-942B-282F9012D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C62F6BC-4397-44BD-A7DA-CD4C52425BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"781910F1-C34C-49D6-80D2-62AC80AF17DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C6DB707C-29DF-442C-BBBE-650182692A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"0C420189-4748-465C-96FE-DC89502F7E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3B3A1BAC-F777-413E-BFB7-972C687C2D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc5:*:*:*:*:*:*:*","matchCriteriaId":"B54BEEA5-B671-4BDE-96D1-B235CF8F197E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*","matchCriteriaId":"730BE023-C283-4775-915C-79817723917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*","matchCriteriaId":"337E18A7-07A3-456D-868A-2002F96D7A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*","matchCriteriaId":"84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8B20CB57-A2C4-4491-9A4A-352C699FEF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"DD8DC938-873D-4268-89D1-F16C5796A5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"B4ED69D6-25B5-4199-B950-165A5FCFEBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc4:*:*:*:*:*:*:*","matchCriteriaId":"CF9E3400-610A-4389-B903-9C6CA3D7B9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48069606-59B6-4D20-B909-997CA7EDBD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E42CD1CB-49E7-484B-9629-78A24B754346"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F95B327F-94A8-4D4F-A330-1B9BF4B764FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"215420D5-4690-45BE-AE84-CF1522523299"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5621726F-CA50-4336-9BCE-55F39BE5CDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2B0DF8C-FF2D-4DE8-B0D1-92623974A874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"03F4013F-427E-41EE-969C-169B97A14A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0a1:*:*:*:*:*:*:*","matchCriteriaId":"F9555553-AEA7-42B3-BE94-7C4729259378"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121130774617956&w=4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31972","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4044","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1598/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42550","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5657","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121130774617956&w=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1598/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3333","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php)."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo core/lang_api.php en Mantis anterior a versión 1.1.2, permite a los atacantes remotos incluir y ejecutar archivos arbitrarios por medio del parámetro language en la página de preferencias del usuario (archivo account_prefs_update.php)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"D4A66D23-7343-44B3-A8A8-FD39D88AFCC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B5E88349-E374-4AE9-9C4E-9599C1448D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"99FB3D29-644D-4E5F-875D-C87CCE3EF95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"B419B788-ADDD-4C0A-8E02-CBB58FD21938"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"6E387645-BC7A-4EA5-AE9E-A3C66994391B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"C80575A3-87E7-40BC-9BCB-E12BB7938A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"04989B5F-30B2-43A0-A061-BF43EEA8756C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"065C222C-638F-4303-BE6A-7FED59E21FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0:*:*:*:*:*:*:*","matchCriteriaId":"70450FAB-7886-418E-B471-8F16A68F9658"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*","matchCriteriaId":"B29FF305-E773-497E-9C47-7D87383F1440"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*","matchCriteriaId":"101BF6DC-0F73-41E0-A0EE-BA1EA7397423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC458D9-12B1-4CF1-980E-BC86E874BBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19:*:*:*:*:*:*:*","matchCriteriaId":"9C6C0D59-A086-4A38-8F94-C35B8A1A0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*","matchCriteriaId":"5419E3AC-4215-4584-9538-AF790DC9BD5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D3C48B8F-633E-4D69-A174-26C19829DE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*","matchCriteriaId":"DD259C18-7111-45C9-B6C3-6A5F29998146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*","matchCriteriaId":"7CBA3B4B-D7E6-4555-969F-66217ACDACDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*","matchCriteriaId":"38BFDCFA-00C8-4B6A-B758-8FD15A122CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*","matchCriteriaId":"6770FDC6-792D-49B2-942B-282F9012D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C62F6BC-4397-44BD-A7DA-CD4C52425BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"781910F1-C34C-49D6-80D2-62AC80AF17DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C6DB707C-29DF-442C-BBBE-650182692A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"0C420189-4748-465C-96FE-DC89502F7E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3B3A1BAC-F777-413E-BFB7-972C687C2D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"B0C7EDA7-1BED-4152-BD3D-3A596482D9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0_rc5:*:*:*:*:*:*:*","matchCriteriaId":"B54BEEA5-B671-4BDE-96D1-B235CF8F197E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*","matchCriteriaId":"730BE023-C283-4775-915C-79817723917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*","matchCriteriaId":"337E18A7-07A3-456D-868A-2002F96D7A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*","matchCriteriaId":"84B09B6D-EE4D-4241-B3EF-CBCB03A7F579"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8B20CB57-A2C4-4491-9A4A-352C699FEF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"DD8DC938-873D-4268-89D1-F16C5796A5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"B4ED69D6-25B5-4199-B950-165A5FCFEBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.0rc4:*:*:*:*:*:*:*","matchCriteriaId":"CF9E3400-610A-4389-B903-9C6CA3D7B9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48069606-59B6-4D20-B909-997CA7EDBD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E42CD1CB-49E7-484B-9629-78A24B754346"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F95B327F-94A8-4D4F-A330-1B9BF4B764FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"215420D5-4690-45BE-AE84-CF1522523299"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5621726F-CA50-4336-9BCE-55F39BE5CDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2B0DF8C-FF2D-4DE8-B0D1-92623974A874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"03F4013F-427E-41EE-969C-169B97A14A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.0a1:*:*:*:*:*:*:*","matchCriteriaId":"F9555553-AEA7-42B3-BE94-7C4729259378"}]}]}],"references":[{"url":"http://secunia.com/advisories/30270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31972","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/view.php?id=9154","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29297","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30354","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43984","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/view.php?id=9154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3334","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en MyBB versiones 1.2.x anteriores a 1.2.14, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados, posiblemente involucrando el archivo search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.13","matchCriteriaId":"E3067FB9-BCAA-4B7D-A3FE-8164C32C7440"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD61D970-9363-4A75-A8DB-D0EBA2CF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*","matchCriteriaId":"990E206E-5E2C-4A68-9FDF-CD47F7524054"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF143B59-5C78-4BF6-9368-5BCF427B4753"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B16F6F07-F5A9-47BF-88ED-25F068B68CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A8A46A48-1361-4DD3-B97D-4C4FC776D68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"337D89AE-1B7A-4101-B1F7-DFEDF2369385"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BE08AF25-EDB1-4DA1-B431-F0692858AAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF24E7BA-3144-4DBA-9613-A44FBE0822F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"029430A5-85BD-4258-B58D-F3DCBC625E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4183DB7F-FAB3-4D90-AD87-31CA4150CFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3E2B90B8-DC02-4C79-BD69-DEF79945C418"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C5C52215-D236-4D1A-9E30-14B9676FB68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B48D2EDF-86C2-475C-9476-E5A2D586CA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B6725373-C229-4B57-BB1E-AF178E19DEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36E4C84A-21D5-4C9A-85F8-45C9657CE6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C7E55085-E3E3-4BB8-A680-19A28D7E88F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB01A9AA-AE70-46DF-815A-05D1101EE706"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"98AFD77B-A046-4AB9-B6F4-FFFF66C63C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AA00D38E-AAF6-4F66-9203-5C074FC61F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"137A8CED-BE82-462F-B83C-15F535961E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D179FDB6-9B1D-438C-B512-9A5C4F869A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3A2D344F-4671-4194-A553-A5773B5DF3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"245760C8-DC10-47F1-843A-461AE2F3DF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A055E6BF-3CAC-4C74-8E37-A89E3E0F8559"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*","matchCriteriaId":"F6ABDEE8-D463-47CA-998D-33472F3382F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*","matchCriteriaId":"DE44965F-F968-4CD2-9F21-1E1A92F5F7F2"}]}]}],"references":[{"url":"http://community.mybboard.net/thread-33865.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30401","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44034","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/thread-33865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3335","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en PunBB anterior a 1.2.19, permite a atacantes remotos inyectar comandos SMTP a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.18","matchCriteriaId":"092383B3-0769-43B2-AC5C-BFC89A70A6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4C9B6A22-A7BD-4C31-B4BB-A3BA43F4B9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C80A6D72-289A-4F53-AF80-6F2697AFF2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:*","matchCriteriaId":"9CADED1D-A90F-485E-B9EB-8CCAA22C9FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"037398E0-C125-48DC-B0D8-FEE9DBEF6374"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D1E6BBD6-5EE2-4412-92E1-48401F3622C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3BEBC325-DD6F-4DB1-84B8-86C26AC4165C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"78C47271-AED6-444B-B2E6-EF2A48B15600"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF85286-A1F8-4797-99F0-4F42B6D859CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DDBA41AF-C817-476A-8ED1-57808D0B678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C353C194-328F-4C4C-9773-F06A0FA3978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFE58D68-FC34-4F70-849A-2E6CC919230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5713E747-5529-4A64-95B4-D9678D8E88B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1DFD4225-32F9-4D62-87C5-9632A1C03326"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4A75787B-6156-4710-9B24-48C5763E7771"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20A9473E-DE15-4BE2-839D-90B55F8713EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4546E547-54E1-4FB9-9F20-7C70B9F86BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"3295A0E9-854B-4AC3-B2C0-349303C54C16"}]}]}],"references":[{"url":"http://punbb.informer.com/","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/forums/topic/19539/punbb-1219/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31219","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30395","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44010","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/forums/topic/19539/punbb-1219/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3336","sourceIdentifier":"cve@mitre.org","published":"2008-07-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) include/parser.php and (2) moderate.php."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en PunBB anterior a versión 1.2.19, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados en los archivos (1) include/parser.php y (2) moderate.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.18","matchCriteriaId":"092383B3-0769-43B2-AC5C-BFC89A70A6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4C9B6A22-A7BD-4C31-B4BB-A3BA43F4B9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C80A6D72-289A-4F53-AF80-6F2697AFF2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:*","matchCriteriaId":"9CADED1D-A90F-485E-B9EB-8CCAA22C9FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"037398E0-C125-48DC-B0D8-FEE9DBEF6374"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D1E6BBD6-5EE2-4412-92E1-48401F3622C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3BEBC325-DD6F-4DB1-84B8-86C26AC4165C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"78C47271-AED6-444B-B2E6-EF2A48B15600"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF85286-A1F8-4797-99F0-4F42B6D859CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DDBA41AF-C817-476A-8ED1-57808D0B678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C353C194-328F-4C4C-9773-F06A0FA3978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFE58D68-FC34-4F70-849A-2E6CC919230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5713E747-5529-4A64-95B4-D9678D8E88B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1DFD4225-32F9-4D62-87C5-9632A1C03326"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4A75787B-6156-4710-9B24-48C5763E7771"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20A9473E-DE15-4BE2-839D-90B55F8713EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4546E547-54E1-4FB9-9F20-7C70B9F86BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"3295A0E9-854B-4AC3-B2C0-349303C54C16"}]}]}],"references":[{"url":"http://punbb.informer.com/","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/forums/topic/19539/punbb-1219/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30396","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44009","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/forums/topic/19539/punbb-1219/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3337","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217."},{"lang":"es","value":"PowerDNS Authoritative Server versiones anteriores a 2.9.21.1 descarga peticiones malformadas, lo cual puede hacer más fácil a atacantes remotos envenenar cachés DNS de otros productos ejecutándose en otros servidores, una cuestión diferente a  CVE-2008-1447 y CVE-2008-3217."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:authoritative_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.21","matchCriteriaId":"25F615C5-BE99-4CAF-AE71-30A9B4CE747F"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*","matchCriteriaId":"DDF235AA-7A2C-4223-AB14-A30058546EF1"}]}]}],"references":[{"url":"http://doc.powerdns.com/changelog.html","source":"cve@mitre.org"},{"url":"http://doc.powerdns.com/powerdns-advisory-2008-02.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31401","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31448","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33264","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-19.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30587","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2320","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44253","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2008/dsa-1628","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00109.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00140.html","source":"cve@mitre.org"},{"url":"http://doc.powerdns.com/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://doc.powerdns.com/powerdns-advisory-2008-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2008/dsa-1628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00140.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3338","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message."},{"lang":"es","value":"Múltiples desbordamientos de búfer en TIBCO Hawk (1) la librería AMI C (libtibhawkami) y (2) Hawk HMA (tibhawkhma), como se usan en TIBCO Hawk antes de 4.8.1; Runtime Agent (TRA) anterior a 5.6.0; iProcess Engine de 10.3.0 a 10.6.2 y 11.0.0; y Mainframe Service Tracker anterior a 1.1.0 podría permitir a atacantes remotos ejecutar código de su elección mediante un mensaje manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:hawk:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.0","matchCriteriaId":"7FB4C18E-D1AD-4064-949A-D00A2A4B41BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:hawk:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F540B195-58CD-4491-9D4F-9BCB87F696AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:hawk:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C85CA6D7-B286-4CC0-A05F-01EEFC653780"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:hawk:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B985F703-24AC-4CD5-AF58-C03D071CA4F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F085498D-67C1-43D2-AAA2-35BA8AF1998E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7E90A12B-BEB4-4F51-B4D2-BA0DB127CE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EBF898A2-46AA-4A79-8D85-2C34174AD44E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5B9388D9-CC97-487B-864C-F8FA9BFF7306"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"389EDDD9-4EFC-4B11-A3B9-C3BCD8D4DBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"9CCBA1D2-6FDF-4D6F-9316-9B6F3A9BD50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.4:*:*:*:*:*:*:*","matchCriteriaId":"F45470DC-9C5C-4CBE-8DFD-FE49008A0D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50CFE4BA-00B8-4334-9B67-0A4276F5FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.5:*:*:*:*:*:*:*","matchCriteriaId":"900BB34F-1533-4D53-904D-78E3D6EF3ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6:*:*:*:*:*:*:*","matchCriteriaId":"94FDFA30-E50A-4AD1-81F6-39E58DCCC515"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6D5769-8FE2-4923-94EE-92619D8D086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C65C714C-91B8-4665-B9BD-699BE318EDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:10.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0832F843-1C4E-42D3-9FF0-935B93E221A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:iprocess_engine:11.0:*:*:*:*:*:*:*","matchCriteriaId":"F054EC47-12B5-45B9-A526-B2EBEEB2378B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:mainframe_service_tracker:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"C09CA1D8-63C8-4104-9971-F02F524233D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.4","matchCriteriaId":"F939E999-5F16-430E-B960-965C25576D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:runtime_agent:5.3:*:*:*:*:*:*:*","matchCriteriaId":"ACF12C0E-8768-4A03-B56B-D635076B01C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:runtime_agent:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0A6C4A47-FBEF-4171-9C97-FFAD45ACB263"}]}]}],"references":[{"url":"http://secunia.com/advisories/31618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30836","source":"cve@mitre.org"},{"url":"http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2448","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3339","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"search_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via unspecified vectors that reveal the installation path in an error message."},{"lang":"es","value":"search_result.cfm en Jobbex JobSite, permite a atacantes remotos obtener información sensible a través de vectores no especificados que muestran la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avidweb_technologies:jobbex_jobsite:*:*:*:*:*:*:*:*","matchCriteriaId":"C6EB3BFA-B95A-4065-AFC4-F89918227C36"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/78/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30302","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43915","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/78/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3340","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search_result.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable (possibly the opt parameter.)"},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en search_result.cfm en Jobbex JobSite, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la variable \"searchFor\" (posíblemente el parámetro \"opt\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jobbex:jobsite:*:*:*:*:*:*:*:*","matchCriteriaId":"3BD4301F-5659-4288-ADAE-4C357960A0D0"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/78/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30302","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43912","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/78/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3341","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in search_result.cfm in Jobbex JobSite allow remote attackers to execute arbitrary SQL commands via the (1) jobcountryid and (2) jobstateid parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en search_result.cfm en Jobbex JobSite, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) jobcountryid y (2) jobstateid. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jobbex:jobsite:*:*:*:*:*:*:*:*","matchCriteriaId":"3BD4301F-5659-4288-ADAE-4C357960A0D0"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/78/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30302","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43914","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/78/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3342","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_News action."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en staticpages/easypublish/index.php in MyioSoft EasyPublish 3.Otr, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"read\" en una acción \"edp_News\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easypublish:3.0:*:trial:*:*:*:*:*","matchCriteriaId":"CCB55E35-81C0-49E5-A807-373F6902E6F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31193","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494556/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30307","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2164/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43919","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494556/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2164/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3343","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en staticpages/easypublish/index.php en MyioSoft EasyPublish 3.Otr (trial edition), permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"read\" en una acción de búsqueda (search)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easypublish:3.0:*:trial:*:*:*:*:*","matchCriteriaId":"CCB55E35-81C0-49E5-A807-373F6902E6F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31193","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494556/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30307","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2164/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43921","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494556/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2164/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3344","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, and (6) RecipientMail parameters."},{"lang":"es","value":"Múltiples vulnerabilidades en staticpages/easyecards/index.php en MyioSoft EasyE-Cards 3.5 Trial edition (tr) y 3.10a, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, y (6) RecipientMail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easye-cards:3.5:*:trial:*:*:*:*:*","matchCriteriaId":"43125CA4-0707-4E67-97E2-7F96B066D8C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easye-cards:3.10:a:*:*:*:*:*:*","matchCriteriaId":"528CC2D8-B7F8-4D6C-99E5-B69735A2E0E8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121665294304071&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30328","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43923","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121665294304071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3345","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en staticpages/easyecards/index.php en MyioSoft EasyE-Cards 3.5 trial edition (tr) y 3.10a, cuando magic_quotes está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"sid\" en una acción \"pickup\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easye-cards:3.5:*:trial:*:*:*:*:*","matchCriteriaId":"43125CA4-0707-4E67-97E2-7F96B066D8C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easye-cards:3.10:a:*:*:*:*:*:*","matchCriteriaId":"528CC2D8-B7F8-4D6C-99E5-B69735A2E0E8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121665294304071&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30328","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43924","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121665294304071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3346","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product_detail.php en ShopCart DX, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:shopcart_dx:*:*:*:*:*:*:*:*","matchCriteriaId":"AC00C26A-61B7-4338-9AAD-08EB988F6C51"}]}]}],"references":[{"url":"http://secunia.com/advisories/31156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4045","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30337","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2161/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43945","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6114","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2161/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3347","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to execute arbitrary SQL commands via the read parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo staticpages/easycalendar/index.php en MyioSoft EasyDynamicPages versión 3.0 edición de prueba (tr), permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easydynamicpages:3.0:*:trial:*:*:*:*:*","matchCriteriaId":"B1BD813E-1D85-4382-A96D-CC387A084D43"}]}]}],"references":[{"url":"http://secunia.com/advisories/31189","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4046","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494551/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30305","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2162/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494551/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2162/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3348","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the year parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en staticpages/easycalendar/index.php en MyioSoft EasyDynamicPages 3.0 trial edition (tr), permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"year\" (año)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easydynamicpages:3.0:*:trial:*:*:*:*:*","matchCriteriaId":"B1BD813E-1D85-4382-A96D-CC387A084D43"}]}]}],"references":[{"url":"http://secunia.com/advisories/31189","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4046","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494551/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30305","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2162/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494551/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2162/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3349","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests.  NOTE: this may overlap CVE-2008-3160."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en NetApp Data ONTAP, usados sobre NetApp y plataformas IBM eServer, permite a atacantes remotos ejecutar comandos de su elección que pueden provocar una denegación de servicio (caída de sistema), u obtener información sensible. Probablemente relacionado con un acceso insuficiente sobre las peticiones HTTP. NOTA: esta vulnerabilidad puede solaparse con CVE-2008-3160."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:data_ontap:*:*:*:*:*:*:*:*","matchCriteriaId":"BB1769F0-3E4B-417C-8694-BAB19BB0C432"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:n_series_storage_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8579FF83-E9DA-4C60-8BC6-8D08F23430FA"},{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas900:*:*:*:*:*:*:*:*","matchCriteriaId":"6432E6DB-B386-4852-A93F-7F8260E0171D"}]}]}],"references":[{"url":"http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml","source":"cve@mitre.org"},{"url":"http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml","source":"cve@mitre.org"},{"url":"http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/329772","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44265","source":"cve@mitre.org"},{"url":"http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/329772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3350","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an \"unknown client,\" a different vulnerability than CVE-2008-3214."},{"lang":"es","value":"dnsmasq 2.43 permite a atacantes remotos provocar una denegación de servicio (caída de monio) mediante (1) el envío de un DHCPINFORM en ausencia de una asignación DHCP o (2) intentando renovar una asignación DHCP no existente para una subred inválida como \"cliente desconocido\". Vulnerabilidad distinta de CVE-2008-3214."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the version of dnsmasq as shipped with Red Hat Enterprise Linux 5.","lastModified":"2008-07-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_kelleys:dnsmasq:2.43:*:*:*:*:*:*:*","matchCriteriaId":"EF6E1AB2-D9D6-455A-AA53-E50A9F7C6DC0"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.network.dns.dnsmasq.general/2189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2166","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43957","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43960","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.network.dns.dnsmasq.general/2189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3351","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en atomPhotoBlog.php en Atom PhotoBlog 1.0.9.1 y 1.1.5b1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro photoId en una acción \"mostrar\" (Show)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atomphotoblog:atomphotoblog:1.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C3DEC79B-7A98-4792-A043-C067A7C88B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:atomphotoblog:atomphotoblog:1.1.5:b1:*:*:*:*:*:*","matchCriteriaId":"8FF6838B-3913-40F0-8DB5-2F0367AFC998"}]}]}],"references":[{"url":"http://secunia.com/advisories/31205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43982","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6125","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3352","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Singer action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Live Music Plus 1.1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción \"singer\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nersoft:live_music_plus:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"035A37A3-26B6-4484-BC8D-F0E519055ADE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43989","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6128","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3353","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article comments feature and the (2) search log feature."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en Pure Software Lore Before 1.7.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados relacionados con las características (1) comentario de artículos y (2) búsqueda de logs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"1DA78AC4-A6C6-4508-8CBA-4CACBB270458"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"364D94FC-D937-41C0-8BD7-6278399C5B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"98D0FDC1-ABA0-45CB-BAAA-EF6C35860AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8886913D-48F3-4E95-A311-C66B81EC779E"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"64CA9C33-422D-4CB4-BF74-572695050E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2ED3FC18-E444-40DA-A5D0-936D078EF0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"513DB928-6E96-4776-9D7D-8974873830E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0EC77E65-D199-4D77-9B40-BA272C163928"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DB80145C-E0B9-4953-B2EA-06785522733A"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2573DBA4-AA88-44FB-A7AE-46373F0E6AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2649F360-0B64-42C4-9C32-64CE1F70D065"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F499456-73DE-4A89-B765-567F62018B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0AE8E14D-CBEF-4693-8EFC-7C609D2998DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"52B527BD-3E86-4274-9729-A4FFA15361E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8E23B129-AE4E-41B2-9E77-A1A72E5D2A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D52245F4-5ECE-48E9-8838-A501F218F4A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"54D5A572-2326-498F-8F39-C2A0FD233499"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5769F55C-EC36-49C6-B8B5-6A4F31C64485"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"744769DF-36E8-4913-B4AD-22EFEA08E8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F115F9FA-4236-4B50-ABB6-985C06A8DA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1B161ED1-B44F-4AE7-8BD7-08AC2997E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"14A898A2-9451-4DF9-9860-3C9C1C223860"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"644ADB60-6093-4AE7-ABE5-9F758E022B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2F7A2784-407A-475D-AC6F-8C4D579B237D"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"71D53A96-1934-47AF-B6BD-19C232675701"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"5ACF22B9-8516-4E62-9D6A-45AF6ED2E4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C2F2ABA9-8DB6-44BF-B641-B744507029DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"BFC47C7D-0353-4B70-B92D-A8D9B78BC3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"61E20A8E-5BE7-4802-857D-4E902DB37DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"815D5A23-E753-4514-AB3D-FD1458F95FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD0155AD-58C6-4862-B69B-A63FDF9224EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:puresw:lore:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"CA41D939-BAFE-4131-923E-841C6C42ADBD"}]}]}],"references":[{"url":"http://puresw.com/kb/idx.php/8/025/article/Changelog.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/31217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30367","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43985","source":"cve@mitre.org"},{"url":"http://puresw.com/kb/idx.php/8/025/article/Changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/31217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3354","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en el módulo Newbb Plus (newbb_plus) 0.93 en RunCMS 1.6.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros 1) bbPath[path] a votepolls.php y (2) bbPath[root_theme] a config.php, diferentes vectores que los de CVE-2006-0659. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:newbb_plus_module:0.93:*:*:*:*:*:*:*","matchCriteriaId":"0DDA8502-4DBE-4455-980A-D6B512BD8520"},{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD9BDC0-80CC-426E-AF93-36FBB4C3E1A0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30331","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30331/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30331/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3355","sourceIdentifier":"cve@mitre.org","published":"2008-07-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sitemap.xml.php en Camera Life 2.6.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción \"photos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:camera_life:camera_life:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E1406326-AC48-4586-9A63-A3E2C50C85A9"}]}]}],"references":[{"url":"http://secunia.com/advisories/31234","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4047","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30368","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43991","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3356","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"This vulnerability affects all platforms except VMS and Windows","evaluatorSolution":"Fixes are available for the current release of Ingres 2006 release 2 (9.1.0), for Ingres 2006 release 1 (9.0.4), and for Ingres 2.6 versions on their respective platforms. The security fixes are available and can be quickly applied with little to no anticipated impact to systems. \r\n\r\nIngres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes:\r\nhttp://servicedesk.ingres.com/CAisd/pdmweb.ingres?OP=SHOW_DETAIL+PERSID=KD:416012+HTMPL=kt_document_view.htmpl\r\n\r\n(ingres.com)","evaluatorImpact":"\"Exploitation of this vulnerability allows an attacker to overwrite arbitrary files owned by the \"ingres\" user. By itself, this vulnerability does not have very serious consequences. However, when combined with the library loading vulnerability, it allows an attacker to execute arbitrary code with root privileges. \" (iDefense)\r\n\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename."},{"lang":"es","value":"verifydb en Ingres 2.6, Ingres 2006 versión 1 (alias 9.0.4), y Ingres 2006 versión 2 (alias 9.1.0) en Linux y otras plataformas Unix que establece la propiedad o permisos del archivo iivdb.log, sin verificar que es el archivo log propio de la aplicación, lo que permite a los usuarios sobrescribir arbitrariamente archivos creando un enlace simbólico con un nombre de archivo iivdb.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2.6:*:*:*:*:*:*:*","matchCriteriaId":"DCE11A92-56B9-43A2-9E3D-D511AE713F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2006:9.0.1:*:*:*:*:*:*","matchCriteriaId":"8CEFDCDD-7D4B-442C-8CD4-D22CA5F4DD35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2006:9.0.4:*:*:*:*:*:*","matchCriteriaId":"D988634E-4C81-457B-AA97-9C55575E9DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2006:release_1:*:*:*:*:*:*","matchCriteriaId":"A99FF96C-A88B-4AE2-BA8B-C16D2F88C606"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2006:release_2:*:*:*:*:*:*","matchCriteriaId":"02D8FAC9-5887-4B0D-BB95-0704D763B6A8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=731","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31357","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31398","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020613","source":"cve@mitre.org"},{"url":"http://www.ingres.com/support/security-alert-080108.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495177/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30512","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2292","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2313","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44177","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ingres.com/support/security-alert-080108.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495177/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3357","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Fixes are available for the current release of Ingres 2006 release 2 (9.1.0), for Ingres 2006 release 1 (9.0.4), and for Ingres 2.6 versions on their respective platforms. The security fixes are available and can be quickly applied with little to no anticipated impact to systems. \n\nIngres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes: \nhttp://servicedesk.ingres.com/CAisd/pdmweb.ingres?OP=SHOW_DETAIL+PERSID=KD:416012+HTMPL=kt_document_view.htmpl \n\n(ingres.com)","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a \"pointer overwrite vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en ingvalidpw en Ingres 2.6, Ingres 2006 versión 1 (alias 9.0.4), y Ingres 2006 versión 2 (alias 9.1.0) en Linux y HP-UX, que permite a los usuarios locales aumentar privilegios a través de una librería compartida manipulada, relativo a una \"vulnerabilidad de sobreescritura de puntero\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:actian:ingres:2.6:*:*:*:*:*:*:*","matchCriteriaId":"D026F470-7B9C-4CF7-AD64-F3359D6A3582"},{"vulnerable":true,"criteria":"cpe:2.3:a:actian:ingres:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADE58E71-A0DE-480D-8686-FEDB67D38C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:actian:ingres:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1620070B-4230-42BB-A2EC-ABD8C4404961"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*","matchCriteriaId":"F480AA32-841A-4E68-9343-B2E7548B0A0C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=733","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31357","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31398","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020614","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ingres.com/support/security-alert-080108.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495177/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30512","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2292","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2313","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44181","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ingres.com/support/security-alert-080108.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495177/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3359","sourceIdentifier":"cve@mitre.org","published":"2008-07-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en register.php  Steve Bourgeois y Chris Vincent Owl Intranet Knowledgebase 0.95 y versiones anteriores que permiten a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro username. NOTA: La procedencia de esta información es desconocida; los detalles ha sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:owl:intranet_knowledgebase:*:*:*:*:*:*:*:*","versionEndIncluding":"0.95","matchCriteriaId":"F33066B3-A4AB-4289-983C-F3CDCDB3508B"},{"vulnerable":true,"criteria":"cpe:2.3:a:owl:intranet_knowledgebase:0.94:*:*:*:*:*:*:*","matchCriteriaId":"DCC31E21-49E0-41D2-94DB-07B0AEBBFD87"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2213","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44143","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3360","sourceIdentifier":"cve@mitre.org","published":"2008-07-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el analizador HTML en IntelliTamper 2.0.7, que permite a los atacantes remotos ejecutar arbitrariamente código a través de una URL larga en el atributo HREF de un elemento A, esta es una vulnerabilidad diferente a CVE-2006-2494."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D34E4083-91CE-46AB-A1B9-856AD8E5245C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020521","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2120/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43876","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6103","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6116","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6238","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2120/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3361","sourceIdentifier":"cve@mitre.org","published":"2008-07-29T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en IntelliTamper 2.07, que permite a los sitios web remotos ejecutar código arbitrario a través de una cabecera larga HTTP Server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D34E4083-91CE-46AB-A1B9-856AD8E5245C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4059","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30356","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44147","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6118","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6227","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3362","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en upload.php en el módulo Giulio Ganci Wp Downloads Manager 0.2 para WordPress, permite a atacantes remotos ejecutar código de su elección subiendo un fichero de su elección con una extensión ejecutable a través del parámetro \"upfile\", y posteriormente accediendo a él con una petición directa al archivo en wp-content/plugins/downloads-manager/upload/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:giulio_ganci:wp_downloads_manager:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E0CB8019-405F-47F2-8DF6-89F8684C81C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wp_downloads_manager:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E545FAFE-A8BF-4652-B7AE-A7587DEB5FC1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30365","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43987","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6127","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3363","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\\ (dot dot backslash) in the include parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en user_portal.php en the Dokeos E-Learning System 1.8.5 sobre Windows, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de \"..\\\" (punto punto barra invertida) en el parámetro \"include\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:e-learning_system:1.8.5:*:windows:*:*:*:*:*","matchCriteriaId":"EF7C7647-A10E-458B-BD56-264CAF0D9660"}]}]}],"references":[{"url":"http://secunia.com/advisories/30987","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4056","source":"cve@mitre.org"},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8.5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494496/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2208/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43865","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6149","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494496/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2208/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3364","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security (CSM) 3.5 and 3.6; and Worry-Free Business Security (WFBS) 5.0 allows remote attackers to execute arbitrary code via a long string in the Server property, and possibly other properties.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un desbordamiento de búfer en el control ActiveX de la clase ObjRemoveCtrl en la biblioteca OfficeScanRemoveCtrl.dll versión 7.3.0.1020 en Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment versiones 7.0, build 7.3 1343 Patch 4 y otras builds, y versión 8.0; Client Server Messaging Security (CSM) versiones 3.5 y 3.6; y Worry-Free Business Security (WFBS) versión 5.0, de Trend Micro, permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena larga en la propiedad Server, y posiblemente otras propiedades. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:7.3:*:corporate:*:*:*:*:*","matchCriteriaId":"D64A2814-891E-46FC-90D3-F3C90DF4045D"}]}]}],"references":[{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1037899&id=EN-1037899","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31440","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4061","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30407","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020569","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2220/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44042","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6152","source":"cve@mitre.org"},{"url":"http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1037899&id=EN-1037899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2220/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3365","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language_full parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Pixelpost 1.7.1 sobre Windows, cuando \"register_globals\" está activado, permite a atacantes remotos incluir y ejecutar archivos locales a través de .. (punto punto) en el parámetro \"languaje_full\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:3.1:*:*:*:*:*:*:*","matchCriteriaId":"090CBBD5-84E6-41B3-A296-9DE7ED1E0D0B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:95:*:*:*:*:*:*:*","matchCriteriaId":"CD82FB3B-CD00-4CB2-9957-B27E8D13DD04"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:98:*:*:*:*:*:*:*","matchCriteriaId":"446095CB-FCDA-41F0-B3FC-4A3ECCDFBA51"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:me:*:*:*:*:*:*:*","matchCriteriaId":"E4CFBC34-E9D4-4DC3-B710-339CC12D14FF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixelpost:pixelpost:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"EA126D79-DFBA-48ED-AC67-B6DA5CC7F559"}]}]}],"references":[{"url":"http://secunia.com/advisories/31239","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4062","source":"cve@mitre.org"},{"url":"http://www.pixelpost.org/blog/2008/07/27/pixelpost-171-security-patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494817/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30397","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2207/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44031","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6150","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pixelpost.org/blog/2008/07/27/pixelpost-171-security-patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494817/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2207/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3366","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: this might overlap CVE-2008-1774."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en story.php en Pligg CMS Beta 9.9.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\". NOTA: esta puede solaparse con CVE-2008-1774."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"3F03AA4B-59E5-464A-9F9E-954B6DCCC4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.0:beta:*:*:*:*:*:*","matchCriteriaId":"66E91F30-8583-40CF-A2D5-4631DECEAA08"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4063","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2214/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44021","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6146","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2214/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3367","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en RTE_popup_link.asp en Web Wiz Rich Text Editor (RTE) 3.x y 4.x anterior a 4.03, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"email\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_rich_text_editor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.02","matchCriteriaId":"B03B5D5C-5F7D-4728-BF45-E1141AC0F246"},{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_rich_text_editor:3:*:*:*:*:*:*:*","matchCriteriaId":"34968E08-22B8-4B3B-9EAD-10A956060666"},{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_rich_text_editor:4.0:*:*:*:*:*:*:*","matchCriteriaId":"999B4F51-8D74-40E5-81E0-B74F36BC5120"},{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_rich_text_editor:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D41A912E-FC8C-47F1-A10E-8EE97A7EC985"}]}]}],"references":[{"url":"http://depo2.nm.ru/WebWiz_Rich_Text_Editor_v4.02_XSS.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494822/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30408","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2210/references","source":"cve@mitre.org"},{"url":"http://depo2.nm.ru/WebWiz_Rich_Text_Editor_v4.02_XSS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494822/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2210/references","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3368","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en tools/packages/import.php en ATutor 1.6.1 pl1 y anteriores, permite a administradores autenticados remotamente ejecutar código PHP a través de una URL en el parámetro \"type\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:*:pl1:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"5646E7ED-B82B-4D6E-B9B9-E75299A35B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"29578CEF-9EC3-4A3D-ADB0-528B7AFA592F"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"5F2D8D00-F509-49BB-8594-D0FD2C8A5011"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1D4F1FB2-F35E-444F-8A7F-77C6FDCE9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FED293AE-94FD-444B-85A6-3ABCC7C97654"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ECE4E6E1-0B9B-4EBE-8727-AD04E1BB5C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3:*:*:*:*:*:*:*","matchCriteriaId":"827CD64E-2E84-422A-A405-16FCB4E80863"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE05B757-B3B2-47DE-AFB6-073D5C639D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3D97A1FF-B3B4-406C-814A-F7504B9EE290"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1A3D3293-3761-46BE-B581-8B8447FB5059"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4:*:*:*:*:*:*:*","matchCriteriaId":"31C48DDB-B334-499A-9C1B-122D6942BD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E682277-2B37-4C0B-98F5-52A4427B8853"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"341B04AA-926D-400E-9A47-D2F183E26AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"05E50596-38A3-4C7A-9561-99950DA33A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7BA98319-09F3-4AE9-AF14-B1BE424AB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1C60745C-ECC2-41AD-8795-6D274F269F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2765EAFB-6663-4F16-B285-6DA8D26E6CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D5B36A11-B728-468A-802E-A7C8362D154A"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"189D9776-C554-4084-8C31-21935F83A416"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"54D08E87-E4BC-449F-93B6-D567926BCE84"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ADC1FDA3-8B9A-4293-974F-F07517F3581C"},{"vulnerable":true,"criteria":"cpe:2.3:a:atutor:atutor:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2E84A54D-D3E2-4B7C-809D-7719FD92ECD0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4064","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30412","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2206/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44051","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6153","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2206/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3369","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en products_rss.php en ViArt Shop 3.5 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"category_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"88275CDC-A8D7-43DF-8F5F-E4985481CF73"},{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"39820C65-FFD9-4D33-92AE-2C3EACDF1C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.2:*:*:*:*:*:*:*","matchCriteriaId":"E2ABEFFE-A74D-4D1A-AB0A-C265E470CC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.3:*:*:*:*:*:*:*","matchCriteriaId":"28740AD6-EE3C-410A-BCE2-24C5B0C71BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.3:beta:*:*:*:*:*:*","matchCriteriaId":"B00ED6E5-88B4-457B-94A9-3961E532A403"},{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"ADEE4B08-B9CD-4856-BDCD-F9617A142694"}]}]}],"references":[{"url":"http://secunia.com/advisories/31275","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4065","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00118-07292008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494839/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30409","source":"cve@mitre.org"},{"url":"http://www.viart.com/another_critical_sql_injection_security_fix_for_version_3_5.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2205/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44045","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6154","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00118-07292008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494839/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.viart.com/another_critical_sql_injection_security_fix_for_version_3_5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2205/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3370","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote attackers to execute arbitrary SQL commands via the user (user name) field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CUA Login Module en EMC Centera Universal Access (CUA) 4.0_4735.p4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo \"user\" (usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:centera_universal_access:4.0_4735:p4:*:*:*:*:*:*","matchCriteriaId":"82F554E9-D8B1-4BC9-89D3-9727DBE5A68F"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=121684757516717&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4066","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30358","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020540","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2219/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43981","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=121684757516717&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2219/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3371","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo install/help.php en TalkBack versión 2.3.5 y otras versiones anteriores a 2.3.6.2, permite a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de secuencias de salto de directorio en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talkback:talkback:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3C55C477-0258-442C-A598-F686CADA69C6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4067","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt","source":"cve@mitre.org"},{"url":"http://www.scripts.oldguy.us/talkback/release-notes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30393","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2211/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44018","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6148","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6451","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9095","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scripts.oldguy.us/talkback/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2211/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3372","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search_form.php en Getacoder Clone, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sb_protype."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greatclone:getacoder_clone:*:*:*:*:*:*:*:*","matchCriteriaId":"F61FCEBB-93C2-4EFD-91DB-44196FBD3169"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30388","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2217/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44027","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6143","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2217/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3373","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error."},{"lang":"es","value":"El motor del analizador sintáctico de archivos de Grisoft AVG Anti-Virus anterior 8.0.156, permite a atacantes remotos provocar una denegación de servicio (caída de motor) a través de un fichero UPX comprimido manipulado, que lanza un error \"División por cero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grisoft:avg_antivirus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"09F97BCB-6811-43BF-A583-609A8D41A46A"},{"vulnerable":true,"criteria":"cpe:2.3:a:grisoft:avg_antivirus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"684D405E-F6FA-4D21-8F19-DB6AACF4C3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:grisoft:avg_antivirus:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038DF9F5-2F43-4F35-9194-A2D5160F91F6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.grisoft.com/ww.94247","source":"cve@mitre.org"},{"url":"http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494867/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30417","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020570","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2225/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.grisoft.com/ww.94247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494867/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2225/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3374","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an __exp__getFeedContent action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ajax.php en Gregarius 0.5.4 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"rsargs\" en una acción __exp__getFeedContent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.4","matchCriteriaId":"D32F81E0-7C1C-488F-BA2E-DDE9571BFB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"582D8A84-C5AB-44D5-A815-15F78EA85C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C5432677-7BDA-403C-82AB-222E7790CA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EB0D40C5-5C8C-4C58-AA8B-A27DA2C676C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"9B1DBBD5-72A0-4B01-ACC4-87A9659ECC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"44F8C261-3D7C-4242-8F83-BC6FED15F69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"17B9108C-5779-40E0-A6D1-1966F7D416DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6880E6D9-1F2A-4E6D-AD77-14BBAE4EDC2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3EEF500D-73C1-4514-A87F-57A88FE0C1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F74CB5F7-E308-4C78-8BF2-1289DA740406"},{"vulnerable":true,"criteria":"cpe:2.3:a:gregarius:gregarius:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"09CC83D1-EAA2-40D3-A0E6-F47BCE1C8087"}]}]}],"references":[{"url":"http://secunia.com/advisories/31260","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.gregarius.net/trac/changeset/1788/trunk/gregarius/ajax.php","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00119-07302008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494866/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30423","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44054","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6159","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.gregarius.net/trac/changeset/1788/trunk/gregarius/ajax.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00119-07302008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494866/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3375","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie."},{"lang":"es","value":"La función jrCookie en includes/jamroom-misc.inc.php en JamRoom anterior a 3.4.0, permite a atacantes remotos evitar la autenticación y obtener privilegios de administrador a través de un valor booleano en un dato en serie dentro de una cookie JMU_Cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.8","matchCriteriaId":"45390A50-7145-4334-8719-0B32EDF8CC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2CD5550F-E364-4888-8A53-2A3DCE796A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*","matchCriteriaId":"61367DA9-F651-4FB3-8D48-1AF26066C15D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*","matchCriteriaId":"66CD47A2-E6E0-4079-B872-F890520FDC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*","matchCriteriaId":"3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*","matchCriteriaId":"4ABCF337-4928-45B8-8F99-725B5F081AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*","matchCriteriaId":"28AB3D7B-7AE2-44C5-A704-825B33BFBB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*","matchCriteriaId":"38C2B402-A285-4959-B775-65B7A81AC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"AD305738-CAF6-4D26-9C20-2E30BCCB4ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"67567C47-1AC5-4916-99F2-B114E3B28087"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"FC892073-E68B-4BC7-B327-5A50423D5CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*","matchCriteriaId":"BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*","matchCriteriaId":"922EBD12-2BDD-4DCB-95B4-859379699698"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*","matchCriteriaId":"E0E76FF6-D673-410D-83D6-F120CBC916B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*","matchCriteriaId":"D96BCD95-57BE-49E3-AA36-553615FB8CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*","matchCriteriaId":"9F370EE5-826A-4180-83AD-13391DF8C1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*","matchCriteriaId":"DF74AC65-8D38-45F2-9D07-93414DDC3321"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*","matchCriteriaId":"D4C09353-8A2D-4363-A44C-62EEDD6CD127"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*","matchCriteriaId":"F08631D7-BD25-4EEB-A980-8BD959D65296"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*","matchCriteriaId":"68B03674-5C17-4867-A4B7-3F81F9F25E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*","matchCriteriaId":"137287E7-5927-495F-9B9F-D04AC7E528E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*","matchCriteriaId":"B55161FB-A8BC-412D-8AF7-DBB50D251AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*","matchCriteriaId":"04BAE9FF-377C-4DA8-BA15-6D54266B571A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*","matchCriteriaId":"65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*","matchCriteriaId":"5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*","matchCriteriaId":"CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*","matchCriteriaId":"E269400E-65C9-4993-A469-C1722C72A89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*","matchCriteriaId":"A96EE17A-987A-4FA6-872C-2998F22A3B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*","matchCriteriaId":"718A7588-74E6-4601-B3B7-0C3EA0A0D021"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*","matchCriteriaId":"6370A2F4-2D59-404F-87C6-FEDCACD4A64F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*","matchCriteriaId":"E5FFE8CE-0001-4221-A19C-2CB45A6CDA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*","matchCriteriaId":"F9084E5E-29A9-4C1C-BBB4-0A05870908AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6947161-212C-48D0-A21F-DC5EFED5274B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"45F96B70-E44F-4392-9983-E395D27DDF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"12D8B1B7-2349-4E1F-B86F-C6CF5157F429"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"63A95CFA-5E47-4D8D-B5A7-38880FC9324B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0E521F6F-D31C-4E08-AC06-120109DF4020"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2B92F69F-85E9-4413-8474-24CF6186FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7B3B-3BBE-40E7-A750-D4911A7380AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1091207E-9F46-4F56-8D0F-C098BD2BBB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"3AE17521-A44E-4920-B50F-84EBA942D08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"21E46C8F-0B90-4583-A52E-933B7333F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A911F967-8298-4C81-A6D3-0378595D41C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"213CE4E8-54D1-479D-8227-94035A982155"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"151F9FC7-0BAB-463F-BD3A-2F8582AD1C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"16CCF11C-2464-48E8-8049-4838092C6547"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"05D0AA62-0F61-490D-AFC6-E571F4646A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"E5D88374-B90E-4E85-BFA9-C874ABA08B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"25655EBC-1E87-415E-9D20-0179F4FCD35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2F208C24-E78B-49A0-8E61-90A1A7D475CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8D49548E-EE58-4694-8099-032D3B65AA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"00DE05D9-4DC3-4F76-9314-E7AE267DA4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"7DC05C6F-2816-4486-8A2D-A40A523439F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"EF05E590-EDA4-4F52-A3D9-A7D070484A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F34F3181-7CC9-45D4-AC45-D6A61AC58627"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"690D31B5-B81E-4FA7-8031-84438703490D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"D93B8842-96E2-4153-9F12-5A3A1DFB7C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"4F1BB904-07E0-4C62-9365-C717D9FA18C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"1A2BFB5B-BC98-4604-A3E1-1B703D1C1577"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"DDC0BC1D-8BFD-4A57-A160-959CB93DE303"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*","matchCriteriaId":"44456A6C-AF1D-445F-BF71-5A80008F84FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*","matchCriteriaId":"4EE15983-D025-47B0-87AB-B8E3818EA811"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*","matchCriteriaId":"6EDCB191-2EB5-41C0-A354-6D790CF16083"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E394BD3-8B2A-4896-868E-C4927356B486"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41C8D61B-A5D8-4075-B2C6-119CC06AA4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9CC1F1D3-46B6-4AB2-9A5C-A13B89084031"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"111054E3-3BD4-4E97-980B-1E1DC539182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"32EC8F1C-4014-4DF2-AB32-6D82327FE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C655733-74A4-4E0F-84EF-FE294F6753BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C86D6AC4-4641-4874-A8D2-26E486EE6B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1DCE23FB-700D-4E00-9B46-7AFD31D9358B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A6366FFF-8412-465C-AA08-7C9366785059"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1978E341-AF7E-49B8-8ADC-879F2B11D8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CC99103B-A43D-4370-A70B-D9DD2C665056"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F953D-8D25-4395-8A86-4E2DD5B2399F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA61EDF9-CF08-407E-861E-98BF3B752834"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A406E79C-13CF-48A3-943E-0AACC8050411"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B97B0CB1-E4D7-4210-933B-AD114EFF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C10A858B-6771-4E23-9E93-CCA37F21089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"93DD0B7C-609B-4E41-A44C-1F3B607EBC70"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4069","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00117-07282008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178","source":"cve@mitre.org"},{"url":"http://www.jamroom.net/phpBB2/viewtopic.php?t=24454","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494820/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30406","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44048","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00117-07282008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jamroom.net/phpBB2/viewtopic.php?t=24454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/494820/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3376","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en JamRoom anterior a 3.4.0 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.8","matchCriteriaId":"45390A50-7145-4334-8719-0B32EDF8CC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2CD5550F-E364-4888-8A53-2A3DCE796A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6C797B83-2A8C-49BE-8CDB-B6CFFBB9658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"AD305738-CAF6-4D26-9C20-2E30BCCB4ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"67567C47-1AC5-4916-99F2-B114E3B28087"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"FC892073-E68B-4BC7-B327-5A50423D5CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*","matchCriteriaId":"BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*","matchCriteriaId":"D96BCD95-57BE-49E3-AA36-553615FB8CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*","matchCriteriaId":"9F370EE5-826A-4180-83AD-13391DF8C1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*","matchCriteriaId":"DF74AC65-8D38-45F2-9D07-93414DDC3321"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*","matchCriteriaId":"D4C09353-8A2D-4363-A44C-62EEDD6CD127"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*","matchCriteriaId":"F08631D7-BD25-4EEB-A980-8BD959D65296"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*","matchCriteriaId":"68B03674-5C17-4867-A4B7-3F81F9F25E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*","matchCriteriaId":"137287E7-5927-495F-9B9F-D04AC7E528E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*","matchCriteriaId":"B55161FB-A8BC-412D-8AF7-DBB50D251AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*","matchCriteriaId":"04BAE9FF-377C-4DA8-BA15-6D54266B571A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*","matchCriteriaId":"65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6947161-212C-48D0-A21F-DC5EFED5274B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"45F96B70-E44F-4392-9983-E395D27DDF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"12D8B1B7-2349-4E1F-B86F-C6CF5157F429"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"63A95CFA-5E47-4D8D-B5A7-38880FC9324B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0E521F6F-D31C-4E08-AC06-120109DF4020"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2B92F69F-85E9-4413-8474-24CF6186FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7B3B-3BBE-40E7-A750-D4911A7380AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1091207E-9F46-4F56-8D0F-C098BD2BBB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"3AE17521-A44E-4920-B50F-84EBA942D08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"21E46C8F-0B90-4583-A52E-933B7333F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A911F967-8298-4C81-A6D3-0378595D41C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"213CE4E8-54D1-479D-8227-94035A982155"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"151F9FC7-0BAB-463F-BD3A-2F8582AD1C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"16CCF11C-2464-48E8-8049-4838092C6547"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"05D0AA62-0F61-490D-AFC6-E571F4646A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"E5D88374-B90E-4E85-BFA9-C874ABA08B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"25655EBC-1E87-415E-9D20-0179F4FCD35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2F208C24-E78B-49A0-8E61-90A1A7D475CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8D49548E-EE58-4694-8099-032D3B65AA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"00DE05D9-4DC3-4F76-9314-E7AE267DA4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"7DC05C6F-2816-4486-8A2D-A40A523439F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"EF05E590-EDA4-4F52-A3D9-A7D070484A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F34F3181-7CC9-45D4-AC45-D6A61AC58627"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"690D31B5-B81E-4FA7-8031-84438703490D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"D93B8842-96E2-4153-9F12-5A3A1DFB7C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"4F1BB904-07E0-4C62-9365-C717D9FA18C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"1A2BFB5B-BC98-4604-A3E1-1B703D1C1577"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"DDC0BC1D-8BFD-4A57-A160-959CB93DE303"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E394BD3-8B2A-4896-868E-C4927356B486"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41C8D61B-A5D8-4075-B2C6-119CC06AA4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9CC1F1D3-46B6-4AB2-9A5C-A13B89084031"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"111054E3-3BD4-4E97-980B-1E1DC539182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"32EC8F1C-4014-4DF2-AB32-6D82327FE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C655733-74A4-4E0F-84EF-FE294F6753BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C86D6AC4-4641-4874-A8D2-26E486EE6B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1DCE23FB-700D-4E00-9B46-7AFD31D9358B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A6366FFF-8412-465C-AA08-7C9366785059"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1978E341-AF7E-49B8-8ADC-879F2B11D8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CC99103B-A43D-4370-A70B-D9DD2C665056"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F953D-8D25-4395-8A86-4E2DD5B2399F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA61EDF9-CF08-407E-861E-98BF3B752834"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A406E79C-13CF-48A3-943E-0AACC8050411"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B97B0CB1-E4D7-4210-933B-AD114EFF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C10A858B-6771-4E23-9E93-CCA37F21089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"93DD0B7C-609B-4E41-A44C-1F3B607EBC70"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1177","source":"cve@mitre.org"},{"url":"http://www.jamroom.net/phpBB2/viewtopic.php?t=24454","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30406","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jamroom.net/phpBB2/viewtopic.php?t=24454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3377","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the image_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en picture.php en phpTest 0.6.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"image_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brandon_tallent:phptest:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"770204A5-37DC-45ED-BF07-D8E5C453F19E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4070","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30377","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44029","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6134","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3378","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comment.php en Fizzmedia 1.51.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fizzmedia_negativekarma:fizzmedia:1.51.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3E7E41-1F8C-4CC6-B81F-EDC8D398487A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31252","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30374","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44023","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3379","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Snark VisualPic 0.3.1, permite a atacantes remoto inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"pic\" en la URI por defecto. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snarky:visualpic:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4DD7F3FC-4725-4469-8F8D-50BD1A9914C2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30334","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43967","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3380","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the rs parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en ajaxp_backend.php en MyioSoft EasyBookMarker 4.0 trial edition (td), permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"rs\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easybookmarker:4.0:*:trial:*:*:*:*:*","matchCriteriaId":"7826AE6A-D920-46B4-8AA5-82860A21410A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4072","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494550/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30304","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2165/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494550/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2165/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3381","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados en macro/AdvancedSearch.py en moin (y MoinMoin)1.6.3 y 1.7.0, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1F89B87E-70F6-4B3C-B684-BE2666342F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"33BA7179-8A11-41C1-8F54-AC9316E8330D"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.6/rev/8686a10f1f58","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://hg.moinmo.in/moin/1.7/rev/383196922b03","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31135","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2147/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43899","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.6/rev/8686a10f1f58","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://hg.moinmo.in/moin/1.7/rev/383196922b03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2147/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3382","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_a parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mojoClassified.cgi en MojoClassifieds 2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_a\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mojoscripts:mojoclassifieds:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9CFE6C07-AA5E-433A-8FEC-B6151D929D90"}]}]}],"references":[{"url":"http://secunia.com/advisories/31166","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2156/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43931","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6108","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2156/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3383","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cat_a parameter in a browse action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mojoAuto.cgi in MojoAuto, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_a\" en una acción \"browse\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mojoscripts:mojoauto:*:*:*:*:*:*:*:*","matchCriteriaId":"9CFDF6B9-D4F4-43A0-86F3-D216AE556C24"}]}]}],"references":[{"url":"http://secunia.com/advisories/31162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2159/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43934","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6111","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2159/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3384","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en help/help.php en Interact Learning Community Environment Interact 2.4.1, permite a atacantes remotos incluir y ejecutar archivos locales a través de .. (punto punto) en los parámetros (1) \"module\" y (2) \"file\" (archivo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cce-interact:interact:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"076EFD59-F12B-4AF5-9EDD-447DE0A6D74C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4073","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?thread_id=2104908&forum_id=237160","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30315","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2155/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43937","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6107","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?thread_id=2104908&forum_id=237160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2155/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3385","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/head_chat.inc.php en php Help Agent 1.0 y 1.1 Full, permite a atacantes remotos ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro \"content\" (contenido). NOTA: en algunos enteornos esto puede ser aprovechado para realizar inclusiones remotas de fichero usando una URL con una ruta a un nombre UNC , un ftp, ftps o ssh2.sftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linuxwebshop:php_help_agent:1.0:*:*:*:*:*:*:*","matchCriteriaId":"29A4D532-9C41-43EC-BAFC-5EC7EAC402D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:linuxwebshop:php_help_agent:1.1:*:full:*:*:*:*:*","matchCriteriaId":"2353BD83-3AC9-424D-BB90-7A680FD606FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30240","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43833","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6080","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3386","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en album.php en AlstraSoft Video Share Enterprise 4.51, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"UID\", un vector distinto de la vulnerabilidad CVE-2007-4086."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:video_share_enterprise:4.51:*:*:*:*:*:*:*","matchCriteriaId":"43A5D89A-42B5-4B9B-AE8B-636D20C7DFDE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4075","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30272","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43861","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6092","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3387","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show.php en PHPFootball 1.6, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"dbtable\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpfootball:phpfootball:1.6:*:*:*:*:*:*:*","matchCriteriaId":"048BBF67-9EAB-47EF-975A-C6808827404F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30296","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43911","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6102","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3388","sourceIdentifier":"cve@mitre.org","published":"2008-07-30T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to (1) comaddok.php and (2) comlook.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Def-Blog 1.0.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"article\" a (1) comaddok.php y (2) comlook.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:def_blog:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"05C3586C-C74B-44E0-9F8F-12CFECCF6DB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494534/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30289","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494534/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3389","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"\"Fixes are available for the current release of Ingres 2006 release 2 (9.1.0), for Ingres 2006 release 1 (9.0.4), and for Ingres 2.6 versions on their respective platforms. The security fixes are available and can be quickly applied with little to no anticipated impact to systems.\r\n\r\nIngres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes:\r\nhttp://servicedesk.ingres.com/CAisd/pdmweb.ingres?OP=SHOW_DETAIL+PERSID=KD:416012+HTMPL=kt_document_view.htmpl\r\n\r\n(ingres.com)","evaluatorImpact":"\"Exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the \"ingres\" user. By itself, this vulnerability does not have very serious consequences. However, when combined with the library loading vulnerability, it allows an attacker to execute arbitrary code with root privileges. \" (iDefense)","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la librería libbecompat en Ingres 2.6, Ingres 2006 versión 1 (alias 9.0.4), y Ingres 2006 versión 2 (alias 9.1.0) en Linux y HP-UX que permite a los usuarios locales aumentar sus privilegios estableciendo un valor largo de una variable de entorno antes de ejecutar (1) verifydb, (2) iimerge, or (3) csreport."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2.6:*:*:*:*:*:*:*","matchCriteriaId":"DCE11A92-56B9-43A2-9E3D-D511AE713F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2006:9.0.4:*:*:*:*:*:*","matchCriteriaId":"D988634E-4C81-457B-AA97-9C55575E9DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ingres:ingres:2006:9.1.0:*:*:*:*:*:*","matchCriteriaId":"708FD550-E400-4973-979B-3D9932EBFC80"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=732","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31357","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31398","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020615","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ingres.com/support/security-alert-080108.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495177/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30512","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2292","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2313","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44179","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ingres.com/support/security-alert-080108.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495177/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3390","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en libraries/general.init.php de Minishowcase Image Gallery 09b136, cuando register_globals está habilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección meidante un .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minishowcase:minishowcase_image_gallery:09b136:*:*:*:*:*:*:*","matchCriteriaId":"739ED9F6-E914-4A5E-B0D3-E656437C0252"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4080","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494864/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44046","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6156","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3391","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Web Wiz Forum 9.5, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"mode\" en (1) admin_group_details.asp y (2) admin_category_details.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_forum:9.5:*:*:*:*:*:*:*","matchCriteriaId":"16D2379D-822F-4B8B-84BE-BBB8F0F0318D"}]}]}],"references":[{"url":"http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS2.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30398","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44012","source":"cve@mitre.org"},{"url":"http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3392","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en Web Wiz Forum 9.5, permite a atacantes remotos terminar la sesión de un usuario mediante un enlace o etiqueta IMG a log_off_user.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_forum:9.5:*:*:*:*:*:*:*","matchCriteriaId":"16D2379D-822F-4B8B-84BE-BBB8F0F0318D"}]}]}],"references":[{"url":"http://depo2.nm.ru/WebWiz_Forum_v9.5_CSRF.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44011","source":"cve@mitre.org"},{"url":"http://depo2.nm.ru/WebWiz_Forum_v9.5_CSRF.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3393","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo events.cfm en BookMine, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro events_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infomining:bookmine:*:*:*:*:*:*:*:*","matchCriteriaId":"B065CB1C-41A7-4AFA-B97A-D9BC19EDCC46"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/79/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31258","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30432","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44067","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/79/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3394","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el archivo search.cfm en BookMine, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) gallery y (2) search_strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infomining:bookmine:*:*:*:*:*:*:*:*","matchCriteriaId":"B065CB1C-41A7-4AFA-B97A-D9BC19EDCC46"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/79/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31258","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47203","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30432","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44068","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/79/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3395","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Calacode @Mail 5.41 en Linux emplea permisos débiles de lectura por todos (world-readable) para webmail/libs/Atmail/Config.php y (2) webmail/webadmin/.htpasswd, lo que permite a usuarios locales obtener información sensible al leer estos ficheros. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calacode:atmail:5.41:*:*:*:*:*:*:*","matchCriteriaId":"8D741497-85EB-4455-9367-FD30DDE10A0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31279","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30434","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3396","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets."},{"lang":"es","value":"Juego Unreal Tournament 2004 (UT2004) 3369 y anteriores, permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo o caída de demonio) a través de ciertas secuencias de paquetes mal formados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2004:*:*:*:*:*:*:*:*","versionEndIncluding":"3369","matchCriteriaId":"130AE00E-9D4B-436B-B1E0-A9202423BF3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2004:3120:*:*:*:*:*:*:*","matchCriteriaId":"6EE246E0-D7AA-4CF3-8C5F-30F5BEBFA196"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2004:3334:*:*:*:*:*:*:*","matchCriteriaId":"FC89F7DB-B5E6-4B27-ACF2-1B653FDAB2F4"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ut2004null-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ut2004null.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31266","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494935/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30427","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2259/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44107","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ut2004null-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ut2004null.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2259/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3397","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote attackers to inject arbitrary web script or HTML via a cerberus_user cookie."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Runesoft Cerberus CMS anterior a 3_1.4_0.9, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cookie cerberus_user."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runesoft:cerberus_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3_1.3_0.9","matchCriteriaId":"268AEC73-CBD2-41AA-AD58-B55AD8BABCB5"}]}]}],"references":[{"url":"http://gl2logic.com/cerberus/cerberus.php?app=Old_News&SHOWID=7","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30416","source":"cve@mitre.org"},{"url":"http://gl2logic.com/cerberus/cerberus.php?app=Old_News&SHOWID=7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3398","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en  XRMS CRM 1.99.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"msg\" en componentes no especificados, posiblemente incluso login.php. NOTA: este CVE puede solaparse con el CVE-2008-1129."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrms:xrms_crm:1.99.2:*:*:*:*:*:*:*","matchCriteriaId":"D595D870-7D0C-41C5-9DAF-FF36B4AFC7A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494754/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30369","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43994","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494754/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3399","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the include_directory parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en activities/workflow-activities.php de XRMS CRM 1.99.2, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro include_directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrms:xrms_crm:1.99.2:*:*:*:*:*:*:*","matchCriteriaId":"D595D870-7D0C-41C5-9DAF-FF36B4AFC7A6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494754/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43992","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6131","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494754/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3400","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function."},{"lang":"es","value":"XRMS CRM 1.99.2 permite a atacantes remotos obtener información de la configuración a través de de una petición directa a test/info.php, que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrms:xrms_crm:1.99.2:*:*:*:*:*:*:*","matchCriteriaId":"D595D870-7D0C-41C5-9DAF-FF36B4AFC7A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494754/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43995","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494754/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3401","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en hioxRandomAd.php de HIOX Random Ad (HRA) 1.3, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro hm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hscripts:hiox_random_ad:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A72CDA4C-CC37-4833-A043-2DA28DBACCD5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31300","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4082","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494927/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44061","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6161","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494927/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3402","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to (1) hioxupdate.php and (2) hioxstats.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en HIOX Browser Statistics (HBS) 2.0, permite a atacantes remotos ejecutar código php de su elección a través del parámetro \"hm\" en una URL en (1) hioxupdate.php e (2) hioxstats.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hscripts:hiox_random_ad:2.0:*:*:*:*:*:*:*","matchCriteriaId":"89A7011D-E96F-4ED9-816B-40995A50DEB1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31299","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494930/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44064","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494930/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3403","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mojoClassified.cgi de MojoPersonals, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mojoscripts:mojopersonals:*:*:*:*:*:*:*:*","matchCriteriaId":"F80478E6-353A-47E8-82B1-DEBB0816F6FB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4084","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30325","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2157","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43932","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6109","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3404","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote attackers to inject arbitrary web script or HTML via the link parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en guestbook.js.php de MJGuest 6.8 GT, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdsjack:mjguest:6.8:gt:*:*:*:*:*:*","matchCriteriaId":"383EB27A-0409-4D2E-A46F-3FDE85AD797B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121743234408691&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4085","source":"cve@mitre.org"},{"url":"http://www.mdsjack.bo.it/files/mjguest.log.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30438","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44139","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121743234408691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mdsjack.bo.it/files/mjguest.log.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3405","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Ricardo Amaral nzFotolog 0.4.1, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de secuencias de saltos de directorio en el parámetro \"action_file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nazgulled:nzfotolog:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B49AF5B-64BA-40AB-82F8-B6AC21AA8CEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31297","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44065","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3406","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showcat.php de phpLinkat 0.1, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplinkat:phplinkat:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E64D7F95-5292-4AC6-9CB1-2EC614F967B1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4087","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30386","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44060","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6140","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3407","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie."},{"lang":"es","value":"phpLinkat 0.1 permita a atacantes remotos evitar la autenticación y acceder a páginas no especificadas dentro de admin/, enviando una cookie login=right."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplinkat:phplinkat:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E64D7F95-5292-4AC6-9CB1-2EC614F967B1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4087","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30386","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44062","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6140","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3408","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file."},{"lang":"es","value":"Desbordamiento de búfer en CoolPlayer permite a atacantes remotos asistidos por el usuario ejecutar código arbitrariamente a través del archivo m3u manipulado"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolplayer:coolplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"5976EBAD-6D2C-4D67-A359-DCFCA77166ED"}]}]}],"references":[{"url":"http://secunia.com/advisories/31294","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4088","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15895","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30418","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2264/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44103","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6157","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/15895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2264/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3409","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka attack 1 in ut3mendo.c."},{"lang":"es","value":"Desbordamiento de búfer en Unreal Tournament 3 1.3beta4 y anteriores, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria o caída de demonio) o posiblemente, la ejecución de código de su elección a través de un paquete UDP que contiene un valor largo en un tamaño de campo determinado seguiro por una cadena de datos de ese tamaño. También conocido como  ataque 1 en ut3mendo.c"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:*:beta_4:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"143B729F-9298-4FCF-894A-8702A4F63562"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"467CED79-6CB3-4E41-A8BF-DADCC3E54054"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.2:*:*:*:*:*:*:*","matchCriteriaId":"052B835F-C61E-4492-BFAF-623223ECD798"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ut3mendo-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ut3mendo.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494929/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30430","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2260/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44105","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ut3mendo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ut3mendo.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494929/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2260/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3410","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a certain size field is greater than the total packet length, aka attack 2 in ut3mendo.c."},{"lang":"es","value":"Unreal Tournament 3 1.3beta4 y anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo o caída del demonio) mediante un paquete UDP en el que el valor del tamaño de cierto campo es superior a la longitud total del paquete, también conocido como ataque 2 en ut3mendo.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:*:beta_4:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"143B729F-9298-4FCF-894A-8702A4F63562"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"467CED79-6CB3-4E41-A8BF-DADCC3E54054"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.2:*:*:*:*:*:*:*","matchCriteriaId":"052B835F-C61E-4492-BFAF-623223ECD798"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ut3mendo-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ut3mendo.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494929/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30430","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2260/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44104","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ut3mendo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ut3mendo.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494929/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2260/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3411","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2) etc/config/Network.html, (3) etc/config/Security.html, (4) cgi-bin/sysconf.cgi, and (5) cgi-bin/route.cgi, which allows remote attackers to change the modem's configuration via direct requests."},{"lang":"es","value":"El nodem Axesstel AXW-D800 con software D2_ETH_109_01_VEBR Jun-14-2006 no requiere autenticación para (1) etc/config/System.html, (2) etc/config/Network.html, (3) etc/config/Security.html, (4) cgi-bin/sysconf.cgi, y (5) cgi-bin/route.cgi, lo que permite a atacantes remotos modificar la configuración del modem a través de peticiones directas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:akw-d800:d2_eth_109_01_vebr:*:*:*:*:*:*:*","matchCriteriaId":"F55F43C7-3408-4692-B8A9-03261535971B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31285","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4089","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494815/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30404","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494815/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3412","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a (1) pro_show or (2) disppro action to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Comsenz EPShop (también conocido como ECShop) anterior a 3.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro pid en una acción (1) pro_show o (2) disppro a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.5","matchCriteriaId":"B418B22F-94B3-4136-9153-4CCD11818719"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2F599A10-59D2-42DD-B802-8CF762FE4058"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"163FD650-44D0-4279-9965-63560290A62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DD0F5987-618D-4AC7-AB68-77D7EC086092"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.0.2:a:*:*:*:*:*:*","matchCriteriaId":"72B0447A-5245-4058-AFFA-AE77B54AFF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CA2C9029-29F5-460B-839D-914154F1253E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"19307B71-B617-4D1A-AE63-E3ADDB4CC946"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B88A332-9138-4AFF-98CE-F0490249D649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E76F06E3-7AD7-4C0C-B9EF-133241B4E81B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.1:a:*:*:*:*:*:*","matchCriteriaId":"B5E8BB11-ABD6-44EC-BC11-D04E498A8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.1:b:*:*:*:*:*:*","matchCriteriaId":"325C11B1-3ADD-4AE6-9D36-6BF503EADBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.1:c:*:*:*:*:*:*","matchCriteriaId":"B51A2BE2-70B0-4D25-8C1A-AA0C7E4C3D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F94A3FD5-E50C-4573-9F45-C567020BA790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.2:a:*:*:*:*:*:*","matchCriteriaId":"ADE42D81-5D62-4E88-B11C-FC84CCF52466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:epshop:2.1.2:b:*:*:*:*:*:*","matchCriteriaId":"7FA9315F-542B-421E-B8A2-5BCFA1BD7472"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4090","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30387","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44025","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6139","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3413","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional source found during analysis:\r\n\r\nhttp://www.securityfocus.com/bid/30389","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitrary SQL commands via the cate_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php de Greatclone GC Auction Platinum permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cate_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greatclone:auction_platinum:*:*:*:*:*:*:*:*","matchCriteriaId":"4D121A22-F1AB-47B0-88E5-D6DCC56403DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31241","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4091","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30389","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2216/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44024","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2216/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3414","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional source found during analysis:\r\n\r\nhttp://www.securityfocus.com/bid/30391","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en line2.php en SiteAdmin, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"art\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteadmin:cms:*:*:*:*:*:*:*:*","matchCriteriaId":"3F0B07C4-5A74-4604-BEFD-647A60B693FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31240","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4092","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30391","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2215/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44030","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6145","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2215/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3415","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP sequences."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en common.php de CMScout 2.05, cuando no se soporta .htaccess, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro bit; como se ha demostrado con una subida a avatar/ de un fichero .jpg que contenía secuencias PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmscout:cmscout:2.05:*:*:*:*:*:*:*","matchCriteriaId":"D153E96F-9743-46E7-AA70-B42531AB9CEE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31243","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4093","source":"cve@mitre.org"},{"url":"http://www.cmscout.co.za/index.php?page=news&id=29","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30385","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2218/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44017","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6142","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cmscout.co.za/index.php?page=news&id=29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2218/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3416","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrary SQL commands via the username parameter in a members action to index.php, related to an incorrect protection mechanism in the clean_string function in includes/functions.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules/members.php en IceBB anterior a 1.0-rc9.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\" (nombre de usuario) en una acción al index.php. Relacionado con una protección incorrecta en el funcionamiento de la función clean_string en includes/functions.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc9:*:*:*:*:*:*","matchCriteriaId":"5AD317C8-7A2E-445D-BB30-B43CEECB1709"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc9.1:*:*:*:*:*:*","matchCriteriaId":"1767BB4C-703C-455E-B8DD-8F2A8DB180C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc9.2:*:*:*:*:*:*","matchCriteriaId":"9A7AC70F-169F-4B91-8390-812E64AD3603"}]}]}],"references":[{"url":"http://forums.xaos-ia.com/?topic=760","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30381","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44028","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6137","source":"cve@mitre.org"},{"url":"http://forums.xaos-ia.com/?topic=760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3417","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en home/index.asp en fipsCMS light 2.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"r\". Un vector diferente de CVE-2006-6115 y CVE-2007-2561."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fipsasp:fipscms_light:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"8B5D886D-593A-406C-B1F2-4C579669A133"}]}]}],"references":[{"url":"http://secunia.com/advisories/31250","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4095","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30380","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44022","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6135","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3418","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browse.php de TriO 2.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:willo:trio:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"6A86B4D3-8132-48EF-9C36-1B1B2BCBCF4B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31244","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4077","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44033","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3419","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands via the UID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ugroups.php en Youtuber Clone, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"UID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greatclone:youtuber_clone:*:*:*:*:*:*:*:*","matchCriteriaId":"91CAB27B-4B90-4BFA-B5D9-46399E6F766E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4096","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2212/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44026","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6147","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2212/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3420","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to browse.php or (2) the s parameter in an exhibitions action to detail.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Mobius para Mimsy XG versiones 1 1.4.4.1 y anteriores, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de (1) el parámetro id en el archivo browse.php o (2) el parámetro s en una acción de exhibitions en el archivo detail.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:willo:mobius_web_publishing_software:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.4.1","matchCriteriaId":"39645ED6-0193-48AD-9E78-342B465AF418"}]}]}],"references":[{"url":"http://secunia.com/advisories/31247","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30382","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44019","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3421","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to (1) update_module.jsp, (2) enroll_course.pl, and (3) unenroll.jsp."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de tipo cross-site request forgery (CSRF) en Blackboard Academic Suite versión 8.0.260.7, permiten a los atacantes remotos secuestrar la autenticación de los usuarios alumnos para las peticiones que cambian la configuración e inscripciones mediante entradas no especificadas en los archivos (1) update_module.jsp, (2) enroll_course.pl y (3) unenroll.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:blackboard_academic_suite:8.0.260.7:*:*:*:*:*:*:*","matchCriteriaId":"090EBB60-326B-442C-9CAF-3A4E3A058D84"}]}]}],"references":[{"url":"http://ceaseless.ws/bb-csrf/","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/31177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43986","source":"cve@mitre.org"},{"url":"http://ceaseless.ws/bb-csrf/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/31177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3422","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren)."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de comandos en sitios cruzados (XSS) de las librerías de clase ASP.net en Mono 2.0 y versiones anteriores, permiten a atacantes remotos inyectar secuencias de comandos web o HTML a través de atributos manipulados relacionados con (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), y (5) HtmlSelect (RenderChildren)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B31A3175-7CC6-4367-9A3C-F3324156C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DBB77289-2AED-4BD4-9578-FEB0EC83701E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A4299404-6C79-4B21-BB8C-115FA1E3AC28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"919CAD10-2F17-4F94-8116-815E77F5E998"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"19877D33-5DBF-40D7-87CB-545558C64771"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13.4:*:*:*:*:*:*:*","matchCriteriaId":"F64E7267-E010-4FC8-879A-448C85BC250B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13.6:*:*:*:*:*:*:*","matchCriteriaId":"683F75A5-E4E4-4416-8E1C-A2C694A30BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13.7:*:*:*:*:*:*:*","matchCriteriaId":"EBE3CDD7-8553-4CB7-A0A7-B059B4D75B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DE2C11F2-2A21-481E-8350-F3777A0A8033"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"EFC21FA7-648F-4E41-962B-664140FA4812"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"A9FF02E9-070C-4AAA-ABB7-26FC9E56C7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EC72C972-FF09-4A5D-9AD4-A422EDADF5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"0F33FED4-EE33-41EF-8B24-F751D0A9891B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"403E554C-FD1B-42CE-82C2-43CC191905DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"78278FE6-26EA-4E89-9423-EABA6C4D8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"15E1695E-FD6E-4602-9BD9-9CFFF20574CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"691B3AF1-7F3F-4A7D-9F16-FE6044E33482"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2DE3739-A2ED-47D7-9AE9-442A95ACFC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDAB5331-AD2E-483C-93C3-8095BBBA0572"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.9:*:*:*:*:*:*:*","matchCriteriaId":"E3CC03DC-14A6-4C45-9511-7CE8E7F727BB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.ximian.com/pipermail/mono-devel-list/2008-July/028633.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31338","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36494","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30471","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=413534","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44229","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/826-1/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.ximian.com/pipermail/mono-devel-list/2008-July/028633.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=413534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/826-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3423","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors."},{"lang":"es","value":"IBM WebSphere Portal 5.1 hasta la 6.1.0.0 permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:5.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0B4DF048-224A-43DB-A796-44EAF9CD8838"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:5.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FA05BB8A-C367-4A09-87A4-C9D9C46AE52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"23785ACE-3F00-430E-B9ED-940A70A3201C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0F885AD0-1134-483C-9A69-98AC0D60E79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2AF22D6E-7B21-4657-89ED-A7EF20BFF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:5.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"13570CD6-7D5F-4665-A982-9E83FA25C68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6C753E1B-D81B-4995-877E-58EDD6F49DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5D54D4DB-FA55-47AE-9E19-FB8368FD40C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FC6A48A-E669-4AA0-AD83-85778A7B6C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"82FC2F98-1E99-4B50-88D5-7A2904F4585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31443","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67104","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30500","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020712","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2405","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44264","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3424","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Condor versiones anteriores a la 7.0.4 no gestiona correctamente los caracteres especiales en las variables de configuración ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, o HOSTDENY_WRITE en los listas de políticas de autorización, lo cual podría permitir a los atacantes remotos saltarse las restricciones de acceso previstas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.4","matchCriteriaId":"501E4937-0F98-4B63-8054-04FC01B9B0C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://secunia.com/advisories/31284","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31423","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31459","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#sec:New-7-0-4","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0814.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0816.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30440","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020646","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44063","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/31284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#sec:New-7-0-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0814.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0816.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-3425","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Plugin Sun Java System Web Server 7.0 de Sun N1 Service Provisioning System (SPS) 5.2 y 6.0, permite a los usuarios remotos autenticados de SPS obtener acceso administrativo al web server a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server_plugin:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09517A56-F177-4B76-A07A-F5B3D9331E08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_service_provisioning_system:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5AA7BB07-DB3E-4DA0-A2CE-9B10230ADD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:n1_service_provisioning_system:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2D002A0B-1406-4A21-A0E8-D5B3D6B0AD7E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30451","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020608","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2261/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2261/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3426","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Solaris Platform Information and Control Library daemon (picld) in Sun Solaris 8 through 10, and OpenSolaris builds snv_01 through snv_95, allows local users to cause a denial of service via unknown vectors that prevent operation of utilities such as prtdiag, prtpicl, and prtfru."},{"lang":"es","value":"Vulnerabilidad no especificada del demonio Solaris Platform Information and Control Library daemon (picld) en Sun Solaris versión 8 hasta la 10, y OpenSolaris builds versión snv_01 hasta la snv_95, permite a usuarios locales provocar una denegación de servicio a través de vectores desconocidos que impiden operaciones con utilidades como prtdiag, prtpicl, y prtfru."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","matchCriteriaId":"19FE69F8-3726-4B21-9B78-E9920B046564"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","matchCriteriaId":"097D3A0C-8C75-4951-94C7-4C444DE2B0D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31501","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239728-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-351.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30450","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020609","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2262/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239728-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-351.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2262/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3427","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2023-11-07T02:02:28.360","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3420.  Reason: This candidate is a duplicate of CVE-2008-3420.  Notes: All CVE users should reference CVE-2008-3420 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-3428","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en  phpFreeChat 1.1, permite a usuarios remotos autenticados secuestrar sesiones web estableciendo el parámetro session_id para que sea igual al parámetro nickid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"6204C447-457D-452E-A03E-89F1AE56D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta10:*:*:*:*:*:*","matchCriteriaId":"3A338D15-82E9-4DE5-AF2A-F8D0D50237DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta11:*:*:*:*:*:*","matchCriteriaId":"5815AA94-0486-4273-ADFF-6BD672849742"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EE81B0EF-6B46-46F0-B9B1-E78A145FA709"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7158BE17-6E19-42BC-8C97-9EDFD8FBC269"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"DA6D6553-A28D-4DC6-91B8-F0F509853E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta5:*:*:*:*:*:*","matchCriteriaId":"921349BA-B7F6-4E63-ADE6-5E6C7516FFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta6:*:*:*:*:*:*","matchCriteriaId":"1CD0845B-45FF-45FA-87E4-58332261379A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"A21FAE77-B7A5-49DF-95BC-9B1AB13A63E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta8:*:*:*:*:*:*","matchCriteriaId":"2500C344-139C-43EF-B482-D3F3A65FE2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:beta9:*:*:*:*:*:*","matchCriteriaId":"5A6B4B10-2406-46C0-A834-C0582AD759EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.0:final:*:*:*:*:*:*","matchCriteriaId":"041AA248-D53A-4E2A-BC5C-13640624347B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpfreechat:phpfreechat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C85EE665-4438-43C8-9F19-F8212F023CCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/31283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpfreechat.net/changelog/1.2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30462","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44116","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phpfreechat.net/changelog/1.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3429","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL."},{"lang":"es","value":"Desbordamiento de Buffer en el procesado de URI de HTTrack y WinHTTrack versiones anteriores a la 3.42-3, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrariamente mediante una URL larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.23:beta-2:*:*:*:*:*:*","matchCriteriaId":"30A61DED-D601-4FCD-82A8-9AA0F6660D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.24:beta-2:*:*:*:*:*:*","matchCriteriaId":"CA9DC545-4B39-4135-8F42-3A2A4C25D5F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.25:beta-2:*:*:*:*:*:*","matchCriteriaId":"5B492CFE-25C8-466D-848C-F0E606677882"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.99:beta-2:*:*:*:*:*:*","matchCriteriaId":"E3666C84-2626-453B-80AA-3712CEDFC40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.996:beta-2:*:*:*:*:*:*","matchCriteriaId":"31CAA471-A9D5-44A2-96A4-03E54B1307D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.997:beta-2:*:*:*:*:*:*","matchCriteriaId":"C18F4201-8FDD-45E3-891C-BEABC91B5132"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:0.998:beta-2:*:*:*:*:*:*","matchCriteriaId":"8EAC0EC7-9FFE-4F57-B9EC-E8744C8C1876"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.00:*:*:*:*:*:*:*","matchCriteriaId":"55CE92DE-889F-4219-A20B-1658FD1A20D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.01:*:*:*:*:*:*:*","matchCriteriaId":"C7FDCAC6-5142-4730-B823-E2F2AC002C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.02:*:*:*:*:*:*:*","matchCriteriaId":"69198DB6-723E-45F0-BDD8-D6106EA432EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.03:*:*:*:*:*:*:*","matchCriteriaId":"AD90479B-84F3-45A7-AA68-FA0B6A5D14C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.04:*:*:*:*:*:*:*","matchCriteriaId":"97354343-B565-4CC1-B2EF-883F7AE2A81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.10:*:*:*:*:*:*:*","matchCriteriaId":"2B4BAAF0-714D-4FD6-9FEE-F68391E07CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.10:b:*:*:*:*:*:*","matchCriteriaId":"90C3786A-6F46-40A9-B51C-4D2D153B8760"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.10:c:*:*:*:*:*:*","matchCriteriaId":"93863B08-5B94-4952-A1FA-0E7CA7544C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.10:d:*:*:*:*:*:*","matchCriteriaId":"5BC576E1-A95F-4B2B-ADE7-F52CB25F647E"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.10:e:*:*:*:*:*:*","matchCriteriaId":"3F0289D6-58C3-40C6-87AB-FEBF45AF327B"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.11:*:*:*:*:*:*:*","matchCriteriaId":"E53081E7-F8D1-458A-AD2C-2E1AA79B7B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.15:*:*:*:*:*:*:*","matchCriteriaId":"5FADF089-961C-469C-A333-353B1CD308FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.15:b:*:*:*:*:*:*","matchCriteriaId":"EBEE9FDE-FC46-43A8-8253-954B61B88A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.16:*:*:*:*:*:*:*","matchCriteriaId":"CF625B94-9204-4CDF-93BA-AC785087DA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.16:b:*:*:*:*:*:*","matchCriteriaId":"161231F6-F21F-4D2F-AE63-B321EC8E0578"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.20:*:*:*:*:*:*:*","matchCriteriaId":"EB14522C-7783-4A9A-8A0E-B8D5D39049CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.21:*:*:*:*:*:*:*","matchCriteriaId":"08487F25-62EE-4873-A641-E3C6012C3FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.22:*:*:*:*:*:*:*","matchCriteriaId":"CB814FD0-A59F-4D95-B595-18A034747385"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.23:*:*:*:*:*:*:*","matchCriteriaId":"04F142B1-2646-4725-B926-44F2734C06A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.24:*:*:*:*:*:*:*","matchCriteriaId":"2EE56720-C089-45EA-8173-2BC3B9BCEE51"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:1.30:*:*:*:*:*:*:*","matchCriteriaId":"3A59CE6D-77AC-4111-A106-09F68F14EE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:2.00:*:*:*:*:*:*:*","matchCriteriaId":"22047DC8-7DA0-4DB9-B806-60901262F49E"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:2.01:*:*:*:*:*:*:*","matchCriteriaId":"18447927-A5B0-44A3-B346-C24F8A456945"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E218C652-ABB0-4445-8FF7-28CC59DD311D"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:2.02:*:*:*:*:*:*:*","matchCriteriaId":"2E4CD38B-9F65-4A79-A44A-9B5C002125AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.00:*:*:*:*:*:*:*","matchCriteriaId":"E741EEE4-0ED4-4AF1-A7C3-D978B32194D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.01:*:*:*:*:*:*:*","matchCriteriaId":"E4B90D7C-E458-4C24-A0E7-494DA3837948"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.02:*:*:*:*:*:*:*","matchCriteriaId":"68B488E1-EF0D-4A0E-9E26-12742EFE54E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.03:*:*:*:*:*:*:*","matchCriteriaId":"5760D8D4-9879-462A-ADBD-8D3DEEDF87E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.04:*:*:*:*:*:*:*","matchCriteriaId":"44BDC99D-71E2-474F-BE92-CC2560B10BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.05:*:*:*:*:*:*:*","matchCriteriaId":"61DB5944-DADF-47BF-9064-DAFCB2DE6F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.06:*:*:*:*:*:*:*","matchCriteriaId":"3F25BDEC-93ED-47D6-829D-7E6CB9EF563C"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.07:*:*:*:*:*:*:*","matchCriteriaId":"4763A337-1E82-45CF-AF95-4B189EF47354"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.08:*:*:*:*:*:*:*","matchCriteriaId":"6FAF9C77-2D09-49AE-8301-5A96064EEFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.09:*:*:*:*:*:*:*","matchCriteriaId":"38B428DE-8023-449B-8619-41044F82A5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.10:*:*:*:*:*:*:*","matchCriteriaId":"A79F6982-3519-495E-A7A0-B3096F3D8C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.15:*:*:*:*:*:*:*","matchCriteriaId":"EBF5CB5E-8768-412C-9B41-A870F2BDEDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.16:2:*:*:*:*:*:*","matchCriteriaId":"5E11ADCD-CA49-4AA9-BF64-ACA01FF85936"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.20:2:*:*:*:*:*:*","matchCriteriaId":"BEDB7060-F385-49B7-B547-F4670F5971F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.21:8:*:*:*:*:*:*","matchCriteriaId":"DE1176AC-D41F-4A94-84C4-3F5FD1D9772B"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.22:3:*:*:*:*:*:*","matchCriteriaId":"2C5B81B7-0F69-4577-8DFD-623C783B93B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.23:*:*:*:*:*:*:*","matchCriteriaId":"EBE90318-8B47-4AB6-9EF0-59A03AEC3EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.30:*:*:*:*:*:*:*","matchCriteriaId":"AE97BF0A-4B4D-494C-A997-36E7449E1FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.31:*:*:*:*:*:*:*","matchCriteriaId":"2ACD1DA3-AA16-4127-AC1B-157BE695B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.32:*:*:*:*:*:*:*","matchCriteriaId":"9D175651-5CD6-4477-8496-55C4E963BF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.33:*:*:*:*:*:*:*","matchCriteriaId":"D8ACAA7A-7D8A-44F4-987F-E71C284B84F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.40:*:*:*:*:*:*:*","matchCriteriaId":"A7BFB002-F9A0-46A7-BDC2-E1BFB54B5342"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.40:2:*:*:*:*:*:*","matchCriteriaId":"B09BE206-FEDA-46ED-9027-0E3D6DEF33F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.41:*:*:*:*:*:*:*","matchCriteriaId":"CEEAA51F-5405-457E-912D-04A750C61C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.41:2:*:*:*:*:*:*","matchCriteriaId":"96470815-113A-4874-B3C2-B1BD42E5D61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.41:3:*:*:*:*:*:*","matchCriteriaId":"016617B2-E181-4732-9F6D-107679371624"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.42:*:*:*:*:*:*:*","matchCriteriaId":"0865F74D-87A9-429A-BEF7-02E145DB4698"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.42:2:*:*:*:*:*:*","matchCriteriaId":"3D350B62-3894-4708-AB36-A53C95B529E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:httrack:3.42:3:*:*:*:*:*:*","matchCriteriaId":"E44DE8C5-FD50-410C-B3BA-3C4A4CA05173"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:*:2:*:*:*:*:*:*","versionEndIncluding":"3.42","matchCriteriaId":"D198D5DD-FCA6-4146-A128-6B08B60668F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.23:beta-2:*:*:*:*:*:*","matchCriteriaId":"4F24FD93-7F69-4AD2-A3C0-4A58E2427204"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.24:beta-2:*:*:*:*:*:*","matchCriteriaId":"C66E9B9A-7752-4ACB-8E70-15C5A5CF9FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.25:beta-2:*:*:*:*:*:*","matchCriteriaId":"5C50FA58-D0E8-4EF4-993B-BFFFBCD31A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.99:beta-2:*:*:*:*:*:*","matchCriteriaId":"9AA15A17-3D5B-431F-85F7-719D16C51C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.996:beta-2:*:*:*:*:*:*","matchCriteriaId":"23668163-813E-4A0A-8F5A-AFF8B72E641F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.997:beta-2:*:*:*:*:*:*","matchCriteriaId":"946CF2C4-AC27-4D6E-84CA-119BBDC586F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:0.998:beta-2:*:*:*:*:*:*","matchCriteriaId":"4B210EC5-5CE5-4C29-996C-0EB1145A359F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.00:*:*:*:*:*:*:*","matchCriteriaId":"28CB654C-5A0A-4AD2-A7E4-E5FBD41AD111"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.01:*:*:*:*:*:*:*","matchCriteriaId":"EA4F9850-1F0F-44E9-913A-97EB742E8510"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.02:*:*:*:*:*:*:*","matchCriteriaId":"DA284FCF-8AC4-4218-8115-FB41366F81DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.03:*:*:*:*:*:*:*","matchCriteriaId":"D6420DCD-72DE-4597-B961-DB06972F6A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.04:*:*:*:*:*:*:*","matchCriteriaId":"20F3C4AE-3824-4130-A84C-8358A7D621DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.10:*:*:*:*:*:*:*","matchCriteriaId":"CDB91A73-0E5A-4592-81F3-62A8A578DC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.10:b:*:*:*:*:*:*","matchCriteriaId":"D3DE24C3-34D2-409A-BD35-5D1A1C8C285E"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.10:c:*:*:*:*:*:*","matchCriteriaId":"4EFCAE76-7B19-4DF6-8700-24A2F36FBC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.10:d:*:*:*:*:*:*","matchCriteriaId":"821397D4-2184-45B6-A5E0-0518081E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.10:e:*:*:*:*:*:*","matchCriteriaId":"FD774253-68B9-450B-9C5F-802034C84A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.11:*:*:*:*:*:*:*","matchCriteriaId":"7282DC66-01CD-49F6-9FAD-70C8EA443687"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.15:*:*:*:*:*:*:*","matchCriteriaId":"5D6AA4B8-BE17-4DDD-8F7A-55543EE5306C"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.16:*:*:*:*:*:*:*","matchCriteriaId":"F5CFFF64-2974-4510-8B44-6C8C4752E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.16:b:*:*:*:*:*:*","matchCriteriaId":"6F3FA036-18A8-40DC-B8E4-7EC2977032FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.20:*:*:*:*:*:*:*","matchCriteriaId":"FE067177-2009-445E-A730-54575F8BA6D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.21:*:*:*:*:*:*:*","matchCriteriaId":"478DFB57-B1C8-4282-8526-5127DEE18EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.22:*:*:*:*:*:*:*","matchCriteriaId":"A7E08DB9-A53D-41E5-A3BB-442BB68B6ADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.23:*:*:*:*:*:*:*","matchCriteriaId":"AC5E2B53-73BC-4648-8F63-79631F1F1790"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.24:*:*:*:*:*:*:*","matchCriteriaId":"EEE21A00-F336-46E1-9521-B3BF57EBD291"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:1.30:*:*:*:*:*:*:*","matchCriteriaId":"DD92B8F5-F37F-4FF4-8BD6-7921976CF014"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:2.00:*:*:*:*:*:*:*","matchCriteriaId":"87BB4DCA-7F63-4AFF-9EFE-765CC88EAB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:2.01:*:*:*:*:*:*:*","matchCriteriaId":"74C2DFB0-8BD4-40F0-892A-BB03B2B79836"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:2.02:*:*:*:*:*:*:*","matchCriteriaId":"62AC39F4-3466-4B3B-80C1-C01A72F144A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:2.2:*:*:*:*:*:*:*","matchCriteriaId":"CA18C300-3602-4734-93BB-D8A32D01F34B"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.00:*:*:*:*:*:*:*","matchCriteriaId":"60A398DC-CDCF-4727-8983-07E343B9D1FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.01:*:*:*:*:*:*:*","matchCriteriaId":"2B3F0900-1592-45EE-BC34-68945653EAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.02:*:*:*:*:*:*:*","matchCriteriaId":"3EA680DA-A9DD-4B01-A036-CCD2C2752D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.03:*:*:*:*:*:*:*","matchCriteriaId":"D91198C2-64AD-420D-B527-CD98209FC1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.04:*:*:*:*:*:*:*","matchCriteriaId":"5A7DE353-7A3F-4BEF-AD85-4710BEC1B322"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.05:*:*:*:*:*:*:*","matchCriteriaId":"150EDF01-496C-4BEB-97FF-FE8FD424A399"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.06:*:*:*:*:*:*:*","matchCriteriaId":"F44A791C-B9C3-4298-9C7B-1AEEE28688AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.07:*:*:*:*:*:*:*","matchCriteriaId":"C2CB13FD-9E4B-4816-B246-0E26B62378E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.08:*:*:*:*:*:*:*","matchCriteriaId":"0E3F8937-6978-4DCD-ADAD-F95B235944CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.09:*:*:*:*:*:*:*","matchCriteriaId":"431E48C8-A9A1-4B3F-B1D0-D658CB44C1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.10:*:*:*:*:*:*:*","matchCriteriaId":"44BE5DB7-077A-4B91-9184-A81032B08692"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.15:*:*:*:*:*:*:*","matchCriteriaId":"4EC15A35-E68D-46DF-BAC7-3AB39CDE0D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.15:b:*:*:*:*:*:*","matchCriteriaId":"312C47AB-4AD2-4600-B0BD-7C34524F1522"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.16:2:*:*:*:*:*:*","matchCriteriaId":"616DB4E3-C1FB-4DFC-9F98-4510A468EC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.20:2:*:*:*:*:*:*","matchCriteriaId":"EA77BC82-49AF-4797-AF8A-BABD0671F31D"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.21:8:*:*:*:*:*:*","matchCriteriaId":"60D8BD06-43BF-496B-9A0F-5FF66BA0D3F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.22:3:*:*:*:*:*:*","matchCriteriaId":"B876EC8A-9A8D-42AB-B4F3-E9ECF3375831"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.23:*:*:*:*:*:*:*","matchCriteriaId":"DE2E7FB6-4A9E-431E-9504-6C8EC86A6B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.30:*:*:*:*:*:*:*","matchCriteriaId":"219939CD-3530-4CC5-8C2E-69162E692FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.31:*:*:*:*:*:*:*","matchCriteriaId":"47B23265-E4C3-415C-A083-61891EE3860E"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.32:*:*:*:*:*:*:*","matchCriteriaId":"D4A821F7-256E-4749-9294-A2627D40DB09"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.33:*:*:*:*:*:*:*","matchCriteriaId":"4196933D-B459-4AC9-A5A1-E6E8CC410572"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.40:*:*:*:*:*:*:*","matchCriteriaId":"53472D88-F355-48A3-BE7E-596EFC0F3727"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.40:2:*:*:*:*:*:*","matchCriteriaId":"F7A1751D-5C49-4996-8D5F-496774A8EA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.41:*:*:*:*:*:*:*","matchCriteriaId":"0BAF3263-D5F8-40F9-9A9C-2721225BC14B"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.41:2:*:*:*:*:*:*","matchCriteriaId":"722AB21A-96C6-4FD7-9297-F62B933D4203"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.41:3:*:*:*:*:*:*","matchCriteriaId":"CA434245-AC94-4A81-BF70-E359CB57265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:httrack:winhttrack:3.42:*:*:*:*:*:*:*","matchCriteriaId":"91E5F413-6040-4BF7-88AB-E08C7FCFCCFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31323/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31866","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1626","source":"cve@mitre.org"},{"url":"http://www.httrack.com/history.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30425","source":"cve@mitre.org"},{"url":"http://www.venustech.com.cn/NewsInfo/124/2032.Html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2221/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44167","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00707.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00711.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31323/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.httrack.com/history.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.venustech.com.cn/NewsInfo/124/2032.Html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2221/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00707.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00711.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3430","sourceIdentifier":"cve@mitre.org","published":"2008-07-31T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as SiOL Komunikator 1.3, allows remote attackers to execute arbitrary code via a large argument supplied to the BGColor method.  NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer."},{"lang":"es","value":"Desbordamiento de búfer del Control ActiveX CoVideoWindow.ocx 5.0.907.1 en Eyeball MessengerSDK, tal y como se utiliza con productos como SiOL Komunikator 1.3, permite a atacantes remotos ejecutar código arbitrariamente mediante un argumento largo proporcionado en el método BGColor. NOTA: esto podría ser una vulnerabilidad sólo en determinadas configuraciones no seguras de Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eyeball_networks:eyeball_messenger_sdk:5.0.907.1:*:*:*:*:*:*:*","matchCriteriaId":"E7032BC9-8F59-4E41-BEDB-F2029108373D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0807-exploits/siol-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44111","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0807-exploits/siol-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3431","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T19:41:00.000","lastModified":"2025-10-22T01:15:33.453","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Oracle VirtualBox Insufficient Input Validation Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\\\.\\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address."},{"lang":"es","value":"La función VBoxDrvNtDeviceControl del archivo VBoxDrv.sys de Sun xVM VirtualBox en versiones anteriores a la 1.6.4, utiliza el método de comunicación METHOD_NEITHER para IOCTLs, que no validad adecuadamente el búfer asociado con el objeto Irp, el cual permite a los usuario locales ganar privilegios abriendo el dispositivo \\\\.\\VBoxDrv y llamando a DeviceIoControl para enviar una dirección manipulada del kernel"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:virtualbox:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6.4","matchCriteriaId":"7DB4AD22-9324-4995-B386-5D09DD32E5B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31361","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4107","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020625","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://virtualbox.org/wiki/Changelog","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495095/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30481","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2293","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44202","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6218","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://virtualbox.org/wiki/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495095/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-3431","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2008-3432","sourceIdentifier":"secalert@redhat.com","published":"2008-10-10T10:30:03.043","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función mch_expand_wildcard en os_unix.c en Vim v6.2 y v6.3 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante metacaracteres del interprete de comandos en el nombre de los ficheros, como se ha demostrado por el caso de prueba netrw.v3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.2:*:*:*:*:*:*:*","matchCriteriaId":"464D5E9A-EB5A-47AB-8657-15A68AD30D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4F51CA-18C1-4043-B4E6-F1AD9D3C1346"}]}]}],"references":[{"url":"ftp://ftp.vim.org/pub/vim/patches/6.2.429","source":"secalert@redhat.com"},{"url":"ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32858","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33410","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/4","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/1","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30648","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0033","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455455","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44722","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11203","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5987","source":"secalert@redhat.com"},{"url":"ftp://ftp.vim.org/pub/vim/patches/6.2.429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3433","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"SpeedBit Download Accelerator Plus (DAP) anterior a 8.6.3.9 no verifica correctamente la autenticidad de actualizaciones, lo cual permite a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un caballo de troya, via a Trojan horse update, como se demuestra por el grado de daño y envenenamiento de la caché DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6","matchCriteriaId":"8323CD1D-3121-4F1B-B882-58BB036F00E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:8.0:*:*:*:*:*:*:*","matchCriteriaId":"076D0F92-12EC-421C-89D0-E5D673F2AF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:8.1:*:*:*:*:*:*:*","matchCriteriaId":"0CFDCCBA-B939-44E5-BF72-BA0ABAAA2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:8.5:*:*:*:*:*:*:*","matchCriteriaId":"B2D67A96-1402-4335-B9C8-4C83F8633BA7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-3434","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"Apple iTunes anterior a versión 10.5.1, no comprueba apropiadamente la autenticidad de las actualizaciones, lo que permite a los atacantes de tipo man-in-the-middle ejecutar código arbitrario por medio de una actualización de tipo caballo de troya, como es demostrado por el evilgrade y el envenenamiento de la caché  de DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"54BA0A48-E321-436A-8398-DB64C29CDC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8659A87-1197-4C3B-A076-90FE3A453205"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4E15C097-98DE-4217-8814-95B54CE418F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC4179C0-CA2C-42D7-AD72-A19668662A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1EB1098-87E1-45DC-BD44-2B374BAA758C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"49DD3B1C-1743-434B-B67F-A3C1B350059A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4E27E1D8-0303-4F91-B1B0-38C64A8F04F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F995CF65-E3DD-4C54-B3F5-417C6F75D930"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"44964DEC-DC35-4DCE-B28D-687348758163"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A8F1A117-8508-4274-99EA-D58F54EBBA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3C910CA4-5EA5-4507-BDE9-3E6C1434B666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4490461A-84C7-42C3-A61B-4E6EF5980B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D365C93F-D06C-4FB0-8192-A4E84B6B2F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*","matchCriteriaId":"C4B6A66A-AC5F-48E0-ABCE-68828207B106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*","matchCriteriaId":"071BFB1F-402B-4D8C-8155-671792AEDB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*","matchCriteriaId":"DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*","matchCriteriaId":"07040FC1-6BFE-4E8F-A089-1166404BE33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*","matchCriteriaId":"D6573035-D208-4C4C-98A4-A7BA26C6AB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B591AE1E-02DB-462A-B71F-48947525D232"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FCD0C29E-FB9F-41DE-968F-46DD0EA55003"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2276BED4-82F0-4F62-AA6F-7E1667F28E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"45D47548-1C4D-4368-99D1-929905DD6B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"28AE8D2D-63CA-4091-9D59-CE919EB1FD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"52A433A5-3EFF-405D-8285-97EC88857968"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT5030","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3435","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"LinkedIn Browser Toolbar 3.0.3.1100 y anteriores no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un caballo de troya, como se demuestra por el grado de daño y el envenenamiento de la caché DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkedin:browser_toolbar:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3.1100","matchCriteriaId":"9A3C2315-F880-4C7A-B0C9-E5E18391502B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3436","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"El proceso de actualización genérico GUP en Notepad++ anterior a 4.8.1 no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un Caballo de Troya, como se demuestra por el grado de daño y el envenenamiento de la caché DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"BD20274E-A5CF-4CDF-9650-E0C226556C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"D26D9397-425C-4844-9D65-86D83FA0C3A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"9BF70CA3-07B2-4D72-8159-AA0E08AC8140"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"20F5A549-B935-458D-9B7E-70B9522A226E"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"542CE153-5A1C-4CF5-AAB2-F7F533F3C6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"E9AA2E33-DD1F-4DD7-BB32-7E711FC75517"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"B1A89CD8-39CE-4767-A87A-08DD39918A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"B7515149-FE0F-4869-854B-3EF6507AA1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"86CB4D4C-B8F2-4417-A43A-A70E980DC8E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"BF55A051-505E-42F5-9D18-74A4450CBBF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"6723695D-8635-4312-91FC-2E069AE65607"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"738D683B-7987-4DE0-8A04-A6293D8859B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"4B64FFB6-29F2-4F5F-A4A0-C3C44A483269"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"C6FF2A61-5878-48C4-9706-F90E01504AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"A7F7D694-0194-42B5-B20A-48DBD8FC326A"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"B0A97257-2049-4AF6-878F-39FEFB80619B"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"06587347-AC11-4794-8278-14A091871E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9","matchCriteriaId":"4DD8F6D3-B0C4-42CA-AE56-A16AD02618F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"DD06586A-EE7E-48FF-8BD1-999ECAA1DE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"C08254FB-A557-46C3-8555-E4BCC478D768"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"3E83F664-1DF8-4A03-B28A-BCE1DB00BCDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3","matchCriteriaId":"F930FEED-59D7-4B44-89D4-6FFB3F71A6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"F70C8D3D-1DF7-440C-AFD3-123B17C22A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"6D672809-6352-46ED-AE24-2A5487C7321C"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"10DE0141-5C59-4744-B8E3-DB0808978314"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"EBF9ADF1-7C18-4BB5-89AC-C592FC02327A"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8","matchCriteriaId":"2E0980DA-B93E-4923-9133-22118045E745"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.9","matchCriteriaId":"196231AC-1DAA-4C9B-94AF-65BBC99D1FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"9616B6EB-922F-4854-A230-5A70D0072F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"33648DC0-DE61-455F-9144-789EDDA9DBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"AA6ACB6A-09F5-4AE5-AE31-D9EC64E50B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"A198B657-F94E-47AB-8F7D-5138CD72F4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.2","matchCriteriaId":"116275EC-7E19-45DB-96FE-9D59294386BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1","matchCriteriaId":"8C58EAF0-F55C-4C3F-82CC-2C7EEC662CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.2","matchCriteriaId":"D3EBB3B1-0356-4923-B3AA-1F3866890064"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"E5072039-1453-42B0-B25E-80D5B6A45DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"FA30E55E-D51D-4AD3-A152-A3A63E18060C"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"2B1E1A9E-3B2A-490D-9F1D-DD943D272019"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"7D2C0629-19FE-4E08-B94C-8A152F373719"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"D3EA6900-2C5F-4E06-A55F-0468557EF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:notepad\\+\\+:notepad\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7.2","matchCriteriaId":"1F14451D-6037-4B72-A83E-6D3FC5A923AE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3437","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"OpenOffice.org (OOo) anterior a 2.1.0 no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un Caballo de Troya, como se demuestra por el grado de daño y el envenenamiento de la caché DNS."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenOffice.org as shipped with Red Hat Enterprise Linux 3, 4, or 5. The updated Red Hat Enterprise Linux packages are not distributed via the openoffice.org update service, but rather via Red Hat Network, using the package manager capabilities to verify authenticity of updates.","lastModified":"2008-08-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E697B8A3-447B-4D7B-A02B-191119453CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45DD57AC-8CA4-48DB-90F9-2D7260AB7650"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C065AAB-58E3-4312-AD74-A3E103AC73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4B493F3-833A-47E9-AB60-BE2D635EF8AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020583","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3438","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"Apple Mac OS X no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un \r\nCaballo de Troya, como se demuestra por el grado de daño y el envenenamiento de la caché DNS."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.5.4","matchCriteriaId":"D610898B-DD52-460D-AA56-6108FE735015"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3439","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"SpeedBit Video Acceleration anterior a 2.2.1.8 no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un Caballo de Troya, como se demuestra por el grado de daño y el envenenamiento de la caché DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:speedbit_video_accelerator:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.0.7","matchCriteriaId":"3E106426-30AA-485D-8CFF-6C4632D4A560"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3440","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"Sun Java versión 1.6.0_03 y anteriores, y posiblemente versiones posteriores, no comprueba apropiadamente la autenticidad de las actualizaciones, lo que permite a los atacantes de tipo man-in-the-middle ejecutar código arbitrario por medio de una actualización de tipo caballo de Troya, como es demostrado por evilgrade y Envenenamiento de caché DNS."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Sun Java packages as shipped with Red Hat Enterprise Linux 4 Extras, or 5 Supplementary. The updated Red Hat Enterprise Linux packages are not distributed via the java.sun.com update service (which is only used for Windows version of Sun Java), but rather via Red Hat Network, using the package manager capabilities to verify authenticity of updates.","lastModified":"2008-08-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:03:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"5E058007-3515-4DCA-8B75-9EF968A0047D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A7CE9F51-E622-45B1-A4A6-28445BD39901"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:1.6.0:01:*:*:*:*:*:*","matchCriteriaId":"BCE41A38-36BA-4435-A84E-70CBCAC8CEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:1.6.0:02:*:*:*:*:*:*","matchCriteriaId":"EB872AA1-B0D1-45F3-B52C-75E41A6827EB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020584","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3441","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"Nullsoft Winamp anterior a 5.24 no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un Caballo de Troya, como se demuestra por el grado de daño y el envenenamiento de la caché DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndExcluding":"5.24","matchCriteriaId":"6C7E96AA-9632-4A5E-8BEA-9837D838CD0D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020582","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15225","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1020582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3442","sourceIdentifier":"cve@mitre.org","published":"2008-08-01T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning."},{"lang":"es","value":"WinZip anterior a 11.0 no verifica adecuadamente la autenticidad de las actualizaciones, lo cual permite a atacantes de tipo 'hombre en el medio' (man-in-the-middle) ejecutar código de su elección a través de la actualización de un Caballo de Troya, que se manifiesta en el grado de daño y el envenenamiento de la caché DNS.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2ACBE01-B77A-4D09-8FB3-D6365786C44F"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FDE7DCD6-90B3-4259-9BE6-B9F7A30A64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4088C545-249E-47AD-8BF8-A6A2E5B2BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.1:*:sr1:*:*:*:*:*","matchCriteriaId":"FD308C7B-E9F6-4874-965D-E4271CF360DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*","matchCriteriaId":"523ADB29-C3D5-4C06-89B6-22B5FC68C240"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:9.0:*:sr1:*:*:*:*:*","matchCriteriaId":"C79A7C70-F1CE-448B-B980-FB976609C48D"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:10.0:*:*:*:*:*:*:*","matchCriteriaId":"B4FD09AC-2C56-4DB1-B00A-903103B453AD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020581","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"cve@mitre.org"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3443","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick."},{"lang":"es","value":"El motor de expresiones regulares (regex.c) en Ruby 1.8.5 y anteriores, 1.8.6 a través de p286-1.8.6, 1.8.7 a través de 1.8.7-p71, y 1.9 a través de r18423 permite a atacantes remotos provocar una denegación de servicio (bucle infinito y caida) a través de múltiples peticiones largas a un socket de Ruby. Esta denegación de servicio esta relacionada con un fallo en la asignación de memoria, como se ha demostrado contra Webrick."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"46086C6A-9068-4959-BEE7-4D76BDEA3962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"16BDFA5C-35BE-4B7E-BD2D-C28B095F62E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"31160797-6920-4BA1-B355-1CCD1FCDBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:-9:*:*:*:*:*:*","matchCriteriaId":"BC306E85-66D8-4384-BBC3-92DC99C85FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675C37-39EF-41EF-9A53-3FCE4CF23820"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview2:*:*:*:*:*:*","matchCriteriaId":"39609530-0A81-481E-BDA4-5A98327EAD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview3:*:*:*:*:*:*","matchCriteriaId":"C19ADE91-4D9E-43ED-A605-E504B9090119"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview4:*:*:*:*:*:*","matchCriteriaId":"D89E3027-C2ED-4CC6-86F5-1B791576B6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"46F29ADA-E6DC-456F-9E63-C56C68EF7E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview1:*:*:*:*:*:*","matchCriteriaId":"57B1C113-682E-4F7D-BCF0-E30C446C4AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview2:*:*:*:*:*:*","matchCriteriaId":"4BAF9471-B532-4194-AB3C-5AA28432FF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview3:*:*:*:*:*:*","matchCriteriaId":"51BE9728-A5FE-486A-8DB9-711E46243132"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7AC1B910-C0FA-4943-92B1-597842E84015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview1:*:*:*:*:*:*","matchCriteriaId":"A78ECCA9-6F07-4A63-8BF7-8D40F2439552"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview2:*:*:*:*:*:*","matchCriteriaId":"14513719-4ED8-4EAB-B4D8-29849B868BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview3:*:*:*:*:*:*","matchCriteriaId":"92E3814D-BEEA-4E46-9CED-9D8059727D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"C80BDE13-9CBB-4A5F-9BF4-BEB907CED271"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p11:*:*:*:*:*:*","matchCriteriaId":"CA7D3F32-EFB7-4628-9328-36C6A306B399"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p113:*:*:*:*:*:*","matchCriteriaId":"D1A95E9F-AEC5-4AF9-B7D9-52DDDECB7E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p114:*:*:*:*:*:*","matchCriteriaId":"8C72828E-B572-470B-ACA6-55C34DBAA017"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p115:*:*:*:*:*:*","matchCriteriaId":"9328DE73-420B-4280-85A4-ABEFC4679676"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p12:*:*:*:*:*:*","matchCriteriaId":"0F382FBD-6163-4A5B-AEB3-A15A843329F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p2:*:*:*:*:*:*","matchCriteriaId":"4399121F-9BC7-4A67-8B0B-ED3B94A16D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p231:*:*:*:*:*:*","matchCriteriaId":"736348AD-4717-477B-BE8C-A0CAB37F3461"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p35:*:*:*:*:*:*","matchCriteriaId":"BFE61EB9-2544-4E48-B313-63A99F4F5241"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p52:*:*:*:*:*:*","matchCriteriaId":"9FA7A250-A388-4749-ABC0-06B02DBC3915"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview1:*:*:*:*:*:*","matchCriteriaId":"6122187F-2371-429A-971B-419B4ACE8E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview2:*:*:*:*:*:*","matchCriteriaId":"8A42425D-FF21-4863-B43D-EE100DBE6BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview3:*:*:*:*:*:*","matchCriteriaId":"06512108-020D-4D71-8F60-6AA2052D7D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview4:*:*:*:*:*:*","matchCriteriaId":"E2E152A5-F625-4061-AD8C-4CFA085B674F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview5:*:*:*:*:*:*","matchCriteriaId":"756F5247-658C-412C-ACBF-CBE987DF748A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*","matchCriteriaId":"DF02372D-FD0B-453F-821E-1E0BA7900711"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p111:*:*:*:*:*:*","matchCriteriaId":"0A6ED369-E564-4D4F-9E23-A8125194EAD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*","matchCriteriaId":"ACC0DB90-C072-4BCB-9082-94394F547D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p230:*:*:*:*:*:*","matchCriteriaId":"4D7ED62B-4D88-46A4-A0A3-BD37E66A5211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p286:*:*:*:*:*:*","matchCriteriaId":"072A0C3C-9F47-4DC7-96EA-7980B45429DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p36:*:*:*:*:*:*","matchCriteriaId":"FB0372E4-FE3E-49CD-AF55-E2E4518D34F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*","matchCriteriaId":"04579340-B53F-47B5-99C9-B647AAA3D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*","matchCriteriaId":"9D7F4162-108A-470B-8E6B-C009E8C56AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*","matchCriteriaId":"73AB0545-3D8D-4623-8381-D71DA44E3B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*","matchCriteriaId":"0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"52179EC7-CAF0-42AA-A21A-7105E10CA122"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0:r18423:*:*:*:*:*:*","matchCriteriaId":"D906EA97-7071-4CFA-84EF-EC82D813D7AE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32371","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32372","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33398","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4158","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1695","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0895.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30682","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021075","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44688","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9570","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/651-1/","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/691-1/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6239","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0895.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/691-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3444","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T10:59:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted but well-formed web page that contains \"a simple set of legitimate HTML tags.\""},{"lang":"es","value":"El componente de diseño de contenido de Mozilla Firefox 3.0 y 3.0.1, permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída de la aplicación) a través de una página web manipulada pero bien formada que contiene \"un conjunto de etiquetas HTML válidas\""}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this flaw a security issue. This flaw is not exploitable beyond causing the web browser to crash.","lastModified":"2008-08-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"}]}]}],"references":[{"url":"http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/","source":"cve@mitre.org"},{"url":"http://www.radware.com/newsevents/pressrelease.aspx?id=6459","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30486","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448564","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44169","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.radware.com/newsevents/pressrelease.aspx?id=6459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3445","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL commands via the location parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de phpMyRealty (PMR) 2.0.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F469BEE1-158A-477B-9EF5-F3F0441C62DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31302","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30484","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44131","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3446","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en inc/wysiwyg.php de LetterIt 2 permite a atacantes remotos incluir y ejecutar locales de su elección a través de .. (punto punto) en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:letterit:letterit:2:*:*:*:*:*:*:*","matchCriteriaId":"CE707BAE-8832-4909-ADE4-66E1D5FDF0B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30482","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44129","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3447","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets."},{"lang":"es","value":"El motor de exploración de F-Prot Antivirus 6.2.1 4252 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de archivos ZIP malformados, posiblemente relacionado con offsets inválidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:6.2.1.4252:*:*:*:*:*:*:*","matchCriteriaId":"CAC7A1F7-882C-4CE4-BA2B-2917632A9F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:scanning_engine:4.4.4.56:*:*:*:*:*:*:*","matchCriteriaId":"0059EC25-C88A-4236-98E5-0B8DF4A4421A"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2008/Jul/0569.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30461","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020612","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2283","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44134","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6174","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Jul/0569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3448","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.php en common solutions csphonebook 1.02, permite a atacantes remotos inyectar secuencias web o HTML de su elección a través del parámetro \"letter\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:common-solutions:csphonebook:1.02:*:*:*:*:*:*:*","matchCriteriaId":"A3828F3F-F771-4C53-9E97-71819826F22C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31359","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4102","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494971/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496788/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30485","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494971/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496788/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3449","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multiple IMAP connection requests to the same folder."},{"lang":"es","value":"MailEnable Professional 3.5.2 y Enterprise 3.52 permite a atacantes remotos provocar una denegación se servicio (caída) a través de múltiples peticiones de conexión IMAP de la misma carpeta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:3.52:*:enterprise:*:*:*:*:*","matchCriteriaId":"B8BAE96B-543A-4ECF-AA3C-E9D2237FB961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:3.52:*:professional:*:*:*:*:*","matchCriteriaId":"409A443D-3496-4AC1-AB6F-C2AB4ACD607D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31325","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mailenable.com/hotfix/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30498","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020610","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2287","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mailenable.com/hotfix/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3450","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service (panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo kernel namefs en Sun Solaris 8 hasta 10 permite a usuarios locales conseguir privilegios o provocar una denegación de servicio (caída) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31356","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31536","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020616","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237986-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30513","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44158","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237986-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3451","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile."},{"lang":"es","value":"PhpWebGallery 1.7.0 y 1.7.1, permite a usuarios utenticados remotamente con privilegios de notificador/consejero, obtener direcciones reales de e-mail de otros usuarios editando los perfiles de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CC5256C5-8612-4961-B813-D560D59E59EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"874E8A29-1530-4744-A466-05AC7E543EC5"}]}]}],"references":[{"url":"http://bugs.phpwebgallery.net/view.php?id=769","source":"cve@mitre.org"},{"url":"http://forum.phpwebgallery.net/viewtopic.php?id=13545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30431","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44101","source":"cve@mitre.org"},{"url":"http://bugs.phpwebgallery.net/view.php?id=769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.phpwebgallery.net/viewtopic.php?id=13545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3452","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter in a list_events action to mod.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el Módulo Calendar en eNdonesia 8.4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"loc_id\" en una acción list_events al mod.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endonesia:calendar_module:8.4:*:*:*:*:*:*:*","matchCriteriaId":"AD43A11C-F913-41E9-806A-A34623498984"},{"vulnerable":true,"criteria":"cpe:2.3:a:endonesia:endonesia:8.4:*:*:*:*:*:*:*","matchCriteriaId":"1B59F79F-D455-47AF-ADC7-BEA19C40B235"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4104","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30457","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44115","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6171","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3453","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and \"a few files.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en ImpressCMS 1.0 tienen un impacto y vectores de ataque desconocidos, relacionado a modules/admin.php y \"unos ficheros.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B9C1E64F-28A0-4663-AED3-A7D9334EEB0E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31259","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=616122","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44122","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=616122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3454","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the \"adm\" cookie value to 1."},{"lang":"es","value":"JnSHosts PHP Hosting Directory 2.0, permite a atacantes remotos evitar la introducción de credenciales y obtener acceso con privilegios administrativos estableciendo el valor \"adm\" de la cookie a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jnshosts:php_hosting_directory:2.0:*:*:*:*:*:*:*","matchCriteriaId":"87DB54B7-E816-442D-8B3F-EA284A39D50E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4105","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30444","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44110","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3455","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en include/admin.php in JnSHosts PHP Hosting Directory 2.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"rd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jnshosts:php_hosting_directory:2.0:*:*:*:*:*:*:*","matchCriteriaId":"87DB54B7-E816-442D-8B3F-EA284A39D50E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30428","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44108","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6160","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3456","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack."},{"lang":"es","value":"phpMyAdmin anterior a 2.11.8 no previene adecuadamente sus páginas con marcos (frames) que apuntan a otros dominios, los que puede facilitar a atacantes remotos llevar a cabo actividades de phishing o suplantación a través de un ataje de marcos en sitios cruzados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.7.0","matchCriteriaId":"CCE0DD38-2444-4E7C-86BB-B1650DFB0C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"784EF815-B20A-4D26-8FCA-04BCBAD65BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E6C869A-0307-40D9-85D6-05453B6BEA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"795B4F23-BA5E-466B-9FC3-C7A00A110774"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC1F099-04AC-4210-8477-07B21E087162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31263","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30420","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2226/references","source":"cve@mitre.org"},{"url":"http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44050","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2226/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3457","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments.  NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en setup.php de phpMyAdmin versiones anteriores a 2.11.8 permite a atacantes remotos asistidos por el usuario inyectar web script o HTML de su elección a través de argumentos de instalación manipulados.\r\nNOTA: esta cuestión sólo puede ser explotada en escenarios limitados en los cuales el atacante puede modificar config/config.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.7.0","matchCriteriaId":"CCE0DD38-2444-4E7C-86BB-B1650DFB0C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"784EF815-B20A-4D26-8FCA-04BCBAD65BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E6C869A-0307-40D9-85D6-05453B6BEA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"795B4F23-BA5E-466B-9FC3-C7A00A110774"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC1F099-04AC-4210-8477-07B21E087162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31263","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30420","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2226/references","source":"cve@mitre.org"},{"url":"http://yehg.net/lab/pr0js/advisories/XSS_inPhpMyAdmin2.11.7.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44052","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2226/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://yehg.net/lab/pr0js/advisories/XSS_inPhpMyAdmin2.11.7.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3458","sourceIdentifier":"cve@mitre.org","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read mail merge templates via a direct request to the wordtemplatedownload directory."},{"lang":"es","value":"Vtiger CRM versiones anteriores a 5.0.4 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos leer plantillas combinadas de mail a través de una petición directa al directorio wordtemplatedownload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.3","matchCriteriaId":"5BE467FF-870E-47A8-800D-C16FC260229C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28370","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=567189","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/11811","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_Release_Notes","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/40218","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27228","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/28370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=567189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/11811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_Release_Notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/40218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3459","sourceIdentifier":"secalert@redhat.com","published":"2008-08-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"The following events must take place for successful exploitation:\r\n1) the client has agreed to allow the server to push configuration directives to it by including \"pull\" or the macro \"client\" in its configuration file\r\n2) the client succesfully authenticates the server \r\n3) the server is malicious or has been compromised and is under the control of the attacker\r\n4) the client is running a non-Windows OS.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters."},{"lang":"es","value":"Una vulnerabilidad no especificada en OpenVPN versiones 2.1-beta14 hasta 2.1-rc8, cuando se ejecuta en sistemas que no son Windows, permite a los servidores remotos ejecutar comandos arbitrarios por medio de la configuración de directivas diseñadas (1) lladdr y (2) iproute, probablemente relacionadas con los metacaracteres de shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:beta-14:*:*:*:*:*:*","matchCriteriaId":"C6826F2C-9769-4F70-8121-988986C9DAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:beta-15:*:*:*:*:*:*","matchCriteriaId":"38CDC26A-2EA1-4FD1-BE82-09ABE335A778"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:beta-16:*:*:*:*:*:*","matchCriteriaId":"F4284CC6-B78D-478D-B815-3FB4D884A726"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_1:*:*:*:*:*:*","matchCriteriaId":"F972B6E6-0553-454E-BF58-107E7A9EC9E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_2:*:*:*:*:*:*","matchCriteriaId":"9DBF4843-5E4F-4C47-BBF8-4ADB45C422E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_3:*:*:*:*:*:*","matchCriteriaId":"61BB61B4-2769-4F59-875F-9269C551E386"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_4:*:*:*:*:*:*","matchCriteriaId":"DBD947CF-98BC-4C84-8149-B4EEFF1015AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_5:*:*:*:*:*:*","matchCriteriaId":"FE621907-2D6B-4558-A9B9-E98AAF236D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_6:*:*:*:*:*:*","matchCriteriaId":"B57458F3-B8F9-454E-98B1-9FA33ABDF0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_7:*:*:*:*:*:*","matchCriteriaId":"42F0E1FF-0863-418C-BD26-F3B18B257370"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.1:rc_8:*:*:*:*:*:*","matchCriteriaId":"B0E905D4-34F6-4ACD-8D86-0C9E29EDB282"}]}]}],"references":[{"url":"http://openvpn.net/index.php/documentation/change-log/changelog-21.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30532","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020626","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2316","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44209","source":"secalert@redhat.com"},{"url":"http://openvpn.net/index.php/documentation/change-log/changelog-21.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3460","sourceIdentifier":"secure@microsoft.com","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the \"WPG Image File Heap Corruption Vulnerability.\""},{"lang":"es","value":"El archivo WPGIMP32.FLT en Office 2000 SP3, XP SP3 y 2003 SP2; Office Converter Pack; y Works versión 8, de Microsoft, no analiza apropiadamente la longitud de un archivo de WordPerfect Graphics (WPG), que permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo WPG diseñado, también se conoce como la \"WPG Image File Heap Corruption Vulnerability\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"07D3F3E4-93FB-481A-94D9-075E726697C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6C8409-397E-40DF-A645-6409189D450D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=737","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/31336","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30600","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1020673","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6019","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121915960406986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-225A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3464","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.707","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka \"AFD Kernel Overwrite Vulnerability.\""},{"lang":"es","value":"El archivo afd.sys en el componente Ancillary Function Driver (AFD) en Windows XP SP2 y SP3 y Windows Server 2003 SP1 y SP2 de Microsoft, no comprueba apropiadamente la entrada enviada desde el modo de usuario al kernel, lo que permite a los usuarios locales alcanzar privilegios por medio de una aplicación diseñada, como es demostrado mediante el uso de punteros y longitudes diseñadas que omiten las restricciones previstas ProbeForRead y ProbeForWrite, también se conoce como \"AFD Kernel Overwrite Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*","matchCriteriaId":"CD264C73-360E-414D-BE22-192F92E5A0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"972ADDBC-5D6E-48D5-9DB7-44FE0539807D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:professional:sp3:*:*:*:*:*:*","matchCriteriaId":"F8F07665-1C59-438C-AFF8-58C76681CB6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*","matchCriteriaId":"E0BBA081-24D5-4990-882F-69CB05CC28CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://blogs.technet.com/swi/archive/2008/10/14/ms08-066-how-to-correctly-validate-and-capture-user-mode-data.aspx","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32261","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497375/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31673","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021053","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2817","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-066","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45578","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45582","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5825","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6757","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/swi/archive/2008/10/14/ms08-066-how-to-correctly-validate-and-capture-user-mode-data.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497375/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3465","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka \"GDI Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en una API en GDI en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008, permite a atacantes dependientes de contexto provocar una denegación de servicio o ejecución de código de su elección a través de un fichero WMF con un parámetro de tamaño de fichero mal formado, que no puede ser manejado adecuadamente por aplicaciones de terceros que emplean este API para las operaciones de copia, también conocido como \"GDI Heap Overflow Vulnerability.\""}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:x64:*:*:*:*:*:*","matchCriteriaId":"39956C56-FB39-485B-9BD6-B92807681676"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021365","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3383","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-071","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6062","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3466","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.740","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka \"HIS Command Execution Vulnerability.\""},{"lang":"es","value":"Microsoft Host Integration Server (HIS) 2000, 2004 y 2006 no limita el acceso RPC a funciones administrativas, lo que permite a atacantes remotos evitar la autentificación y ejecutar código de su elección mediante un mensaje SNA RPC, también conocido como \"HIS Command Execution Vulnerability (Vulnerabilidad de Ejecución de Comandos HIS)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2000:*:*:*:*:client:*:*:*","matchCriteriaId":"8B33F8D8-DCA9-4AD7-A2EE-2E147C0B22BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2000:*:sp2:*:*:server:*:*:*","matchCriteriaId":"3735842E-8460-47DF-80CE-07A1B5B7B2BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2004:*:*:*:*:client:*:*:*","matchCriteriaId":"F36B2527-D82F-4473-988D-64C2222726AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2004:*:*:*:*:server:*:*:*","matchCriteriaId":"0BE2E52C-FEC4-46E4-9466-DFA925798DA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2004:*:sp1:*:*:server:*:*:*","matchCriteriaId":"D9518CB8-38F4-4E11-A652-D2784CBE0F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2006:*:*:*:*:*:*:x64:*","matchCriteriaId":"7F919C01-85B1-4E0D-BCEF-EDF411814436"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:host_integration_server_2006:*:*:*:*:*:*:x86:*","matchCriteriaId":"9EE996C0-B973-4584-AA99-2A7832C5F85E"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32233","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31620","source":"secure@microsoft.com","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021043","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2810","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3471","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.757","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a BIFF file with a malformed record that triggers a user-influenced size calculation, aka \"File Format Parsing Vulnerability.\""},{"lang":"es","value":"Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 y SP3, y 2007 Gold y SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac no asigna memoria adecuadamente cuando carga objetos Excel durante el análisis del formato de fichero de la hoja de cálculo Excel, lo cual permite a atacantes remotos ejecutar código de su elección a través de ficheros BIFF manipulados, también conocido como \"Vulnerabilidad de Análisis de Formato de Fichero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:-:*:*:*:*:*:*","matchCriteriaId":"BB7D84EE-5AF2-44AF-AFA1-7BB555AA0B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:-:*:*:*:*:*:*:*","matchCriteriaId":"EEAAF38A-FE97-40FC-9BBF-763785853DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:-:*:*:*:*:*:*","matchCriteriaId":"1F005DF3-BA80-49D0-B2B1-06DFD74ED9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*","matchCriteriaId":"0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*","matchCriteriaId":"421ACF1B-1B21-4416-98ED-BAA5C210EAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:-:*:*:*:*:*:*","matchCriteriaId":"7C150805-6157-43E3-A913-E021F97E7F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*","matchCriteriaId":"4BC69733-551E-4535-B851-4A3EF71E98CD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32211","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31705","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021044","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2808","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-068/","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45579","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45581","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5750","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-068/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3472","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.770","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka \"HTML Element Cross-Domain Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 6 y 7 no determina correctamente el dominio o zona de seguridad original de un script, lo que permite a un atacante remoto eludir la política de seguridad establecida para los dominios cruzados, y ejecutar código de su elección u obtener información privilegiada a través de un documento HTML preparado para ello, también conocido como \"HTML Element Cross-Domain Vulnerability\" (vulnerabilidad de elemento cruzado en HTML)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31615","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31654","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021047","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45558","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12364","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3473","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.803","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka \"Event Handling Cross-Domain Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v6 y v7 no determina de forma adecuada el dominio o zona de seguridad del origen de la secuencia de comandos web, lo que permite a atacantes remotos saltar la política de seguridad de dominios cruzados implementada, y ejecutar código arbitrario u obtener información sensible mediante un documento HTML modificado, también conocido como \"vulnerabilidad de dominios cruzados en el manejo de eventos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7B311834-DF02-4F7A-B960-E4C1C7519A39"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:gold:*:*:professional:*:x64:*","matchCriteriaId":"05C8A2ED-9B33-49C9-BA33-2F3F70441BE7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7B311834-DF02-4F7A-B960-E4C1C7519A39"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:itanium:*","matchCriteriaId":"ED5ADA49-C463-4C85-B9BD-CFEE57417066"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:x64:*:*:*:*:*","matchCriteriaId":"E8000F58-DF1C-464C-A14B-783CDC00E781"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:x86:*:*:*:*:*","matchCriteriaId":"1DFCE172-A45F-4CED-AB56-D92DE2EF5B98"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:gold:*:*:*:*:*:*","matchCriteriaId":"0F4B7FB1-355B-47BB-8EED-A398DCF4DE02"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:gold:*:*:*:*:x64:*","matchCriteriaId":"64D983E0-7733-4D63-B680-0AABE30D074D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7211B5C5-6B6E-4A33-88BC-1D64CD684204"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:gold:*:*:professional:*:x64:*","matchCriteriaId":"05C8A2ED-9B33-49C9-BA33-2F3F70441BE7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31616","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021047","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45562","source":"secure@microsoft.com","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"secure@microsoft.com","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13255","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3474","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.817","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka \"Cross-Domain Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 6 y 7 no determina apropiadamente el dominio o zona de seguridad de origen de una secuencia de comandos (script) web, lo cual permite a atacantes remotos evitar políticas de seguridad de dominios cruzados intencionadas y obtener información sensible a través de un documento HTML manipulado, también conocido como \"Vulnerabilidad de Revelación de Información en Dominios Cruzados\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021047","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45854","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13299","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3475","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.833","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 6 no maneja adecuadamente errores asociados con accesos a un objeto que ha sido (1) inicializado incorrectamente o (2) borrado, lo cual permite a atacantes remotos ejecutar código de su elección a través de un documento HTML manipulado, también conocido como \"Vulnerabilidad de Corrupción de Memoria no iniciada\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:-:*:*:*:*:*:*","matchCriteriaId":"0C69B5E6-D1AF-46F1-8AE6-DD5D4E3D9160"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:*","matchCriteriaId":"8856A97B-4C43-45E5-B1DB-89EB9C350265"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*","matchCriteriaId":"18420EC8-633E-4AED-B33F-5A3C673C396D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:*","matchCriteriaId":"8856A97B-4C43-45E5-B1DB-89EB9C350265"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:*","matchCriteriaId":"18420EC8-633E-4AED-B33F-5A3C673C396D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html","source":"secure@microsoft.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/archive/1/497380/100/0/threaded","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31617","source":"secure@microsoft.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021047","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-069/","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45563","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/archive/1/497380/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-069/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3476","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.863","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka \"HTML Objects Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 5.01 SP4 y 6 no gestiona correctamente los errores asociados con el acceso a memoria no inicializada, lo que permite a atacantes remotos ejecutar código de su elección mediante un documento HTML, también conocido como \"HTML Objects Memory Corruption Vulnerability (Vulnerabilidad de Corrupción de Memoria de Objetos HTML)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/31618","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021047","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45564","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13344","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3477","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.880","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka \"Calendar Object Validation Vulnerability.\""},{"lang":"es","value":"Microsoft Excel 2000 SP3, 2002 SP3 y 2003 SP2 y SP3 no valida correctamente los datos en la caché VBA Performance, lo que permite a atacantes remotos ejecutar código de su elección mediante un archivo Excel manipulado, también conocida como \"Calendar Object Validation Vulnerability (Vulnerabilidad de Validación de Objeto Calendario)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=746","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32211","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31702","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021044","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2808","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45566","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45581","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5870","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3479","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.910","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka \"Message Queuing Service Remote Code Execution Vulnerability.\""},{"lang":"es","value":"El servicio Microsoft Message Queuing (MSMQ) en Microsoft Windows 2000 SP4 no valida correctamente los parámetros a string APIs, lo que permite a atacantes remotos ejecutar código de su elección mediante una llamada RPC manipulada que desborda una \"petición de montículo\" también conocida como \"Message Queuing Service Remote Code Execution Vulnerability (Vulnerabilidad de Ejecución de Código Remoto en essage Queuing Service)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-07","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32260","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31637","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021052","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2816","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45537","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45538","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998","source":"secure@microsoft.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-08-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3480","sourceIdentifier":"cve@mitre.org","published":"2008-08-29T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Print Wizard, allows remote attackers to execute arbitrary code via a long mainurl parameter."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en en control ActiveX Anzio Web Print Object (WePO) 3.2.19 y 3.2.24, como los usados en Anzio Print Wizard, permite a atacantes remotos ejecutar código arbitrario a través de un parámetro mainurl largo.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anzio:print_wizard:3.2.19:*:personal:*:*:*:*:*","matchCriteriaId":"1D51EC2D-0FF7-479D-804F-5EAFB7BF70CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:anzio:print_wizard:3.2.19:*:server:*:*:*:*:*","matchCriteriaId":"072383AC-812A-4B97-BD34-1D45096AB13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:anzio:web_print_object:3.2.19:*:*:*:*:*:*:*","matchCriteriaId":"D632CDC8-4650-4F3B-9700-01AEEC2ED982"},{"vulnerable":true,"criteria":"cpe:2.3:a:anzio:web_print_object:3.2.24:*:*:*:*:*:*:*","matchCriteriaId":"7C7BD172-5483-4375-8D2C-43A5ED9ED42E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31554","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4197","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/anzio-web-print-object-buffer-overflow","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495630/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30545","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2417","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/anzio-web-print-object-buffer-overflow","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495630/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3481","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"as per vendor link: http://coppermine-gallery.net/\r\n\"The development team is releasing a security update for Coppermine in order to counter a recently discovered injection vulnerability. It is important that all users who run version cpg1.4.18 or older update to this latest version as soon as possible.\" CVSS score based on this information.","cveTags":[],"descriptions":[{"lang":"en","value":"themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message."},{"lang":"es","value":"themes/sample/theme.php en Coppermine Photo Gallery (CPG) 1.4.18 y versiones anteriores que permite a los atacantes remotos obtener información sensible a través de peticiones directas, que revelan la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.18","matchCriteriaId":"18597B1E-61F4-4BBA-90B5-5B5F5BF78B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E358276F-157E-4D98-9055-061E6F2F2948"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A1831F9-4B4A-4226-B219-B3AFF06FFDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C457C25-AF6B-4F67-BD3B-83361A48CDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"808B8E20-BE09-4FC2-BC73-2F10261E82B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2003E2A5-A902-45A1-9189-15B956976ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A53D1BF-C884-40F9-9D46-9CCD9ADC183E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"34A35889-023F-4305-A5A8-F7A8D3409172"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E51F81AC-6AE1-40E5-B2CB-34E1B5985C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*","matchCriteriaId":"8A465AB3-1426-4966-87DF-A1FA3FCCE5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*","matchCriteriaId":"E9D7FF03-F2A7-4014-BF17-8393F5220AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC98C672-0D2E-4A78-A206-CC44A5A6E14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"60C520A7-686D-40AB-A41B-EDDF3EC86819"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4AFF3F0F-88BF-4EB4-8DCA-4D46D181FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*","matchCriteriaId":"196B664C-C400-4770-893B-E327D40CD525"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A3BF818D-86E5-4886-9447-FE70CBEAEA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B94FCD31-EECA-4323-A63A-554A2AFB3DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"C1C70B0A-C8C8-449E-A8C4-A595B7404DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E4388EF8-6825-4E8A-B9F2-7D2F69A95865"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"27D59D3A-F55C-4403-BD43-35162EC0E4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"13B39376-C331-45B5-95AD-C3DD56BBF687"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"FF3DFE45-B65A-46FB-8584-A338143E4F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"15516E4B-8B16-4B81-8881-2E358144BA79"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"ECEE8E75-36D2-4F99-967E-52FDFA150E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"B8946662-2C1C-4113-977F-5D7FC3161565"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C2F59212-9725-4926-9905-28C8C64A3A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"A5FB7773-BBCA-4825-8489-7EE43D6BD312"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"71058CB9-81CA-4F5B-8204-F21C906A71EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"197EF2C1-ADCF-4596-B5A0-689C10720906"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"EB199205-489B-4BB7-81A4-94D45E19349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"BFD299AB-0B18-472B-B99E-C0D585AA21CE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4108","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6178","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3482","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en la característica de la página de error en Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, y BB-HCM515, que permite a los atacantes remotos insertar arbitrariamente una secuencia web o HTML a través de vestores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bb_hcm511:3.20:r01:*:*:*:*:*:*","matchCriteriaId":"1784F9D9-91D9-4DF2-913F-A6CC26779B68"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bb_hcm515:3.20:r01:*:*:*:*:*:*","matchCriteriaId":"66CA6447-D421-45FB-AC4C-E001CE69EE26"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bb_hcm527:3.30:r01:*:*:*:*:*:*","matchCriteriaId":"8B1C32D8-DE82-4091-8302-BA2FAA95AF1C"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bb_hcm531:3.20:r01:*:*:*:*:*:*","matchCriteriaId":"C0B7EF08-3F63-4CF4-9FCF-5147099CD361"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bb_hcm580:3.21:r00:*:*:*:*:*:*","matchCriteriaId":"B770DE45-5284-4F7D-A51B-B5686E5A729F"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bb_hcm581:3.21:r00:*:*:*:*:*:*","matchCriteriaId":"C66594EF-52EA-45FD-A917-ACAEB460EC3F"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bl_c111:3.14:r02:*:*:*:*:*:*","matchCriteriaId":"CDF71D46-6B95-4C59-A4A0-31E0C681AE27"},{"vulnerable":true,"criteria":"cpe:2.3:h:panasonic:bl_c131:3.14:r03:*:*:*:*:*:*","matchCriteriaId":"D26C5316-22E7-46DB-9FB0-DA655C5622A0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN33706820/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html","source":"cve@mitre.org"},{"url":"http://panasonic.net/pcc/support/netwkcam/support/info_xss.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2257/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44118","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN33706820/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://panasonic.net/pcc/support/netwkcam/support/info_xss.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2257/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3483","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error messages in the \"/admin.aspx - System Log\" page."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en ScrewTurn Wiki 2.0.29 y 2.0.30, que permite a los atacantes remotos insertar arbitrariamente una secuencia de comandos web o HTML a través de mensajes de error en la página \"/admin.aspx -  System Log\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:screwturn:screwturn_wiki:2.0.29:*:*:*:*:*:*:*","matchCriteriaId":"9EBEA4CE-DA5D-484E-A9D2-E8B2666C906A"},{"vulnerable":true,"criteria":"cpe:2.3:a:screwturn:screwturn_wiki:2.0.30:*:*:*:*:*:*:*","matchCriteriaId":"320B2C9E-1F59-4842-85A6-6570F8B8EA03"}]}]}],"references":[{"url":"http://secunia.com/advisories/31242","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.portcullis.co.uk/281.php","source":"cve@mitre.org"},{"url":"http://www.screwturn.eu/Wiki.ashx#History_2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30429","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.portcullis.co.uk/281.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.screwturn.eu/Wiki.ashx#History_2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3484","sourceIdentifier":"cve@mitre.org","published":"2008-08-05T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en eStoreAff 0.1, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro cid en una acción showcat a index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:estoreaff:estoreaff:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C46B78E-D895-454A-BBB2-7E76F6C70242"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30502","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44166","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6187","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3485","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en Citrix MetaFrame Presentation Server permite a usuarios locales conseguir privilegios a través de un icabar.exe malicioso colocado en una ruta de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_presentation_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"8C699349-4874-4DBE-BF58-BD41058F00F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"00BAE3AC-0D2A-4C4B-8BAF-6FB2D6177FB4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4110","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494952/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30446","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44490","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494952/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3486","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"http://secunia.com/advisories/31295:\r\n\"Successful exploitation requires that \"Character encoding\" is set to \"Unicode (recommended) (utf-8)\", which is the default value.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang part of serialized data in an _data cookie."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función user_get_profile de include/functions.inc.php en Coppermine Photo Gallery (CPG) 1.4.18 y versiones anteriores, cuando el conjunto de caracteres es utf-8, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en la parte lang de series de datos en una cookie an_data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.18","matchCriteriaId":"18597B1E-61F4-4BBA-90B5-5B5F5BF78B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E358276F-157E-4D98-9055-061E6F2F2948"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A1831F9-4B4A-4226-B219-B3AFF06FFDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C457C25-AF6B-4F67-BD3B-83361A48CDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"808B8E20-BE09-4FC2-BC73-2F10261E82B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2003E2A5-A902-45A1-9189-15B956976ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A53D1BF-C884-40F9-9D46-9CCD9ADC183E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"34A35889-023F-4305-A5A8-F7A8D3409172"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E51F81AC-6AE1-40E5-B2CB-34E1B5985C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b:*:*:*:*:*:*","matchCriteriaId":"8A465AB3-1426-4966-87DF-A1FA3FCCE5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.2.1:b-nuke:*:*:*:*:*:*","matchCriteriaId":"E9D7FF03-F2A7-4014-BF17-8393F5220AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC98C672-0D2E-4A78-A206-CC44A5A6E14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"60C520A7-686D-40AB-A41B-EDDF3EC86819"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4AFF3F0F-88BF-4EB4-8DCA-4D46D181FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.1:beta:*:*:*:*:*:*","matchCriteriaId":"196B664C-C400-4770-893B-E327D40CD525"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A3BF818D-86E5-4886-9447-FE70CBEAEA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B94FCD31-EECA-4323-A63A-554A2AFB3DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"C1C70B0A-C8C8-449E-A8C4-A595B7404DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E4388EF8-6825-4E8A-B9F2-7D2F69A95865"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"27D59D3A-F55C-4403-BD43-35162EC0E4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"13B39376-C331-45B5-95AD-C3DD56BBF687"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"FF3DFE45-B65A-46FB-8584-A338143E4F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"15516E4B-8B16-4B81-8881-2E358144BA79"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"ECEE8E75-36D2-4F99-967E-52FDFA150E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"B8946662-2C1C-4113-977F-5D7FC3161565"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C2F59212-9725-4926-9905-28C8C64A3A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"A5FB7773-BBCA-4825-8489-7EE43D6BD312"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"71058CB9-81CA-4F5B-8204-F21C906A71EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"197EF2C1-ADCF-4596-B5A0-689C10720906"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"EB199205-489B-4BB7-81A4-94D45E19349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"BFD299AB-0B18-472B-B99E-C0D585AA21CE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31295","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30480","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44133","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3487","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en profile.php de PHPAuction GPL Enhanced 2.51 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauctions:phpauction_gpl_enhanced:2.51:*:*:*:*:*:*:*","matchCriteriaId":"F1BD2FBF-B0DC-4BCE-A24C-E48C2259051D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30501","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44239","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6182","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3488","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especifada en Novell iManager versiones anteriores a 2.7 SP1 (2.7.1) permite a atacantes remotos borrar Plug-in Studio creado por Property Book Pages a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"83287853-0215-4B83-BF57-D1AEB247FB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.5:*:*:*:*:*:*:*","matchCriteriaId":"52BE3EE2-E5C2-4C82-BA81-1E0B0D7C5F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.5:ir3:*:*:*:*:*:*","matchCriteriaId":"3FAF0FEB-CFC0-4E75-9D8E-9EBF77594C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BC7879DA-7878-461B-BCA5-2232C6F9CCD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C8E5445B-A87D-44D8-BB24-592FB78ADEC3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31333","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5031820.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30497","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020611","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5031820.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3489","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in checkCookie function in includes/functions.inc.php in PHPX 3.5.16 allows remote attackers to execute arbitrary SQL commands via a PXL cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en checkCookie function de includes/functions.inc.php en PHPX 3.5.16 permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cookie PXL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"C40BACBB-64E9-490C-84DA-FF07A4AB6C4C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4112","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30478","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44240","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6176","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3490","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mail_id parameter in a veiw action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en members/mail.php de E-topbiz Online Dating 3 1.0 permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro mail_id en una acción veiw."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:online_dating:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8DE37A6-D2EF-4B8B-8057-4752BB90867C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31346","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4113","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44165","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6184","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3491","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en go.php de Scripts24 iPost 1.0.1 y iTGP 1.0.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción report."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts24:ipost:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"981BDDB5-7764-4A11-A3F4-32BD7E10A7AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:scripts24:itgp:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4D92CB2F-C3EE-4D22-8442-72633D489FCE"}]}]}],"references":[{"url":"http://osvdb.org/47333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31345","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30505","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44175","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44176","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6185","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6186","source":"cve@mitre.org"},{"url":"http://osvdb.org/47333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3492","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"America's Army (aka AA or Army Game Project) 2.8.3.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICE_MAX_CHATTERS."},{"lang":"es","value":"America's Army (también conocido como AA o Army Game Project) 2.8.3.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida del demonio) a través de un paquete UDP manipulado, posiblemente implicando un valor VoiceIndex que esta fuera del rango especificado por VOICE_MAX_CHATTERS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.3.1","matchCriteriaId":"2B700E5A-E29B-4E21-942D-8680E2C4AD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"619B9FA1-1E4A-42FA-A7E2-B5733096C109"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.0.1:b:*:*:*:*:*:*","matchCriteriaId":"7FBCFE3C-F61E-4099-856A-5074B4B51194"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"94B9D5EE-A79E-4CCE-8E0E-1A4D3E924880"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"32E643DC-7B02-4117-999E-CE56271EA27B"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"535E700E-09B1-4064-BB2A-D40A2B48325A"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"72A9D353-43C2-4A40-90EF-7E353B116BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BA446BC7-F056-4DFC-ADFA-AE93B17B0BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"011C0758-1244-46B1-8A46-7B69F5ABF493"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5D440D0F-5B8F-4B3F-8A18-9D54D2DC74F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CD0C1BD4-AC19-43E3-9A25-B537C411B00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"87F63DE4-39DE-43E7-A24F-E366599605DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"168AF860-DC1E-4889-B532-9668BB21C9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.0.0:a:*:*:*:*:*:*","matchCriteriaId":"29D5B947-6C7B-4A92-9CF5-598FA7CD8068"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D0CACFEC-7DD6-47A9-96AB-DF046768038D"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"25B736BD-8D73-4BBB-B8EE-53C5681986D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E9DDD0F6-0B52-496C-8A95-6CDC0541B803"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8E217BB-DACA-4543-8A82-2208A612963C"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDE19033-3067-42DD-AA40-CB10DD209CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4F725A5B-0B5A-4AC3-9FBA-311F9F876E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EA2B50D5-84EB-4A2F-88D0-312250D62FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"9CD0E63F-309B-4076-B18C-161DAD6FD8A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"348FF8C3-96DE-4189-AE48-1E0858A95F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"4C6C4354-25D8-4154-9407-3413D0BD9B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E7A4E6-60FC-4255-B084-02E5B7A992B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:americasarmy:america\\'s_army:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BAB02DC9-2FC3-4693-95CE-7DC288257FF1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/armynchia-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/armynchia.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495061/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30519","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44152","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/armynchia-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/armynchia.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495061/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3493","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application crash) via a crafted frame buffer update packet."},{"lang":"es","value":"vncviewer.exe de RealVNC Windows Client 4.1.2.0 permite a servidores VNC remotos provocar una denegación de servicio (caída de aplicación) a través de un frame buffer  de paquetes de actualización."}],"vendorComments":[{"organization":"Red Hat","comment":"This flaw does not affect the Linux version of RealVNC as shipped in Red Hat Enterprise Linux.","lastModified":"2008-08-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc_windows_client:4.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0F48B867-CA7B-4C4D-AEA3-2EBBCA424216"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30499","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44218","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3494","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host header with additional leading text placed before the real Host header."},{"lang":"es","value":"8e6 R3000 Internet Filter 2.0.12.10 permite a atacantes remotos evitar restricciones previstas a través de una cabecera Host HTTP extra con texto adicional colocado antes que la cabecera Host real."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:8e6:r3000_internet_filter:2.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"75891E57-3807-48F9-AC4D-8A9C0A9D5D29"}]}]}],"references":[{"url":"http://secunia.com/advisories/31391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495117/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30541","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495117/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3495","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en kategori.asp de Pcshey Portal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro kid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:pcshey_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"35D4BF11-F00E-4186-A3E1-0FFDD6D397A5"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30534.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30534","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44213","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30534.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3496","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors."},{"lang":"es","value":"Desbordamiento de búfer en format descriptor parsing en la función uvc_parse_format de drivers/media/video/uvc/uvc_driver.c en uvcvideo de la implementación video4linux (V4L)  de Linux kernel versiones anteriores a 2.6.26.1 tiene un impacto y vectores de ataque desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.\n\nThe uvcvideo driver was first added in kernel packages update RHSA-2009:0225 in Red Hat Enterprise Linux 5.3, and it already contained a fix for this flaw.","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.26.1","matchCriteriaId":"2138DF1C-6DC2-415E-9C5C-A0CAF70A220E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2008/7/30/655","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30514","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44184","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2008/7/30/655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3497","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pages.php de MyPHP CMS 0.3.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphp_cms:myphp_cms:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DAD86A0C-8C2C-4E9F-921D-595A0C264B75"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29940","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1953/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43358","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5937","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1953/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3498","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente nBill (com_netinvoice) 1.2.0 SP1 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción orders de index.php.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netshinesoftware:com_netinvoice:1.2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"767DBB2F-C810-45A5-B4D0-D57E4F82AECE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://secunia.com/advisories/30752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4114","source":"cve@mitre.org"},{"url":"http://www.nbill.co.uk/forum-smf/index.php/topic%2C716.0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29951","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1948/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43369","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nbill.co.uk/forum-smf/index.php/topic%2C716.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1948/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3499","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in \"a page in the workarea folder\" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en \"una página en la carpeta workarea\" en Ektron CMS400.NET 7.00 hasta 7.04 y 7.50 hasta 7.52 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.00:*:*:*:*:*:*:*","matchCriteriaId":"35694365-F7E4-4FF0-A99E-87A7A8B08EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.01:*:*:*:*:*:*:*","matchCriteriaId":"D4C5BF04-66FE-444F-8104-C76E68CC32AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.02:*:*:*:*:*:*:*","matchCriteriaId":"88831F1F-6734-4964-9C35-BC3C17A9386A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.03:*:*:*:*:*:*:*","matchCriteriaId":"F8139DE1-56AB-4C0A-8939-A5D997DCB9AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.04:*:*:*:*:*:*:*","matchCriteriaId":"C7F1BC7A-0F81-4847-9F55-26C42D45ACCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.50:*:*:*:*:*:*:*","matchCriteriaId":"562C8C2B-C5B4-45C6-8A94-3E60A7C755DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.51:*:*:*:*:*:*:*","matchCriteriaId":"CD9B496C-5071-47A4-A1B5-25EBBA3386D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.52:*:*:*:*:*:*:*","matchCriteriaId":"5B9D524D-24AF-4CAB-84DA-EEC36B396EE2"}]}]}],"references":[{"url":"http://dev.ektron.com/kb_article.aspx?id=18294","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/30858","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44488","source":"cve@mitre.org"},{"url":"http://dev.ektron.com/kb_article.aspx?id=18294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/30858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3500","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via crafted Taxonomy terms."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Suggested Terms 5.x versiones anteriores a 5.x-1.2 para Drupal permite a usuarios remotos autenticados inyectar web script o HTML a través de términos Taxonomy manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:suggested_terms_module:5:*:*:*:*:*:*:*","matchCriteriaId":"457D8A88-1E1D-4D2F-B6E8-1E0A42DE0D18"}]}]}],"references":[{"url":"http://drupal.org/node/274919","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30846","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29953","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1931/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43363","source":"cve@mitre.org"},{"url":"http://drupal.org/node/274919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1931/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3501","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the WebAccess simple interface in Novell Groupwise 7.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la interfaz simple WebAccess de Novell Groupwise 7.0.x permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A9FBB457-FDC0-485F-951A-C0A7661A92B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8661AFFB-5CAF-4D44-A617-E0330C764BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"CF66EFEE-DAB2-4455-96F2-50D3E9456485"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"}]}]}],"references":[{"url":"http://secunia.com/advisories/30839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028200.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028303.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29922","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020359","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1929/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028200.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028303.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1929/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3502","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service (CPU or memory consumption) via unspecified vectors related to the Devel::StackTrace module for Perl."},{"lang":"es","value":"Vulnerabilidad no especificada en Best Practical Solutions RT 3.0.0 hasta 3.6.6 permite a usuarios remotos autenticados provocar una denegación de servicio (agotamiento de CPU o memoria) a través de vectores no especificados relacionados con el módulo Devel::StackTrace de Perl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F451959A-5305-4210-977B-6B396BC0A4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BA418CF5-49D6-4E0E-A1B5-8CB23752989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8E238F87-8D8C-4E62-A8F0-3DB9EFDB8328"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3FD8A7EF-5DB8-40C6-9124-A97A23B3EA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2AD553B8-8495-47E5-A543-4DC963B3511A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"28ADB191-4787-4FDB-B70A-F4C8BDF0F4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2772389A-9BCD-4B13-88C8-75BC64E40AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B1F9D05F-C86D-40D8-A7D9-5448918B72DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"311485DA-5381-4EAD-AF58-B8C67373413A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2EAF6671-8C77-448B-BF29-E2CF51176CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B55D762D-A723-435C-8D80-F7230F1648D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"4CC63EDC-541E-445D-8B72-799E4184B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D5E6196E-4A90-4F64-BA99-A8E04A09D5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91D7CE86-3FCD-472E-BF01-31FFB36701BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"70B3F0B2-8C70-4046-AAA0-FBD344FE4DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCD0173D-F699-4864-8856-D1792BDA0F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC2E53-5DE8-4A31-9B8A-79335DFBAFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"404AFC5C-20B4-41E5-ACDE-56626D68AFEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F37D1380-965B-40E0-8A20-61FEA072B8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E101B0FE-499F-44D8-8B68-BB7FEE40D2B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"747D8CD1-EE12-48A4-A795-88BC66A8DA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5FDE201D-F31A-4738-B9AB-7BB11417990E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4D6ED4EC-F860-47BD-B699-551FB5DBF039"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E3398823-1813-4D7B-9EC9-74222A240051"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F98B7895-BDB3-477C-8B34-88BD3E02EAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1512169D-DCEF-4964-B05A-3DF19CDE8F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B427F5D4-ACD6-46E5-B94F-CA30330C6492"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E9B38C33-D680-4285-A849-E6CDA9F4802F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"646CFD82-15FE-48E4-83C9-E3E037E9F928"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57404A14-6E1C-4F3B-8120-75F1073A3E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3F40ED56-CDAC-40BB-A026-5D6A09DCB72C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"33C325D9-CB88-430F-B1AE-3544C7176398"}]}]}],"references":[{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2008-June/000158.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29925","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43337","source":"cve@mitre.org"},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2008-June/000158.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3503","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds, which allows remote attackers to obtain sensitive information (CS data)."},{"lang":"es","value":"RSSFromParent de Plain Black WebGUI versiones anteriores a 7.5.13 no restringe el acceso a la vista Collaboration System (CS) RSS Feeds, lo cual permite a atacantes remotos obtener información sensible (CS data)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"7A22F6EF-D9A8-4034-863C-D17657F5618B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"47D6653F-DB68-40D9-97E3-E4C85484981F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"FD5CD382-A5D9-4B46-AAC8-DD396F3DB675"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"14C4BB30-BD75-47CD-A0E7-60A8EFD81C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4238BB23-3946-4923-BC03-A2496F1356CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3FC79E2-BC35-4466-854C-E3B1B97ECFD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F4146F3C-1C1C-4E60-AA5C-F93B1F21F2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3DEC7399-E952-43F1-B617-527A8E4D950C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DED5481F-FE25-4EFE-AAF0-C297C1CB9225"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"589E19F3-52DA-4E6E-98BC-158C6F6DDEE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F10E4E0E-F4F2-4581-B885-C728D698BC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6F942AE8-EC93-4F8B-A38B-812C17D415F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"33251D40-52D4-46D7-856D-76E7CD83EA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F9B6E0B-1228-49DA-ADF7-5E5EBB924843"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D87B7B6E-805C-4642-A761-911224E0D657"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"37D6E300-C3BB-4F3C-8972-E1F1F7CFE131"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9AAB89E3-9C35-4E74-AEFC-234EFFED07C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5964BA52-31F6-417C-A192-BDDAFD254EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EB3B28CB-1984-4476-A26B-62B474657687"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F778765E-C994-4705-B6C2-DD19E12B1249"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0A36F03C-0801-4AF0-8769-130996591AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"806E3527-A5FA-4928-BCB9-104BB3E2FF78"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"788B8425-4A40-4247-8A14-CC6464F4C4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"963F18C2-FBAC-4104-B4B7-2FC3F5226B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C7A663C6-D218-4C7C-B548-519CFE699239"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FD5CDC9B-BA5B-4FB7-ADB2-0199BDC7D891"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FBEB9BB-ADF7-4B15-9315-10C2F0E3A91D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7C7C8146-20DE-4800-A6EF-924B29B65469"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1781CB6B-2B69-4B1D-9755-B24347F2C164"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8EDAACCC-61F3-47D7-92B0-AFADFFBBC09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CD435EE2-E745-4E7F-91D2-C48DDB3A0B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CE07E7ED-A775-45A1-97F0-AD6F91D57071"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EE90C2B1-BD76-457B-8BF1-15A2563775BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AC68B228-3599-4EEA-BE15-A5BACB54472C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F3E46CFF-E8A3-4C0B-B01F-352784F0D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"8D0AA167-E8D4-403C-8746-A1135DB96FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B3D2800D-C09A-4B7A-85E2-C2536F0C007E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AA4D1B7B-ACE5-4FDF-BF53-FE2BC5388AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A7E50722-C4F1-4FF4-A75E-A215FA85743C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EC8D29-C4E4-489A-AE5E-78EA481B49C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"36069F09-C246-427D-8BE9-FCCF56C49DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7D124503-590B-40F4-A208-BD0F81F24C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8CB90DE0-45D8-4E2D-A1EF-5746AD45A336"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"A6614D7C-C9C5-4C48-838E-82A83BF6AE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7CECD4DF-12BE-402D-B48A-935D536B76A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"48960D8A-DC48-4013-9FCA-F54B16C7E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E55F101A-88A5-4D10-B524-4B0CFCD455FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"375743E3-A65C-48BF-AB9F-0733A7385797"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"27FA5B27-AA52-47E9-A209-30DDE89830C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.10.0:*:*:*:*:*:*:*","matchCriteriaId":"996A79D4-EAD1-4853-9777-8945F1390A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:3.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5A229810-4E04-4EE9-861E-D4F3FDCBF11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A47AAB96-4907-4F72-BC72-B9C66B4662E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"49129B4E-70B1-44CF-AA0A-EE8D408D7AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8391E4A2-8AC9-4D64-9D42-A4ECBF1C1E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"28B356F1-D1E1-419B-B5B1-DD68CEAF01C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"17419969-EECA-4D0E-8B74-8DEE75E9E5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"778CDC59-521F-4857-B043-A66E1E5F5315"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"81E03583-24D9-434E-80A5-9DD0F5D57358"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"491AD797-D5F7-496A-AA23-984A63A48E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"915445D8-AC41-4009-8B92-DD14FD11ACE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2891A77D-8BBB-43A1-9132-EBE976B20F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4A008FA8-EE81-4771-ABD8-D222174E0B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C23BEC3-A2CA-4D08-94A8-926F97F30788"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF0F315-98E2-42FB-9A54-81DD917CC5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7922C329-1D1E-421B-B801-A2B6A2B807D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"213A263D-BA9D-4DA9-B15A-8D298E3D2285"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"2F95874A-4BBB-4424-9BA6-265EFD89CA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"9DFE0CE0-D94B-4887-B625-C1EE0B405FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E691B061-E779-49C4-B9D4-9A3224AE444C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"4C936E8E-54D2-4499-8502-2E7F1127F548"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"0C29DACC-AC0E-4BCB-BBE9-3703315D944C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"9D393296-8AC8-4F6D-B3C3-5237ECF5CAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"0D9433F1-D160-47CE-B7F2-EB3F932A278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4C3DC15C-7710-433F-971A-E49EC3386E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"B7E72701-C329-4D6D-A73B-16F0A8732C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F2EC5C12-BD12-467E-94E6-3A83B1DE3782"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"48D17BD4-17E6-423A-96B1-178055F593C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"47D3AA8C-7746-4CC3-B34B-218ED7D5CFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"28F8F07F-CA74-4918-8653-B710D1821EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"469A6CA1-3123-40EF-8B91-6526AC9DA198"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"3A437571-9BA8-48B9-A90C-AE1CC4B872C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"11FF5CBA-6EF9-487E-945C-67A67E5BE9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AEBFBAFD-BA66-4C68-B064-9DB0CF7DB38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9268F22C-EA0E-4645-89AD-9AD8FA5AAA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E221389-BA07-408E-AD20-38A86F7B34C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"333B67DB-9B12-4A5E-BB38-6DF78B6886EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EFF3E858-5162-49E0-AD8E-89D0EE4DD5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2124C0EB-DBB2-45CE-AF17-1252E7823EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"62B25FCB-7078-4C65-B6BF-5097C249E96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"128ECDC2-7CB5-4A5A-BC4C-73002AF55AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2784AFB8-D340-4F6D-8045-CB609C52AC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4965B2CF-AD7C-48BA-BFC2-5E08D3F63309"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"90F304D1-3E0F-4001-8006-64BC11DAE510"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4FAEE607-2670-4409-BCA3-B6C208E328F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A38C7979-B2E1-43B4-B1B7-FC501273CBC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"548DFDBD-7E80-4487-96F2-3EA617CD1B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FC407BD7-282B-4729-905C-1F5A4848BE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0528A291-9D62-4939-B455-E6AAB05D39FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"60820F53-92EF-4AB7-97E7-13E7326502C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6F65DB9B-F750-4226-8A49-93BF86550979"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C6F43B58-6AA7-4764-BC1B-D10381580462"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0AC678-7DD0-4B41-A885-0C68CE1C2717"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"24585B37-880D-47B7-A676-BE3BD159E78F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"015252DB-47A2-4598-89D9-7F00F4F51521"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9E847358-B8EE-473D-8572-0D7BD6CB78F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE8B7A2-CD60-451D-AA09-055657F99916"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D622CFDD-FB2B-4360-A75E-FFE8D9DD89F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9F606601-5545-4DE9-8C5F-580CA1192B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A7C802E0-BB89-42B0-853E-3BD83B15129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"20A2C6DD-6704-40A2-872B-AC0C1807F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"188F2030-37C4-4CF9-BC4C-6980FD926884"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"38BEFD1F-417A-4691-B2A5-20F0EDCAB559"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"F873DE67-B753-40C8-BEC6-5991F8873B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A59E492B-156F-4EE1-A45F-6B8DA3F435DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FBC52B78-444D-4090-90DC-01276207DF76"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D880EA0-BF25-4C28-976C-847F6AED3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"844B3C6D-388B-4929-8217-0C8F7D0E06FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"14106284-0AA7-4C6F-8202-DE7F328123C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8B2A1E4C-CEE7-4F76-A20C-A18C21064CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7193C29C-7ECD-4D2E-A7D8-976EB6845715"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"53CD0F65-7672-4F18-A4CB-65AE9FD5DC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D58ECFDE-6D65-4050-A7B0-E8FC3ADD216C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D97B88B0-DCDE-46B5-94A0-E050012F7FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D65DB9FD-F1F2-4A08-899D-B00F4FDFD4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"2083DB08-38F2-4F88-B393-687F81F393FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"230419A2-7711-40EA-837E-C0A447F80980"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"BC5187B1-0677-4A29-8797-01F3A5D0CF25"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DB641C3B-4FA7-451E-B23E-75082BFDC201"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F48C9FBD-4476-4685-AA0B-950BD0B99336"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E42432B-8595-4972-BD76-E79F1F86CDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"9080A697-8F0F-4B6A-86B2-D9416D598385"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9DA8DEA1-2D5C-467D-B779-68618109294B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1A57E130-3C61-4406-A74C-235ECCD1CD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CADD0314-1E97-472C-9EB7-E8513C00B1F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2D57A8C7-8ED1-4605-A6BA-32F654A23790"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9CAA6311-AE61-48E4-B759-E9456D5EB331"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6B654A39-B7F5-4A25-89F8-4F8475E21070"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"83A417B2-F0B1-4E91-9DAB-A959CCBF79BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"BC010B70-6422-443A-8F1D-65669C7C74BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"095A49D3-7C53-44EC-BFFE-6841401BCD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"137EADA8-83A5-4DCA-8539-32FAF242EE68"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0365A0E4-C7FE-43BD-B665-E16F8735682F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.6.2:*:*:*:*:*:*:*","matchCriteriaId":"05EA3EEC-1113-4A88-9EB7-D14EAF1A5CE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9B7F3515-1699-49E1-A544-5087F31333E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7FAE7EC4-8C97-4287-975F-0300B44A5B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"5D92F629-CBD0-4136-A877-B97987E60B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A9A7997E-4753-4A70-BA79-E68BD988C303"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.1:*:*:*:*:*:*:*","matchCriteriaId":"62852E76-AE72-453A-A4BF-D1BC6D32507A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.2:*:*:*:*:*:*:*","matchCriteriaId":"FCE4B3B4-5EA6-4F0C-800A-FD19F0EC97E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.3:*:*:*:*:*:*:*","matchCriteriaId":"77BE439B-81D5-49D9-9B1E-2AFE98942FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.4:*:*:*:*:*:*:*","matchCriteriaId":"4AB77B13-9F66-4AF1-852D-6EBBCB7D8FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.5:*:*:*:*:*:*:*","matchCriteriaId":"1A0CF41C-245A-4393-94F1-3339DF43A018"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.6:*:*:*:*:*:*:*","matchCriteriaId":"AA8049E7-12F5-40B3-A29F-5B1F79474AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.7:*:*:*:*:*:*:*","matchCriteriaId":"06C74242-45F8-4BD9-8CE5-2796D61313BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.7.8:*:*:*:*:*:*:*","matchCriteriaId":"914BDFF0-040C-4B33-812F-5A8C10571913"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"47C98A7F-3BD8-42A2-AF5B-943BD9ED7F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"908497DC-53BF-41D2-AB88-5FD6E9FBB101"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"61215265-D976-45DB-8CF6-FB752ED407F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"393BA395-0217-4BAC-B5F1-EA75F195A04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"5FD471BB-1317-45BD-B649-C27B9ABB163F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"90268BF2-3756-4C5E-8EE8-845E1497CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.6:*:*:*:*:*:*:*","matchCriteriaId":"81EB5907-7A8C-4D9D-89DE-DFAB45E4091F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.7:*:*:*:*:*:*:*","matchCriteriaId":"F9A9CE06-E361-44B7-86F5-5AB6915C0BDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.8.8:*:*:*:*:*:*:*","matchCriteriaId":"B956D67A-59EE-4665-9D8F-143085F80633"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.99.0:*:*:*:*:*:*:*","matchCriteriaId":"DF9C07F9-549F-4B3D-A485-09E5E85DE1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.99.1:*:*:*:*:*:*:*","matchCriteriaId":"BDF6477A-5308-40FF-9AFC-486FFFDEA64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.99.2:*:*:*:*:*:*:*","matchCriteriaId":"DE784414-C18B-431A-B934-EA8615014936"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.99.3:*:*:*:*:*:*:*","matchCriteriaId":"AF0963D7-80FC-469A-A2E2-6B3C2F94EC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.99.4:*:*:*:*:*:*:*","matchCriteriaId":"FD244670-1C38-440B-AA9F-A47778641D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:6.99.5:*:*:*:*:*:*:*","matchCriteriaId":"182DFC0B-58C3-4906-B362-5F275959BD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71D7CA5F-E345-46AF-91AB-5E60B910F194"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"99AD9570-2EAF-421E-9076-7D455060141D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B227BDBC-395A-4566-A5B0-0CF26793CE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"790E347A-3758-47EE-A770-9DBC66A232AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A046F9D4-C4D8-4C68-9D0B-3A637BB9A5FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0167EC82-3475-429C-9C29-FBA65FA59FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"38D39A36-C464-499E-ABB2-B7F87BF1450F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B2CC089B-00F7-472C-B818-14728FD1EA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D6F7937B-FA21-46C5-9CD8-42B5A6191A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"608299BE-6C9E-438D-B55E-608C060AFD53"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB1D73EB-7BA8-4B09-A201-F0405D57BAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"64BA0FE5-5200-43E9-8817-01E5D9962926"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD492665-65FB-46E8-B734-72BAA2531687"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5DE43854-4A35-4527-90B6-0A552FEB9044"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"62D364BA-C509-4D28-AFA9-40ADB4498BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BED65DA3-5E7C-4130-B958-11B3BE422E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7370F01F-E7B5-4EBB-896E-6F94305D7866"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6695FAEA-ABA1-4C0E-811F-D72ACA59C42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0EB0BE1C-3FDB-4524-82E7-5112D7DDF240"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D140BAC8-AF70-42F5-9EB1-69AC12906885"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"925A8B54-34EA-4BA9-B321-A7FEC45040EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"464C7479-496F-45C8-9D64-D8B4D7A72862"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4B3287B1-1961-4D45-BB8E-8A73825354D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A7C04B92-2398-4285-BB3E-56B9C2E01717"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"FAAEC0C0-C135-4D57-9478-56CDA4F38F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB3939B8-B28F-4C18-8236-9C17B280124B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"82FF8752-B133-4979-87B6-0E670D0B0F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DE5738C9-C681-4071-A8AE-3E4E435813BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C5BBC529-C88E-4CB7-8546-C9B38D2735A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.11:*:*:*:*:*:*:*","matchCriteriaId":"9A29607B-B783-4B3C-833A-5DE20017C05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.12:*:*:*:*:*:*:*","matchCriteriaId":"38E09C09-2A1A-4CA4-9CDF-5C05E5D0A5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.13:*:*:*:*:*:*:*","matchCriteriaId":"1F7246EF-EE6A-4890-ABEB-FDB1D5AE3565"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.14:*:*:*:*:*:*:*","matchCriteriaId":"525B4518-FB9A-4449-B319-35AC56CC61AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.15:*:*:*:*:*:*:*","matchCriteriaId":"669CD162-4AE4-4326-8AC2-99098BF9F571"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.16:*:*:*:*:*:*:*","matchCriteriaId":"B7DF77E5-E216-4E50-A433-B4C1E0842A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.17:*:*:*:*:*:*:*","matchCriteriaId":"9F040303-DA3B-4389-A58A-C9E13A2776B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.18:*:*:*:*:*:*:*","matchCriteriaId":"B94BB81F-3EF1-467D-AC00-CE041BF760AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.19:*:*:*:*:*:*:*","matchCriteriaId":"D1DF3C03-2D1F-405E-B06C-CB9E14AB0C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.20:*:*:*:*:*:*:*","matchCriteriaId":"90480190-A5F4-4B9F-BF33-F55B7DFA410B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.21:*:*:*:*:*:*:*","matchCriteriaId":"CA75B93B-35DD-41D8-8558-C82C6A86CE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.3.22:*:*:*:*:*:*:*","matchCriteriaId":"45318561-55E0-4433-9C69-C40959BACE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"997F0BA2-94EB-4B99-8C68-C3AFC63A27ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3C100FEE-C94C-4313-A178-68DE8556E32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"12D2F72B-D0C3-4C96-9F8C-B527CBF7FB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7AED8387-C37D-40A1-9C67-1799564B9090"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"AD3903FF-D4CD-4779-B780-F8F89C784F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9D80B9B8-BB0B-4E9A-9AE9-AE036FDCC304"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"DF07FFE0-09D9-42D9-8C8E-C9B3CDB45222"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D3C3ABEA-3AC2-4771-9656-D6AE154D3CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"3B694018-A4DD-47B3-BDB3-69A8922C8F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DA53309F-809A-417E-ACA4-34ADB30D32DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2B166C5E-0F7D-4665-8A20-84B7CA03B923"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"99796904-F67C-437C-92E0-DE9A7FF03C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C3FDBF72-77D0-4F78-BEA2-CCC2851D43EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"144EBFA6-9DEE-4800-8E36-F649FA400B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"5643FD3E-DE36-45DA-BD72-A6427B665B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.15:*:*:*:*:*:*:*","matchCriteriaId":"A78179BD-2E86-4D72-9B5C-0D311E9BED24"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"F8755A5C-9D79-4495-974D-81F5D69FAE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"257F0E22-AAB7-4733-ACAA-1DB6EEC815EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"D7956565-DADB-4D80-8411-85F3B7374C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.19:*:*:*:*:*:*:*","matchCriteriaId":"CAB56E4D-ECA0-4AF5-A3D2-6959EC0E04AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.20:*:*:*:*:*:*:*","matchCriteriaId":"AF71034B-1774-4BC7-9861-74F275C7230F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.21:*:*:*:*:*:*:*","matchCriteriaId":"1406CF66-EBFA-4A84-9602-C7EDA829BB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.25:*:*:*:*:*:*:*","matchCriteriaId":"65C5C4FE-0997-40EF-8752-4CBE981C62F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.4.26:*:*:*:*:*:*:*","matchCriteriaId":"0343EC34-CF3B-4C36-9392-24A1583BC763"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"12E8A4F9-3974-4EFA-B4CE-F76841876155"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"87746EE1-91C6-4E73-BE48-45E0471D9A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F38A3E13-DE12-4602-9AAF-AB44F99D8FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4470E5C9-1254-46D0-A409-9C4E808E0986"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B643276B-3E5A-4D66-B08C-9BCE07137DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"09187F21-B194-47B3-B84D-55DA33233E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.6:*:*:*:*:*:*:*","matchCriteriaId":"0E61352F-E3A2-4A2F-9C1F-B6861AB6E051"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.7:*:*:*:*:*:*:*","matchCriteriaId":"54BB4E97-FE00-4C4B-8C10-60864E601C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.8:*:*:*:*:*:*:*","matchCriteriaId":"93A4EBA2-9419-4637-A91F-F35EDE310733"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B08B78FD-8900-428C-AE5B-21607620D88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.10:*:*:*:*:*:*:*","matchCriteriaId":"B6A84158-E958-43AF-877D-55A1477652B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.11:*:*:*:*:*:*:*","matchCriteriaId":"B19461AE-0E44-48A2-9E3A-EF99FE8DA02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:plain_black_webgui:7.5.12:*:*:*:*:*:*:*","matchCriteriaId":"FDF42AC9-965F-40D6-819F-EE2A2F13079C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30782","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29927","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1932/references","source":"cve@mitre.org"},{"url":"http://www.webgui.org/bugs/tracker/security-issue---collaboration-rss/","source":"cve@mitre.org"},{"url":"http://www.webgui.org/getwebgui/advisories/webgui-7_5_13-beta-released","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1932/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webgui.org/bugs/tracker/security-issue---collaboration-rss/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webgui.org/getwebgui/advisories/webgui-7_5_13-beta-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3504","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in mask PHP File Manager (mPFM) before 2.3 has unknown impact and remote attack vectors related to \"manipulation of cookies.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Mask PHP File Manager (mPFM) versiones anteriores a 2.3 tiene un impacto y vectores de ataque remotos desconocidos ralacionados con \"manipulación de cookies\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"C7F8D3A5-25A6-4D4B-8ED7-22598D25123C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:*:a:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"93BD6144-64EC-4F62-9E03-8EE02B7914CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:*:c:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"1ADD7339-AB91-4C53-B98A-6C5B441413A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:*:d:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"B88CBC22-08C0-4C56-83F1-F04A3F99E22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1B19D1B5-305F-4DB4-886F-00A5099E5928"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.1:a:*:*:*:*:*:*","matchCriteriaId":"AFF10372-2A42-49E7-B4BC-61B5EC98B6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7D1D42BE-988D-4DE6-ACD1-3BFD174ECA61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5BF6A201-E395-4786-9148-7256FB9F139B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.4:*:*:*:*:*:*:*","matchCriteriaId":"ACAE72C6-6D0E-4D68-810B-839FA3B94CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BE88CF08-D77E-4BA8-B4E2-13D6FF76AAF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:1.6:*:*:*:*:*:*:*","matchCriteriaId":"235639C0-E120-4EAC-9DB6-1FE828DA8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpfm:mask_php_file_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"1313A3D0-BBF7-41AA-BD60-1E1010471A3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=608915","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29926","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=608915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3505","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via the nr parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en PolyPager 1.0 rc2 y versiones anteriores permite a atacantes remotos inyectar web script o HTML a través del parámetro nr dela URI default."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"6377DA73-4E33-4FD9-9D45-AC9E012CAD00"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3DD6FD0B-5435-4669-87A6-723C4E63DB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3578FA1F-954C-494F-B57D-60A58A8BBF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"31482A09-0946-4B46-8A69-5492635898F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"4A4D32D9-660A-4EF8-BD78-A8B9AB043375"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"CD650225-4D8A-4317-8147-43310B8881E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.51:*:*:*:*:*:*:*","matchCriteriaId":"33524CA0-F746-46C3-9215-35E6784C3FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"26FBB586-8378-413C-8ABB-D67971033FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"10BE4F4A-BB81-47C2-8BEC-3634DE228C99"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29975","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43372","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5941","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3506","sourceIdentifier":"cve@mitre.org","published":"2008-08-06T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands via the nr parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en PolyPager 1.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro nr de la URI default."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"6377DA73-4E33-4FD9-9D45-AC9E012CAD00"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3DD6FD0B-5435-4669-87A6-723C4E63DB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3578FA1F-954C-494F-B57D-60A58A8BBF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"31482A09-0946-4B46-8A69-5492635898F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"4A4D32D9-660A-4EF8-BD78-A8B9AB043375"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"CD650225-4D8A-4317-8147-43310B8881E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:0.9.51:*:*:*:*:*:*:*","matchCriteriaId":"33524CA0-F746-46C3-9215-35E6784C3FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"26FBB586-8378-413C-8ABB-D67971033FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:polypager:polypager:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"10BE4F4A-BB81-47C2-8BEC-3634DE228C99"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29972","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43371","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5941","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3507","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de LiteNews 0.1 (también conocido como 01) y posiblemente 1.2 y anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro id en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wogan_may:litenews:0.1:*:*:*:*:*:*:*","matchCriteriaId":"74120FBE-DB1B-4D09-B2A7-F71D30A3E733"},{"vulnerable":true,"criteria":"cpe:2.3:a:wogan_may:litenews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CECC4A3F-5644-4885-958D-A3BE51A4A690"},{"vulnerable":true,"criteria":"cpe:2.3:a:wogan_may:litenews:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A394E73C-91C1-4E8A-B5AC-E6712B79AAA3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30575","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44230","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6207","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3508","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie."},{"lang":"es","value":"LiteNews 0.1 (también conocido como 01) y posiblemente 1.2 y anteriores, permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo configurando la cookie admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wogan_may:litenews:0.1:*:*:*:*:*:*:*","matchCriteriaId":"74120FBE-DB1B-4D09-B2A7-F71D30A3E733"},{"vulnerable":true,"criteria":"cpe:2.3:a:wogan_may:litenews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CECC4A3F-5644-4885-958D-A3BE51A4A690"},{"vulnerable":true,"criteria":"cpe:2.3:a:wogan_may:litenews:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A394E73C-91C1-4E8A-B5AC-E6712B79AAA3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30555","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44231","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6206","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3509","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or execute arbitrary PHP code via addition of blocks, and other vectors."},{"lang":"es","value":"LoveCMS versión 1.6.2, no requiere autenticación administrativa para los archivos (1) addblock.php, (2) blocks.php y (3) themes.php en system/admin/, que permite a los atacantes remotos cambiar la configuración o ejecutar código PHP arbitrario por medio de la adición de bloques, y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lovecms:lovecms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"682D1313-5E31-48F8-9A38-B45CCB1A5872"}]}]}],"references":[{"url":"http://secunia.com/advisories/31389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30562","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44226","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44227","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6209","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6210","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3510","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en livehelp_js.php de Crafty Syntax Live Help (CSLH) 2.14.6, permite a atacantes remotos inyectar web script o HTML a través del parámetro department."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"361D631A-52D1-49CE-9227-792BF2B5EA31"}]}]}],"references":[{"url":"http://secunia.com/advisories/31340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.craftysyntax.com/help/viewtopic.php?t=3945","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30543","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.craftysyntax.com/help/viewtopic.php?t=3945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3511","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or HTML via the (1) latest parameter to (a) index.php, (b) images.php, (c) suggest_image.php, and (d) image_desc.php; and the (2) msg parameter to index.php, images.php, and suggest_image.php, and (e) index.php, (f) adminhome.php, (g) config.php, (h) changepassword.php, (i) cleanup.php, (j) browsecats.php, and (k) images.php in admin/. NOTE: the image_desc.php/msg vector is covered by CVE-2006-1660.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Softbiz Image Gallery (Photo Gallery) permite a atacantes remotos inyectar web script o HTML a través del parámetro (1) latest en (a) index.php, (b) images.php, (c) suggest_image.php y (d) image_desc.php; y del parámetro (2) msg de index.php, images.php, y suggest_image.php, y (e) index.php, (f) adminhome.php, (g) config.php, (h) changepassword.php, (i) cleanup.php, (j) browsecats.php y (k) images.php in admin/. NOTA: el vector image_desc.php/msg está cubierto por la CVE-2006-1660. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbiz:image_gallery:*:*:*:*:*:*:*:*","matchCriteriaId":"032A46B5-20BE-4458-9849-32D930790060"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30546","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30546/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30546/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3512","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional resource found during analysis:\r\n\r\nhttp://www.securityfocus.com/bid/30577","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a visit action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Kleinanzeigen para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro lid de una acción visit en modules.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_nuke:kleinanzeigen_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2C1B16F2-D65D-4171-A18C-79E8C2FAB08A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/495166/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30577","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44255","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495166/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3513","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el módulo Book Catalog versión 1.0 para PHP-Nuke, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro catid en una acción category en el archivo modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_nuke:basis_consultant_book_catalog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F163405C-8F37-49D5-9DDD-C2C462CC996E"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/phpnukebook-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32500","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497929/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30511/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44434","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/phpnukebook-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497929/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30511/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3514","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T12:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information with appropriate login and password:\r\n\r\nhttp://www.vmware.com/security/advisories/VMSA-2008-0012.html\r\n\r\n\r\n4. Solution\r\n\r\n   Please review the patch/release notes for your product and version\r\n   and verify the md5sum of your downloaded file.\r\n\r\n   VirtualCenter\r\n   -------------\r\n   \r\n   VMware VirtualCenter 2.5 Update 2 build 104263\r\n   www.vmware.com/download/download.do\r\n   DVD iso image\r\n   md5sum: 83de404fa073bc1fde9acd080f21e688\r\n   Zip file\r\n   md5sum: 3297f1e47c6b018ac8190f11bd022d5b\r\n   Release Notes\r\n   www.vmware.com/support/vi3/doc/vi3_esx35u2_vc25u2_rel_notes.html\r\n\r\n   VMware VirtualCenter 2.0.2 Update 5 build 104182\r\n   www.vmware.com/downloads/download.do\r\n   DVD iso image\r\n   md5sum: 5fee5d2d97b482e0d0cb47da7d8e7c34\r\n   Zip file\r\n   md5sum: cd468aab309745c12ee5516652aafbcb\r\n   Release Notes\r\n   www.vmware.com/support/vi3/doc/releasenotes_vc202u5.html\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side \"enabled/disabled functionality\" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an \"attempt to assign permissions to other system users.\""},{"lang":"es","value":"VirtualCenter de VMware versión 2.5 anterior a Update 2 y versión 2.0.2 anterior a Update 5, se basa en la función \"enabled/disabled functionality\" para el control de acceso, lo que permite a los atacantes remotos determinar nombres de usuario comprobados mediante la habilitación de la funcionalidad en la GUI y luego haciendo un \"attempt to assign permissions to other system users\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:*:update_4:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"9A3C4612-1A97-4C5B-9B94-41DC11076995"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EDFF5385-64AA-48AD-A5FE-25918E4F07D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:update_2:*:*:*:*:*:*","matchCriteriaId":"E15CB55D-DE86-4A1F-90E8-BEC3ABBF256B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:update_3:*:*:*:*:*:*","matchCriteriaId":"0CE6C817-1129-4570-9F04-1FC7EA42FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D17E8DFD-AC99-45E6-81F9-ED66369FBD0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.5:update_1:*:*:*:*:*:*","matchCriteriaId":"C3AB56C1-35F2-448D-9EB7-35FB4E00C227"}]}]}],"references":[{"url":"http://secunia.com/advisories/31468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4150","source":"cve@mitre.org"},{"url":"http://www.insomniasec.com/advisories/ISVA-080812.1.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495386/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30664","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020693","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/vi3/doc/releasenotes_vc202u5.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.insomniasec.com/advisories/ISVA-080812.1.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495386/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/vi3/doc/releasenotes_vc202u5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3515","sourceIdentifier":"secalert@redhat.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) viewer.swf and (2) loadflash.js, a different vulnerability than CVE-2008-3516."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en los archivos generados por Adobe Presenter  6 y 7 anterior a la v 7.0.1, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados implicando a (1) viewer.swf y (2) loadflash.js. Una vulnerabilidad distinta del CVE-2008-3516."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:presenter:6:*:*:*:*:*:*:*","matchCriteriaId":"9D035519-8214-4FA2-A71F-633148056A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:presenter:7:*:*:*:*:*:*:*","matchCriteriaId":"7560DFE7-943B-49D2-A76F-960600188D53"}]}]}],"references":[{"url":"http://secunia.com/advisories/31432","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-17.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30615","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020645","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2322","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3516","sourceIdentifier":"secalert@redhat.com","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) viewer.swf and (2) loadflash.js, a different vulnerability than CVE-2008-3515."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ficheros generados por Adobe Presenter 6 y 7 versiones anteriores a 7.0.1 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados implicando a (1) viewer.swf y (2) loadflash.js, una vulnerabilidad diferente que CVE-2008-3515."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:presenter:6:*:*:*:*:*:*:*","matchCriteriaId":"9D035519-8214-4FA2-A71F-633148056A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:presenter:7:*:*:*:*:*:*:*","matchCriteriaId":"7560DFE7-943B-49D2-A76F-960600188D53"}]}]}],"references":[{"url":"http://secunia.com/advisories/31432","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-17.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30615","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020645","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2322","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3519","sourceIdentifier":"secalert@redhat.com","published":"2008-09-23T15:24:43.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273."},{"lang":"es","value":"La configuración por defecto del componente JBossAs en Red Hat JBoss Enterprise Application Platform (también conocido como JBossEAP o EAP), posiblemente v4.2 anterior a CP04 y v4.3 anterior a CP02, cuando el entorno de producción está activado, establece la propiedad \"DownloadServerClasses\" a \"true\", lo que permite a atacantes remotos obtener información sensible (clases no-EJB) a través de una petición de descarga. Un a vulnerabilidad distinta de CVE-2008-3273."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:cp03:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"E07A48EA-306D-470E-9F39-197A36230CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:cp01:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"BF832DC9-B4C9-40AE-BF4D-67B05765D6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E9830D64-C46F-4423-BE0B-0B1FDB765D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp01:*:*:*:*:*:*","matchCriteriaId":"E715EAF0-DAE9-4FD5-996E-18E61C9CC703"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp02:*:*:*:*:*:*","matchCriteriaId":"4E6C7D0B-DBC0-4414-9C40-713E01146FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D4816097-6982-4FBA-BD34-3D24BCA5A56A"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458823","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp04/html-single/readme/index.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp02/html-single/readme/index.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0831.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0832.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0833.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0834.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31300","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020905","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45305","source":"secalert@redhat.com"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp04/html-single/readme/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp02/html-single/readme/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0831.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0832.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0833.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0834.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3520","sourceIdentifier":"secalert@redhat.com","published":"2008-10-02T18:18:05.743","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation."},{"lang":"es","value":"Múltiples desbordamientos de entero en JasPer v1.900.1 pueden permitir a atacantes dependientes de contexto tener un impacto desconocido a través de ficheros de imagen manipuladas, relacionado con la multiplicación de enteros para localizaciones de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper_project:jasper:1.900.1:*:*:*:*:*:*:*","matchCriteriaId":"79C699BE-8585-4A07-88AE-E17CF17D92CD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222819","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0698.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33173","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34391","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:142","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:144","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:164","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0012.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31470","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-742-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45621","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0698.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-742-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3521","sourceIdentifier":"secalert@redhat.com","published":"2008-10-02T18:18:05.773","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (program exit) by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit.  NOTE: this was originally reported as a symlink issue, but this was incorrect.  NOTE: some vendors dispute the severity of this issue, but it satisfies CVE's requirements for inclusion."},{"lang":"es","value":"La función jas_stream_tmpfile de libjasper/base/jas_stream.c en JasPer v1.900.1 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque symlink en un fichero temporal tmp.XXXXXXXXXX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper_project:jasper:1.900.1:*:*:*:*:*:*:*","matchCriteriaId":"79C699BE-8585-4A07-88AE-E17CF17D92CD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/attachment.cgi?id=163282&action=view","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222819","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34391","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:142","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:164","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31470","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-742-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3521","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45622","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/attachment.cgi?id=163282&action=view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-742-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3522","sourceIdentifier":"secalert@redhat.com","published":"2008-10-02T18:18:05.790","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf."},{"lang":"es","value":"Desbordamiento de búfer en la función jas_stream_printf de libjasper/base/jas_stream.c en JasPer v1.900.1 puede permitir a atacantes dependientes de contexto tener un impacto desconocido a través de vectores relacionados con la función mif_hdr_put y la utilización de vsprintf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:enterprise_virtualization:3.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7C9732-1E89-4EE1-B603-291A79B227C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper_project:jasper:1.900.1:*:*:*:*:*:*:*","matchCriteriaId":"79C699BE-8585-4A07-88AE-E17CF17D92CD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/attachment.cgi?id=163282&action=view","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222819","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0698.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33173","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34391","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-18.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:142","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:144","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:164","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31470","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-742-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45623","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/attachment.cgi?id=163282&action=view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0698.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-742-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3524","sourceIdentifier":"secalert@redhat.com","published":"2008-09-29T17:17:29.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run."},{"lang":"es","value":"El archivo rc.sysinit en initscripts anteriores a versión 8.76.3-1 en Fedora versión 9 y otras plataformas Linux, permite a los usuarios locales eliminar archivos arbitrarios por medio de un ataque de tipo symlink en un archivo o directorio según (1) /var/lock o (2) /var/run ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"D32A30CD-EA21-4AA6-868F-3448AA50B70D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:initscripts:8.76.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC1B34A-B695-4AAB-A2F6-FC39600C0EB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32710","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31385","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458504","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458652","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45402","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2857","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01135.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01135.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3525","sourceIdentifier":"secalert@redhat.com","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions."},{"lang":"es","value":"La función sbni_ioctl en drivers/net/wan/sbni.c del subsistema WAN en Linux kernel 2.6.26.3 no chequea la capacidad CAP_NET_ADMIN antes de procesar una petición ioctl (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, o (4) SIOCDEVEMANSIPATE, lo cual permite a usuarios locales evitar restricciones de capacidad intencionadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32103","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32237","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32315","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32356","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32386","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32393","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33201","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33280","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/29/2","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020969","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2511","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2714","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/29/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3526","sourceIdentifier":"secalert@redhat.com","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option."},{"lang":"es","value":"Desbordamiento de entero en la función sctp_setsockopt_auth_key de net/sctp/socket.c en la implementación Stream Control Transmission Protocol (sctp) del kernel de Linux de 2.6.24-rc1 a 2.6.26.3 permite a atacantes remotos provocar una denegación de servicio (pánico) o posiblemente tener otro impacto no especificado mediante un campo sca_keylength manipulado asociado con la opción SCTP_AUTH_KEY."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=30c2235cbc477d4629983d440cdc4f496fec9246","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31881","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32190","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32393","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/9","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30847","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44723","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=30c2235cbc477d4629983d440cdc4f496fec9246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3527","sourceIdentifier":"secalert@redhat.com","published":"2008-11-05T15:00:14.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions."},{"lang":"es","value":"arch/i386/kernel/sysenter.c en la implementación Virtual Dynamic Shared Objects (vDSO) para el kernel de Linux anterior a v2.6.21, no comprueba de forma adecuada los límites; esto permite a usuarios locales ganar privilegios o provocar una denegación de servicio a través de vectores no especificados. Está relacionado con las funciones install_special_mapping, syscall y syscall32_nopage."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0957.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.20.21","matchCriteriaId":"455AF113-2E2D-46F2-8F92-C21E06E5B39F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d91d531900bfa1165d445390b3b13a8013f98f7","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32485","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33180","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021137","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460251","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10602","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d91d531900bfa1165d445390b3b13a8013f98f7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3528","sourceIdentifier":"secalert@redhat.com","published":"2008-09-27T10:30:03.303","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations.  NOTE: there are limited scenarios in which this crosses privilege boundaries."},{"lang":"es","value":"La funcionalidad de error de informe en (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, y posiblemente en (3) fs/ext4/dir.c en el kernet de Linux v2.6.26.5 no limita el número de mensajes de consola printk que informa de la corrupción de directorio, lo cual permite a atacantes aproximarse físicamente para causar denegación de servicio (cuelgue temporal del sistema) montando un archivo de sistema corrupto con valores dir->i_size y dir->i_blocks e interpretando operaciones de (a) lectura o (b) escritura.  NOTA: hay escenarios limitados en los cuales estos cruzan los límites de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lkml.org/lkml/2008/9/13/98","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/9/13/99","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/9/17/371","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32356","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32370","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32509","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32709","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32799","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32998","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33180","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33586","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0316","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:224","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/18/2","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498285/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-662-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459577","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45720","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10852","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8642","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/9/13/98","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/9/13/99","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/9/17/371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/18/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498285/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-662-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3529","sourceIdentifier":"secalert@redhat.com","published":"2008-09-12T16:56:20.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función xmlParseAttValueComplex en el módulo parser.c de libxml2 versiones anteriores a 2.7.0 permite a atacantes dependientes del contexto provocar una denegación de servicio (parada inesperada) o la posibilidad de ejecutar código de su elección al utilizar un nombre largo de entidad XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.0","matchCriteriaId":"901D143E-F14B-4944-A2A7-6FF08A21FF29"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"212BF588-5C81-4801-A76D-73FB1DE211EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"9DE12072-799C-4E47-A506-28B80D1CDFE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0","matchCriteriaId":"48C7B5CA-82E7-4676-BDBA-76C1098DDEAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.7","matchCriteriaId":"EA0E35E1-9181-4A2B-93E5-8833E5AB5FDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31558","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31855","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31860","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31868","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32265","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32280","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32807","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32974","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33715","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35056","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020855","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247346-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3550","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-400.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-025.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1654","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:192","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0884.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0886.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31126","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2822","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1298","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461015","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45085","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11760","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6103","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/644-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8798","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247346-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-400.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-025.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0884.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0886.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/644-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3530","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an ICMPv6 Packet Too Big Message, which allows remote attackers to cause a denial of service (panic) via a crafted Packet Too Big Message."},{"lang":"es","value":"sys/netinet6/icmp6.c del kernel en FreeBSD 6.3 hasta la 7.1 no comprueba correctamente la nueva MTU propuesta en un paquete ICMPv6 de mensaje demasiado grande, lo cual permite a los atacantes remotos provocar una denegación de servicio (panic) a través de un Paquete manipulado Gran Mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32401","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3467","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31004","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020820","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021111","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0633","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:09.icmp6.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3531","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of \"user defined data\" in \"certain error conditions.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en sys/kern/vfs_mount.c del núcleo de FreeBSD 7.0 y 7.1, cuando vfs.usermount está habilitado; permite a usuarios locales obtener privilegios a través de una llamada al sistema manipulada a (1) mount o (2) nmount. Está relacionado con la copia de \"datos definidos por el usuario\" en \"determinadas condiciones de error\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"}]}]}],"references":[{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:08.nmount.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31002","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020816","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45143","source":"cve@mitre.org"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:08.nmount.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3532","sourceIdentifier":"secalert@redhat.com","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service."},{"lang":"es","value":"La extensión (plugin) NSS en libpurple de Pidgin 2.4.3 no verifica certificados SSL, lo cual hace más fácil a atacantes remotos engañar  a usuarios a aceptar un certificado de servidor no válido para un servicio suplantado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/ticket/6500","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/31390","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32859","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33102","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:025","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1023.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30553","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2318","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44220","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10979","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18327","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/ticket/6500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-675-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3533","sourceIdentifier":"security@ubuntu.com","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función window_error de yelp-window.c en yelp de Gnome después de 2.19.90 y antes de 2.24 permite a atacantes remotos ejecutar código de su elección mediante especificadores de formato de cadena en un URI no válido en línea de comandos, como se demostró utilizando yelp en los controladores URI (1) man o (2) ghelp en Firefox, Evolution y otros programas no especificados."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue does not affect the versions of the yelp package, as shipped with Red Hat Enterprise Linux 3, 4 and 5.","lastModified":"2008-08-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:yelp:*:*:*:*:*:*:*:*","versionEndExcluding":"2.24","matchCriteriaId":"7BB1D4D2-4900-45B5-BAB7-84A6EBFC0C49"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gnome:2.20:*:*:*:*:*:*:*","matchCriteriaId":"B99DE8F3-3B18-4A57-9E28-849A81884256"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gnome:2.22:*:*:*:*:*:*:*","matchCriteriaId":"BCF0421C-DC15-4ED7-8F21-B92974D09E82"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/attachment.cgi?id=115890","source":"security@ubuntu.com","tags":["Exploit","Issue Tracking"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=546364","source":"security@ubuntu.com","tags":["Exploit","Issue Tracking","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"security@ubuntu.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31465","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31620","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31834","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32629","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:175","source":"security@ubuntu.com","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/30690","source":"security@ubuntu.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-638-1","source":"security@ubuntu.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2393","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/yelp/+bug/254860","source":"security@ubuntu.com","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44449","source":"security@ubuntu.com","tags":["VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00222.html","source":"security@ubuntu.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://bugzilla.gnome.org/attachment.cgi?id=115890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=546364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/30690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-638-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/yelp/+bug/254860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3534","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of \"useless pages\" and improper maintenance of the i_blocks count."},{"lang":"es","value":"La función shmem_delete_inode de mm/shmem.c en la implementación the tmpfs de Linux kernel versiones anteriores a 2.6.26.1 permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de una determinada secuencia de operaciones de ficheros de crear, eliminar y sobrescribir, como lo demostrador por el programa insserv, relacionado con la asignación de \"páginas sin uso\" y mantenimiento inadecuado de la cuenta i_blocks."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.26.1","matchCriteriaId":"2138DF1C-6DC2-415E-9C5C-A0CAF70A220E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=14fcc23fdc78e9d32372553ccf21758a9bd56fa1","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/7/26/71","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31881","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31134","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44489","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=14fcc23fdc78e9d32372553ccf21758a9bd56fa1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/7/26/71","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3535","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project."},{"lang":"es","value":"Error de superación del límite en la función iov_iter_advance de mm/filemap.c en Linux kernel versiones anteriores a 2.6.27-rc2 permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de una determinada secuencia de operaciones en ficheros de I/O con readv y writev, como lo demostrado por testcases/kernel/fs/ftest/ftest03 de Linux Test Project."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.27","matchCriteriaId":"BF554042-72C3-4933-A7FC-62778030A785"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:-:*:*:*:*:*:*","matchCriteriaId":"B6115C56-3A6D-4A62-A3F1-8AC8E915FC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24c","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31881","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.lkml.org/lkml/2008/7/30/446","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31132","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44492","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://mirror.celinuxforum.org/gitstat/commit-detail.php?commit=94ad374a0751f40d25e22e036c37f7263569d24c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.lkml.org/lkml/2008/7/30/446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3536","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3537."},{"lang":"es","value":"Vulnerabilidad no especificada en ovalarmsrv de HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, y 7.53 permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-3537."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31688","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30984","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020795","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2485","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3537","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536."},{"lang":"es","value":"vulnerabilidad no especificada en ovalarmsrv de HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, y 7.53 permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados, una vulnerabilidad diferente a CVE-2008-3536."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31688","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30984","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020795","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2485","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122037165310549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3538","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T14:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors.  NOTE: the initial description of this CVE was inadvertently associated with libxml2, but it should be for HP Enterprise Discovery."},{"lang":"es","value":"Una vulnerabilidad no especificada en Enterprise Discovery de HP versiones 2.0 hasta 2.52 en Windows, permite a usuarios autenticados remotos ejecutar código arbitrario por medio de vectores desconocidos. NOTA: la descripción inicial de este CVE fue asociada inadvertidamente con libxml2, pero debería ser para Enterprise Discovery de HP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2840218F-D7A5-4DB2-B2BD-934EE3AFBE01"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"70F74F8E-9851-4403-8A19-605D021350CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EE6B8544-7455-4024-ABD2-FDFB96AC6B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B37843F-7655-4796-AECA-55538E63D901"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"827156CF-9366-403B-A884-50B542DCD1F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC4C982F-5B41-450D-9094-5181BCEC6041"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5ED12EA8-657F-4A33-BC29-6A5097132EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BDD8889-909F-48AE-B4AE-17806BF1DAF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D81D977D-0B3D-4A58-9EA0-1C9FCFDFE067"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.20:*:*:*:*:*:*:*","matchCriteriaId":"60A13D1E-E4E1-408F-9426-86BA4BFA575C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.21:*:*:*:*:*:*:*","matchCriteriaId":"C35C6824-A6D5-4193-88D7-931A0151D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.22:*:*:*:*:*:*:*","matchCriteriaId":"153CB6BC-98B7-4419-AC3B-D5F3E114BDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.50:*:*:*:*:*:*:*","matchCriteriaId":"D64A4860-7D43-4B9D-BB63-28C2833AC51C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.51:*:*:*:*:*:*:*","matchCriteriaId":"AD9450A3-4B90-4087-822E-F618ECD0AF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:enterprise_discovery:2.52:*:*:*:*:*:*:*","matchCriteriaId":"269EB34F-3F3F-4327-AEA6-7FE5D4E11B72"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121985360414288&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121985360414288&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31616","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30865","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2446","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44709","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121985360414288&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121985360414288&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3539","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:12:57.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en  HP OpenView Select Identity (HPSI) Connectors  sobre Windows, utilizado en HPSI Active Directory Connector 2.30 y anteriores, HPSI SunOne Connector 1.14 y anteriores, HPSI eDirectory Connector 1.12 y anteriores, HPSI eTrust Connector 1.02 y anteriores, HPSI OID Connector 1.02 y anteriores, HPSI IBM Tivoli Dir Connector 1.02 y anteriores, HPSI TOPSecret Connector 2.22.001 y anteriores, HPSI RACF Connector 1.12.001 y anteriores, HPSI ACF2 Connector 1.02 y anteriores, HPSI OpenLDAP Connector 1.02 y anteriores, and HPSI BiDir DirX Connector 1.00.003 y anteriores, permite a ausuarios locales obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_acf2_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"2ADE02FF-E7E9-421D-BB22-F8F0523042DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.70.003","matchCriteriaId":"C9ACA531-E06C-4494-8E5D-694433316DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.002","matchCriteriaId":"67B9BAB4-4BE9-401B-93CB-1060D9DA58CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"2.20","matchCriteriaId":"4E963EBC-C8BD-4308-A8E1-1752A9C3636E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"2.30","matchCriteriaId":"0AAEE616-803B-4DA6-83BB-F8492242FB0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_bidir_dirx_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00.003","matchCriteriaId":"04BCD03A-532D-4CD1-AD29-10976C3A3CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_edirectory_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12","matchCriteriaId":"E3338660-1EAE-4B48-9F0C-953D5118E80C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_etrust_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"5E27C72C-6424-40CB-8917-16171ADCE94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_oid_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"87DDF395-56F8-47C3-9BC9-732753264763"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_openldap_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"3BE6B800-0DC9-46C5-BE8C-A9C30C68C5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_racf_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12.001","matchCriteriaId":"BD712946-8B98-495E-AC83-DA897ED15D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_sunone_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.14","matchCriteriaId":"4E61EBB8-B01B-4940-9778-6EC3CC9FEC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpsi_topsecret_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"2.22.001","matchCriteriaId":"2FE48EC3-A4C7-439A-8719-392652668087"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ibm_tivoli_dir_connector:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"ECC89FFF-169B-42B5-AB16-577F32C13EC5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122062779731581&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=122062779731581&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31764","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4236","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31024","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44916","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122062779731581&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=122062779731581&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3542","sourceIdentifier":"cve@mitre.org","published":"2008-10-02T18:18:05.820","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP Insight Diagnostics en versiones anteriores a v7.9.1.2402 permite a atacantes remotos leer ficheros de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:insight_diagnostics:*:*:*:*:*:*:*:*","versionEndExcluding":"7.9.1.2402","matchCriteriaId":"B8F7A101-2AD2-4496-AF19-4C659C9E39C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122271894520640&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122271894520640&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32061","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4346","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31479","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020953","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2695","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45506","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=122271894520640&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122271894520640&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3543","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T20:00:17.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in NFS / ONCplus B.11.31_04 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en NFS / ONCplus B.11.31_04 y versiones anteriores, en HP-UX B.11.31 que permite a los atacante remoto causar una denegación de servicios a tráves de un vector de ataque desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hpux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"02CA778D-0099-42DB-BC1C-7E571A258223"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:*:*:*:*:*:*:*:*","versionEndIncluding":"b.11.31_04","matchCriteriaId":"8AF472A0-B288-4BD5-9103-90F342800310"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_01:*:*:*:*:*:*:*","matchCriteriaId":"8AFB6E25-120A-473B-9ECD-0B1F18E88947"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_02:*:*:*:*:*:*:*","matchCriteriaId":"D1F3FE14-EC1C-40CB-881B-D435AEA9D975"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_03:*:*:*:*:*:*:*","matchCriteriaId":"6965559A-0400-4B74-B867-9DAA639D339B"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31607","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020993","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45695","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3544","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.213","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61), or (3) REQUEST_RESTORE_STATE (aka number 62) request to TCP port 2954."},{"lang":"es","value":"Múltiples desbordamientos de bufer basados en pila en ovalarmsrv de HP OpenView Network Node Manager(OV NNM) 7.51, 7.01 y, posiblemente, 7.50 y 7.53, permiten a atacantes remotos ejecutar código arbitrario a través de peticiones excesivamente largas a (1) REQUEST_SEV_CHANGE (alias número 47), ( 2) REQUEST_SAVE_STATE (alias número 61), o (3) REQUEST_RESTORE_STATE (alias número 62) al puerto TCP 2954."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*","matchCriteriaId":"725DA559-EE1C-4CCE-91C4-D5AAA940D855"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/closedview_old-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28668.c","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31688","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4397","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490541","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28668","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/closedview_old-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28668.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3545","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.247","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536, CVE-2008-3537, and CVE-2008-3544.  NOTE: due to insufficient details from the vendor, it is not clear whether this is the same as CVE-2008-1853."},{"lang":"es","value":"Vulnerabilidad \tsin especificar en ovtopmd en HP OpenView Network Node Manager(OV NNM) 7.01, 7.51, 7.53 permite a atacantes remotos causar una denegación de servicio a través de vectores desconocidos. Se trata de una vulnerabilidad diferente a la CVE-2008-3536, CVE-2008-3537, y a la CVE-2008-3544. NOTA: debido a la insuficiencia de detalles de los proveedores, no está claro si este es el mismo problema que el de CVE-2008-1853."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122356907004075&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122356907004075&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4399","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45788","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122356907004075&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122356907004075&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3546","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep."},{"lang":"es","value":"Desbordamiento de búfer basado en pila de las funciones (1) diff_addremove y (2) diff_change en GIT versiones anteriores a la 1.5.6.4, podría permitir a usuarios locales ejecutar código arbitrariamente a través de un PATH de longitud mayor a PATH_MAX del sistema cuando se ejecutan las utilidades GIT como git-diff o git-grep."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:parduslinux:2007:*:*:*:*:*:*:*","matchCriteriaId":"D249E4F6-FD0D-4E0D-9B44-9C92F5554BDB"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:parduslinux:2008:*:*:*:*:*:*:*","matchCriteriaId":"D709875E-1618-4078-96A7-2E6B5F5B2623"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9C0605BA-481D-4E71-8D57-A99F8CDB7492"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:*","matchCriteriaId":"FF740C26-5EB6-4184-93C3-DAC38F01CE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"668F528C-50BC-4944-9DC3-95D0413D2359"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AECFAEA8-3B87-4BFE-98A3-58F5129D9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D6228681-1150-4B80-AFB0-451BAEB393A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E807BBE3-A2EC-4EA2-8222-7A02D03848D6"}]}]}],"references":[{"url":"http://kerneltrap.org/mailarchive/git/2008/7/16/2529284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31780","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32029","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32384","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33964","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-16.xml","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0253","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1637","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495391/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30549","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020627","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44217","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2707","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00729.html","source":"cve@mitre.org"},{"url":"http://kerneltrap.org/mailarchive/git/2008/7/16/2529284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495391/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00729.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3548","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Sun Netra T5220 Server with firmware 7.1.3 allows local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Netra T5220 Server con firmware 7.1.3, permite a usuarios locales provocar una denegación de servicio (panic) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_t5220_server:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FC5A92D1-1B30-4718-A79E-5C4691AAF74C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31335","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239930-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30557","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020632","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2310","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239930-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3549","sourceIdentifier":"cve@mitre.org","published":"2008-08-07T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and OpenSolaris before snv_90 allows local users to cause a denial of service (system hang or panic) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la API pthread_mutex_reltimedlock_np de Sun Solaris 10 y OpenSolaris versiones anteriores a la snv_90, permite a usuarios locales provocar una denegación de servicio (cuelgue del sistema o panic) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"EFDB74EA-C4E0-47E2-A22A-ED2D763ED644"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"98445126-C244-4031-A9BC-E5A75AF8FE6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"32AE6527-AF60-4C00-9F75-11F550CEEE9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"E669599A-7D4F-4F49-A359-A158D81F56F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"ACA190A7-7633-4285-B0F9-A7FF91C7C02B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"90DF6C89-265E-4281-8557-FE1DFAF4890C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"70B28D10-69C4-4E8F-9772-EEF8BF2677CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"D77A8D1C-89B8-4926-8F1E-676315C42EAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"0268A9F2-F387-4894-9373-CBC39F38439F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"DB045976-32B5-466F-A74F-51A1E9CB074C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"D31BF463-18B0-4C7D-9318-0853B57200F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"2DFA1F8F-6718-4E66-A70A-2B4B46F41A07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"6E316AEF-AA3B-4A3E-AC24-0E49C6A2C5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"FD3142C5-7F3F-4F2E-BBC7-9E37E6B84A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"37F4D1F9-E7CE-4186-A435-19077D88D6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"7A0927CE-4B92-458B-977D-ED45FB00EC73"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_79b:*:sparc:*:*:*:*:*","matchCriteriaId":"561DFA15-7A7D-4200-9C5D-F6B62278FBA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_79b:*:x86:*:*:*:*:*","matchCriteriaId":"CCD40731-5049-4317-97AA-339A7086E257"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"07F9A55B-10F1-4ED1-B336-C0B4AE280405"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"2AE1AB01-1B7A-4443-90D7-B688E857B1C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"4230884B-C46E-4720-9A53-702F46D5D7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"A4A18AF8-15B7-442F-B7AA-0CF6EAD8242E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31348","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-239387-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30561","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020634","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2312","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44224","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5446","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-239387-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3550","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability."},{"lang":"es","value":"La página de login de CQWeb en IBM Rational ClearQuest 7.0.1 permite a atacantes remotos obtener información sensible (página de código fuente) a través de una combinación de secuencias de ?script? y ?/script? en el campo id, posiblemente relacionado con una vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK68332","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020642","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2317","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44254","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK68332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3551","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun Wireless Toolkit 2.5.2, allow remote attackers to execute arbitrary code via unknown vectors.  NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Sun Java Platform Micro Edition (también conocido como Java ME, J2ME, o mobile Java), como lo distribuido enSun Wireless Toolkit 2.5.2, permiten a atacantes remotos ejecutar código de su elección a través de vectores no especificados.\r\nNOTA: a fecha 07/08/2008, la única revelación es un vago preaviso sin información de uso inmediato. Sin embargo, dado que proviene de un investigador reputado, se le ha asignado un identificador CVE con propósito de seguimiento.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_platform_micro_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"88C17794-8C8C-4A60-8B72-0DABE2046989"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:wireless_toolkit:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"58F77276-4486-40D8-AFBC-BD15BB87EFA7"}]}]}],"references":[{"url":"http://www.security-explorations.com/n2press.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2srp.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2vendors.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/report_toc.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495224/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30591","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44478","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2press.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/n2srp.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/n2vendors.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/report_toc.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495224/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3552","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka \"ISSUES 11-15.\" NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information.  However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en dispositivos Series 40 3rd edition FP1 de Nokia, y posiblemente dispositivos posteriores, permiten a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos, probablemente relacionados con la escalada de privilegios MIDP y MIDlets persistentes, también se conoce como \"ISSUES 11-15\". NOTA: a partir de 20080807, la única divulgación es un pre-aviso vago sin información procesable. Sin embargo, debido a que es de una empresa dirigida por un investigador bien conocido, se le está asignando un identificador CVE para fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:nokia:series_40:*:3rd_edition:feature_pack_2:*:*:*:*:*","matchCriteriaId":"91A3D152-36A5-49C2-BC49-6651405D7E1F"}]}]}],"references":[{"url":"http://www.security-explorations.com/n2press.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2srp.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2vendors.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/report_toc.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495224/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30592","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44438","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2press.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/n2srp.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/n2vendors.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/report_toc.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495224/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3553","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka \"ISSUES 3-10.\" NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en dispositivos Nokia Series 40 3rd edition permiten a atacantes remotos ejecutar código de su elección a través de vectores desconocidos, posiblemente relacionado con privilegios de escalado MIDP y la persistencia MIDlets, también conocido como \"CUESTIONES 3-10\". \r\nNOTA:a fecha 07/08/2008, la única revelación es un vago preaviso sin información de uso inmediato. Sin embargo, dado que proviene de un investigador reputado, se le ha asignado un identificador CVE con propósito de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:j2me:*:*:*:*:*:*:*:*","matchCriteriaId":"9A52C7C3-E86E-44D9-B92A-067F97E06673"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:nokia:series_40:*:3rd:*:*:*:*:*:*","matchCriteriaId":"7286A349-0CAB-4449-A9A1-DBDCD2E0A4E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:j2me:*:*:*:*:*:*:*:*","matchCriteriaId":"9A52C7C3-E86E-44D9-B92A-067F97E06673"}]}]}],"references":[{"url":"http://www.security-explorations.com/n2press.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2srp.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2vendors.htm","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/report_toc.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495224/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30592","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44437","source":"cve@mitre.org"},{"url":"http://www.security-explorations.com/n2press.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/n2srp.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/n2vendors.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-explorations.com/report_toc.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495224/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3554","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Discuz! 6.0.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro searchid en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comsenz:discuz:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ADC32B18-DB54-4430-82D2-38B2BA2590C8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30583","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6214","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3555","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and possibly (5) Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the TID parameter, as demonstrated by uploading a .jpg file containing PHP sequences."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo index.php en (1) WSN Forum versión 4.1.43 y anteriores, (2) Gallery versión 4.1.30 y anteriores, (3) Knowledge Base (WSNKB) versión 4.1.36 y anteriores, (4) Links versión 4.1.44 y anteriores, y posiblemente (5) Classifieds anterior a versión 4.1.30, permite a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro TID, como es demostrado mediante la carga de un archivo .jpg que contiene secuencias de PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:forum:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.43","matchCriteriaId":"0C7106D8-E0FF-477E-9F02-D84B2351D302"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.30","matchCriteriaId":"A4C79627-FB50-4962-A650-FD352D1B6DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:knowledge_base:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.36","matchCriteriaId":"CF28E434-C74C-4CCF-A5DE-649B8B8A3DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"760A9211-9646-406F-B7CA-438D3E0E66A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AC09F045-5CCF-4A62-8C69-6567CAD32EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2E3A89E-56FE-4C68-963F-3E97A48BA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A1706938-BBC5-4D43-99DE-86995A6FDD60"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36BB81FF-58DF-4FAB-886A-CDF2603ED38C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BD38CE7B-2E32-4DD6-AFA1-4C4DCF04F9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"809E8844-243C-475A-A620-A942477162D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6BC3FFDD-6DC9-4FFF-AD50-030DD7BFAA2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"867CA8A2-0E8D-4824-9DD6-4878BF46078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"21819F3A-AB24-4BAF-A067-8672E825CF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"83BF0DA3-BBC9-4CD8-9848-F9A0C30C9B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"FB36FEB6-A7CF-4A4C-9F34-70BFF837EC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8973C458-D7B2-4CE4-B481-12B680C912CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D0DFC0CA-571A-4C59-A960-89A6B9F0F5C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BC0166C-6854-47EC-B324-54ED7A0B2F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0ADF5900-FA60-497F-844B-F9380C93F534"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"EC6BC3E1-1B05-4FD6-90DB-FF8C98CAAF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7D434EC2-F855-4E29-8B97-76683E361812"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4D10BA0D-A3E9-439D-AE51-2DAEF9F3F805"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"531C65A9-78C2-4883-8276-750A61A8693A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"C3F14F11-74D9-4228-91DF-515E939D0884"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"3B7587AE-9D5D-45B4-B1DA-62C4E5B07B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"9539DC5B-A109-4111-BF20-22008B8F402D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"C3F7DBDF-52CD-470A-A2E8-F3C1BB4160A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"B92F0373-01B6-44F7-A0B6-1EEC24FC9B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"07B0EFD6-EBDE-48A3-906A-BD2C2414F3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"2C3A5027-0511-4F76-A22B-578699D28EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.27:*:*:*:*:*:*:*","matchCriteriaId":"579C5A69-EFB9-49A9-B8CF-4D3EFF51E870"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.28:*:*:*:*:*:*:*","matchCriteriaId":"E51D9921-F78D-490E-BA06-98040A614829"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.29:*:*:*:*:*:*:*","matchCriteriaId":"88A2B713-04BE-445E-B142-1E57E700F389"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.30:*:*:*:*:*:*:*","matchCriteriaId":"0DDECBE5-F7AC-4FCD-A83C-0E16CE5597DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.31:*:*:*:*:*:*:*","matchCriteriaId":"B8C5F96E-98B3-4F37-8D0F-A3801451172C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.32:*:*:*:*:*:*:*","matchCriteriaId":"00EE6124-1BBA-4A42-8B4B-8B457746499A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.33:*:*:*:*:*:*:*","matchCriteriaId":"158808D7-1A89-4337-A205-78DF76E3941E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9F2E27C8-A458-4297-B9CF-3BED317074A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.35:*:*:*:*:*:*:*","matchCriteriaId":"719D9D0F-79E0-4EC8-83BE-040CE14823B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.36:*:*:*:*:*:*:*","matchCriteriaId":"B2DD1347-113E-460F-BF62-5EC7A2127D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.37:*:*:*:*:*:*:*","matchCriteriaId":"56671280-D2E9-4EC5-A157-C7E3F14BD22D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.38:*:*:*:*:*:*:*","matchCriteriaId":"47F8BA81-6F96-496D-A697-BB8ABE1C1235"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.39:*:*:*:*:*:*:*","matchCriteriaId":"75B59770-F49B-423A-AF42-30498B56B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.40:*:*:*:*:*:*:*","matchCriteriaId":"B2476C3B-E58D-4808-BA97-9B4A4A0CAB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.41:*:*:*:*:*:*:*","matchCriteriaId":"49D6910C-F49D-4A95-B703-32C810A404D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3729CCBC-41C6-415A-8F0F-1C0101CF1511"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F177F867-3AEB-4DF9-A9AF-0D0284A85762"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C70248B-29BC-40D0-89A6-7CBAF65E84A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"97D5B9CD-828D-404B-BD46-38BFA1FF1F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"01B5E2AD-AE16-49FD-B245-8E16D16E2BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"0805C33B-AE85-4D65-86A0-9327071D51D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3B691B9F-AE88-452B-9F2D-3662A9BD3FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED698DE4-0B2A-4D2F-ADB2-2D4B95153008"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8D01DADB-9F4D-4757-9CEF-CD69F10B1AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A6018F94-326C-4AC3-8872-37988D3D8D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"15B79206-A902-4B5A-BD81-EBEBD667B86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"1C0C1EE1-5BC8-4923-92F1-5211EF3CF783"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"76E72AED-661F-448D-AD5A-5C991C5C91BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"84CB8AD7-1FD6-4699-9025-101DBE7C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"D90EFAEB-2179-4254-9DE0-D158F3A5693B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"E99BB789-5B84-455B-8051-2C30A0A475FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"85F49273-5205-400F-A497-90D68405E29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"26B2BCC9-E130-4272-9675-E1C5B8FCFB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"3A6427E0-7464-4714-8857-9017B2466D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"B313BB95-2D0B-48BA-9E14-95583E418647"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"2A24DA00-A4E9-4B08-AE83-A2F075717268"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CF3F6764-940E-455C-830F-BE102A1488C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"59B8A7BC-2B25-456E-B399-55BE2A555AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8C832715-0D32-4BDC-9E3F-336CC7C987BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"7D1FCD19-EC28-4EB6-8ED5-719ECAA77FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"D89DD06E-8791-4027-AAE9-5E2566094C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"D86C4C4C-ED32-4489-9C1B-163E95CD7F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"969C429D-EC80-4F31-ABF2-CF0019EB8673"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"DE2EF4DD-34B8-4382-9BD1-E8F35C24F828"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"04C80364-7B20-4C97-8036-0B18F2213D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"1F58E2F9-38CA-4948-8EDB-A8D1CCB4B683"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"CF4A1F88-D24A-4862-ADD2-55D57D699052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"A45B1611-192F-41EA-AF41-ACED2FD6E864"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"FD936A53-113B-4BDE-BEFA-BD2DA76F5C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"E99FF20E-68D9-4A9E-B014-EA1B47B0158D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"1D3ABB00-E8DE-41BF-B6F5-09CD2A5A2ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"2DCA2630-95A0-4EB9-9DD3-80952B8833D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"D6E1F153-023B-4296-8CBD-C41D941E5E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.38:*:*:*:*:*:*:*","matchCriteriaId":"84C8B5B8-16E0-4E21-BD15-9FBCECFECB3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.39:*:*:*:*:*:*:*","matchCriteriaId":"04B3717A-8055-4736-A168-33213D65A3EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.40:*:*:*:*:*:*:*","matchCriteriaId":"4B07C23B-253D-4C98-A53D-549CB759257B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.41:*:*:*:*:*:*:*","matchCriteriaId":"4AA23ADB-1B18-4CC2-ADD3-7BC3E062234E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.42:*:*:*:*:*:*:*","matchCriteriaId":"2AB8C1C0-102B-40EC-A392-957F4DCE4A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.43:*:*:*:*:*:*:*","matchCriteriaId":"7959131D-FFFF-4423-AE12-6ED0AE4E13D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.1.44:*:*:*:*:*:*:*","matchCriteriaId":"B089BA1F-BAD2-4E2C-9A91-D227A18CA788"}]}]}],"references":[{"url":"http://secunia.com/advisories/31392","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4120","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44236","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6208","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3556","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) showmember parameter in a members action and the (2) thread parameter in a board action.  NOTE: vector 1 might be the same as CVE-2008-2522."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de Battle.net Clan Script 1.5.2 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) showmember en una acción members y el parámetro (2) thread en una acción board.\r\nNOTA: el vector 1 puede ser el mismo que en CVE-2008-2522."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:battlenet_clan_script:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A51DCC11-7C75-4620-87D6-09F4B4B3DD2B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495167/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30565","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44262","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495167/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3557","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the adminuser and loggedin cookies."},{"lang":"es","value":"Free Hosting Manager 1.2 y 2.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo mediante el establecimiento de las cookies adminuser y loggedin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fhm-script:free_hosting_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"11B1CA19-521B-40F2-9D6B-C8685E80F28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fhm-script:free_hosting_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"802E3D39-6B25-4F97-B84E-37CEA7E02623"}]}]}],"references":[{"url":"http://secunia.com/advisories/31383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4118","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30580","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44260","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6213","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3558","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el control ActiveX de WebexUCFObject en la biblioteca atucfobj.dll en Cisco WebEx Meeting Managern anterior a versión 20.2008.2606.4919, permite a los atacantes remotos ejecutar código arbitrario por medio de un argumento largo en el método NewObject."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meeting_manager:20.2008.2601.4928:*:*:*:*:*:*:*","matchCriteriaId":"A52FBB07-48ED-417C-B574-BDF6F67ADD0E"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063692.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809e2006.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/661827","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30578","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020641","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44250","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6220","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063692.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809e2006.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/661827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3559","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the (1) filename parameter to search.asp and the (2) page parameter to order.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en KAPhotoservice permiten a atacantes remotos inyectar web script o HTML de su elección a través del parámetro (1) filename de search.asp y el parámetro (2) page de order.asp.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaphotoservice:kaphotoservice:*:*:*:*:*:*:*:*","matchCriteriaId":"5024C49D-78DB-490A-9A4C-97D3BAFA5422"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30567.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31369","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30567","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44271","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3560","sourceIdentifier":"cve@mitre.org","published":"2008-08-08T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en kshop_search.php del módulo Kshop 2.22 para Xoops permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:kshop_module:2.22:*:*:*:*:*:*:*","matchCriteriaId":"97E2F7C6-8066-4C0D-BE21-F3D0BB38735E"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30576.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lostmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30576","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44261","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30576.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lostmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3561","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ag parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en s03.php en Powergap Shopsystem, cuando magic_quotes_gpc están desactivadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powergap:shopsystem:*:*:*:*:*:*:*:*","matchCriteriaId":"C1A4D9B4-D6B8-47C7-8328-B467135E17B3"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/powergap-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30558","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44270","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/powergap-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3562","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mods parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el index.php del módulo  Contact en Chupix CMS 0.1.0, cuando magic_quotes_gpc están desactivadas, permite a atacantes remotos incluir y ejecutar archivos locales a través de .. (punto punto) en el parámetro \"mods\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chupix:chupix_cms:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E8CBA8DB-979F-4879-BF30-C0E65E45CFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:chupix:cms_contact_module:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"99CC3B7F-5E39-4D23-AB9F-018F1BBF848B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31362","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30564","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30564/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30564/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3563","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the checked array parameter to plog-download.php in an album action and (2) unspecified parameters to plog-remote.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the activate parameter to admin/plog-themes.php, related to theme_dir settings."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Plogger 3.0 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) checked array a plog_download.php en una acción \"album\" y a través de (2) parámetros no especificados a plog-remote.php y (3) permite a administradores autenticados remotamente la ejecución de comandos SQL de su elección a través del parámetro \"activate\" a admin/plog-themes.php, relacionado con los parámetros de theme_dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plogger:plogger:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"60432932-95B0-4946-B6AF-F000572EE1B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:plogger:plogger:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F204D149-3FFB-4167-A7AD-082474287548"},{"vulnerable":true,"criteria":"cpe:2.3:a:plogger:plogger:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FA47AC52-F585-42F9-AE1E-B3F23C081B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:plogger:plogger:2.0:*:*:*:*:*:*:*","matchCriteriaId":"258FF6A2-913B-4715-B8EF-9FC55227370B"},{"vulnerable":true,"criteria":"cpe:2.3:a:plogger:plogger:2.1:beta:*:*:*:*:*:*","matchCriteriaId":"A6D1C4C9-C2FF-4903-B2C9-3359409A81FD"}]}]}],"references":[{"url":"http://dev.plogger.org/changeset/569","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4121","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00121-08042008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495116/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30547","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44233","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6204","source":"cve@mitre.org"},{"url":"http://dev.plogger.org/changeset/569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00121-08042008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495116/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3564","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p, (2) cat, and (3) archive parameters.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en Dayfox Blog  4, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de ..(punto punto) en los parámetros 1) p, (2) cat y (3) archive. NOTA: en algunos entornos esto puede ser aprovechado para la inclusión remota de fichero usando una ruta compartida UNC o una URL ftp, ftps o ssh2.sftp"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dayfox_designs:dayfox_blog:4:*:*:*:*:*:*:*","matchCriteriaId":"B20D3C0A-3FEE-473F-8B60-BF4C885A69A2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4122","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30538","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44203","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6203","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3565","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to (1) day.php, (2) week.php, (3) month.php, (4) search.php, (5) report.php, and (6) help.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Meeting Room Booking System (MRBS) 1.2.6, permiten a atacantes remotos inyectar web script o HTML de su elección a través del parámetro area a (1) day.php, (2) week.php, (3) month.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C9F8AEEA-5769-481F-8134-0D18A989B1C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30531/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30531/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3566","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to (1) the default URI or (2) index.php, or (3) the PATH_INFO to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en ZoneO-soft freeForum 1.7, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"acuparam\" a (1) la URI por defecto (2) index.php, o (3) en el PATH_INFO al index.php. NOTA: el origen de esta información es desconocidos. Los detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneo-soft:freeforum:1.7:*:*:*:*:*:*:*","matchCriteriaId":"307712AC-FCFB-444D-81D9-306D1ECAC16D"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30509.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30509","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44178","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30509.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3567","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-zone scripting en la función NowPlaying en NullSoft Winamp anterior a versión 5.541, permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS) por medio de un archivo MP3 con JavaScript en etiquetas id3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.54","matchCriteriaId":"97C7D4DC-6157-4F53-93D2-F8539B43F0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"}]}]}],"references":[{"url":"http://blog.watchfire.com/wfblog/2008/09/winamp-nowplayi.html","source":"cve@mitre.org"},{"url":"http://forums.winamp.com/showthread.php?threadid=295505","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30539","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44207","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15716","source":"cve@mitre.org"},{"url":"http://blog.watchfire.com/wfblog/2008/09/winamp-nowplayi.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forums.winamp.com/showthread.php?threadid=295505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3568","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the Dirroot parameter, a different vulnerability than CVE-2006-4890.1."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en fckeditor/editor/filemanager/browser/default/connectors/php/connector.php en UNAK-CMS 1.5.5 permite a atacantes remotos incluir y ejecutar ficheros locales arbitratios a través del path completo del fichero  en el parámetro Dirroot, es una vulnerabilidad distinta a CVE-2006-4890.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unak:unak-cms:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5CBDDF75-88B7-40A2-8CEE-415B12181E13"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4123","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495090/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30533","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44212","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495090/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3569","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en XAMPP 1.6.7, cuando register_globals está activado, permite a atacantes remos inyectar secuencias de comandos web o HTML de su eleccción a través de los parámetros (1) iart.php y (2) ming.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache_friends:xampp:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"CF2127AA-F935-4BA1-B276-025099B668DE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4127","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495096/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44214","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495096/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3570","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abg_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en index.php en Africa Be Gone (ABG) 1.0a, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro abg_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:africabegone:africa_be_gone:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"F0C4AD4F-0E1A-4959-8129-2B1B49AC7CDA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4124","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44195","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6183","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3571","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900."},{"lang":"es","value":"El Phaser Xerox 8400 permite a atacantes remotos provocar una denegación de servicio (reinicio) a través de un paquete UDP vacío al puerto 1900."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:phaser:8400:*:*:*:*:*:*:*","matchCriteriaId":"92FB19E1-AB8B-4C60-A689-EDA45E2B6DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31329","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4128","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2308","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44211","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6196","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3572","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.php en Pligg 9.9.5, permite a atacantes remotos inyectar4 secuencias de comandos web o HTML de su elección a través del parámetro \"category\" (categoría)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B84CC9F6-6447-4AD1-A83B-C5404221B073"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121769609623356&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4129","source":"cve@mitre.org"},{"url":"http://www.rooksecurity.com/blog/?p=19","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30516","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44189","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121769609623356&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rooksecurity.com/blog/?p=19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3573","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string."},{"lang":"es","value":"La implementación CAPTCHA en (1) Pligg 9.9.5 y posiblemente (2) Francisco Burzi PHP-Nuke 8.1, proporciona un número aleatorio crítico (el valor del ts_random) dentro de la URL en el traibuto SRC de un elemento IMG, lo que permite a atacantes remotos evitar el test CAPTCHA mediante un cálculo que combina ese valor con la fecha actual y la cadena HTTP del User-Agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:php-nuke:8.1:*:*:*:*:*:*:*","matchCriteriaId":"DA4AF173-293B-4867-9497-82C25AFA2A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg:9.9.5:*:*:*:*:*:*:*","matchCriteriaId":"29D1BF26-99D2-48F4-8B3C-7FAA2FB516EA"}]}]}],"references":[{"url":"http://www.rooksecurity.com/blog/?p=17","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30518","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44192","source":"cve@mitre.org"},{"url":"http://www.rooksecurity.com/blog/?p=17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3574","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) lang_footer parameter to (a) data/inc/footer.php; the (2) pluck_version, (3) lang_install22, (4) titelkop, (5) lang_kop1, (6) lang_kop2, (7) lang_modules, (8) lang_kop4, (9) lang_kop15, (10) lang_kop5, and (11) titelkop parameters to (b) data/inc/header.php; the pluck_version and titelkop parameters to (c) data/inc/header2.php; and the (14) lang_theme6 parameter to (d) data/inc/themeinstall.php."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS)en Pluck 4.5.2, cuando register_globals es activado, permite a los atacantes remotos inyectar una secuencia de comandos web o HTML arbitrarios a través del (1) parámetro lang_footer en (a) data/inc/footer.php; los parámetros (2) pluck_version, (3) lang_install22, (4) titelkop, (5) lang_kop1, (6) lang_kop2, (7) lang_modules, (8) lang_kop4, (9) lang_kop15, (10) lang_kop5, y (11) titelkop en (b) data/inc/header.php; los parámetros pluck_version y titelkop en (c) data/inc/header2.php; y el parámetro (14) lang_theme6 en (d) data/inc/themeinstall.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pluck:pluck:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A66D1EAF-2957-4B62-97CD-82F3DF958D9E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4125","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495110/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30542","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44237","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495110/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3575","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[gsLanguage] parameter, a different vector than CVE-2006-4477 and CVE-2004-0132."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en modules/calendar/minicalendar.php en ezContents CMS permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[gsLanguaje]. Un vector diferente de los CVE-2006-4477 y CVE-2004-0132."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezcontents:ezcontents_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"0DA3DF37-5E7B-45EA-BD3A-B66CAC3EB4D8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494755/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44480","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494755/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3576","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en la función TruncateString  en src/gfx.cpp en OpenTTD anterior a 0.6.2, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) o posiblemente la ejecución de código de su elección a través de una cadena manipulada. NOTA: algunos de estos detalles se han obtenido a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.2-rc2","matchCriteriaId":"629667CC-DE02-4236-B5F0-EB7F566BFDE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3B0C66D6-F933-43B1-8BC0-72625E70442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.2-rc1:*:*:*:*:*:*:*","matchCriteriaId":"7B47CA7A-CE9F-416B-98FA-361B21EFBA5E"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=233929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31350","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34161","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-09.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=617243","source":"cve@mitre.org"},{"url":"http://www.openttd.org/index.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2285","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44168","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=233929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=617243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openttd.org/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3577","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the \"-g\" parameter in the ttd_main function.  NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments."},{"lang":"es","value":"Desbordamiento de búfer en src/openttd.cpp en OpenTTD anterior a 0.6.2, permite a usuarios locales ejecutar código de su elección a través de un nombre de archivo largo proporcionando el parámetro \"-g\" en la función ttd_main. NOTA: es inverosímil que esta cuestión pueda sobrepasar los límites de privilegios en entornos típicos(estándar)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"499EFCAE-9309-4C26-A846-10396CBC628D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6908E44D-3553-430D-B870-266971DC0D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DEBDEF33-48E4-42F4-A725-838DA9191334"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"422B0D3E-503C-4CA6-83B9-4FC58BA898C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"46557BD6-66A0-4892-9468-687A4B63F5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6A186C5E-ACAA-47C8-9FA0-133E9D7F2900"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"24094775-BAF9-4C2E-8C38-86916E22B5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B7CF73FA-09F6-4CE5-932E-BA6B43D66F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"77E87583-5769-4114-94F7-043897DA0FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"718E8C39-A59C-4576-B00D-31A8F0C1762C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"83B1A7D7-D920-41F3-8DE9-D39007DDDEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"327B826F-0F4E-420D-8C93-4551A4B9F190"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FE12C455-5CA0-4581-A3F3-CC8867CCEEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"5DC5E23E-3A14-49B4-A676-AAA96F25D01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F65EA852-3C46-47D6-8D6B-DC3546165CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4441B6D-1A48-4DD4-AAAB-FC3B5F00DE4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"985D96E7-0BAE-46DF-A1E2-BD4585C6CABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"73062670-5CB9-4AB8-B45D-21E0D557FD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"876A0BCB-F792-4A21-85AB-5D7D63C3E987"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"97BFB677-F29E-451E-855A-452F8AE0A9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*","matchCriteriaId":"99308463-E1A6-4018-819E-29043BFE8886"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:rc2:*:*:*:*:*:*","matchCriteriaId":"C9E8C9AB-C303-4FB0-AD1D-C7EE4E93E347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DF5AEFDA-322E-49CD-AE94-82020B9B7AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6AF50B50-ED50-4BCD-8BAE-9161911A0FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3485EF5-F3DF-4622-92D9-B092F46D5AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"12EB77E6-94D0-4980-B392-59ACABEDB8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"3051AB9F-5C64-4D95-805F-8575B5BD39D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*","matchCriteriaId":"494DD878-5854-49DC-A0E1-2904D70582EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BFD07BE5-47E4-47E6-B6A2-CEC2BCC3E383"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1A5AA729-0198-4644-9810-E501C3C47EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1D5EC680-4686-4C04-957E-B597A1563F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*","matchCriteriaId":"F2C02877-6FE8-4C98-9AB6-5E4D1AC49FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"89325227-4E0A-49FA-83C1-D0D5E2CEF45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*","matchCriteriaId":"21763CB0-1FFA-4FF4-AA6F-47614E8BEEB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A151DBA9-3A94-431F-BC22-C86E4268263B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*","matchCriteriaId":"7246859E-A6CF-4617-A37A-BF17849D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*","matchCriteriaId":"85FA63BC-2292-49F8-A0E1-34C8497236C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*","matchCriteriaId":"78365F07-CF44-48FD-B048-2F510D147D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CBAD231-4365-4A5F-9FD8-1EE13F7FC8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B052159B-4CFF-47DE-A1B7-35C467AD73BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"BDF5228B-B99A-4E4E-A66F-59275A36B28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5E5F1FE7-ADCB-42AD-AB99-0F17AD8E2FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CD6E4B8D-6C12-4053-A8D2-F64F92AF733A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"9B9BDCD3-85B9-4C17-B625-FC7F62450FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8648A48E-BCF9-4B34-B1FF-16B780C2797D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3B0C66D6-F933-43B1-8BC0-72625E70442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"72070978-F3B9-46D6-A3FD-0932D751AD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"5D6483EA-FC98-4367-A34B-795F858815E6"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=233929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34161","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-09.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=617243","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2285","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44436","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=233929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=617243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3578","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long irc:// URI."},{"lang":"es","value":"HydraIRC 0.3.164 y anteriores, permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída de aplicación) a través de una URI irc:// larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.164","matchCriteriaId":"E334F1D7-F510-4021-BF6D-466B30A961E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.057:*:*:*:*:*:*:*","matchCriteriaId":"97D3E42E-47D9-4AAB-BF51-0278AF9D2CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.058:*:*:*:*:*:*:*","matchCriteriaId":"6BB99EE0-9E68-411B-80ED-AAE1F253C4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.059:*:*:*:*:*:*:*","matchCriteriaId":"2B4AD95C-F59E-47EC-AD13-E1A17CA48567"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.060:*:*:*:*:*:*:*","matchCriteriaId":"6F89BA2C-811A-4A5D-BE58-2E79F11E9CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.061:*:*:*:*:*:*:*","matchCriteriaId":"F55848DA-EB67-4E23-9055-B68B126C3F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.062:*:*:*:*:*:*:*","matchCriteriaId":"3A1D72EB-B4F1-4CFC-B9D2-BB4B37648978"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.063:*:*:*:*:*:*:*","matchCriteriaId":"C478B633-A00C-4A74-8274-A4A71F6A9D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.064:*:*:*:*:*:*:*","matchCriteriaId":"694582FF-E358-4B73-ADC1-E48FB217F4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.065:*:*:*:*:*:*:*","matchCriteriaId":"1D0A29F7-887F-4E20-A131-EF4AAAB921BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.066:*:*:*:*:*:*:*","matchCriteriaId":"F75582B3-6CCB-46E0-AD1C-0D09408B4BC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.067:*:*:*:*:*:*:*","matchCriteriaId":"A67A5DF2-7C1D-468D-8FA7-E3ABEEC6CED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.068:*:*:*:*:*:*:*","matchCriteriaId":"8293C3F4-5E04-4107-9B94-DEF9D47C61E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.069:*:*:*:*:*:*:*","matchCriteriaId":"206F9D36-8A80-4787-BA10-622629E73660"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.070:*:*:*:*:*:*:*","matchCriteriaId":"615CD382-29DF-45A4-A612-41E1664866BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.071:*:*:*:*:*:*:*","matchCriteriaId":"7647E8D5-3404-4BAE-9277-4DCA3CC6B708"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.072:*:*:*:*:*:*:*","matchCriteriaId":"98744C9B-B62D-4B5F-8D80-E86086364D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.073:*:*:*:*:*:*:*","matchCriteriaId":"7AAC98C4-EEBD-4380-952B-95EB92E09DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.074:*:*:*:*:*:*:*","matchCriteriaId":"19AFDF6D-40C6-405C-AFC6-BAE78F8D3709"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.075:*:*:*:*:*:*:*","matchCriteriaId":"23014F41-F28A-466B-A64C-76E5018CF03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.076:*:*:*:*:*:*:*","matchCriteriaId":"4C0CD1B8-3CDA-4DBB-A373-9CCD96470FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.077:*:*:*:*:*:*:*","matchCriteriaId":"6EEBC7E0-A538-41DD-A74B-AF1A35317A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.078:*:*:*:*:*:*:*","matchCriteriaId":"651A89A2-5EB7-4092-B647-12E2968D0653"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.079:*:*:*:*:*:*:*","matchCriteriaId":"4C5D1026-1A2D-4563-A09A-E06E0D52E3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.080:*:*:*:*:*:*:*","matchCriteriaId":"D628751B-EC5D-4260-83C4-DAF8A9BBA466"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.081:*:*:*:*:*:*:*","matchCriteriaId":"9D818F9A-6489-407B-83FD-E178E8757867"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.082:*:*:*:*:*:*:*","matchCriteriaId":"4AA167B0-9F9B-4E7D-A844-112E2E43545C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.083:*:*:*:*:*:*:*","matchCriteriaId":"CF1C5AC7-8CF6-431B-9D9B-FD50F0DA1A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.084:*:*:*:*:*:*:*","matchCriteriaId":"F3185229-B6D7-4BBD-B3E0-A2C8AE0273AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.085:*:*:*:*:*:*:*","matchCriteriaId":"99390BF6-AFD4-48EF-8AC5-14B69DCE4B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.086:*:*:*:*:*:*:*","matchCriteriaId":"CE9BBA77-B210-42B7-91E7-D82BAE61EF78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.087:*:*:*:*:*:*:*","matchCriteriaId":"6C1C55D8-B95F-40A8-B755-4D7DDDEA573F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.088:*:*:*:*:*:*:*","matchCriteriaId":"0D6D546B-0FF9-4B7F-87DF-F328F00819A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.089:*:*:*:*:*:*:*","matchCriteriaId":"7CA9D806-158A-4AE7-96BE-2E33C6CCFCE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.090:*:*:*:*:*:*:*","matchCriteriaId":"93A2CFFE-0751-46DD-94B1-D2AF9C0712D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.091:*:*:*:*:*:*:*","matchCriteriaId":"48C12AF5-BFC3-4521-B401-510A55D68145"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.092:*:*:*:*:*:*:*","matchCriteriaId":"5343468C-05FC-4B30-BAEB-793642FF6847"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.093:*:*:*:*:*:*:*","matchCriteriaId":"DC34196B-951C-4B8B-AB59-E5CFE397CAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.094:*:*:*:*:*:*:*","matchCriteriaId":"0D64A413-0F8A-42A8-A239-F3642E82D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.095:*:*:*:*:*:*:*","matchCriteriaId":"A6E0223C-102C-4EC9-8DA9-51649A33F8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.096:*:*:*:*:*:*:*","matchCriteriaId":"E7601E4D-BE14-48A1-82E7-D0BEFCB1A20A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.097:*:*:*:*:*:*:*","matchCriteriaId":"C9570AD5-E424-404D-81D0-0926B8245119"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.098:*:*:*:*:*:*:*","matchCriteriaId":"7774FD09-9A3C-43A5-BC2D-6C7A00DE228A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.099:*:*:*:*:*:*:*","matchCriteriaId":"C76F24A0-0B0C-40AE-B62C-215061D0F78A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.101:*:*:*:*:*:*:*","matchCriteriaId":"800133E5-0268-4EBB-8AF8-67C12AF4F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.102:*:*:*:*:*:*:*","matchCriteriaId":"B4C09684-510A-4B5B-B0B4-0FD0BDAAA436"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.103:*:*:*:*:*:*:*","matchCriteriaId":"90108A28-1B78-4DA3-9E22-C922185480A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.104:*:*:*:*:*:*:*","matchCriteriaId":"49B186A4-F789-4CFD-B561-DDE4435D4644"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.105:*:*:*:*:*:*:*","matchCriteriaId":"CEA1D725-1844-4048-BBC1-4A65CF2846CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.106:*:*:*:*:*:*:*","matchCriteriaId":"FD16469A-BE57-40E8-AAD1-8702417EDEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.107:*:*:*:*:*:*:*","matchCriteriaId":"343B573D-B20B-4348-A6C5-EBA2F6ED47F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.108:*:*:*:*:*:*:*","matchCriteriaId":"BBB15E89-C0DA-4B9F-AB34-F650EC9479AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.109:*:*:*:*:*:*:*","matchCriteriaId":"60776C56-82BC-46FD-94C3-252E941DAA84"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.110:*:*:*:*:*:*:*","matchCriteriaId":"8CC49B12-C1C4-4DE8-BFF4-4A543BDF222A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.111:*:*:*:*:*:*:*","matchCriteriaId":"A5DDE862-9B9F-41C3-86C2-27FFD647F868"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.112:*:*:*:*:*:*:*","matchCriteriaId":"713FA229-181A-4E59-BA23-90718570392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.113:*:*:*:*:*:*:*","matchCriteriaId":"3AE2034A-791A-4192-8003-3934EF67A553"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.114:*:*:*:*:*:*:*","matchCriteriaId":"5116D81C-86E8-4C4E-8AE4-22A433DDC536"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.115:*:*:*:*:*:*:*","matchCriteriaId":"D3847E3A-B666-4626-92CD-5E0B6A7B89C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.116:*:*:*:*:*:*:*","matchCriteriaId":"C769FF05-6F34-4666-8D08-327B63741E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.117:*:*:*:*:*:*:*","matchCriteriaId":"18A7DD29-1001-48C1-95BD-BA33C197CA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.118:*:*:*:*:*:*:*","matchCriteriaId":"112837DA-9383-47E6-9962-2B095C247B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.119:*:*:*:*:*:*:*","matchCriteriaId":"BC4172D4-9F8A-4E3B-BA22-80C0AD439036"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.120:*:*:*:*:*:*:*","matchCriteriaId":"95D24A53-C488-4796-800B-C22CED91DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.121:*:*:*:*:*:*:*","matchCriteriaId":"EFE9F751-8936-41D0-8F92-ACEDE3AB5850"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.122:*:*:*:*:*:*:*","matchCriteriaId":"49A81AE7-033B-448E-A05A-D6A5ABBAE907"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.123:*:*:*:*:*:*:*","matchCriteriaId":"BA5ECA77-B18C-466A-9F17-96A80DDBD6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.124:*:*:*:*:*:*:*","matchCriteriaId":"DFA5AC72-3EF4-46AD-87FD-6279DCBBCECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.125:*:*:*:*:*:*:*","matchCriteriaId":"72CBEACD-929E-4B59-ACBF-07B5F06A21F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.126:*:*:*:*:*:*:*","matchCriteriaId":"61058715-7589-4395-B7AE-B5CEEE0485A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.127:*:*:*:*:*:*:*","matchCriteriaId":"00BE9D19-EBDC-4549-8180-45B5FD4CE6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.128:*:*:*:*:*:*:*","matchCriteriaId":"20909456-BC05-46B6-B8DC-423C1778835A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.129:*:*:*:*:*:*:*","matchCriteriaId":"3E1AAA17-1513-4A71-8E9A-85422F44811F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.130:*:*:*:*:*:*:*","matchCriteriaId":"B582D136-1216-45FA-842F-F0E21945911B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.131:*:*:*:*:*:*:*","matchCriteriaId":"83803F88-070C-4A98-9EA2-D2F0FCB1EDDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.132:*:*:*:*:*:*:*","matchCriteriaId":"E132E85E-7115-41E6-B082-3611452A2002"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.133:*:*:*:*:*:*:*","matchCriteriaId":"E995406B-F819-42E9-87CE-41EB9EF85CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.134:*:*:*:*:*:*:*","matchCriteriaId":"7B7B3175-7D17-4970-9C62-63E048480C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.135:*:*:*:*:*:*:*","matchCriteriaId":"964A60BE-2A4A-4004-B4D7-6BEF2FDF844E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.136:*:*:*:*:*:*:*","matchCriteriaId":"15678F1F-519D-4930-B69B-854E801526DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.137:*:*:*:*:*:*:*","matchCriteriaId":"DD5A4157-EA82-4615-8ADE-B8C562584B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.138:*:*:*:*:*:*:*","matchCriteriaId":"EC27609E-317A-41CF-BF4C-E4EA65012307"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.139:*:*:*:*:*:*:*","matchCriteriaId":"01BA7D2E-AE31-4F58-988F-EB38FC99F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.140:*:*:*:*:*:*:*","matchCriteriaId":"36844519-DEB6-4792-8B52-93E0E76364E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.141:*:*:*:*:*:*:*","matchCriteriaId":"F190EB32-AD83-4574-BC33-178D7F9B3123"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.142:*:*:*:*:*:*:*","matchCriteriaId":"EE442BC9-0FBC-416C-8487-0720E6A09049"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.143:*:*:*:*:*:*:*","matchCriteriaId":"493E44EE-AD96-40B8-BE64-6632B8B123FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.144:*:*:*:*:*:*:*","matchCriteriaId":"54228BD1-195C-4463-9432-A6051947DB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.145:*:*:*:*:*:*:*","matchCriteriaId":"06505B7E-C506-4E6A-A66F-20C84483C1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.146:*:*:*:*:*:*:*","matchCriteriaId":"5AD8C9F0-FE22-4959-8889-B2D79D7EE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.147:*:*:*:*:*:*:*","matchCriteriaId":"34455E52-2F6D-4C07-BAA4-CACF8EC22B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.148:*:*:*:*:*:*:*","matchCriteriaId":"7A7E63E2-A2B9-4C66-A7C4-27D21E4CAAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.149:*:*:*:*:*:*:*","matchCriteriaId":"9CBCD662-0E17-445E-91EC-15C2D490CF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.150:*:*:*:*:*:*:*","matchCriteriaId":"FB941613-DC85-4231-92DB-E769055A4DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.151:*:*:*:*:*:*:*","matchCriteriaId":"3FA12695-74B1-4224-B445-BBA89C89EB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.152:*:*:*:*:*:*:*","matchCriteriaId":"289BD72A-DF79-409B-9D6F-9261FF5645F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.153:*:*:*:*:*:*:*","matchCriteriaId":"050BC3C1-0254-42B4-B9A9-CCD9ECC83E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.154:*:*:*:*:*:*:*","matchCriteriaId":"5E5B48DA-CDD6-4AA3-9433-9AD5140312B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.155:*:*:*:*:*:*:*","matchCriteriaId":"6735BF8C-8A7A-46B2-B2FB-5C993F503B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.156:*:*:*:*:*:*:*","matchCriteriaId":"AF413E75-6FE3-4E70-9FAB-33082AC42B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.157:*:*:*:*:*:*:*","matchCriteriaId":"166036F9-44A4-4A82-AABB-09062763A76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.158:*:*:*:*:*:*:*","matchCriteriaId":"D5DD0823-BCF4-42D8-88DE-316BCA85ED1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.159:*:*:*:*:*:*:*","matchCriteriaId":"DF05E54F-53F8-4A82-9F83-A5C22D014AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.160:*:*:*:*:*:*:*","matchCriteriaId":"DF604A25-98BD-4152-B63C-894DEC7832BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.161:*:*:*:*:*:*:*","matchCriteriaId":"F56643F2-0CAB-4925-B709-CEA57F8E1732"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.162:*:*:*:*:*:*:*","matchCriteriaId":"1424E716-96B1-454D-AAFF-809EC133814C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.3.163:*:*:*:*:*:*:*","matchCriteriaId":"F2930D82-549D-4449-93B8-4F81EC6C84B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.23:*:*:*:*:*:*:*","matchCriteriaId":"E1C50BB4-1262-49DB-9810-4A4582261992"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.24:*:*:*:*:*:*:*","matchCriteriaId":"7A6C926E-360F-4D29-912B-10429192ECCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.25:*:*:*:*:*:*:*","matchCriteriaId":"681BF598-6164-46F0-93FB-017688CC77C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.300:*:*:*:*:*:*:*","matchCriteriaId":"31EB0C07-150B-4E60-A51A-F0BA1E93F439"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.301:*:*:*:*:*:*:*","matchCriteriaId":"3749E5B2-6BBB-4F8F-B04B-9A528179D535"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.302:*:*:*:*:*:*:*","matchCriteriaId":"BC6DB927-F2E5-4627-9016-EDB1B6A53CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.303:*:*:*:*:*:*:*","matchCriteriaId":"7A18F631-ED7C-4962-B2DD-3022A71733D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.304:*:*:*:*:*:*:*","matchCriteriaId":"11B49AD1-EE41-4E03-B23B-ABD433B45246"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.305:*:*:*:*:*:*:*","matchCriteriaId":"9E78EC0B-0DAC-4B63-912C-DD7DAA47FEBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.306:*:*:*:*:*:*:*","matchCriteriaId":"531E9CDD-23AE-4F72-B999-1C643AB32EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.307:*:*:*:*:*:*:*","matchCriteriaId":"48076730-7135-44B7-A7B6-17B1E6DBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.308:*:*:*:*:*:*:*","matchCriteriaId":"180B9388-DAAF-4E57-867F-E85ECB747A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.309:*:*:*:*:*:*:*","matchCriteriaId":"3B7FC5B6-0978-4571-8389-93B364951B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.310:*:*:*:*:*:*:*","matchCriteriaId":"43EC251C-14BE-48EC-A7D2-F81746D73E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.311:*:*:*:*:*:*:*","matchCriteriaId":"2416C351-EF51-4F30-9B24-E64A63D585AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.312:*:*:*:*:*:*:*","matchCriteriaId":"E76EF356-F21B-49D8-A3CC-AC211EB4A943"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.313:*:*:*:*:*:*:*","matchCriteriaId":"F0D4CDA8-8D83-4496-9F77-DF7ECD26FE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.314:*:*:*:*:*:*:*","matchCriteriaId":"292B9FA1-748D-4331-9884-C4D57F884C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.315:*:*:*:*:*:*:*","matchCriteriaId":"EC8AF886-F452-490F-8DF4-A9DADB1174AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.316:*:*:*:*:*:*:*","matchCriteriaId":"02A98F98-41E4-4176-97CE-691EEB417FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.317:*:*:*:*:*:*:*","matchCriteriaId":"3A4BF12E-43AE-4BF8-9FD9-FDC2E2E3A6EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.318:*:*:*:*:*:*:*","matchCriteriaId":"A1E0B0ED-4670-4EA3-9FB3-D0335699686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.319:*:*:*:*:*:*:*","matchCriteriaId":"A04782DA-FE3F-42A9-92A8-2977D577B067"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.320:*:*:*:*:*:*:*","matchCriteriaId":"388A4ECD-F54B-4750-9190-013928E2EEEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.321:*:*:*:*:*:*:*","matchCriteriaId":"72D9B0E8-1974-40E9-96E4-06CA35B0463D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.322:*:*:*:*:*:*:*","matchCriteriaId":"A0DE6513-7CAB-4509-9966-3202CBBF4E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.323:*:*:*:*:*:*:*","matchCriteriaId":"8990D03B-170C-4E68-91AE-9731B8169909"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.324:*:*:*:*:*:*:*","matchCriteriaId":"40C4FAFF-B425-422A-9EB0-44967241483C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.325:*:*:*:*:*:*:*","matchCriteriaId":"79E1856E-421E-46B0-91D4-91385471C0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.326:*:*:*:*:*:*:*","matchCriteriaId":"8D18D34A-6A3B-456F-85D3-4B4D98A3D866"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.327:*:*:*:*:*:*:*","matchCriteriaId":"B25CC6B9-4A2D-4EE7-82A8-A99814A83564"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.328:*:*:*:*:*:*:*","matchCriteriaId":"8FACAE12-5685-470F-AE31-B8D40C415E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.329:*:*:*:*:*:*:*","matchCriteriaId":"D5843150-E1CC-4901-8366-2D7E3148DC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.330:*:*:*:*:*:*:*","matchCriteriaId":"0E7EEA1B-7073-4E76-B042-5F5F234588A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.331:*:*:*:*:*:*:*","matchCriteriaId":"68BBEA3B-199E-4BA5-8655-10D163BF9592"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.332:*:*:*:*:*:*:*","matchCriteriaId":"65D0CB72-CD85-432C-B0E9-6CB64F12AEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.333:*:*:*:*:*:*:*","matchCriteriaId":"E584DDC5-2622-4F89-A90A-B672B091991B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.334:*:*:*:*:*:*:*","matchCriteriaId":"0BBD0812-70E6-4168-B1C9-1AB1FCDFC204"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.335:*:*:*:*:*:*:*","matchCriteriaId":"8E564CC8-0075-4361-9227-83D63BE7F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.336:*:*:*:*:*:*:*","matchCriteriaId":"708BB1BC-A20E-4677-A977-8AA69418EAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.337:*:*:*:*:*:*:*","matchCriteriaId":"B4074DD4-67D7-4C52-BAD2-13934512AC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.338:*:*:*:*:*:*:*","matchCriteriaId":"B2B0579B-31C6-4986-AD47-20E15C8C8601"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.339:*:*:*:*:*:*:*","matchCriteriaId":"2C162B91-AC00-4BCC-9FBD-A8A0401386B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.340:*:*:*:*:*:*:*","matchCriteriaId":"7CB1A292-9A56-4FB2-BEBB-488FFFE2789E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.341:*:*:*:*:*:*:*","matchCriteriaId":"20E231DB-A7FD-4FE6-83C2-DE2D64F40417"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.342:*:*:*:*:*:*:*","matchCriteriaId":"28741E7E-BBA2-43E3-834E-316AF6A6D1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.343:*:*:*:*:*:*:*","matchCriteriaId":"F82DCDF4-EE9E-494C-BF4B-5EDD0786163D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.344:*:*:*:*:*:*:*","matchCriteriaId":"1940200B-8BB3-483A-915B-D2127AE3239A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.345:*:*:*:*:*:*:*","matchCriteriaId":"34139CD6-764B-4B47-AF72-A9775293D1A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.346:*:*:*:*:*:*:*","matchCriteriaId":"7A77CB09-ABCB-4293-9E08-FE87A8CB8295"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.347:*:*:*:*:*:*:*","matchCriteriaId":"99E20CBC-9AC2-4ECD-B439-E1A6582BECB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.348:*:*:*:*:*:*:*","matchCriteriaId":"C4C2BAAB-7E8A-468B-BB7B-4972C65AA963"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.349:*:*:*:*:*:*:*","matchCriteriaId":"168BEBE1-D4FA-4C46-9E6E-44E633115149"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.350:*:*:*:*:*:*:*","matchCriteriaId":"BE9B1F1A-5E4F-4072-B471-07C188BEA4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.351:*:*:*:*:*:*:*","matchCriteriaId":"4C127B9F-B2EA-4285-857C-E76C0692065A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.352:*:*:*:*:*:*:*","matchCriteriaId":"30A5E3C6-CB5F-4B19-B5CC-3F0811589D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.353:*:*:*:*:*:*:*","matchCriteriaId":"1BA62B95-6B3E-4B67-8B82-0965D118D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.354:*:*:*:*:*:*:*","matchCriteriaId":"19D81DD2-67D3-4941-BD8C-12F2F9D058E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.355:*:*:*:*:*:*:*","matchCriteriaId":"280D594F-7723-4A49-9C89-6A28987E4DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hydrairc:hydrairc:0.356:*:*:*:*:*:*:*","matchCriteriaId":"5743CC17-B921-4F19-A77F-9593DEE64EE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/31376","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4126","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30523","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2309","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44204","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6201","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3579","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to obtain sensitive information by creating and downloading a backup archive of the entire @Mail directory tree.  NOTE: this can be leveraged for remote exploitation of CVE-2008-3395.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Calacode @Mail 5.41 sobre linux no requiere autenticación de administrador para la página build-plesk-upgrade.php, lo que permite a atacantes remotos obtener información sensible mediante la creación de un archivo de copia de respaldo (backup) de todo el árbol de directorios. NOTA: esto puede ser aprovechado para una explotación remota del CVE-2008-3395. NOTA: el origen de esta información es desconocido. Los datos han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calacode:atmail:5.41:*:*:*:*:*:*:*","matchCriteriaId":"8D741497-85EB-4455-9367-FD30DDE10A0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31279","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44145","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3580","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to visit.php, or the PATH_INFO to the default URI under (2) report/, (3) addreview/, or (4) refer/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Qsoft K-Links, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) id a visit.php, o PATH_INFO a la URI por defecto bajo (2) report/, (3) addreview/, o (4) refer/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qsoft:k-links:*:*:*:*:*:*:*:*","matchCriteriaId":"56AC3119-F506-4C10-9358-E2A7779B3FD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31245","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4131","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30520","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44160","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44219","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6192","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3581","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the login_message parameter in a login action."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en index.php en Qsoft K-Links, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro login_message en una acción de \"login\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qsoft:k-links:*:*:*:*:*:*:*:*","matchCriteriaId":"56AC3119-F506-4C10-9358-E2A7779B3FD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31245","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4131","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30520","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44161","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6192","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3582","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Keld PHP-MySQL News Script 0.7.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keld:php-mysql_news_script:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"DA66E767-8514-4B41-829C-71322477B84B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4132","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495086/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44197","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495086/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3583","sourceIdentifier":"cve@mitre.org","published":"2008-08-10T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long URL in the SRC attribute of an IMG element.  NOTE: this might be related to CVE-2008-3360.  NOTE: it was later reported that 2.08 Beta 4 is also affected."},{"lang":"es","value":"Un desbordamiento de búfer en el analizador HTML en IntelliTamper versión 2.07, permite a los atacantes remotos ejecutar código arbitrario por medio de una dirección URL larga en el atributo SRC de un elemento IMG. NOTA: esto podría estar relacionado con CVE-2008-3360. NOTA: más tarde se reportó que la versión 2.08 Beta 4 también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D34E4083-91CE-46AB-A1B9-856AD8E5245C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30521","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44215","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6195","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3584","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:44.697","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service (system crash) via a crafted PPPoE packet."},{"lang":"es","value":"NetBSD 3.0, 3.1, y 4.0, cuando una instancia pppoe existe, no chequea correctamente la etiqueta de la longitud del paquete PPPoE, el cual permite a los atacantes remotos causar una denegación de servicio (caída del sistema) a través de un paquete PPPoE manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F9CABFAA-594C-45D7-A0C7-795872A0C68A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-010.txt.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31597","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3467","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30838","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020749","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0633","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44679","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-010.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3585","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PozScripts GreenCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) product_desc.php and (2) store_info.php."},{"lang":"es","value":"Vulnerabilidad múltiple de inyección SQL en PozScripts GreenCart PHP Shopping Cart, que permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en (1) product_desc.php y (2) store_info.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pozscripts:greencart_php_shopping_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"3899A9B8-81E3-4305-81E6-D86EE44B0DF5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4133","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30506","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44164","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6189","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3586","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en EZ Store (com_ezstore), componente de Joomla!. Que permite a los atacantes remotos ejecutar comandos arbitrarios de SQL a través del parámetro id en una acción de detalle de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_ezstore:*:*:*:*:*:*:*:*","matchCriteriaId":"AB58BF2C-4EB5-497A-A380-3AC48893E369"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30527","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44196","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6199","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3587","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS)en result.php de Chris Bunting Homes 4 Sale que permite a los atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través del parámetro r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:needscripts:homes_4_sale:*:*:*:*:*:*:*:*","matchCriteriaId":"03277B31-E0BB-450B-8264-DAD69672D7DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495059/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44186","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495059/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3588","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php."},{"lang":"es","value":"Vulnerabilidades de inyección múltiple SQL en phsBlog 0.1.1, que permite a los atacantes remotos ejecutar comandos SQL arbitrariamente a través del (1) parámetro eid en comments.php, (2) el parámetro cid en index.php, (3) y el parámetro urltitle en entries.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phsblog:phsblog:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7C704A97-3E78-4D7B-945E-FF3197E19C66"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4135","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44163","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6190","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3589","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo download.php en moziloCMS 1.10.1, cuando magic_quotes_gpc es desactivado, lo que permite a los atacantes remoto leer ficheros arbitrarios a través de ..(punto punto) en el parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"362E7D45-EA25-47D8-A42C-E8CBA78C0D1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4136","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30526","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44162","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3590","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidades múltiples de inyección SQL en admin/login.asp en E. Z. Poll 2 que permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros (1) Username y (2) Password. NOTA: La procedencia de esta información es desconocida, los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egi_zaberl:e.z._poll:2:*:*:*:*:*:*:*","matchCriteriaId":"0C54AD14-A726-4DAF-A412-5546CCD73855"}]}]}],"references":[{"url":"http://secunia.com/advisories/31368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3591","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo lib/class.admin.php en Twentyone Degrees Symphony 1.7.01 y versiones anteriores, que permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través de la cookie sym_auth en una petición /publish/filemanager/ a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.01","matchCriteriaId":"FE2EEB23-8CD7-4035-87F1-EC01E61CE7C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A06D221D-9BC8-480B-ADF6-4251C0F1E6D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EEBB01-8615-4FD7-888B-E369084267FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.5.05:*:*:*:*:*:*:*","matchCriteriaId":"9B6D10C3-F68F-4366-9594-BD338A33F8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.5.06:*:*:*:*:*:*:*","matchCriteriaId":"C42DFAF4-F81A-467C-AD4D-1095E7A932EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.6.02:*:*:*:*:*:*:*","matchCriteriaId":"48BE3B5E-72F6-4FA1-B976-0FD59EB6FFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.7:*:*:*:*:*:*:*","matchCriteriaId":"90B1FA15-86CB-4C11-85EC-20C6A5529827"}]}]}],"references":[{"url":"http://overture21.com/forum/comments.php?DiscussionID=1823","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30477","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6177","source":"cve@mitre.org"},{"url":"http://overture21.com/forum/comments.php?DiscussionID=1823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3592","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Successful exploitation of this vulnerability requires valid administrator credentials.  See CVE-2008-3591 for more information.","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en el File Manager en el panel de administrador de Twentyone Degrees Symphony 1.7.01 y versiones anteriores que permite a los atacantes remotos ejecutar código arbitrario por la subida de un ficheros con extensión ejecutable a un directorio específico en el parámetro destino, accediendo al archivo subido a través de una petición directa, como demuestra usando workspace/masters/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.01","matchCriteriaId":"FE2EEB23-8CD7-4035-87F1-EC01E61CE7C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A06D221D-9BC8-480B-ADF6-4251C0F1E6D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EEBB01-8615-4FD7-888B-E369084267FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.5.05:*:*:*:*:*:*:*","matchCriteriaId":"9B6D10C3-F68F-4366-9594-BD338A33F8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.5.06:*:*:*:*:*:*:*","matchCriteriaId":"C42DFAF4-F81A-467C-AD4D-1095E7A932EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.6.02:*:*:*:*:*:*:*","matchCriteriaId":"48BE3B5E-72F6-4FA1-B976-0FD59EB6FFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:21degrees:symphony:1.7:*:*:*:*:*:*:*","matchCriteriaId":"90B1FA15-86CB-4C11-85EC-20C6A5529827"}]}]}],"references":[{"url":"http://overture21.com/forum/comments.php?DiscussionID=1823","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44432","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6177","source":"cve@mitre.org"},{"url":"http://overture21.com/forum/comments.php?DiscussionID=1823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3593","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en SyzygyCMS 0.3, que permite a los atacantes remotos adjuntar y ejecutar ficheros locales arbitrarios a través de .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:syzygycms:syzygycms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"022DFAE5-9701-4790-B4EB-F63EEE2E14F3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4138","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30530","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44157","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6200","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3594","sourceIdentifier":"cve@mitre.org","published":"2008-08-11T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewdetails.php en MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, y E-Store Kit-2 PayPal Edition que permite a los atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro pid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magicscripts:e-store_kit-1:*:*:*:*:*:*:*:*","matchCriteriaId":"A69E2866-AAED-4ED9-9D93-F2C68B102B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:magicscripts:e-store_kit-1:*:*:pro_paypal:*:*:*:*:*","matchCriteriaId":"6E42F6E7-FBC6-4B41-94D9-1EB83C6C739F"},{"vulnerable":true,"criteria":"cpe:2.3:a:magicscripts:e-store_kit-2:*:*:*:*:*:*:*:*","matchCriteriaId":"4BE1F2D0-AD17-4940-9BF8-70CD424A2A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:magicscripts:e-store_kit-2:*:*:paypal:*:*:*:*:*","matchCriteriaId":"A473638F-3F2B-4884-A3DB-A87100954134"}]}]}],"references":[{"url":"http://secunia.com/advisories/31273","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4139","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44159","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3595","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFG[txtsql][class] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en examples/txtSQLAdmin/startup.php de txtSQL 2.2 Final permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro CFG[txtsql][class]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:txtsql:txtsql:2.2:final:*:*:*:*:*:*","matchCriteriaId":"C171FA9B-34B0-4E90-896C-967A53B20253"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30625","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44377","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6224","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3596","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Harmoni antes de 1.4.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo Username, que se inserta en logs que podrían ser renderizados cuando los ve un administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.6","matchCriteriaId":"1C33F593-9048-4CED-9248-CFE28104BC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"21512274-1887-4B5C-968A-B26D90D27E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.3:beta:*:*:*:*:*:*","matchCriteriaId":"81D764E9-0669-4BC9-88F6-B81D9BD875D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4F2B9E2F-ED10-4F0D-9D66-368D37FD7864"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CDF2F812-572E-4FEA-9E2D-5D641113B60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CA6C479-412B-4BEB-969A-36F094B59525"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"23FE605F-6401-4956-81D6-D4B9361EE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0F48C322-85A8-435E-854A-6FDCB2F1ADF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8608538B-C881-434A-AEF6-C9BEC0441B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3B8CF46A-7343-41C7-908F-25BC7875F6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C1697A70-6C83-4788-AC65-95384038798C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03D89B15-5037-4A48-95C8-39A756BDDDA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE302560-BA6B-4574-85B1-ED4255222FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"65D62B2B-CB5B-464F-B123-3F9B0935E27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3F4E8618-C4D7-4BDA-B4C8-E599DE1E0CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"48FEE606-D708-45B0-B499-411AB9163337"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"37D5B4C6-2EE3-4489-ABC6-F3BED624D031"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F2850F39-60EC-468B-BBD7-8BB14CFFC125"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F6D41CEA-E157-4174-8D5F-C391BB5F6E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B4F71555-7E13-42EE-9612-7AEFD7C07133"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"8B25BE90-CB95-4D75-A459-64ED1D515B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"17DA2753-15B6-478D-A0F0-B35B66DBF586"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"62F33785-39A8-4F66-8B9C-62BF919777F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.3:*:*:*:*:*:*:*","matchCriteriaId":"7B2573AB-AD9C-487C-B80D-6D9F5EFBA84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"DA309E2C-A97D-4688-851D-1D79CB074596"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"092503D1-C158-4383-80DC-928E9F37935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"0B2FBA84-CD7F-47CC-A8AB-0FBD6B462ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.3:*:*:*:*:*:*:*","matchCriteriaId":"FE5E4E20-6D5A-4483-8A59-D2E303A09E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.4:*:*:*:*:*:*:*","matchCriteriaId":"96DB8314-1039-4181-866F-FF667794B910"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.5:*:*:*:*:*:*:*","matchCriteriaId":"4A6502BE-E995-4E15-92FD-01B1B77D3757"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.6:*:*:*:*:*:*:*","matchCriteriaId":"02E342D6-6975-4A6F-9781-F7D6985D0C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.7:*:*:*:*:*:*:*","matchCriteriaId":"CE70746B-6514-46E0-9E56-B2EF21AF712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A8BBDD8F-AEAC-479E-AB72-400672A6CDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6630796-C059-439A-8172-913CA8F226F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7574382C-FA34-4EE6-B860-EA351B0EE2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FCA3DB7A-B19C-4E7E-9F48-39275DC81BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C198903C-EC45-4B32-B4B2-F8547AF2031D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"86BFEFDF-210C-4605-9B13-91EB99DD702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E115F830-F266-4AC2-95BB-AA4CAB05C590"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"668D3790-0CC7-43BD-B34F-333EC22D322D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BA7E5F79-AECD-4714-BFBC-9AE496CD198C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DF0D41E7-2DAF-482C-92F3-9FF2703B9C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"CF41B07C-1D0D-4DBC-967E-E5D96A2E761A"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"816669D3-16E6-41E4-BC4C-7CEEA9584D4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31406","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2040255&group_id=82171&atid=1098812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30637","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2040255&group_id=82171&atid=1098812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3597","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a \"command 29\" packet when the player is not in the game."},{"lang":"es","value":"Skulltag versiones anteriores a 0.97d2-RC6 permite a atacantes remotos provocar una denegación de servicio (puntero de referencia a NULL y caída del demonio) mediante el envío de un paquete \"command 29\" cuando el jugador no está en el juego."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag:skulltag:*:*:*:*:*:*:*:*","versionEndExcluding":"0.97d2","matchCriteriaId":"927C6D8E-F899-4B85-883A-317FD88E8AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag:skulltag:0.97d2:-:*:*:*:*:*:*","matchCriteriaId":"86EB1188-EF3C-46D4-A3B9-F1704C7CE85E"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag:skulltag:0.97d2:rc2:*:*:*:*:*:*","matchCriteriaId":"80D71FBC-1EBD-4082-9172-31465DD4DA8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:skulltag:skulltag:0.97d2:rc3:*:*:*:*:*:*","matchCriteriaId":"C577331C-A4E6-422E-8195-F7947BD5044C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/skulltagod-adv.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31427","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://skulltag.com/forum/viewtopic.php?f=1&t=14716","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2325","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44363","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://aluigi.altervista.org/adv/skulltagod-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://skulltag.com/forum/viewtopic.php?f=1&t=14716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3598","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en psipuss 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) Cid de categories.php o el parámetro (2) Username de login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psi-labs:psipuss:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CBF8A81C-D496-40AF-8B76-420F848DAACE"}]}]}],"references":[{"url":"http://osvdb.org/35500","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25041/","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4140","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30629","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44367","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6226","source":"cve@mitre.org"},{"url":"http://osvdb.org/35500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25041/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3599","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en image.php de OpenImpro 1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openimpro:openimpro:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9E8D0E87-AC4C-41C2-A96A-18DA1003D264"}]}]}],"references":[{"url":"http://secunia.com/advisories/31408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4141","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30631","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44361","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3600","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter within a modload action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en contrib/phpBB2/modules.php de Gallery 1.5.7 y 1.6-alpha3, cuando register_globals está activo, permite a atacantes remotos incluir y ejecutar ficheros locales a través de .. (punto punto) en el parámetro phpEx dentro de una acción modload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"5CA96DC5-B3F3-42DD-801E-8B66D8065578"},{"vulnerable":true,"criteria":"cpe:2.3:a:menalto:gallery:1.6:alpha3:*:*:*:*:*:*","matchCriteriaId":"11DBDE20-1391-4E46-B659-31FAE4300987"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_1.5.8_released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32662","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4142","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495284/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44373","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6222","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_1.5.8_released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495284/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3601","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL commands via the forums array parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Quicksilver Forums 1.4.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro forums array en una acción de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quicksilver_forums:quicksilver_forums:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5384AB54-A0E6-414B-A457-A64A8CFDCF45"}]}]}],"references":[{"url":"http://secunia.com/advisories/31419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4144","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44366","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3602","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1."},{"lang":"es","value":"admin/wr_admin.php de PHP-Ring Webring System (también concocido como uPHP_ring_website) 0.9.1 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo mediane el envío de la cookie admin a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psychdaily:php_ring_webring_system:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"53D7A36F-619C-45A7-8B74-6D91334DA9BB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4143","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30624","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44379","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6225","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3603","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Vacation Rental Script 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción sections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vacation_rentals:vacation_rental_script:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29953BD3-A4E3-475B-BC1B-006A57221E0C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31421","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30626","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44375","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3604","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bannerclick.php de ZeeBuddy 2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro adid."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeescripts:zeebuddy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"662C7D54-639E-4607-878E-A3C68847B7DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31413","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4145","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30628","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44362","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6230","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3605","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attackers to conduct offline brute force attacks via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en McAfee Encrypted USB Manager 3.1.0.0, cuando Re-use Threshold para contraseñas es nonzero (distinto de cero), permite a atacantes remotos llevar a cabo ataques de fuerza bruta sin conexión mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:encrypted_usb_manager:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF54482-1DE7-414E-B37A-2E300D5A956B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31433","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mcafee.com/apps/downloads/security_updates/hotfixes.asp?region=us&segment=enterprise","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30630","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020648","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2324","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mcafee.com/apps/downloads/security_updates/hotfixes.asp?region=us&segment=enterprise","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3606","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en en el servicio IMAP en Qbik WinGate 6.2.2.1137 y anteriores, permiten a atacantes remotos autenticados provocar una denegación de servicio (agotamiento de recursos) o posiblemente, ejecución de código arbitrario a través de un argumento largo en el comando LIST. NOTA: algunos de estos detalles se han obtenido a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.2","matchCriteriaId":"D592FD10-CC88-46CD-A726-EEC5191DE725"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7B534B6E-B856-4E7F-A8E0-582637EE6B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA8E8CEE-E78A-46D5-B73D-C75CC8D088B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C7BC4C8-FB7B-4A88-B97B-984D9AA8EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87714896-157D-4343-A94F-C8CCAD285EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C1D98E1-EBE1-4697-906F-E29C91D9074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.1:beta_a:*:*:*:*:*:*","matchCriteriaId":"077D0405-5288-40A6-81A8-A8C4D924723D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE28B657-21EE-4F2E-8D1F-34D4E2642BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EDB73A60-062E-4A0B-B600-E1B4D613FE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0F0BB2B5-9E9A-42FC-87A4-0BAD1F39C9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AA75B20B-3510-4CF9-A74B-BA21D5527EE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.3.0:beta_a:*:*:*:*:*:*","matchCriteriaId":"F54C4B69-397F-4322-A1AD-11AF2C7F5F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.3.0:beta_b:*:*:*:*:*:*","matchCriteriaId":"076063FF-B1D2-471D-ACDD-0AF3BA328069"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B5B1AE22-2A99-4F4B-AAF6-6CBF35FEAEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.4.0:beta_a:*:*:*:*:*:*","matchCriteriaId":"57726A67-AFC8-44E0-88D7-CA1C1DFA7C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49897B9F-9A10-4034-B617-1B82405FB1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0D8109BA-2FFF-4642-AD15-FA11CD3088AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.5.0:beta_a:*:*:*:*:*:*","matchCriteriaId":"E56752EB-E1F5-4132-B769-33633E1B67FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.5.0:beta_b:*:*:*:*:*:*","matchCriteriaId":"49465E28-E5CD-4533-8A01-8BBE868F2AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"59FE243C-16F2-4C6D-BF88-FFB6CD0F29BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AE5A4F3B-B855-4980-93D9-347A49E68EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0AFAF415-0182-4F5C-A053-266AB919572F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"10D7B35B-3531-4372-A338-AD8106799769"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3712DA96-DD76-49E3-BA79-30105725DBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0.1.766:*:*:*:*:*:*:*","matchCriteriaId":"F912B8D6-B915-43A7-8462-F521D44DBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"40A0AE5B-B449-4494-828E-2FD7414F6FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.1:*:*:*:*:*:*:*","matchCriteriaId":"109DF494-0194-473B-AF79-185D41202A8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.2:*:*:*:*:*:*:*","matchCriteriaId":"39B77B55-54BB-43D5-A0E9-13F20F7544F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36B7A6B3-8C54-4743-8C42-6B22E9AD719B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E328107F-F19D-427D-A88A-17DCB58A459C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E3F0670C-C07E-4A84-952B-88200D2D9B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.0.984:*:*:*:*:*:*:*","matchCriteriaId":"E8E6305C-F87B-4DF1-94D7-A0C63EE11E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.1.993:*:*:*:*:*:*:*","matchCriteriaId":"8EE5BB2B-F9CB-4CDA-9CC9-C6EF5A1FF59F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.1.995:*:*:*:*:*:*:*","matchCriteriaId":"A480A0D4-D675-4078-8F30-CD3772818303"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.2.1000:*:*:*:*:*:*:*","matchCriteriaId":"F9B03DEA-B780-404E-B940-82A7086062C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.2.1001:*:*:*:*:*:*:*","matchCriteriaId":"B5CA5961-6BAC-4BE8-95A4-DBEB0596262E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.3.1005:*:*:*:*:*:*:*","matchCriteriaId":"ED850FD8-151C-49E7-9DF4-16B88341269B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.4.1025:*:*:*:*:*:*:*","matchCriteriaId":"A406438F-7E92-4579-A32B-3E3E1C4FF8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.1.1077:*:*:*:*:*:*:*","matchCriteriaId":"9FDF759C-0AAE-4760-B829-13F055AD290C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.2.1094:*:*:*:*:*:*:*","matchCriteriaId":"982DE691-B50E-49B2-B4DF-EC518DFFCE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.3.1096:*:*:*:*:*:*:*","matchCriteriaId":"7F8EFCA3-2453-4272-9692-22598676DFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1F5F3CDE-1931-4BD9-9ABD-F07543DAC113"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C1E8C06-4E84-4FB8-A513-D8ACC1146BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.2.2.1137:*:*:*:*:*:*:*","matchCriteriaId":"0C45F717-AC74-4F81-947B-0745A7F1883F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4146","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495264/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30606","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020644","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495264/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3607","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via multiple long LOGIN commands."},{"lang":"es","value":"El servidor IMAP en NoticeWare Email Server NG 4.6.3 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través del múltiples comandos LOGIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"CF1515D5-1B45-4D9A-B3BB-4DC266BDA67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91BB5A7E-3D64-48E9-A5B0-89474B9BD016"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FF25BD1A-3B3F-442C-975A-700359CF2503"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6FEE66C5-F11A-4FF5-A424-A018C18B03A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"15E0FDD7-E582-4055-96E1-BB18DD504694"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"21FFF477-43E2-4EC3-AA06-267B23A066F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B0DF50D1-9D7A-4917-BE56-054B14BB61AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"04117E4E-5090-49C3-8E5A-5BCBBD82D41C"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F7E72A8A-13C9-44E0-9014-060F9D81A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"981FC969-4CA9-43A6-BBAF-E03EFE63A1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA6EA25-34E5-42B2-9DD5-EDACF33B15B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"CC83143C-E418-4DD5-A5B9-EBA66EDE3C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:email_server:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"FE313267-9054-460C-AC80-9143EBA629BE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4147","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495259/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30605","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44378","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495259/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3608","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile."},{"lang":"es","value":"ImageIO en Apple Mac OS X 10.4.11 y 10.5 a la v10.5.4, permite a atacantes dependientes de contexto provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o ejecutar código de su elección a través de una imagen JPG manipulada con un perfill ICC embebido (incrustado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3276","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020876","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3107","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45168","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3609","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file."},{"lang":"es","value":"kernel en Apple Mac OS X 10.5 a la 10.5.4 no limpia adecuadamente las credenciales cacheadas durante el reciclaje (también conocido como purgado) de un \"vnode\", lo que permite a usuarios locales evitar los permisos de lectura y escritura establecidos de manera previa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020877","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45169","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3610","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account from the user list."},{"lang":"es","value":"Condición de carrera en Login Window en Apple Mac OS X 10.5 a la 10.5.4, cuando una está activada una cuenta de usuario sin contraseña, permite a atacantes evitar la autenticación a cualquier cuenta mediante múltiples intentos de validación con una cuenta sin contraseña, seguida por una selección de su elección de la lista de cuentas de usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45170","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3611","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.133","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt that is denied by policy, which allows opportunistic, physically proximate attackers to bypass authentication and change this user's password by later entering an acceptable new password on the same login screen."},{"lang":"es","value":"La Ventana de Inicio de Sesión en Mac OS X versión 10.4.11 de Apple, no borra la contraseña actual cuando un usuario realiza un intento de cambio de contraseña que es negado por la política, lo que permite a los atacantes oportunistas, físicamente cercanos, omitir la autenticación y cambiar la contraseña de este usuario mediante un ingreso posterior a una nueva contraseña aceptable en la misma pantalla de inicio de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45171","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3612","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection."},{"lang":"es","value":"El subsistema Networking de iPod touch versión 2.0 hasta 2.0.2 y iPhone versión 2.0 hasta 2.0.2 de Apple, utiliza números de secuencia inicial TCP previsibles, lo que permite a los atacantes remotos suplantar o secuestrar una conexión TCP."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.2","matchCriteriaId":"085D061E-6EF1-41BB-936E-D2EE778301FA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31092","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020848","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-3613","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.163","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving a search for a remote disk on the local network."},{"lang":"es","value":"Finder en Apple Mac OS X 10.5.2 a la 10.5.4, permite a atacantes remotos provocar una denegación de servicio (referencia a puntero null y caída de aplicación) a través de vectores relacionados con una búsqueda de disco remoto en la red local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.1},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:macbook_air:*:*:*:*:*:*:*:*","matchCriteriaId":"14CA2A32-FE04-406A-A0E9-40A9AFF225D2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45166","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3614","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, which triggers heap corruption."},{"lang":"es","value":"Desbordamiento de entero en Apple QuickTime anterior 7.5.5 sobre Windows, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PICT manipulada que lanza un corrupción de montículo (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"70DDAE09-0183-4BF4-8053-D80E6AE9F1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=744","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020879","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15851","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3615","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.257","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file."},{"lang":"es","value":"El archivo ir50_32.qtx en un códec no especificado de terceros de Indeo versión v5 para QuickTime, cuando se utiliza con Apple QuickTime anterior a versión 7.5.5 en Windows, accede a la memoria no inicializada, lo que permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo de película creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndExcluding":"7.5.5","matchCriteriaId":"16B69893-190D-4315-9E53-C11E13782781"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/critical-vulnerability-in-apple-quicktimes-indeo-codec/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/496358/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/critical-vulnerability-in-apple-quicktimes-indeo-codec/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/496358/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3616","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via vectors associated with \"passing untrusted input\" to unspecified API functions."},{"lang":"es","value":"Múltiples desbordamientos de entero en SearchKit API en Apple Mac OS X 10.4.11 y 10.5 a la v10.5.4, permiten a atacantes dependientes de contexto provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de vectores asociados con \"evasión de entrada de datos no confiable\" a funciones API no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020880","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45172","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3617","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.210","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer."},{"lang":"es","value":"Remote Management y Screen Sharing en Apple Mac OS X 10.5 a la v10.5.4, cuando se usa para establecer una contraseña para el visor VNC, muestra los caracteres adicionales más allá del máximo tamaño de contraseña, lo que puede facilitar a los atacantes obtener contraseñas cuyos usuarios pensaban que eran mayores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1020882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45174","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1020882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3618","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing was unintended."},{"lang":"es","value":"El Panel File Sharing  en las preferencias Sharing en Apple Mac OS X 10.5 a la v10.5.4, no informa a los usuarios del contenido completo de que su directorio personal está siendo compartido para uso propio, lo que podría permitir a atacantes aprovechar otras vulnerabilidades y acceder a ficheros que no está compartidos intencionadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1020883","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/126787","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45175","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1020883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/126787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3619","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.257","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files."},{"lang":"es","value":"Time Machine en Apple Mac OS X 10.5 a la v10.5.4 usa permisos débiles para el acceso a los logs de la Time Machine, lo que permite a usuarios locales obtener información sensible leyendolos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45176","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3621","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.290","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media."},{"lang":"es","value":"VideoConference en Apple Mac OS X 10.4.11 y 10.5 a la v 10.5.4, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o ejecutar código de su elección a través de vectores involucrados con el codec/encoder H.264."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020885","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45177","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3622","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.307","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka \"persistent JavaScript injection.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en Wiki Server en Apple Mac OS X 10.5 a la v10.5.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de un mensaje de e-mail que llega al archivo \"mailin-list\", también conocido como \"Inyección de JavaScript persistente\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020886","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45178","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3623","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en CoreGraphics en Apple Safari antes de v3.2 en Windows permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) mediante una imagen manipulada, relacionado con el manejo inadecuado de espacios de color."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:xp:*:*:*:*:*:*:*","matchCriteriaId":"9EAD4800-9F9C-4F1E-9D10-D02D2CD1D6B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","matchCriteriaId":"7EDB7C2F-79A9-486A-BC40-736DE867E48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.2","matchCriteriaId":"40BC89F2-6654-4A53-8B1E-0A9832DCDE68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*","matchCriteriaId":"63FEA310-C6F2-4F2A-ABA8-6468308E3569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:windows:*:*:*:*:*","matchCriteriaId":"4201B398-4223-4731-9645-445231909295"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32291","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021225","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3624","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.757","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apple Quicktime anterior a 7.7.5 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación)a través de una película QuickTime Virtual Reality (QTVR)con átomos panorama manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"70DDAE09-0183-4BF4-8053-D80E6AE9F1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16124","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3625","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted (1) maxTilt, (2) minFieldOfView, and (3) maxFieldOfView elements in panorama track PDAT atoms."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Apple QuickTime anterior 7.5.5, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación), mediante un fichero de película QuickTime Virtual Reality (QTVR) con los elementos manipulados (1) maxTilt, (2) minFieldOfView y (3) maxFieldOfView en las pistas panorama de los átomos PDAT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndExcluding":"7.5.5","matchCriteriaId":"16B69893-190D-4315-9E53-C11E13782781"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496161/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-058/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15935","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-058/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3626","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.820","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file."},{"lang":"es","value":"La función CallComponentFunctionWithStorage en Apple QuickTime anterior a 7.5.5 no maneja adecuadamente una entrada larga en el sample_size_table en \"átomos\" STSZ, lo que permite a  atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo de película modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.5","matchCriteriaId":"DDFD1347-3532-4126-B21B-FC865FF72AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122099929821288&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32121","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3189","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31546","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2735","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-059/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16152","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122099929821288&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-059/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3627","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within QuickTimeH264.qtx, (2) MDAT atoms in mov video files within QuickTimeH264.scalar, and (3) AVC1 atoms in an unknown media type within an unspecified component, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a crafted, H.264 encoded movie file."},{"lang":"es","value":"Apple QuickTime anterior a 7.5.5 , no maneja adecuadamente (1) los átomos MDAT de los ficheros de vídeo MP4 en QuickTimeH264.qtx, (2) los átomos MDAT de los ficheros mov de vídeo en QuickTimeH264.scalar y (3) los átomos AVC1 en un tipo de medio desconocido de un componente no especificado; esto permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de la cabecera y caída de la aplicación) a través de un fichero de película manipulado y codificado con H.264."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndExcluding":"7.5.5","matchCriteriaId":"16B69893-190D-4315-9E53-C11E13782781"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496163/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496175/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496176/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-060/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-061/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-062/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16164","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496175/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496176/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-060/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-061/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-062/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3628","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an \"invalid pointer issue.\""},{"lang":"es","value":"Apple QuickTime  anterior a v7.5.5 sobre Windows permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (Caída de aplicación) a través de una imagen PICT manipulada. Relacionado con una \"cuestión de puntero inválido\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndExcluding":"7.5.5","matchCriteriaId":"16B69893-190D-4315-9E53-C11E13782781"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15841","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3629","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read."},{"lang":"es","value":"Apple QuickTime anterior a 7.5.5 , permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación), a través de una imagen PICT manipulada que induce una lectura fuera de rango."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"70DDAE09-0183-4BF4-8053-D80E6AE9F1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32121","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3189","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31548","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2735","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16019","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3630","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.913","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447."},{"lang":"es","value":"mDNSResponder en Apple Bonjour para Windows anterior a 1.0.5, cuando una aplicación usa la API Bonjour para DNS unicast, no escoge valores aleatorios para las transacciones IDs u origen de puertos en las peticiones DNS, lo que facilita a atacantes remotos falsear las respuestas DNS. Vulnerabilidad distinta de CVE-2008-1447."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:bonjour:1.0.4:unknown:windows:*:*:*:*:*","matchCriteriaId":"1ACABF55-DE3F-463A-A469-A76589C3AAB9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*","matchCriteriaId":"EAA86830-BEA8-4943-83EA-C267FA534223"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31822","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT2990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31093","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020844","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2524","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT2990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3631","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Link to patched version (v2.1) - http://www.apple.com/ipodtouch/softwareupdate.html","cveTags":[],"descriptions":[{"lang":"en","value":"Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application."},{"lang":"es","value":"El Sandbox de Aplicaciones en iPod touch versión 2.0 hasta 2.0.2, y iPhone versión 2.0 hasta 2.0.2 de Apple , no aísla apropiadamente las aplicaciones de terceros, lo que permite a los atacantes leer archivos arbitrarios en una sandbox de aplicación de terceros por medio de una aplicación de terceros diferente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0:*:*:*:*:*:*:*","matchCriteriaId":"188712AA-31CA-4209-9042-D6E986C630A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"964F39E4-541C-4562-B915-3254FBFBB304"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7600D384-9832-4451-B836-ADAF0E76755D"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31092","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020846","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3632","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.960","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements."},{"lang":"es","value":"Una vulnerabilidad de uso de memoria previamente liberada en WebKit en iPod touch versiones 1.1 hasta 2.0.2 y iPhone versiones 1.0 hasta 2.0.2, de Apple, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una página web con sentencias de importación de Hojas de Estilo en Cascada (CSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:1.1:*:*:*:*:*:*:*","matchCriteriaId":"583ED2CE-1AD1-42A6-AB52-5C721E8C9385"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D05600E6-6BC5-43C4-93E2-72585A3453B5"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6430229D-ACD4-46AE-A6B5-95D3CC1AF514"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:2.0:*:*:*:*:*:*:*","matchCriteriaId":"70647BF0-56BE-44ED-A6E7-10C372E0BA0C"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7DCD5B89-81D3-4816-80B4-B427127DB889"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2B045BAF-EB4A-409F-97E7-1DB3E89ACD5D"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A22F1F9E-F5B0-4AB4-8CE9-50C540AE1AE9"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE66FF90-ED80-4184-820B-88F1BA250F71"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05097B1E-425A-4EF5-8D44-FFEC22994B6A"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7A0EBA08-CE54-4AE3-9AED-514392372B7D"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E969C4E-45A5-4767-9959-A1AD2DE4E1C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0:*:*:*:*:*:*:*","matchCriteriaId":"188712AA-31CA-4209-9042-D6E986C630A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"964F39E4-541C-4562-B915-3254FBFBB304"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7600D384-9832-4451-B836-ADAF0E76755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32860","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31092","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020847","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-676-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-676-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-3634","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information."},{"lang":"es","value":"Aplicación Itunes anterior a la v8 sobre Mac OS X 10.4.11, cuando iTunes Sharing se encuentra habilitado pero bloqueado por el cortafuegos del sistema, muestra información falsa (engañosa) sobre la seguridad del cortafuegos. Esto podría ser aprovechado por atacantes remotos. El administrador no obviaría esta cuestión si se le diera mejor información al respecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","matchCriteriaId":"4C7FAB2A-936D-43A5-9F2F-D2EE8B7BA3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.1","matchCriteriaId":"075059D3-9F2B-4746-9D85-597CAA0D476E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8659A87-1197-4C3B-A076-90FE3A453205"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4E15C097-98DE-4217-8814-95B54CE418F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC4179C0-CA2C-42D7-AD72-A19668662A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1EB1098-87E1-45DC-BD44-2B374BAA758C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"49DD3B1C-1743-434B-B67F-A3C1B350059A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4E27E1D8-0303-4F91-B1B0-38C64A8F04F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F995CF65-E3DD-4C54-B3F5-417C6F75D930"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"44964DEC-DC35-4DCE-B28D-687348758163"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A8F1A117-8508-4274-99EA-D58F54EBBA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3C910CA4-5EA5-4507-BDE9-3E6C1434B666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4490461A-84C7-42C3-A61B-4E6EF5980B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D365C93F-D06C-4FB0-8192-A4E84B6B2F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.72:*:*:*:*:*:*:*","matchCriteriaId":"42486BD7-4371-46EE-B670-CED685872E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*","matchCriteriaId":"C4B6A66A-AC5F-48E0-ABCE-68828207B106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*","matchCriteriaId":"071BFB1F-402B-4D8C-8155-671792AEDB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*","matchCriteriaId":"DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1.30:*:*:*:*:*:*:*","matchCriteriaId":"B00EDB73-7A1B-4847-903A-88729269E1AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*","matchCriteriaId":"07040FC1-6BFE-4E8F-A089-1166404BE33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*","matchCriteriaId":"D6573035-D208-4C4C-98A4-A7BA26C6AB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B591AE1E-02DB-462A-B71F-48947525D232"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FCD0C29E-FB9F-41DE-968F-46DD0EA55003"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2276BED4-82F0-4F62-AA6F-7E1667F28E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"45D47548-1C4D-4368-99D1-929905DD6B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"28AE8D2D-63CA-4091-9D59-CE919EB1FD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"52A433A5-3EFF-405D-8285-97EC88857968"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BA3571F-9221-45CD-9798-CC72CA428D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*","matchCriteriaId":"129ABCA4-FBF6-41B8-BF6B-65467D56D297"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6122C685-4F02-476F-9A41-9C62D3D92651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"17D37426-00A0-40E5-A27A-CF31D8CBAEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3E11CADC-AFCC-4A98-9271-C35BC9752B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*","matchCriteriaId":"11F1530E-9E63-4A39-9056-3A946A34B650"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*","matchCriteriaId":"29E92D8D-68AB-4FC4-A37A-D6D48829B58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FDE7F79F-54F5-4315-98BD-414CA2D1C51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DBBF2E9F-0F37-4DDA-9704-B31D94745257"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*","matchCriteriaId":"BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020840","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31090","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-3635","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:09.993","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en QuickTimeInternetExtras.qtx en un codec de Indeo v3.2 (también conocido como IV32) de terceros que no se ha especificado y que es para QuickTime, cuando se utiliza con Apple QuickTime anterior a 7.5.5 en Windows; permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de un fichero de película manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"70DDAE09-0183-4BF4-8053-D80E6AE9F1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:indeo:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4591CA5A-8441-45BE-8A60-05F6EB9AC25D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31821","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020841","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3027","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496201/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31086","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-057/","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496201/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-057/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3636","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:10.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\\\.\\GEARAspiWDMDevice in this GEARAspiWDM.sys.  However, the root cause is the integer overflow in the API call itself."},{"lang":"es","value":"Desbordamiento de entero en un driver de terceros no especificado incluido en Apple iTunes anterior a la 8.0 para Windows, permite a usuarios locales obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:windows:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"A57528B3-69F7-4B76-9B15-2CDA3220F4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*","matchCriteriaId":"49DC3DDC-8758-4D28-B2D5-161994C0E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"0D0E3B53-AFAE-47F1-B7E3-395406819357"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"389B617F-29D2-4171-B4E0-9E65BBFAF369"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"696D5986-155D-446C-A5FE-49C0DF1868AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"3370179D-5E8A-4036-AA23-252674C6D807"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"2B71E645-F15B-43FE-931B-819F9ABA89C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"E90B5E1A-4D90-4252-8E34-649F33F1A088"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*","matchCriteriaId":"3E74DB1C-208B-42DE-9A5E-E9010140C5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"018AC033-ACF0-496D-96E1-A03CC4162CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*","matchCriteriaId":"A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*","matchCriteriaId":"F2899F21-F01F-4C95-93AA-40C528EE56DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*","matchCriteriaId":"BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*","matchCriteriaId":"9136E8D6-310D-4D4E-A6AC-2F89218B8666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*","matchCriteriaId":"78A3FEC0-F135-41F9-A260-52157B283B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"79591197-B671-46B2-9EB2-03A75A838CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*","matchCriteriaId":"A2DD1A9D-4AF4-452A-99C2-AE93611C985D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*","matchCriteriaId":"8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*","matchCriteriaId":"6514E3F5-3B5D-43BE-A26D-5167B519F3EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"23C49853-8616-4769-90BC-B6D85B24A36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*","matchCriteriaId":"8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"D5AE8F59-2DF8-403B-BAB9-6465E618897C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"F37B39AB-2D5B-417E-BCEF-29C18D386C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"9730866D-DFE9-448F-9D4E-6B21B3942737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"E20BC99A-13FC-446C-A27A-6C2D859C172B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"DD300F1B-EE8F-4606-B024-A14CA2EF4D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"2690D789-B1DC-40A5-8CC6-BBB499E9A550"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC37C091-02B8-4B39-9253-52C1008ADEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*","matchCriteriaId":"70A4EEE2-1DD2-4936-8939-4683523670B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"95B58CD1-03CB-4C35-A290-7157941D210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"A27B736F-317F-4538-AA3B-72D6EF0D2D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*","matchCriteriaId":"481E736B-0A83-4422-B1D3-4BD0F9565A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*","matchCriteriaId":"3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*","matchCriteriaId":"A7448F89-CC4A-4B18-887F-B47C0B57404C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:*:windows:*:*:*:*:*","matchCriteriaId":"B2943C2E-0DDD-498A-9439-E9394CB06081"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*","matchCriteriaId":"D41DA19A-4403-40A8-A3DB-01A12FD4F267"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020839","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3025","source":"cve@mitre.org"},{"url":"http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/146896","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/497131/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31089","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020997","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020998","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020999","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.07a.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2526","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2769","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2770","source":"cve@mitre.org"},{"url":"http://www.wintercore.com/advisories/advisory_W021008.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6035","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/146896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/497131/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.07a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wintercore.com/advisories/advisory_W021008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3637","sourceIdentifier":"cve@mitre.org","published":"2008-09-26T16:21:43.970","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an \"error checking issue.\""},{"lang":"es","value":"El proveedor Hash-based Message Authentication Code  en Java on Apple Mac OS X v10.4.11, 10.5.4 y 10.5.5 emplea una variable sin inicializar, esto permite a atacantes remotos ejecutar código de su elección a través de un applet manipulado, relacionado con una \"cuestión de chequeo de error\".\r\n\r\n"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31379","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020943","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45396","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3638","sourceIdentifier":"cve@mitre.org","published":"2008-09-26T16:21:44.003","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs."},{"lang":"es","value":"Java sobre Apple Mac OS X v10.5.4 y v10.5.5 no evita el acceso de los applets a URL's del tipo \"file://, lo que permite  a atacantes remotos ejecutar programas de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31380","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45397","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3639","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.580","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función read_rle16 de imagetops en CUPS anterior a la versión 1.3.9 permite a un atacante remoto ejecutar código de su elección por medio de una imagen SGI con datos Run Length Encoded (RLE) malformados que contienen una pequeña imagen y un número de filas alto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.8","matchCriteriaId":"1FE5DEEF-1945-4809-B081-6C410DF7C9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=753","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32331","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33111","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm","source":"cve@mitre.org"},{"url":"http://www.cups.org/articles.php?L575","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L2918","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1656","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:211","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0937.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31690","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021033","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2782","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3401","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1568","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45789","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11464","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/656-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/articles.php?L575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0937.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/656-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3640","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función WriteProlog de texttops en CUPS antes de 1.3.9 permite a atacantes remotos ejecutar código de su elección mediante un archivo PostScript manipulado que dispara un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.8","matchCriteriaId":"1FE5DEEF-1945-4809-B081-6C410DF7C9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32331","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33111","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm","source":"cve@mitre.org"},{"url":"http://www.cups.org/articles.php?L575","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L2919","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1656","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:211","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0937.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31690","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021034","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2782","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3401","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1568","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45790","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10266","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/656-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/articles.php?L575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0937.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/656-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3641","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:03.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory."},{"lang":"es","value":"El filtro de lenguaje grafico de Hewlett-Packard (HPGL) en el CUPS en versiones anteriores a v1.3.9 permite a atacantes remotos ejecutar codigo a su elección a traves de codigos manipulados de anchura y color de lapiz que permite la sobreescritura de memoria a su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.8","matchCriteriaId":"1FE5DEEF-1945-4809-B081-6C410DF7C9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32331","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33111","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm","source":"cve@mitre.org"},{"url":"http://www.cups.org/articles.php?L575","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L2911","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1656","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:211","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0937.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497221/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31688","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021031","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2782","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3401","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1568","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45779","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/656-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/articles.php?L575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0937.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497221/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/656-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3642","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:04.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via an image with a crafted ICC profile."},{"lang":"es","value":"Desbordamiento de búfer en ColorSync en Mac OS X 10.4.11 y 10.5.5 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) y posiblemente ejecutar arbitrariamente código a través de una imagen o un perfil ICC manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31715","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021023","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45778","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3643","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:04.950","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Finder in Mac OS X 10.5.5 allows user-assisted attackers to cause a denial of service (continuous termination and restart) via a crafted Desktop file that generates an error when producing its icon, related to an \"error recovery issue.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en Finder en Mac OS X 10.5.5 que permite a atacantes remotos con la ayuda del usuario producir una denegación de servicio (reinicios continuos) a través de un fichero Desktop manipulado que produce un error cuando su icono es creado, relacionado con un error de \"situación de recuperación de errores\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31720","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021024","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45780","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3644","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache."},{"lang":"es","value":"Apple Safari anterior a v3.2. no previene de forma adecuada el cambio de los datos del formulario para campos de formulario que tienen autocompletar desactivado; esto permite a usuarios locales obtener información sensible al leer la página cacheada en el navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","matchCriteriaId":"7EDB7C2F-79A9-486A-BC40-736DE867E48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.2","matchCriteriaId":"40BC89F2-6654-4A53-8B1E-0A9832DCDE68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:windows:*:*:*:*:*","matchCriteriaId":"4201B398-4223-4731-9645-445231909295"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32291","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021226","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3645","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:04.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd (Networking component) in Mac OS X 10.4.11 and 10.5.5 allows local users to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en en el componente IPC local de el  plugin de EAPOLController para configd (Componente de red) en Mac OS X 10.4.11 y 10.5.5 que permite a usuarios locales ejecutar código a su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31711","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021025","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45781","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3646","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.043","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users."},{"lang":"es","value":"El fichero de configuración de Postfix en Mac OS X 10.5.5 produce que Postfix sea accesible a traves de la red cuando se envia un correo electronico desde una linea de comandos local, lo que permite a atacantes remotos enviar un mail a usuarios locales de Mac OS X."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31721","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45876","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3647","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.060","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a PostScript file with a crafted bounding box comment."},{"lang":"es","value":"Desbordamiento de búfer en PSNormalizer en Mac OS X v10.4.11 y v10.5.5 permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) y ejecutar código de su elección mediante un fichero PostScript con un comentario manipulado en un elemento \"bounding box\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31719","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021026","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45783","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45783","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3648","sourceIdentifier":"cve@mitre.org","published":"2008-08-12T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008."},{"lang":"es","value":"nslookup.exe en Microsoft Windows XP SP2 permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario, como se ha demostrador en un intento de transferencia de zona DNS, y explotada en Agosto del 2008.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt","source":"cve@mitre.org"},{"url":"http://www.nullcode.com.ar/ncs/crash/nsloo.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30636","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020711","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44423","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nullcode.com.ar/ncs/crash/nsloo.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3649","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Regarding Access Complexity:\r\n\r\nhttp://secunia.com/advisories/31292:\r\n\r\n\"Input passed to the \"autid\" parameter in authordetail.php and to the \"Cat\" parameter in categorydetail.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.\r\n\r\nSuccessful exploitation requires that \"magic_quotes_gpc\" is disabled.\"","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en categorydetail.php en Article Friendly Standard, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:articlefriendly:article_friendly:*:*:standard:*:*:*:*:*","matchCriteriaId":"FB08BE69-564F-4448-9090-0077B577FD22"}]}]}],"references":[{"url":"http://secunia.com/advisories/31292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4149","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30453","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3650","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to \"unescaped output,\" possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Horde Groupware Webmail anterior a Edition 1.1.1 (final) tiene impacto desconocido y vectores de ataque relacionados con \"salida no escapada\", posiblemente secuencias de comandos en sitios cruzados (XSS) en (1) el navegador objeto y (2) la vista de contacto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A30F59C-D09A-495D-B5E5-E908D913164E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E367E84-DD66-4512-BCDE-7D7E62B72A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B013D26B-BE67-4131-B320-EF87D19E9C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"664B0D12-607C-4B5F-AC8E-FB1BBD1332E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"989D5040-13B3-4D76-A516-81CAB112FE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FA0765C9-BBFB-4676-9D79-0CFD86BCF9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"842159D1-E30C-4077-8E92-07979E52C10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"81D9B15F-C3CA-44DF-BF5E-51741793348B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.1:*:*:*:*:*:*:*","matchCriteriaId":"46ADF628-449A-463E-A459-69FD9DB2ADAD"}]}]}],"references":[{"url":"http://lists.horde.org/archives/announce/2008/000420.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44479","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000420.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3651","sourceIdentifier":"secalert@redhat.com","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals."},{"lang":"es","value":"Fugas de memoria en racoon/proposal.c del demonio racoon en ipsec-tools versiones anteriores a 0.7.1 permite a usuarios remotos autenticados provocar una denegación de servicio (agotamiento de memoria) a través de propuestas inválidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0A69277A-A538-4875-9140-D1B568A63681"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"2347ADA0-96EB-4459-8AFB-82390B710430"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"22FC05B8-0779-40E5-B914-0E74A3E96E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.5:*:*:*:*:*:*:*","matchCriteriaId":"9C9A27FF-7B8E-4069-8550-B2646F5F8692"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CB3E11FE-1F19-4816-BF99-EE192A361E06"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6F785F17-6BE9-4014-9793-3D9ADC1DB15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.6:*:*:*:*:*:*:*","matchCriteriaId":"2D334F8D-A40B-43F5-B8E8-FB6188C0ABC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"937B89D2-D73A-43A6-9278-5232EC59C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC8E64E-8806-495A-8D20-4B3527F99F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"1980469E-207B-46FA-B921-6D3A188E2C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"A6CD9290-6AA1-43B1-B903-BD8957DF37E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:ipsec_tools_racoon_daemon:0.7:*:*:*:*:*:*:*","matchCriteriaId":"1DCA860C-0E18-4CEE-88D8-11C475FBB393"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31450","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31624","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32971","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-03.xml","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20080724084529.GA3768%40zen.inc","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615380&group_id=74601","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:181","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0849.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30657","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020667","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-641-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2345","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2844","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456660","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44395","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10453","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ipsec-tools-devel&m=121688914101709&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20080724084529.GA3768%40zen.inc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615380&group_id=74601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0849.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-641-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3652","sourceIdentifier":"secalert@redhat.com","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/racoon/handler.c in racoon in ipsec-tools does not remove an \"orphaned ph1\" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption)."},{"lang":"es","value":"src/racoon/handler.c en racoon de ipsec-tools no elimina una gestión \"orphaned ph1\" (fase 1) cuando se ha iniciado remotamente, lo que permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*","matchCriteriaId":"CC27F185-B44C-434E-B732-B69A2A4EFDF4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31478","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31624","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32971","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-03.xml","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=48a0c7a0.qPeWZAE0PY8bDDq%2B%25olel%40ans.pl&forum_name=ipsec-tools-devel","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:181","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0849.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/30657","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020692","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-641-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2378","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2844","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44424","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10448","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=48a0c7a0.qPeWZAE0PY8bDDq%2B%25olel%40ans.pl&forum_name=ipsec-tools-devel","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0849.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-641-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3653","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en TikiWiki CMS/Groupware antes de 2.0 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.9","matchCriteriaId":"2E2D7393-C196-4B8B-AC1D-8C082AFCF9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B13501C0-3322-4D0C-8F7F-12535C76CB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ADE04A29-E90B-41E1-A8B4-462B54C079B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2540703B-63B8-41F4-A17A-0274A7DE7E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1489E8DC-11E7-49A3-84FF-909954147D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"035EEFAB-B46C-407F-BF8C-B33756D4EEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"127349FA-B76D-402A-B688-F2F44024FA11"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"175D43FD-450F-443E-831B-B8091BE7054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"2F437662-CD55-477B-9FEE-0CC4E6CB908D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"EB235741-1FDA-4C90-BD6A-22D18D57D240"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"62C09D81-AA53-4E82-BEA6-D321D95D2E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8CE1CDD1-27F1-456C-933E-24219E6190CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8.1:*:*:*:*:*:*:*","matchCriteriaId":"50BC0034-F043-41EC-AF00-E3DC739A31F7"}]}]}],"references":[{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=35","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44422","source":"cve@mitre.org"},{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=35","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3654","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain \"path and PHP configuration\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en TikiWiki CMS/Groupware antes de 2.0 permite a atacantes obtener \"la ruta y la configuración PHP\" mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.9","matchCriteriaId":"2E2D7393-C196-4B8B-AC1D-8C082AFCF9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B13501C0-3322-4D0C-8F7F-12535C76CB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*","matchCriteriaId":"ADE04A29-E90B-41E1-A8B4-462B54C079B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2540703B-63B8-41F4-A17A-0274A7DE7E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1489E8DC-11E7-49A3-84FF-909954147D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"035EEFAB-B46C-407F-BF8C-B33756D4EEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"127349FA-B76D-402A-B688-F2F44024FA11"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"175D43FD-450F-443E-831B-B8091BE7054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"2F437662-CD55-477B-9FEE-0CC4E6CB908D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"EB235741-1FDA-4C90-BD6A-22D18D57D240"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"62C09D81-AA53-4E82-BEA6-D321D95D2E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8CE1CDD1-27F1-456C-933E-24219E6190CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8.1:*:*:*:*:*:*:*","matchCriteriaId":"50BC0034-F043-41EC-AF00-E3DC739A31F7"}]}]}],"references":[{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=35","source":"cve@mitre.org"},{"url":"http://tikiwiki.org/ReleaseNotes20","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44421","source":"cve@mitre.org"},{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=35","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tikiwiki.org/ReleaseNotes20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3655","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3."},{"lang":"es","value":"Ruby versiones 1.8.5 y anteriores, versiones 1.8.6 hasta 1.8.6-p286, versiones 1.8.7 hasta 1.8.7-p71, y versiones 1.9 hasta r18423, no restringe apropiadamente el acceso a variables y métodos críticos en varios niveles seguros, lo que permite a los atacantes dependiendo del contexto omitir las restricciones de acceso previstas por medio de (1) untrace_var, (2) $PROGRAM_NAME, y (3) syslog en nivel seguro 4 y (4) métodos no confiables en los niveles seguros 1 a 3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.5","matchCriteriaId":"9721AB68-8002-4F85-98BC-0E6FDF7CDF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"46086C6A-9068-4959-BEE7-4D76BDEA3962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"16BDFA5C-35BE-4B7E-BD2D-C28B095F62E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"31160797-6920-4BA1-B355-1CCD1FCDBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:-9:*:*:*:*:*:*","matchCriteriaId":"BC306E85-66D8-4384-BBC3-92DC99C85FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675C37-39EF-41EF-9A53-3FCE4CF23820"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview2:*:*:*:*:*:*","matchCriteriaId":"39609530-0A81-481E-BDA4-5A98327EAD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview3:*:*:*:*:*:*","matchCriteriaId":"C19ADE91-4D9E-43ED-A605-E504B9090119"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview4:*:*:*:*:*:*","matchCriteriaId":"D89E3027-C2ED-4CC6-86F5-1B791576B6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"46F29ADA-E6DC-456F-9E63-C56C68EF7E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview1:*:*:*:*:*:*","matchCriteriaId":"57B1C113-682E-4F7D-BCF0-E30C446C4AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview2:*:*:*:*:*:*","matchCriteriaId":"4BAF9471-B532-4194-AB3C-5AA28432FF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview3:*:*:*:*:*:*","matchCriteriaId":"51BE9728-A5FE-486A-8DB9-711E46243132"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7AC1B910-C0FA-4943-92B1-597842E84015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview1:*:*:*:*:*:*","matchCriteriaId":"A78ECCA9-6F07-4A63-8BF7-8D40F2439552"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview2:*:*:*:*:*:*","matchCriteriaId":"14513719-4ED8-4EAB-B4D8-29849B868BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview3:*:*:*:*:*:*","matchCriteriaId":"92E3814D-BEEA-4E46-9CED-9D8059727D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p11:*:*:*:*:*:*","matchCriteriaId":"CA7D3F32-EFB7-4628-9328-36C6A306B399"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p113:*:*:*:*:*:*","matchCriteriaId":"D1A95E9F-AEC5-4AF9-B7D9-52DDDECB7E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p115:*:*:*:*:*:*","matchCriteriaId":"9328DE73-420B-4280-85A4-ABEFC4679676"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p12:*:*:*:*:*:*","matchCriteriaId":"0F382FBD-6163-4A5B-AEB3-A15A843329F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p2:*:*:*:*:*:*","matchCriteriaId":"4399121F-9BC7-4A67-8B0B-ED3B94A16D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p35:*:*:*:*:*:*","matchCriteriaId":"BFE61EB9-2544-4E48-B313-63A99F4F5241"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview1:*:*:*:*:*:*","matchCriteriaId":"6122187F-2371-429A-971B-419B4ACE8E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview2:*:*:*:*:*:*","matchCriteriaId":"8A42425D-FF21-4863-B43D-EE100DBE6BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview3:*:*:*:*:*:*","matchCriteriaId":"06512108-020D-4D71-8F60-6AA2052D7D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview4:*:*:*:*:*:*","matchCriteriaId":"E2E152A5-F625-4061-AD8C-4CFA085B674F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview5:*:*:*:*:*:*","matchCriteriaId":"756F5247-658C-412C-ACBF-CBE987DF748A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*","matchCriteriaId":"DF02372D-FD0B-453F-821E-1E0BA7900711"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p111:*:*:*:*:*:*","matchCriteriaId":"0A6ED369-E564-4D4F-9E23-A8125194EAD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*","matchCriteriaId":"ACC0DB90-C072-4BCB-9082-94394F547D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p230:*:*:*:*:*:*","matchCriteriaId":"4D7ED62B-4D88-46A4-A0A3-BD37E66A5211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p286:*:*:*:*:*:*","matchCriteriaId":"072A0C3C-9F47-4DC7-96EA-7980B45429DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p36:*:*:*:*:*:*","matchCriteriaId":"FB0372E4-FE3E-49CD-AF55-E2E4518D34F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*","matchCriteriaId":"04579340-B53F-47B5-99C9-B647AAA3D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*","matchCriteriaId":"9D7F4162-108A-470B-8E6B-C009E8C56AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*","matchCriteriaId":"73AB0545-3D8D-4623-8381-D71DA44E3B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*","matchCriteriaId":"0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"52179EC7-CAF0-42AA-A21A-7105E10CA122"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32256","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32371","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0895.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30644","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020656","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44369","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11602","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/651-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0895.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3656","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression."},{"lang":"es","value":"Una vulnerabilidad de complejidad algorítmica en la función WEBrick::HTTPUtils.split_header_value en WEBrick::HTTP::DefaultFileHandler en WEBrick en Ruby versiones 1.8.5 y anteriores, versiones 1.8.6 hasta 1.8.6-p286, versiones 1.8.7 hasta 1.8.7-p71, y versiones 1.9 hasta r18423, permite a los atacantes dependiendo del contexto causar una denegación de servicio (consumo de CPU) por medio de una petición HTTP diseñada que se procesa mediante una expresión regular backtracking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.5","matchCriteriaId":"9721AB68-8002-4F85-98BC-0E6FDF7CDF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"46086C6A-9068-4959-BEE7-4D76BDEA3962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"16BDFA5C-35BE-4B7E-BD2D-C28B095F62E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"31160797-6920-4BA1-B355-1CCD1FCDBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:-9:*:*:*:*:*:*","matchCriteriaId":"BC306E85-66D8-4384-BBC3-92DC99C85FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675C37-39EF-41EF-9A53-3FCE4CF23820"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview2:*:*:*:*:*:*","matchCriteriaId":"39609530-0A81-481E-BDA4-5A98327EAD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview3:*:*:*:*:*:*","matchCriteriaId":"C19ADE91-4D9E-43ED-A605-E504B9090119"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview4:*:*:*:*:*:*","matchCriteriaId":"D89E3027-C2ED-4CC6-86F5-1B791576B6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"46F29ADA-E6DC-456F-9E63-C56C68EF7E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview1:*:*:*:*:*:*","matchCriteriaId":"57B1C113-682E-4F7D-BCF0-E30C446C4AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview2:*:*:*:*:*:*","matchCriteriaId":"4BAF9471-B532-4194-AB3C-5AA28432FF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview3:*:*:*:*:*:*","matchCriteriaId":"51BE9728-A5FE-486A-8DB9-711E46243132"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7AC1B910-C0FA-4943-92B1-597842E84015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview1:*:*:*:*:*:*","matchCriteriaId":"A78ECCA9-6F07-4A63-8BF7-8D40F2439552"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview2:*:*:*:*:*:*","matchCriteriaId":"14513719-4ED8-4EAB-B4D8-29849B868BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview3:*:*:*:*:*:*","matchCriteriaId":"92E3814D-BEEA-4E46-9CED-9D8059727D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p11:*:*:*:*:*:*","matchCriteriaId":"CA7D3F32-EFB7-4628-9328-36C6A306B399"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p113:*:*:*:*:*:*","matchCriteriaId":"D1A95E9F-AEC5-4AF9-B7D9-52DDDECB7E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p115:*:*:*:*:*:*","matchCriteriaId":"9328DE73-420B-4280-85A4-ABEFC4679676"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p12:*:*:*:*:*:*","matchCriteriaId":"0F382FBD-6163-4A5B-AEB3-A15A843329F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p2:*:*:*:*:*:*","matchCriteriaId":"4399121F-9BC7-4A67-8B0B-ED3B94A16D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p35:*:*:*:*:*:*","matchCriteriaId":"BFE61EB9-2544-4E48-B313-63A99F4F5241"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview1:*:*:*:*:*:*","matchCriteriaId":"6122187F-2371-429A-971B-419B4ACE8E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview2:*:*:*:*:*:*","matchCriteriaId":"8A42425D-FF21-4863-B43D-EE100DBE6BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview3:*:*:*:*:*:*","matchCriteriaId":"06512108-020D-4D71-8F60-6AA2052D7D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview4:*:*:*:*:*:*","matchCriteriaId":"E2E152A5-F625-4061-AD8C-4CFA085B674F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview5:*:*:*:*:*:*","matchCriteriaId":"756F5247-658C-412C-ACBF-CBE987DF748A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*","matchCriteriaId":"DF02372D-FD0B-453F-821E-1E0BA7900711"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*","matchCriteriaId":"ACC0DB90-C072-4BCB-9082-94394F547D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*","matchCriteriaId":"04579340-B53F-47B5-99C9-B647AAA3D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*","matchCriteriaId":"9D7F4162-108A-470B-8E6B-C009E8C56AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*","matchCriteriaId":"73AB0545-3D8D-4623-8381-D71DA44E3B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*","matchCriteriaId":"0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"52179EC7-CAF0-42AA-A21A-7105E10CA122"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32371","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30644","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020654","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44371","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/651-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3657","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T01:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check \"taintness\" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen."},{"lang":"es","value":"El módulo dl en Ruby versiones 1.8.5 y anteriores, versiones 1.8.6 hasta 1.8.6-p286, versiones 1.8.7 hasta 1.8.7-p71, y versiones 1.9 a r18423 no comprueba la \"taintness\" de entradas, lo que permite a los atacantes dependiendo del contexto omitir los niveles seguros y ejecutar funciones peligrosas mediante el acceso a una biblioteca usando DL.dlopen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.5","matchCriteriaId":"9721AB68-8002-4F85-98BC-0E6FDF7CDF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"46086C6A-9068-4959-BEE7-4D76BDEA3962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"16BDFA5C-35BE-4B7E-BD2D-C28B095F62E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"31160797-6920-4BA1-B355-1CCD1FCDBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:-9:*:*:*:*:*:*","matchCriteriaId":"BC306E85-66D8-4384-BBC3-92DC99C85FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675C37-39EF-41EF-9A53-3FCE4CF23820"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview2:*:*:*:*:*:*","matchCriteriaId":"39609530-0A81-481E-BDA4-5A98327EAD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview3:*:*:*:*:*:*","matchCriteriaId":"C19ADE91-4D9E-43ED-A605-E504B9090119"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:preview4:*:*:*:*:*:*","matchCriteriaId":"D89E3027-C2ED-4CC6-86F5-1B791576B6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"46F29ADA-E6DC-456F-9E63-C56C68EF7E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview1:*:*:*:*:*:*","matchCriteriaId":"57B1C113-682E-4F7D-BCF0-E30C446C4AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview2:*:*:*:*:*:*","matchCriteriaId":"4BAF9471-B532-4194-AB3C-5AA28432FF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:preview3:*:*:*:*:*:*","matchCriteriaId":"51BE9728-A5FE-486A-8DB9-711E46243132"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7AC1B910-C0FA-4943-92B1-597842E84015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview1:*:*:*:*:*:*","matchCriteriaId":"A78ECCA9-6F07-4A63-8BF7-8D40F2439552"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview2:*:*:*:*:*:*","matchCriteriaId":"14513719-4ED8-4EAB-B4D8-29849B868BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:preview3:*:*:*:*:*:*","matchCriteriaId":"92E3814D-BEEA-4E46-9CED-9D8059727D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p11:*:*:*:*:*:*","matchCriteriaId":"CA7D3F32-EFB7-4628-9328-36C6A306B399"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p113:*:*:*:*:*:*","matchCriteriaId":"D1A95E9F-AEC5-4AF9-B7D9-52DDDECB7E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p115:*:*:*:*:*:*","matchCriteriaId":"9328DE73-420B-4280-85A4-ABEFC4679676"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p12:*:*:*:*:*:*","matchCriteriaId":"0F382FBD-6163-4A5B-AEB3-A15A843329F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p2:*:*:*:*:*:*","matchCriteriaId":"4399121F-9BC7-4A67-8B0B-ED3B94A16D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:p35:*:*:*:*:*:*","matchCriteriaId":"BFE61EB9-2544-4E48-B313-63A99F4F5241"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview1:*:*:*:*:*:*","matchCriteriaId":"6122187F-2371-429A-971B-419B4ACE8E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview2:*:*:*:*:*:*","matchCriteriaId":"8A42425D-FF21-4863-B43D-EE100DBE6BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview3:*:*:*:*:*:*","matchCriteriaId":"06512108-020D-4D71-8F60-6AA2052D7D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview4:*:*:*:*:*:*","matchCriteriaId":"E2E152A5-F625-4061-AD8C-4CFA085B674F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:preview5:*:*:*:*:*:*","matchCriteriaId":"756F5247-658C-412C-ACBF-CBE987DF748A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*","matchCriteriaId":"DF02372D-FD0B-453F-821E-1E0BA7900711"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*","matchCriteriaId":"ACC0DB90-C072-4BCB-9082-94394F547D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*","matchCriteriaId":"04579340-B53F-47B5-99C9-B647AAA3D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*","matchCriteriaId":"9D7F4162-108A-470B-8E6B-C009E8C56AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*","matchCriteriaId":"73AB0545-3D8D-4623-8381-D71DA44E3B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*","matchCriteriaId":"0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"52179EC7-CAF0-42AA-A21A-7105E10CA122"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32256","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32371","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30644","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020652","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44372","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9793","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/651-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3658","sourceIdentifier":"cve@mitre.org","published":"2008-08-15T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Mitre Description references \"PHP 5.6 through 5.2.6\" -- however research to the changelog for PHP 5 does not reflect a 5.6 release  \r\n\r\nchangelog: http://www.php.net/ChangeLog-5.php\r\n\r\n\r\nHowever, http://www.openwall.com/lists/oss-security/2008/08/08/2:\r\n\"Those issues are fixed by the recent php-4.4.9 release, but they affect \r\nphp-5.2.6 as well and the fixes are not part of any released version in \r\ncase of 5.2.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"Un desbordamiento de búfer en la función imageloadfont en el archivo ext/gd/gd.c en PHP versiones 4.4.x anteriores a 4.4.9 y PHP versiones 5.2 anteriores a 5.2.6-r6, permite a los atacantes dependiendo del contexto causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo de fuente diseñado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in the affected versions of PHP packages shipped in Red Hat Enterprise Linux via advisories listed on the following page: https://rhn.redhat.com/errata/CVE-2008-3658.html","lastModified":"2009-04-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234102","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://news.php.net/php.cvs/51219","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/47484","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32316","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32884","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33797","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1647","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:024","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/13/8","source":"cve@mitre.org"},{"url":"http://www.php.net/archive/2008.php#id2008-08-07-1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498647/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498647/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30649","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3275","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44401","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9724","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.php.net/php.cvs/51219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/47484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/13/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2008.php#id2008-08-07-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498647/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498647/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3659","sourceIdentifier":"cve@mitre.org","published":"2008-08-15T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Overview contains a typo, should read \"PHP 5.2 through 5.2.6\" not \"5.6 through 5.2.6\".","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function.  NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible."},{"lang":"es","value":"Un desbordamiento de búfer en la función memnstr en versiones de PHP 4.4.x anteriores a 4.4.9 y en PHP 5.6 permite a atacantes provocar una denegación de servicio (con caida de la aplicación) y posiblemente ejecutar código arbitrario a través del argumento delimiter de la función a explotar. NOTA: el alcance de esta cuestión es limitado, ya que la mayoría de las aplicaciones no usan un delimitador controlado por un atacante, pero los ataques locales contra los safe_mode son viables."}],"vendorComments":[{"organization":"Red Hat","comment":"The PHP interpreter does not offer a reliable sandboxed security layer (as found in, say, a JVM) in which untrusted scripts can be run any script run by the PHP interpreter must be trusted with the privileges of the interpreter itself.  We therefore do not classify this issue as security-sensitive since no trust boundary is crossed.\n","lastModified":"2017-08-07T21:32:03.983"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234102","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://news.php.net/php.cvs/52002","source":"cve@mitre.org"},{"url":"http://osvdb.org/47483","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32316","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1647","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:024","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/13/8","source":"cve@mitre.org"},{"url":"http://www.php.net/archive/2008.php#id2008-08-07-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020995","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44405","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.php.net/php.cvs/52002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/13/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2008.php#id2008-08-07-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3660","sourceIdentifier":"cve@mitre.org","published":"2008-08-15T00:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Overview contains a typo, should read \"PHP 5.2 through 5.2.6\" not \"5.6 through 5.2.6\".","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php."},{"lang":"es","value":"PHP 4.4.x en versiones anteriores a PHP 4.4.9 y 5.2.6 a través de 5.6, cuando se utiliza como un módulo FastCGI, permite a atacantes remotos provocar una denegación de servicio (con caida de la aplicación) a través de una solicitud con varios puntos precediendo a la extensión, como se demuestra usando foo..php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234102","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1647","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:024","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/13/8","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020994","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44402","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9597","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=234102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/08/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/13/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3661","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie."},{"lang":"es","value":"Drupal, probablemente v5.10 y v6.4, no establece el indicador seguro para la cookie de sesión en una sesión https, lo que puede provocar que sea enviada en una petición http y facilitar a los atacantes remotos el capturar la misma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"}]}]}],"references":[{"url":"http://int21.de/cve/CVE-2008-3661-drupal.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496575/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31285","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45298","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://int21.de/cve/CVE-2008-3661-drupal.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3662","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T18:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie."},{"lang":"es","value":"Gallery, versiones anteriores a 1.5.9, 2.x y versiones anteriores a 2.2.6 no asigna el indicador seguro para la cookie de sesión en una sesión https, el cual puede causar que la cookie sea enviada en una petición http y hacer más fácil a los atacantes remotos capturar esta cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"F63EDF9A-1818-41D4-96EF-DFF61994C27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAD2DDED-A01D-4026-B8C3-0DA916466D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D400C30B-BD93-4419-BEC2-24A470F5E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8180C4E9-EFC9-438C-AAAF-B09B838CA17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B2ED9F1B-D3BD-42BA-8300-6A719A577F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3A821D29-75FA-4A6D-BE1A-D11906FA188D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.8","matchCriteriaId":"B2630CD9-31D8-4E24-B518-03D94B3383B9"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_1.5.9_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://gallery.menalto.com/gallery_2.2.6_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://int21.de/cve/CVE-2008-3662-gallery.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Sep/0379.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33144","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496509/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31231","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_1.5.9_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://gallery.menalto.com/gallery_2.2.6_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://int21.de/cve/CVE-2008-3662-gallery.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Sep/0379.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496509/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3663","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.537","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie."},{"lang":"es","value":"Squirrelmail 1.4.15 no establece la bandera de seguridad para la cookie de sesión en una sesión https, lo que podría provocar que la cookie pudiera ser enviada en peticiones http y facilitar a atacantes remotos capturar esta cookie."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been fixed in the affected Red Hat Enterprise Linux versions via: https://rhn.redhat.com/errata/RHSA-2009-0010.html","lastModified":"2009-01-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"}]}]}],"references":[{"url":"http://int21.de/cve/CVE-2008-3663-squirrelmail.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4304","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.nabble.com/ANNOUNCE:-SquirrelMail-1.4.16-Released-td19711998.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496601/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31321","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45700","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10548","source":"cve@mitre.org"},{"url":"http://int21.de/cve/CVE-2008-3663-squirrelmail.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/ANNOUNCE:-SquirrelMail-1.4.16-Released-td19711998.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496601/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3664","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en XRMS, permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente a través de (1) el campo real name , relacionado con la user list; (2) el parámetro target en login.php, (3) el parámetro title en activities/some.php, (4) el parámetro company_name en companies/some.php, (5) el parámetro last_name en contacts/some.php, (6) the el parámetro campaign_title en campaigns/some.php, (7) el parámetro opportunity_title en opportunities/some.php, (8) el parámetro case_title en cases/some.php, (9) el parámetro file_id parameter en files/some.php, o (10) el parámetro starting en reports/custom/mileage.php, una característica relacionada con la CVE-2008-1129."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrms:xrms_crm:*:*:*:*:*:*:*:*","matchCriteriaId":"FC1B18C0-3B41-4FD2-A24F-D58F525A5C50"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495981/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45142","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3666","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server with EnableSendFile configured; and (2) local users to cause a denial of service (panic) via a call to the sendfile system call, as reachable through the sendfilev library."},{"lang":"es","value":"La vulnerabilidad no especificada en Sun Solaris versión 10 y OpenSolaris anterior a la versión snv_96 permite (1) atacantes dependiendo del contexto causar una denegación de servicio (pánico) por medio de vectores que involucran la elaboración de un archivo creado y el uso de la llamada de la función del sistema sendfilev, como fue demostrado por un archivo servido por un servidor web Apache versión 2.2.x con EnableSendFile configurado; y (2) usuarios locales causan una denegación de servicio (pánico) por medio de una llamada al sistema sendfile, según se pueda acceder por medio de la biblioteca sendfilev."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"D25AAA06-245D-480C-A748-A12900EC0E9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:sparc:*:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"18BB642F-2555-4737-976C-DA0FA8F5BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:x86:*:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"35DF4EF1-5B75-40C1-98D0-E7FA16662D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:*:*:*:*:*:*","matchCriteriaId":"9E8A5A38-4864-4AD0-A8BA-A472AE4D7557"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:*:*:*:*:*:*","matchCriteriaId":"184AB738-8A6A-4619-A630-890925530818"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:*:*:*:*:*:*","matchCriteriaId":"A89BE592-11FD-46ED-B7F4-1930AAA5CCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:*:*:*:*:*:*","matchCriteriaId":"A45820A6-277B-492C-9E05-210B16E6BD5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:*:*:*:*:*:*","matchCriteriaId":"A5E40865-9B44-4CB4-B2F0-13A8CA0AD38C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:*:*:*:*:*:*","matchCriteriaId":"19094B1E-8496-4997-9AB1-A7F267DB1396"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:*:*:*:*:*:*","matchCriteriaId":"899768FF-7BBD-4128-8AC4-EB62686618CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:*:*:*:*:*:*","matchCriteriaId":"C0812CF1-08B3-4047-8B87-3B2D99D53AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:*:*:*:*:*:*","matchCriteriaId":"E1C7D0C8-898F-49DD-AB80-BF1EE3A7D1A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:*:*:*:*:*:*","matchCriteriaId":"E20E2BEC-AFB9-4527-B18A-BB6FE087DE8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:*:*:*:*:*:*","matchCriteriaId":"2483121B-6DAF-4367-8608-9E4BE25C263F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:*:*:*:*:*:*","matchCriteriaId":"9228C3DC-CF09-45D9-8D60-7861D29AB298"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:*:*:*:*:*:*","matchCriteriaId":"97E622C2-5727-40F0-AE5D-4F21F8DA20B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:*:*:*:*:*:*","matchCriteriaId":"D802C1F5-2ACC-46E1-B350-378CEEBDA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:*:*:*:*:*:*","matchCriteriaId":"40B6C721-3CED-46C3-9874-A6E985081C4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:*:*:*:*:*:*","matchCriteriaId":"2065BBE3-F0F9-4F7B-8828-0AD0491B67B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:*:*:*:*:*:*","matchCriteriaId":"FB17597F-DF89-431A-B7FB-C33E689A6901"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:*:*:*:*:*:*","matchCriteriaId":"47D688FA-7F88-4645-B3E5-830EF4C4FDAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:*:*:*:*:*:*","matchCriteriaId":"7FD6B880-B683-449E-9EA5-6FB1483EE309"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:*:*:*:*:*:*","matchCriteriaId":"F1D04C99-E0FD-4BB4-B651-9A9250633BB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:*:*:*:*:*:*","matchCriteriaId":"FC27EEDE-AE2F-427A-A035-AF790A65AAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:*:*:*:*:*:*","matchCriteriaId":"BD65532A-C083-462B-9FED-64051535E53E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:*:*:*:*:*:*","matchCriteriaId":"E71C245C-2E0A-423C-A0CE-AC15FDDE784F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:*:*:*:*:*:*","matchCriteriaId":"94B1C8EB-E9EB-4465-9BF9-545D1EF0C536"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:*:*:*:*:*:*","matchCriteriaId":"A2288FB2-5F26-41FB-A08D-90B168AD0F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:*:*:*:*:*:*","matchCriteriaId":"49AA677A-750B-4D05-869A-51981B2E2EC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:*:*:*:*:*:*","matchCriteriaId":"07F2BE5D-3D07-440F-8006-B74A8B718DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:*:*:*:*:*:*","matchCriteriaId":"894B4387-22CF-4DFA-ABDC-A89598D9DB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:*:*:*:*:*:*","matchCriteriaId":"9FB6A3F2-7152-4FEE-A3DC-D9926A3F8388"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:*:*:*:*:*:*","matchCriteriaId":"4314A1C4-8644-4096-9559-9CF4D5EAC39C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:*:*:*:*:*:*","matchCriteriaId":"90D6B309-746D-4306-8AD7-0D0968B02AEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:*:*:*:*:*:*","matchCriteriaId":"CB16CDAF-3C3B-4451-9458-D0E16271F37F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:*:*:*:*:*:*","matchCriteriaId":"C5B7225D-DC75-4E06-BE15-079556708B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:*:*:*:*:*:*","matchCriteriaId":"C6C2F6FC-F5D8-48DC-9CC9-5F82FD46603D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:*:*:*:*:*:*","matchCriteriaId":"CA5BFD2E-9D6F-4D5E-B86A-C25E142B5668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:*:*:*:*:*:*","matchCriteriaId":"F597A149-9187-48B1-AC77-357C87FEEF15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:*:*:*:*:*:*","matchCriteriaId":"BFAAC94D-6CEA-4B80-A9E8-959D8EB99E3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:*:*:*:*:*:*","matchCriteriaId":"FD73A336-77A2-4FB8-8A2E-EE2692886378"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:*:*:*:*:*:*","matchCriteriaId":"1109018C-B0A9-4752-8BB3-C94EC9B28F18"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:*:*:*:*:*:*","matchCriteriaId":"1235FD40-1FB9-4FD5-898B-CD6A3BA855F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:*:*:*:*:*:*","matchCriteriaId":"8D4C7956-A065-4114-8642-C8C9C1246957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:*:*:*:*:*:*","matchCriteriaId":"19CC57C8-DE9B-405E-83D2-FC63A4350772"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:*:*:*:*:*:*","matchCriteriaId":"4B2D3327-7239-4D4D-BF5F-A4B46900A331"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:*:*:*:*:*:*","matchCriteriaId":"E3D289A4-3043-4D14-8C64-EEE0D529B58F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:*:*:*:*:*:*","matchCriteriaId":"B9D3DD72-E560-449F-ABC9-D4DF91DD4F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:*:*:*:*:*:*","matchCriteriaId":"A50E9F3A-3B5B-4069-AF5F-E524C1253E7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:*:*:*:*:*:*","matchCriteriaId":"6558890D-704E-4C29-8AC5-E4B07034B713"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:*:*:*:*:*:*","matchCriteriaId":"3D4659A1-0FA9-4D08-9CBD-59C4F7A8004B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:*:*:*:*:*:*","matchCriteriaId":"216204D9-D216-442C-A6BE-C3D86E0A70A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:*:*:*:*:*:*","matchCriteriaId":"6DC9FB09-0F12-458A-9B99-414FAA9E2A1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:*:*:*:*:*:*","matchCriteriaId":"22E3FD68-C5F1-48F2-94C8-694395893A2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:*:*:*:*:*:*","matchCriteriaId":"27E32B20-3C72-4A0C-9971-8BB719851C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:*:*:*:*:*:*","matchCriteriaId":"91ED6A1F-54EB-4A2E-A157-ADFE6681521A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:*:*:*:*:*:*","matchCriteriaId":"E1834E45-86DA-47ED-8D00-001714D66B2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:*:*:*:*:*:*","matchCriteriaId":"C06E3C22-3FE5-4995-BE51-BEFB567536E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:*:*:*:*:*:*","matchCriteriaId":"B313A3DA-24DF-414F-BEEC-D5AF2B7ED31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:*:*:*:*:*:*","matchCriteriaId":"45015A0D-3CC7-47D2-8F56-9945315D68CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:*:*:*:*:*:*","matchCriteriaId":"10277E95-F2E4-4398-9DC7-9B854EE8D25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:*:*:*:*:*:*","matchCriteriaId":"86AC01EC-1EC1-428F-B7A4-3D5582AD2C52"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:*:*:*:*:*:*","matchCriteriaId":"953C1410-DB77-4250-B1DF-364FCAFDA2B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:*:*:*:*:*:*","matchCriteriaId":"9FD5C5C6-0047-4261-AC29-A3BDF5287C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:*:*:*:*:*:*","matchCriteriaId":"F428B518-6D1A-4F1A-A62C-44CC8CFDF3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:*:*:*:*:*:*","matchCriteriaId":"65A0F545-87B5-4733-8222-A99D2C968C7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:*:*:*:*:*:*","matchCriteriaId":"E9206F3B-8360-42D4-A567-EE2C57F3C2F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:*:*:*:*:*:*","matchCriteriaId":"D255FFED-0229-4336-AED4-B7D6E5746F54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:*:*:*:*:*:*","matchCriteriaId":"D7721527-B8D5-4346-B4DC-08D09AAC9E64"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:*:*:*:*:*:*","matchCriteriaId":"CAEA2E4D-49CB-4696-B878-882468340DAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:*:*:*:*:*:*","matchCriteriaId":"0D86A5C5-5584-428A-88B1-CD3EE634FF8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:*:*:*:*:*:*","matchCriteriaId":"86330112-84C7-457C-A7B3-619AC189D593"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:*:*:*:*:*:*","matchCriteriaId":"0F3B0C6E-23A5-4226-BB22-7A8470DC3724"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:*:*:*:*:*:*","matchCriteriaId":"FB311723-F2F3-4C85-831C-E3E2CC19703C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:*:*:*:*:*:*","matchCriteriaId":"416918A4-F37E-445E-B58F-7D4B1B90D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:*:*:*:*:*:*","matchCriteriaId":"5B10A4DE-2FAD-4ACA-8253-4370A274181D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:*:*:*:*:*:*","matchCriteriaId":"4DABACD4-EDD5-4BAA-AB12-3AC1A840E7D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:*:*:*:*:*:*","matchCriteriaId":"77CF9CE4-3FF6-427D-87B7-61581FBCAFE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:*:*:*:*:*:*","matchCriteriaId":"5F614E40-6C58-48E2-803D-AEDB03C70810"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:*:*:*:*:*:*","matchCriteriaId":"EDB8A628-4BA9-41EF-B336-D5DB21896494"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:*:*:*:*:*:*","matchCriteriaId":"C5197527-068E-4D9B-BDDC-453553649440"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:*:*:*:*:*:*","matchCriteriaId":"2163BC71-6BA6-4E5F-A193-9DB1E533E06B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:*:*:*:*:*:*","matchCriteriaId":"8F58CF3B-3216-456C-B15A-B84A547A7A34"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:*:*:*:*:*:*","matchCriteriaId":"549CB843-1C1A-4BD2-AA9D-A23EC0DAF413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:*:*:*:*:*:*","matchCriteriaId":"26F3057D-3B2F-4FCD-80D2-DD0A6AE60657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:*:*:*:*:*:*","matchCriteriaId":"B311263F-F3E2-4AE3-81A0-26516605E74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:*:*:*:*:*:*","matchCriteriaId":"C6B920FE-4D5C-49D3-BC3B-C519A368F127"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:*:*:*:*:*:*","matchCriteriaId":"5FE64FFA-2F99-4980-9F8B-16F30314039F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:*:*:*:*:*:*","matchCriteriaId":"5F7055FB-744F-4400-84DC-628A962A721A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:*:*:*:*:*:*","matchCriteriaId":"CCEB7375-7C2C-4A7C-BC46-552CBC16E8F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:*:*:*:*:*:*","matchCriteriaId":"E5F33FE6-B2A7-4D20-8425-C545139103A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:sparc:*:*:*:*:*:*","matchCriteriaId":"CE416B8A-835A-4DD5-B6E7-571F093FBEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:x86:*:*:*:*:*:*","matchCriteriaId":"07736242-C5AB-44C9-A943-8B6E212045FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*","matchCriteriaId":"287C4B1B-FFA8-452E-98BF-8B2EB30F6B6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:sparc:*:*:*:*:*:*","matchCriteriaId":"A1C9A90E-5EB0-4D81-BDEF-B21A15F5D8F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:x86:*:*:*:*:*:*","matchCriteriaId":"4B570967-3246-44CF-A192-68AFA37EA2C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*","matchCriteriaId":"F666F65E-BFA9-4F06-A84F-844D7E5DEBBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:sparc:*:*:*:*:*:*","matchCriteriaId":"D05BBA43-DF35-4B0C-BCA7-3D0D7AA4802D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*","matchCriteriaId":"FB134C5D-D0FF-436C-8304-5CED1EC54A7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*","matchCriteriaId":"7B36C324-ADFA-4885-846E-059872C95B25"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:sparc:*:*:*:*:*:*","matchCriteriaId":"822528BE-6E33-4391-A36E-5F043BF5363D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:x86:*:*:*:*:*:*","matchCriteriaId":"E2F0E347-9061-41CC-AA25-3326072CCBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:*:*:*:*:*:*","matchCriteriaId":"FB88D92E-A71C-4EA7-8A30-0109E62E9F26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:sparc:*:*:*:*:*:*","matchCriteriaId":"83445EF8-E17A-4B89-B44C-C320C363C35A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:x86:*:*:*:*:*:*","matchCriteriaId":"AC5AB4B4-1415-4162-978A-8EABC0EAA08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:*:*:*:*:*:*","matchCriteriaId":"CD8801EA-A577-4388-83F7-174F168B66E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:sparc:*:*:*:*:*:*","matchCriteriaId":"A2FB1AC8-5DC3-4902-9CC2-55777CF012ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:x86:*:*:*:*:*:*","matchCriteriaId":"267624C1-33D7-45F3-B92C-2BCF68731BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:*:*:*:*:*:*","matchCriteriaId":"FFF21371-BC95-4815-AE8D-34361B5FA3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:sparc:*:*:*:*:*:*","matchCriteriaId":"932F1594-5BFB-498C-8A35-EA224E8792C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:x86:*:*:*:*:*:*","matchCriteriaId":"FBEE4897-35DE-49B6-A4C7-087FB0DAB193"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://osvdb.org/47375","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239186-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30654","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020666","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44396","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5128","source":"cve@mitre.org"},{"url":"http://osvdb.org/47375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239186-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3667","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Maxthon Browser 2.0 y anteriores permite a atacantes remotos ejecutar código de su elección mediante una cabecera HTTP Content-type (tipo de contenido) larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"00F222DA-D03C-49FD-8855-543E9E75FD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:1.1.39:*:*:*:*:*:*:*","matchCriteriaId":"17633C0B-AB02-4889-B3A4-422F6965F71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:1.2:*:*:*:*:*:*:*","matchCriteriaId":"119D2605-46D9-46F6-8F0B-97B39B587918"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5311CC31-08B8-4935-9E76-8ADB6E0A620B"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:1.6.3.80:*:*:*:*:*:*:*","matchCriteriaId":"56BD7739-4D7B-4C70-ABD8-499287703188"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30617-poc.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30617","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44381","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30617-poc.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3668","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to (1) friends.php, (2) seutubo.php, (3) album.php, (4) scrapbook.php, (5) index.php, or (6) tribes.php; or (7) the description field of a new scrap."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo Yogurt Social Network 3.2 rc1 para XOOPS permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro uid a (1) friends.php, (2) seutubo.php, (3) album.php, (4) scrapbook.php, (5) index.php, o (6) tribes.php; o (7) el campo description (descripción) de un nuevo \"scrap (borrador)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcello_brandao:yogurt_social_network_module:3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"010CFAED-5F89-453A-ABE3-6E9B2B878490"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30619","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44385","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44387","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3669","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews) allows remote attackers to execute arbitrary SQL commands via the ItemID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comments.php de ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (también conocido como ZeeReviews) permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro ItemID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeescripts:zeereviews:*:*:*:*:*:*:*:*","matchCriteriaId":"7B1B7491-71B5-497F-829B-4BC85FE63753"}]}]}],"references":[{"url":"http://secunia.com/advisories/31296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30445","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2256/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44100","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2256/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3670","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL commands via the autid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en authordetail.php de Article Friendly Pro permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro autid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:articlefriendly:article_friendly:*:*:pro:*:*:*:*:*","matchCriteriaId":"B648E39C-9217-4985-A522-D7B88B845F08"}]}]}],"references":[{"url":"http://secunia.com/advisories/31292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4149","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30452","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2255/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44120","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2255/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3671","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Acronis True Image Echo Server 9.x build 8072 en Linux no encripta correctamente las copias de seguridad a un servidor FTP, lo que permite a atacantes remotos obtener información sensible. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:true_image_echo_server:9.5.8072:*:*:*:*:*:*:*","matchCriteriaId":"96873CD2-B716-4739-AE67-BA1408855C9D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30856","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3672","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3673. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo showcategory.php en Classified Ads de PozScripts, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro cid, un vector diferente de CVE-2008-3673. NOTA: la procedencia de esta información es desconocida; los datos son obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pozscripts:classified_ads:*:*:*:*:*:*:*:*","matchCriteriaId":"F69B2413-DF7C-47CD-A746-C522B322A83D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44112","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3673","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo browsecats.php en PozScripts ClassifiedAds, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro cid, un vector diferente de CVE-2008-3672."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pozscripts:classified_ads:*:*:*:*:*:*:*:*","matchCriteriaId":"F69B2413-DF7C-47CD-A746-C522B322A83D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4153","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2253/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44112","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6169","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2253/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3674","sourceIdentifier":"cve@mitre.org","published":"2008-08-13T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ugroups.php de PozScripts TubeGuru Video Sharing Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro UID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pozscripts:tubeguru_video_sharing_script:*:*:*:*:*:*:*:*","matchCriteriaId":"99E53797-D432-4C82-9504-EBA85A6175CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30455","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2252/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6170","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2252/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3675","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (dot dot) and possibly (2) a full pathname in the img parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en classes/imgsize.php en Gelato 0.95 permite a atacantes remotos leer archivos arbitrarios a través de (1) un .. (punto-punto) y, posiblemente, (2) la ruta completa en el parámetro img. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gelatocms:gelatocms:0.95:*:*:*:*:*:*:*","matchCriteriaId":"31EE181F-2818-4613-B802-E56C0878247D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4154","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44416","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3676","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands."},{"lang":"es","value":"Una vulnerabilidad sin especificar en el servidor IMAP de HMailServer 4.4.1 permite a usuarios remotos autenticados provocar una denegación de servicio (agotamiento de recursos o caida del demonio) a través de una larga serie de comandos IMAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hmailserver:hmailserver:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE7F832-DC66-4BEF-99C6-930A91836E62"}]}]}],"references":[{"url":"http://secunia.com/advisories/31480","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4155","source":"cve@mitre.org"},{"url":"http://www.hmailserver.com/documentation/?page=changelog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/495361/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30663","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hmailserver.com/documentation/?page=changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/495361/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3677","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional sources found during analysis:\r\n\r\nhttp://xforce.iss.net/xforce/xfdb/44426\r\nhttp://www.openfreeway.org/home.html","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en includes/events_application_top.php en Freeway en versiones anteriores a 1.4.2.197, permite a atacantes remotos incluir y ejecutar arbitrariamente ficheros locales a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.25:public_beta:*:*:*:*:*:*","matchCriteriaId":"17965A1F-4CBD-4206-B65F-FDC91FF0E361"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.59:*:*:*:*:*:*:*","matchCriteriaId":"161E864D-0036-4D35-BE17-01915B6D44EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.60:*:*:*:*:*:*:*","matchCriteriaId":"3A09EBD7-1188-4385-A106-BED30CBFD7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.1.1.81:*:*:*:*:*:*:*","matchCriteriaId":"57922480-AA78-4EC3-95A9-42C03E3FCBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.2.0.113:*:*:*:*:*:*:*","matchCriteriaId":"A908306D-D797-4F03-BE1F-F3589ADC4A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.0.142:*:*:*:*:*:*:*","matchCriteriaId":"C2506D84-CA57-473C-9607-B7682EC7C60B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.1.147:*:*:*:*:*:*:*","matchCriteriaId":"9D715EFE-2E15-46BC-8CB8-F69304A64509"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.2.154:*:*:*:*:*:*:*","matchCriteriaId":"A3512E21-A237-4B17-A4FC-E915B9E858BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.2.160:joomla_beta:*:*:*:*:*:*","matchCriteriaId":"219D55DC-19CA-43AE-A578-5C803CC2A3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4:pre-release:*:*:*:*:*:*","matchCriteriaId":"9757394A-6407-4FD9-B050-6ED0FF26E09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9B03F703-ACF9-4A61-95D0-AF5253FF3085"}]}]}],"references":[{"url":"http://secunia.com/advisories/31475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619467","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30676","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44426","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3678","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL."},{"lang":"es","value":"Una vulnerabilidad de Secuencias de comandos en sitios cruzados(XSS) en admin/search_links.php en versiones de Freeway anteriores a la  1.4.2.197 permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través de la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.0.60:*:*:*:*:*:*:*","matchCriteriaId":"5425AFF2-8FC0-4C75-B7F1-BB19A40FBECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.1.0.76:*:*:*:*:*:*:*","matchCriteriaId":"0F47BA19-3F04-425E-B944-C9436B990E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.1.1.80:*:*:*:*:*:*:*","matchCriteriaId":"CA346E49-B32F-4A91-BD54-D41D74A5DA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.2.0.113:*:*:*:*:*:*:*","matchCriteriaId":"70912B52-AF51-45C4-B6FD-8451EF825E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.3:*:*:*:*:*:*:*","matchCriteriaId":"097CE970-3980-4FB3-9846-7F3DC2316076"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.3.1.147:*:*:*:*:*:*:*","matchCriteriaId":"147F7E94-F7C7-4623-A130-D8AEEB36EB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.3.2.154:*:*:*:*:*:*:*","matchCriteriaId":"C42C1462-1A9C-4EC7-BD3D-D6673FBBDC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.4.1.170:*:*:*:*:*:*:*","matchCriteriaId":"10712633-9115-485C-809A-EC299285A900"},{"vulnerable":true,"criteria":"cpe:2.3:a:damian_hickey:freeway:1.4.1.171:*:*:*:*:*:*:*","matchCriteriaId":"A9D0C309-5C62-405C-8F39-92E5BC2B9F65"}]}]}],"references":[{"url":"http://secunia.com/advisories/31475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619467","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30676","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3679","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a (1) user_add, (2) recip, (3) tellafriend, or (4) contact action, or (5) in a request without an action; or (6) the id parameter in a tellafriend action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en IDevSpot PhpLinkExchange 1.01 permiten a atacantes remotos inyectar scripts web o HTML arbitrarios a través del parámetro CatID en (1) user_add, (2) recip, (3) tellafriend, ( 4) la acción de contacto, (5) en una solicitud sin una acción, o (6) la identificación de parámetros en una acción tellafriend. NOTA: la procedencia de esta información es desconocida; los detalles son obtenidos exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:phplinkexchange:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A5D418EE-C796-41B7-940E-9E6FE68F5029"}]}]}],"references":[{"url":"http://secunia.com/advisories/31487","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30665","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30665/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44418","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30665/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3680","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784."},{"lang":"es","value":"La función de descifrado en Flagship Industries Ventrilo en versiones 3.0.2 y anteriores permite a atacantes remotos provocar una denegación de servicio (desreferencia a un puntero NULL y la caída del servidor) mediante el envío de un paquete de tipo 0 con una versión no válida seguida por otro paquete al puerto TCP 3784."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:1:*:*:*:*:*:*:*","matchCriteriaId":"AD7B8FAB-4CC7-46D1-AEED-6981A1DF7282"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:1.01:*:*:*:*:*:*:*","matchCriteriaId":"4CF15DB2-0064-4341-BFD5-FBFDCA50671C"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:1.03:*:*:*:*:*:*:*","matchCriteriaId":"3E09F3E6-3E2C-41FA-8182-323731B8358E"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:1.04:*:*:*:*:*:*:*","matchCriteriaId":"9CCAE281-2997-47DA-8363-B605B436A0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:1.05:*:*:*:*:*:*:*","matchCriteriaId":"B687251C-A052-45E7-B360-89428078DE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:1.06:*:*:*:*:*:*:*","matchCriteriaId":"822097D0-92A7-4FCA-B5CF-D0E4174DA953"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2:*:*:*:*:*:*:*","matchCriteriaId":"98AC732A-41D2-4357-8741-9F6AD56269F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D65B6E36-91D0-47D2-8ABA-52D5ED6B960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"599708E5-B452-41E9-959F-FB79D5E96A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AD449C35-6329-4B4B-82A1-A2DEBDEBB069"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"661639F3-8875-41DB-8BCF-9569681632E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"44347E50-1B1E-43FA-8B72-3C942C9BBE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.2:*:*:*:*:*:*:*","matchCriteriaId":"51BE24F8-B859-41CA-9EF3-2358A33F6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A1EF7-0462-4EDB-9D78-6BDA5D978F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.3.2:prototype.6:*:*:*:*:*:*","matchCriteriaId":"02208E19-32E6-45A5-8233-0B1D238289D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:2.3.2:prototype.9:*:*:*:*:*:*","matchCriteriaId":"FA004CF1-4765-4E6A-8426-30DC7604FC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:3:*:*:*:*:*:*:*","matchCriteriaId":"C0A33D6B-D458-49E2-A5BC-619103A01755"},{"vulnerable":true,"criteria":"cpe:2.3:a:flagship_industries:ventrilo:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EB3ED83-34D8-4A1E-A89D-F19FBA28D74A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ventrilobotomy-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/ventrilobotomy.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34696","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-13.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4156","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495448/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30675","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2365","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44428","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6237","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ventrilobotomy-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/ventrilobotomy.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495448/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3681","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the \"first enabled user (lowest id)\" password, typically for the administrator."},{"lang":"es","value":"componentes/com_user/modelos/reset.php en Joomla! 1.5.5 no restringe adecuadamente el acceso, lo que permite a atacantes remotos reiniciar la contraseña del \"primer usuario creado (con id más bajo)\", por lo general la del administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_user:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9A2CE809-3A1E-48CC-9F34-09F8E69D885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_user:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3DFAF0EB-9B68-4A05-B51A-67C5336BA65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_user:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3AE69710-55EB-4F3F-AB8E-16E208B342A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_user:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AAA8D7EB-6955-4CFC-97F8-40817245A1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_user:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"285480DA-1CA9-46AA-9C66-AB4FC2035CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_user:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"86011992-9B53-4669-929D-E42FE1EA3558"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31457","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4157","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30667","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020687","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44430","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6234","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3682","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL dpage.php en YPN PHP Realty permite a atacantes remotos ejecutar sentencias SQL arbitrarias a través del parámetro docID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ypninc:php_realty:*:*:*:*:*:*:*:*","matchCriteriaId":"031CE7C9-A712-46E1-B3A8-627D0E1517E2"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/phprealty-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31484","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30678","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44431","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/phprealty-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3683","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descriptors."},{"lang":"es","value":"Una vulnerabilidad sin especificar en el subsistema de FTP en Sun Java System Web Proxy Server 4.0.5 antes de SP6 permite a atacantes remotos provocar una denegación de servicio (fallo al aceptar conexiones) a través de vectores desconocidos, probablemente relacionados con el agotamiento de los descriptores de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4:sp1:*:*:*:*:*:*","matchCriteriaId":"AF24FBF9-6E01-40F6-889B-2EEF5D5ECDB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4:sp2:*:*:*:*:*:*","matchCriteriaId":"0BFF3C73-D592-4DD2-8F1B-9908A2D4AA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4:sp3:*:*:*:*:*:*","matchCriteriaId":"2B70E50B-6C01-4D57-A35D-3BB1F483372F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4:sp4:*:*:*:*:*:*","matchCriteriaId":"309BFAF3-5842-4F4F-B6F9-73DBE428F387"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4:sp5:*:*:*:*:*:*","matchCriteriaId":"ED82028A-8BD5-4E24-85EA-B3ED719A0DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A14869F3-76A8-4407-85C8-3D9764721EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"18658A61-81D2-4FDD-8DB2-8222CCCF85C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"C0B02862-58BD-4D29-A2D1-3A7925FA8DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"BE09D9A5-4A81-4771-9D1F-E74845537486"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp5:*:*:*:*:*:*","matchCriteriaId":"B4B978A8-4D6D-4E1F-94FF-3ED6ECB584C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp1:*:*:*:*:*:*","matchCriteriaId":"399B9003-1841-4F68-ABD9-EFAF8FDAFADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp2:*:*:*:*:*:*","matchCriteriaId":"CE035EA8-4F06-4C14-9E27-8F1533D1433B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp3:*:*:*:*:*:*","matchCriteriaId":"9D93A98A-39F3-44C7-9150-90C3892508C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp4:*:*:*:*:*:*","matchCriteriaId":"D2B7A60C-89B5-4851-BE12-4196A6A4D616"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp5:*:*:*:*:*:*","matchCriteriaId":"29307BC1-6FC6-4F82-9031-E7317B2AFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp1:*:*:*:*:*:*","matchCriteriaId":"69CE3DFF-8BFD-45BF-BA2A-DB176BF17C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp2:*:*:*:*:*:*","matchCriteriaId":"4DB543F2-7DC6-4EED-92D3-EBC12E70AC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp3:*:*:*:*:*:*","matchCriteriaId":"559B8C70-F680-4578-9E68-258D91B41E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp4:*:*:*:*:*:*","matchCriteriaId":"C7C836B7-564C-4EAD-A9EF-FB41C0533238"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp5:*:*:*:*:*:*","matchCriteriaId":"3C5C06DE-0800-4A43-BEC1-B38811660DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp1:*:*:*:*:*:*","matchCriteriaId":"CF2CB27C-5F5A-4057-9B47-61365F0658C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp2:*:*:*:*:*:*","matchCriteriaId":"766DA0FE-CAA8-4946-A4AE-4E464D0D0D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp3:*:*:*:*:*:*","matchCriteriaId":"67DBCAEE-BC63-4C92-8A91-839F475FBB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp4:*:*:*:*:*:*","matchCriteriaId":"13903015-75DD-4F12-9E9A-F12844CEA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp5:*:*:*:*:*:*","matchCriteriaId":"C48458F0-E844-4654-B450-77E2BF97B047"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp1:*:*:*:*:*:*","matchCriteriaId":"BDE95076-C3FF-41E0-A5A0-B70E779EAF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp2:*:*:*:*:*:*","matchCriteriaId":"4435E1C4-BAD3-4902-A5F0-3C024CE78766"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp3:*:*:*:*:*:*","matchCriteriaId":"982A6037-F163-4F48-9CF9-D07D37824565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp4:*:*:*:*:*:*","matchCriteriaId":"5FB0CAFB-AA1A-408D-9436-CFDAB6985FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp5:*:*:*:*:*:*","matchCriteriaId":"848A771F-CB1D-49BC-A1D7-48C31AA91590"}]}]}],"references":[{"url":"http://secunia.com/advisories/31476","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30671","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020696","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44413","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3686","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service (kernel OOPS) via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference."},{"lang":"es","value":"La función rt6_fill_node en el archivo net/ipv6/route.c en el kernel de Linux versiones 2.6.26-rc4, 2.6.26.2, y posiblemente otras versiones 2.6.26, permite a los usuarios locales causar una denegación de servicio (OOPS del kernel) por medio de peticiones IPv6 cuando no está en uso un dispositivo de entrada IPv6, lo que desencadena una desreferencia del puntero NULL."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2008-08-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e0115e500fe9dd2ca11e6f92db9123204f1327a","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/8/7/230","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/8/8/7","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31579","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44605","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e0115e500fe9dd2ca11e6f92db9123204f1327a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/8/7/230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/8/8/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3687","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the flask_security_label function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users (domU) to execute arbitrary code via the flask_op hypercall."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en la función flask_security_label en Xen 3.3, cuando se compila con el modulo XSM:FLASK, permite que usuarios del dominio (domU) sin privilegios  puedan ejecutar código arbitrario a través de la hiperllamada flask_op."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of Xen hypervisor as shipped with Red Hat Enterprise Linux 5, as it does not support XSM.","lastModified":"2008-08-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.3:*:*:*:*:*:*:*","matchCriteriaId":"5F9085E5-0CB2-4828-A03A-3C8AA749F0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen_flask_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2524E7D8-46BD-4D52-A968-6A7F69395D9D"}]}]}],"references":[{"url":"http://invisiblethingslab.com/bh08/part2.pdf","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31561","source":"cve@mitre.org"},{"url":"http://theinvisiblethings.blogspot.com/2008/08/our-xen-0wning-trilogy-highlights.html","source":"cve@mitre.org"},{"url":"http://www.nabble.com/-PATCH--XSM--FLASK--Argument-handling-bugs-in-XSM:FLASK-to18536032.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30834","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020731","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2426","source":"cve@mitre.org"},{"url":"http://xenbits.xensource.com/xen-3.3-testing.hg?rev/fa66b33f975a","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44608","source":"cve@mitre.org"},{"url":"http://invisiblethingslab.com/bh08/part2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theinvisiblethings.blogspot.com/2008/08/our-xen-0wning-trilogy-highlights.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/-PATCH--XSM--FLASK--Argument-handling-bugs-in-XSM:FLASK-to18536032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xensource.com/xen-3.3-testing.hg?rev/fa66b33f975a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3688","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T22:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com\n\n\n\"Afterwards it retries in a loop. This retry loop is infinite, due to a \nnot initialised variable.\nThis happens also only if you use a parent proxy and if the parent proxy \nis a numerical ip address, which don't need to be resolved.\"","cveTags":[],"descriptions":[{"lang":"en","value":"sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable."},{"lang":"es","value":"sockethandler.cpp en HTTP Antivirus Proxy (HAVP) 0.88 permite a atacantes remotos provocar una denegación de servicio (cuelgue) mediante la conexión a un servidor que no responde, lo que da lugar a un bucle infinito, debido a una variable no inicializada."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:havp:http_antivirus_proxy:0.88:*:*:*:*:*:*:*","matchCriteriaId":"B2480353-6257-4EEB-9006-7D3A374063D4"}]}]}],"references":[{"url":"http://secunia.com/advisories/31494","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31971","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30697","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020900","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.server-side.de/index.htm","source":"cve@mitre.org","tags":["Broken Link","Product"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44467","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/31494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.server-side.de/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Product"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]}]}},{"cve":{"id":"CVE-2008-3691","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, and CVE-2008-3696."},{"lang":"es","value":"Vulnerabilidad no especificada en un cierto control ActiveX de  VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, y VMware Server versiones anteriores a 1.0.7 build 108231 tiene un impacto y vectores de ataque remotos desconocidos, una vulnerabilidad diferente a  CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, y CVE-2008-3696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3692","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, and CVE-2008-3696."},{"lang":"es","value":"Vulnerabilidad no especificada en un cierto control ActiveX en VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, y VMware Server versiones anteriores a 1.0.7 build 108231 tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a  CVE-2008-3691, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, y CVE-2008-3696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3693","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3694, CVE-2008-3695, and CVE-2008-3696."},{"lang":"es","value":"Vulnerabilidad no espeficada en un cierto control ActiveX en VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, y VMware Server before 1.0.7 build 108231 tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a CVE-2008-3691, CVE-2008-3692, CVE-2008-3694, CVE-2008-3695, y CVE-2008-3696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3694","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3695, and CVE-2008-3696."},{"lang":"es","value":"Vulnerabilidad no especificada en un cierto control ActiveX en VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, and VMware Server versiones anteriores a 1.0.7 build 108231 tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3695, y CVE-2008-3696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3695","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-3696."},{"lang":"es","value":"Vulnerabilidad no especificada en un cierto control ActiveX en VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, y VMware Server versiones anteriores a 1.0.7 build 108231 tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, y CVE-2008-3696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3696","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-3695."},{"lang":"es","value":"Vulnerabilidad no especificada en un cierto control ActiveX en VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, and VMware Server versiones anteriores a1.0.7 build 108231 tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, y CVE-2008-3695."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3697","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request."},{"lang":"es","value":"Una extensión ISAPI sin especificar en VMware Server versiones anteriores a 1.0.7 build 108231 permite a atacantes remotos provocar una denegación de servicio (caída IIS) a través de peticiones mal formadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*","matchCriteriaId":"EB051A5C-5F66-4732-949A-48B0FDE4AFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*","matchCriteriaId":"87489138-7756-453C-A149-F2C4F95EFF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"36F800DA-B1AF-469E-AE41-D3D46813EFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"025EC5A6-E4DF-421F-911B-BD15FBF2A3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8230EFE6-8AB6-41DF-9A46-CAE4E5BB7F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B2C792F-48DA-46B5-B42E-9A045B393531"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6E6F9A4A-41B0-48D9-B60C-EBF4EF899953"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30935","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020789","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44796","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3698","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la función  OpenProcess de VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, and VMware Server versiones anteriores a 1.0.7 build 108231 en Windows permite a usuarios locales del SO anfitrión conseguir privilegios  en el SO anfitrión a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020790","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30936","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3699","sourceIdentifier":"cve@mitre.org","published":"2008-08-14T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file."},{"lang":"es","value":"La función MagnatuneBrowser::listDownloadComplete en magnatunebrowser/magnatunebrowser.cpp en versiones de Amarok anteriores a la 1.4.10 permiten a usuarios locales sobreescribir archivos arbitrarios a través de un ataque de enlace simbólico al archivo temporal album_info.xml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:1.4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C9BFD284-3620-4BB8-B367-34F2068135A8"}]}]}],"references":[{"url":"http://amarok.kde.org/en/releases/1/4/10","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32357","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-08.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.455790","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=846626","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:172","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30662","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-657-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2338","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44399","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00057.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00097.html","source":"cve@mitre.org"},{"url":"http://amarok.kde.org/en/releases/1/4/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.455790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=846626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-657-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00097.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3700","sourceIdentifier":"cve@mitre.org","published":"2008-08-15T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation."},{"lang":"es","value":"Multiples vulnerabilidades de Secuencias de comandos en sitios cruzados (XSS) en versiones de Kayako SupportSuite 3.20.02 y anteriores, permiten a atacantes remotos inyectar scripts web o HTML arbitrarios a través de (1) el parámetro sessionid  en una acción livesupport startclientchat en visitor/index.php, (2) el parámetro filter en una accion de ver noticia en index.php, o el campo nombre completo en (3) la creación de la cuenta, (4) la apertura de tickets, o (5) una operación de petición de chat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*","versionEndIncluding":"3.20.02","matchCriteriaId":"3FDF164A-684F-4440-95BC-E9493DE860E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*","matchCriteriaId":"D9C022D3-42ED-442E-9125-E0EAA8E74705"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*","matchCriteriaId":"7FC5A1D5-8831-4032-92D8-DD490CC28774"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*","matchCriteriaId":"878901B9-06F2-49ED-A035-1BD86BB5F11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*","matchCriteriaId":"0F297ABB-E65C-4BBF-B846-AFCC5A572540"}]}]}],"references":[{"url":"http://forums.kayako.com/f3/3-30-00-stable-released-18304/","source":"cve@mitre.org"},{"url":"http://osvdb.org/47613","source":"cve@mitre.org"},{"url":"http://osvdb.org/47614","source":"cve@mitre.org"},{"url":"http://osvdb.org/47615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31431","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00123-08092008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30642","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44383","source":"cve@mitre.org"},{"url":"http://forums.kayako.com/f3/3-30-00-stable-released-18304/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00123-08092008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44383","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3701","sourceIdentifier":"cve@mitre.org","published":"2008-08-15T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en staff/index.php en versiones de Kayako SupportSuite 3.20.02 y anteriores permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro customfieldlinkid en una acción delcflink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*","versionEndIncluding":"3.20.02","matchCriteriaId":"3FDF164A-684F-4440-95BC-E9493DE860E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*","matchCriteriaId":"D9C022D3-42ED-442E-9125-E0EAA8E74705"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*","matchCriteriaId":"7FC5A1D5-8831-4032-92D8-DD490CC28774"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*","matchCriteriaId":"878901B9-06F2-49ED-A035-1BD86BB5F11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*","matchCriteriaId":"0F297ABB-E65C-4BBF-B846-AFCC5A572540"}]}]}],"references":[{"url":"http://forums.kayako.com/f3/3-30-00-stable-released-18304/","source":"cve@mitre.org"},{"url":"http://osvdb.org/47616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31431","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00123-08092008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30642","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44384","source":"cve@mitre.org"},{"url":"http://forums.kayako.com/f3/3-30-00-stable-released-18304/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00123-08092008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3702","sourceIdentifier":"cve@mitre.org","published":"2008-08-15T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long argument to the (1) ReadGIF or (2) ReadGIF2 method."},{"lang":"es","value":"Múltiples Desbordamientos de búfer basados en pila en el control ActiveX de animación GIF en JComSoft AniGIF.ocx 1.12 y 2.47, utilizado en productos como SpeedBit Download Accelerator Plus (DAP) 8.6, permiten a atacantes remotos ejecutar código arbitrario a través de un argumento mas largo de lo normal en los métodos (1) ReadGIF o (2) ReadGIF2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jcomsoft:anigif:1.12:*:*:*:*:*:*:*","matchCriteriaId":"9C7CBCE0-29C7-413B-BAC8-A8BBB74F7F2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jcomsoft:anigif:2.47:*:*:*:*:*:*:*","matchCriteriaId":"28C26193-9366-4E8C-B812-DF776DA29867"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speedbit:download_accelerator_plus:8.6:*:*:*:*:*:*:*","matchCriteriaId":"6BD0BF9B-D984-4123-9D8B-7503E7954B74"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4159","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44412","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6216","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3703","sourceIdentifier":"cve@mitre.org","published":"2008-08-18T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create \"snapshots schedules\" registry values specifying future command execution.  NOTE: this issue exists because of an incomplete fix for CVE-2007-2279."},{"lang":"es","value":"La consola de gestión en Volume Manager Scheduler Service (también conocido como VxSchedService.exe) de Symantec Veritas Storage Foundation para Windows (SFW) 5.0, 5.0 RP1a y 5.1 acepta autentificación NULL NTLMSSP, lo que permite a atacantes remotos ejecutar código de su elección mediante peticiones al socket del servicio que crea valores del registro de \"snapshots schedules (horarios de ficheros de captura)\" especificando la ejecución de comandos futuros. NOTA: este problema existe debido a una solución incompleta de CVE-2007-2279."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"10C7B114-73FB-4294-8E2E-94B5CB63750D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.0:rp1a:windows:*:*:*:*:*","matchCriteriaId":"3C14D03F-1728-4D55-A74C-BD42C6F3007B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:5.1:*:windows:*:*:*:*:*","matchCriteriaId":"30E4586D-FB79-49F1-A9DE-A6AB53C1471F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31486","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4161","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020699","source":"cve@mitre.org"},{"url":"http://seer.entsupport.symantec.com/docs/306386.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/495481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30596","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.08.14a.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2395","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-053/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44466","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.entsupport.symantec.com/docs/306386.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/495481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.08.14a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-053/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3704","sourceIdentifier":"cve@mitre.org","published":"2008-08-18T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional advisory information from Secunia: http://secunia.com/advisories/31498/","evaluatorSolution":"\"Visual Studio 6 was last updated June 2000, a Microsoft spokeswoman told SCMagazineUS.com. The version is no longer supported.  Visual Studio 2008 is the latest release and microsoft encourages users to update to the newest version.\"\r\n\r\nSource: http://www.scmagazineus.com/Microsoft-looks-into-Visual-Studio-bug/article/115459/","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not \"validating property values with boundary checks,\" as exploited in the wild in August 2008, aka \"Masked Edit Control Memory Corruption Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el control ActiveX de MaskedEdit en msmask32.ocx versión 6.0.81.69, y posiblemente en otras versiones anteriores a 6.0.84.18, en Visual Studio versión 6.0, Visual Basic versión 6.0, Visual Studio .NET 2002 SP1 y 2003 SP1, y Visual FoxPro versiones 8.0 SP1 y 9.0 SP1 y SP2, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un parámetro Mask largo, relacionado con la no \"validating property values with boundary checks\", como se explotó “in the wild” en Agosto de 2008, también se conoce como \"Masked Edit Control Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*","matchCriteriaId":"42D281B3-B2E0-4E36-B1BD-83865AE4B3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"478347F8-6256-4DE6-AD6A-91631A9E6DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D5CDA0E2-DFBD-4EE0-80DC-76AA55ADFEFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30674","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020710","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44444","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6244","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3705","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2 allows remote echoServers to execute arbitrary code via a large (1) group or (2) user list, aka a \"very crowded echoServer\" attack.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en Pila en la función CLogger::WriteFormated de echoware/Logger.cpp en EchoVNC Linux versiones anteriores a la 1.1.2, permite a echoServers remotos ejecutar código arbitrariamente a través de un (1) grupo o (2) lista de usuarios largos, también conocida como ataque \"echoServer masivo\". NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:echovnc:echovnc:*:*:linux:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"4BBE402A-9C2C-4594-A5AE-D4FBDE5C912C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=620019&group_id=133100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30722","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=620019&group_id=133100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3706","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL de bannerclick.php en ZEEJOBSITE 2.0, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro adid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeejobsite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9559D2DC-A6DB-47C8-808F-9D7315486F0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31515","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4162","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30711","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44500","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6249","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3707","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the script_path parameter to (1) flat_read.php, (2) post.php, (3) process_post.php, (4) process_search.php, (5) forum.php, (6) process_subscribe.php, (7) read.php, (8) search.php, (9) subscribe.php in path/; and (10) add_ban.php, (11) add_ban_form.php, (12) add_board.php, (13) add_vip.php, (14) add_vip_form.php, (15) copy_ban.php, (16) copy_vip.php, (17) delete_ban.php, (18) delete_board.php, (19) delete_messages.php, (20) delete_vip.php, (21) edit_ban.php, (22) edit_board.php, (23) edit_vip.php, (24) index.php, (25) lock_messages.php, (26) login.php, (27) modify_ban_list.php, (28) modify_vip_list.php, (29) move_messages.php, (30) process_add_board.php, (31) process_ban.php, (32) process_delete_ban.php, (33) process_delete_board.php, (34) process_delete_messages.php, (35) process_delete_vip.php, (36) process_edit_board.php, (37) process_lock_messages.php, (38) process_login.php, (39) process_move_messages.php, (40) process_sticky_messages.php, (41) process_vip.php, and (42) sticky_messages.php in path/adminopts.  NOTE: the include/common.php vector is covered by CVE-2006-2871.  NOTE: some of these vectors might not be vulnerabilities under proper installation."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos remotos PHP en CyBoards PHP Lite versión 1.21, permite a atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro script_path en los archivos (1) flat_read.php, (2) post.php, (3) process_post.php, (4) process_search.php, (5) forum.php, (6) process_subscribe.php, (7) read.php, (8) search.php, (9) subscribe.php en path/; y los archivos (10) add_ban.php, (11) add_ban_form.php, (12) add_board.php, (13) add_vip.php, (14) add_vip_form.php, (15) copy_ban.php, (16) copy_vip.php, (17) delete_ban.php, (18) delete_board.php, (19) delete_messages.php, (20) delete_vip.php, (21) edit_ban.php, (22) edit_board.php, (23) edit_vip.php, (24) index.php, (25) lock_messages.php, (26) login.php, (27) modify_ban_list.php, (28) modify_vip_list.php, (29) move_messages.php, (30) process_add_board.php, (31) process_ban.php, (32) process_delete_ban.php, (33) process_delete_board.php, (34) process_delete_messages.php, (35) process_delete_vip.php, (36) process_edit_board.php, (37) process_lock_messages.php, (38) process_login.php, (39) process_move_messages.php, (40) process_sticky_messages.php, (41) process_vip.php, y (42) sticky_messages.php en path/adminopts. NOTA: el vector include/common.php está cubierto por CVE-2006-2871. NOTA: algunos de estos vectores pueden no ser vulnerabilidades bajo una instalación apropiada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotscripts:cyboards_php_lite:1.21:*:*:*:*:*:*:*","matchCriteriaId":"D7F729C1-C260-4FFA-9D2C-F62C40244910"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-August/002052.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30688","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44474","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-August/002052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3708","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"In order to exploit this vulnerability to execute arbitrary code, the attacker would first be required to upload a malicious file or inject arbitrary commands into an existing file.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2) getting_started/macros/macros_detail.dot."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en dotCMS 1.6.0.9 permiten a atacantes remotos leer ficheros arbitrariamente mediante un .. (punto punto) en los parámetros id de (1) news/index.dot y (2) getting_started/macros/macros_detail.dot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotcms:dotcms:1.6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E0612786-6564-49E0-B825-FB3EE4FD85F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30703","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44491","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3709","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrary web script or HTML via the (1) lOptionsOptions, (2) lNavAdminOptions, or (3) lNavReturn parameter to options.php; or the (4) lNavReturn parameter to subscribe.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de comandos en sitios cruzados en CyBoards PHP Lite 1.21, permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente a través de (1) lOptionsOptions, (2) lNavAdminOptions, o (3) lNavReturn parameter de options.php; o el parámetro (4) lNavReturn de subscribe.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotscripts:cyboards_php_lite:1.21:*:*:*:*:*:*:*","matchCriteriaId":"D7F729C1-C260-4FFA-9D2C-F62C40244910"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-August/002052.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30688","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44476","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-August/002052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3710","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"In order to exploit this vulnerability to execute arbitrary code, the attacker would first be required to upload a malicious file or inject arbitrary commands into an existing file and register_globals must be enabled.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and (c) process_edit_board.php in adminopts/.  NOTE: some of these vectors might not be vulnerabilities under proper installation."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio CyBoards PHP Lite 1.21, permiten a atacantes remotos incluir y ejecutar archivos locales arbitrariamente mediante secuencias de salto de directorio en el parámetro (1) script_path de (a) options.php y el parámetro  (2) lang_code en (b) copy_vip.php y (c) process_edit_board.php de adminopts/.  NOTA: alguno de estos vectores podrían no considerarse vulnerabilidades con una instalación adecuada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotscripts:cyboards_php_lite:1.21:*:*:*:*:*:*:*","matchCriteriaId":"D7F729C1-C260-4FFA-9D2C-F62C40244910"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.attrition.org/pipermail/vim/2008-August/002052.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30688","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44475","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.attrition.org/pipermail/vim/2008-August/002052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3711","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de PHPArcadeScript (PHP Arcade Script) 4.0, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro cat en una acción de navegación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phparcadescript:phparcadescript:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5C5E473E-6D25-47DF-AF50-CD4FA4EAB89D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4167","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30714","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2413","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44523","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6255","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3712","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php and the (2) mosConfig_sitename parameter to administrator/popups/index3pop.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de comandos en sitios cruzados (XSS) de Mambo 4.6.2 y 4.6.5, cuando register_globals está activado, permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente a través de la (1) cadena de consulta en mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php y el parámetro (2) mosConfig_sitename em administrator/popups/index3pop.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"11907D85-965F-4855-9647-C135E7610C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"FEFE4B7B-8F15-481E-80F1-62021C25CAEE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495507/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30708","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44502","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495507/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3713","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the pro_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product.php de PHPBasket permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro pro_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbasket:phpbasket:*:*:*:*:*:*:*:*","matchCriteriaId":"1668B792-6944-4ED8-8822-BA8E586F74F8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30726","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2414","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44524","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6258","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3714","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the query_string, a different vulnerability than CVE-2006-3681 and CVE-2006-1945."},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados(XSS) en AWStats 6.8, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrariamente a través de query_string, una vulnerabilidad diferente a CVE-2006-3681 y a CVE-2006-1945."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.8:*:*:*:*:*:*:*","matchCriteriaId":"FBA8DE50-16FC-4CC5-A0CE-9C7C4858285A"}]}]}],"references":[{"url":"http://awstats.sourceforge.net/docs/awstats_changelog.txt","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33002","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2001151&group_id=13764&atid=113764","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1679","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:203","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30730","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020704","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-686-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2399","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44504","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00107.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00355.html","source":"cve@mitre.org"},{"url":"http://awstats.sourceforge.net/docs/awstats_changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2001151&group_id=13764&atid=113764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00355.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3715","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the PreviousColorsString parameter."},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en sitios cruzados(XSS) en inc-core-admin-editor-previouscolorsjs.php de FlexCMS 2.5 y anteriores, cuando register_globals está activado, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro PreviousColorsString."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flexcms:flexcms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BEFB8C5-5937-4755-A3B0-976289A49689"},{"vulnerable":true,"criteria":"cpe:2.3:a:flexcms:flexcms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BD6DF79F-643E-4B88-A559-383F7FD1898B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4166","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495508/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30709","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495508/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3716","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Download Harmoni 1.6.0 at Sourceforge:\r\n\r\nhttp://sourceforge.net/project/showfiles.php?group_id=82873&package_id=85063","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative modifications via a (1) save or (2) delete action to an unspecified component."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en Harmoni vesiones anteriores a la 1.6.0, permite a atacantes remotos realizar cambios administrativos a través de las acciones (1) save o (2) delete de un componente sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.7","matchCriteriaId":"0952A573-F8B2-4AA0-8052-36D3D6656D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50A85D83-38E1-4606-963F-79E94291B72E"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B89EB269-30E7-48DB-B3F2-6F5B309F8E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4F2B9E2F-ED10-4F0D-9D66-368D37FD7864"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CDF2F812-572E-4FEA-9E2D-5D641113B60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CA6C479-412B-4BEB-969A-36F094B59525"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"23FE605F-6401-4956-81D6-D4B9361EE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0F48C322-85A8-435E-854A-6FDCB2F1ADF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8608538B-C881-434A-AEF6-C9BEC0441B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3B8CF46A-7343-41C7-908F-25BC7875F6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C1697A70-6C83-4788-AC65-95384038798C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03D89B15-5037-4A48-95C8-39A756BDDDA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE302560-BA6B-4574-85B1-ED4255222FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"65D62B2B-CB5B-464F-B123-3F9B0935E27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3F4E8618-C4D7-4BDA-B4C8-E599DE1E0CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"48FEE606-D708-45B0-B499-411AB9163337"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"37D5B4C6-2EE3-4489-ABC6-F3BED624D031"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F2850F39-60EC-468B-BBD7-8BB14CFFC125"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F6D41CEA-E157-4174-8D5F-C391BB5F6E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B4F71555-7E13-42EE-9612-7AEFD7C07133"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"8B25BE90-CB95-4D75-A459-64ED1D515B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"17DA2753-15B6-478D-A0F0-B35B66DBF586"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"62F33785-39A8-4F66-8B9C-62BF919777F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.3:*:*:*:*:*:*:*","matchCriteriaId":"7B2573AB-AD9C-487C-B80D-6D9F5EFBA84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"DA309E2C-A97D-4688-851D-1D79CB074596"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"092503D1-C158-4383-80DC-928E9F37935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"0B2FBA84-CD7F-47CC-A8AB-0FBD6B462ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.3:*:*:*:*:*:*:*","matchCriteriaId":"FE5E4E20-6D5A-4483-8A59-D2E303A09E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.4:*:*:*:*:*:*:*","matchCriteriaId":"96DB8314-1039-4181-866F-FF667794B910"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.5:*:*:*:*:*:*:*","matchCriteriaId":"4A6502BE-E995-4E15-92FD-01B1B77D3757"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.6:*:*:*:*:*:*:*","matchCriteriaId":"02E342D6-6975-4A6F-9781-F7D6985D0C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.7:*:*:*:*:*:*:*","matchCriteriaId":"CE70746B-6514-46E0-9E56-B2EF21AF712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A8BBDD8F-AEAC-479E-AB72-400672A6CDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6630796-C059-439A-8172-913CA8F226F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7574382C-FA34-4EE6-B860-EA351B0EE2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FCA3DB7A-B19C-4E7E-9F48-39275DC81BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C198903C-EC45-4B32-B4B2-F8547AF2031D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"86BFEFDF-210C-4605-9B13-91EB99DD702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E115F830-F266-4AC2-95BB-AA4CAB05C590"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"668D3790-0CC7-43BD-B34F-333EC22D322D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BA7E5F79-AECD-4714-BFBC-9AE496CD198C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DF0D41E7-2DAF-482C-92F3-9FF2703B9C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"CF41B07C-1D0D-4DBC-967E-E5D96A2E761A"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"816669D3-16E6-41E4-BC4C-7CEEA9584D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F574AFD5-99FA-40D8-92EE-904D24BCBA6C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619864","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2040513&group_id=82171&atid=1098812","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30706","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44483","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2040513&group_id=82171&atid=1098812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3717","sourceIdentifier":"cve@mitre.org","published":"2008-08-19T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Download Harmoni 1.6.0 at Sourceforge:\r\n\r\nhttp://sourceforge.net/project/showfiles.php?group_id=82873&package_id=85063","cveTags":[],"descriptions":[{"lang":"en","value":"Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information."},{"lang":"es","value":"En Harmoni versiones anteriores a la 1.6.0, no son necesarios privilegios de administrados para listar (1) nobres de usuario o (2) asset ids, lo cual permite a atacantes remotos obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.7","matchCriteriaId":"0952A573-F8B2-4AA0-8052-36D3D6656D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50A85D83-38E1-4606-963F-79E94291B72E"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B89EB269-30E7-48DB-B3F2-6F5B309F8E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4F2B9E2F-ED10-4F0D-9D66-368D37FD7864"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CDF2F812-572E-4FEA-9E2D-5D641113B60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CA6C479-412B-4BEB-969A-36F094B59525"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"23FE605F-6401-4956-81D6-D4B9361EE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0F48C322-85A8-435E-854A-6FDCB2F1ADF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8608538B-C881-434A-AEF6-C9BEC0441B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3B8CF46A-7343-41C7-908F-25BC7875F6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C1697A70-6C83-4788-AC65-95384038798C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03D89B15-5037-4A48-95C8-39A756BDDDA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE302560-BA6B-4574-85B1-ED4255222FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"65D62B2B-CB5B-464F-B123-3F9B0935E27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3F4E8618-C4D7-4BDA-B4C8-E599DE1E0CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"48FEE606-D708-45B0-B499-411AB9163337"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"37D5B4C6-2EE3-4489-ABC6-F3BED624D031"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F2850F39-60EC-468B-BBD7-8BB14CFFC125"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F6D41CEA-E157-4174-8D5F-C391BB5F6E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B4F71555-7E13-42EE-9612-7AEFD7C07133"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"8B25BE90-CB95-4D75-A459-64ED1D515B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"17DA2753-15B6-478D-A0F0-B35B66DBF586"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"62F33785-39A8-4F66-8B9C-62BF919777F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.12.3:*:*:*:*:*:*:*","matchCriteriaId":"7B2573AB-AD9C-487C-B80D-6D9F5EFBA84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"DA309E2C-A97D-4688-851D-1D79CB074596"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"092503D1-C158-4383-80DC-928E9F37935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"0B2FBA84-CD7F-47CC-A8AB-0FBD6B462ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.3:*:*:*:*:*:*:*","matchCriteriaId":"FE5E4E20-6D5A-4483-8A59-D2E303A09E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.4:*:*:*:*:*:*:*","matchCriteriaId":"96DB8314-1039-4181-866F-FF667794B910"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.5:*:*:*:*:*:*:*","matchCriteriaId":"4A6502BE-E995-4E15-92FD-01B1B77D3757"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.6:*:*:*:*:*:*:*","matchCriteriaId":"02E342D6-6975-4A6F-9781-F7D6985D0C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:0.13.7:*:*:*:*:*:*:*","matchCriteriaId":"CE70746B-6514-46E0-9E56-B2EF21AF712F"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A8BBDD8F-AEAC-479E-AB72-400672A6CDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6630796-C059-439A-8172-913CA8F226F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7574382C-FA34-4EE6-B860-EA351B0EE2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FCA3DB7A-B19C-4E7E-9F48-39275DC81BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C198903C-EC45-4B32-B4B2-F8547AF2031D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"86BFEFDF-210C-4605-9B13-91EB99DD702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E115F830-F266-4AC2-95BB-AA4CAB05C590"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"668D3790-0CC7-43BD-B34F-333EC22D322D"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BA7E5F79-AECD-4714-BFBC-9AE496CD198C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DF0D41E7-2DAF-482C-92F3-9FF2703B9C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"CF41B07C-1D0D-4DBC-967E-E5D96A2E761A"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"816669D3-16E6-41E4-BC4C-7CEEA9584D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:harmoni:harmoni:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F574AFD5-99FA-40D8-92EE-904D24BCBA6C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619864","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2040324&group_id=82171&atid=1098812","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30706","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2040324&group_id=82171&atid=1098812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3718","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and the (2) user parameter to profile.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en cyberBB 0.6 permiten a usuarios autenticados en remoto ejecutar comandos SQL de su elección mediante (1) el parámetro id de show_topic.php y (2) el parámetro user de profile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyberbb:cyberbb:0.6:*:*:*:*:*:*:*","matchCriteriaId":"FFF742B0-3596-47DE-BB7A-02F667963EA5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4168","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6260","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3719","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php de SFS Affiliate Directory permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción deadlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:affiliate_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"B275F46E-BC5F-40C9-8EDD-95DD06E0D385"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/affildir-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31537","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30741","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44536","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6270","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/affildir-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3720","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the id vector is already covered by CVE-2007-5679."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de DeeEmm CMS (DMCMS) 0.7.4, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro page. NOTA: el vector id ya fue descrito en CVE-2007-5679."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deeemm:dmcms:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"121F238C-CE39-4508-AF8E-B13433A7DBA8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4169","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2411","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44506","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6250","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3721","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en user_language.php de DeeEmm CMS (DMCMS) 0.7.4, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro laguage_dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deeemm:dmcms:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"121F238C-CE39-4508-AF8E-B13433A7DBA8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4169","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2411","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44505","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6250","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3722","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum/neu.asp de fipsCMS 2.1, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro kat. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fipsasp:fipscms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"642D23DC-3ED1-4C02-85F0-FD0C2DA235B7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30712","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30712/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44522","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30712/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3723","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Attacker must have administrative access\r\n\r\nIn order to exploit this vulnerability to execute arbitrary code, the attacker would first be required to upload a malicious file or inject arbitrary commands into an existing file.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to read arbitrary files via (1) a .. (dot dot), (2) a URL, or possibly (3) a full pathname in the id parameter in an admin.templates.edittemplate action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de PHPizabi 0.848b C1 HFP3, permite a administradores autenticados en remoto, leer ficheros de su elección mediante (1) un .. (punto punto), (2) una URL, o puede que (3) un nombre completo de ruta en el parámetro id en una acción admin.templates.edittemplate. NOTA: algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpizabi:phpizabi:0.848b:c1_hfp3:*:*:*:*:*:*","matchCriteriaId":"3775AC70-4424-4191-A61B-069F3A865272"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44509","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3724","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Papoo anterior a 3.7.2, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro suchanzahl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.1","matchCriteriaId":"4EE10158-6A0F-42AA-BE84-7884F981B8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:2.0:*:*:*:*:*:*:*","matchCriteriaId":"88C287E1-E2DA-4666-9A34-C67739878836"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5D2F7F2A-D3A1-4A58-BFC1-3B89E1337C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4AF31C99-E038-472B-B6C2-FC421264DA98"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"56C91682-C8D9-47B1-A203-36B3334C2F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A8B96EEB-2AED-4EB4-B44B-FD93C4287BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.02:*:*:*:*:*:*:*","matchCriteriaId":"98BA77D1-2908-448F-A5DC-AAAB97EDD658"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.5:*:*:*:*:*:*:*","matchCriteriaId":"6D6167B8-78AC-454D-B00E-C9E3894676F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F6D559C7-89BB-4FE5-A276-D7697BA85374"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3A6F4CE3-B9C8-4B0A-A249-6A839E8906FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0507DE64-6C1C-4D29-B55E-541D46F8A7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.7:*:*:*:*:*:*:*","matchCriteriaId":"58FA7663-66D6-4C02-9DE0-D31CCB7768FE"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/80/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/47554","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.papoo.de/cms-news-und-infos/security/patch1-10808.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30752","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44516","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/80/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/47554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.papoo.de/cms-news-und-infos/security/patch1-10808.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3725","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en trr.php de YourFreeWorld Ad Board Script, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:ad_board_script:*:*:*:*:*:*:*:*","matchCriteriaId":"7AFE67F6-8DFE-46FD-BAF2-F73FE3378BD5"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/adboard-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31491","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30742","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44532","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6271","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/adboard-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3726","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to inject arbitrary web script or HTML via the URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Web Based Administration de MicroWorld Technologies MailScan 5.6.a espatch 1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:mailscan:5.6.a:*:*:*:*:*:*:*","matchCriteriaId":"A5DB2CB4-026C-4A56-86EB-F3C28F7A6CC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4172","source":"cve@mitre.org"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44517","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3727","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1, permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:mailscan:5.6.a:*:*:*:*:*:*:*","matchCriteriaId":"A5DB2CB4-026C-4A56-86EB-F3C28F7A6CC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4172","source":"cve@mitre.org"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44514","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6407","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3728","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to determine the installation path, IP addresses, and error messages via direct requests to files under LOG/."},{"lang":"es","value":"Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1, almacena información sensible en la raíz web con un control de acceso deficiente; esto permite a atacantes remotos determinar la ruta de instalación, dirección IP, y mensajes de error mediante una solicitud directa a los ficheros que se encuentren en LOG/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:mailscan:5.6.a:*:*:*:*:*:*:*","matchCriteriaId":"A5DB2CB4-026C-4A56-86EB-F3C28F7A6CC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4172","source":"cve@mitre.org"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44518","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3729","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authentication and obtain administrative access via a direct request with (1) an IsAdmin=true cookie value or (2) no cookie."},{"lang":"es","value":"Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1, permite a atacantes remotos evitar la autenticación y obtener acceso de administrador mediante una solicitud directa con (1) una cookie con valor IsAdmin=true o (2) sin cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microworld_technologies:mailscan:5.6.a:*:*:*:*:*:*:*","matchCriteriaId":"A5DB2CB4-026C-4A56-86EB-F3C28F7A6CC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4172","source":"cve@mitre.org"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44515","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121881329424635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oliverkarow.de/research/mailscan.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3730","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Nordicwind Document Management System (NOAH) anterior a 3.2.2, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"E2F1CBC7-E6C8-4362-910C-F0241ECB0B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"85B722F8-86E7-4167-A0F6-4C47D031D3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.0b:*:*:*:*:*:*:*","matchCriteriaId":"069E8791-CB9B-4561-9A44-E6436FCC7455"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C969E818-F310-48A4-BCE5-D25D80DF6EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"83E0EE8C-3A85-46F6-B514-0D17B18E87D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DB68C485-CD65-4A7D-8870-786F344DA198"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3BFBB5C0-6C00-4134-BD70-C4096F29FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5DAFCB7F-B5DE-45B1-9A68-9DC76B799923"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A36D93C3-3A99-4C65-B8CD-9D6289118988"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"179BA060-71CA-4093-ABEF-9F99DA44D2A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"94193B07-3D89-47EB-92D0-60570DC13BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DE44810A-703F-4432-8261-A95AA6CBAA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2767D0D4-11B8-4847-B6F6-038881455714"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"77AB71B7-8295-4580-846F-A59159EAAC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F4F5D2C4-E4AD-4F04-99B0-4ABC8F992ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"205EAB96-D71E-47FA-A194-3D97B99CA0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4A9DFEF4-A828-4B22-A903-08111A4C99D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"EC455378-BDCC-4602-86B6-D6687AE66C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"2539F691-6B92-40A6-B26C-AA059CF825C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.0b:*:*:*:*:*:*:*","matchCriteriaId":"DB57C4CD-359B-49ED-9E89-27088694F030"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CFF058FC-90D8-4E08-BAEA-E7635CBD3582"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E95E72B6-E43E-4707-8F04-29476A11B520"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7C9417-BFF5-41DE-B328-A1F2E8375B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DBF67F28-92D9-4689-B25E-343BA927397D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"233330E5-2DED-4CB1-9653-E5CFA5C7E364"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"920417C4-BA54-4182-ACFF-3C1EE743A5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8251B1F0-47B4-446E-9A13-C1EAF2CD74EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"22DEA5BE-1102-4729-9E1F-6E5B39CC1BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A39C66C3-3267-4875-9040-CA7AC04F7874"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AB6B9D61-C8AA-4F36-9769-374CED49C83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"43A85963-8CBC-4AC9-8F8A-C5D9F7FF3816"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4B95AA-F5FC-4B93-B517-144D376C0822"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"20CB2E5F-B247-4531-BCA4-E9A4B52DABA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"61C42D81-7E18-47BF-9E03-AB402AF20F6F"}]}]}],"references":[{"url":"http://osvdb.org/47558","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nordicwind.ca/noah/bugs/inputval.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44535","source":"cve@mitre.org"},{"url":"http://osvdb.org/47558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nordicwind.ca/noah/bugs/inputval.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3731","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to 7.2.0.1","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a denial of service (daemon crash) via an SSH session with SFTP commands for directory creation and logging."},{"lang":"es","value":"Una vulnerabilidad no especificada en Serv-U File Server versiones 7.0.0.0.1, y otras versiones anteriores a 7.2.0.1, permite a usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio) por medio de una sesión SSH con comandos SFTP para la creación y registro de directorios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30739","source":"cve@mitre.org"},{"url":"http://www.serv-u.com/releasenotes/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3732","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de entero en la función Open en modules/demux/tta.c de VLC Media Player 0.8.6i, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o puede que ejecutar código de su elección mediante un fichero TTA manipulado; esto conlleva a un desbordamiento de búfer basado en pila. NOTA: algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"FD824C10-CB0B-4988-99E9-1B8A2B52C5A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-06.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4170","source":"cve@mitre.org"},{"url":"http://www.orange-bat.com/adv/2008/adv.08.16.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30718","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2394","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44510","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14570","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6252","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.orange-bat.com/adv/2008/adv.08.16.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3733","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .eop (aka playlist) file with a ProjectElement element that contains a long Name element."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en EO Video (eo-video) 1.36, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante un fichero .eop (también conocido como playlist) con un elemento ProjectElement que contiene un elemento Name largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eo-video:eo-video:1.36:*:*:*:*:*:*:*","matchCriteriaId":"8CDC0950-6A4A-4DF1-8C54-FFC22DF6A855"}]}]}],"references":[{"url":"http://secunia.com/advisories/31511","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4171","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30717","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44508","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3734","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response)."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en Ipswitch WS_FTP Home 2007.0.0.2 y WS_FTP Professional 2007.1.0.0, permite a servidores FTP remotos provocar una denegación de servicio (caída de la aplicación) o puede que ejecutar código de su elección mediante especificadores de formato de cadena en un saludo de conexión (respuesta)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_home:2007.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CB50DBB2-5DB2-4791-8361-361DF3FF1322"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:2007.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BD88038-78F8-4E9F-8580-EE48B08600F5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4173","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30720","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020713","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020714","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44512","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3735","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a blogs.search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php de PHPizabi anterior a 848 Core HotFix Pack 3, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante en parámetro query en una acción blogs.search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpizabi:phpizabi:0.848b:c1_hfp1:*:*:*:*:*:*","matchCriteriaId":"D5611CEF-920E-4FFF-95CF-2612FF713D10"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44691","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3736","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations."},{"lang":"es","value":"Múltiples vulnerabilidades de cross-site request forgery (CSRF) en (1) La!Cooda WIZ de System Consultants versión 1.4.0 y anteriores y (2) LacoodaST de SpaceTag versión 2.1.3 y anteriores, permite a atacantes remotos secuestrar la autenticación de usuarios arbitrarios para peticiones que (a) cambien contraseñas o (b) cambien configuraciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spacetag:lacoodast:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"0FC83794-AF5E-4132-9D39-DDFCC4676AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:system_consultants:la_cooda_wiz:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"D37B18AD-ED65-4D9B-92D1-80C0D74E98CB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN83428818/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31574","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiz.syscon.co.jp/Details.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30791","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44592","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN83428818/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiz.syscon.co.jp/Details.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3737","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to execute arbitrary PHP scripts, and delete files, read files, and possibly have unknown other impact."},{"lang":"es","value":"Vulnerabilidad no especificada en 1) System Consultants La!Cooda WIZ 1.4.0 y anteriores y (2) SpaceTag LacoodaST 2.1.3 y anteriores permite a atacantes remotos ejecutar scripts PHP de su elección, eliminar archivos, leer archivos y posiblemente otros impactos desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spacetag:lacoodast:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"0FC83794-AF5E-4132-9D39-DDFCC4676AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:system_consultants:la_cooda_wiz:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"D37B18AD-ED65-4D9B-92D1-80C0D74E98CB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN53886050/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31574","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiz.syscon.co.jp/Details.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30791","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44594","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN53886050/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiz.syscon.co.jp/Details.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3738","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en SpaceTag LacoodaST 2.1.3 y anteriores, permite a atacantes remotos secuestrar sesiones web a través de vectores no especificados."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spacetag:lacoodast:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"0FC83794-AF5E-4132-9D39-DDFCC4676AAC"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN31723154/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30791","source":"cve@mitre.org"},{"url":"http://www.spacetag.jp/modules/products/index.php?id=54","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN31723154/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spacetag.jp/modules/products/index.php?id=54","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3739","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en (1) System Consultants La!Cooda WIZ 1.4.0 y anteriores y (2) SpaceTag LacoodaST 2.1.3 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección meediante vectores no especificados, posiblemente subiendo archivos que contienen secuencias XSS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spacetag:lacoodast:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"0FC83794-AF5E-4132-9D39-DDFCC4676AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:system_consultants:la_cooda_wiz:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"D37B18AD-ED65-4D9B-92D1-80C0D74E98CB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN27417220/index.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN52557009/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31574","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiz.syscon.co.jp/Details.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30791","source":"cve@mitre.org"},{"url":"http://www.spacetag.jp/modules/products/index.php?id=54","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44593","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN27417220/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN52557009/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiz.syscon.co.jp/Details.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spacetag.jp/modules/products/index.php?id=54","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3740","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el filtro de salida de Drupal 5.x anterior a 5.10 y 6.x anterior a  6.4, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"}]}]}],"references":[{"url":"http://drupal.org/node/295053","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44445","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/295053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3741","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading files containing arbitrary web script or HTML."},{"lang":"es","value":"El filesystem privado de Drupal 5.x versiones anteriores a la 5.10 y 6.x versiones anteriores a la 6.4, confía en el tipo MIME enviado por el navegador, lo cual permite a los usuarios remotos autenticados dirigir ataques de secuencias de comandos en sitios cruzados (XSS) subiendo ficheros que contienen arbitrariamente secuencias de comandos web o HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"}]}]}],"references":[{"url":"http://drupal.org/node/295053","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44446","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/295053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3742","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en el módulo BlogAPI de Drupal 5.x anterior a 5.10 y 6.x anterior a 6.4, permite a a usuarios autenticados en remotos ejecutar código de su elección mediante la subida de un fichero con la extensión de un ejecutable, lo cual no es validado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"}]}]}],"references":[{"url":"http://drupal.org/node/295053","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44447","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/295053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3743","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions via unknown vectors, related to improper token validation for (1) cached forms and (2) forms with AHAH elements."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en forms de Drupal 6.x antes de 6.4 permiten a atacantes remotos realizar acciones no especificadas mediante vectores desconocidos, relacionados a validaciones de testigo (token) incorrectas para (1) cached forms y (2) forms con elementos AHAH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"}]}]}],"references":[{"url":"http://drupal.org/node/295053","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44453","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/295053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3744","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Drupal 5.x versiones anteriores a 5.10 y 6.x versiones anteriores a 6.4 permiten a atacantes remotos (1) añadir o (2) borrar reglas de acceso de usuarios como administradores a través de una URL sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"}]}]}],"references":[{"url":"http://drupal.org/node/295053","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44448","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/295053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3745","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors."},{"lang":"es","value":"El módulo Upload en Drupal 6.x anterior a 6.4, permite a usuarios autenticados en remoto editar nodos, eliminar ficheros y descargar adjuntos no autorizados a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:upload_module:*:*:*:*:*:*:*:*","matchCriteriaId":"AE3063A2-814A-4C23-A1D4-89E70B5BF9DE"}]}]}],"references":[{"url":"http://drupal.org/node/295053","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30689","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44458","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/295053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3746","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/476.html\r\n'CWE-476: NULL Pointer Dereference'","cveTags":[],"descriptions":[{"lang":"en","value":"neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function."},{"lang":"es","value":"neon versiones 0.28.0 hasta 0.28.2, permite a  servidores remotos causar una denegación de servicio (desreferencia del puntero NULL y bloqueo de aplicación) por medio de vectores relacionados con la autenticación de Digest, el soporte del parámetro domain de Digest y la función parse_domain."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of neon as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2008-08-28T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"A04DE1CE-6BDD-4BD6-AB3E-D039717487EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:0.28.1:*:*:*:*:*:*:*","matchCriteriaId":"3FECB3F9-8267-449E-9540-787AC351F79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:0.28.2:*:*:*:*:*:*:*","matchCriteriaId":"B359DBAC-BE95-420E-8EA8-0C6DB1E51349"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476571","source":"cve@mitre.org"},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2008-August/000038.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2008-August/000040.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36799","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:074","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/15/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30710","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020725","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-835-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44511","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00367.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2008-August/000038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2008-August/000040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/15/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-835-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00367.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-3747","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie."},{"lang":"es","value":"Las funciones (1) get_edit_post_link y (2) get_edit_comment_link en wp-includes/link-template.php de WordPress antes de 2.6.1 no fuerzan comunicación SSL en las situaciones previstas, lo que podría permitir a atacantes remotos obtener acceso administrativo siguiendo la red para una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*","matchCriteriaId":"5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*","matchCriteriaId":"056E641C-9322-4BEE-97B4-FE16DE8D7336"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*","matchCriteriaId":"ADB42CEF-E12D-4DB0-8536-FD393D3697A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*","matchCriteriaId":"C4AF89F9-AE67-49B5-ACF0-3A645C454E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*","matchCriteriaId":"94ADC624-E43E-4F1D-8525-F6903943C932"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"06A25444-2680-4379-B2CA-9858B6AF71CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4801D56C-5ED6-4648-A0C9-EB4D06786A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A777651-D2B2-47E0-A13C-BD667635F3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"}]}]}],"references":[{"url":"http://trac.wordpress.org/ticket/7359","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/19/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30750","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44569","source":"cve@mitre.org"},{"url":"http://trac.wordpress.org/ticket/7359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/20/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3748","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  view_group.php de Active PHP Bookmarks (APB) 1.1.02 y 1.2.06 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbstone:active_php_bookmarks:1.1.02:*:*:*:*:*:*:*","matchCriteriaId":"8D587A3F-9180-496C-9C90-822D0DABB61B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbstone:active_php_bookmarks:1.2.06:*:*:*:*:*:*:*","matchCriteriaId":"60EE2BA3-42E5-4A08-87E2-9699E41622F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbstone:apb:1.1.02:*:*:*:*:*:*:*","matchCriteriaId":"3CE17B45-F7DE-45E8-B4D9-AAB77B9CF3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbstone:apb:1.2.06:*:*:*:*:*:*:*","matchCriteriaId":"FDFF37CA-5829-4916-ABAC-B3978ED109F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4174","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30757","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44548","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3749","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr.php de Banner Management Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:banner_management_script:*:*:*:*:*:*:*:*","matchCriteriaId":"03C35F93-1B57-4C1A-969F-B1C7797D2A8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30756","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2989","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44551","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6276","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6936","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3750","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"vulnerabilidad de inyección SQL en tr.php de YourFreeWorld URL Rotator Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:url_rotator_script:*:*:*:*:*:*:*:*","matchCriteriaId":"8A96A4ED-4D84-4258-BDAC-B47D859EB4D6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/urlrotator-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31546","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30765","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44560","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6949","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/urlrotator-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3751","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr.php de YourFreeWorld Short Url & Url Tracker Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:short_url_and_url_tracker_script:*:*:*:*:*:*:*:*","matchCriteriaId":"6ED7F3FB-CE1C-402B-B250-3FAF55F65B80"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/shorturl-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31547","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30767","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44561","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6940","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/shorturl-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3752","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr.php de YourFreeWorld Ad-Exchange Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:ad-exchange_script:*:*:*:*:*:*:*:*","matchCriteriaId":"8DF1E752-8B64-44D4-8C0D-1A2D90541A24"}]}]}],"references":[{"url":"http://secunia.com/advisories/31529","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0808-exploits/adexchange-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30762","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44564","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0808-exploits/adexchange-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3753","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"vulnerabilidad de inyección SQL en details.php de YourFreeWorld Programs Rating Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:programs_rating_script:*:*:*:*:*:*:*:*","matchCriteriaId":"556FED31-A86B-4516-AAEA-B7E8075EC56B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31550","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0808-exploits/prograte-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30759","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2991","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0808-exploits/prograte-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3754","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en trl.php de YourFreeWorld Stylish Text Ads Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:stylish_text_ads_script:*:*:*:*:*:*:*:*","matchCriteriaId":"662ECA4B-722E-4170-9C26-070093F346EE"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0808-exploits/stylishtextads-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30766","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0808-exploits/stylishtextads-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-3755","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  view.php de YourFreeWorld Classifieds Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetor category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"80D3D578-92E3-4A06-B8EE-3FDFDC44E550"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/classifieds-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30761","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2980","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44565","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6945","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/classifieds-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3756","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr.php de YourFreeWorld Viral Marketing Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:viral_marketing_script:*:*:*:*:*:*:*:*","matchCriteriaId":"0D5B39DA-2393-4070-B00F-364B6160E177"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/viral-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30764","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2984","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44562","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6941","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/viral-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3757","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr1.php de YourFreeWorld Forced Matrix Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:forced_matrix_script:*:*:*:*:*:*:*:*","matchCriteriaId":"6878CE86-EF5E-4197-A569-7EC334929281"}]}]}],"references":[{"url":"http://secunia.com/advisories/31510","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0808-exploits/forcedmatrix-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30760","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2986","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44563","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0808-exploits/forcedmatrix-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3758","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to inject arbitrary web script or HTML via the NewPassword parameter to people.php, and allow remote authenticated users to inject arbitrary web script or HTML via the (2) Account picture and (3) Icon fields in account.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Lussumo Vanilla 1.1.4 y versiones anteriores (1) permiten a atacantes remotos inyectar web script o HTML a través del parámetro NewPassword de people.php, y permiten a usuarios remotos autenticados inyectar web script o HTML de su elección a través de (2) Account picture y (3) Icon fields en account.php.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"112F55F1-6129-4E15-B34D-E29995EB763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"34C3B2A7-EF53-4C3E-997D-F978C9286AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1:*:*:*:*:*:*:*","matchCriteriaId":"EB5944B6-6A0B-4666-B666-B8A3787DBB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED4C0D9-0821-4A49-BEFD-8EB3901B9AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"218D8A6C-FD89-48AE-BD21-38B41B382259"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DC2EA631-61AE-4E0B-9B1E-34FB8271AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E0B536-6295-4D2A-8B1E-D39F0163CDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"81996E90-3F33-40C3-805E-D7D7C6E4B554"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"55F8E29B-4D41-405B-912B-58FBE172AA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"618BF3EC-6E8B-48A9-89D3-A3F9F9B0F013"}]}]}],"references":[{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4176","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00126-08192008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495577/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30748","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44554","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44556","source":"cve@mitre.org"},{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00126-08192008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495577/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3759","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición de sitios cruzados (CSRF) en ajax/UpdateCheck.php de Vanilla 1.1.4 y versiones anteriores tiene un impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"112F55F1-6129-4E15-B34D-E29995EB763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"34C3B2A7-EF53-4C3E-997D-F978C9286AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1:*:*:*:*:*:*:*","matchCriteriaId":"EB5944B6-6A0B-4666-B666-B8A3787DBB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED4C0D9-0821-4A49-BEFD-8EB3901B9AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"218D8A6C-FD89-48AE-BD21-38B41B382259"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DC2EA631-61AE-4E0B-9B1E-34FB8271AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E0B536-6295-4D2A-8B1E-D39F0163CDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"81996E90-3F33-40C3-805E-D7D7C6E4B554"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"55F8E29B-4D41-405B-912B-58FBE172AA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"618BF3EC-6E8B-48A9-89D3-A3F9F9B0F013"}]}]}],"references":[{"url":"http://lussumo.com/bugs/discussion/91/ajaxupdatecheckphp-csrf-vulnerability/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"cve@mitre.org"},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44558","source":"cve@mitre.org"},{"url":"http://lussumo.com/bugs/discussion/91/ajaxupdatecheckphp-csrf-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3760","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la página sign-out de Vanilla 1.1.4 y versiones anteriores permite a atacantes remotos disparar la desconexión de otros usuarios a través de un enlace o etiqueta IMG de la acción SignOutNow en people.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"112F55F1-6129-4E15-B34D-E29995EB763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"34C3B2A7-EF53-4C3E-997D-F978C9286AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1:*:*:*:*:*:*:*","matchCriteriaId":"EB5944B6-6A0B-4666-B666-B8A3787DBB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED4C0D9-0821-4A49-BEFD-8EB3901B9AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"218D8A6C-FD89-48AE-BD21-38B41B382259"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DC2EA631-61AE-4E0B-9B1E-34FB8271AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E0B536-6295-4D2A-8B1E-D39F0163CDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"81996E90-3F33-40C3-805E-D7D7C6E4B554"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"55F8E29B-4D41-405B-912B-58FBE172AA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"618BF3EC-6E8B-48A9-89D3-A3F9F9B0F013"}]}]}],"references":[{"url":"http://lussumo.com/bugs/discussion/88/csrf-attack-hole/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8463/possible-security-flaw/#Comment_88511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"cve@mitre.org"},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44558","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44748","source":"cve@mitre.org"},{"url":"http://lussumo.com/bugs/discussion/88/csrf-attack-hole/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8463/possible-security-flaw/#Comment_88511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3761","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEITHER communication method for IOCTLs, which allows local users to cause a denial of service via a crafted IOCTL request."},{"lang":"es","value":"hcmon.sys en VMware Workstation 6.0.0.45731 utiliza el método de comunicación METHOD_NEITHER para IOCTLs, lo cual tiene un impacto desconocido (posiblemente caída) y vectores de ataque locales a través de una petición IOCTL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.0.45731:*:*:*:*:*:*:*","matchCriteriaId":"9F01ABD8-5C77-422E-849C-E7460072DB0B"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4177","source":"cve@mitre.org"},{"url":"http://www.orange-bat.com/adv/2008/adv.08.17.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30737","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020715","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44539","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6262","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.orange-bat.com/adv/2008/adv.08.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3762","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to Version 2.1.0 - http://www.turnkeywebtools.com/esupport/index.php?_m=news&_a=viewnews&newsid=62","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en onlinestatus_html.php de Turnkey PHP Live Helper 2.0.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro dep, relacionado con la ausencia de entrada de limpieza en la función get de global.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"D7955136-21D9-43D2-8FC3-F929BB8C74AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:*:*:*:*:*:*:*","matchCriteriaId":"824C4B8A-4A58-465E-9AD0-92AC3CCE01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"47FAC4AC-BCED-4469-AF56-B0FF3FA47EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"8E0355DB-27CE-4107-A12F-E65D9E3936E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"6DB7C1FE-6A6C-4017-943C-C1BD7B9F141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"017BA6C7-ADDD-4130-AD25-9AD26B9E2BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"AA4A9A64-A16B-485D-8451-C3271F1E0417"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"ED67C8B9-9CEA-4E60-8364-53D280375D64"}]}]}],"references":[{"url":"http://secunia.com/advisories/31521","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4178","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00124-08162008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30729","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44568","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00124-08162008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3763","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to Version 2.1.0 - http://www.turnkeywebtools.com/esupport/index.php?_m=news&_a=viewnews&newsid=62","cveTags":[],"descriptions":[{"lang":"en","value":"Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file.  NOTE: this can be leveraged for code injection by overwriting the language file."},{"lang":"es","value":"vulnerabilidad de variable sobrescrita en libsecure.php de Turnkey PHP Live Helper 2.0.1 y versiones anteriores, cuando register_globals está activo, permite a atacantes remotos sobrescribir variables de su elección relacionadas com el fichero de configuración db.\r\nNOTA: esto puede ser aprovechado para inyección de código sobrescribiendo el fichero language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"D7955136-21D9-43D2-8FC3-F929BB8C74AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:*:*:*:*:*:*:*","matchCriteriaId":"824C4B8A-4A58-465E-9AD0-92AC3CCE01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"47FAC4AC-BCED-4469-AF56-B0FF3FA47EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"8E0355DB-27CE-4107-A12F-E65D9E3936E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"6DB7C1FE-6A6C-4017-943C-C1BD7B9F141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"017BA6C7-ADDD-4130-AD25-9AD26B9E2BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"AA4A9A64-A16B-485D-8451-C3271F1E0417"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"ED67C8B9-9CEA-4E60-8364-53D280375D64"}]}]}],"references":[{"url":"http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31521","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4178","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00124-08162008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30729","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44570","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6261","source":"cve@mitre.org"},{"url":"http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00124-08162008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3764","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to Version 2.1.0 - http://www.turnkeywebtools.com/esupport/index.php?_m=news&_a=viewnews&newsid=62","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php."},{"lang":"es","value":"Una vulnerabilidad de inyección Eval en el archivo globalsoff.php en PHP Live Helper de Turnkey versión  2.0.1 y anteriores, permite a atacantes remotos ejecutar código PHP arbitrario por medio del parámetro test, y probablemente parámetros arbitrarios, en chat.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"D7955136-21D9-43D2-8FC3-F929BB8C74AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:*:*:*:*:*:*:*","matchCriteriaId":"824C4B8A-4A58-465E-9AD0-92AC3CCE01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"47FAC4AC-BCED-4469-AF56-B0FF3FA47EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"8E0355DB-27CE-4107-A12F-E65D9E3936E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"6DB7C1FE-6A6C-4017-943C-C1BD7B9F141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"017BA6C7-ADDD-4130-AD25-9AD26B9E2BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"AA4A9A64-A16B-485D-8451-C3271F1E0417"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"ED67C8B9-9CEA-4E60-8364-53D280375D64"}]}]}],"references":[{"url":"http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31521","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4178","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00124-08162008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30729","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44571","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6261","source":"cve@mitre.org"},{"url":"http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00124-08162008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3765","sourceIdentifier":"cve@mitre.org","published":"2008-08-21T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en code.php de Quick Poll Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetor id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discountedscripts:quick_poll_script:*:*:*:*:*:*:*:*","matchCriteriaId":"D708453C-5791-4CB1-A27F-0DF10629C23A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/quickpoll-sql.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30724","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3141","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44541","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7105","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/quickpoll-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3766","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Realtime Internet Band Rehearsal Low-Latency (Internet) Connection tool (llcon) before 2.1.2 allows remote attackers to cause a denial of service (application crash) via malformed protocol messages."},{"lang":"es","value":"Connection tool (llcon) en Realtime Internet Band Rehearsal Low-Latency (Internet) antes de 2.1.2 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación)  a través de mensajes de protocolo malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtime_internet_band_rehearsal:low_latency_internet_connection_tool:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"7961FEDF-3095-4360-8DAB-0509BB57E7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:realtime_internet_band_rehearsal:low_latency_internet_connection_tool:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0D922B4D-A722-4CD3-A3F0-1CF213280029"},{"vulnerable":true,"criteria":"cpe:2.3:a:realtime_internet_band_rehearsal:low_latency_internet_connection_tool:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"1E9CA88F-F54F-4DA4-A665-B276D2C713A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:realtime_internet_band_rehearsal:low_latency_internet_connection_tool:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D43EE30-3DFF-45FC-B00F-D320B0F3A938"}]}]}],"references":[{"url":"http://secunia.com/advisories/31496","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=158367&release_id=619929","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30770","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44567","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=158367&release_id=619929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3767","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en classified.php de phpBazar 2.0.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro adid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"03D850F2-66A0-4F0F-B946-E3300EF403EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31555","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30773","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44578","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6280","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3768","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en class.ajax.php de Turnkey Web Tools SunShop Shopping Cart antes de 4.1.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) id en una accion edit_registry a index.php, (2) otro vector relacionado con la funcion check_email y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"AAB11A13-7D1E-41A4-9090-5832CB9E7CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"848001C9-D2AB-4C4F-9742-F9E3A00CFF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"828417E4-D956-410C-B223-59423965E8C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EACB372D-B770-4192-9F23-EE1709E8A590"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24856DFB-190C-4448-84B2-D01612301AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"961E4870-D2F0-4B3F-AB20-BAEC096EBC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"07ED97AA-1B38-4849-BCD4-4F0E8B1AF57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B9E9D53F-5261-40D2-B3EC-D53D7F191F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4724D4C6-EE06-4644-A337-69910F9D91B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80C7137C-41B2-4EAE-AA65-1BACD6A7580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"4FDA6877-1C32-4316-BD5B-A80BB4D7C9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C849B425-3FF1-431B-8446-9DCDDA28A701"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EF352C2E-056D-49F7-8075-53C248EDB755"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"17219F66-0F86-454C-8109-F3592C481FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeywebtools:sunshop_shopping_cart:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7BDCA292-D690-439D-8A1E-6B4895692EE5"}]}]}],"references":[{"url":"http://demos.turnkeywebtools.com/ss4/docs/change_log.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31539","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4180","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00125-08182008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495578/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30751","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44553","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6273","source":"cve@mitre.org"},{"url":"http://demos.turnkeywebtools.com/ss4/docs/change_log.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00125-08182008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495578/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3769","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the include_page parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en admin/create_order_new.php en Freeway 1.4.1.171 cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro include_page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1.171:*:*:*:*:*:*:*","matchCriteriaId":"C74596B7-B092-4FC9-B6C0-0A2877E81420"}]}]}],"references":[{"url":"http://secunia.com/advisories/31475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4181","source":"cve@mitre.org"},{"url":"http://www.openfreeway.org/download/change-log.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495549/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45036","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openfreeway.org/download/change-log.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495549/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3770","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) includes/events_application_top.php; (2) english/account.php, (3) french/account.php, and (4) french/account_newsletters.php in includes/languages/; (5) includes/modules/faqdesk/faqdesk_article_require.php; (6) includes/modules/newsdesk/newsdesk_article_require.php; (7) card1.php, (8) loginbox.php, and (9) whos_online.php in templates/Freeway/boxes/; and (10) templates/Freeway/mainpage_modules/mainpage.php.  NOTE: vector 1 may be the same as CVE-2008-3677."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Freeway 1.4.1.171, cuando register_globals está habilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro language a (1) includes/events_application_top.php; (2) english/account.php, (3) french/account.php, y (4) french/account_newsletters.php en includes/languages/; (5) includes/modules/faqdesk/faqdesk_article_require.php; (6) includes/modules/newsdesk/newsdesk_article_require.php; (7) card1.php, (8) loginbox.php, y (9) whos_online.php en templates/Freeway/boxes/; y (10) templates/Freeway/mainpage_modules/mainpage.php.\r\nNOTA: el vector 1 podría ser el mismo que CVE-2008-3677."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1.171:*:*:*:*:*:*:*","matchCriteriaId":"C74596B7-B092-4FC9-B6C0-0A2877E81420"}]}]}],"references":[{"url":"http://secunia.com/advisories/31475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4181","source":"cve@mitre.org"},{"url":"http://www.openfreeway.org/download/change-log.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495549/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30731","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45037","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openfreeway.org/download/change-log.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495549/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3771","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or HTML via the PageNo parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en members.php en Pars4u Videosharing 1 permite a los atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro PageNo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pars4u:videosharing:1:*:*:*:*:*:*:*","matchCriteriaId":"127458D1-EDF9-4176-B975-EC776AB09BF0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30779","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44581","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6279","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3772","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en categories_portal.php en Pars4u Videosharing 1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pars4u:videosharing:1:*:*:*:*:*:*:*","matchCriteriaId":"127458D1-EDF9-4176-B975-EC776AB09BF0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31571","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30779","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44579","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6279","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3773","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when \"Show New Private Message Notification Pop-Up\" is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a private message subject (aka newpm[title])."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en vBulletin 3.7.2 PL1 y 3.6.10 PL3, cuando \"Show New Private Message Notification Pop-Up\" esta habilitado permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el asunto de un mensaje privado (alias newpm[title])."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.6.10:pl3:*:*:*:*:*:*","matchCriteriaId":"CBC01038-5FE1-4D7E-9C8A-C6BFB58A5144"},{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.2:pl1:*:*:*:*:*:*","matchCriteriaId":"AC0D637F-2293-4606-A608-8CE8F22AC026"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121933258013788&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31552","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4182","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/vbulletin-cross-site-scripting-vulnerability","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30777","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020727","source":"cve@mitre.org"},{"url":"http://www.vbulletin.com/forum/showthread.php?t=282133","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44576","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121933258013788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/vbulletin-cross-site-scripting-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbulletin.com/forum/showthread.php?t=282133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3774","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo index.php en CMS de Simasy, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simasy:simasy_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"656CEDF5-203D-476D-B86B-FBC1944EA1D7"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/simasycms-sql.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30774","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30774/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44580","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/simasycms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30774/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3775","sourceIdentifier":"cve@mitre.org","published":"2008-08-22T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\\_pack registry value."},{"lang":"es","value":"Folder Lock 5.9.5 y anteriores usan encriptación débil (ROT-25) para la contraseña, lo que permite a administradores locales obtener información sensible mediante la lectura y el descifrado del valor del registro QualityControl\\_pack."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsoftwares:folder_lock:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.5","matchCriteriaId":"0EDC1BF9-973E-498F-8D00-016A851C3A1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31559","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4183","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495612/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30771","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44575","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495612/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3776","sourceIdentifier":"cve@mitre.org","published":"2008-08-25T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de Salto de Directorio en Fujitsu Web-Based Admin View 2.1.2, permite a atacantes leer archivos arbitrariamente mediante un .. (punto punto) en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:web_based_admin_view:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B6FD78F2-94CD-4409-AE36-5F1AFFC687EC"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2008/Aug/0411.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30780","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020726","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44602","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Aug/0411.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3777","sourceIdentifier":"cve@mitre.org","published":"2008-08-25T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs."},{"lang":"es","value":"SIP Enablement Services (SES) Server en Avaya SIP Enablement Services 5.0 y Communication Manager (CM) 5.0 en el S8300C con SES activado, escribe los nombres y contraseñas de cuenta en los logs (1) alarm y (2) system, durante los intentos fallidos de login, lo que permite a usuarios locales obtener credenciales leyendo estos logs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"03BEFE21-9FAA-4DA0-9C75-A70C12A88123"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:s8300c_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8030330C-BC31-485A-A93C-AEA910D4042C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"84E2136B-6FE3-4548-A89D-444ED9393C22"}]}]}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30758","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44586","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3778","sourceIdentifier":"cve@mitre.org","published":"2008-08-25T21:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request."},{"lang":"es","value":"El interfaz remoto de gestión en SIP Enablement Services (SES) Server en Avaya SIP Enablement Services 5.0 y Communication Manager (CM) 5.0 en el S8300C con SES activado, continua con las actualizaciones de Core router incluso con un login no válido, lo que permite a atacantes remotos provocar una denegación de servicio (corte del servicio de mensajería) o bien obtener privilegios mediante una petición de actualización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"03BEFE21-9FAA-4DA0-9C75-A70C12A88123"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:s8300c_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8030330C-BC31-485A-A93C-AEA910D4042C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"84E2136B-6FE3-4548-A89D-444ED9393C22"}]}]}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30758","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44585","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3779","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML via the words parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search/index.php de Five Star Review Script, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante el parámetro words en una acción de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:review-script:five_star_review_script:*:*:*:*:*:*:*:*","matchCriteriaId":"04A936BF-B482-40A8-98FB-002D820AA71F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44637","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3780","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL commands via the item_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en recommend.php de Five Star Review Script, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro item_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:review-script:five_star_review_script:*:*:*:*:*:*:*:*","matchCriteriaId":"04A936BF-B482-40A8-98FB-002D820AA71F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44636","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3781","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in GMOD GBrowse before 1.69 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en GMOD GBrowse anterior a 1.69, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:*:*:*:*:*:*:*:*","versionEndIncluding":"1.68","matchCriteriaId":"A84A09B6-12F9-44EF-9BEB-87E786EC7F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.43:*:*:*:*:*:*:*","matchCriteriaId":"48265C32-F82F-4A31-AA4C-B938E27D0F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.45:*:*:*:*:*:*:*","matchCriteriaId":"88107E29-EFA6-4969-9F30-6BD01F9EFC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.46:*:*:*:*:*:*:*","matchCriteriaId":"711E6416-C444-4449-9419-9DD49052CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.47:*:*:*:*:*:*:*","matchCriteriaId":"B91AC6B1-E783-4A8F-B813-7C2DB17AF4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.50:*:*:*:*:*:*:*","matchCriteriaId":"A03B11B3-25B3-44AF-97E3-88B821FE93FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.53:*:*:*:*:*:*:*","matchCriteriaId":"6C7B4FF0-ED48-4759-B32C-98EF71A141E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.54:*:*:*:*:*:*:*","matchCriteriaId":"76070A8C-04CE-4E8D-A473-4FC40DB83095"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.58:*:*:*:*:*:*:*","matchCriteriaId":"4EAD8EEC-9F26-49D9-9C2F-54E19A43A9D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.61:*:*:*:*:*:*:*","matchCriteriaId":"D3157A97-4690-46DB-858B-4814E19F0ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.62:*:*:*:*:*:*:*","matchCriteriaId":"50F15F96-4282-4AD0-A204-63868A3B4D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.64:*:*:*:*:*:*:*","matchCriteriaId":"86672F6F-1F59-47B6-9D90-09B362434DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.65:*:*:*:*:*:*:*","matchCriteriaId":"5DC195F7-1CBD-4F97-BAF2-766FECC51600"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.66:*:*:*:*:*:*:*","matchCriteriaId":"9D784C38-04CA-43E0-8CD2-175C7088B773"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmod:gbrowse:1.67:*:*:*:*:*:*:*","matchCriteriaId":"D7C41F7D-9A45-4013-8FA6-A4DF7097DC64"}]}]}],"references":[{"url":"http://gmod.org/wiki/GMOD_News#GBrowse_1.69_Released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31596","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=621342&group_id=27707","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30812","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44632","source":"cve@mitre.org"},{"url":"http://gmod.org/wiki/GMOD_News#GBrowse_1.69_Released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=621342&group_id=27707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3782","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Category name field under Advertisement Packages, the (2) Reason field under Credit/Debit Users, and the (3) FAQ question and (4) FAQ answer fields under Add New FAQ Entry."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/index.php de ACG-PTP 1.0.6, permiten a administradores autenticados en remoto inyectar secuencias de comandos Web o HTML de su elección mediante (1) el campo de nombre de Category dentro de Advertisement Packages, (2) el campo Reason dentro de Credit/Debit Users, y  (3) las preguntas frecuentes y (4) los campos de respuestas frecuentes dentro de Add New FAQ Entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discountedscripts:acg_ptp:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9E03AE80-84A8-4FE4-85F8-4839002AD92F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064038.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30793","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44603","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3783","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de Matterdaddy Market 1.1, cuando magic_quotes_gpc está deshabilitado; permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) category y (2) type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matterdaddy:matterdaddy_market:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B62C933-627F-474D-991F-C8C19591B40C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30809","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44630","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3784","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en scrape.php de BtiTracker 1.4.7 y anteriores y xBtiTracker 2.0.542 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro info_hash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btitracker_project:btitracker:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.7","matchCriteriaId":"1C5740DF-7F87-4B0D-807C-DFABF257B163"},{"vulnerable":true,"criteria":"cpe:2.3:a:xbtitracker_project:xbtitracker:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.542","matchCriteriaId":"84A7637F-84A9-4860-A613-1AB573B53DFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/31556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4186","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.btiteam.org/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.btiteam.org/smf/index.php?topic=12068","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30811","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44627","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6296","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.btiteam.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.btiteam.org/smf/index.php?topic=12068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3785","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) view, (2) category, or (3) blogsection action to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el componente com_content de MiaCMS 4.6.5, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción (1) view, (2) category, o (3) blogsection a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miacms:miacms:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"046F8D76-2A42-4440-AE6C-2CC854A2778B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31584","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4189","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30805","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6295","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3786","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter (aka \"Gallery or event name\" field) in a search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de PICTURESPRO Photo Cart 3.9, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante el parámetro qtitle (también conocido como \"Nombre de evento o galería\") en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:picturespro:picturespro_photo_cart:3.9:*:*:*:*:*:*:*","matchCriteriaId":"5C34D5F0-620F-4AF2-A8E5-A855E7E3180D"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064046.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44614","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3787","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listing_view.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listilisting_view.php de Web Directory Script 2.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullscripts:web_directory_script:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"931E0DEF-A268-44DF-9DAA-4B26558C87BF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4187","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30807","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44638","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6298","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3788","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T14:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) qtitle, (2) qid, and (3) qyear parameters to (a) search.php, and the (4) email and (5) password parameters to (b) _login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PICTURESPRO Photo Cart 3.9 cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) qtitle, (2) qid y (3) qyear de (a) search.php, y los parámetros (4) email y (5) password de (b) _login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:picturespro:picturespro_photo_cart:3.9:*:*:*:*:*:*:*","matchCriteriaId":"5C34D5F0-620F-4AF2-A8E5-A855E7E3180D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/photocart-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4188","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30786","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44607","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6285","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/photocart-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3789","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups."},{"lang":"es","value":"Samba 3.2.0 usa permisos débiles (0666) para los archivos (1) group_mapping.tdb y (2) group_mapping.ldb, lo que permite a usuarios locales modificar la pertenencia a los Grupos Unix."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-08-28T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"D5F8589D-6057-4038-8EE3-B1024C63D234"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://samba.org/samba/security/CVE-2008-3789.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31601","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30837","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020770","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2440","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44678","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://samba.org/samba/security/CVE-2008-3789.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/30837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3790","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an \"XML entity explosion.\""},{"lang":"es","value":"El módulo REXML en Ruby 1.8.6 hasta la versión 1.8.6-p287, 1.8.7 hasta 1.8.7-p72, y 1.9 permite que atacantes, dependiendo del contexto, provocar una denegación de servicio (agotamiento CPU) a través de un documento XML con entidades anidadas recursivamente, también conocido como \"Explosión de entidades XML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*","matchCriteriaId":"DF02372D-FD0B-453F-821E-1E0BA7900711"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p111:*:*:*:*:*:*","matchCriteriaId":"0A6ED369-E564-4D4F-9E23-A8125194EAD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*","matchCriteriaId":"ACC0DB90-C072-4BCB-9082-94394F547D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p230:*:*:*:*:*:*","matchCriteriaId":"4D7ED62B-4D88-46A4-A0A3-BD37E66A5211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p286:*:*:*:*:*:*","matchCriteriaId":"072A0C3C-9F47-4DC7-96EA-7980B45429DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p287:*:*:*:*:*:*","matchCriteriaId":"5A686AB7-ADAB-4C14-9F27-4DEBC3328E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p36:*:*:*:*:*:*","matchCriteriaId":"FB0372E4-FE3E-49CD-AF55-E2E4518D34F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*","matchCriteriaId":"04579340-B53F-47B5-99C9-B647AAA3D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*","matchCriteriaId":"9D7F4162-108A-470B-8E6B-C009E8C56AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*","matchCriteriaId":"73AB0545-3D8D-4623-8381-D71DA44E3B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*","matchCriteriaId":"0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:*","matchCriteriaId":"17AA24B4-30C7-4D46-A55C-A5CC7C446436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*","matchCriteriaId":"D9237145-35F8-4E05-B730-77C0F386E5B2"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.lang.ruby/browse_thread/thread/19f69e8a081fc0d1/e138e014b74352ca","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32371","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"cve@mitre.org"},{"url":"http://weblog.rubyonrails.org/2008/9/3/rails-2-0-4-maintenance-release","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/25/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/4","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30802","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020735","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2428","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2483","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44628","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10393","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/651-1/","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/691-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/comp.lang.ruby/browse_thread/thread/19f69e8a081fc0d1/e138e014b74352ca","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2008/9/3/rails-2-0-4-maintenance-release","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/25/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/691-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3791","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file."},{"lang":"es","value":"src/main-win.c en GPicView 0.1.9 de Lightweight X11 Desktop Environment (LXDE) permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque symlink en el fichero temporal /tmp/rot.jpg"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lxde:lightweight_x11_desktop_environment:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"49834B7A-F6A9-451F-BE77-CC3B02D7ACD6"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495968","source":"cve@mitre.org"},{"url":"http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2019481&group_id=180858&atid=894869","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/25/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/10","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/5","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2019481&group_id=180858&atid=894869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/25/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3792","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks."},{"lang":"es","value":"En el archivo net/sctp/socket.c en la implementación del Stream Control Transmission Protocol (sctp) en el Kernel de Linux anterior a versión 2.6.26.4, no comprueba que la extensión SCTP-AUTH esté habilitada antes de proceder con las funciones de la API SCTP-AUTH, lo que permite a atacantes causar una denegación de servicio (desreferencia del puntero NULL y pánico) por medio de vectores que resultan en llamadas a la función (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, o (9) sctp_getsockopt_local_auth_chunks."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e739d1752aca4e8f3e794d431503bfca3162df4","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/8/23/49","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-netdev&m=121928747903176&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4210","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/25/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/8","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/6","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496256/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31121","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020854","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-007.txt","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45189","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e739d1752aca4e8f3e794d431503bfca3162df4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/8/23/49","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-netdev&m=121928747903176&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/25/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/26/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496256/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-007.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3794","sourceIdentifier":"cve@mitre.org","published":"2008-08-26T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow."},{"lang":"es","value":"Un error en la propiedad signedness de enteros en la función mms_ReceiveCommand en el archivo modules/access/mms/mmstu.c en Reproductor Multimedia VLC versión 0.8.6i, permite a los atacantes remotos ejecutar código arbitrario por medio de un enlace mmst diseñado con un valor size negativo, que omite una comprobación de tamaño y desencadena un desbordamiento de enteros seguido de un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"FD824C10-CB0B-4988-99E9-1B8A2B52C5A3"}]}]}],"references":[{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2008-August/048488.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-06.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4190","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/24/3","source":"cve@mitre.org"},{"url":"http://www.orange-bat.com/adv/2008/adv.08.24.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30806","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020759","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44659","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14531","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6293","source":"cve@mitre.org"},{"url":"http://mailman.videolan.org/pipermail/vlc-devel/2008-August/048488.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/24/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.orange-bat.com/adv/2008/adv.08.24.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3795","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long \"message response.\""},{"lang":"es","value":"Desbordamiento del búfer en Ipswitch WS_FTP Home client, permite a servidores FTP remotos tener un impacto desconocido mediante un largo \"mensaje de respuesta\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_home:*:*:*:*:*:*:*:*","matchCriteriaId":"BE0C71FF-3DEA-487A-89E9-29D381B739C6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4173","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30728","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44744","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6257","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3796","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T15:21:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image."},{"lang":"es","value":"Swfdec 0.6 versiones anteriores a 0.6.8 permite a atacantes remotos provocar una denegación de servicio (caida de aplicación) a través de una imagen JPEG 1x1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"281E12A8-508F-43FF-AB02-EB42198E28D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F7B801DC-28C3-469D-A224-83A20C5AECEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3CC54C8F-9E90-4E3A-8850-708685DBDA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:swfdec:swfdec:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"8446B915-D251-442F-A1C0-DFDC582FB297"}]}]}],"references":[{"url":"http://lists.freedesktop.org/archives/swfdec/2008-July/001801.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/19/3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44746","source":"cve@mitre.org"},{"url":"http://lists.freedesktop.org/archives/swfdec/2008-July/001801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/19/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3798","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs during termination of an SSL session."},{"lang":"es","value":"Cisco IOS v12.4 permite a atacantes remotos provocar una denegación de servicio (caída de dispositivo) a través de un paquete SSL creado correctamente durante la finalización de una sesión SSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0146c.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020930","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6087","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0146c.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3799","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages."},{"lang":"es","value":"Fuga de memoria en la implementación de la Session Initiation Protocol (SIP) en Cisco IOS v12.2 a la v12.4, cuando VoIP está configurada, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y parada del servicio de voz) a través de mensajes SIP válidos no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020939","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5927","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3800","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.067","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación de la Session Initiation Protocol en Cisco IOS v12.2 a la v12.4 y Unified Communications Manager v4.1 a la v6.1, cuando VoIP está configurada, permite a atacantes remotos provocar una denegación de servicio (reinicio de proceso o de dispositivo) a través de mensajes SIP válidos no especificados, también conocidos como \"Cisco Bug ID CSCsu38644\". Vulnerabilidad distinta de CVE-2008-3800 y CVE-2008-3802."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AC772518-51CC-4692-BEB2-2C9C2A215F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9A5E0999-9FB7-4255-A8CF-5D74E70FD56A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"50BA656D-4103-4BE7-9C8A-BDC9580B7E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AF68FA-433F-46F2-B309-B60A108BECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"640BFEE2-B364-411E-B641-7471B88ED7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32013","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31367","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020939","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020942","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2671","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6086","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3801","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.080","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación de la Session Initiation Protocol en Cisco IOS v12.2 a la v12.4 y Unified Communications Manager v4.1 a la v6.1, cuando VoIP está configurada, permite a atacantes remotos provocar una denegación de servicio (reinicio de proceso o de dispositivo) a través de mensajes SIP válidos no especificados. Vulnerabilidad distinta de CVE-2008-3800 y CVE-2008-3802."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AC772518-51CC-4692-BEB2-2C9C2A215F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9A5E0999-9FB7-4255-A8CF-5D74E70FD56A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"50BA656D-4103-4BE7-9C8A-BDC9580B7E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AF68FA-433F-46F2-B309-B60A108BECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"640BFEE2-B364-411E-B641-7471B88ED7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32013","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31367","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020939","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020942","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2671","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3802","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801."},{"lang":"es","value":"Vulnerabilidad sin especificar en la implementación de la Session Initiation Protocol en Cisco IOS v12.2 a la v12.4, cuando está configurada la VoIP, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de mensajes SIP válidos no especificados. También conocida como \"bug CSCsk42759\". Vulnerabilidad distinta de CVE-2008-3800 y CVE-2008-3801."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*","matchCriteriaId":"3870C62F-D086-419C-A0E6-815E9ED5DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020939","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5889","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3803","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.160","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A \"logic error\" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances."},{"lang":"es","value":"Un \"error lógico\" en  Cisco IOS v12.0 a la v12.4, cuando está configurado un Multiprotocol Label Switching (MPLS) VPN \"extendida a comunidades\" (extended communities), en ocasiones provoca  que sea usado un destino de ruta corrupta, lo que permite a atacantes remotos leer el tráfico de red desde otras VPN's en determinadas circunstancias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014a9.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31366","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020940","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5919","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014a9.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3804","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.173","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (memory corruption) via crafted packets for which the software path is used."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) en Cisco IOS v12.2 y v12.4, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) a través de paquetes manipulados en los que la ruta del software es usada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ac.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020934","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5619","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ac.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3805","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.190","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806."},{"lang":"es","value":"Cisco IOS v12.0 a la v12.4  sobre Cisco 10000, uBR10012 y uBR7200 maneja los paquetes externos UDP que son enviados  a las direcciones 127.0.0.0/8 intencionadamente para la comunicación IPC en el propio dispositivo, esto permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo o de \"linecard\") a través de paquetes UDP manipulados. Vulnerabilidad distinta de CVE-2008-3806."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*","matchCriteriaId":"22D57BED-1D99-4077-941C-E60BEA65324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2l:*:*:*:*:*:*:*","matchCriteriaId":"6FEFEFF0-65E0-4F68-8C9E-03DAC585CA5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2rc:*:*:*:*:*:*:*","matchCriteriaId":"A4577947-7960-4627-9A74-9C3BB6477DDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16646","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020935","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3806","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805."},{"lang":"es","value":"En Cisco IOS v12.0 a la v12.4 en Cisco 10000, los paquetes externos del UDP del manejador de dispositivos de la serie uBR10012 y uBR7200 que se envían a las direcciones 127.0.0.0 /8 pensados para comunicación IPC dentro del dispositivo, permite que los atacantes remotos causen una denegación del servicio (reinicio del dispositivo o del linecard) a través de paquetes  del UDP manipulados, una vulnerabilidad distinta de CVE-2008-3805."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16646","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45592","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7123","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3807","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.237","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with \"private\" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests."},{"lang":"es","value":"El Cisco IOS v12.2 y v12.3 en los dispositivos de la serie de Cisco uBR10012, cuando se configura la redundancia del linecard, permite un servicio de lectura/escritura del SNMP con \"private\" como la comunidad, que permite que los atacantes remotos consigan el acceso administrativo obteniendo esta comunidad y enviando peticiones del SNMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014b1.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020941","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5452","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014b1.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3808","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted Protocol Independent Multicast (PIM) packet."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco IOS v12.0, permite a atacantes remotos causar denegación de servicio (reinicio de dispositivo) a través del paquete del Protocolo Multidifusión Independiente (PIM) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*","matchCriteriaId":"DDBE69A0-85B1-423B-88FB-CDA80E9186EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*","matchCriteriaId":"D3B31AFC-9C72-4737-B6B7-E938C13695BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*","matchCriteriaId":"896A71EC-9508-406F-8DE8-58953D9A30FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*","matchCriteriaId":"8A11AF3F-C82F-4431-9CF1-84FDAD388D04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*","matchCriteriaId":"7F5B9BAF-59BA-4282-B387-489264D44429"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*","matchCriteriaId":"3870C62F-D086-419C-A0E6-815E9ED5DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31356","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020936","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5873","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3809","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers) allows remote attackers to cause a denial of service (device crash) via a malformed Protocol Independent Multicast (PIM) packet."},{"lang":"es","value":"Vulnerabilidad en dispositivos Gigabit Switch Router (GSR),(aka 12000 Series routers), de Cisco IOS v12.0 a v12.4. Permite a atacantes de control remoto causar denegación de servicio (reinicio de dispositivo) a través de paquetes Multidifusión de Protocolo Independiente (Protocol Independent Multicast, PIM) mal formados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*","matchCriteriaId":"3870C62F-D086-419C-A0E6-815E9ED5DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16638","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31356","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020936","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5477","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3810","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811."},{"lang":"es","value":"En Cisco IOS v12.2 y 12.4, cuando el soporte de Fragmentación del protocolo de control de llamada NAT Skinny (SCCP) está habilitado, permite a atacantes de control remoto causar denegación de servicio (reinicio de dispositivo) a través de mensajes SCCP segmentados, aka CSCsg22426, una vulnerabilidad distinta de CVE-2008-3811."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/31359","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020937","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3811","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810."},{"lang":"es","value":"En Cisco IOS v12.2 y 12.4, cuando el soporte de Fragmentación del protocolo de control de llamada NAT Skinny (SCCP) está habilitado, permite a atacantes de control remoto causar denegación de servicio (reinicio de dispositivo) a través de mensajes SCCP, aka Cisco Bug ID CSCsi17020, una vulnerabilidad distinta de CVE-2008-3810."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31359","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1020937","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45535","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5900","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3812","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet."},{"lang":"es","value":"En Cisco IOS v12.4, cuando la Aplicación de Control de Inspección (AIC) del cortafuegos IOS  con  Inspección de Profundidad de Paquete HTTP está habilitada, permite a atacantes remotos causar denegación del servicio (reinicio de dispositivo) a través de paquetes de tránsito HTTP malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16661","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31354","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020929","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=16661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3813","sourceIdentifier":"psirt@cisco.com","published":"2008-09-26T16:21:44.363","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted L2TP packet."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco IOS v12.2 y v12.4. Cuando está habilitado el proceso de demonio del L2TP (Layer 2 Tunneling Protocol) mgmt permite a atacantes remotos causar denegación de servicio (reinicio de dispositivo) a través un paquete L2TP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"}]}]}],"references":[{"url":"http://secunia.com/advisories/31990","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0157a.shtml","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1020938","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5362","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0157a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1020938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3814","sourceIdentifier":"psirt@cisco.com","published":"2008-10-08T22:00:01.730","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specific link more than once."},{"lang":"es","value":"Una vulnerabilidad no especificada en Unity de Cisco versiones 4.x anteriores a 4.2 (1) ES161, versiones 5.x anteriores a 5.0 (1) ES53 y versiones 7.x anteriores 7.0 (2) ES8, cuando utiliza autenticación anónima (también conocida como autenticación Unity nativa), permite a los atacantes remotos omitir la autenticación y leer o modificar los parámetros de configuración del sistema yendo hacia un enlace específico más de una vez."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7069DF8-3006-4651-816A-855C980256FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CDE9975D-17B0-4EC8-8278-A715F4BF14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"9555A7EC-C0B6-4F48-99BE-BCE51446CF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"16F3E72C-FF4B-425E-A8FB-C1C4BEDDB019"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):sr1:*:*:*:*:*:*","matchCriteriaId":"F05B00B2-F624-427C-9643-19B8E057193D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A164F687-98DB-409D-A9C4-D04ECF6DD53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):sr1:*:*:*:*:*:*","matchCriteriaId":"255CAB12-EE1D-4DC3-B854-E0D645F4C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"0A9BA9FD-99EC-4571-ACE8-2EFD13EFEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B746D68B-C6A4-494C-9302-F4652E1E2A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5B478632-B2D4-443B-961A-0B3CF1A593CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*","matchCriteriaId":"20DAD5D8-6882-48FE-AE7A-9440F47F6C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"63260FD4-A010-4B2C-8654-4E18D5E8B364"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5EED32D3-A1C5-430C-8488-4D221196CB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8268EB91-5DCC-4E0C-9537-07EF5CE1695C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32187","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31638","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/31642","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021011","source":"psirt@cisco.com"},{"url":"http://www.voipshield.com/research-details.php?id=126","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/32187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3815","sourceIdentifier":"psirt@cisco.com","published":"2008-10-23T22:00:01.137","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances 7.0 versiones anteriores a 7.0(8)3, 7.1 versiones anteriores a 7.1(2)78, 7.2 versiones anteriores a 7.2(4)16, 8.0 versiones anteriores a 8.0(4)6, y 8.1 versiones anteriores a 8.1(1)13, cuando está configurado como una VPN utilizando la autenticación del dominio de Microsoft Windows NT, permite a atacantes remotos evitar la autenticación VPN a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:asa_5500:*:*:*:*:*:*:*:*","matchCriteriaId":"6FCBA3A3-7C8F-481A-9BEC-78981547F8BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"508DECFB-F334-409F-911B-BF8D842D3556"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C4991BC7-B07D-4D8C-885C-136AD9D4E209"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32360","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/31864","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021089","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021090","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/2899","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/32360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3816","sourceIdentifier":"psirt@cisco.com","published":"2008-10-23T22:00:01.153","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 and 7.2(4)10 allows remote attackers to cause a denial of service (device reload) via a crafted IPv6 packet."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances 7.2(4)9 y 7.2(4)10 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un paquete IPv6 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500_series:*:*:*:*:*:*:*:*","matchCriteriaId":"F0C1B8E3-1C10-4AA2-A2F7-886189766E12"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.2\\(4\\)9:*:*:*:*:*:*:*","matchCriteriaId":"C0EB2AB5-FC6C-4305-9D96-851BC0D45F1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.2\\(4\\)10:*:*:*:*:*:*:*","matchCriteriaId":"5C66392E-FE0A-467C-BC97-1C455BAA101A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32391","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31863","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021086","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021087","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/2899","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46025","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5499","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/32391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3817","sourceIdentifier":"psirt@cisco.com","published":"2008-10-23T22:00:01.183","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the \"initialization code for the hardware crypto accelerator.\""},{"lang":"es","value":"Fuga de memoria en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances 8.0 antes de 8.0(4) y 8.1 antes de 8.1(2) permite a atacantes remotos provocar una denegación de servicio (agotamiento de memoria) mediante una secuencia no especificada de paquetes, relacionada con \"código de inicialización para el acelerador de hardware criptológico\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500_series:*:*:*:*:*:*:*:*","matchCriteriaId":"F0C1B8E3-1C10-4AA2-A2F7-886189766E12"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.1:*:*:*:*:*:*:*","matchCriteriaId":"50740BFB-0C41-4C9C-ACA7-A4DE9382F1C4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32392","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31865","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021088","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2008/2899","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46027","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5597","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/32392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3823","sourceIdentifier":"secalert@redhat.com","published":"2008-09-12T16:56:20.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo MIME/MIME/Contents.php de la biblioteca MIME de Horde 3.2.x anterior a 3.2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección utilizando el nombre del fichero adjunto en el mensaje MIME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"457276C8-6665-48C5-948C-E65E6309C0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"49101F2D-3347-40BC-A1F6-AD95A8F2A013"}]}]}],"references":[{"url":"http://marc.info/?l=horde-announce&m=122104360019867&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://ocert.org/patches/2008-012/MIME.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/31842","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31959","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4245","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1642","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-012.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/10/1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496182/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31110","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2548","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45030","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=horde-announce&m=122104360019867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://ocert.org/patches/2008-012/MIME.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/10/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3824","sourceIdentifier":"secalert@redhat.com","published":"2008-09-12T16:56:20.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.php in Popoon r22196 and earlier allows remote attackers to inject arbitrary web script or HTML by using / (slash) characters as replacements for spaces in an HTML e-mail message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en (1) el módulo Text_Filter/Filter/xss.php de Horde versiones 3.1.x anteriores a 3.1.9 y versiones 3.2.x anteriores a 3.2.2 y en (2) el módulo externalinput.php de Popoon versión r22196 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección al reemplazar caracteres / (barra) por los espacios en blanco en un mensaje de correo electrónico en formato HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"57AD38FB-23DF-406D-8889-E9EB18D22C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"35BECCFA-1E18-41ED-882A-5C743D970EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C0285D4F-8CD8-48F9-9D68-A80E8742BAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B3808FD9-126C-422F-AFE4-4FF6E1366431"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"96A4F9E2-7978-4C82-9BD3-B6B73C4918E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"93944D77-B65B-48F4-9334-8FC9B1D96F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"48EBB869-87FB-4BFE-A177-2404B22B1997"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C507CA47-E346-4EA7-BEDA-052041D724E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"457276C8-6665-48C5-948C-E65E6309C0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"49101F2D-3347-40BC-A1F6-AD95A8F2A013"},{"vulnerable":true,"criteria":"cpe:2.3:a:popoon:popoon:*:*:*:*:*:*:*:*","versionEndIncluding":"r22196","matchCriteriaId":"6125A018-C255-4844-ABBA-A67F828FDF0B"}]}]}],"references":[{"url":"http://blog.liip.ch/missed-case-in-externalinput-php-resulting-in-viable-xss-attacks.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=horde-announce&m=122103888111491&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=122104360019867&w=2","source":"secalert@redhat.com"},{"url":"http://ocert.org/patches/2008-012/Text_Filter.31.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://ocert.org/patches/2008-012/Text_Filter.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://osvdb.org/47996","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31842","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4245","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-012.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/10/1","source":"secalert@redhat.com"},{"url":"http://www.phpmyfaq.de/advisory_2008-09-11.php","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/496182/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31107","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2548","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45031","source":"secalert@redhat.com"},{"url":"http://blog.liip.ch/missed-case-in-externalinput-php-resulting-in-viable-xss-attacks.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=horde-announce&m=122103888111491&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=122104360019867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ocert.org/patches/2008-012/Text_Filter.31.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://ocert.org/patches/2008-012/Text_Filter.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/47996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/10/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyfaq.de/advisory_2008-09-11.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3825","sourceIdentifier":"secalert@redhat.com","published":"2008-10-03T15:07:10.777","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance."},{"lang":"es","value":"pam_krb5 2.2.14 de Red Hat Enterprise Linux (RHEL) 5 y versiones anteriores, cuando la opción existing_ticket está activa, utiliza privilegios incorrectos cuando lee una caché de credenciales Kerberos, lo cual permite a usuarios locales conseguir privilegios mediante el establecimiento de la variable de entorno KRB5CCNAME en un nombre de fichero cacheado de su elección y ejecutar los programas (1) su o (2) sudo.\r\nNOTA: puede haber un vector relacionado con la participación de sshd que tiene una importancia limitada."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of pam_krb5 shipped in Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2017-09-28T21:31:52.727"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:unknown:server:*:*:*:*:*","matchCriteriaId":"13A37367-3CF4-4568-8072-6D6A43A94508"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:unknown:client:*:*:*:*:*","matchCriteriaId":"01FE5595-25D0-4D41-8A5F-8C1CB52CBAAC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32119","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32135","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32174","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43314","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:209","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0907.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31534","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020978","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461960","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45635","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10923","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00150.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00166.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0907.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3826","sourceIdentifier":"secalert@redhat.com","published":"2008-10-08T22:00:01.810","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Condor anterior a v7.0.5, permite a los atacantes ejecutar trabajos como si fueran otros usuarios, a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.4","matchCriteriaId":"BC1ED29E-B24F-4233-A506-38C078DA3A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D8E5E567-70BE-4C89-85BD-75BCA71D8DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C82D2C15-DFD1-40E0-86FC-F48263416AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B0C8D4B5-3A8A-42BA-8C9A-98989FA23A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EA32C2CA-B61F-449B-B90A-054AF177C296"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"03F817A5-9926-4AB5-8D25-8B68DC905B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"52BDAA46-4598-4DC2-8B1B-D85CBF649133"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:*","matchCriteriaId":"524D6F4F-4715-4F68-A069-87CDEF8BB5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:*","matchCriteriaId":"3219F472-97A7-4A8E-A45C-DBFB3E25AA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:*","matchCriteriaId":"EB2B77EF-FEC9-4433-8A15-5DF7F51B056D"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6B67DCD1-6A39-4E77-AE65-9FADD3A267FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"324BAB04-B03E-499C-B58D-320D14740606"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16892FC7-5870-45A8-ABFE-D8EE5A565FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C5E7E0F2-825E-4D21-A250-BEECBDDE3C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E6BB9D8-6394-4317-90DF-475DE0FF0567"}]}]}],"references":[{"url":"http://secunia.com/advisories/32189","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32193","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32232","source":"secalert@redhat.com"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31621","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021002","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3827","sourceIdentifier":"secalert@redhat.com","published":"2008-09-29T19:25:59.323","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory."},{"lang":"es","value":"Mútiples desbordamientos de entero en MPlayer v1.0_rc2 y anteriores permite a atacantes remotos provocar una denegación de servicio (finalización de proceso) y posiblemente ejecutar código de su elección mediante un fichero de vídeo manipulado que provoca que la función stream_read lea o escriba en una zona de memoria de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0_rc2","matchCriteriaId":"EED44566-2C43-48C4-BBFF-4FAFB64C96C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*","matchCriteriaId":"2AD73BA0-D315-4ADA-A942-8DCC2A920B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*","matchCriteriaId":"710ACCE6-B3E3-474A-B78B-5A123EC24DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*","matchCriteriaId":"55D3C3E6-862E-470E-8CEA-4B333B906172"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*","matchCriteriaId":"30D6A539-5523-4E52-854A-82CDCDBDFC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CA841B0B-8FA9-45F9-9B60-7C9BD1A92E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*","matchCriteriaId":"91907AEA-D84F-4DD9-AD22-41E563182FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"D200DE0F-D8BB-460D-928E-E59473F84B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*","matchCriteriaId":"5103A1E1-670A-4527-9FB8-9D8B0DA506D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"500E5BD7-3F17-455F-8463-50B145128873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"3BE4C532-1756-4B2E-94EE-8F8253281F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"0E6875BE-67F1-4E0E-A610-7B6EDBAB6431"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*","matchCriteriaId":"4E74EBC5-296E-4B20-8BCB-F104D06595AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"29A09BDA-DA05-4512-9E39-14819C410CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:*","matchCriteriaId":"A5650520-0CCA-47C1-A7B8-8A6129BE6B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:*","matchCriteriaId":"FD1FAB76-B1DB-400E-9224-09E82D9A8847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:*","matchCriteriaId":"D4D18950-F883-47D1-B95B-6F46F2F6F701"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre6:*:*:*:*:*:*:*","matchCriteriaId":"00928380-0E20-4678-98B7-18A634164F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7:*:*:*:*:*:*:*","matchCriteriaId":"A671EC1E-A917-4A9C-8254-7885FF612D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7try2:*:*:*:*:*:*:*","matchCriteriaId":"430103FB-6255-4581-A7DC-F218E5B86D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"83E84D8D-93DA-47C1-9282-E127CD1862E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32045","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32153","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4326","source":"secalert@redhat.com"},{"url":"http://svn.mplayerhq.hu/mplayer/trunk/libmpdemux/demux_real.c?r1=27314&r2=27675","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1644","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:219","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-013.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496806/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31473","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020952","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2703","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.mplayerhq.hu/mplayer/trunk/libmpdemux/demux_real.c?r1=27314&r2=27675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496806/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3828","sourceIdentifier":"secalert@redhat.com","published":"2008-10-08T22:00:01.887","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el demonio (daemon) condor_schedd de Condor anterior a v7.0.5; permite a los atacantes provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.4","matchCriteriaId":"BC1ED29E-B24F-4233-A506-38C078DA3A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D8E5E567-70BE-4C89-85BD-75BCA71D8DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C82D2C15-DFD1-40E0-86FC-F48263416AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B0C8D4B5-3A8A-42BA-8C9A-98989FA23A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EA32C2CA-B61F-449B-B90A-054AF177C296"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"03F817A5-9926-4AB5-8D25-8B68DC905B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"52BDAA46-4598-4DC2-8B1B-D85CBF649133"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:*","matchCriteriaId":"524D6F4F-4715-4F68-A069-87CDEF8BB5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:*","matchCriteriaId":"3219F472-97A7-4A8E-A45C-DBFB3E25AA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:*","matchCriteriaId":"EB2B77EF-FEC9-4433-8A15-5DF7F51B056D"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6B67DCD1-6A39-4E77-AE65-9FADD3A267FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"324BAB04-B03E-499C-B58D-320D14740606"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16892FC7-5870-45A8-ABFE-D8EE5A565FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C5E7E0F2-825E-4D21-A250-BEECBDDE3C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E6BB9D8-6394-4317-90DF-475DE0FF0567"}]}]}],"references":[{"url":"http://secunia.com/advisories/32189","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32193","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32232","source":"secalert@redhat.com"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31621","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021002","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3829","sourceIdentifier":"secalert@redhat.com","published":"2008-10-08T22:00:01.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el demonio (daemon) condor_ schedd de Condor anterior a v7.0.5, permite a los atacantes provocar una denegación de servicio (caída) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.4","matchCriteriaId":"BC1ED29E-B24F-4233-A506-38C078DA3A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D8E5E567-70BE-4C89-85BD-75BCA71D8DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C82D2C15-DFD1-40E0-86FC-F48263416AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B0C8D4B5-3A8A-42BA-8C9A-98989FA23A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EA32C2CA-B61F-449B-B90A-054AF177C296"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"03F817A5-9926-4AB5-8D25-8B68DC905B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"52BDAA46-4598-4DC2-8B1B-D85CBF649133"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:*","matchCriteriaId":"524D6F4F-4715-4F68-A069-87CDEF8BB5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:*","matchCriteriaId":"3219F472-97A7-4A8E-A45C-DBFB3E25AA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:*","matchCriteriaId":"EB2B77EF-FEC9-4433-8A15-5DF7F51B056D"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6B67DCD1-6A39-4E77-AE65-9FADD3A267FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"324BAB04-B03E-499C-B58D-320D14740606"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16892FC7-5870-45A8-ABFE-D8EE5A565FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C5E7E0F2-825E-4D21-A250-BEECBDDE3C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E6BB9D8-6394-4317-90DF-475DE0FF0567"}]}]}],"references":[{"url":"http://secunia.com/advisories/32189","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32193","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32232","source":"secalert@redhat.com"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31621","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021002","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3830","sourceIdentifier":"secalert@redhat.com","published":"2008-10-08T22:00:01.950","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions."},{"lang":"es","value":"Condor anterior a v7.0.5 no maneja adecuadamente cuando la configuración especifica un solapamiento de máscaras de red en las reglas de \"alow\" (permitir) o \"deny\" (denegar); esto provoca que se ignore la regla y permite a los atacantes evitar las restricciones de acceso pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.4","matchCriteriaId":"BC1ED29E-B24F-4233-A506-38C078DA3A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D8E5E567-70BE-4C89-85BD-75BCA71D8DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C82D2C15-DFD1-40E0-86FC-F48263416AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B0C8D4B5-3A8A-42BA-8C9A-98989FA23A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EA32C2CA-B61F-449B-B90A-054AF177C296"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"03F817A5-9926-4AB5-8D25-8B68DC905B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"52BDAA46-4598-4DC2-8B1B-D85CBF649133"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:*","matchCriteriaId":"524D6F4F-4715-4F68-A069-87CDEF8BB5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:*","matchCriteriaId":"3219F472-97A7-4A8E-A45C-DBFB3E25AA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:*","matchCriteriaId":"EB2B77EF-FEC9-4433-8A15-5DF7F51B056D"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6B67DCD1-6A39-4E77-AE65-9FADD3A267FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"324BAB04-B03E-499C-B58D-320D14740606"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16892FC7-5870-45A8-ABFE-D8EE5A565FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C5E7E0F2-825E-4D21-A250-BEECBDDE3C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E6BB9D8-6394-4317-90DF-475DE0FF0567"}]}]}],"references":[{"url":"http://secunia.com/advisories/32189","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32193","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32232","source":"secalert@redhat.com"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31621","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021002","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0911.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3831","sourceIdentifier":"secalert@redhat.com","published":"2008-10-20T17:59:26.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration."},{"lang":"es","value":"El driver i915 en (1) drivers/char/drm/i915_dma.c en el kernel v2.6.24 de Linux en Debian GNU/Linux y (2) sys/dev/pci/drm/i915_drv.c en OpenBSD no restringe el DRM_I915_HWS_ADDR ioctl al Direct Rendering Manager (DRM) master, lo cual permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) mediante una llamada ioctl manipulada, relacionado con la ausencia de los indicadores DRM_MASTER y DRM_ROOT_ONLY en la configuración de los ioctl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B7B30CD4-008C-4452-843C-EB5DB15FA7A2"},{"vulnerable":false,"criteria":"cpe:2.3:o:openbsd:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"C124BAFB-1DFF-4553-AF03-F758769FDDC6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/openbsd/cvs/2008-10/0365.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32315","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32386","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32709","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33182","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33586","source":"secalert@redhat.com"},{"url":"http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021065","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245846-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0316","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:224","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7%3Br2=1.8","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1017.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498285/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31792","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11542","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/openbsd/cvs/2008-10/0365.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.6.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245846-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/drm/i915_drv.c.diff?r1=1.7%3Br2=1.8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498285/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3832","sourceIdentifier":"secalert@redhat.com","published":"2008-10-03T17:41:40.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of service (NULL pointer dereference and system crash or hang) via a call to the utrace_control function."},{"lang":"es","value":"Cierto parche de Fedora en el subsistema utrace de Linux Kernel versiones anteriores a v2.6.26.5-28 de Fedora 8, y versiones anteriores a v2.6.26.5-45 de Fedora 9, permite a usuarios locales provocar una denegación de servicio (puntero de referencia NULL y caída o cuelgue del sistema) a través de la llamada a la función utrace_control."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of utrace as shipped with the Red Hat Enterprise Linux 5 kernel.","lastModified":"2017-08-07T21:32:11.843"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"C8E8256F-3FB6-45B2-8F03-02A61C10FAF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26.4","matchCriteriaId":"BC4F5B5A-0545-4238-BF3A-F6458C977992"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"D32A30CD-EA21-4AA6-868F-3448AA50B70D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26.4","matchCriteriaId":"BC4F5B5A-0545-4238-BF3A-F6458C977992"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]}],"references":[{"url":"http://kerneloops.org/oops.php?number=56705","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/02/1","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31536","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464883","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45644","source":"secalert@redhat.com"},{"url":"http://kerneloops.org/oops.php?number=56705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3833","sourceIdentifier":"secalert@redhat.com","published":"2008-10-03T17:41:40.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210."},{"lang":"es","value":"La función generic_file_splice_write de fs/splice.c en Linux kernel versiones anteriores a v2.6.19 no lanza correctamente bits setuid y setgid cuando hay una escritura a un fichero, lo cual permite a usuarios locales conseguir privilegios de un grupo diferente, y obtener información sensible o posiblemente tener otros impactos desconocidos, por la unión en un inodo con el fin de crear un archivo ejecutable en un directorio setgid, una vulnerabilidad diferente a CVE-2008-4210."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0957.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26.4","matchCriteriaId":"BC4F5B5A-0545-4238-BF3A-F6458C977992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.19.y.git%3Ba=commit%3Bh=8c34e2d63231d4bf4852bac8521883944d770fe3","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2008/10/03/1","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32237","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32485","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.19/ChangeLog-2.6.19-rc3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31567","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464450","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45922","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9980","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.19.y.git%3Ba=commit%3Bh=8c34e2d63231d4bf4852bac8521883944d770fe3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/10/03/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.19/ChangeLog-2.6.19-rc3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3834","sourceIdentifier":"secalert@redhat.com","published":"2008-10-07T21:01:52.150","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error."},{"lang":"es","value":"La función dbus_signature_validat en la librería D-bus (libdbus), versiones anteriores a 1.2.4, permite a los atacantes remotos causar una denegación de servicios (aplicación suspendida) a través de un mensaje que contiene una firma mal formada, el cual lanza un error assertion."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"F812F6E2-0AFD-43E7-B41B-E42A40F7B9B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1A2945FB-BDB8-49B7-BA9A-2BB390345FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0FE08E05-948A-4A9C-BA91-B2935355D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB0A3D5A-8823-4365-83B9-1E370C131F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6262F9B-30B5-4A7E-AC49-B9221B06CA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C2F4A579-8F26-47CF-9AE0-41334A9751AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E12E1141-5FE4-43BF-B3A0-DC45C593F880"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B04817C0-14A2-4B75-8747-691D48E70BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09C8C79E-AE58-48AE-89DB-E84637543783"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.9:*:*:*:*:*:*:*","matchCriteriaId":"ED4ECF06-79CC-4142-BE6A-AF4E1E981543"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.10:*:*:*:*:*:*:*","matchCriteriaId":"A87CC329-AF59-4882-82E1-851C4E0BB0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.11:*:*:*:*:*:*:*","matchCriteriaId":"9BDA4ACC-9166-491C-A8D4-A5418F3B0965"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.12:*:*:*:*:*:*:*","matchCriteriaId":"084A8212-B0FC-41BA-9532-080E8F92B949"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.13:*:*:*:*:*:*:*","matchCriteriaId":"0EB88CDF-0C71-4FE7-9210-C43EBE806416"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.20:*:*:*:*:*:*:*","matchCriteriaId":"0D84E94E-18EB-4276-AF55-2FB9850B08CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.21:*:*:*:*:*:*:*","matchCriteriaId":"0C6D0AAC-7F4B-48FF-9ACB-8C8844BDD722"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.22:*:*:*:*:*:*:*","matchCriteriaId":"5FD40B16-FF56-4C23-B8A9-D79433713F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23:*:*:*:*:*:*:*","matchCriteriaId":"C5A81FE8-37A0-46CE-AAA4-F00CF4122C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.1:*:*:*:*:*:*:*","matchCriteriaId":"D8815B87-7910-4E41-AB28-AEAD9F53475A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.2:*:*:*:*:*:*:*","matchCriteriaId":"DCEF7E9B-3F19-48CF-862B-B5935824A4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB32F7B-8616-40F5-8D94-4FC97F6AD958"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.31:*:*:*:*:*:*:*","matchCriteriaId":"4EC42FAD-C541-4D91-BDF6-62AA1C894B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.32:*:*:*:*:*:*:*","matchCriteriaId":"FAECF21B-68AF-47D8-9540-BB0001087881"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.33:*:*:*:*:*:*:*","matchCriteriaId":"30D0DE09-5F83-423B-AD86-033005D35994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.34:*:*:*:*:*:*:*","matchCriteriaId":"D6618ACC-B506-4A92-BE4F-346FAC29D24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35:*:*:*:*:*:*:*","matchCriteriaId":"BB406736-7185-4E0A-ACC6-4F79AB312FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35.1:*:*:*:*:*:*:*","matchCriteriaId":"18867CA7-E4AE-4312-A6E8-0CC514FCF063"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35.2:*:*:*:*:*:*:*","matchCriteriaId":"5C443F3D-5BD0-4E89-99F1-1BC0798666F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36:*:*:*:*:*:*:*","matchCriteriaId":"2DA75AB4-4ADF-4E42-8840-B044DC4D9FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36.1:*:*:*:*:*:*:*","matchCriteriaId":"D809A431-7BA6-4C9F-8644-33A14389B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36.2:*:*:*:*:*:*:*","matchCriteriaId":"732CD552-3E19-4389-B426-77D5B473866F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.50:*:*:*:*:*:*:*","matchCriteriaId":"1702AE33-38F4-40C5-B448-C863A7E95553"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.61:*:*:*:*:*:*:*","matchCriteriaId":"2392266A-BE81-4494-81C3-942ED56B0558"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.62:*:*:*:*:*:*:*","matchCriteriaId":"BCCA6868-E09D-4616-A9A8-EF63F20C981D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.90:*:*:*:*:*:*:*","matchCriteriaId":"60B6DA02-F08B-4ACE-8F93-F869467BC628"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.91:*:*:*:*:*:*:*","matchCriteriaId":"3B4E7E9B-722E-4EE1-A435-906DE07BEB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.92:*:*:*:*:*:*:*","matchCriteriaId":"BEF4902A-5598-42B7-8BB0-E9F8AB645D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8671706-FC4E-4485-945C-C397C80D859E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FA34903A-9D38-46FF-B702-D6BEECA96031"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"39753912-8A2D-49B0-B90B-43DAF723B34A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus1.0:rc1:*:*:*:*:*:*:*","matchCriteriaId":"FD645A12-104C-492E-88DF-564F5243908C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus1.0:rc2:*:*:*:*:*:*:*","matchCriteriaId":"C8155853-ABF6-44D0-AC28-F57A3F31674A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus1.0:rc3:*:*:*:*:*:*:*","matchCriteriaId":"6C7B4067-5BE5-49AE-8118-9E5D0A09BBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus1.1.0:*:*:*:*:*:*:*:*","matchCriteriaId":"B10EE142-34F2-4BF3-A51A-5A6741F6C2E2"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32127","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32230","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32281","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32385","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33396","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1658","source":"secalert@redhat.com"},{"url":"http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:213","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0008.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31602","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021063","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-653-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2762","source":"secalert@redhat.com"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=17803","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3834","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45701","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10253","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/7822","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00298.html","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-653-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=17803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-3834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00298.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3835","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.470","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"NOTE: Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail.","cveTags":[],"descriptions":[{"lang":"en","value":"The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors."},{"lang":"es","value":"La función nsXMLDocument::OnChannelRedirect en Firefox de Mozilla antes de 2.0.0.17, Thunderbird antes de 2.0.0.17 y SeaMonkey antes de 1.1.12 permite a atacantes remotos evitar \"Same Origin Policy (Política de Mismo Origen)\" y ejecutar código javaScript de su elección mediante desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"541E2386-4ABC-4CBA-9D50-7610590B4799"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"288192A0-8E52-4436-AA5E-6E01C5B98532"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"AE6342E9-1666-48EE-B097-7A3C67EB2ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-38.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020919","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=439034","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45347","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9643","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-38.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=439034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3836","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions."},{"lang":"es","value":"feedWriter en Firefox de Mozilla antes de 2.0.0.17 permite a atacantes remotos ejecutar secuencias de comandos con privilegios chrome mediante vectores relacionados con la previsualización feed y las funciones (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage y (5) _initSubscriptionUI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"541E2386-4ABC-4CBA-9D50-7610590B4799"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-39.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020914","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=360529","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430658","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45350","source":"secalert@redhat.com"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-39.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=360529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3837","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823."},{"lang":"es","value":"Firefox de Mozilla antes de 2.0.0.17 y 3.x antes de 3.0.2 y SeaMonkey antes de 1.1.12, permiten a atacantes remotos ayudados por el usuario mover una ventana durante un click de ratón y posiblemente forzar una descarga de archivos u otras acciones \"arrastrar y soltar\", mediante una acción onmousedown manipulada que llama a window.moveBy, una variante de CVE-2003-0823."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-40.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020922","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=329385","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45348","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9950","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-40.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=329385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3838","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of service."},{"lang":"es","value":"Vulnerabilidad no especificada en el NFS Remote Procedure Calls (RPC) implementación de zonas de Sun Solaris 10 y OpenSolaris anterior a snv_88, permite a administradores locales de zonas no-globales leer y modificar el tráfico NFS para zonas no-globales de su elección, puede que conlleve modificaciones de ficheros o una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","matchCriteriaId":"097D3A0C-8C75-4951-94C7-4C444DE2B0D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"snv_87","matchCriteriaId":"8E91702D-C83F-4B81-9E34-FF3ED6E4E842"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_87","matchCriteriaId":"C8ADBF33-5D95-41DA-84D2-F7E2DAEF9B09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_87","matchCriteriaId":"1A4BC7BD-80A6-4025-815A-CA187DAA7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:*:*:*:*:*:*","matchCriteriaId":"9E8A5A38-4864-4AD0-A8BA-A472AE4D7557"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:*:*:*:*:*:*","matchCriteriaId":"184AB738-8A6A-4619-A630-890925530818"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:*:*:*:*:*:*","matchCriteriaId":"A89BE592-11FD-46ED-B7F4-1930AAA5CCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:*:*:*:*:*:*","matchCriteriaId":"A45820A6-277B-492C-9E05-210B16E6BD5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:*:*:*:*:*:*","matchCriteriaId":"A5E40865-9B44-4CB4-B2F0-13A8CA0AD38C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:*:*:*:*:*:*","matchCriteriaId":"19094B1E-8496-4997-9AB1-A7F267DB1396"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:*:*:*:*:*:*","matchCriteriaId":"899768FF-7BBD-4128-8AC4-EB62686618CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:*:*:*:*:*:*","matchCriteriaId":"C0812CF1-08B3-4047-8B87-3B2D99D53AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:*:*:*:*:*:*","matchCriteriaId":"E1C7D0C8-898F-49DD-AB80-BF1EE3A7D1A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:*:*:*:*:*:*","matchCriteriaId":"E20E2BEC-AFB9-4527-B18A-BB6FE087DE8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:*:*:*:*:*:*","matchCriteriaId":"2483121B-6DAF-4367-8608-9E4BE25C263F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:*:*:*:*:*:*","matchCriteriaId":"9228C3DC-CF09-45D9-8D60-7861D29AB298"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:*:*:*:*:*:*","matchCriteriaId":"97E622C2-5727-40F0-AE5D-4F21F8DA20B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:*:*:*:*:*:*","matchCriteriaId":"D802C1F5-2ACC-46E1-B350-378CEEBDA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:*:*:*:*:*:*","matchCriteriaId":"40B6C721-3CED-46C3-9874-A6E985081C4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:*:*:*:*:*:*","matchCriteriaId":"2065BBE3-F0F9-4F7B-8828-0AD0491B67B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:*:*:*:*:*:*","matchCriteriaId":"FB17597F-DF89-431A-B7FB-C33E689A6901"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:*:*:*:*:*:*","matchCriteriaId":"47D688FA-7F88-4645-B3E5-830EF4C4FDAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:*:*:*:*:*:*","matchCriteriaId":"7FD6B880-B683-449E-9EA5-6FB1483EE309"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:*:*:*:*:*:*","matchCriteriaId":"F1D04C99-E0FD-4BB4-B651-9A9250633BB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:*:*:*:*:*:*","matchCriteriaId":"FC27EEDE-AE2F-427A-A035-AF790A65AAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:*:*:*:*:*:*","matchCriteriaId":"BD65532A-C083-462B-9FED-64051535E53E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:*:*:*:*:*:*","matchCriteriaId":"E71C245C-2E0A-423C-A0CE-AC15FDDE784F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:*:*:*:*:*:*","matchCriteriaId":"94B1C8EB-E9EB-4465-9BF9-545D1EF0C536"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:*:*:*:*:*:*","matchCriteriaId":"A2288FB2-5F26-41FB-A08D-90B168AD0F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:*:*:*:*:*:*","matchCriteriaId":"49AA677A-750B-4D05-869A-51981B2E2EC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:*:*:*:*:*:*","matchCriteriaId":"07F2BE5D-3D07-440F-8006-B74A8B718DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:*:*:*:*:*:*","matchCriteriaId":"894B4387-22CF-4DFA-ABDC-A89598D9DB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:*:*:*:*:*:*","matchCriteriaId":"9FB6A3F2-7152-4FEE-A3DC-D9926A3F8388"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:*:*:*:*:*:*","matchCriteriaId":"4314A1C4-8644-4096-9559-9CF4D5EAC39C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:*:*:*:*:*:*","matchCriteriaId":"90D6B309-746D-4306-8AD7-0D0968B02AEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:*:*:*:*:*:*","matchCriteriaId":"CB16CDAF-3C3B-4451-9458-D0E16271F37F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:*:*:*:*:*:*","matchCriteriaId":"C5B7225D-DC75-4E06-BE15-079556708B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:*:*:*:*:*:*","matchCriteriaId":"C6C2F6FC-F5D8-48DC-9CC9-5F82FD46603D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:*:*:*:*:*:*","matchCriteriaId":"CA5BFD2E-9D6F-4D5E-B86A-C25E142B5668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:*:*:*:*:*:*","matchCriteriaId":"F597A149-9187-48B1-AC77-357C87FEEF15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:*:*:*:*:*:*","matchCriteriaId":"BFAAC94D-6CEA-4B80-A9E8-959D8EB99E3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:*:*:*:*:*:*","matchCriteriaId":"FD73A336-77A2-4FB8-8A2E-EE2692886378"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:*:*:*:*:*:*","matchCriteriaId":"1109018C-B0A9-4752-8BB3-C94EC9B28F18"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:*:*:*:*:*:*","matchCriteriaId":"1235FD40-1FB9-4FD5-898B-CD6A3BA855F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:*:*:*:*:*:*","matchCriteriaId":"8D4C7956-A065-4114-8642-C8C9C1246957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:*:*:*:*:*:*","matchCriteriaId":"19CC57C8-DE9B-405E-83D2-FC63A4350772"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:*:*:*:*:*:*","matchCriteriaId":"4B2D3327-7239-4D4D-BF5F-A4B46900A331"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:*:*:*:*:*:*","matchCriteriaId":"E3D289A4-3043-4D14-8C64-EEE0D529B58F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:*:*:*:*:*:*","matchCriteriaId":"B9D3DD72-E560-449F-ABC9-D4DF91DD4F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:*:*:*:*:*:*","matchCriteriaId":"A50E9F3A-3B5B-4069-AF5F-E524C1253E7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:*:*:*:*:*:*","matchCriteriaId":"6558890D-704E-4C29-8AC5-E4B07034B713"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:*:*:*:*:*:*","matchCriteriaId":"3D4659A1-0FA9-4D08-9CBD-59C4F7A8004B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:*:*:*:*:*:*","matchCriteriaId":"216204D9-D216-442C-A6BE-C3D86E0A70A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:*:*:*:*:*:*","matchCriteriaId":"6DC9FB09-0F12-458A-9B99-414FAA9E2A1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:*:*:*:*:*:*","matchCriteriaId":"22E3FD68-C5F1-48F2-94C8-694395893A2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:*:*:*:*:*:*","matchCriteriaId":"27E32B20-3C72-4A0C-9971-8BB719851C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:*:*:*:*:*:*","matchCriteriaId":"91ED6A1F-54EB-4A2E-A157-ADFE6681521A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:*:*:*:*:*:*","matchCriteriaId":"E1834E45-86DA-47ED-8D00-001714D66B2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:*:*:*:*:*:*","matchCriteriaId":"C06E3C22-3FE5-4995-BE51-BEFB567536E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:*:*:*:*:*:*","matchCriteriaId":"B313A3DA-24DF-414F-BEEC-D5AF2B7ED31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:*:*:*:*:*:*","matchCriteriaId":"45015A0D-3CC7-47D2-8F56-9945315D68CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:*:*:*:*:*:*","matchCriteriaId":"10277E95-F2E4-4398-9DC7-9B854EE8D25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:*:*:*:*:*:*","matchCriteriaId":"86AC01EC-1EC1-428F-B7A4-3D5582AD2C52"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:*:*:*:*:*:*","matchCriteriaId":"953C1410-DB77-4250-B1DF-364FCAFDA2B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:*:*:*:*:*:*","matchCriteriaId":"9FD5C5C6-0047-4261-AC29-A3BDF5287C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:*:*:*:*:*:*","matchCriteriaId":"F428B518-6D1A-4F1A-A62C-44CC8CFDF3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:*:*:*:*:*:*","matchCriteriaId":"65A0F545-87B5-4733-8222-A99D2C968C7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:*:*:*:*:*:*","matchCriteriaId":"E9206F3B-8360-42D4-A567-EE2C57F3C2F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:*:*:*:*:*:*","matchCriteriaId":"D255FFED-0229-4336-AED4-B7D6E5746F54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:*:*:*:*:*:*","matchCriteriaId":"D7721527-B8D5-4346-B4DC-08D09AAC9E64"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:*:*:*:*:*:*","matchCriteriaId":"CAEA2E4D-49CB-4696-B878-882468340DAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:*:*:*:*:*:*","matchCriteriaId":"0D86A5C5-5584-428A-88B1-CD3EE634FF8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:*:*:*:*:*:*","matchCriteriaId":"86330112-84C7-457C-A7B3-619AC189D593"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:*:*:*:*:*:*","matchCriteriaId":"0F3B0C6E-23A5-4226-BB22-7A8470DC3724"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:*:*:*:*:*:*","matchCriteriaId":"FB311723-F2F3-4C85-831C-E3E2CC19703C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:*:*:*:*:*:*","matchCriteriaId":"416918A4-F37E-445E-B58F-7D4B1B90D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:*:*:*:*:*:*","matchCriteriaId":"5B10A4DE-2FAD-4ACA-8253-4370A274181D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:*:*:*:*:*:*","matchCriteriaId":"4DABACD4-EDD5-4BAA-AB12-3AC1A840E7D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:*:*:*:*:*:*","matchCriteriaId":"77CF9CE4-3FF6-427D-87B7-61581FBCAFE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:*:*:*:*:*:*","matchCriteriaId":"5F614E40-6C58-48E2-803D-AEDB03C70810"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:*:*:*:*:*:*","matchCriteriaId":"EDB8A628-4BA9-41EF-B336-D5DB21896494"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:*:*:*:*:*:*","matchCriteriaId":"C5197527-068E-4D9B-BDDC-453553649440"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:*:*:*:*:*:*","matchCriteriaId":"2163BC71-6BA6-4E5F-A193-9DB1E533E06B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:*:*:*:*:*:*","matchCriteriaId":"8F58CF3B-3216-456C-B15A-B84A547A7A34"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:*:*:*:*:*:*","matchCriteriaId":"549CB843-1C1A-4BD2-AA9D-A23EC0DAF413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:*:*:*:*:*:*","matchCriteriaId":"26F3057D-3B2F-4FCD-80D2-DD0A6AE60657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:*:*:*:*:*:*","matchCriteriaId":"B311263F-F3E2-4AE3-81A0-26516605E74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:*:*:*:*:*:*","matchCriteriaId":"C6B920FE-4D5C-49D3-BC3B-C519A368F127"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:*:*:*:*:*:*","matchCriteriaId":"5FE64FFA-2F99-4980-9F8B-16F30314039F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:*:*:*:*:*:*","matchCriteriaId":"5F7055FB-744F-4400-84DC-628A962A721A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31622","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240866-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30853","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020752","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2441","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44696","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240866-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3839","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo NFS del kernel de Sun Solaris 10 y OpenSolaris de snv_59 a snv_87, cuando está configurado como servidor NFS si la opción nodevices, permite a usuarios locales provocar una denegación de servicio (pánico) mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","matchCriteriaId":"097D3A0C-8C75-4951-94C7-4C444DE2B0D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_87","matchCriteriaId":"C8ADBF33-5D95-41DA-84D2-F7E2DAEF9B09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_87","matchCriteriaId":"1A4BC7BD-80A6-4025-815A-CA187DAA7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:*:*:*:*:*:*","matchCriteriaId":"86AC01EC-1EC1-428F-B7A4-3D5582AD2C52"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:*:*:*:*:*:*","matchCriteriaId":"953C1410-DB77-4250-B1DF-364FCAFDA2B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:*:*:*:*:*:*","matchCriteriaId":"9FD5C5C6-0047-4261-AC29-A3BDF5287C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:*:*:*:*:*:*","matchCriteriaId":"F428B518-6D1A-4F1A-A62C-44CC8CFDF3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:*:*:*:*:*:*","matchCriteriaId":"65A0F545-87B5-4733-8222-A99D2C968C7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:*:*:*:*:*:*","matchCriteriaId":"E9206F3B-8360-42D4-A567-EE2C57F3C2F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:*:*:*:*:*:*","matchCriteriaId":"D255FFED-0229-4336-AED4-B7D6E5746F54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:*:*:*:*:*:*","matchCriteriaId":"D7721527-B8D5-4346-B4DC-08D09AAC9E64"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:*:*:*:*:*:*","matchCriteriaId":"CAEA2E4D-49CB-4696-B878-882468340DAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:*:*:*:*:*:*","matchCriteriaId":"0D86A5C5-5584-428A-88B1-CD3EE634FF8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:*:*:*:*:*:*","matchCriteriaId":"86330112-84C7-457C-A7B3-619AC189D593"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:*:*:*:*:*:*","matchCriteriaId":"0F3B0C6E-23A5-4226-BB22-7A8470DC3724"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:*:*:*:*:*:*","matchCriteriaId":"FB311723-F2F3-4C85-831C-E3E2CC19703C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:*:*:*:*:*:*","matchCriteriaId":"416918A4-F37E-445E-B58F-7D4B1B90D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:*:*:*:*:*:*","matchCriteriaId":"5B10A4DE-2FAD-4ACA-8253-4370A274181D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:*:*:*:*:*:*","matchCriteriaId":"4DABACD4-EDD5-4BAA-AB12-3AC1A840E7D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:*:*:*:*:*:*","matchCriteriaId":"77CF9CE4-3FF6-427D-87B7-61581FBCAFE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:*:*:*:*:*:*","matchCriteriaId":"5F614E40-6C58-48E2-803D-AEDB03C70810"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:*:*:*:*:*:*","matchCriteriaId":"EDB8A628-4BA9-41EF-B336-D5DB21896494"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:*:*:*:*:*:*","matchCriteriaId":"C5197527-068E-4D9B-BDDC-453553649440"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:*:*:*:*:*:*","matchCriteriaId":"2163BC71-6BA6-4E5F-A193-9DB1E533E06B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:*:*:*:*:*:*","matchCriteriaId":"8F58CF3B-3216-456C-B15A-B84A547A7A34"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:*:*:*:*:*:*","matchCriteriaId":"549CB843-1C1A-4BD2-AA9D-A23EC0DAF413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:*:*:*:*:*:*","matchCriteriaId":"26F3057D-3B2F-4FCD-80D2-DD0A6AE60657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:*:*:*:*:*:*","matchCriteriaId":"B311263F-F3E2-4AE3-81A0-26516605E74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:*:*:*:*:*:*","matchCriteriaId":"C6B920FE-4D5C-49D3-BC3B-C519A368F127"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:*:*:*:*:*:*","matchCriteriaId":"5FE64FFA-2F99-4980-9F8B-16F30314039F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:*:*:*:*:*:*","matchCriteriaId":"5F7055FB-744F-4400-84DC-628A962A721A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:*:*:*:*:*:*","matchCriteriaId":"CCEB7375-7C2C-4A7C-BC46-552CBC16E8F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31598","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241066-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-369.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30810","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020751","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2425","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44631","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241066-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-369.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3840","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"Crafty Syntax Live Help (CSLH) 2.14.6 y anteriores, almacena las contraseñas como texto sin cifrar en una base de datos MySQL, lo que permite a atacantes, dependiendo del contexto, obtener información sensible.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.6","matchCriteriaId":"B5FB9AC4-B63B-44C6-8772-458C23D19D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BBE656C4-BF6A-42BD-8303-EC73817F7A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66D60B2A-4DAB-4C2B-B2DB-26FF04716FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FC075169-3A70-4123-8D3C-A26E5344A648"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.3:*:*:*:*:*:*:*","matchCriteriaId":"40852B54-1F4F-48BA-94BA-A92DF520A0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.4:*:*:*:*:*:*:*","matchCriteriaId":"97EEE612-EC04-4DB5-B82C-EE2E53F5036F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.5:*:*:*:*:*:*:*","matchCriteriaId":"321CAE6E-7697-4990-8132-5A4C02C8D41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4AD1E1F-8632-4255-9E24-C06B845C52DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.7:*:*:*:*:*:*:*","matchCriteriaId":"1E8A2C64-2F80-4CFB-9338-510C0B3667C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA1A4C95-B276-4763-97AC-FCD0630F3CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C6CCE39-65AC-4E0D-8DAB-7ED07B3ACC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D0127C4-1603-45D3-AE3F-E7F0AABCA626"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B64DC109-8D4E-4852-A85C-60E79F9E244C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.4:*:*:*:*:*:*:*","matchCriteriaId":"AC0BA803-F687-47A3-95D2-C7243375A9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.5:*:*:*:*:*:*:*","matchCriteriaId":"09F3FE2C-42D0-4F97-9B4A-1AA6C2A18892"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.6:*:*:*:*:*:*:*","matchCriteriaId":"400EED1A-D9F5-4ABF-858C-B4B5055617BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4901C1B7-4346-4901-8678-EF14A256A5E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"DE1EE21C-5453-42A6-B67E-41C615749F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5EBF8209-0B88-4127-BED5-015C13E78584"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"460546C3-8EF1-42BC-8A70-787DA47DB678"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"1548138D-488B-4DF8-874C-088E345CDEB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"3A1B7E40-F6B2-4BE3-80D2-4DC8A126D8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"0B93216D-1000-49DA-8DB1-C88CD39E5EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6782CFF4-2085-4040-A749-CE73018F3818"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7E06B637-EF51-47AD-8139-75DEBFD0B336"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2DE48C65-AA6C-4C00-B2B8-BF32C649C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A3B9B425-AED6-4058-8EDD-0CC52D7EDBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"D0302CA5-845C-4AF1-9AA4-1F46F3AC16D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EA485DBB-85FD-4F04-96C2-6182119C35C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"C218C635-E957-4950-8E8B-3D481198813F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"25D33DF5-2193-4183-826D-ACE368FA398D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"732122E8-3FB8-4A06-9A90-9071608699AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.6:*:*:*:*:*:*:*","matchCriteriaId":"E16B2924-BAE6-412F-8C13-EBAE2445F45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"EE2B995F-FA4C-42EA-A2FF-63AB73D85F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.8:*:*:*:*:*:*:*","matchCriteriaId":"4DA31449-43D6-4443-B1BF-778F87F1778F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"0C88102A-C1AE-4523-B6A1-EBA336D0E79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF401FE-7A2C-4BFB-91F3-5E777E48C662"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"F5BA9819-BFBC-47FD-945C-BB6EFE69B249"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"3B2A4737-8606-4D01-801B-7ABF238CC15B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"D412260D-7FBC-4E7C-B9C8-91A84DB8323D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"8D86D4D3-8123-45DB-A973-88C06E88BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"4476BDE7-4BE7-405A-94B3-033F3C63A3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"83D333B9-C879-46CB-849F-F587D8C582C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"ADCEC7D1-CE54-4E3C-8366-BF8CC52AD7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"02D7A972-D4F9-477B-B084-4C7C2693CAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"7F31A5C9-EF8A-43AD-A1B1-B086B191D9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"D4789831-8986-4320-AB8C-55D2C56E1D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"EFE6075D-9A55-4404-A1CE-057E8CC52F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"5E7A9AA0-9705-468E-B074-FB237C0F3812"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF8C79BA-D9F1-47FA-B41E-6B027FEC4EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"D2F505F6-68CC-40F2-B057-F7E438A59DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3FFA0A-4FA7-421E-81A7-BA1745254CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.3:*:*:*:*:*:*:*","matchCriteriaId":"FEC16207-23C9-4B3F-990D-F75A19C4A18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.4:*:*:*:*:*:*:*","matchCriteriaId":"A5222A77-77DB-44AE-BA86-328E81B20CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.5:*:*:*:*:*:*:*","matchCriteriaId":"5651E8F4-F1E4-4D5C-BD2B-3ED3CB12AC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.6:*:*:*:*:*:*:*","matchCriteriaId":"ED915AA1-0EEF-4CCC-BD6B-72C2FD7CB062"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.7:*:*:*:*:*:*:*","matchCriteriaId":"83EDB136-73AA-490A-9127-3BE58DC0BF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF50AD2-A709-43CE-B4AA-9B83796086B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.9:*:*:*:*:*:*:*","matchCriteriaId":"2DCC24DA-89F4-4CB4-BEAD-DE190FD43733"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.0:*:*:*:*:*:*:*","matchCriteriaId":"1B7FCE7C-005F-416C-8D50-67E6BD468990"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF70D7A-0F6E-4E4E-AD6C-08306AC5F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.0:*:*:*:*:*:*:*","matchCriteriaId":"7135EADC-BBAE-44FC-87B2-5522D4F8DE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"B41549BB-EFC4-44C6-B655-F20DED3B8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"400412F2-7DF0-4639-B199-887576BCD2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"7B1DF873-246E-4784-8E45-80E67C215AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"3E0CAAB8-2537-4931-A860-AF24B25C130D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"6086FB69-0DF4-4F72-A0CF-B3C2BC575361"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4192","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44745","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3841","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the search_link parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/search_links.php de Freeway eCommerce 1.4.1.171 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro search_link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1.171:*:*:*:*:*:*:*","matchCriteriaId":"C74596B7-B092-4FC9-B6C0-0A2877E81420"}]}]}],"references":[{"url":"http://secunia.com/advisories/31475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4181","source":"cve@mitre.org"},{"url":"http://www.openfreeway.org/download/change-log.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495549/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openfreeway.org/download/change-log.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495549/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3842","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a \"</\" (less-than slash) sequence."},{"lang":"es","value":"Validación de la petición (también conocido como los filtros ValidateRequest) en ASP.NET de Microsoft .NET Framework sin la actualización MS07-040 no detecta correctamente entradas de cliente peligrosas, lo cual permite a atacantes remotos llevar a cabo un ataque de secuencia de comandos en sitios cruzados (XSS), como lo demostrado por una cadena de consulta que contiene una secuencia \"</\" (menos-que barra invertida)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:gold:server_x64:*:*:*:*:*","matchCriteriaId":"6B0F7775-1068-4A05-91FC-E1F6634F855A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server:*:*:*:*:*","matchCriteriaId":"9B437168-290C-460E-AF10-BB373054856B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server_itanium:*:*:*:*:*","matchCriteriaId":"9929BFAC-3FFC-4836-B8D5-2947BC6B496E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server:*:*:*:*:*","matchCriteriaId":"D76A280A-3E99-4A58-94D7-F92F8A9414D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_itanium:*:*:*:*:*","matchCriteriaId":"1BCA8432-4F15-40FB-AC89-8F26AE1EFE32"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_x64:*:*:*:*:*","matchCriteriaId":"F538C690-E6B0-4F50-9306-28FA55B4F8EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:x64:*:*:*:*:*","matchCriteriaId":"55F983ED-1270-4CF5-8DD1-006899EAE892"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A419F50E-F32C-461C-95D0-978C5351FBAA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:gold:server_x64:*:*:*:*:*","matchCriteriaId":"6B0F7775-1068-4A05-91FC-E1F6634F855A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server:*:*:*:*:*","matchCriteriaId":"9B437168-290C-460E-AF10-BB373054856B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server_itanium:*:*:*:*:*","matchCriteriaId":"9929BFAC-3FFC-4836-B8D5-2947BC6B496E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server:*:*:*:*:*","matchCriteriaId":"D76A280A-3E99-4A58-94D7-F92F8A9414D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_itanium:*:*:*:*:*","matchCriteriaId":"1BCA8432-4F15-40FB-AC89-8F26AE1EFE32"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_x64:*:*:*:*:*","matchCriteriaId":"F538C690-E6B0-4F50-9306-28FA55B4F8EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*","matchCriteriaId":"59F8A83B-899C-47CE-B444-E8B4AC7723C7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:x64:*:*:*:*:*","matchCriteriaId":"55F983ED-1270-4CF5-8DD1-006899EAE892"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:gold:server_x64:*:*:*:*:*","matchCriteriaId":"6B0F7775-1068-4A05-91FC-E1F6634F855A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server:*:*:*:*:*","matchCriteriaId":"9B437168-290C-460E-AF10-BB373054856B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server_itanium:*:*:*:*:*","matchCriteriaId":"9929BFAC-3FFC-4836-B8D5-2947BC6B496E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server:*:*:*:*:*","matchCriteriaId":"D76A280A-3E99-4A58-94D7-F92F8A9414D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_itanium:*:*:*:*:*","matchCriteriaId":"1BCA8432-4F15-40FB-AC89-8F26AE1EFE32"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_x64:*:*:*:*:*","matchCriteriaId":"F538C690-E6B0-4F50-9306-28FA55B4F8EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:media_center_2005:*:*:*:*:*","matchCriteriaId":"1D07E13E-659F-480C-B8BA-F62D4B9B5234"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:tablet_pc_2005:*:*:*:*:*","matchCriteriaId":"59E405A0-8A83-4003-9398-4DDCB28BBAAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:x64:*:*:*:*:*","matchCriteriaId":"55F983ED-1270-4CF5-8DD1-006899EAE892"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4193","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495667/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44741","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495667/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3843","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a \"<~/\" (less-than tilde slash) sequence followed by a crafted STYLE element."},{"lang":"es","value":"Request Validation (tambien conocida como filtros ValidateRequest) en ASP.NET de Microsoft .NET Framework con la actualización  MS07-040, no detecta de forma adecuada las entradas peligrosas de clientes, lo que permite a atacantes, conducir ataques de secuencias de comandos en sitios cruzados (XSS) como se demostró mediante una petición que contenía la cadena \"<~/\" (menor que, tilde y barra) seguida de un elemento STYLE manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:gold:server_x64:*:*:*:*:*","matchCriteriaId":"6B0F7775-1068-4A05-91FC-E1F6634F855A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server:*:*:*:*:*","matchCriteriaId":"9B437168-290C-460E-AF10-BB373054856B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server_itanium:*:*:*:*:*","matchCriteriaId":"9929BFAC-3FFC-4836-B8D5-2947BC6B496E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server:*:*:*:*:*","matchCriteriaId":"D76A280A-3E99-4A58-94D7-F92F8A9414D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_itanium:*:*:*:*:*","matchCriteriaId":"1BCA8432-4F15-40FB-AC89-8F26AE1EFE32"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_x64:*:*:*:*:*","matchCriteriaId":"F538C690-E6B0-4F50-9306-28FA55B4F8EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:media_center_2005:*:*:*:*:*","matchCriteriaId":"1D07E13E-659F-480C-B8BA-F62D4B9B5234"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:tablet_pc_2005:*:*:*:*:*","matchCriteriaId":"59E405A0-8A83-4003-9398-4DDCB28BBAAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:x64:*:*:*:*:*","matchCriteriaId":"55F983ED-1270-4CF5-8DD1-006899EAE892"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:gold:server_x64:*:*:*:*:*","matchCriteriaId":"6B0F7775-1068-4A05-91FC-E1F6634F855A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server:*:*:*:*:*","matchCriteriaId":"9B437168-290C-460E-AF10-BB373054856B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server_itanium:*:*:*:*:*","matchCriteriaId":"9929BFAC-3FFC-4836-B8D5-2947BC6B496E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server:*:*:*:*:*","matchCriteriaId":"D76A280A-3E99-4A58-94D7-F92F8A9414D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_itanium:*:*:*:*:*","matchCriteriaId":"1BCA8432-4F15-40FB-AC89-8F26AE1EFE32"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_x64:*:*:*:*:*","matchCriteriaId":"F538C690-E6B0-4F50-9306-28FA55B4F8EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:*:*:*:*:*:*","matchCriteriaId":"ABC3CA16-2694-4C05-A404-029DB179C47D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*","matchCriteriaId":"59F8A83B-899C-47CE-B444-E8B4AC7723C7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*","matchCriteriaId":"2B89E436-C99E-4F68-AADD-E5980B346E95"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:vista:sp1:x64:*:*:*:*:*","matchCriteriaId":"C52FFD3E-195E-4A61-9789-AF5A3EFB3A62"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:x64:*:*:*:*:*","matchCriteriaId":"55F983ED-1270-4CF5-8DD1-006899EAE892"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:gold:server_x64:*:*:*:*:*","matchCriteriaId":"6B0F7775-1068-4A05-91FC-E1F6634F855A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server:*:*:*:*:*","matchCriteriaId":"9B437168-290C-460E-AF10-BB373054856B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp1:server_itanium:*:*:*:*:*","matchCriteriaId":"9929BFAC-3FFC-4836-B8D5-2947BC6B496E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server:*:*:*:*:*","matchCriteriaId":"D76A280A-3E99-4A58-94D7-F92F8A9414D2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_itanium:*:*:*:*:*","matchCriteriaId":"1BCA8432-4F15-40FB-AC89-8F26AE1EFE32"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:2003:sp2:server_x64:*:*:*:*:*","matchCriteriaId":"F538C690-E6B0-4F50-9306-28FA55B4F8EB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:gold:x64:*:*:*:*:*","matchCriteriaId":"55F983ED-1270-4CF5-8DD1-006899EAE892"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"73AED29E-B778-4186-8968-EB608E34E540"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A419F50E-F32C-461C-95D0-978C5351FBAA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4193","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/Vulnerability_PR08-20.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495667/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496071/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44743","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/PDFs/bypassing-dot-NET-ValidateRequest.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/Vulnerability_PR08-20.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495667/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3844","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T20:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"This alert is primarily for those who may obtain Red Hat binary \r\npackages via channels other than those of official Red Hat subscribers.  Packages obtained by Red Hat Enterprise Linux subscribers via Red Hat Network are not at risk. \r\n\r\nRedhat has provided a shell script which lists the affected packages and can verify that none of them are installed on a system at the following location:\r\n\r\nhttps://www.redhat.com/security/data/openssh-blacklist-1.0.sh","cveTags":[],"descriptions":[{"lang":"en","value":"Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact.  NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points.  As of 20080827, no unofficial distributions of this software are known."},{"lang":"es","value":"Ciertos paquetes Red Hat Enterprise Linux (RHEL) 4 y 5 para OpenSSH, como fueron firmados en agosto de 2008 usando una clave Red Hat GPG legítima, contienen una modificación introducida externamente (Trojan Horse) que permite a los autores de los paquetes tener un impacto desconocido. NOTA: como los paquetes maliciosos no fueron distribuidos por ninguna fuente Red Hat oficial, el impacto de este problema está restringido a usuarios que pudieran haber obtenido estos paquetes a través de puntos de distribución no oficiales. Como en 20080827, los distribuidores no oficiales de este software son conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.5.z:*:as:*:*:*:*:*","matchCriteriaId":"9E17C039-50DC-487F-B800-8694C2E733FA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.5.z:*:es:*:*:*:*:*","matchCriteriaId":"B380DA56-B6E4-4735-A66C-EE29B56D7A52"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4:*:*:*:*:*:*:*","matchCriteriaId":"D986CAD0-F4E0-4F97-B240-8967CD4466FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*","matchCriteriaId":"AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","matchCriteriaId":"C6D7D468-C829-4A4E-8865-E62D8EC5E274"}]}]}],"references":[{"url":"http://secunia.com/advisories/31575","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32241","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020730","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/security/data/openssh-blacklist.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0855.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/30794","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2821","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44747","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/security/data/openssh-blacklist.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0855.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/30794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3845","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Crafty Syntax Live Help (CSLH) 2.14.6 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro department de (1) is_xmlhttp.php and (2) is_flush.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.6","matchCriteriaId":"B5FB9AC4-B63B-44C6-8772-458C23D19D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BBE656C4-BF6A-42BD-8303-EC73817F7A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66D60B2A-4DAB-4C2B-B2DB-26FF04716FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FC075169-3A70-4123-8D3C-A26E5344A648"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.3:*:*:*:*:*:*:*","matchCriteriaId":"40852B54-1F4F-48BA-94BA-A92DF520A0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.4:*:*:*:*:*:*:*","matchCriteriaId":"97EEE612-EC04-4DB5-B82C-EE2E53F5036F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.5:*:*:*:*:*:*:*","matchCriteriaId":"321CAE6E-7697-4990-8132-5A4C02C8D41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4AD1E1F-8632-4255-9E24-C06B845C52DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.7:*:*:*:*:*:*:*","matchCriteriaId":"1E8A2C64-2F80-4CFB-9338-510C0B3667C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA1A4C95-B276-4763-97AC-FCD0630F3CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C6CCE39-65AC-4E0D-8DAB-7ED07B3ACC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"0C88102A-C1AE-4523-B6A1-EBA336D0E79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF401FE-7A2C-4BFB-91F3-5E777E48C662"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"F5BA9819-BFBC-47FD-945C-BB6EFE69B249"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"3B2A4737-8606-4D01-801B-7ABF238CC15B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"D412260D-7FBC-4E7C-B9C8-91A84DB8323D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"8D86D4D3-8123-45DB-A973-88C06E88BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"4476BDE7-4BE7-405A-94B3-033F3C63A3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"83D333B9-C879-46CB-849F-F587D8C582C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"ADCEC7D1-CE54-4E3C-8366-BF8CC52AD7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"02D7A972-D4F9-477B-B084-4C7C2693CAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"7F31A5C9-EF8A-43AD-A1B1-B086B191D9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"D4789831-8986-4320-AB8C-55D2C56E1D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"EFE6075D-9A55-4404-A1CE-057E8CC52F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"5E7A9AA0-9705-468E-B074-FB237C0F3812"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF8C79BA-D9F1-47FA-B41E-6B027FEC4EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"D2F505F6-68CC-40F2-B057-F7E438A59DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3FFA0A-4FA7-421E-81A7-BA1745254CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.3:*:*:*:*:*:*:*","matchCriteriaId":"FEC16207-23C9-4B3F-990D-F75A19C4A18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.4:*:*:*:*:*:*:*","matchCriteriaId":"A5222A77-77DB-44AE-BA86-328E81B20CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.5:*:*:*:*:*:*:*","matchCriteriaId":"5651E8F4-F1E4-4D5C-BD2B-3ED3CB12AC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.6:*:*:*:*:*:*:*","matchCriteriaId":"ED915AA1-0EEF-4CCC-BD6B-72C2FD7CB062"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.7:*:*:*:*:*:*:*","matchCriteriaId":"83EDB136-73AA-490A-9127-3BE58DC0BF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF50AD2-A709-43CE-B4AA-9B83796086B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.9:*:*:*:*:*:*:*","matchCriteriaId":"2DCC24DA-89F4-4CB4-BEAD-DE190FD43733"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.0:*:*:*:*:*:*:*","matchCriteriaId":"1B7FCE7C-005F-416C-8D50-67E6BD468990"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF70D7A-0F6E-4E4E-AD6C-08306AC5F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.0:*:*:*:*:*:*:*","matchCriteriaId":"7135EADC-BBAE-44FC-87B2-5522D4F8DE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"B41549BB-EFC4-44C6-B655-F20DED3B8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"400412F2-7DF0-4639-B199-887576BCD2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"7B1DF873-246E-4784-8E45-80E67C215AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"3E0CAAB8-2537-4931-A860-AF24B25C130D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"6086FB69-0DF4-4F72-A0CF-B3C2BC575361"}]}]}],"references":[{"url":"http://secunia.com/advisories/31573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.craftysyntax.com/updates/?v=2.14.6","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/4192","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=620878","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30825","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6307","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.craftysyntax.com/updates/?v=2.14.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/4192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=620878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3846","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mysql-lists 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en mysql-lists 1.2 y versiones anteriores permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aquagardensoft:mysql-lists:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"8DF6D1F1-993E-40CF-A0A8-20265C93A2FA"}]}]}],"references":[{"url":"http://aqua.sun.ddns.vc/free/php_script/mysql.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN27417220/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31611","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30835","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44662","source":"cve@mitre.org"},{"url":"http://aqua.sun.ddns.vc/free/php_script/mysql.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN27417220/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3847","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AN Guestbook (ANG) before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AN Guestbook (ANG) versiones anteriores a 0.7.6 permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.5","matchCriteriaId":"679F3FCA-15C1-4394-A0CF-2FED86DD0200"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.1:*:*:*:*:*:*:*","matchCriteriaId":"18825A3B-2515-4BAB-8EAB-9F5A4CEF04E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.2:*:*:*:*:*:*:*","matchCriteriaId":"B990F402-C1BA-4B62-ADDC-E7D309820874"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6DB46727-B16F-4FE6-81EE-B7E29BEB019E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9B8025DE-80DE-4D53-8011-F4892311A794"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E7680F3C-617B-49DA-9FFA-DE684881B890"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFD5643-E462-4650-A10F-4CEF78118C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"740BCD92-584A-4271-815B-E79B0DA4A50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.4:*:*:*:*:*:*:*","matchCriteriaId":"31FF7A7A-CA8C-4132-9CB7-085A963F0917"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"397D0007-9BA9-4CDF-855E-075847823C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"2EE7A233-6304-4D52-A94D-4DFA7EF17C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.5:*:*:*:*:*:*:*","matchCriteriaId":"867B58C9-CC65-435F-A56F-A1702F5D634C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E662EFE5-7E3F-46BF-BB9C-8CD5903D704E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.7:*:*:*:*:*:*:*","matchCriteriaId":"BDB1E108-8904-4667-8DE4-27A871B8DF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:aguestbook:an_guestbook:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"70AACB1D-E687-4FBD-B726-5CC3AA118CE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=860304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30830","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44671","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=860304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3848","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en single.php de Z-Breaknews 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdesigner:z-breaknews:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A32E7CC5-6156-403B-A21E-22E61056E437"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30831","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44675","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6309","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3849","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fields."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el controlador de calendario de Civic Website Manager anterior a 1.0.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados, probablemente afecta a los campos: (1) mes, (2) día y (3) año."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:civic-cms:civic-cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"0AD70A50-D470-4772-8DE5-496BC86B1153"}]}]}],"references":[{"url":"http://secunia.com/advisories/31609","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31641","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=234663&release_id=621954","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30833","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=234663&release_id=621954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3850","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to courier/forgot_password.html."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Accellion File Transfer FTA_7_0_135 permite a atacantes remotos inyectar web script o HTML a través de PATH_INFO de courier/forgot_password.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_135:*:*:*:*:*:*:*","matchCriteriaId":"59DB02D8-8C89-48C6-9365-1AA8FEB88C15"}]}]}],"references":[{"url":"http://secunia.com/advisories/31572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30796","source":"cve@mitre.org"},{"url":"http://zebux.free.fr/pub/Advisory/Advisory_Accellion_XSS_Vulnerability_200808.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zebux.free.fr/pub/Advisory/Advisory_Accellion_XSS_Vulnerability_200808.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3851","sourceIdentifier":"cve@mitre.org","published":"2008-08-27T23:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\\ (dot dot backslash) in the (1) blogpost, (2) cat, and (3) file parameters to data/inc/themes/predefined_variables.php, as reachable through index.php; and the (4) blogpost and (5) cat parameters to data/inc/blog_include_react.php, as reachable through index.php.  NOTE: the issue involving vectors 1 through 3 reportedly exists because of an incomplete fix for CVE-2008-3194."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Pluck CMS 4.5.2 en Windows permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante ..\\ (punto punto barra invertida) en los parámetros (1) blogpost, (2) cat y (3) file a data/inc/themes/predefined_variables.php, como se llega a él mediante index.php; y lso parámetros (4) blogpost Y (5) cat a data/inc/blog_include_react.php, del modo que se llega a ellos mediante index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pluck:pluck:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A66D1EAF-2957-4B62-97CD-82F3DF958D9E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4195","source":"cve@mitre.org"},{"url":"http://www.pluck-cms.org/releasenotes.php#4.5.3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495706/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30820","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44677","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pluck-cms.org/releasenotes.php#4.5.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495706/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6300","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3852","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en la implementación del procedimiento almacenado CLR de Database Add-Ins de IBM para Visual Studio en el componente Visual Studio Net en DB2 de IBM versión 9.1 anterior a Fixpak 5 y versión 9.5 anterior a Fixpak 2,  permite a los usuarios autenticados remotos ejecutar código arbitrario por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:aix:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"331365ED-6901-41B1-8CAB-BD4924348983"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:hp-ux:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"2973E5EC-D98D-4229-82DE-38D2B2B10FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:linux:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"FCBE6932-DF7C-4A07-94AE-A1B962A26201"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:solaris:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"A1C99EB8-D889-4322-AEBD-941575E26B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:windows:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"20167E27-8448-4747-90CA-112BF36664EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp1:aix:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"F1FC5B15-E438-444B-9CB7-8B33DE42AA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp1:hp-ux:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"08DC6612-16D7-4EEE-8010-E69E2ADBC816"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp1:linux:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"0F5E070A-9B0C-43C7-ADF4-5C2A12E77E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp1:solaris:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"3F0DC286-6602-457A-A150-453A8F15F722"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp1:windows:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"C19FCA98-00D1-4529-B07C-CF07E9F2EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"A96437C6-D2C6-46BC-BC2D-078F6131E8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*","matchCriteriaId":"F1503B4A-3C40-45E4-9C2F-347CDF419752"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*","matchCriteriaId":"55D8F159-5A2D-4CB6-A7B9-7DCF8A9B82C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"F7E8AA7B-4E40-41B9-8940-95B5F00E11DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*","matchCriteriaId":"C91A9870-C75D-4B49-B1F5-E9CF054D3CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*","matchCriteriaId":"B7C7E16D-AC11-4FC0-9534-799926E525EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*","matchCriteriaId":"C1B953D1-0B8F-4C6F-8485-E5E942593015"}]}]}],"references":[{"url":"http://secunia.com/advisories/30558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31635","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR28431","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR28432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496405/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020761","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42927","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR28431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR28432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496405/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3853","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676."},{"lang":"es","value":"Desbordamiento de búfer en el programa DAS server en el componente de la función Core DAS en IBM DB2 9.1 antes del Fixpak 4a permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída del demonio) mediante vectores no especificados. NOTA: esto podría estar relacionado con CVE-2008-0698."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1961E7E9-35A4-4721-A081-E08D88FC1F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29784","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ12406","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45141","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ12406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3854","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en DB2 de IBM versión 9.1 anterior a Fixpak 5 y versión 9.5 anterior a Fixpak 1, permite a atacantes remotos causar una denegación de servicio (interrupción del sistema) por medio de vectores relacionados con (1) el uso de XQuery para emitir sentencias; las sentencias (2)  XMLQUERY, (3) XMLEXISTS y (4) XMLTABLE; y (5) la función sqlrlaka."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1961E7E9-35A4-4721-A081-E08D88FC1F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*","matchCriteriaId":"F1503B4A-3C40-45E4-9C2F-347CDF419752"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*","matchCriteriaId":"059C886A-FA0B-40DE-A573-A2B4BE7A14BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*","matchCriteriaId":"7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*","matchCriteriaId":"240239CD-9E05-46E0-A42C-13DB5EE8F436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:solaris:*:*:*:*:*","matchCriteriaId":"BE002DF4-F5FF-4505-8722-37ACCDB2EC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*","matchCriteriaId":"77828856-BFE6-4D31-90C1-CDB189BA95AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*","matchCriteriaId":"55D8F159-5A2D-4CB6-A7B9-7DCF8A9B82C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"F7E8AA7B-4E40-41B9-8940-95B5F00E11DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*","matchCriteriaId":"C91A9870-C75D-4B49-B1F5-E9CF054D3CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*","matchCriteriaId":"B7C7E16D-AC11-4FC0-9534-799926E525EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*","matchCriteriaId":"C1B953D1-0B8F-4C6F-8485-E5E942593015"}]}]}],"references":[{"url":"http://secunia.com/advisories/30558","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ16346","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ18431","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ18434","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496406/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42930","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42935","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ16346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ18431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ18434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496406/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3855","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a \"FILE CREATION VULNERABILITY.\" NOTE: this may be the same as CVE-2007-5664."},{"lang":"es","value":"Vulnerabilidad no especificada en DB2 Administration Server (DAS) en el componente de la función Core DAS de IBM DB2 9.1 antes de Fixpak 5 permite a usuarios locales obtener privilegios, también conocido como \"VULNERABILIDAD DE CREACIÓN DE ARCHIVO\". NOTA: esto podría ser lo mismo que CVE-2007-5664."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1961E7E9-35A4-4721-A081-E08D88FC1F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*","matchCriteriaId":"F1503B4A-3C40-45E4-9C2F-347CDF419752"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*","matchCriteriaId":"059C886A-FA0B-40DE-A573-A2B4BE7A14BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*","matchCriteriaId":"7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*","matchCriteriaId":"240239CD-9E05-46E0-A42C-13DB5EE8F436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:solaris:*:*:*:*:*","matchCriteriaId":"BE002DF4-F5FF-4505-8722-37ACCDB2EC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*","matchCriteriaId":"77828856-BFE6-4D31-90C1-CDB189BA95AD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12735","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42932","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3856","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors."},{"lang":"es","value":"El componente routine infrastructure en DB2 de IBM versión 8 anterior a FP17, versión 9.1 anterior a FP5 y versión 9.5 anterior a FP1, en Unix y Linux,  no cambia la propiedad del proceso db2fmp, que presenta un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp16:aix:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"177EB7BB-7987-4E33-8020-2A8D9A6157CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp16:hp_ux:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"A602F842-9133-48F0-A46A-CC297A0CA478"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp16:linux:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"6053CF9A-AF05-4EE2-832D-75CFFDD6A035"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp16:solaris:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"9619C4A9-0834-4BC6-BDE6-9CD0636032F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:aix:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"331365ED-6901-41B1-8CAB-BD4924348983"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:hp-ux:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"2973E5EC-D98D-4229-82DE-38D2B2B10FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:linux:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"FCBE6932-DF7C-4A07-94AE-A1B962A26201"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp4a:solaris:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"A1C99EB8-D889-4322-AEBD-941575E26B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp1:aix:*:*:*:*:*","matchCriteriaId":"E9D53A45-A270-47A6-8E52-4EFD20B60454"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp1:hp_ux:*:*:*:*:*","matchCriteriaId":"1DC0FD0B-BB91-4881-8BEF-2FF5DEE799FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp1:linux:*:*:*:*:*","matchCriteriaId":"C4D89C55-70BA-4DEB-A3CB-93F1F01BBB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:aix:*:*:*:*:*","matchCriteriaId":"F805BA54-A413-46EC-A1C0-EEE5A8FB3C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:hp_ux:*:*:*:*:*","matchCriteriaId":"DAA10457-D52B-4AE5-8635-E072B5E25662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:linux:*:*:*:*:*","matchCriteriaId":"F9EF7B04-D200-4648-AD26-D78BD8B032FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:solaris:*:*:*:*:*","matchCriteriaId":"EB3DA89D-B79A-4B02-A287-C505D1FE8004"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:aix:*:*:*:*:*","matchCriteriaId":"D52430A4-018F-4342-A1F5-4093CBBCFFED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:hp_ux:*:*:*:*:*","matchCriteriaId":"7A1C82E1-F8EF-40CD-ACDD-081FFC268FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:linux:*:*:*:*:*","matchCriteriaId":"C1B22E99-C013-49B3-BE3E-DB9DB685CA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:solaris:*:*:*:*:*","matchCriteriaId":"9173E3FB-1DA9-4DD8-A08F-8A730BEB27B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:aix:*:*:*:*:*","matchCriteriaId":"58D0932B-A52A-48BB-ADFB-AEB17FCF69E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:hp_ux:*:*:*:*:*","matchCriteriaId":"F63AA153-396F-43AC-8CB0-8E27F119FF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:linux:*:*:*:*:*","matchCriteriaId":"7C132382-0C33-4E9B-878B-2C626D34DB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:solaris:*:*:*:*:*","matchCriteriaId":"C1C093DF-FCD2-47FC-8C8E-1468A5FA06B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:aix:*:*:*:*:*","matchCriteriaId":"27E209D3-741C-4BD6-AE5A-A52C0C0EAEA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:hp_ux:*:*:*:*:*","matchCriteriaId":"AA4A6254-B6BB-42DB-9E2F-7AA960AD8C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:linux:*:*:*:*:*","matchCriteriaId":"BEBC3282-413E-4A0C-BDEA-B5671BF51F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:solaris:*:*:*:*:*","matchCriteriaId":"45802AC3-78BB-4190-AB93-B67F586B94C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:aix:*:*:*:*:*","matchCriteriaId":"99270F25-D30F-4120-9FA2-35C39CEEC8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:hp_ux:*:*:*:*:*","matchCriteriaId":"BDD49D30-7ACF-4A33-B92D-C66BE9929BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:linux:*:*:*:*:*","matchCriteriaId":"3664CEE2-0449-452B-A934-170F0349A57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:solaris:*:*:*:*:*","matchCriteriaId":"4A9A7663-3322-45A9-A5D8-E0970336F68D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:aix:*:*:*:*:*","matchCriteriaId":"D6B6EAB4-5A66-4BEB-B38B-DA0124DD6F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:hp_ux:*:*:*:*:*","matchCriteriaId":"9BC307F3-A9A0-4C48-8983-64B1B237AAF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:linux:*:*:*:*:*","matchCriteriaId":"44C9C5AF-26E2-4C0F-9816-0CF3EE02A838"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:solaris:*:*:*:*:*","matchCriteriaId":"68018945-8F40-436E-9981-4C3B62EAD28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:aix:*:*:*:*:*","matchCriteriaId":"A24425DA-1FAC-43BC-86F3-1E561277AF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:hp_ux:*:*:*:*:*","matchCriteriaId":"23BB5DCC-CC6E-4118-B0D4-DEE6EA54D05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:linux:*:*:*:*:*","matchCriteriaId":"E6097C8C-41B1-4CC8-AAD3-3731D103093B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:solaris:*:*:*:*:*","matchCriteriaId":"1DF33116-6CB4-48B2-BF23-632F185EB7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:aix:*:*:*:*:*","matchCriteriaId":"6A3A0A74-100A-4B37-8D45-3F59FE403D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:hp_ux:*:*:*:*:*","matchCriteriaId":"741D3457-DA96-4AF1-A036-7FAF640C8D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:linux:*:*:*:*:*","matchCriteriaId":"D55F0E1F-2905-4ABC-9A9B-FF62299F679D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:solaris:*:*:*:*:*","matchCriteriaId":"12EB2606-33BE-4253-94B7-43E76F0BB430"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:aix:*:*:*:*:*","matchCriteriaId":"55E1A553-1786-489D-9BE2-60D7348FD8F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:hp_ux:*:*:*:*:*","matchCriteriaId":"E8C502A3-56DA-4104-BCAC-3E5D454D49F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:linux:*:*:*:*:*","matchCriteriaId":"F98FA787-A7E7-45BA-A3DC-F25C2FC74A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:solaris:*:*:*:*:*","matchCriteriaId":"2C8DA7D4-0375-412A-9DDF-E31D6D1CD5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:aix:*:*:*:*:*","matchCriteriaId":"58F68270-C74E-415E-A8C1-3FE5940B8DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:hp_ux:*:*:*:*:*","matchCriteriaId":"F677E182-A145-42D0-8580-8467279938CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:linux:*:*:*:*:*","matchCriteriaId":"D02E2CF9-CE08-4B0B-ADD5-1A9AE7DE8B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:solaris:*:*:*:*:*","matchCriteriaId":"AB99106D-14C9-4E95-92BA-0DDF1EF48B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:aix:*:*:*:*:*","matchCriteriaId":"36A0742E-E958-4328-B9A8-2D4BA883926F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:hp_ux:*:*:*:*:*","matchCriteriaId":"13FE19E6-67FD-450F-9129-8DCF4707C0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:linux:*:*:*:*:*","matchCriteriaId":"8A8E27E2-4470-40B6-BE35-3B96D375D891"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:solaris:*:*:*:*:*","matchCriteriaId":"045B87AF-476D-4A13-88E4-C0ADF8F1374D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:aix:*:*:*:*:*","matchCriteriaId":"16E17C4B-C233-4C27-90DF-34802571EFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:hp_ux:*:*:*:*:*","matchCriteriaId":"B2C32CFE-2C37-44B4-B05F-B4B41ADEEB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:linux:*:*:*:*:*","matchCriteriaId":"A32039C1-C940-4ACC-8236-6C48286CD8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:solaris:*:*:*:*:*","matchCriteriaId":"9E792924-8741-42EA-B091-521A8D806393"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:aix:*:*:*:*:*","matchCriteriaId":"1BCDD273-AA59-427A-A13C-21D2D18862C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:hp_ux:*:*:*:*:*","matchCriteriaId":"63FB9C7D-72AB-40B8-B9A0-107707AB970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:linux:*:*:*:*:*","matchCriteriaId":"BFDEB3C4-261D-4A44-898F-0972C4E0BADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:solaris:*:*:*:*:*","matchCriteriaId":"711D578D-53FA-4FE3-87D4-49E8A6B27645"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:aix:*:*:*:*:*","matchCriteriaId":"8AC7F72B-8BC0-4186-9EA7-B1B4CF4DE029"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:hp_ux:*:*:*:*:*","matchCriteriaId":"492DF384-0687-409F-A416-D545E3CA4B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:linux:*:*:*:*:*","matchCriteriaId":"A1ACA5ED-C596-48A4-A60F-AF29457D8E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:solaris:*:*:*:*:*","matchCriteriaId":"17C07869-F96F-409A-A5A8-DAEF37513442"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:aix:*:*:*:*:*","matchCriteriaId":"0A7DFEC9-AF38-457A-A4E6-77EFFDEC6E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:hp_ux:*:*:*:*:*","matchCriteriaId":"BEF40CF8-4858-4AD2-9136-B9E7742609E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:linux:*:*:*:*:*","matchCriteriaId":"02AEA3AF-76F2-479E-97FF-259228157219"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:solaris:*:*:*:*:*","matchCriteriaId":"D9C4CF66-D4BA-4C00-8891-BEEB0DD665A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:aix:*:*:*:*:*","matchCriteriaId":"28589727-AE9E-4181-8B41-46192B593E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:hp_ux:*:*:*:*:*","matchCriteriaId":"F458C66B-ACE1-4315-A8CC-4CEFAD41028D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:linux:*:*:*:*:*","matchCriteriaId":"83642434-B93C-450B-99EA-270008B4E37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:solaris:*:*:*:*:*","matchCriteriaId":"F2AD8AC6-239A-4CFE-9D9E-8A841A867725"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:aix:*:*:*:*:*","matchCriteriaId":"5187C464-0B04-4D29-8700-F4D9359F0564"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:hp_ux:*:*:*:*:*","matchCriteriaId":"9A1A163A-AA78-48E1-9C86-C8A1A1A29929"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:linux:*:*:*:*:*","matchCriteriaId":"20AC001E-4C76-42CB-A8BC-790BD0C39F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:solaris:*:*:*:*:*","matchCriteriaId":"4B4F776B-5914-4BDE-9C2F-84E3795FA788"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:aix:*:*:*:*:*","matchCriteriaId":"11D13957-FDE1-4B00-8753-BA94C0DAA249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:hp_ux:*:*:*:*:*","matchCriteriaId":"C18FB58D-6EC6-4CDD-912B-18A17F7E957B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:linux:*:*:*:*:*","matchCriteriaId":"2045E0EA-B405-4BF0-A817-34E79317F46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:solaris:*:*:*:*:*","matchCriteriaId":"4541F041-F2F4-4491-BDBE-4215A75E832C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:aix:*:*:*:*:*","matchCriteriaId":"2F7D3287-9D4C-4AA7-8232-3543369397CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:hp_ux:*:*:*:*:*","matchCriteriaId":"BA5B0AA2-E067-4FFF-ADE1-145D8A1C1B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:linux:*:*:*:*:*","matchCriteriaId":"0C35EA9D-DEFE-4B81-B5C9-51103273F661"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:solaris:*:*:*:*:*","matchCriteriaId":"C92BCF46-BEBF-433C-A095-44E6F7A16E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:aix:*:*:*:*:*","matchCriteriaId":"308D7247-F21E-4199-BA14-FE318637F3C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:hp_ux:*:*:*:*:*","matchCriteriaId":"84E99600-0016-4FD9-BFC9-D2CD913012BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:linux:*:*:*:*:*","matchCriteriaId":"0CBA4D6B-4C07-4780-8760-00F82D0016E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:solaris:*:*:*:*:*","matchCriteriaId":"332C4CED-4E32-48C6-BF91-43409E0C7D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:aix:*:*:*:*:*","matchCriteriaId":"1F5AD43F-1D06-447F-8B66-89207DE3AECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:hp_ux:*:*:*:*:*","matchCriteriaId":"CEC1C774-2AD9-4EBA-AB11-70135F20D006"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:linux:*:*:*:*:*","matchCriteriaId":"5CE1E38B-FEA7-45CE-A50E-A4670AB925EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:solaris:*:*:*:*:*","matchCriteriaId":"BDC3F77B-9C7C-4D56-B575-FFFF0AD51E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:aix:*:*:*:*:*","matchCriteriaId":"F9D03647-B68E-4950-A718-7E83135A8BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:hp_ux:*:*:*:*:*","matchCriteriaId":"27F207B6-B5E8-4972-B315-106F4903B8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:linux:*:*:*:*:*","matchCriteriaId":"C934F5CD-7E30-497E-9DD8-BB92646B81E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:solaris:*:*:*:*:*","matchCriteriaId":"43D68C54-E197-43AD-94CF-AA2CF1B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*","matchCriteriaId":"95E13DED-D8B2-4895-8540-B0C59CB6E672"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp_ux:*:*:*:*:*","matchCriteriaId":"628141AA-1E3C-4243-BA8F-14144ABCB980"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*","matchCriteriaId":"6F180189-FA62-453A-B6F8-134FE12805EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*","matchCriteriaId":"0656D0A4-E09E-4C5E-9270-931433598B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1961E7E9-35A4-4721-A081-E08D88FC1F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ19155","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20350","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45140","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ19155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3857","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump."},{"lang":"es","value":"El componente Base Service Utilities en IBM DB2 9.1 antes de Fixpak 5 conserva una contraseña en texto claro en memoria después de que la conexión a la base de datos que envía la contraseña está totalmente establecida, lo que podría permitir a usuarios locales obtener información sensible leyendo una descarga de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1961E7E9-35A4-4721-A081-E08D88FC1F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*","matchCriteriaId":"F1503B4A-3C40-45E4-9C2F-347CDF419752"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*","matchCriteriaId":"059C886A-FA0B-40DE-A573-A2B4BE7A14BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*","matchCriteriaId":"7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*","matchCriteriaId":"240239CD-9E05-46E0-A42C-13DB5EE8F436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:solaris:*:*:*:*:*","matchCriteriaId":"BE002DF4-F5FF-4505-8722-37ACCDB2EC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*","matchCriteriaId":"77828856-BFE6-4D31-90C1-CDB189BA95AD"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR27422","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45139","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR27422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3858","sourceIdentifier":"cve@mitre.org","published":"2008-08-28T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request."},{"lang":"es","value":"El componente Downlevel DB2RA Support en IBM DB2 9.1 antes de Fixpak 4a permite a atacantes remotos provocar una denegación de servicio (caída de instancia) mediante un flujo de datos CONNECT manipulado que simula una petición de conexión de cliente V7."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1961E7E9-35A4-4721-A081-E08D88FC1F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*","matchCriteriaId":"45610195-E2DF-480B-898B-32EE8707D3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*","matchCriteriaId":"F1503B4A-3C40-45E4-9C2F-347CDF419752"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*","matchCriteriaId":"C9C156A0-A869-4D16-955D-EC9A6696260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*","matchCriteriaId":"059C886A-FA0B-40DE-A573-A2B4BE7A14BD"}]}]}],"references":[{"url":"http://osvdb.org/48428","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07299","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45138","source":"cve@mitre.org"},{"url":"http://osvdb.org/48428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3859","sourceIdentifier":"cve@mitre.org","published":"2008-08-29T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php."},{"lang":"es","value":"Davlin Thickbox Gallery 2 permite a atacantes remotos que obtienen el nombre del administrador y el hash MD5 de la contraseña a través de una petición directa a conf/admins.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davlin:thickbox_gallery:2:*:*:*:*:*:*:*","matchCriteriaId":"546CDD37-8754-4167-9736-A1661A01A168"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4196","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30845","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44682","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6314","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3860","sourceIdentifier":"cve@mitre.org","published":"2008-08-29T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local group creation, (3) during HTML redirects, (4) in the HTML import, (5) in the Rich text editor, and (6) in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inject arbitrary web script or HTML via unknown vectors, including (7) the Imported Page.  NOTE: the vulnerability in the WYSIWYG editors may exist because of an incomplete fix for CVE-2008-2163."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en (1)editores WYSIWYG (2)durante la creación de un grupo local, (3) durante redireccionamientos HTML, (4) en el HTML-import, (5) en el editor Rich-text, y (6) en la página de enlace del servicio IBM Lotus Quickr 8.1 para Lotus Domino anterior al parche (Hotfix) 15, permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados, incluyendo (7) la Imported-Page. NOTA: La vulnerabilidad en el editor WYSIWYG puede ser debida a una corrección incompleta de para el CVE-2008-2163.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:i5os:*:*:*:*:*:*:*:*","matchCriteriaId":"F6EAAC0C-BDB1-4217-9551-684859F2D4E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.1:*:*:*:*:*:*:*","matchCriteriaId":"83B3B388-0438-4806-9F21-2170428739DF"}]}]}],"references":[{"url":"http://osvdb.org/49772","source":"cve@mitre.org"},{"url":"http://osvdb.org/49776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020762","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44694","source":"cve@mitre.org"},{"url":"http://osvdb.org/49772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3861","sourceIdentifier":"cve@mitre.org","published":"2008-08-29T16:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en phpMyRealty (PMR) 1.0.9 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro id en pages.php y (2) el parámetro price_max en search.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.9","matchCriteriaId":"33F443ED-98AE-4797-BF90-4E09FF8092D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"81C2FACA-F6E6-4AEF-BC2D-B16CF6F60EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"37A490C4-185B-4954-A7E5-21D082F6AC3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EB874515-6546-468B-88E3-DA57C70FC938"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D564CC31-EBFA-4DFD-B018-2E31791537FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"59F87076-8696-464A-BD69-E31C77C145EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B1BA29C-6AC2-4494-B015-E0FBC4CC72D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"834819B6-A9EB-492F-985E-277C2F08745A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"71305164-FDAE-4AB9-8905-1A36C77A2A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyrealty:phpmyrealty:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC9C5DA2-08E4-4DD7-8FA7-4D6F79322463"}]}]}],"references":[{"url":"http://secunia.com/advisories/31613","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30862","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44720","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3862","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-23T22:00:01.230","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to \"parsing CGI requests.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el programa CGI en el servidor de Trend Micro OfficeScan 7.3 Patch 4 build 1367 y otras compilaciones anteriores a 1374, y 8.0 SP1 Patch 1 compilaciones anteriores a 3110, permite a atacantes remotos ejecutar código de su elección a través de peticiones HTTP POST que contienen datos de formulario manipulados, relacionado con el \"parseado de peticiones CGI\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:7.3:*:*:*:*:*:*:*","matchCriteriaId":"38BD1ADE-408F-45D0-BD0B-FBC83ED976F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"}]}]}],"references":[{"url":"http://secunia.com/advisories/32005","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-40/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4489","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497650/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31859","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021093","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_CriticalPatch_B1374_readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_sp1p1_CriticalPatch_B3110_readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2892","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-40/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497650/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_CriticalPatch_B1374_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_sp1p1_CriticalPatch_B3110_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3863","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-10-23T22:00:01.323","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command."},{"lang":"es","value":"Desbordamiento de búfer basado en la función read_special_escape en src/psgen.c en GNU Enscript 1.6.1 y 1.6.4 beta, cuando la opción -e (también conocido como procesado de escapados especiales) está habilitado, permite a atacantes remotos ayudados por el usuario ejecutar código de su elección mediante un archivo ASCII manipulado, relacionado con el comando setfilename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:enscript:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E366EE3-E642-4C8D-9C8A-C39D1575D125"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:enscript:1.6.4:beta:*:*:*:*:*:*","matchCriteriaId":"0B895F66-7AE0-4B85-A35A-6EA92F14FD39"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1021.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32137","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32521","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32530","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32753","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32854","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32970","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33109","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35074","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-41/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-02.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/4488","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://support.apple.com/kb/HT3549","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1670","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:243","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1016.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497647/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/498385/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/31858","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/usn-660-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2891","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46026","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://issues.rpath.com/browse/RPL-2887","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9939","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-41/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497647/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498385/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-660-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3867","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-11-03T19:36:15.760","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en spaces/emailuser.php en Interact 2.4.1 permite a atacantes remotos ejecutar secuencias SQL  arbitrarias a través del parámetro email_user_key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cce-interact:interact:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"076EFD59-F12B-4AF5-9EDD-447DE0A6D74C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32359","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-44/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4537","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2208205&group_id=69681&atid=525406","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497967/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/32014","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46267","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-44/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2208205&group_id=69681&atid=525406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3868","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-11-03T19:36:18.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Interact v2.4.1, permite a atacantes remotos crear cuentas de super administrador como super administradores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cce-interact:interact:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"076EFD59-F12B-4AF5-9EDD-447DE0A6D74C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32434","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-44/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4537","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/497967/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46269","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-44/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3872","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T18:00:10.700","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified \"Filter evasion\" manipulations."},{"lang":"es","value":"En el programa Adobe Flash Player versión 8.0.39.0 y versiones anteriores, y versión 9.x hasta 9.0.115.0, hay una vulnerabilidad que permite a los atacantes remotos omitir la configuración del parámetro allowScriptAccess por medio de un archivo SWF creado con manipulaciones no especificadas de \"Filter evasion\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.0.39.0","matchCriteriaId":"307CD062-FF65-4300-AC60-4B5DA1E1961C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.0.115.0","matchCriteriaId":"F3962F47-B2A5-4B69-AB35-F8C7745682A2"}]}]}],"references":[{"url":"http://taviso.decsystem.org/research.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45713","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://taviso.decsystem.org/research.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3873","sourceIdentifier":"cve@mitre.org","published":"2008-08-29T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008."},{"lang":"es","value":"El método System.setClipboard en Adobe Flash Player permite a atacantes remotos rellenar el portapapeles con una dirección URL que es difícil de borrar, como se realizó en exploits públicos en Agosto de 2008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","matchCriteriaId":"F901FB44-DC26-4284-B160-EE4A4F8F9DF1"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=1733","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=1759","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32448","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020724","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31117","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2838","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44584","source":"cve@mitre.org"},{"url":"http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.zdnet.com/security/?p=1733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.zdnet.com/security/?p=1759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3874","sourceIdentifier":"cve@mitre.org","published":"2008-08-29T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Value field (aka Label ==> Value pairs).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en account.php de Lussumo Vanilla 1.1.5-rc1, 1.1.4, y anteriores, permite a atacantes remotos autenticados inyectar web script o HTML a través de el valor field (también conocido como Label ==> pares de valores). NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5-rc1","matchCriteriaId":"968E3602-635C-4B61-BF9A-1CF8D72DACB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"34C3B2A7-EF53-4C3E-997D-F978C9286AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1:*:*:*:*:*:*:*","matchCriteriaId":"EB5944B6-6A0B-4666-B666-B8A3787DBB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED4C0D9-0821-4A49-BEFD-8EB3901B9AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"218D8A6C-FD89-48AE-BD21-38B41B382259"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DC2EA631-61AE-4E0B-9B1E-34FB8271AFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E0B536-6295-4D2A-8B1E-D39F0163CDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"81996E90-3F33-40C3-805E-D7D7C6E4B554"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"55F8E29B-4D41-405B-912B-58FBE172AA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"618BF3EC-6E8B-48A9-89D3-A3F9F9B0F013"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"645126FC-DC09-49C5-8258-42C1DE25D84E"}]}]}],"references":[{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"cve@mitre.org"},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4176","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00126-08192008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495577/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30748","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lussumo.com/docs/doku.php?id=vanilla:releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00126-08192008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495577/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-3875","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T14:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls."},{"lang":"es","value":"El núcleo de Sun Solaris 8 hasta 10 y OpenSolaris anterior a snv_90, permite a usuarios locales evitar chroot, zones y la política de seguridad multi nivel de Solaris Trusted Extensions, y establecer un canal de comunicación encubierto, a través de vectores no especificados que incluyen llamadas al sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"build_snv_89","matchCriteriaId":"C9E5D517-7116-44E7-8A1E-470D206DE281"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_01:*:*:*:*:*:*:*","matchCriteriaId":"65C717D1-2192-415E-AF6F-7F9619A3C98A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_02:*:*:*:*:*:*:*","matchCriteriaId":"56451D1E-E5F2-473E-8995-94890AD72685"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_13:*:*:*:*:*:*:*","matchCriteriaId":"10F2BBC6-DF15-4DEF-AACF-6F570A23733C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_19:*:*:*:*:*:*:*","matchCriteriaId":"32C315C7-9204-40DB-9730-4138069679CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_22:*:*:*:*:*:*:*","matchCriteriaId":"A19A54E9-403E-4051-A120-D588BE399F4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_39:*:*:*:*:*:*:*","matchCriteriaId":"4F44E7B9-1441-474D-9DB8-EAD37F79B3D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_47:*:*:*:*:*:*:*","matchCriteriaId":"B633EB48-E66F-4077-9951-31B19B629CE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_59:*:*:*:*:*:*:*","matchCriteriaId":"F1D97BFB-F05B-487E-8AE8-BE73FDD92FCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_64:*:*:*:*:*:*:*","matchCriteriaId":"1E8BFE03-135B-4E3E-B993-7C37C0EF2286"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_79b:*:*:*:*:*:*:*","matchCriteriaId":"4EDBBB71-6159-409F-B2D8-9341BA599409"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_87:*:*:*:*:*:*:*","matchCriteriaId":"A13C5C92-C568-4083-A9BA-46992CBC8A79"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_88:*:*:*:*:*:*:*","matchCriteriaId":"86003B47-A3DF-4119-85ED-FEEAB4F4F034"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31667","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30880","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020780","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2460","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44753","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3876","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T14:24:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow."},{"lang":"es","value":"Apple iPhone 2.0.2, en algunas configuraciones, permite a atacantes físicamente próximos, evitar las restricciones de acceso pretendidas y obtener información sensible o utilizar el dispositivo como quieran, accediendo a la llamada de emergencia, luego pulsando dos veces el botón Home y, a continuación, pulsando en la flecha azul de cualquier contacto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2B045BAF-EB4A-409F-97E7-1DB3E89ACD5D"}]}]}],"references":[{"url":"http://forums.macrumors.com/showpost.php?p=6121914&postcount=118","source":"cve@mitre.org"},{"url":"http://forums.macrumors.com/showthread.php?t=551617","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1020763","source":"cve@mitre.org"},{"url":"http://forums.macrumors.com/showpost.php?p=6121914&postcount=118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forums.macrumors.com/showthread.php?t=551617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1020763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3877","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file.  NOTE: it was later reported that version 3 is also affected."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Mixcraft de Acoustica versiones 4.1 Build 96 y 4.2 Build 98,  permite a atacantes asistidos por el usuario ejecutar código arbitrario por medio de un archivo .mx4 diseñado. NOTA: más tarde se reportó que la versión 3 también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:mixcraft:3.0:*:*:*:*:*:*:*","matchCriteriaId":"010B0681-06ED-457D-9739-1D8A5E29BF79"},{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:mixcraft:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E2D258-4072-477E-AA12-1BDFCD5970BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:mixcraft:4.2:*:*:*:*:*:*:*","matchCriteriaId":"801406AF-92A5-4EBC-8B2A-4A35DFCC0FB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4199","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44751","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6322","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3878","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX Ultra.OfficeControl de OfficeCtrl.ocx 2.0.2008.801 de Ultra Shareware Ultra Office Control, permite a atacantes remotos ejecutar código de su elección mediante los parámetros largos strUrl, strFile y strPostData al método HttpUpload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrashareware:ultra_office_control:2.0.2008.801:*:*:*:*:*:*:*","matchCriteriaId":"A81E8F3F-2263-4CBD-BA13-41E92D470A78"}]}]}],"references":[{"url":"http://secunia.com/advisories/31632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30861","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44749","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6318","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3879","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method."},{"lang":"es","value":"El control ActiveX Ultra.OfficeControl de OfficeCtrl.ocx 2.0.2008.801 y anteriores de Ultra Shareware Ultra Office Control, permite a atacantes remotos forzar la descarga de ficheros de su elección a un sistema cliente mediante una URL en el primer argumento al método Open junto con con un nombre de ruta de destino completo en el primer argumento (argumento SaveAsDocument) al método Save."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrashareware:ultra_office_control:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2008.801","matchCriteriaId":"4B296DEE-BCF4-4CE2-9ABB-60F08C9048C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4201","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30863","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219827906.ff.php","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44750","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219827906.ff.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3880","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en zm_html_view_event.php de ZoneMinder 1.23.3 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro filter del array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23.3","matchCriteriaId":"AD8E0D55-1166-4BA3-A46C-095B5443D664"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55FAB374-12A1-4620-9722-03905C546CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"39B0752F-DCB7-45F1-93AD-6B805B6927F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"B5C7E2CA-7928-40D0-8100-FF320519DAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"64AFD867-DE79-44E4-B8BD-A3608CBD202C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"13D3DB14-3B69-44D1-888B-88174B52ADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"EA76A659-38E9-4CD6-BE6A-33B9EF130B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"1ADCD02B-57F2-4399-BAC9-5523E8A2322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"09235F63-B967-4D9C-8151-E3788CC0B48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFB4385-25C1-4324-AE70-FBCA15D02285"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"C56A2FB6-A178-4068-AFFC-E9F8ED46A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"953301CE-46E3-466D-A9A1-CE6CB688B961"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.0:*:*:*:*:*:*:*","matchCriteriaId":"E3FA08AF-32EB-4281-923B-5606CC5AC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"9B515F99-A444-4854-B4AA-EEB278106189"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"EF03BD73-2F59-407C-8300-9D29412A2A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.0:*:*:*:*:*:*:*","matchCriteriaId":"45C6229F-CFF5-41FF-B5BC-B17F22102A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"58F43A66-B9E0-4275-91A8-603139C6C165"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"959BB7E6-1B5F-4E5C-83A0-55CC13DE0816"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6D208D11-2F7D-4909-A471-5035CC2D2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"250BDB5F-EF5A-41B6-A7B6-E2E4A27C8515"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8F80E304-C425-4FD7-BE86-668D78919D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.4:*:*:*:*:*:*:*","matchCriteriaId":"1C2BC07D-3F50-46F8-80DF-70BDAD4CA9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.5:*:*:*:*:*:*:*","matchCriteriaId":"91B7524A-40E9-4A1D-898D-670EF6FCF3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.0:*:*:*:*:*:*:*","matchCriteriaId":"805CCF7C-96B4-4668-8807-27F4A512E1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.1:*:*:*:*:*:*:*","matchCriteriaId":"A5788317-DC2E-45A5-A4F1-35C42DCCCEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.0:*:*:*:*:*:*:*","matchCriteriaId":"A0669377-E878-4330-B3CC-E7781D1637F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.1:*:*:*:*:*:*:*","matchCriteriaId":"F181E2C5-72D4-4A29-AFCC-B821D7B1FD7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.2:*:*:*:*:*:*:*","matchCriteriaId":"14C4792D-9A5F-407C-9ADE-88A2F31F628F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.3:*:*:*:*:*:*:*","matchCriteriaId":"5AFB8D6F-A90B-4D00-9E5E-6BF2899FF641"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.4:*:*:*:*:*:*:*","matchCriteriaId":"3B2ACD16-6C5B-40F1-8229-3E0BAC2C7EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.0:*:*:*:*:*:*:*","matchCriteriaId":"62EA0AE1-E57B-40E2-810E-7E6D7417BF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.1:*:*:*:*:*:*:*","matchCriteriaId":"ECA2BD13-6CFD-465D-BC12-C049C2A170BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.2:*:*:*:*:*:*:*","matchCriteriaId":"E2B7181B-7F4B-4097-8491-F92804A86E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.3:*:*:*:*:*:*:*","matchCriteriaId":"A36CC0FB-96CA-4B7C-8B47-DF209D16245E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.0:*:*:*:*:*:*:*","matchCriteriaId":"A75BA675-ACD1-4C95-9545-C0A8C60499D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"022EF0D9-EB9F-43C7-A2DB-1978C5E91601"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"7FED5734-F140-4360-A480-4DC590CE98EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30843","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3881","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified \"zm_html_view_*.php\" files."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en ZoneMinder versión 1.23.3 y anteriores, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de archivos \"zm_html_view_*.php\" no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23.3","matchCriteriaId":"AD8E0D55-1166-4BA3-A46C-095B5443D664"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55FAB374-12A1-4620-9722-03905C546CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"39B0752F-DCB7-45F1-93AD-6B805B6927F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"B5C7E2CA-7928-40D0-8100-FF320519DAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"64AFD867-DE79-44E4-B8BD-A3608CBD202C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"13D3DB14-3B69-44D1-888B-88174B52ADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"EA76A659-38E9-4CD6-BE6A-33B9EF130B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"1ADCD02B-57F2-4399-BAC9-5523E8A2322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"09235F63-B967-4D9C-8151-E3788CC0B48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFB4385-25C1-4324-AE70-FBCA15D02285"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"C56A2FB6-A178-4068-AFFC-E9F8ED46A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"953301CE-46E3-466D-A9A1-CE6CB688B961"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.0:*:*:*:*:*:*:*","matchCriteriaId":"E3FA08AF-32EB-4281-923B-5606CC5AC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"9B515F99-A444-4854-B4AA-EEB278106189"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"EF03BD73-2F59-407C-8300-9D29412A2A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.0:*:*:*:*:*:*:*","matchCriteriaId":"45C6229F-CFF5-41FF-B5BC-B17F22102A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"58F43A66-B9E0-4275-91A8-603139C6C165"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"959BB7E6-1B5F-4E5C-83A0-55CC13DE0816"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6D208D11-2F7D-4909-A471-5035CC2D2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"250BDB5F-EF5A-41B6-A7B6-E2E4A27C8515"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8F80E304-C425-4FD7-BE86-668D78919D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.4:*:*:*:*:*:*:*","matchCriteriaId":"1C2BC07D-3F50-46F8-80DF-70BDAD4CA9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.5:*:*:*:*:*:*:*","matchCriteriaId":"91B7524A-40E9-4A1D-898D-670EF6FCF3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.0:*:*:*:*:*:*:*","matchCriteriaId":"805CCF7C-96B4-4668-8807-27F4A512E1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.1:*:*:*:*:*:*:*","matchCriteriaId":"A5788317-DC2E-45A5-A4F1-35C42DCCCEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.0:*:*:*:*:*:*:*","matchCriteriaId":"A0669377-E878-4330-B3CC-E7781D1637F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.1:*:*:*:*:*:*:*","matchCriteriaId":"F181E2C5-72D4-4A29-AFCC-B821D7B1FD7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.2:*:*:*:*:*:*:*","matchCriteriaId":"14C4792D-9A5F-407C-9ADE-88A2F31F628F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.3:*:*:*:*:*:*:*","matchCriteriaId":"5AFB8D6F-A90B-4D00-9E5E-6BF2899FF641"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.4:*:*:*:*:*:*:*","matchCriteriaId":"3B2ACD16-6C5B-40F1-8229-3E0BAC2C7EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.0:*:*:*:*:*:*:*","matchCriteriaId":"62EA0AE1-E57B-40E2-810E-7E6D7417BF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.1:*:*:*:*:*:*:*","matchCriteriaId":"ECA2BD13-6CFD-465D-BC12-C049C2A170BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.2:*:*:*:*:*:*:*","matchCriteriaId":"E2B7181B-7F4B-4097-8491-F92804A86E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.3:*:*:*:*:*:*:*","matchCriteriaId":"A36CC0FB-96CA-4B7C-8B47-DF209D16245E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.0:*:*:*:*:*:*:*","matchCriteriaId":"A75BA675-ACD1-4C95-9545-C0A8C60499D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"022EF0D9-EB9F-43C7-A2DB-1978C5E91601"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"7FED5734-F140-4360-A480-4DC590CE98EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30843","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3882","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified \"Command Injection\" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php."},{"lang":"es","value":"Una vulnerabilidad de \"Command Injection\" no especificada en ZoneMinder versión 1.23.3 y anteriores, permite a atacantes remotos ejecutar comandos arbitrarios por medio de (1) la función executeFilter en el archivo zm_html_view_events.php y (2) el parámetro run_state en el archivo zm_html_view_state.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23.3","matchCriteriaId":"AD8E0D55-1166-4BA3-A46C-095B5443D664"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55FAB374-12A1-4620-9722-03905C546CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"39B0752F-DCB7-45F1-93AD-6B805B6927F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"B5C7E2CA-7928-40D0-8100-FF320519DAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"64AFD867-DE79-44E4-B8BD-A3608CBD202C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"13D3DB14-3B69-44D1-888B-88174B52ADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"EA76A659-38E9-4CD6-BE6A-33B9EF130B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"1ADCD02B-57F2-4399-BAC9-5523E8A2322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"09235F63-B967-4D9C-8151-E3788CC0B48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFB4385-25C1-4324-AE70-FBCA15D02285"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"C56A2FB6-A178-4068-AFFC-E9F8ED46A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"953301CE-46E3-466D-A9A1-CE6CB688B961"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.0:*:*:*:*:*:*:*","matchCriteriaId":"E3FA08AF-32EB-4281-923B-5606CC5AC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"9B515F99-A444-4854-B4AA-EEB278106189"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"EF03BD73-2F59-407C-8300-9D29412A2A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.0:*:*:*:*:*:*:*","matchCriteriaId":"45C6229F-CFF5-41FF-B5BC-B17F22102A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"58F43A66-B9E0-4275-91A8-603139C6C165"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"959BB7E6-1B5F-4E5C-83A0-55CC13DE0816"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6D208D11-2F7D-4909-A471-5035CC2D2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"250BDB5F-EF5A-41B6-A7B6-E2E4A27C8515"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8F80E304-C425-4FD7-BE86-668D78919D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.4:*:*:*:*:*:*:*","matchCriteriaId":"1C2BC07D-3F50-46F8-80DF-70BDAD4CA9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.19.5:*:*:*:*:*:*:*","matchCriteriaId":"91B7524A-40E9-4A1D-898D-670EF6FCF3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.0:*:*:*:*:*:*:*","matchCriteriaId":"805CCF7C-96B4-4668-8807-27F4A512E1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.20.1:*:*:*:*:*:*:*","matchCriteriaId":"A5788317-DC2E-45A5-A4F1-35C42DCCCEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.0:*:*:*:*:*:*:*","matchCriteriaId":"A0669377-E878-4330-B3CC-E7781D1637F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.1:*:*:*:*:*:*:*","matchCriteriaId":"F181E2C5-72D4-4A29-AFCC-B821D7B1FD7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.2:*:*:*:*:*:*:*","matchCriteriaId":"14C4792D-9A5F-407C-9ADE-88A2F31F628F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.3:*:*:*:*:*:*:*","matchCriteriaId":"5AFB8D6F-A90B-4D00-9E5E-6BF2899FF641"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.21.4:*:*:*:*:*:*:*","matchCriteriaId":"3B2ACD16-6C5B-40F1-8229-3E0BAC2C7EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.0:*:*:*:*:*:*:*","matchCriteriaId":"62EA0AE1-E57B-40E2-810E-7E6D7417BF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.1:*:*:*:*:*:*:*","matchCriteriaId":"ECA2BD13-6CFD-465D-BC12-C049C2A170BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.2:*:*:*:*:*:*:*","matchCriteriaId":"E2B7181B-7F4B-4097-8491-F92804A86E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.22.3:*:*:*:*:*:*:*","matchCriteriaId":"A36CC0FB-96CA-4B7C-8B47-DF209D16245E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.0:*:*:*:*:*:*:*","matchCriteriaId":"A75BA675-ACD1-4C95-9545-C0A8C60499D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"022EF0D9-EB9F-43C7-A2DB-1978C5E91601"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"7FED5734-F140-4360-A480-4DC590CE98EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30843","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44728","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3883","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken#####.pike temporary file."},{"lang":"es","value":"configvar de Caudium 1.4.12, permite a usuarios locales sobrescribir ficheros de su elección mediante un ataque symlink en un fichero temporal /tmp/roken#####.pike."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caudium:caudium:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"6BC578FB-39CC-4F4B-948D-B3B5E61456CC"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496404","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/caudium","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30897","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44768","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/caudium","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3884","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos de sitios cruzados (XSS) en Blogn (BURO GUN) 1.9.7 y anteriores, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados. Es una vulnerabilidad diferente de CVE-2006-6176."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogn:blogn:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.7","matchCriteriaId":"20171619-1350-463F-A52C-FEDDB5F228B8"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN03859837/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blogn.org/index.php?e=172","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30920","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44767","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN03859837/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blogn.org/index.php?e=172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3885","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en Blogn (BURO GUN) 1.9.7 y anteriores, permite a atacantes remotos realizar modificaciones en el contenido a través de vectores no especificados, haciéndose pasar por usuarios de su elección. NOTA: algunos de estos detalles han sido obtenidos de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogn:blogn:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.7","matchCriteriaId":"20171619-1350-463F-A52C-FEDDB5F228B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:blogn:blogn:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"F089C16C-161B-4315-B0A0-FA12984417C5"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN84125369/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blogn.org/index.php?e=172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44769","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN84125369/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blogn.org/index.php?e=172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3886","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the inactive parameter in a tasks action, (2) the date parameter in a calendar day_view action, (3) the callback parameter in a public calendar action, or (4) the type parameter in a ticketsmith action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php de dotProject 2.1.2, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección mediante (1) el parámetro inactive en una acción tasks, (2) el parámetro date en una acción calendar day_view, (3)el parámetro callback en una acción public calendar, o (4) el parámetro type en una acción  ticketsmith."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D6F03EB8-C32B-40C0-9814-D4FCC20CEB29"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30924","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44770","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3887","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://secunia.com/advisories/31681:\r\n\r\n\r\n\"Successful exploitation of this vulnerability allows e.g. retrieval of administrator usernames and password hashes, but requires valid user credentials.\"\r\n\r\n\"Successful exploitation of this vulnerability requires valid administrator credentials.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in a viewuser action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de dotProject 2.1.2 , permite a (1) usuarios autenticados en remoto, ejecutar comandos SQL de su elección mediante el parámetro tab en una acicón projects y (2) administradores autenticados en remoto, ejecutar comandos SQL de su elección a través del parámetro user_id en una acción viewuser."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D6F03EB8-C32B-40C0-9814-D4FCC20CEB29"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30924","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44772","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3888","sourceIdentifier":"cve@mitre.org","published":"2008-09-02T15:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a member_details action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en members.asp de Mini-NUKE Freehost 2.3, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro uid en una acción member_details."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:mini_nuke_freehost:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1E0FC324-90FB-4FE1-A5FC-633B06111236"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/495743/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495743/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3889","sourceIdentifier":"cve@mitre.org","published":"2008-09-12T16:56:20.587","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of \"non-Postfix\" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file."},{"lang":"es","value":"Postfix versión 2.4 anteriores a la 2.4.9, versión 2.5 anteriores a la 2.5.5 y versión 2.6 anteriores a la 2.6-2000902, cuando se utiliza con el nucleo de Linux versión 2.6, muestra los descriptores del fichero epoll durante la ejecución de comandos que no son Postfix, permite a usuarios locales provocar una denegación de servicio (aplicación más lenta o finalización) mediante un comando especialmente construido, como se ha demostrado por un comando en un fichero .forward."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions Postfix as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2017-09-28T21:31:54.147"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4:*:*:*:*:*:*:*","matchCriteriaId":"998D1069-1CF5-42C5-8668-49D72E2D2F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A2138A68-3F3D-4C7E-9FEB-2C8A445F2789"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED5E0EB5-ECC6-4573-9EA7-83E5741DA3CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"790C02A8-95DD-42BE-8A1C-1C6D6DDCC443"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0A0034F2-585D-4A98-8428-996A726712DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"F8B162B5-DEF5-46AD-87D1-734B3B637D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0DF3730A-0FFD-4C23-B758-BBA67CC9CD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"10E8E5E2-5674-40D5-AD86-8C4DDB442EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"690EDC73-47B5-4891-86A5-37B6ED80E145"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"B751BA4B-B7C8-4A87-A03C-5C91678FC832"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"58F1FC50-B6EB-48FD-A2FA-B8BEB05719DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1DE90BD-B5F9-4762-B086-130AB04F3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CCD5258B-C9DE-47BD-9172-27618F220201"},{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.6:*:*:*:*:*:*:*","matchCriteriaId":"5D1E6461-2F2A-49C5-9B2B-08DE418F2F7B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31800","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31986","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32231","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-09.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4239","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020800","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:190","source":"cve@mitre.org"},{"url":"http://www.postfix.org/announcements/20080902.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/495894/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496420/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498037/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30977","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-642-1","source":"cve@mitre.org"},{"url":"http://www.wekk.net/research/CVE-2008-3889/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44865","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6472","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postfix.org/announcements/20080902.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/495894/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496420/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498037/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-642-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wekk.net/research/CVE-2008-3889/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3890","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by triggering a GPF during the kernel's return from (1) an interrupt, (2) a trap, or (3) a system call."},{"lang":"es","value":"El kernel de FreeBSD 6.3 hasta 7.0 en las plataformas de amd64 , puede hacer excesivas llamadas swapgs después de un Fallo General de Protección -General Protection Fault (GPF)-; esto permite a usuarios locales obtener privilegios provocando un Fallo General de Protección durante el regreso del kernel desde (1) una interrupción, (2) un paso del proceso de modo de usuario a modo kernel, o (3) una llamada al sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:amd64:*:*:*:*:*:*:*:*","matchCriteriaId":"C7979FDA-FB14-42C6-90AE-FB0B780FE508"}]}]}],"references":[{"url":"http://secunia.com/advisories/31743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:07.amd64.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31003","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020815","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44905","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:07.amd64.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3891","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field."},{"lang":"es","value":"El SAML Single Sign-On (SSO) Service para Google Apps permite a proveedores de servicio remotos suplantar usuarios de proveedores de servicios de su elección a través de vectores relacionados con la autenticación de respuestas que carecen de una solicitud de identificación y campo receptor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:google_apps:*:*:*:*:*:*:*:*","matchCriteriaId":"9E746C4E-EE75-402F-986F-B74579EDF7DB"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/612636","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7FQGWU","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/612636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-7FQGWU","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3892","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a call to the GuestInfo method in which there is a long string argument, and an assignment of a long string value to the result of this call.  NOTE: this may overlap CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, or CVE-2008-3696."},{"lang":"es","value":"Desbordamiento de búfer en un cierto control ActiveX en el COM API de VMware Workstation 5.5.x versiones anteriores a 5.5.8 build 108000, VMware Workstation 6.0.x versiones anteriores a 6.0.5 build 109488, VMware Player 1.x versiones anteriores a 1.0.8 build 108000, VMware Player 2.x versiones anteriores a 2.0.5 build 109488, VMware ACE 1.x versiones anteriores a 1.0.7 build 108880, VMware ACE 2.x versiones anteriores a 2.0.5 build 109488, and VMware Server versiones anteriores a 1.0.7 build 108231 permite a atacantes remotos provocar una denegación de servicio (caída del navegador) o posiblemente ejecutar código de su elección a través de una llamada al método GuestInfo en el cual hay un argumento de cadena largo, y un asignamiento de un valor de cadena largo al resultado de esa llamada.\r\nNOTA: esto puede superponerse a CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, o CVE-2008-3696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29503","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43062","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6345","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3893","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to Vista Service Pack 1","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"Microsoft Bitlocker en Windows Vista versiones anteriores a SP1 almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer durante el arranque, lo cual permite a usuarios locales obtener información sensible leyendo direcciones de memoria física asociadas con este búfer."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"8FF0D88B-821D-4E45-A2EC-5279B9190356"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*","matchCriteriaId":"F0257B7A-A8D1-4AC9-98C8-324B5B810877"}]}]}],"references":[{"url":"http://secunia.com/advisories/31619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-0801.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-0801.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3894","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"IBM Lenovo firmware 7CETB5WW 2.05 almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer después de utilizarlo, lo cual permite a usuarios locales obtener información sensible leyendo localizaciones de memoria asociadas con este búfer."}],"vendorComments":[{"organization":"Lenovo","comment":"Lenovo has released a BIOS update to address this issue.\n\nhttp://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-64580","lastModified":"2008-11-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:lenovo_7cetb5ww:2.05:*:*:*:*:*:*:*","matchCriteriaId":"549CD434-052E-4277-B57E-F0ACAE6800EA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4207","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495808/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495808/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3895","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"LILO 22.6.1 y versiones anteriores almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer antes y después del uso, lo cual permite a usuarios locales obtener información sensible leyendo localizaciones de memoria física asociadas con este búfer."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  Since these operations can only be executed by root, no trust boundary is crossed as a result of this behaviour.","lastModified":"2009-01-29T01:54:44.627"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:*:*:*:*:*:*:*:*","versionEndIncluding":"22.6.1","matchCriteriaId":"6F668D7C-0032-4335-8E90-ABBE039F222B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:0:*:*:*:*:*:*:*","matchCriteriaId":"3A759B97-3614-4D91-AA5A-192B995214AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:1:*:*:*:*:*:*:*","matchCriteriaId":"B0DB4194-5F7D-4E67-A4B0-71EB61DE63E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:2:*:*:*:*:*:*:*","matchCriteriaId":"0DFC9F61-5684-403C-8A29-7C0CDFE982D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:3:*:*:*:*:*:*:*","matchCriteriaId":"CE80220E-C92E-4FC3-A0E3-F46253F831A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:4:*:*:*:*:*:*:*","matchCriteriaId":"C5498FEB-E603-40AC-8960-083F951E4DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:5:*:*:*:*:*:*:*","matchCriteriaId":"69BF8ED4-2563-4073-A1A9-3D6518A9D0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:6:*:*:*:*:*:*:*","matchCriteriaId":"1C2AD4E4-5BDA-4772-91D3-706BB4188BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:7:*:*:*:*:*:*:*","matchCriteriaId":"9E094610-8DB1-4153-BB60-5FA7B78810E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:8:*:*:*:*:*:*:*","matchCriteriaId":"D7AEEF68-3E9B-439E-9C77-EF81FE3FB369"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:9:*:*:*:*:*:*:*","matchCriteriaId":"9E2A57A9-8B7F-4F39-8457-EA6296512630"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:10:*:*:*:*:*:*:*","matchCriteriaId":"6C34DB8C-E0F4-4D41-968B-02E76CA9F6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:11:*:*:*:*:*:*:*","matchCriteriaId":"0BE0D9B3-D2F4-441F-AF96-9A4B300E7FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:12:*:*:*:*:*:*:*","matchCriteriaId":"0249F716-CD23-4315-8472-FA5CDC55A6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:13:*:*:*:*:*:*:*","matchCriteriaId":"653AF65C-19A1-47E3-9762-FB315A8EB574"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:14:*:*:*:*:*:*:*","matchCriteriaId":"614FBCB3-57B9-4B14-88A8-D7D261351359"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:15:*:*:*:*:*:*:*","matchCriteriaId":"3786E2F9-BDDF-4924-8268-AB6F3BA1CE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:16:*:*:*:*:*:*:*","matchCriteriaId":"A441F829-52BB-48D4-BC11-7C3E11CE5662"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:17:*:*:*:*:*:*:*","matchCriteriaId":"CB9D00CC-5A47-43CD-8CDE-C8109B5A2E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:18:*:*:*:*:*:*:*","matchCriteriaId":"FFAA278C-3A6F-4554-B1E9-E85ABCEF9719"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:19:*:*:*:*:*:*:*","matchCriteriaId":"0334052B-C44C-4677-BA37-6D47328BC2E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:20:*:*:*:*:*:*:*","matchCriteriaId":"065B8AC4-D7B2-4914-878A-D35690CFDFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21:*:*:*:*:*:*:*","matchCriteriaId":"81762624-E359-40A2-A7A5-BF553F13986C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21-3:*:*:*:*:*:*:*","matchCriteriaId":"72AD3A9F-6859-48DB-A2CD-69EAE8078BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9E90F1EE-EF43-4DB8-B855-6D6B354845F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3D651820-9933-4E00-A2EE-79B20EAA35B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4E4FF707-85B2-43C5-A32A-021B63071643"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.5:*:*:*:*:*:*:*","matchCriteriaId":"32858EF2-7D65-4616-AEB0-649CE21A3C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E0E07CEB-EDB4-4526-A9B9-2F439A9EE003"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.6:*:*:*:*:*:*:*","matchCriteriaId":"6717E585-5867-4616-8AD1-FEE2F967F710"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AD417548-7DD2-4058-AC32-4019F47B214D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.7:*:*:*:*:*:*:*","matchCriteriaId":"600185BE-98B1-4FDD-867D-153E294ED512"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7E276112-4BC2-41E8-8D99-0DD23E8A25C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.7.2:*:*:*:*:*:*:*","matchCriteriaId":"90A74403-8997-452A-8E86-AA241DB31405"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0925CDFE-8E19-4FE8-A827-509317C55AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.7.4:*:*:*:*:*:*:*","matchCriteriaId":"58589FCF-4341-4603-BC6C-285871623297"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:21.7.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD00DE-9FDE-4D3F-81BD-0EE830E56645"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.0:*:*:*:*:*:*:*","matchCriteriaId":"39867E3E-114A-438A-ACDE-1FF5BA753B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AE61766-C031-4377-8F60-31C15C2F6FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B93AB79-64DD-4C70-8BBA-008A66BB20F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.1:*:*:*:*:*:*:*","matchCriteriaId":"C54D0A0E-58F8-4297-B8F6-71FDBCD6A59F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.2:*:*:*:*:*:*:*","matchCriteriaId":"420D2A52-5D89-444F-9272-D5C89512EA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.3:*:*:*:*:*:*:*","matchCriteriaId":"D3E3A588-9BB0-4197-AADB-F4DAB0CDE2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2A221483-98AA-4B00-A14B-800A8DD8FEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7E54CC40-470C-4335-811B-37E3F1ED1B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3FF2B95-5600-49F7-8B6D-C6B004FDC019"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.3.4:*:*:*:*:*:*:*","matchCriteriaId":"118C46C5-217C-4FD3-AAA0-D03DBD76A117"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.4:*:*:*:*:*:*:*","matchCriteriaId":"D876584E-679C-41BD-9548-24355C038052"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.4.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6D55AC-2199-4C7A-8243-8B821AC1B813"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5:*:*:*:*:*:*:*","matchCriteriaId":"8FE8E132-6A89-4FC2-86AF-FDD0F821B586"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3438F124-0922-4F06-82DF-AB8539FDAEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B6F3632F-7137-422E-83B9-4243CDCFCC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.3:*:*:*:*:*:*:*","matchCriteriaId":"18A1A4BC-DB70-4C64-ABE9-7EBE0D406FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"25F01A0E-1BAD-4D98-84A5-2772C7378920"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C562FF23-D427-49DF-A31A-999A09448179"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.5:*:*:*:*:*:*:*","matchCriteriaId":"9CC59192-A61E-4C8D-ADCB-805D0CB5AC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8FA83594-FCEC-4AC1-B92D-B2EADBCC65C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.7:*:*:*:*:*:*:*","matchCriteriaId":"740D2625-6A11-4241-842B-F7AABEBC50B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"3C8511C9-7A2E-4739-9030-4932264D56AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.8:*:*:*:*:*:*:*","matchCriteriaId":"9091D254-7D2F-46EA-9BCC-14E4CEFD98FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.5.9:*:*:*:*:*:*:*","matchCriteriaId":"FEE1A651-537F-491C-BEA8-D5CE8C262E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:lilo:lilo:22.6:*:*:*:*:*:*:*","matchCriteriaId":"5C636C4B-064C-4FBF-8C10-F05B35AA1DB1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4211","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495801/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495801/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3896","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"Grub Legacy 0.97 y versiones anteriores almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer antes y después del uso, lo cual permite a usuarios locales obtener información sensible leyendo las localizaciones de memoria física asociadas con este búfer."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  Since these operations can only be executed by root, no trust boundary is crossed as a result of this behaviour.","lastModified":"2009-01-29T01:54:44.843"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:*:*:*:*:*:*:*:*","versionEndIncluding":"0.97","matchCriteriaId":"5BE8B287-6A40-4CEC-B5DC-F5CBEC511CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.92:*:*:*:*:*:*:*","matchCriteriaId":"58DBE7A3-6BAC-4181-9698-3D43CC254BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.93:*:*:*:*:*:*:*","matchCriteriaId":"B3785960-09FB-429F-A3A3-66E19EC08041"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.94:*:*:*:*:*:*:*","matchCriteriaId":"578DCB63-0436-465B-9A55-0C54D3B754D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.94-i386-pc:*:*:*:*:*:*:*","matchCriteriaId":"D6A5290A-059D-4D35-A29D-BDFA810B82AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.95:*:*:*:*:*:*:*","matchCriteriaId":"E5923117-1A5E-4847-99A2-9291F21090CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.95-i386-pc:*:*:*:*:*:*:*","matchCriteriaId":"63B8B080-6E14-4DC4-A67D-96717EE24E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.96:*:*:*:*:*:*:*","matchCriteriaId":"B871F2D3-3AFD-4FBF-99BF-6ED834E759B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.96-i386-pc:*:*:*:*:*:*:*","matchCriteriaId":"8A2D8B3C-3377-4C55-BD1C-90847074DD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_legacy:0.97-i386-pc:*:*:*:*:*:*:*","matchCriteriaId":"3AA7F849-F3E1-4779-A687-CFBAD5ABFF24"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4204","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4206","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495726/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495726/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3897","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"DiskCryptor 0.2.6 en Windows almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer antes y después del uso, lo cual permite a usuarios locales obtener información sensible leyendo localizaciones de memoria física asociadas con este búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freed0m:disckcryptor:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"BC1A6D7E-6F72-4ED4-B9A8-5E1DD3B5D3FA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4212","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495725/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495725/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3898","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"Secu Star DriveCrypt Plus Pack 3.9 alamcena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer antes y después del uso, lo cual permite a usuarios locales obtener información sensible leyendo las localizaciones de memoria física asociadas con este búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:secustar:drivecrypt_plus_pack:3.9:*:*:*:*:*:*:*","matchCriteriaId":"03119419-5631-4E22-8521-BEC78D62EE3E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4213","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-0807.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495803/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30818","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-0807.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495803/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3899","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TrueCrypt 5.0 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.  NOTE: the researcher mentions a response from the vendor denying the vulnerability."},{"lang":"es","value":"TrueCrypt 5.0 almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer antes y después del uso, lo cual permite a usuarios locales obtener información sensible leyendo las localizaciones de memoria física asociadas con este búfer.\r\nNOTA: el investigador menciona una respuesta de los vendedores negando la vulnerabilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:truecrypt_foundation:truecrypt:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4F82FEB6-5F30-4E7C-9E69-277DF20B9C85"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4203","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495805/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495805/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3900","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"Software empotrado (firmware) Intel PE94510M.86A.0050.2007.0710.1559 almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer después del uso, lo cual permite a usuarios locales obtener información sensible leyendo las localizaciones de memoria físicas asociadas con este búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:pe94510m.86a.0050.2007.0710.1559:*:*:*:*:*:*:*","matchCriteriaId":"2DE78857-0689-4A17-BE6B-B2D96C80FA5B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4205","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020738","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/604539","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/495804/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/604539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/495804/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3901","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T14:12:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"Software suspend 2 2-2.2.1, cuando se utiliza con Linux kernel 2.6.16, almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer después del uso, lo cual permite a usuarios locales obtener información sensible leyendo las localizaciones de memoria física asociadas con este búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suspend2:software_suspend_2:2-2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AC4263F5-9AED-429A-91A8-F38A88B464C9"}]}]}],"references":[{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3902","sourceIdentifier":"cve@mitre.org","published":"2008-09-03T19:42:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer, aka SSRT080104."},{"lang":"es","value":"Software empotrado (firmware) HP 68DTT F.0D almacena contraseñas de autenticación pre-inicio en el búfer BIOS Keyboard y no limpia este búfer después del uso, lo cual permite a usuarios locales obtener información sensible leyendo localizaciones de memoria física asociadas con este búfer, también conocido como SSRT080104."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:68dtt:f.0d:*:*:*:*:*:*:*","matchCriteriaId":"13D77187-5E8A-44F1-9010-F4F5B3A39076"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4214","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495800/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/preboot-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495800/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3903","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Additional details can be found here: http://www.voipsa.org/pipermail/voipsec_voipsa.org/2006-May/001628.html","cveTags":[],"descriptions":[{"lang":"en","value":"Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3; s800i 1.3.x before 1.3.0.2; and Trixbox PBX 2.6.1, when Digest authentication and authalwaysreject are enabled, generates different responses depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"Asterisk PBX 1.2 a la v.1.6 y Trixbox PBX 2.6.1, cuando se ejecuta con autenticación Digest y authalwaysreject activadas, genera diferentes respuestas dependiendo de si un nombre de usuario SIP es válido o no, lo que permite a atacantes remotos el listar nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:p_b_x:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CE2414C-4DA8-42BB-BF9A-21850C5D60D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:p_b_x:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"90F13AAE-CB97-4EF1-8407-760FB219EAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:p_b_x:1.4.21.1:*:*:*:*:*:*:*","matchCriteriaId":"9A77D2E4-2C33-4208-A760-D102B91E511A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:p_b_x:1.6:*:*:*:*:*:*:*","matchCriteriaId":"15BBAB9C-20A4-48CE-B0EF-5D99E87E20F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trixbox:pbx:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C75A09A7-25CF-4D58-8517-6FB311DA1F1B"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2009-003.html","source":"cve@mitre.org"},{"url":"http://misel.com/?p=52","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37677","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34353","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0933","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45059","source":"cve@mitre.org"},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://misel.com/?p=52","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3904","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename."},{"lang":"es","value":"src/main-win.c en GPicView  0.1.9 en Lightweight X11 Desktop Environment (LXDE), permite a atacantes dependientes de contexto ejecutar comandos de su elección a través de metacaracteres de consola en un nombre de archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lxde:gpicview:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"39056B52-D26B-4665-99BF-EA2B6ED35C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:lxde:lightweight_x11_desktop_environment:*:*:*:*:*:*:*:*","matchCriteriaId":"D8262D1A-396B-4D37-9691-40A09DCFF892"}]}]}],"references":[{"url":"http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/30/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45137","source":"cve@mitre.org"},{"url":"http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3905","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447."},{"lang":"es","value":"resolv.rb en Ruby 1.8.5 y versiones anteriores, 1.8.6 versiones anteriores a 1.8.6-p287, 1.8.7 versiones anteriores a 1.8.7-p72, y 1.9 r18423 y versiones anteriores utiliza transacciones secuenciales de IDs y puertos de origen constante para peticiones DNS, lo cual hace más sencillo para atacantes remotos envenenar respuestas DNS, una vulnerabilidad diferente a CVE-2008-1447.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.5","matchCriteriaId":"9721AB68-8002-4F85-98BC-0E6FDF7CDF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:p286:*:*:*:*:*:*","versionEndIncluding":"1.8.6","matchCriteriaId":"A8C49C83-B7D2-4243-AEBC-835290FA5210"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:p71:*:*:*:*:*:*","versionEndIncluding":"1.8.7","matchCriteriaId":"C7FA4451-B1F8-4504-9FFB-046DD998E846"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:r18423:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"6DFDB9CE-E9F9-4CB2-945F-16DA755C031D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4DCF07C-896A-48B6-AE0B-3306FC31CF44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"46086C6A-9068-4959-BEE7-4D76BDEA3962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"16BDFA5C-35BE-4B7E-BD2D-C28B095F62E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"31160797-6920-4BA1-B355-1CCD1FCDBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675C37-39EF-41EF-9A53-3FCE4CF23820"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"46F29ADA-E6DC-456F-9E63-C56C68EF7E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7AC1B910-C0FA-4943-92B1-597842E84015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*","matchCriteriaId":"DF02372D-FD0B-453F-821E-1E0BA7900711"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p111:*:*:*:*:*:*","matchCriteriaId":"0A6ED369-E564-4D4F-9E23-A8125194EAD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*","matchCriteriaId":"ACC0DB90-C072-4BCB-9082-94394F547D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p230:*:*:*:*:*:*","matchCriteriaId":"4D7ED62B-4D88-46A4-A0A3-BD37E66A5211"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:p36:*:*:*:*:*:*","matchCriteriaId":"FB0372E4-FE3E-49CD-AF55-E2E4518D34F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*","matchCriteriaId":"04579340-B53F-47B5-99C9-B647AAA3D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*","matchCriteriaId":"9D7F4162-108A-470B-8E6B-C009E8C56AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*","matchCriteriaId":"73AB0545-3D8D-4623-8381-D71DA44E3B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"}]}]}],"references":[{"url":"http://secunia.com/advisories/31430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32371","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33178","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.371754","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/9","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31699","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45935","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10034","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/651-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.371754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0897.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/651-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3906","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Sys.Web en Mono 2.0 y anteriores, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de división de respuesta HTTP mediante secuencias CRLF en la cadena de consulta(query)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B31A3175-7CC6-4367-9A3C-F3324156C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DBB77289-2AED-4BD4-9578-FEB0EC83701E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A4299404-6C79-4B21-BB8C-115FA1E3AC28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"919CAD10-2F17-4F94-8116-815E77F5E998"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"19877D33-5DBF-40D7-87CB-545558C64771"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13.4:*:*:*:*:*:*:*","matchCriteriaId":"F64E7267-E010-4FC8-879A-448C85BC250B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13.6:*:*:*:*:*:*:*","matchCriteriaId":"683F75A5-E4E4-4416-8E1C-A2C694A30BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.13.7:*:*:*:*:*:*:*","matchCriteriaId":"EBE3CDD7-8553-4CB7-A0A7-B059B4D75B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DE2C11F2-2A21-481E-8350-F3777A0A8033"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"EFC21FA7-648F-4E41-962B-664140FA4812"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"A9FF02E9-070C-4AAA-ABB7-26FC9E56C7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono:mono:1.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EC72C972-FF09-4A5D-9AD4-A422EDADF5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"0F33FED4-EE33-41EF-8B24-F751D0A9891B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"403E554C-FD1B-42CE-82C2-43CC191905DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"78278FE6-26EA-4E89-9423-EABA6C4D8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"15E1695E-FD6E-4602-9BD9-9CFFF20574CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"691B3AF1-7F3F-4A7D-9F16-FE6044E33482"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2DE3739-A2ED-47D7-9AE9-442A95ACFC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDAB5331-AD2E-483C-93C3-8095BBBA0572"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.9:*:*:*:*:*:*:*","matchCriteriaId":"E3CC03DC-14A6-4C45-9511-7CE8E7F727BB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36494","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0286","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:210","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/27/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496845/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30867","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2443","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=418620","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44740","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/826-1/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/27/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496845/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=418620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/826-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3907","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.openwall.com/lists/oss-security/2008/09/01/4\r\n\r\n\"The previous version allowed to execute arbitrary code by a \r\ncrafted feed URL that is passed as a command line parameter \r\nif the URL is opened by an external browser.\"","cveTags":[],"descriptions":[{"lang":"en","value":"The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL."},{"lang":"es","value":"El comando open-in-browser en newsbeuter versiones anteriores a 1.1 permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de consola en una URL fuente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"276F919F-3181-4ADE-A181-7A8776115338"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A1E21217-98D9-4FAD-88D4-652746FB05C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DA51EDB2-94CD-421C-B7D9-5E3FEEAD194E"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.3:*:*:*:*:*:*:*","matchCriteriaId":"4AF4978C-4EBF-41ED-962F-0890E5BDC071"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.4:*:*:*:*:*:*:*","matchCriteriaId":"DCDA3939-74B1-4A44-955D-1BA1D2A23C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.5:*:*:*:*:*:*:*","matchCriteriaId":"B242B9F1-3B5B-41EE-8CFF-BCC3008B785A"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.6:*:*:*:*:*:*:*","matchCriteriaId":"733B891C-63E6-45A2-AE6D-32A4C860A07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.7:*:*:*:*:*:*:*","matchCriteriaId":"684B7199-9344-4DBA-90AD-DEDEC056F213"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.8:*:*:*:*:*:*:*","matchCriteriaId":"45CD698E-70A1-43A0-B828-3DBD519DDDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"379E21B5-D427-45EC-B674-9BCC8A47CA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"EB0B1B93-8E8C-4A77-98F8-CE5BFED550DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.9:*:*:*:*:*:*:*","matchCriteriaId":"1C907407-E178-43BF-A433-9BC73EB7FD5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsbeuter:newsbeuter:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"DB3A20C1-1FB7-43C8-A78E-FBEBB4E888AF"}]}]}],"references":[{"url":"http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31995","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-12.xml","source":"cve@mitre.org"},{"url":"http://www.newsbeuter.org/downloads/CHANGES","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/01/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30964","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44791","source":"cve@mitre.org"},{"url":"http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.newsbeuter.org/downloads/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/01/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3908","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file).  NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Princeton WordNet (wn) 3.0 permite a atacantes dependientes de contexto ejecutar código de su elección a través de (1)un argumento largo en la línea de comandos; una variable de entorno (2) WNSEARCHDIR, (3) WNHOME, o (4) WNDBVERSION; o (5) un diccionario user-supplied (también conocido como fichero de datos).\r\nNOTA: WordNet no se ejecuta con privilegios especiales, esta cuestión sólo cruza las fronteras de los privilegios cuando WordNet está invocado como un componente de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:princeton_university:wordnet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"57EBB860-30D8-4436-B667-D35DF232A716"}]}]}],"references":[{"url":"http://secunia.com/advisories/32184","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4217","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-014.html","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-014/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-014/wordnet.patch","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495883/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30958","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44848","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44849","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44850","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44851","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-014/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-014/wordnet.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495883/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3909","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests."},{"lang":"es","value":"La administración de la aplicación en Django 0.91, 0.95, y 0.96, almacena peticiones HTTP POST sin autenticación  procesadas tras una autenticación válida, lo que permite a atacantes remotos llevar a cabo ataques de falsificación de peticiones en sitios remotos  (CSRF) además de borrar o modificar información a través de peticiones no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.91:*:*:*:*:*:*:*","matchCriteriaId":"B1CE5394-8883-47DB-9214-CCDD05811179"},{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.95:*:*:*:*:*:*:*","matchCriteriaId":"1D617048-648D-4EA1-A779-F6B157AB641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.96:*:*:*:*:*:*:*","matchCriteriaId":"3F54F75F-B2BC-4A44-B93B-DB75856BEC45"}]}]}],"references":[{"url":"http://osvdb.org/47906","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31837","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31961","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1640","source":"cve@mitre.org"},{"url":"http://www.djangoproject.com/weblog/2008/sep/02/security/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/4","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2533","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460966","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/47906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.djangoproject.com/weblog/2008/sep/02/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3910","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact."},{"lang":"es","value":"dns2tcp anterior a 0.4.1, no maneja de forma adecuada los valores negativos en un tamaño concreto de campo en el argumento input de las funciones (1) dns_simple_decode o (2) dns_decode; esto permite a atacantes remotos sobrescribir un búfer y tener otro impacto no determinado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hsc:dns2tcp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"881FCDEC-2090-4EEF-AB19-9309C9DD409E"}]}]}],"references":[{"url":"http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44974","source":"cve@mitre.org"},{"url":"http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3911","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T17:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file."},{"lang":"es","value":"La función proc_do_xprt de net/sunrpc/sysctl.c del núcleo de Linux 2.6.26.3, no comprueba el tamaño de determinado búfer obtenido del espacio de usuario (userspace), esto permite a los usuarios locales provocar un desbordamiento del búfer de pila y tener otros impactos no especificados mediante una llamada manipulada al sistema de lectura del fichero /proc/sys/sunrpc/transports."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2008-09-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27df6f25ff218072e0e879a96beeb398a79cdbc8","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/8/30/140","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/8/30/184","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31937","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45136","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27df6f25ff218072e0e879a96beeb398a79cdbc8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/8/30/140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2008/8/30/184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3912","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:41.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition."},{"lang":"es","value":"libclamav en ClamAV en versiones anteriores a 0.94 que permite a los atacantes causar una denegación de servicios (puntero NULL no referenciado y caída de la aplicación) a través de vectores relacionados con condiciones de fuera de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndExcluding":"0.94","matchCriteriaId":"E80C5B4C-3ED8-41B2-85CE-60CC51C51B13"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32030","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32424","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1660","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/13","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31051","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020828","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45056","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3913","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:41.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to \"error handling logic\"."},{"lang":"es","value":"Múltiples fugas de memoria en  freshclam/manager.c de ClamAV versiones anteriores a 0.94 puede permitir a atacantes provocar una denegación de servicio (consumo de memoria) a través de vectores no especificados relacionados con \"una ruta errónea\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndExcluding":"0.94","matchCriteriaId":"E80C5B4C-3ED8-41B2-85CE-60CC51C51B13"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32030","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32424","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1660","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/13","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31051","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020828","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45057","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-3914","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:41.290","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the \"error path\" in (1) libclamav/others.c and (2) libclamav/sis.c."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en ClamAV anterior a 0.94 tiene un impacto y vectores desconocidos relacionado con el filtrado del descriptor de archivos sobre el \"error_path\" en (1)libclamav/others.c y (2) libclamav/sis.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.93.3","matchCriteriaId":"E71D5324-4A45-4428-A0AE-0270C9A9DBE5"}]}]}],"references":[{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32030","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32424","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1660","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/13","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/31051","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020828","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45058","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://kolab.org/security/kolab-vendor-notice-22.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/31051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2008-3915","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:41.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl."},{"lang":"es","value":"Desbordamiento del búfer en nfsd en el kernel de Linux anterior a 2.6.26.4, cuando NFSv4 está activado, permite a atacantes remotos realizar acciones con un impacto desconocido a través de vectores que están relacionados con la decodificación de un NFSv4 acl."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/9/3/286","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/18","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/4","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31133","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45055","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/9/3/286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/04/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3916","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://xforce.iss.net/xforce/xfdb/44643\r\n\r\n\"GNU ed is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the strip_escapes() function. By persuading a victim to open a specially-crafted file, a remote attacker could overflow a buffer and execute arbitrary code on the system.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename.  NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer basado en montículo en  la Función strip_escapes en signal.c en GNU ed 1.0, permite a atacantes asistidos por el usuario o dependientes de contexto, ejecutar código de su elección a través de un nombre de archivo largo. NOTA: puesto que ed no se ejecuta con privilegios especiales, esta cuestión solo afecta a los privilegios de la aplicación ed cuando se encuentra añadido en una aplicación de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.2:*:*:*:*:*:*:*","matchCriteriaId":"BCDDC2AA-D846-4CC3-9A9A-58E9F97DB868"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D20E634A-5BAA-4B62-AA57-4C1082AA23C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.4:*:*:*:*:*:*:*","matchCriteriaId":"FCCE07A7-B6F9-44E5-BDBC-D49EB4856D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1825BAFA-D696-458D-A992-997AF5EAAA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.6:*:*:*:*:*:*:*","matchCriteriaId":"AAED7141-9F2C-46CD-8F22-8D76271559D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FA2EBF50-0410-40FE-9D1E-B82D77FE100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.8:*:*:*:*:*:*:*","matchCriteriaId":"DED055D1-3CC7-4A3A-84DE-4AC35D2BA16C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:0.9:*:*:*:*:*:*:*","matchCriteriaId":"7F591660-794F-4FE0-8D57-AC439D482EC7"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/bug-ed/2008-08/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32349","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33005","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-15.xml","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:200","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0946.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501298/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30815","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020734","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0003.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2642","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3347","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44643","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10678","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00847.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00873.html","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/bug-ed/2008-08/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0946.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501298/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00847.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00873.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3917","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS), en index.php de Ovidentia 6.6.5, permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante el parámetro field en una acción de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ovidentia:ovidentia:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"48A2375A-FB03-4D1B-82BC-1F86F1AB8C6A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4219","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495562/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30735","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495562/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3918","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Ovidentia 6.6.5, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro field en una acción de búsqueda. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ovidentia:ovidentia:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"48A2375A-FB03-4D1B-82BC-1F86F1AB8C6A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45940","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3919","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document, as exploited in the wild in August 2008."},{"lang":"es","value":"Vulnerabilidad no especificada en múltiples productos de JustSystems Ichitaro, permite a atacantes remotos ejecutar código de su elección mediante un documento JTD manipulado; como se ha explotado libremente en agosto del 2008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:justsystems:ichitaro:*:*:*:*:*:*:*:*","matchCriteriaId":"869571E4-7544-48EE-9839-927A3F6315E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.justsystems.com/jp/info/pd8002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30828","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020748","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2447","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44681","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.justsystems.com/jp/info/pd8002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3920","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to \"recreate\" and \"hijack\" existing accounts via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en BitlBee versiones anteriores a 1.2.2 permite a atacantes remotos \"recrear\" y \"secuestrar\" cuentas existentes a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"5234626B-088F-43CB-B1CD-7168CF526708"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.71:*:*:*:*:*:*:*","matchCriteriaId":"BA869CB6-9010-4986-BEF0-82A7D90F4B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.72:*:*:*:*:*:*:*","matchCriteriaId":"D35463DF-AFFB-4B40-A152-289F5EE4F846"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.73:*:*:*:*:*:*:*","matchCriteriaId":"DBBBBA08-87CB-4B30-9787-5AA2131E7850"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.74:*:*:*:*:*:*:*","matchCriteriaId":"4572DCBA-1396-4F11-BAAC-93ACE8D89A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.74:a:*:*:*:*:*:*","matchCriteriaId":"B1A38CA9-577C-40B4-8BE0-CB6F5F34C14A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.80:*:*:*:*:*:*:*","matchCriteriaId":"6DAC042F-12A1-46C9-9E38-772AF3453E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.81:*:*:*:*:*:*:*","matchCriteriaId":"9B9F5418-451E-4EC1-B8BE-5B40C26E3426"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.81:a:*:*:*:*:*:*","matchCriteriaId":"19F35887-A34F-44F9-8F7A-AE5E890A4338"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.82:*:*:*:*:*:*:*","matchCriteriaId":"18EA0FF0-603D-42B1-AB11-CFDB8F3BBDA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.83:*:*:*:*:*:*:*","matchCriteriaId":"15E60F85-3752-4C72-AA65-F6966D229C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.84:*:*:*:*:*:*:*","matchCriteriaId":"1AF48476-6959-49B6-855A-D6AA9B4D60B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.85:*:*:*:*:*:*:*","matchCriteriaId":"FC95F758-AE0E-4A66-944D-B81B58FE83AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.85:a:*:*:*:*:*:*","matchCriteriaId":"A57B7ED0-7059-4742-8F76-B1FE1A4C391F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.90:*:*:*:*:*:*:*","matchCriteriaId":"330A1A1D-D49D-4D1B-92D2-9A4B370CC2BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.90:a:*:*:*:*:*:*","matchCriteriaId":"0E59BD57-69E2-4817-B9AC-5493521F0E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.91:*:*:*:*:*:*:*","matchCriteriaId":"57780106-63FE-4689-AD84-6D6037F9DB13"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.92:*:*:*:*:*:*:*","matchCriteriaId":"45A04FA0-6357-47D0-A1E1-501906CDBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.93:*:*:*:*:*:*:*","matchCriteriaId":"98AE68C3-3EF3-4CAF-B567-AD9178807136"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.93:a:*:*:*:*:*:*","matchCriteriaId":"AEBF00E7-3B11-4CC9-BF19-557FBF7246A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:0.99:*:*:*:*:*:*:*","matchCriteriaId":"4F892102-902D-400B-836F-8FDE99882554"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C864877F-81D6-4C86-8BEB-88437E84B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA332C38-688D-4F7D-937C-24EC22C36C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D76DADC-BDCE-43BE-AA3B-582A6A8BCE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7845BB36-FA0A-4934-8C57-EE0FF3AEE3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADCB7D85-8880-4BC8-9C81-A585476748B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.1:dev:*:*:*:*:*:*","matchCriteriaId":"6F79D42E-252A-4C2D-9D74-B545A8B6F746"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.1.1:dev:*:*:*:*:*:*","matchCriteriaId":"09FC7E58-BB36-46A1-91AD-D858B6CAB133"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B6CBB5AA-DF56-47AA-BB50-0EC87931D1C1"}]}]}],"references":[{"url":"http://bitlbee.org/main.php/changelog.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31690","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31991","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-14.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30858","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44699","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00045.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00692.html","source":"cve@mitre.org"},{"url":"http://bitlbee.org/main.php/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00692.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3921","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en AWStats Totals 1.0 a la v1.14, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) month y (2) year."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB4AC543-C314-40F1-9DE7-80BC7CE8CFD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.1:*:*:*:*:*:*:*","matchCriteriaId":"333F1513-9A70-4688-99A4-A9762D601AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.11:*:*:*:*:*:*:*","matchCriteriaId":"51AEF1B6-8C0A-4887-A627-2EE3B533216F"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.13:*:*:*:*:*:*:*","matchCriteriaId":"567AC813-9B48-41CE-B289-E2ACB6AE5EA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.14:*:*:*:*:*:*:*","matchCriteriaId":"9A3E6A6E-668B-463D-BCF3-45A86D7F5ACE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4218","source":"cve@mitre.org"},{"url":"http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495770/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.telartis.nl/xcms/awstats/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495770/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.telartis.nl/xcms/awstats/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3922","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function."},{"lang":"es","value":"awstatstotals.php de AWStats Totals 1.0 hasta 1.14, permite a atacantes remotos ejecutar código de su elección a través de secuencias PHP en el parámetro sort que se emplea en la función multisort cuando de forma dinámica se crea una función PHP anónima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB4AC543-C314-40F1-9DE7-80BC7CE8CFD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.1:*:*:*:*:*:*:*","matchCriteriaId":"333F1513-9A70-4688-99A4-A9762D601AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.11:*:*:*:*:*:*:*","matchCriteriaId":"51AEF1B6-8C0A-4887-A627-2EE3B533216F"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.13:*:*:*:*:*:*:*","matchCriteriaId":"567AC813-9B48-41CE-B289-E2ACB6AE5EA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:telartis_bv:awstats_totals:1.14:*:*:*:*:*:*:*","matchCriteriaId":"9A3E6A6E-668B-463D-BCF3-45A86D7F5ACE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4218","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/8259","source":"cve@mitre.org"},{"url":"http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/17324","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495770/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30856","source":"cve@mitre.org"},{"url":"http://www.telartis.nl/xcms/awstats/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44712","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/8259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/17324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495770/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.telartis.nl/xcms/awstats/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3923","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en statistics.php en Content Management Made Easy (CMME)1.12, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) page y (2) year en una acción hstat_year."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*","matchCriteriaId":"63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17"}]}]}],"references":[{"url":"http://secunia.com/advisories/31599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4220","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44685","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6313","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3924","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Make a backup\" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover (1) account names and (2) password hashes via a direct request for (a) backup/cmme_data.zip or (b) backup/cmme_cmme.zip.  NOTE: it was later reported that vector a also affects CMME 1.19."},{"lang":"es","value":"La funcionalidad \"hacer una copia de seguridad\" en Content Management Made Easy (CMME) 1.12 almacena información sensible bajo la web raíz con controles de acceso insuficientes, lo cual permite a atacantes remotos descubrir (1) nombres de cuentas y (2) hashes de contraseñas a través de peticiones directas para (a) backup/cmme_data.zip o (b) backup/cmme_cmme.zip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*","matchCriteriaId":"63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17"}]}]}],"references":[{"url":"http://secunia.com/advisories/31599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4220","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44684","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6313","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3925","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en admin.php de Content Management Made Easy (CMME) 1.12, permite a atacantes remotos provocar el cierre de sesión de un usuario administrador a través de una acción de cierre de sesión (logout)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*","matchCriteriaId":"63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4220","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44686","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6313","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3926","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the env parameter in a weblog action to index.php, or (2) create arbitrary directories via a .. (dot dot) in the env parameter in a login action to admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Content Management Made Easy (CMME) 1.12, permite a atacantes remotos (1) leer archivos de su elección a través de .. (punto punto) en el parámetro \"env\" en una acción weblog al index.php o (2), crear directorios de su elección a través de ..(punto punto) en el parámetro \"env\" en una acción login en admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*","matchCriteriaId":"63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17"}]}]}],"references":[{"url":"http://secunia.com/advisories/31599","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4220","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30854","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44683","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44687","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6313","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3927","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"genmsgidx en Tiger 3.2.2 permite a usuarios locales sobrescribir o borrar ficheros de su elección a través de un ataque symlink en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiger:tiger:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A57817BD-AEAE-4D15-BCF8-6F3E28DE0167"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/tiger","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30876","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44732","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/tiger","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3928","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file."},{"lang":"es","value":"El archivo test.sh en Honeyd versión 1.5c, podría permitir a usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink sobre un archivo temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:honeyd_common:1.5:c_5:*:*:*:*:*:*","matchCriteriaId":"F2E81DF4-CE50-436A-BB2A-056539089C78"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496365","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/honeyd-common","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-12.xml","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30874","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44735","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/honeyd-common","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3929","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file."},{"lang":"es","value":"El archivo gather-messages.sh en Ampache versión 3.4.1, permite a usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink sobre el archivo temporal /tmp/filelist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ampache:ampache:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9D6BF01C-34DF-4B86-AC69-F83B26C637A5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ampache","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/ampache/releases/283935","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-22.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30875","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44739","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ampache","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/ampache/releases/283935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3930","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file."},{"lang":"es","value":"En el archivo migrate_aliases.sh en Citadel Server versión 7.37,  permite a usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink sobre un archivo temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:citadel_server:7.37:3:*:*:*:*:*:*","matchCriteriaId":"02A1897A-4D15-4B82-8646-0337FEE77EF5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496359","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/citadel-server","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31648","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30877","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44734","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/citadel-server","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3931","sourceIdentifier":"cve@mitre.org","published":"2008-09-04T18:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"javareconf en R 2.7.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque symlink en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:r_foundation:r:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"75410192-EAC4-4E4B-903B-E4032BD8E25B"}]}]}],"references":[{"url":"http://bugs.debian.org/496418","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core-ra","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31996","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200809-13.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:198","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30878","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235822","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44736","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core-ra","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3932","sourceIdentifier":"secalert@redhat.com","published":"2008-09-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop."},{"lang":"es","value":"Wireshark (anteriormente Ethereal) 0.9.7 hasta 1.0.2, permite a los atacantes causar una denegación de servicio (cuelgue), a través de un paquete NCP manipulado que provoca un bucle infinito."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3283D8D0-0714-48CC-94C4-B5FA6C913A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"090B987C-9880-4221-BC4C-8D53A8801649"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"06828062-5F31-4532-9E24-34F29CE30218"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"5738F4F0-41C6-48CF-8233-C94D79DCA807"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"}]}]}],"references":[{"url":"http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31886","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32028","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32091","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020819","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2493","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"secalert@redhat.com"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45309","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11273","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"secalert@redhat.com"},{"url":"http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3933","sourceIdentifier":"secalert@redhat.com","published":"2008-09-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function."},{"lang":"es","value":"Aplicación Wireshark (conocida como Ehtereal) 0.10.14 a la v 1.0.2, permite a atacantes provocar una denegación de servicio (caída) a través de un paquete con datos zlib-compressed manipulados que lanzan una lectura errónea en la función tvb_uncompress."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"}]}]}],"references":[{"url":"http://secunia.com/advisories/31864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31886","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32028","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32091","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32944","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020819","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2493","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"secalert@redhat.com"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2649","source":"secalert@redhat.com"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2682","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9620","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3934","sourceIdentifier":"secalert@redhat.com","published":"2008-09-04T19:41:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file."},{"lang":"es","value":"Vulnerabilidad no especificada en Wireshark (anteriormente Ethereal) 0.99.6 hasta 1.0.2, permite a los atacantes provocar una denegación de servicio (caída), mediante un fichero Tektronix .rf5 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"}]}]}],"references":[{"url":"http://secunia.com/advisories/31864","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31886","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32028","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32091","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020819","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2493","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"secalert@redhat.com"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15087","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9920","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200809-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0890.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3935","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en DIC shop_v50 3.0 y anteriores y shop_v52 2.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:d-ic:shop_v50:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"D45F6140-0B9B-472A-8A62-CC4FC5DC9CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:d-ic:shop_v52:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"CDB6415E-3854-4F5B-ACD2-49802060C2F6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN79914432/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.d-ic.com/free/05/shop_v50.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.d-ic.com/free/05/shop_v52.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31006","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN79914432/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.d-ic.com/free/05/shop_v50.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.d-ic.com/free/05/shop_v52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3936","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long URI."},{"lang":"es","value":"El interfaz web en Dreambox DM500C permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una URI larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:dreambox:dm500c:*:*:*:*:*:*:*:*","matchCriteriaId":"5F08705D-5332-4EF5-A091-1DF9D5D3FAD9"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064115.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4221","source":"cve@mitre.org"},{"url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495837/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30919","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020784","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2472","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44788","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495837/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3937","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) user_id parameter in an edit action to user_admin.php, the (2) title parameter to listings.php, and the (3) redirect_url parameter to user_profile.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Open Media Collectors Database (OpenDb) 1.0.6 permiten a atacantes remotos inyectar arbitrariamente secuencias de comandos web o HTML a través de los parámetros (1) user_id parameter en una acción edit en user_admin.php, (2) title en listings.php y (3) redirect_url en user_profile.php."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendb:opendb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"491811EF-12FE-40CA-BCDA-9E30A84AF6A2"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30989","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3938","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) de user_admin.php en Open Media Collectors Database (OpenDb) 1.0.6 permite a atacantes remotos cambiar arbitrariamente contraseñas mediante una acción update_password."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendb:opendb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"491811EF-12FE-40CA-BCDA-9E30A84AF6A2"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-3939","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI."},{"lang":"es","value":"Vulnerabilidad de Salto de Directorio del interfaz web en AVTECH PageR Enterprise anteriores a la 5.0.7 permite a atacantes remotos leer arbitrariamente archivos mediante secuencias de salto de directorio en la URI."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avtech:pager_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.2","matchCriteriaId":"BA7F5415-B9AF-4D8F-84FF-A27DE94A9EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avtech:pager_enterprise:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"859A8F71-577B-4DFE-B1DC-E69C638F9096"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064227.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30987","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064227.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3940","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file."},{"lang":"es","value":"Vulnerabilidad de formato de cadena del cliente finger en HP TCP/IP Services para OpenVMS 5.x, permite a usuarios locales obtener privilegios mediante especificadores de cadena de formato en un archivo 1) .plan or (2) .project ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openvms:5:*:*:*:*:*:*:*","matchCriteriaId":"45640632-DCE1-47B1-9378-31D99A68F051"}]}]}],"references":[{"url":"http://deathrow.vistech.net/DEFCON16/VMS.PDF","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31587","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30948","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2463","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44752","source":"cve@mitre.org"},{"url":"http://deathrow.vistech.net/DEFCON16/VMS.PDF","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3941","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en BizDirectory 2.04 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro page en una acción search de la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bizdirectory:bizdirectory:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04","matchCriteriaId":"C66576F5-C0C1-4B87-9239-459BCCA52C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdirectory:bizdirectory:1.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0B9219-4BBC-4AD5-BB25-B65F48EFA64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdirectory:bizdirectory:2.0:*:*:*:*:*:*:*","matchCriteriaId":"63A628B7-8C25-4FE9-9E73-10B909EC5F53"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122039853426550&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4222","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30980","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122039853426550&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3942","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en landsee.php en Full PHP Emlak Script permite a atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ozsari:full_php_emlak_script:*:*:*:*:*:*:*:*","matchCriteriaId":"4CBB02E2-D30F-4C10-BA0F-81B796EE0D42"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/phpemlak-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30962","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44887","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/phpemlak-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3943","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en listtest.php de eZoneScripts Living Local 1.1, permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonescripts:living_local:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2BB288BC-B61E-4D7C-AEE5-56C8A6A8CE70"}]}]}],"references":[{"url":"http://secunia.com/advisories/31696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4223","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31001","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6361","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3944","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de ACG-PTP 1.0.6, permite a atacantes remotos ejecutar comandos SQL arbitrariamente mediante el comando adid de una acción adorder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discountedscripts:acg_ptp:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9E03AE80-84A8-4FE4-85F8-4839002AD92F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4224","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6362","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3945","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T15:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php de Words tag 1.2, permite a atacantes remotos, ejecutar comandos SQL arbitrariamente mediante el parámetro word de una acción claim."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:source_workshop:words_tag_script:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3553DAB6-A654-4DB3-90F0-CDD103DC3E40"}]}]}],"references":[{"url":"http://secunia.com/advisories/31653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4225","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3946","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file."},{"lang":"es","value":"El cliente finger en HP TCP/IP Services para OpenVMS 5.x permite a usuarios locales leer arbitrariamente archivos a través de un enlace correspondiente a un archivo (1) .plan o (2) .project ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openvms:5:*:*:*:*:*:*:*","matchCriteriaId":"45640632-DCE1-47B1-9378-31D99A68F051"}]}]}],"references":[{"url":"http://deathrow.vistech.net/DEFCON16/VMS.PDF","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45135","source":"cve@mitre.org"},{"url":"http://deathrow.vistech.net/DEFCON16/VMS.PDF","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3947","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line."},{"lang":"es","value":"DCL (también conocido como CLI) en OpenVMS Alpha 8.3 permite a usuarios locales obtener provilegios mediante una línea de comandos larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:8.3:*:alpha:*:*:*:*:*","matchCriteriaId":"FE96813C-F81B-46F2-99A4-06A9FEE718FA"}]}]}],"references":[{"url":"http://deathrow.vistech.net/DEFCON16/VMS.PDF","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45047","source":"cve@mitre.org"},{"url":"http://deathrow.vistech.net/DEFCON16/VMS.PDF","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3948","sourceIdentifier":"cve@mitre.org","published":"2008-09-05T16:08:00.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/users/self-2.php en XRMS permite a atacantes remotos ejecutar comandos SQL arbitrariamente y modificar los campos nombre y email mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrms:xrms_crm:1.99.2:*:*:*:*:*:*:*","matchCriteriaId":"D595D870-7D0C-41C5-9DAF-FF36B4AFC7A6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495981/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45048","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3949","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:52:13.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute arbitrary code via a Trojan horse Python file."},{"lang":"es","value":"El archivo emacs/lisp/progmodes/python.el en Emacs versiones 22.1 y 22.2 importa script de Python desde el directorio de trabajo actual durante la edición de un archivo Python, que permite a los usuarios locales ejecutar código arbitrario por medio de un archivo Python de tipo caballo de Troya."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the emacs package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2017-08-07T21:32:17.483"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"67527281-81FA-4068-9E0A-7B19FB6A208A"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/emacs-devel/2008-09/msg00215.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34004","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200902-06.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31052","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=424340","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45021","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/emacs-devel/2008-09/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200902-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=424340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3950","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.337","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read."},{"lang":"es","value":"Error de superación de límite en la función _web_drawInRect:withFont:ellipsis:alignment:measureOnly \r\nen el WebKit en Safari en Apple iPhone 1.1.4 y 2.0 e iPod touch 1.1.4 y 2.0, permite a atacantes remotos provocar una denegación de servicio (caída de navegador) a través de una llamada a una alerta JavaScript con un argumento que carece de caracteres frágiles y tiene una longitud que es múltiplo del tamaño de memoria, lo que conduce a una lectura fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6430229D-ACD4-46AE-A6B5-95D3CC1AF514"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:2.0:*:*:*:*:*:*:*","matchCriteriaId":"70647BF0-56BE-44ED-A6E7-10C372E0BA0C"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E969C4E-45A5-4767-9959-A1AD2DE4E1C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:2.0:*:*:*:*:*:*:*","matchCriteriaId":"188712AA-31CA-4209-9042-D6E986C630A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4264","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/iphone-safari-javascript-alert-denial-of-service","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496321/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31061","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/4264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/iphone-safari-javascript-alert-denial-of-service","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/496321/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-3951","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.383","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the ann_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_ann.php de Vastal I-Tech Agent Zone (también conocido como The Real Estate Script) permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro ann_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:agent_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"D14595BF-746C-4A40-8453-C11BA3CD5855"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31032","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44945","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6371","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3952","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.397","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en questions.php en EsFaq 2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"idcat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts_esfaq:2.0:*:*:*:*:*:*:*:*","matchCriteriaId":"29F7B40C-F2B2-4ED3-AA05-BE4D85EF9DF7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4231","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31036","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44957","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6383","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6383","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3953","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en keyword_search_action.php de Vastal I-Tech Shaadi Zone 1.0.9, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro tage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:shaadi_zone:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"741CCF21-94FF-4294-B94A-D1AA81781017"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4232","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44947","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6385","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3954","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.447","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de AlstraSoft Forum Pay Per Post Exchange, permite a atacantes remotos ejecutar comandos SQL de su elección, mediante un parámetro cat en una acción showcat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:forum_pay_per_post_exchange:*:*:*:*:*:*:*:*","matchCriteriaId":"DBCF7CD8-465E-4B78-A188-BB696749EED0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4233","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020829","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44932","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6396","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3955","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.460","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo Masir Camp E-Shop Module  3.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ordercode en una página veiworderstatus."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:masir_camp:e-shop_module:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"2B2491E9-6D8E-4F39-A4AE-A7463D561A67"}]}]}],"references":[{"url":"http://bugreport.ir/index_52.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4234","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31046","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44933","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6395","source":"cve@mitre.org"},{"url":"http://bugreport.ir/index_52.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3956","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file."},{"lang":"es","value":"orgchart.exe en Microsoft Organization Chart 2.00 permite a los atacantes con la ayuda del usuario local causar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo manipulado .opx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:organization_chart:2.00:*:*:*:*:*:*:*","matchCriteriaId":"DF966DC5-F2C6-45E7-9F0B-ADCEC8939556"}]}]}],"references":[{"url":"http://www.nullcode.com.ar/ncs/crash/orgchart.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44993","source":"cve@mitre.org"},{"url":"http://www.nullcode.com.ar/ncs/crash/orgchart.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3957","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.507","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"El control ActiveX de Microsoft Windows Image Acquisition Logger permite a atacantes remotos forzar la descarga de ficheros de su elección dentro de un sistema cliene a través de una URL en el primer argumento del método Open, en conjunción con una ruta de destino completa en el primer argumento del método Save.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_image_acquisition_logger:*:*:*:*:*:*:*:*","matchCriteriaId":"FF2D7CD1-DEBD-4A26-BB8C-C24325DD9217"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31069","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/31069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/31069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3958","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://secunia.com/advisories/31787\r\n\r\nSome vulnerabilities have been reported in DB2, where some have an unknown impact and others can be exploited by malicious users to perform certain actions with escalated privileges, and by malicious people to cause a DoS or potentially compromise a vulnerable system.","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.  NOTE: this may overlap CVE-2008-3858.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3959."},{"lang":"es","value":"IBM DB2 UDB 8 antes del Fixpak 17 permite a atacantes remotos provocar una denegación de servicio (caída de la instancia) mediante una cadena de datos CONNECT/ATTACH manipulada que simula una petición de cliente V7 conectar/adjuntar. NOTA: esto podría superponerse con CVE-2008-3858. NOTA: este problema existe debido a un parche incompleto para CVE-2008-3959."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"8A94F484-424C-4DF3-9327-95CFC7B4A83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CC1FC760-D058-4DE6-80B3-F3AA22757A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*","matchCriteriaId":"72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*","matchCriteriaId":"BB299EAB-31AA-4BAA-B477-0F909A8418AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*","matchCriteriaId":"6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*","matchCriteriaId":"222C1B84-0C28-451F-BB02-4CB925263312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*","matchCriteriaId":"08177181-660C-4BF4-9031-74EE89297CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*","matchCriteriaId":"AB51AF7F-6D09-4EEE-AE8E-E6CCF06C28E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*","matchCriteriaId":"64BC5E59-361E-4343-9BB9-9772D47E57B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*","matchCriteriaId":"A2E1FC49-96AF-4933-BBE8-71DAEAEDD855"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*","matchCriteriaId":"0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*","matchCriteriaId":"56B7F547-3519-4A12-AB65-C1768153A7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*","matchCriteriaId":"FE9D14B8-5B4E-4D27-88B9-EBAC46D8282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*","matchCriteriaId":"19584860-5ADF-4647-AF39-88C236407FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*","matchCriteriaId":"6669F847-ED6A-422F-85F7-DAF9B0159F01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*","matchCriteriaId":"20FE296C-25D0-4689-BAA3-AFCA2C1CC388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*","matchCriteriaId":"E8D354AD-995D-4FC8-A7C4-7860549A1634"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://osvdb.org/48144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45133","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3959","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.557","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request."},{"lang":"es","value":"IBM DB2 UDB 8.1 anterior FixPak 16, y v8.2 anterior al FixPak 9, permite a atacantes remotos provocar una denegación de servicio (caída de instancia) a través de un flujo de datos CONNECT/ATTACH manipulado que simula una petición cliente connect/attach V7."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp15:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"512B9F94-00CE-4479-B3EA-91D74097CB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp8:*:*:*:*:*:*","versionEndIncluding":"8.2","matchCriteriaId":"7FC6A358-2290-4E14-B4FE-05195992C05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2418C923-2F94-4FAF-A9BD-D1C436308C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*","matchCriteriaId":"18D59696-A477-4397-BC14-4EF69DAFA262"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*","matchCriteriaId":"BBABCAC8-0E04-44FC-BF1A-88CACB28E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*","matchCriteriaId":"AC318EEC-AFE5-4070-8711-B6560143CF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*","matchCriteriaId":"5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*","matchCriteriaId":"DCF379F0-6D58-47A9-849E-C48D13496C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*","matchCriteriaId":"8AEBA7BD-E897-438E-8DD5-7AB5490AB931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*","matchCriteriaId":"BAA746B2-AC20-49D3-B8C6-655C268CB253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*","matchCriteriaId":"0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*","matchCriteriaId":"AC4145E1-A805-4E64-904C-03B0B13BADBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*","matchCriteriaId":"281B0499-11FD-4B99-B402-B44B609469E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*","matchCriteriaId":"385C934A-4374-491C-8A61-EBCC5E72AF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*","matchCriteriaId":"286E4585-57F7-428D-B9C2-63B33FA2BF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*","matchCriteriaId":"E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:*:*:*:*:*:*:*","matchCriteriaId":"64D7ACC0-4CF4-4B60-902C-C47DFCD097A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*","matchCriteriaId":"55ABF9A3-7776-4C0B-A6CC-45955E42DA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:*","matchCriteriaId":"9DF77950-22DE-4BA2-A10F-10953F6119E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:*","matchCriteriaId":"57F66472-61EC-4467-ACF6-2893BF9E4050"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:*","matchCriteriaId":"403EF6EC-9EEF-40F1-BA5C-F6211AADC9A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*","matchCriteriaId":"2CE8E119-58C7-4BF0-9C74-93F44E4FC732"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:*","matchCriteriaId":"2F16D689-D091-47AA-96EC-6B419D4A6CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp7:*:*:*:*:*:*","matchCriteriaId":"AAEFCEBE-4CBC-4301-BEC6-9D9C9C3E0539"}]}]}],"references":[{"url":"http://secunia.com/advisories/29022","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05043","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-01.shtml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45134","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.appsecinc.com/resources/alerts/db2/2008-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3960","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via \"malicious packets.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el JDBC Applet Server Service (también conocido como db2jds) en IBM DB2 UDB 8 anterior al fixpack 17, permite a atacantes remotos provocar una denegación de servicio (caída de servicio) a través de \"paquetes maliciosos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp16:*:*:*:*:*:*","versionEndIncluding":"8.2","matchCriteriaId":"CD142750-345A-4494-AD18-6066ACE7FD6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:*:*:*:*:*:*:*","matchCriteriaId":"2A1C6146-5EE5-4CD0-B6AC-3F41937C2FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp1:*:*:*:*:*:*","matchCriteriaId":"84FCC3B8-58C0-4739-A184-FE3D5171E6D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp10:*:*:*:*:*:*","matchCriteriaId":"1261651A-8849-40A2-9E1C-E40F0033E6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp11:*:*:*:*:*:*","matchCriteriaId":"62B91891-59A3-4F3C-A0AB-196CCEA72643"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp12:*:*:*:*:*:*","matchCriteriaId":"F4D3EC1B-B162-4FCC-B573-E45917F5D51A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp13:*:*:*:*:*:*","matchCriteriaId":"770BC7B2-6539-4C38-B246-32997A0D932C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp14:*:*:*:*:*:*","matchCriteriaId":"4381E4E3-1E56-45E7-BF66-001DA1CFE18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp15:*:*:*:*:*:*","matchCriteriaId":"F3FB2953-6048-4C98-AC6A-272DCF7BEC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp2:*:*:*:*:*:*","matchCriteriaId":"F0C9DEFD-F626-43B4-84E8-665CCED9BBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp3:*:*:*:*:*:*","matchCriteriaId":"B4784B3C-FE9A-4D24-8C54-5733B775A36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp4:*:*:*:*:*:*","matchCriteriaId":"AE9F3357-AF23-4DE5-A026-862A08522137"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp5:*:*:*:*:*:*","matchCriteriaId":"04D3F6B0-AF46-44F0-BA93-4154C84E23C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp6:*:*:*:*:*:*","matchCriteriaId":"62FF3DAA-5693-438C-89EB-1DF6765DB66C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp7:*:*:*:*:*:*","matchCriteriaId":"E7B0A924-F4E1-4F82-9FCC-12EDBC76867C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp8:*:*:*:*:*:*","matchCriteriaId":"925077BB-0D08-4655-805E-F685DAE049F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:fp9:*:*:*:*:*:*","matchCriteriaId":"A77736D2-8351-405D-88F7-14AE37AA1AA1"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://osvdb.org/48148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31058","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020826","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44984","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3961","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Adobe Illustrator CS2 sobre Macintosh, permite a atacantes asistidos por usuarios ejecutar código de su elección a través de un archivo AI manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:illustrator:cs2:*:mac:*:*:*:*:*","matchCriteriaId":"872A071E-0BA6-43E8-81F0-5A46E3C81B27"}]}]}],"references":[{"url":"http://secunia.com/advisories/31902","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-07.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31208","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020892","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2600","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3962","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.587","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message."},{"lang":"es","value":"La función from_format en el archivo ssmtp.c en ssmtp versiones 2.61 y 2.62, en determinadas configuraciones, utiliza memoria no inicializada para el campo From: de un mensaje de correo electrónico, lo que podría permitir a los atacantes remotos obtener información confidencial (contenido de memoria) en circunstancias oportunistas mediante la lectura de un mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssmtp:ssmtp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"E340EC83-0A43-4D94-A938-5D54C0589601"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssmtp:ssmtp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"19A13D99-C357-4F06-BA4D-A25EF8C0C51B"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31094","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2597","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/234391","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45038","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/234391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3963","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.617","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement."},{"lang":"es","value":"MySQL versiones 5.0 anteriores a 5.0.66, versiones 5.1 anteriores a 5.1.26 y versiones 6.0 anteriores a 6.0.6, no maneja apropiadamente un token b'' (b comilla simple comilla simple), también se conoce como literal de cadena de bits vacía, que permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) mediante el uso de este token en una sentencia SQL."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect MySQL as supplied with Red Hat Enterprise Linux 3 or 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 and Red Hat Application Stack v2\nhttps://rhn.redhat.com/cve/CVE-2008-3963.html","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"214E3CF9-6362-4F5A-91B7-5E69564F7144"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"19001041-22C4-4D2C-A918-378DACBB1DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1668BB5B-E7FB-4430-B8D5-89E308F5DD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F48E7355-2D9A-454D-AE66-B0AE015E31A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E51BF67A-BAEC-48F8-9290-67C6C5B8442E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5C6A2F-DEAE-470D-8888-0E9076CCA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1C09231E-8759-4DFB-AA8D-17A1C6D43AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"81592813-78D9-4366-AD2E-94677D93F599"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=35658","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-66.html","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-26.html","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/refman/6.0/en/news-6-0-6.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31769","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32769","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1783","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/7","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020858","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/237166","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45042","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10521","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/bug.php?id=35658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-66.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-26.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/6.0/en/news-6-0-6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/237166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3964","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c."},{"lang":"es","value":"Múltiples desbordamientos de entero en libpng versiones anteriores a 1.2.32beta01, y 1.4 versiones anteriores a 1.4.0beta34, permiten a atacantes dependientes de contexto provocar una denegación de servicio (caída) o tener otros impactos desconocidos a través de una imagen PNG con fragmentos zTXt manipulados, relacionado con (1) la función png_push_read_zTXt en pngread.c, y posiblemente relacionado con (2) pngtest.c."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the versions of libpng as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2017-08-07T21:32:18.343"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.32","matchCriteriaId":"7F293C5F-122C-49DA-880A-BA95EE79A42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F44C0B27-5D6D-41E4-8EA9-F6F88D347C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta10:*:*:*:*:*:*","matchCriteriaId":"FE5DEC4E-76F7-486C-B4E0-F3D88695A9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta11:*:*:*:*:*:*","matchCriteriaId":"BC4807AA-BCD3-45D0-9C1D-4B8AD878B327"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta12:*:*:*:*:*:*","matchCriteriaId":"F257A4AC-6B13-4D67-B168-AD5BF28962DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta13:*:*:*:*:*:*","matchCriteriaId":"11DDEF8A-B308-46A2-B368-C46688C3E54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta14:*:*:*:*:*:*","matchCriteriaId":"3426A085-E295-47A5-8D2F-C55451EB89BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta15:*:*:*:*:*:*","matchCriteriaId":"74E87513-DA93-4AE0-89FB-08902997810A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta16:*:*:*:*:*:*","matchCriteriaId":"97187A00-2680-45AA-AAE7-F16DD01957AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta17:*:*:*:*:*:*","matchCriteriaId":"14A3D8E7-AE1E-4D4E-9B9F-98CC50AF984C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta18:*:*:*:*:*:*","matchCriteriaId":"2C517B08-4D43-457D-BD00-6920CF2924B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta19:*:*:*:*:*:*","matchCriteriaId":"C7FC9A8E-0CE8-4B9F-AFFF-D8AFC16013AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"68658B69-A70B-4982-8E14-57202F8DA03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta20:*:*:*:*:*:*","matchCriteriaId":"7CD59594-E67B-460E-A8A7-1A2A57187050"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta21:*:*:*:*:*:*","matchCriteriaId":"52510ECE-10CB-4F8B-827E-8DB1784EA1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta22:*:*:*:*:*:*","matchCriteriaId":"1EF398FE-E664-460A-9B21-4B0C454A053F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta23:*:*:*:*:*:*","matchCriteriaId":"89799F7C-B866-4647-8A56-302F1E006506"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta24:*:*:*:*:*:*","matchCriteriaId":"E43A4742-A419-49FA-9F60-F6E77E4D2870"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta25:*:*:*:*:*:*","matchCriteriaId":"4880A92D-3A86-451C-8995-54068FBB1B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta26:*:*:*:*:*:*","matchCriteriaId":"C7B88A47-4E4C-49E6-978C-468530C87C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta27:*:*:*:*:*:*","matchCriteriaId":"336375B9-8B1C-46F1-A512-4EE631A1E18F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta28:*:*:*:*:*:*","matchCriteriaId":"E7229CC7-A325-4C68-BD76-BEE198E09F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta29:*:*:*:*:*:*","matchCriteriaId":"43803CBE-A2F4-40EC-97EB-63526240D5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"8F0F7323-986F-4E3A-AA8C-BDBFA2B53F05"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta30:*:*:*:*:*:*","matchCriteriaId":"626FEAE3-ABDE-4E50-9549-6C2D4415EF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta31:*:*:*:*:*:*","matchCriteriaId":"AF5EE51D-586A-4454-B746-8A18FFA84005"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta32:*:*:*:*:*:*","matchCriteriaId":"CCF71D7A-5B9B-4973-9143-D3625383A3F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta33:*:*:*:*:*:*","matchCriteriaId":"6129A9F4-343E-4DCB-B252-DA0744A7C5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"1D4C2F83-2302-43B3-8DB7-EA4DD7D75283"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta5:*:*:*:*:*:*","matchCriteriaId":"C88C4762-4EBE-442D-9154-89EFD8654409"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta6:*:*:*:*:*:*","matchCriteriaId":"1E512280-AC4B-401D-A499-A460AD1F2C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta7:*:*:*:*:*:*","matchCriteriaId":"76C52B6B-9CCB-458C-ABF9-5E334ABB107B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta8:*:*:*:*:*:*","matchCriteriaId":"84EE5F48-E15F-4CE9-84F3-9859F72D9651"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta9:*:*:*:*:*:*","matchCriteriaId":"35B244AD-138C-406D-99F4-E33BDF87BFA8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31781","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33137","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35302","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-15.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=e56ccc8f0809180317u6a5306fg14683947affb3e1b%40mail.gmail.com&forum_name=png-mng-implement","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=624517","source":"cve@mitre.org","tags":["Product","Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=624518","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/889484","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:051","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/8","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31049","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2512","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1462","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1560","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44928","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=e56ccc8f0809180317u6a5306fg14683947affb3e1b%40mail.gmail.com&forum_name=png-mng-implement","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=624517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=624518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/889484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3965","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information - http://community.mybboard.net/showthread.php?tid=36022","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en misc.php de MyBB (también conocido como MyBulletinBoard) anterior a 1.4.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante cierto editor de campos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"BE928783-BD14-4BCD-BC6E-13E406431705"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD61D970-9363-4A75-A8DB-D0EBA2CF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*","matchCriteriaId":"990E206E-5E2C-4A68-9FDF-CD47F7524054"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF143B59-5C78-4BF6-9368-5BCF427B4753"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B16F6F07-F5A9-47BF-88ED-25F068B68CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A8A46A48-1361-4DD3-B97D-4C4FC776D68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"337D89AE-1B7A-4101-B1F7-DFEDF2369385"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BE08AF25-EDB1-4DA1-B431-F0692858AAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF24E7BA-3144-4DBA-9613-A44FBE0822F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"029430A5-85BD-4258-B58D-F3DCBC625E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4183DB7F-FAB3-4D90-AD87-31CA4150CFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3E2B90B8-DC02-4C79-BD69-DEF79945C418"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C5C52215-D236-4D1A-9E30-14B9676FB68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E080342-93CD-4E74-AE60-5858738CE7F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B48D2EDF-86C2-475C-9476-E5A2D586CA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B6725373-C229-4B57-BB1E-AF178E19DEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36E4C84A-21D5-4C9A-85F8-45C9657CE6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C7E55085-E3E3-4BB8-A680-19A28D7E88F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB01A9AA-AE70-46DF-815A-05D1101EE706"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"98AFD77B-A046-4AB9-B6F4-FFFF66C63C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AA00D38E-AAF6-4F66-9203-5C074FC61F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"137A8CED-BE82-462F-B83C-15F535961E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D179FDB6-9B1D-438C-B512-9A5C4F869A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3A2D344F-4671-4194-A553-A5773B5DF3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"245760C8-DC10-47F1-843A-461AE2F3DF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A055E6BF-3CAC-4C74-8E37-A89E3E0F8559"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"1121A071-3709-4B2B-ADF4-EDC560F73E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*","matchCriteriaId":"F6ABDEE8-D463-47CA-998D-33472F3382F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*","matchCriteriaId":"DE44965F-F968-4CD2-9F21-1E1A92F5F7F2"}]}]}],"references":[{"url":"http://community.mybboard.net/attachment.php?aid=10579","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/showthread.php?tid=36022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31760","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/9","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31104","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/attachment.php?aid=10579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://community.mybboard.net/showthread.php?tid=36022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3966","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.680","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information - http://community.mybboard.net/showthread.php?tid=36022\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MyBB (alias MyBulletinBoard) en versiones anteriores a 1.4.1 que permite a los atacantes remotos inyectar una secuencia arbitraria de comandos web o HTML a través de (1) un cierto campo origen en in usercp2.php, (2) un cierto campo origen en inc/functions_online.php, y ciertos campos (3) tsubject y (4) psubject en moderation.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"BE928783-BD14-4BCD-BC6E-13E406431705"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD61D970-9363-4A75-A8DB-D0EBA2CF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*","matchCriteriaId":"990E206E-5E2C-4A68-9FDF-CD47F7524054"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF143B59-5C78-4BF6-9368-5BCF427B4753"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B16F6F07-F5A9-47BF-88ED-25F068B68CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A8A46A48-1361-4DD3-B97D-4C4FC776D68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"337D89AE-1B7A-4101-B1F7-DFEDF2369385"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BE08AF25-EDB1-4DA1-B431-F0692858AAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF24E7BA-3144-4DBA-9613-A44FBE0822F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"029430A5-85BD-4258-B58D-F3DCBC625E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4183DB7F-FAB3-4D90-AD87-31CA4150CFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3E2B90B8-DC02-4C79-BD69-DEF79945C418"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C5C52215-D236-4D1A-9E30-14B9676FB68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E080342-93CD-4E74-AE60-5858738CE7F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B48D2EDF-86C2-475C-9476-E5A2D586CA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B6725373-C229-4B57-BB1E-AF178E19DEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36E4C84A-21D5-4C9A-85F8-45C9657CE6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C7E55085-E3E3-4BB8-A680-19A28D7E88F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB01A9AA-AE70-46DF-815A-05D1101EE706"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"98AFD77B-A046-4AB9-B6F4-FFFF66C63C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AA00D38E-AAF6-4F66-9203-5C074FC61F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"137A8CED-BE82-462F-B83C-15F535961E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D179FDB6-9B1D-438C-B512-9A5C4F869A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3A2D344F-4671-4194-A553-A5773B5DF3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"245760C8-DC10-47F1-843A-461AE2F3DF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A055E6BF-3CAC-4C74-8E37-A89E3E0F8559"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"1121A071-3709-4B2B-ADF4-EDC560F73E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*","matchCriteriaId":"F6ABDEE8-D463-47CA-998D-33472F3382F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*","matchCriteriaId":"DE44965F-F968-4CD2-9F21-1E1A92F5F7F2"}]}]}],"references":[{"url":"http://community.mybboard.net/attachment.php?aid=10579","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://community.mybboard.net/showthread.php?tid=36022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31760","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/9","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31104","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/attachment.php?aid=10579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://community.mybboard.net/showthread.php?tid=36022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3967","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.710","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information - http://community.mybboard.net/showthread.php?tid=36022\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors."},{"lang":"es","value":"moderation.php en MyBB (también conocido como MyBulletinBoard) versiones anteriores a 1.4.1 no comprueba adecuadamente los privilegios del moderados, lo cual tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"BE928783-BD14-4BCD-BC6E-13E406431705"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD61D970-9363-4A75-A8DB-D0EBA2CF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*","matchCriteriaId":"990E206E-5E2C-4A68-9FDF-CD47F7524054"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF143B59-5C78-4BF6-9368-5BCF427B4753"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B16F6F07-F5A9-47BF-88ED-25F068B68CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A8A46A48-1361-4DD3-B97D-4C4FC776D68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"337D89AE-1B7A-4101-B1F7-DFEDF2369385"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BE08AF25-EDB1-4DA1-B431-F0692858AAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BF24E7BA-3144-4DBA-9613-A44FBE0822F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"029430A5-85BD-4258-B58D-F3DCBC625E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4183DB7F-FAB3-4D90-AD87-31CA4150CFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3E2B90B8-DC02-4C79-BD69-DEF79945C418"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C5C52215-D236-4D1A-9E30-14B9676FB68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E080342-93CD-4E74-AE60-5858738CE7F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B48D2EDF-86C2-475C-9476-E5A2D586CA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B6725373-C229-4B57-BB1E-AF178E19DEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36E4C84A-21D5-4C9A-85F8-45C9657CE6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C7E55085-E3E3-4BB8-A680-19A28D7E88F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB01A9AA-AE70-46DF-815A-05D1101EE706"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"98AFD77B-A046-4AB9-B6F4-FFFF66C63C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AA00D38E-AAF6-4F66-9203-5C074FC61F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"137A8CED-BE82-462F-B83C-15F535961E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D179FDB6-9B1D-438C-B512-9A5C4F869A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3A2D344F-4671-4194-A553-A5773B5DF3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"245760C8-DC10-47F1-843A-461AE2F3DF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A055E6BF-3CAC-4C74-8E37-A89E3E0F8559"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"1121A071-3709-4B2B-ADF4-EDC560F73E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*","matchCriteriaId":"F6ABDEE8-D463-47CA-998D-33472F3382F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*","matchCriteriaId":"DE44965F-F968-4CD2-9F21-1E1A92F5F7F2"}]}]}],"references":[{"url":"http://community.mybboard.net/attachment.php?aid=10579","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/showthread.php?tid=36022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31760","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/9","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31104","source":"cve@mitre.org"},{"url":"http://community.mybboard.net/attachment.php?aid=10579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://community.mybboard.net/showthread.php?tid=36022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3968","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information - http://punbb.informer.com/downloads.php","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in userlist.php in PunBB before 1.2.20 allows remote attackers to inject arbitrary web script or HTML via the p parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados XSS en el archivo userlist.php en PunBB, versiones anteriores a 1.2.20, que permite a los atacantes remotos inyectar una secuencia arbitraria de comandos web o HTML a través del parámetro p."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.19","matchCriteriaId":"27B90B3E-CED5-4A47-B1B3-8C209B4B72BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4C9B6A22-A7BD-4C31-B4BB-A3BA43F4B9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C80A6D72-289A-4F53-AF80-6F2697AFF2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:*","matchCriteriaId":"9CADED1D-A90F-485E-B9EB-8CCAA22C9FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"037398E0-C125-48DC-B0D8-FEE9DBEF6374"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D1E6BBD6-5EE2-4412-92E1-48401F3622C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3BEBC325-DD6F-4DB1-84B8-86C26AC4165C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"78C47271-AED6-444B-B2E6-EF2A48B15600"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4546E547-54E1-4FB9-9F20-7C70B9F86BC6"}]}]}],"references":[{"url":"http://punbb.informer.com/download/changelogs/1.2.19_to_1.2.20.txt","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/forums/topic/19682/punbb-1220-and-13rc-hotfix-released/","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/10","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31082","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45046","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/download/changelogs/1.2.19_to_1.2.20.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/forums/topic/19682/punbb-1220-and-13rc-hotfix-released/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3969","sourceIdentifier":"secalert@redhat.com","published":"2008-09-11T01:13:47.743","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to \"overwrite\" and \"hijack\" existing accounts via unknown vectors related to \"inconsistent handling of the USTATUS_IDENTIFIED state.\" NOTE: this issue exists because of an incomplete fix for CVE-2008-3920."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en BitlBee versiones anteriores a 1.2.3 permiten a atacantes remotos \"sobrescribir\" y \"secuestrar\" cuentas existentes a través de vectores no especificados.\r\nNOTA: esta cuestión existe debido a una incompleta para fijar CVE-2008-3920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitlbee:bitlbee:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.3","matchCriteriaId":"22BB0F1F-4F49-44F6-A843-0FF2BD9B7A1E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31690","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31991","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-14.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.bitlbee.org/main.php/changelog.html","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.bitlbee.org/main.php/news.r.html","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/08/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/11","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31342","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461424","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45132","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200809-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.bitlbee.org/main.php/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.bitlbee.org/main.php/news.r.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/08/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-3970","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.773","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount."},{"lang":"es","value":"pam_mount de 0.10 a 0.45, cuando luserconf está habilitado, no verifica el punto de montado y la propiedad de la fuente antes de montar un volumen definido por el usuario, lo que permite a usuarios locales evitar las restricciones de seguridad previstas mediante un montado local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.10:*:*:*:*:*:*:*","matchCriteriaId":"A7D478C5-EECA-4A9D-ADBD-C9AFAFE94E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.11:*:*:*:*:*:*:*","matchCriteriaId":"96E07B6D-7D59-460D-9275-547B8B63A1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.12.2:*:*:*:*:*:*:*","matchCriteriaId":"7183C519-20AD-406D-9BD3-0BAE48E152F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.13:*:*:*:*:*:*:*","matchCriteriaId":"82D6E283-9C31-439A-BC07-803AEC82DAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.15:*:*:*:*:*:*:*","matchCriteriaId":"6024CCA7-9D10-4454-9ECD-4BAA2D04ECFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.16:*:*:*:*:*:*:*","matchCriteriaId":"6648C387-8CB0-4A85-9519-936D69702014"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.17:*:*:*:*:*:*:*","matchCriteriaId":"A5D15F17-C156-49A2-8264-D20DC071E8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.18:*:*:*:*:*:*:*","matchCriteriaId":"AEDD6FCB-3458-4B93-9E4D-19F0DDF5D5C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.19:*:*:*:*:*:*:*","matchCriteriaId":"604B374A-EBA8-4484-8146-E8A22CD47500"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.20:*:*:*:*:*:*:*","matchCriteriaId":"2038FB85-9BE6-4898-B3BC-ABF855867925"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.21:*:*:*:*:*:*:*","matchCriteriaId":"A287FE36-E10C-4D66-B232-DEC60C1BE3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.26:*:*:*:*:*:*:*","matchCriteriaId":"F93BAF34-E8E8-47EF-A079-84973F3C0FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.27:*:*:*:*:*:*:*","matchCriteriaId":"6B96BDC1-CA33-4809-AF87-914A911AC4D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.28:*:*:*:*:*:*:*","matchCriteriaId":"26D5DE86-5A6B-4A5A-965B-5995BE7A0E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.29:*:*:*:*:*:*:*","matchCriteriaId":"7F5A26C9-A241-4D8E-BD5C-F2B8E356C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.31:*:*:*:*:*:*:*","matchCriteriaId":"EDDCBC8D-F126-44B8-A192-1AAE7E16F64F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.32:*:*:*:*:*:*:*","matchCriteriaId":"C86A5D35-D2BD-4188-9F83-501B519F38BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.35:*:*:*:*:*:*:*","matchCriteriaId":"8AF4B1D5-8561-4CB4-B4F5-11F053B1A7E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.35.1:*:*:*:*:*:*:*","matchCriteriaId":"48A0C1F7-95C3-4A97-8DC5-A906DC613C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.37:*:*:*:*:*:*:*","matchCriteriaId":"BC298554-7EE1-49B7-B7C5-B993BD5C4BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.38:*:*:*:*:*:*:*","matchCriteriaId":"CAE31E92-2E80-4BEA-A7A5-FD9785636233"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.39:*:*:*:*:*:*:*","matchCriteriaId":"BAD839E1-0DA1-4299-9114-BC20B9C7FBE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.40:*:*:*:*:*:*:*","matchCriteriaId":"3A596466-EED4-4027-8104-A3F69A8DB20E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.41:*:*:*:*:*:*:*","matchCriteriaId":"EC7B417D-89BF-4EC0-8BF3-2538007F56A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.43:*:*:*:*:*:*:*","matchCriteriaId":"DABC048E-4DCC-403C-8F8F-722D7F11C096"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.44:*:*:*:*:*:*:*","matchCriteriaId":"611E3C6D-8E1A-4EC2-A86E-F56E82489404"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mount:pam_mount:0.45:*:*:*:*:*:*:*","matchCriteriaId":"C0CA4CB5-C87C-41C0-95AD-CF8302BDCA84"}]}]}],"references":[{"url":"http://dev.medozas.de/gitweb.cgi?p=pam_mount%3Ba=commitdiff%3Bh=33b91d7659ae3aa78b1e94fd3f8e545ae5ff25db","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=alpine.LNX.1.10.0809042353120.17569%40fbirervta.pbzchgretzou.qr&forum_name=pam-mount-user","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=624240","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:208","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/06/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/12","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44960","source":"cve@mitre.org"},{"url":"http://dev.medozas.de/gitweb.cgi?p=pam_mount%3Ba=commitdiff%3Bh=33b91d7659ae3aa78b1e94fd3f8e545ae5ff25db","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=alpine.LNX.1.10.0809042353120.17569%40fbirervta.pbzchgretzou.qr&forum_name=pam-mount-user","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=624240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/06/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3971","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.790","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the open_man_file function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion.  NOTE: another overflow was reported using a configuration file, but that vector does not have a scenario that crosses privilege boundaries."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función open_man_file en callbacks.c de gmanedit 0.4.1, permite a atacantes remotos ejecutar código de su elección a través de una página man manipulada; la cual no es manejada adecuadamente durante la conversión utf8. NOTA: Se ha reportado otro desbordamiento que utiliza un fichero de configuración, pero esa vulnerabilidad no tiene un escenario que cruce los límites de los privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gmanedit2:gmanedit:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"16BC0971-3B8D-4C2E-ADC9-8303BD649C70"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497835","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/06/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/13","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/19","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44962","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44963","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3972","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:47.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Direct Patch Link - http://www.opensc-project.org/files/opensc/opensc-0.11.6.tar.gz","cveTags":[],"descriptions":[{"lang":"en","value":"pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the \"OpenSC\" string, which might allow physically proximate attackers to exploit vulnerabilities that the card owner expected were patched, as demonstrated by exploitation of CVE-2008-2235."},{"lang":"es","value":"pkcs15-tool en OpenSC antes de 0.11.6 no aplica las actualizaciones de seguridad a una tarjeta inteligente a menos que la etiqueta de la tarjeta corresponda con la cadena \"OpenSC\", lo que podría permitir a atacantes físicamente próximos explotar vulnerabilidades que el propietario de la tarjeta creía que estaban parcheadas, como se demostró con la explotación de CVE-2008-2235."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.5","matchCriteriaId":"5C5385FB-359D-4A1D-9CC7-803536F497CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"471DBF4E-54B8-4776-A0BA-0F65FE02192E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC7891E-1898-442A-96BB-5B8EE5A5B400"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EA4321E6-1D08-489C-948F-2673C30D762C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8498096A-19A9-4C09-99C3-CC1C45D6BA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"5028CF13-2807-4813-A542-A1CD6E735CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CE75F1ED-E653-482C-B960-42DA2854E974"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"931CE287-97AF-4B73-BA57-FB9B9AAA7016"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"04701B8B-523A-4148-805C-419336D91CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"2194636B-7F74-4EC2-A02F-CE0F29914D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"E1D617E6-4EEC-4024-92D7-930F9A90F6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"428986EC-328E-49F8-AAE7-EECD97F6B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6A64E85D-B1A7-48FB-8438-8173249ED817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"13234C4B-7598-46B1-A8F0-7C0C863DE4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"FFC7C1A0-83AA-4989-A023-0B22B95133B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"B093D7C9-242E-4CC7-9971-71D9AE19A7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"353AFA23-88C0-45AA-B9EF-EF7A4DC6AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"EA2024C5-238A-4734-B8C6-D4F99EEFBC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"DF611D89-FA24-4421-A8A8-5290629C81D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.3:pre3:*:*:*:*:*:*","matchCriteriaId":"0ECCFF79-6515-42F8-B986-4C06BE1F79D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.4:*:*:*:*:*:*:*","matchCriteriaId":"A74B19CB-8AFB-4A07-9A84-063BFF47E089"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:siemens:cardos:m4:*:*:*:*:*:*:*","matchCriteriaId":"FEF8B710-EAF0-4381-B1C5-B2EAA91737DE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32099","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34362","source":"cve@mitre.org"},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2008-August/000021.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/14","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45045","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2008-August/000021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3975","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:10.910","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3977."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Portal en Oracle Application Server 9.0.4.3 y 10.1.2.3 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-3977."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021054","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45881","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3976","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:10.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-3413 and CVE-2009-3414."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad, relacionado con SYS.LT y WMSYS.LT, una vulnerabilidad diferente a CVE-2008-3982 y CVE-2008-3983."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45882","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3977","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:10.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3975."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Portal en Oracle Application Server 9.0.4.3 y 10.1.2.3 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-3975."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021054","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45883","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3980","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.003","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Upgrade component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Upgrade de Oracle Database 10.1.0.5 y 10.2.0.3 permite a usuarios autentificados remotamente afectar a la confidencialidad e integridad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45884","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3982","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.020","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3983 and CVE-2008-3984."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad, relacionado con SYS.LT y WMSYS.LT, una vulnerabilidad diferente a CVE-2008-3983 y CVE-2008-3984."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45885","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3983","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.037","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3984."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad, relacionado con SYS.LT y WMSYS.LT, una vulnerabilidad diferente a CVE-2008-3982 y CVE-2008-3984."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45886","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3984","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad, relacionado con SYS.LT y WMSYS.LT, una vulnerabilidad diferente a CVE-2008-3982 y CVE-2008-3983."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45887","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3985","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.083","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Oracle Applications Technology Stack de Oracle E-Business Suite 12.0.4 permite a atacantes remotos comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021057","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45888","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3986","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.097","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Discoverer Administrator en Oracle Application Server v9.0.4.3 y v10.1.2.2 permite a usuarios locales afectar a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.0},"baseSeverity":"LOW","exploitabilityScore":1.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021054","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45889","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3987","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.113","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Discoverer Desktop de Oracle Application Server 10.1.2.3 permite a los usuarios locales comprometer la confidencialidad de los datos a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.0},"baseSeverity":"LOW","exploitabilityScore":1.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021054","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45890","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3988","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificadas en el componente iSupplier Portal en Oracle E-Business Suite v11.5.10.2 y v12.0.4 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:10.2:*:*:*:*:*:*:*","matchCriteriaId":"54646D05-F061-413D-8181-99194DF5AE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*","matchCriteriaId":"1DC2C3EF-B1A4-4BF9-B534-A7ABB6490CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021057","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45891","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3989","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.160","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability, related to DMSYS.ODM_MODEL_UTIL."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Data Mining 10.2.0.3 permite a un usuario remoto autentificado comprometer la confidencialidad, integridad y disponibilidad de los datos; está relacionado con DMSYS.ODM_MODEL_UTIL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45892","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3990","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.177","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3991."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle OLAP en Oracle Database 9.2.08, 9.2.0.8DV y 10.1.0.5 permite a usuarios remotos autenticados afectar la disponibilidad, relacionado con OLAPSYS.CWM2_OLAP_AW_AWUTIL, una vulnerabilidad diferente a CVE-2008-3991."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45893","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3991","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.207","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3990."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle OLAP en Oracle Database 9.2.08, 9.2.0.8DV y 10.1.0.5 permite a usuarios remotos autenticados afectar la disponibilidad, relacionado con OLAPSYS.CWM2_OLAP_AW_AWUTIL, una vulnerabilidad diferente a CVE-2008-3990."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45894","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3992","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.223","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to DMSYS.DBMS_DM_EXP_INTERNAL."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Data Mining de Oracle Database 10.2.0.4 permite a usuarios remotamente autentificados afectar a la confidencialidad e integridad, relacionada con DMSYS.DBMS_DM_EXP_INTERNAL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45896","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3993","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.237","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote authenticated users to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Framework component en Oracle E-Business Suite v11.5.10.2 y v12.0.4 permite a usuarios remotos autenticados afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:10.2:*:*:*:*:*:*:*","matchCriteriaId":"54646D05-F061-413D-8181-99194DF5AE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*","matchCriteriaId":"1DC2C3EF-B1A4-4BF9-B534-A7ABB6490CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021057","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45897","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3994","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.270","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to WMSYS.LTADM."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Workspace Manager de Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3 y 11.1.0.6 permite a un atacante remoto comprometer la confidencialidad y la integridad, en relación con WMSYS.LTADM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45898","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3995","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.287","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Change Data Capture de la base de datos Oracle 10.1.0.5, 10.2.0.4 y 11.1.0.6, permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad, en relación con DBMS_CDC_PUBLISH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45899","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3996","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_IPUBLISH."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Change Data Capture de Oracle Database 10.1.0.5, 10.2.0.4 y 11.1.0.6 permite a usuarios remotamente autentificados afectar a la confidencialidad e integridad, relacionada con SYS.DBMS_CDC_IPUBLISH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45900","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3998","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"vulnerabilidad no especificada en el componente Oracle iStore en Oracle E-Business Suite v12.0.4 permite a usuarios remotos autenticados afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021057","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45901","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4000","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality and integrity via unknown vectors.  NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue allows bypass of the lockout mechanism using brute force guessing of credentials and a response discrepancy information leak when the password is correct."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.48.18 y v8.49.14 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.48.18:*:*:*:*:*:*:*","matchCriteriaId":"DDBFDD4C-E08E-4A50-BA64-37ADBD74BBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.14:*:*:*:*:*:*:*","matchCriteriaId":"8025564F-6B4B-4917-A036-2E4636766638"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.18:*:*:*:*:*:*:*","matchCriteriaId":"31AB60B9-5213-423F-ADF7-1E2CB62B596B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_peopletools:8.49.14:*:*:*:*:*:*:*","matchCriteriaId":"07EC0483-2BF6-4EF1-AFB0-FBA01F19B867"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/497543/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021055","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45902","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497543/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4001","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.363","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 and EP 9.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise Portal de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne EP 8.9 y EP 9.0 permite a usuarios autentificados remotamente afectar a la confidencialidad e integridad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_ep:8.9:*:*:*:*:*:*:*","matchCriteriaId":"B73DAAFF-035F-4414-9A96-6A6862378FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_ep:9.0:*:*:*:*:*:*:*","matchCriteriaId":"D4516043-6CB0-46F7-B983-3254171F8FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:*:*:*:*:*:*:*","matchCriteriaId":"07C74F20-5A1B-4C01-83F7-BB7CF11B7A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0B4851-1897-414C-B7D2-4C158D648629"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021055","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45903","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4002","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.397","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente PeopleTools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.48.18 y 8.49.14 permite a los usuarios remotos autenticados afectar a la confidencialidad de la aplicación a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.18:*:*:*:*:*:*:*","matchCriteriaId":"A311CE2E-1D13-4384-8798-08ACB5EFDA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.14:*:*:*:*:*:*:*","matchCriteriaId":"8025564F-6B4B-4917-A036-2E4636766638"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.18:*:*:*:*:*:*:*","matchCriteriaId":"31AB60B9-5213-423F-ADF7-1E2CB62B596B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.14:*:*:*:*:*:*:*","matchCriteriaId":"6C970B69-FC07-4F34-A807-64AA08AF4BB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021055","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45904","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4003","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.427","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleTools de Oracle PeopleSoft Enterprise y de JD Edwards EnterpriseOne 8.48.18 y 8.49.14 permite a un atacante remoto comprometer la confidencialidad por medio de un ataque desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.48.18:*:*:*:*:*:*:*","matchCriteriaId":"A311CE2E-1D13-4384-8798-08ACB5EFDA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.14:*:*:*:*:*:*:*","matchCriteriaId":"8025564F-6B4B-4917-A036-2E4636766638"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.48.18:*:*:*:*:*:*:*","matchCriteriaId":"31AB60B9-5213-423F-ADF7-1E2CB62B596B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.14:*:*:*:*:*:*:*","matchCriteriaId":"6C970B69-FC07-4F34-A807-64AA08AF4BB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021055","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45905","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4004","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad sin especificar en el componente JDE EnterpriseOne Business Service Server de Oracle PeopleSoft Enterprise, y de JD Edwards EnterpriseOne 8.97.2.2 y 8.98.0.1 permite a un usuario local comprometer la integridad de los datos por medio de un ataque desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.2},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.97.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E2065FF-8C76-4AE0-A8BA-E7E52109364E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.98.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FE0FDFCF-F412-4D90-9CD7-D64B34E959DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.97.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2ABFCDEB-2907-4893-AF35-5084EC16B662"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.98.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7593CFCE-EF2C-4AE7-AEC5-CC2E472F8780"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021055","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45906","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4005","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.473","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Application Express de Oracle en Oracle Database 11.1.0.6 permite a atacantes autentificados remotamente afectar a la confidencialidad, integridad y disponibilidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:M/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"MULTIPLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.2,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32291","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021050","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45907","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/32291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4008","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.487","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a stack-based buffer overflow in the WebLogic Apache Connector, related to an invalid parameter."},{"lang":"es","value":"Una vulnerabilidad sin especificar en el plugin de WebLogic Server para el componente Apache del BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, y 6.1 SP7 permite afectar la confidencialidad, integridad y disponibilidad a atacantes remotos a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:6.1:sp7:*:*:*:*:*:*","matchCriteriaId":"4CDF7FE1-3DB4-4C59-8B6C-1541CC552CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=751","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021056","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4009","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.520","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when configuring multiple authorizers, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite versión 9.1, al configurar varios autorizadores, permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32304","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021056","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45908","source":"secalert_us@oracle.com"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2802.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2802.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4010","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.537","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to \"some NetUI tags.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Workshop en BEA Product Suite versiones 10.3, 10.2, 10.0 MP1, 9.2 MP3 y 8.1 SP6, permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad por medio de desconocidos vectores relacionados con \"some NetUI tags\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.2:*:*:*:*:*:*:*","matchCriteriaId":"47D631E9-C2EE-4A63-AA5F-DEDBA5649BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32302","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021056","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909","source":"secalert_us@oracle.com"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2803.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4011","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.550","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote authenticated users to affect integrity via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server de BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1 y 9.0 permite afectar la integridad del producto a usuarios remotos autenticados a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021056","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45910","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4012","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to \"some NetUI pageflows.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Workshop en BEA Product Suite WLW versión 8.1SP5, permite a los atacantes remotos afectar la confidencialidad, integridad y disponibilidad por medio de vectores desconocidos relacionados con \"some NetUI pageflows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_workshop:8.1:sp5:*:*:*:*:*:*","matchCriteriaId":"2A3EDCCD-7E39-4B84-B1CB-9BFDDA6F2313"}]}]}],"references":[{"url":"http://secunia.com/advisories/32303","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021056","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45911","source":"secalert_us@oracle.com"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2805.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.bea.com/application_content/product_portlets/securityadvisories/2805.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4013","sourceIdentifier":"secalert_us@oracle.com","published":"2008-10-14T21:11:11.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server de BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0 y 8.1 SP6 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021056","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45912","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4018","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T01:13:52.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors.  NOTE: this can be leveraged to gain privileges. NOTE: this issue exists because of an incomplete fix for CVE-2007-5805."},{"lang":"es","value":"swcons en bos.rte.console en IBM AIX v5.2.0 a v 6.1.1, permite a usuarios locales en el grupo de \"sistema\" crear o sobreescribir archivos de su elección y establecer permisos débiles y asignar la propiedad del archivo a administradores a través de vectores no especificados. NOTA: esto puede ser aprovechado para obtener privielegios. NOTA: esta vulnerabilidad existe por un fallo no corregido en CVE-2007-5805."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31739","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020818","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18334","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18335","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18338","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18339","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18341","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ28943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30999","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2490","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44903","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5932","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/swcons_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ18341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ28943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4019","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.943","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office SharePoint Server 2007 Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file containing a formula within a cell, aka \"Formula Parsing Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en la función REPT en Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, y 2007 Gold y SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats Gold y SP1; Office SharePoint Server 2007 Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac, permite a atacantes remotos ejecutar código de su elección a través de un archivo Excel con una fórmula dentro de una celda. También conocida como \"Vulnerabilidad de validación de Fórmula\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"A07483B7-E30C-43F3-B54B-2864BE9AD704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:-:*:*:*:*:*:*","matchCriteriaId":"BB7D84EE-5AF2-44AF-AFA1-7BB555AA0B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:-:*:*:*:*:*:*:*","matchCriteriaId":"EEAAF38A-FE97-40FC-9BBF-763785853DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:-:*:*:*:*:*:*","matchCriteriaId":"1F005DF3-BA80-49D0-B2B1-06DFD74ED9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*","matchCriteriaId":"0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*","matchCriteriaId":"421ACF1B-1B21-4416-98ED-BAA5C210EAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:-:*:*:*:*:*:*","matchCriteriaId":"7C150805-6157-43E3-A913-E021F97E7F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*","matchCriteriaId":"4BC69733-551E-4535-B851-4A3EF71E98CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:*:*:*:*:*:x64:*","matchCriteriaId":"6CD4AE15-F3AA-4661-8466-36C2866C0457"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:-:*:*:*:*:*:*","matchCriteriaId":"F537E651-28E9-4CA5-AA54-E59F7DAA08E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"CF3C2971-447B-4054-86C6-3169B82E525B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:x64:*","matchCriteriaId":"BA4BFFB7-4173-423E-A2E5-9F49B3836132"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32211","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31706","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021044","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2808","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45580","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45581","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6102","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4020","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a document that contains a \"Content-Disposition: attachment\" header and is accessed through a cdo: URL, which renders the content instead of raising a File Download dialog box, aka \"Vulnerability in Content-Disposition Header Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en Microsoft Office XP SP3, permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante un documento que contiene una cabecera \"Content-Disposition: attachment\" y se accede a ella a través de un cdo: URL; esto traduce el contexto en vez de mostrar un cuadro de diálogo de Descarga de Fichero. También se conoce como \"Vulnerabilidad en Cabeceras Content-Disposition\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN55410403/index.html","source":"secure@microsoft.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000070.html","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32138","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31693","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021045","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2807","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-056","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45546","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45550","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5969","source":"secure@microsoft.com"},{"url":"http://jvn.jp/en/jp/JVN55410403/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4023","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:15.973","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka \"Active Directory Overflow Vulnerability.\""},{"lang":"es","value":"Active Directory en Microsoft Windows 2000 SP4 no asigna memoria correctamente para peticiones 1) LDAP y (2) LDAPS, lo que permite a atacantes remotos ejecutar código de su elección mediante una petición manipulada, también conocido como \"Active Directory Overflow Vulnerability (Vulnerabilidad de Desbordamiento de Active Directory)\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32242","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31609","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021042","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2811","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-060","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45585","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6107","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4024","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.783","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an \"arbitrary free,\" aka \"Word Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Word 2000 SP3 y 2002 SP3 y Office 2004 para Mac permiten a los atacantes remotos ejecutar código arbitrario por medio de un documento de Word con un campo lcbPlcfBkfSdt creado en el Bloque de Información de Archivos (FIB), que omite un paso de inicialización y activa un \"arbitrary free,\" aka \"Word Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.coresecurity.com/content/word-arbitrary-free","source":"secure@microsoft.com"},{"url":"http://www.coresecurity.com/files/attachments/CORE-2008-0228-Word.pdf","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499086/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5934","source":"secure@microsoft.com"},{"url":"http://www.coresecurity.com/content/word-arbitrary-free","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/files/attachments/CORE-2008-0228-Word.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499086/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4025","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.800","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via (1) an RTF file or (2) a rich text e-mail message containing an invalid number of points for a polyline or polygon, which triggers a heap-based buffer overflow, aka \"Word RTF Object Parsing Vulnerability.\""},{"lang":"es","value":"Desbordamiento de enteros en Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3 y 2007 Gold y SP1; Outlook 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Paquete de Compatibilidad de Office para formatos de archivo de Word, Excel, y PowerPoint 2007; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac, permite a los atacantes remotos ejecutar código arbitrario por medio de (1) un archivo RTF o (2) un mensaje de correo electrónico de texto enriquecido que contiene un número no válido de puntos para una polilínea o polígono, lo que desencadena un desbordamiento de búfer en la región heap de la memoria, también se conoce como \"Word RTF Object Parsing Vulnerability.\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://secunia.com/secunia_research/2008-21/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499054/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5682","source":"secure@microsoft.com"},{"url":"http://secunia.com/secunia_research/2008-21/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499054/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4026","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.817","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Word document that contains a malformed value, which triggers memory corruption, aka \"Word Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, y 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Office Compatibility Pack para Word, Excel y PowerPoint 2007 File Formats Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac permite a los atacantes remotos ejecutar arbitrariamente código, a través de un documento Word manipulado que contiene un valor malformado, el cual lanza una corrupción de memoria, alias \"Vulnerabilidad de corrupción de memoria en Word\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5807","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4027","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.830","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted (1) RTF file or (2) rich text e-mail message with multiple consecutive Drawing Object (\"\\do\") tags, which triggers a \"memory calculation error\" and memory corruption, aka \"Word RTF Object Parsing Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de Doble Liberación en Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3 y 2007 Gold y SP1; Outlook 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Paquete de compatibilidad de Office para formatos de archivo de Word, Excel y PowerPoint 2007 Gold y SP1; y Office 2004 para Mac permite a los atacantes remotos ejecutar código arbitrario por medio de un (1) archivo RTF o (2) un mensaje de correo electrónico de texto enriquecido con múltiples etiquetas consecutivas de Objeto de Dibujo (\"\\do\"), que desencadena una \"memory calculation error\" y una corrupción de memoria, también se conoce como \"Word RTF Object Parsing Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499062/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-084","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-084/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6098","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499062/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-084/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4028","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.847","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via crafted control words related to multiple Drawing Object tags in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and a heap-based buffer overflow, aka \"Word RTF Object Parsing Vulnerability,\" a different vulnerability than CVE-2008-4030."},{"lang":"es","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3 y 2007 Gold y SP1; Outlook 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Paquete de compatibilidad de Office para formatos de archivo de Word, Excel y PowerPoint 2007 Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac permite a los atacantes remotos ejecutar código arbitrario por medio de palabras de control creadas relacionadas con múltiples etiquetas de Objeto de Dibujo en (1) un archivo RTF o (2) un mensaje de correo electrónico de texto enriquecido, que activa la asignación de memoria incorrecta y un desbordamiento de búfer en la región heap de la memoria, también se conoce como \"Word RTF Object Parsing Vulnerability,\" una vulnerabilidad diferente a la CVE-2008-4030."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499063/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-085","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-085/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6096","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499063/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-085/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4029","sourceIdentifier":"secure@microsoft.com","published":"2008-11-12T23:30:01.557","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs, aka \"MSXML DTD Cross-Domain Scripting Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de dominios cruzados en Microsoft XML Core Services v3.0 y v4.0, como lo utilizado en Internet Explorer, permite a atacantes remotos obtener información sensible de otro dominio a través de documentos XML manipulados, relacionados con el inadecuado control de error para las DTD externas, también conocido como \"Vulnerabilidad MSXML DTD Cross-Domain Scripting\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*","matchCriteriaId":"11AFB73A-1C61-40F1-8415-E4D40BB2699B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*","matchCriteriaId":"E0BBA081-24D5-4990-882F-69CB05CC28CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"E69F8C21-5996-4083-A02A-F04AE948CEA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com"},{"url":"http://securitytracker.com/id?1021164","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32155","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-316A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3111","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5999","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-316A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4030","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control words in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and memory corruption, aka \"Word RTF Object Parsing Vulnerability,\" a different vulnerability than CVE-2008-4028."},{"lang":"es","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, y 2007 Gold y SP1; Outlook 2007 Gold y SP1; Word Viewer 2003 Gold  y SP3; y Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats Gold y SP1, permiten a atacantes remotos ejecutar código de su elección a través de palabras de control manipuladas en ficheros (1) RTF o (2) e-mail con texto enriquecido, lo que provoca una asignación incorrecta de memoria y una corrupción de memoria, también conocida como \"Vulnerabilidad Word RTF Object Parsing\". Vulnerabilidad diferente de CVE-2008-4028."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5737","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4031","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.893","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a malformed string in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and memory corruption, aka \"Word RTF Object Parsing Vulnerability.\""},{"lang":"es","value":"Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, y 2007 Gold y SP1; Outlook 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac permite a atacantes remotos ejecutar código de su elección a través de una cadena mal formada en (1) un archivo RTF o (2) una mensaje de correo electrónico con texto enriquecido, que provoca una asignación incorrecta de memoria y una corrupción de memoria, también conocido como \"Vulnerabilidad de análisis sintáctico de objeto en Word RTF.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5952","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4032","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and \"create scripts that would run in the context of the site\" via requests to administrative URIs, aka \"Access Control Vulnerability.\""},{"lang":"es","value":"Microsoft Office SharePoint Server 2007 Gold y SP1 y Microsoft Search Server 2008 no realizan apropiadamente la autenticación y autorización de funciones administrativas, lo que permite a atacantes remotos provocar una denegación de servicio (server load), obtener información sensible y \"crear scripts que podrían ejecutarse en el contexto del sitio\" mediante peticiones a URIs de administración, alias \"Vulnerabilidad de Control de Acceso\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:*:x32:*:*:*:*:*","matchCriteriaId":"27885107-A157-4BF0-A72C-2DEF0B24A723"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:*:x64:*:*:*:*:*","matchCriteriaId":"9144DFDA-7A7A-452C-AE4C-1A45F56B0F37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:search_server:2008:*:x32:*:*:*:*:*","matchCriteriaId":"5BAED31C-1137-463E-A814-FFBFF3648ADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:search_server:2008:*:x64:*:*:*:*:*","matchCriteriaId":"DAD6B519-DD1E-4230-AF7C-0D6DE6EF4FF8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33063","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021367","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3389","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5774","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4033","sourceIdentifier":"secure@microsoft.com","published":"2008-11-12T23:30:02.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka \"MSXML Header Request Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de dominios cruzados en Microsoft XML Core Services v3.0 hasta v6.0, como el que se utiliza en Microsoft Expression Web, Office, Internet Explorer y otros productos; permite a atacantes remotos obtener información sensible de otro dominio y corromper el estado de la sesión a través de solicitudes de campos de cabecera HTTP, como se ha demostrado con el campo Transfer-Encoding. También se conoce como \"Vulnerabilidad de la solicitud de la cabecera MSXML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3C9B9BE3-6F83-469E-834F-3E00CFECD8E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*","matchCriteriaId":"7519928D-0FF2-4584-8058-4C7764CD5671"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*","matchCriteriaId":"36559BC0-44D7-48B3-86FF-1BFF0257B5ED"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"73052210-0B42-46AA-9F28-AAE3E9B6DE87"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4170FCB7-274C-4318-B7A1-8F18DE604A2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"ABBA5D64-4184-4420-B7D0-A4E41359AA5A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9B91A0AA-44C0-4ED8-A7AC-54C9C83FFEFE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"355F60DB-EC9A-4054-8023-BD16D5723C9F"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"53DC2480-5B8D-4E96-BD54-17561B1FFE7F"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C0BBD1BF-B54F-41C7-AB52-0B93E647C98D"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:*:*:*:*:*:*:*","matchCriteriaId":"864B622E-B522-4791-AC82-0711130544BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"CF3C2971-447B-4054-86C6-3169B82E525B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com"},{"url":"http://securitytracker.com/id?1021164","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32204","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-316A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3111","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5847","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-316A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4036","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:16.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a \"memory allocation mapping error,\" aka \"Virtual Address Descriptor Elevation of Privilege Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en el Gestor de Memoria en Microsoft Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista RTM y SP1, y Server 2008 que permite a un usuario local conseguir privilegios por medio de una aplicación manipulada que provoca un decremento erróneo de una variable, relacionada con la validación de parámetros para los Virtual Address Descriptors (VADs) y  con un \"memory allocation mapping error,\" (error de asignación del mapeado de memoria), también conocido como \"Virtual Address Descriptor Elevation of Privilege Vulnerability\" (vulnerabilidad de elevación de privilegios en los descriptores de direcciones virtuales)."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*","matchCriteriaId":"59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32251","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31675","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021051","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2815","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-064","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45571","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45572","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5343","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4037","sourceIdentifier":"secure@microsoft.com","published":"2008-11-12T23:30:02.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka \"SMB Credential Reflection Vulnerability.\"  NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834."},{"lang":"es","value":"Se presenta una vulnerabilidad en Microsoft Windows 2000 Gold hasta SP4, XP Gold hasta SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 permite a los servidores SMB remotos ejecutar código arbitrario en una maquina cliente mediante la reproducción de las credenciales NTLM de un usuario cliente, como se demuestra. por backrush, también se conoce como \"SMB Credential Reflection Vulnerability.\" . NOTA: algunas fuentes confiables informan que esta vulnerabilidad existe debido a una corrección insuficiente para CVE-2000-0834."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp1:*:*:*:*:*:*","matchCriteriaId":"79F860DB-9616-4B63-A850-F5E950F667B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp1:itanium:*:*:*:*:*","matchCriteriaId":"C9AF89B4-69D3-4E28-BC05-782266145C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*","matchCriteriaId":"227A166A-39D3-49F5-89E7-0F75C7B5285C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp2:itanium:*:*:*:*:*","matchCriteriaId":"CD6F46BF-46DD-477C-94CF-88DC15BE19B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:*","matchCriteriaId":"97F081F6-6E4C-47D6-86E9-4DBA520ECDC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:unknown:x64:*:*:*:*:*","matchCriteriaId":"7DA1411C-F277-4302-87CB-6E53FE6F03A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:xp:sp2:*:*:*:*:*:*","matchCriteriaId":"E0ABBC6B-2464-4408-8A55-07EEC11EE1F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:xp:sp2:x64:*:*:*:*:*","matchCriteriaId":"3B677A3B-E5C7-4495-A943-36D604E0135D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"FD75D968-907E-4494-8F23-A3C824B33286"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:xp:unknown:x64:*:*:*:*:*","matchCriteriaId":"E34AF56E-5959-482C-AE97-F87658410FA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*","matchCriteriaId":"DBE4A4EA-A0DE-4FDE-B9EC-D8729E17A1F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:x32:*:*:*:*:*","matchCriteriaId":"1792D62D-78F0-4518-B61E-7CCDD5B0AEF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:x64:*:*:*:*:*","matchCriteriaId":"E8000F58-DF1C-464C-A14B-783CDC00E781"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:x64:*:*:*:*:*","matchCriteriaId":"5E8F1EE5-90F9-48A4-844B-72DDD5F87EF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com"},{"url":"http://osvdb.org/49736","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32633","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021163","source":"secure@microsoft.com"},{"url":"http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/7385","source":"secure@microsoft.com","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-316A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2008/3110","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.xfocus.net/articles/200305/smbrelay.html","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/7125","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-316A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xfocus.net/articles/200305/smbrelay.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4038","sourceIdentifier":"secure@microsoft.com","published":"2008-10-15T00:12:16.020","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka \"SMB Buffer Underflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento inferior de búfer en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008  permite a atacantes remotos ejecutar código de su elección mediante una petición Server Message Block (SMB)que contenga un nombre de archivo con una longitud manipulada, también conocido como \"SMB Buffer Underflow Vulnerability\" (vulnerabilidad de desbordamiento inferior de búfer SMB)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*","matchCriteriaId":"59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32249","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31647","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021049","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2814","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-063","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45560","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45561","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5787","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122479227205998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-288A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4039","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the cat_path parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Spice Classifieds que permite a lo atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro cat_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spice_classifieds:spice_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"1FBEE098-103A-4313-810C-E5FCF8C81242"}]}]}],"references":[{"url":"http://secunia.com/advisories/31664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4237","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44859","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6354","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4040","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Kyocera Command Center in Kyocera FS-118MFP allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Kyocera Command Center en Kyocera FS-118MFP que permite a los atacantes remotos leer archivos arbitrarios a través de .. (punto punto) en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:kyocera_mita:fs_118mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"D1AC4C4A-3280-43AC-99FD-C0952E742546"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/kyocera-traversal.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31680","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44793","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/kyocera-traversal.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4041","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.757","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IMAP server in Softalk Mail Server (formerly WorkgroupMail) 8.5.1.431 allows remote authenticated users to cause a denial of service (resource consumption and daemon crash) via a long IMAP APPEND command with certain repeated parameters."},{"lang":"es","value":"El servidor IMAP en Softalk Mail Server (formalmente WorkgroupMail) 8.5.1.431 que permite a los usuarios autenticados remotamente causar una denegación de servicios (consumo de recursos y caída del demonio) a través de un comando largo IMAP APPEND con cierto parámetros repetidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softalk_mail_server:softalk_mail_server:8.5.1.431:*:*:*:*:*:*:*","matchCriteriaId":"418F9646-75DB-461A-B345-A798B3C56BCA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31715","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4238","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495896/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30970","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44862","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495896/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4042","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.790","lastModified":"2023-11-07T02:02:39.320","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3889.  Reason: This candidate is a duplicate of CVE-2008-3889.  Notes: All CVE users should reference CVE-2008-3889 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4043","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.837","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to (1) acme/article/comment.php and (2) prime/article/comment.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en AJ HYIP Acme de AJ Square, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro artid en los archivos (1) acme/article/comment.php y (2) prime/article/comment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_hyip:acme:*:*:*:*:*:*:*","matchCriteriaId":"1653F107-EBCE-4758-9AEC-2D02DF5F3F48"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4240","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30974","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44803","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6350","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4044","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the artid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en article/readarticle.php en AJ Square aj-hyip (alias AJ HYIP Acme) que permite a los atacantes remotos ejecutar arbitrariamente comando SQL a través del parámetro artid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_hyip:acme:*:*:*:*:*:*:*","matchCriteriaId":"1653F107-EBCE-4758-9AEC-2D02DF5F3F48"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30978","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44803","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45201","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6351","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4045","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the (1) file and (2) HelpFile parameters to parse.php, the (3) Folder and (4) start parameters to showmail.php, and the (5) abookview parameter to abook.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en @Mail 5.42 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de (1) file y (2) el parámetro HelpFile de parse.php, (3) Folder y el (4) parámetro start para showmail.php, y el parámetro (5) abookview para abook.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:\\@mail:\\@mail:5.42:*:*:*:*:*:*:*","matchCriteriaId":"B801D665-E527-4B7F-A17E-54F8715B2E28"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/atmail542-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31727","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44860","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/atmail542-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4046","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.913","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en eliteCMS 1.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elitecms:elitecms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F61D7899-723F-4E1E-AF35-01B2D00A5AEE"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/elitecms-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30990","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44857","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/elitecms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4047","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.947","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Novell Forum (formerly SiteScape Forum) 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL.  NOTE: this might overlap CVE-2007-6515."},{"lang":"es","value":"Vulnerabilidad no especificada en Novell Forum (formalmente SiteScape Forum) 7.0, 7.1, 7.2, 7.3, y 8.0 que permite a los atacantes remotos ejecutar arbitrariamente código TCL a través de una URL modificada. NOTA: debería sobreescribir\r\nla vulnerabilidad CVE-2007-6515."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_forum:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B1006A7C-A459-4BB2-BBE3-AF7228A38760"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_forum:7.1:*:*:*:*:*:*:*","matchCriteriaId":"85D1BA9B-8CC0-4722-B007-78491337EF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_forum:7.2:*:*:*:*:*:*:*","matchCriteriaId":"71910610-55C5-4F47-89B2-166EA3049A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_forum:7.3:*:*:*:*:*:*:*","matchCriteriaId":"41817CD1-E526-4167-9698-65C861FA9237"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:novell_forum:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9EFB1289-E570-46FE-B4B4-E684516F6B6F"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=6k-5X-UPnrM~","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30909","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020803","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2465","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45199","source":"cve@mitre.org"},{"url":"http://download.novell.com/Download?buildid=6k-5X-UPnrM~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4048","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en un cierto control ActiveX en fwRemoteCfg.dll 3.3.3.1 en Friendly Technologies FriendlyPPPoE Client 3.0.0.57 que permite a los atacantes remotos ejecutar arbitrariamente código a través de un tercer argumento largo al método CreateURLShortcut."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:friendly_technologies:friendly_pppoe_client:3.0.0.57:*:*:*:*:*:*:*","matchCriteriaId":"E5CA25C8-5730-4EC7-A171-67D76B35BCCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4242","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30891","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44755","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4049","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:47.993","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method."},{"lang":"es","value":"Cierto control ActiveX en el archivo fwRemoteCfg.dll 3.3.3.1 en Friendly Technologies FriendlyPPPoE Client 3.0.0.57 que permite a los atacantes remotos ejecutar arbitrariamente programas a través de argumentos del método RunApp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:friendly_technologies:friendly_pppoe_client:3.0.0.57:*:*:*:*:*:*:*","matchCriteriaId":"E5CA25C8-5730-4EC7-A171-67D76B35BCCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4243","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44754","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6324","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4050","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method."},{"lang":"es","value":"Cierto control ActiveX en el archivo fwRemoteCfg.dll 3.3.3.1 en Friendly Technologies FriendlyPPPoE Client 3.0.0.57 permite a los atacantes remotos (1) crear y leer arbitrariamente valores del registro a través del método RegistryValue, y (2) leer arbitrariamente archivos a través del método GetTextFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:friendly_technologies:friendly_pppoe_client:3.0.0.57:*:*:*:*:*:*:*","matchCriteriaId":"E5CA25C8-5730-4EC7-A171-67D76B35BCCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4244","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30939","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30940","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44787","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4051","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en surveyresults.asp en Smart Survey 1.0 que permite a los atacantes remotos inyectar secuencias arbitrarias de comandos web o HTML a través del parámetro sid. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jandus_technologies:smart_survey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"21233331-70BD-4901-966F-47B53862CD62"}]}]}],"references":[{"url":"http://secunia.com/advisories/31637","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30841","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30841/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30841/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4052","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el archivo SMGSHR.EXE en OpenVMS para Integrity Servers 8.2-1, 8.3, y 8.3-1H1 y OpenVMS ALPHA 7.3-2, 8.2, y 8.3  que permite a los usuarios locales causar una denegación de servicios (caída) o aumentar privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:7.3-2:*:alpha:*:*:*:*:*","matchCriteriaId":"CF201B37-9A76-400E-B389-B4E58B3F0356"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:8.2:*:alpha:*:*:*:*:*","matchCriteriaId":"B97FF973-660F-42E5-9D13-7AFF27547AD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:8.2-1:*:integrity_servers:*:*:*:*:*","matchCriteriaId":"040668B3-67FC-4F88-9450-2D14A7C8C1C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:8.3:*:alpha:*:*:*:*:*","matchCriteriaId":"FE96813C-F81B-46F2-99A4-06A9FEE718FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:8.3:*:integrity_servers:*:*:*:*:*","matchCriteriaId":"4E81101E-F282-4877-B6B8-7CD8803507DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms:8.3-1h1:*:integrity_servers:*:*:*:*:*","matchCriteriaId":"358B83DC-0AA6-4896-8686-C282903F284F"}]}]}],"references":[{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/832.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/833.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/834.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/835.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/836.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/837.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44664","source":"cve@mitre.org"},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/832.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/833.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/834.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/836.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mail.openvms.org:8100/Lists/alerts/Message/837.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4053","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) cat_id, and (3) view parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en index.php en el módulo  Bluemoon PopnupBLOG, versión 3.20 y 3.30 para XOOPS, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTM a través de los parámetros (1) param, (2) cat_id, y (3) view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:popnupblog:3.20:*:*:*:*:*:*:*","matchCriteriaId":"395002B3-746B-4385-B0C7-5F3A6CA40179"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluemoon:popnupblog:3.30:*:*:*:*:*:*:*","matchCriteriaId":"40CFC30D-9179-4787-B991-BBC0CC0112B0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31625","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30827","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44680","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4054","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.133","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en indir.php en Kolifa.net Download Script 1.2 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kolifa:download_script:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C0162E7F-8495-4A6A-90AF-EBDAB62C715B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4235","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6310","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4055","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.163","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary SQL commands via the id_cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tops_top.php en el programa Million Pixel Ad Script (Million Pixel Script)que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id_cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texmedia:million_pixel_script:*:*:*:*:*:*:*:*","matchCriteriaId":"88D0E8D9-7D39-4B43-8955-471CAA601802"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/millionpixel-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/millionpixel-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4056","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/login.php in Matterdaddy Market 1.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en el archivo admin/login.php en Matterdaddy Market 1.1  que permite a los atacante remotos inyectar secuencias arbitrarias de comandos web o HTML a través del parámetro msg. NOTA: La proveniencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matterdaddy:matterdaddy_market:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B62C933-627F-474D-991F-C8C19591B40C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30848","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30848/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30848/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4057","sourceIdentifier":"cve@mitre.org","published":"2008-09-11T21:06:48.210","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and attack vectors, related to a \"serious security problem.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Objective Development Sharity 3 en versiones anteriores a  3.5 con impacto desconocido y vector de ataque,  relativo a \"problemas serios de seguridad\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:objective_development:sharity:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F3FBA005-4996-4B8E-AEE7-4FF5AB3AD1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:objective_development:sharity:3.1:*:*:*:*:*:*:*","matchCriteriaId":"EFDFE07E-EFA0-4464-AB89-312CD8EC151E"},{"vulnerable":true,"criteria":"cpe:2.3:a:objective_development:sharity:3.2:*:*:*:*:*:*:*","matchCriteriaId":"86863EC6-AEA1-44BA-889F-B4FC8CCBC94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:objective_development:sharity:3.3:*:*:*:*:*:*:*","matchCriteriaId":"43AAC22D-9AE4-4D80-A68A-417D79A2D932"},{"vulnerable":true,"criteria":"cpe:2.3:a:objective_development:sharity:3.4:*:*:*:*:*:*:*","matchCriteriaId":"5C9B83EB-5A0B-4908-A9F0-507BD1726D10"}]}]}],"references":[{"url":"http://secunia.com/advisories/31638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.obdev.at/products/sharity/releasenotes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30860","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.obdev.at/products/sharity/releasenotes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4058","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"NOTE: Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail.","cveTags":[],"descriptions":[{"lang":"en","value":"The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to \"pollute XPCNativeWrappers\" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS."},{"lang":"es","value":"El componente XPConnect en Mozilla Firefox antes de 2.0.0.17 y 3.x antes de 3.0.2, Thunderbird antes de 2.0.0.17 y SeaMonkey before 1.1.12 permite a atacantes remotos \"contaminar XPCNativeWrappers\" y ejecutar código de su elección con privilegios chrome mediante vectores relacionados con (1) chrome XBL y (2) chrome JS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"D2480570-397B-442B-967C-96D49D0619D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020915","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444075","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444077","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45349","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9679","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4059","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.580","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to \"pollute XPCNativeWrappers\" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element."},{"lang":"es","value":"El componente XPConnect en Firefox de Mozilla antes de 2.0.0.17 permite a atacantes remotos \"contaminar XPCNativeWrappers\" y ejecutar código de su elección con privilegios chrome mediante vectores relacionados con un elemento SCRIPT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"102B1C57-CBEE-467E-A563-FDAC61598A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020915","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419848","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45352","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9529","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4060","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1) the document.loadBindingDocument function and (2) XSLT."},{"lang":"es","value":"Firefox de Mozilla antes de 2.0.0.17 y 3.x antes de 3.0.2, Thunderbird antes de 2.0.0.17, y SeaMonkey antes de 1.1.12 permite a atacantes remotos crear documentos que no tienen objetos de manejo de scripts y ejecutar código de su elección con privilegios chrome, mediante vectores relacionados con (1) la función document.loadBindingDocument y (2) XSLT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"541E2386-4ABC-4CBA-9D50-7610590B4799"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"288192A0-8E52-4436-AA5E-6E01C5B98532"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"AE6342E9-1666-48EE-B097-7A3C67EB2ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020915","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448548","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451037","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45353","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11607","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4061","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"NOTE: Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images.","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine."},{"lang":"es","value":"Desbordamiento de entero en el componente MathML de Mozilla Firefox antes de 2.0.0.17 y 3.x antes de 3.0.2, Thunderbird antes de 2.0.0.17, y SeaMonkey antes de 1.1.12 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar código de su elección mediante un elemento mtd con un valor entero grande en el atributo rowspan, relacionados con el motor de diseño."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"D2480570-397B-442B-967C-96D49D0619D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020916","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443089","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45351","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4062","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.643","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"NOTE: Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Firefox de Mozilla antes de 2.0.0.17 y 3.x antes de 3.0.2, Thunderbird antes de 2.0.0.17, y SeaMonkey antes de 1.1.12 permiten a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar código de su elección mediante vectores relacionados con el motor javaScript y (1) una mala interpretación de las características de Namespace y QName en jsxml.c, (2) un mal uso de enteros con signo en la función nsEscapeCount de nsEscape.cpp, y (3) la interacción de una colección de basura JavaScript con un cierto uso de NPObject en la función nsNPObjWrapper::GetNewOrUsed de nsJSNPRuntime.cpp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"D2480570-397B-442B-967C-96D49D0619D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020916","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=367736","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444608","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=445229","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45355","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=367736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=445229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4063","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"NOTE: Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the \"this\" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the \"g\" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Mozilla Firefox 3.x antes de 3.0.2 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar código de su elección mediante vectores relacionados con el motor de diseño y (1) un valor cero de la variable \"this\" en la función nsContentList::Item; (2) la interacción de la extensión indic IME, una selección de lenguaje Hindú, y el caracter \"g\"; y (3) la interacción en la función nsFrameList::SortByContentOrder con una cierta protección insuficiente de marcos inline."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:-:lts:*:*:*:*:*","matchCriteriaId":"4DA06BC1-F83A-4AE5-AFB9-C8DE6866E04A"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:-:lts:*:*:*:*:*","matchCriteriaId":"D6DFE2D3-46E2-4D0C-8508-30307D654560"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"A09BB8A2-C8E5-4CFB-A2AB-061D0A9E82EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020916","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=413048","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=433758","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444452","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45354","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11151","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=413048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=433758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=444452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4064","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.690","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"NOTE: Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Firefox de Mozilla 3.x antes de 3.0.2 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código de su elección mediante vectores relacionados con renderizado de gráficos y (1) manipulado de una caja de mensaje de alerta larga en la función cairo_surface_set_device_offset, (2) desbordamientos de entero cuando se manipulan datos PNG animados en la función info_callback en nsPNGDecoder.cpp, y (3) un desbordamiento de entero cuando se manipulan datos SVG en la función nsSVGFEGaussianBlurElement::SetupPredivide en nsSVGFilters.cpp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"A09BB8A2-C8E5-4CFB-A2AB-061D0A9E82EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020916","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441368","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441995","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443693","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45357","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11743","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-42.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=443693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4065","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka \"Stripped BOM characters bug.\""},{"lang":"es","value":"Firefox de Mozilla antes de 2.0.0.17 y 3.x anterior a 3.0.2, Thunderbird anterior a 2.0.0.17 y SeaMonkey anterior a 1.1.12 permite a atacantes remotos evitar los mecanismos de protección de inyección de secuencias de comandos en sitios cruzados (XSS) y llevar a cabo ataques XSS mediante caracteres de marca de orden de byte (BOM) que son eliminados de código javaScript antes de la ejecución, también conocido como \"error de caracteres BOM deshechos\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"D2480570-397B-442B-967C-96D49D0619D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-43.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020920","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430740","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45356","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11383","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4066","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.737","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a \"jav&#56325ascript\" sequence, aka \"HTML escaped low surrogates bug.\""},{"lang":"es","value":"Mozilla Firefox versión 2.0.0.14, y otras versiones anteriores a 2.0.0.17, permiten a los atacantes remotos omitir los mecanismos de protección de cross-site scripting (XSS) y conducir ataques de tipo XSS por medio de caracteres sustitutos bajos con escape de HTML que son ignorados por el analizador HTML, como es demostrado por una secuencia \"jav?ascript\", también se conoce como \"HTML escaped low surrogates bug.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"}]}]}],"references":[{"url":"http://blogs.technet.com/bluehat/archive/2008/08/14/targeted-fuzzing.aspx","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN96950482/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000058.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-43.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020920","source":"secalert@redhat.com"},{"url":"http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results/","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448166","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45358","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8880","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com"},{"url":"http://blogs.technet.com/bluehat/archive/2008/08/14/targeted-fuzzing.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN96950482/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-43.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4067","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en  Firefox de Mozilla anterior a 2.0.0.17 y 3.x anterior a 3.0.2, Thunderbird anterior a 2.0.0.17 y SeaMonkey anterior a 1.1.12 en Linux permite a atacantes remotos leer archivos de su elección mediante .. (punto punto) y caracteres codificados URL / (barra) en una fuente URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"D2480570-397B-442B-967C-96D49D0619D2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.0x000000.com/?i=422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-44.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020921","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380994","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=394075","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45359","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.0x000000.com/?i=422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=394075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4068","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass \"restrictions imposed on local HTML files,\" and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Firefox de Mozilla antes de 2.0.0.17 y 3.x antes de 3.0.2, Thunderbird antes de 2.0.0.17, y SeaMonkey antes de 1.1.12 permite a atacantes remotos evitar \"restricciones impuestas en archivos HTML locales\" y obtener información sensible y a los usuarios de línea de comandos escribir esta información en un archivo, mediante secuencias de salto de directorio en un URI fuente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"E5E06AA5-4A7C-4C61-A5B8-A73E82C470E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.12","matchCriteriaId":"A0C57F9A-9DD4-4F1A-A1A7-FA5325905C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.17","matchCriteriaId":"D2480570-397B-442B-967C-96D49D0619D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-44.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020921","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45360","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11471","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4069","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file."},{"lang":"es","value":"El decodificador XBM de Firefox de Mozilla  antes del 2.0.0.17 y SeaMonkey anterior a 1.1.12 permite a atacantes remotos leer memoria no inicializada y posiblemente obtener información sensible en circunstancias oportunas mediante un archivo de imagen XBM manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"541E2386-4ABC-4CBA-9D50-7610590B4799"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"288192A0-8E52-4436-AA5E-6E01C5B98532"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.blackhat.com/presentations/bh-usa-08/Hoffman/Hoffman-BH2008-CircumventingJavaScript.ppt","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-45.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020923","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=449703","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45361","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11000","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-usa-08/Hoffman/Hoffman-BH2008-CircumventingJavaScript.ppt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-45.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=449703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4070","sourceIdentifier":"secalert@redhat.com","published":"2008-09-27T10:30:03.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to \"canceling [a] newsgroup message\" and \"cancelled newsgroup messages.\""},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Mozilla Thunderbird antes de v2.0.0.17 y  SeaMonkey antes de v1.1.12 permite a atacantes remotos causar denegación de servicio (caída de aplicación) o posibilita la ejecución de código de su elección a través de una cabecera larga en un artículo de noticias, relacionados con \"cancelación de [a] mensajes de grupos de noticias\" y \"mensajes de grupos de noticias canceladas.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"288192A0-8E52-4436-AA5E-6E01C5B98532"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.16","matchCriteriaId":"AE6342E9-1666-48EE-B097-7A3C67EB2ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-46.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31411","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020948","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425152","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45426","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10933","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-46.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4071","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:05.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL."},{"lang":"es","value":"Un determinado control ActiveX en Adobe Acrobat 9, cuando es utilizado con  Microsoft Windows Vista e Internet Explorer 7, permite a atacantes remotos provocar una denegación de servicio (caída del navegador) a través de un valor de la propiedad src con una URL acroie:// no válida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4257","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45195","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6424","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4072","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:05.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter in a pickup action or (2) the sql_cid parameter, different vectors than CVE-2008-3588."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php de phsBlog 0.2 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) sid en una acción pickup o el parámetro (2) sql_cid, unos vectores diferentes a CVE-2008-3588."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phsdev:phsblog:0.2:*:*:*:*:*:*:*","matchCriteriaId":"FC14DA7D-84E7-48E0-A087-3F5C0616097B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31815","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4246","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496233/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45053","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6431","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496233/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4073","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.197","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Zanfi Autodealers CMS AutOnline permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pageid en una acción DBpAGE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:autodealers_cms_autonline:*:*:*:*:*:*:*:*","matchCriteriaId":"6D6B30F6-8F1A-4B88-838A-48D0503017D9"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4248","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31120","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45049","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6426","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4074","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Zanfi Autodealers CMS AutOnline permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:autodealers_cms_autonline:*:*:*:*:*:*:*:*","matchCriteriaId":"6D6B30F6-8F1A-4B88-838A-48D0503017D9"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4247","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45049","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45200","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6433","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4075","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.307","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de D-iscussion Board 3.01 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro topic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dino:d-iscussion_board:3.01:*:*:*:*:*:*:*","matchCriteriaId":"CB10C731-EC90-43B9-902F-306157075780"}]}]}],"references":[{"url":"http://secunia.com/advisories/31808","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4249","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31135","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45063","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6430","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4076","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.337","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en (1) Tor World Tor Board 1.3 y versiones anteriores, (2) Topics BBS 1.11 y versiones anteriores, (3) Simple BBS 1.86 y versiones anteriores, y (4) Interactive BBS 1.57 y versiones anteriores permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados, una cuestión diferente a CVE-2008-0917."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:interactive_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.57","matchCriteriaId":"44638D98-6133-46A5-AAFB-CFFEE1BAD983"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:simple_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.86","matchCriteriaId":"F6522E41-84B0-4A1C-835A-4C423B2FE125"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:simple_bbs:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C65B72C5-9C2A-49B4-9292-09B58DD7496E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:topics_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11","matchCriteriaId":"D115C37C-C9C2-4058-97E5-840A6FC3C4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_board:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"59266471-5B2C-4356-9C40-2FD390B6B769"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_world:tor_board:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3D7C4FD4-9402-479C-9986-6C34362F056F"}]}]}],"references":[{"url":"http://download.torworld.com/bug/20080905.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN18616622/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31835","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31105","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043","source":"cve@mitre.org"},{"url":"http://download.torworld.com/bug/20080905.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN18616622/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4077","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length."},{"lang":"es","value":"Las secuencias de comandos (script) CGI en (1) LedgerSMB (LSMB) versiones anteriores a 1.2.15 y (2) SQL-Ledger 2.8.17 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos) a través de una petición HTTP POST con un largo Content-Length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.15","matchCriteriaId":"4416D2DF-77A4-42E9-9920-BEF9EF00F423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.17","matchCriteriaId":"B15622DA-57A0-48A8-A271-7E8DE5D508AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31843","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4250","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ledgersmb.org/node/70","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/archive/1/496181/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31109","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45033","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ledgersmb.org/node/70","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/archive/1/496181/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4078","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.397","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el informe de transacción AR/AP en (1) LedgerSMB (LSMB) versiones anteriores a 1.2.15 y (2) SQL-Ledger 2.8.17 y versiones anteriores permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.15","matchCriteriaId":"4416D2DF-77A4-42E9-9920-BEF9EF00F423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.17","matchCriteriaId":"B15622DA-57A0-48A8-A271-7E8DE5D508AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31843","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4250","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=624978","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/archive/1/496181/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31109","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45034","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=624978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.securityfocus.com/archive/1/496181/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4079","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.413","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Solution allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Movable Type (MT) 4.x hasta 4.20, y 3.36 y versiones anteriores; Movable Type Enterprise 4.x hasta 4.20, y 1.54 y versiones anteriores; y Movable Type Community Solution permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:*:unknown:enterprise:*:*:*:*:*","versionEndIncluding":"1.54","matchCriteriaId":"DD539236-0811-4D59-861F-D79171D8B504"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.36:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"4146C6DB-7380-48F5-BEB2-A7EDDE4DBBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:*:*:*:*:*:*","matchCriteriaId":"D62FC8B9-3B6A-46C6-94CD-E35941BB64C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"00239DBB-03C7-4E5C-860E-D0437702748B"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*","matchCriteriaId":"C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"0B1D9C09-2BA0-484A-A0C3-6683B773F247"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:unknown:unknown:community_solution:*:*:*:*:*","matchCriteriaId":"1074D1E1-E2D1-416E-B52B-3F90FE9672E9"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN30385652/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31073","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sixapart.jp/movabletype/news/2008/08/07-1445.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sixapart.jp/movabletype/news/2008/08/28-1500.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN30385652/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sixapart.jp/movabletype/news/2008/08/07-1445.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sixapart.jp/movabletype/news/2008/08/28-1500.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-4080","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.447","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username parameter to admin/library/authenticate.php and the (2) download parameter to downloadmp3.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Stash 1.0.3, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) username de admin/library/authenticate.php y el parámetro download de downloadmp3.php.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stash:stash:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5439B328-3C50-49E4-A327-1BADA8474C85"}]}]}],"references":[{"url":"http://osvdb.org/47994","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4252","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496142/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44989","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6402","source":"cve@mitre.org"},{"url":"https://www.youtube.com/watch?v=mm4bfsZdLmA&t=1h53m","source":"cve@mitre.org"},{"url":"http://osvdb.org/47994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496142/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.youtube.com/watch?v=mm4bfsZdLmA&t=1h53m","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4081","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T15:14:07.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie."},{"lang":"es","value":"admin/login.php de Stash 1.0.3 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo a través del envío de una cookie bsm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stash:stash:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5439B328-3C50-49E4-A327-1BADA8474C85"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4258","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30286","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43903","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6406","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4082","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión (plugin) Tasks de Brim 2.0.0, cuando magic_quotes_gpc está activo, permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de un campo de su elección en una acción search de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brim-project:brim:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"27A79986-F977-471A-9C1B-534565A38E54"}]}]}],"references":[{"url":"http://secunia.com/advisories/31661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44789","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6332","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4083","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión (plugin) Bookmarks de Brim 2.0 permite a usuarios remotos autenticados inyectar web script o HTML a través del parámtro name en una acción addItemPost de index.php.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brim-project:brim:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"27A79986-F977-471A-9C1B-534565A38E54"}]}]}],"references":[{"url":"http://secunia.com/advisories/31661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44790","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6332","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4084","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.070","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en staticpages/easyclassifields/index.php de MyioSoft EasyClassifields 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro go en una acción browse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easyclassifields:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E7943964-DD41-4F5E-B44D-231A21B9BB7C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44799","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4085","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/."},{"lang":"es","value":"plaiter en Plait anterior a versión 1.6, permite a los usuarios locales sobrescribir archivos arbitrarios mediante un ataque de tipo symlink sobre archivos temporales (1) cut.$$, (2) head.$$, (3) awk.$$ y (4) ps.$$ en el archivo /tmp/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"64A0FB93-A1B6-4569-AF0B-2F730DE6F10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.50:*:*:*:*:*:*:*","matchCriteriaId":"061ACFE7-5DCD-416F-B2DC-9E546891FC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.51:*:*:*:*:*:*:*","matchCriteriaId":"3D68CEA6-AB33-4C5F-8869-381D477DDB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.52:*:*:*:*:*:*:*","matchCriteriaId":"8F787869-1296-4FEE-A007-0D276886312C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.53:*:*:*:*:*:*:*","matchCriteriaId":"0E9C9B1B-A533-4FDA-A872-A71BF8D22AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.54:*:*:*:*:*:*:*","matchCriteriaId":"0BB619C2-FF92-4A11-AE9C-6967BF0AA29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.55:*:*:*:*:*:*:*","matchCriteriaId":"939C71B4-DCB2-40F4-9B05-643EDF39D197"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.55.1:*:*:*:*:*:*:*","matchCriteriaId":"A9C7E5E2-64C4-44DF-89C3-7AEE334DDED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.55.2:*:*:*:*:*:*:*","matchCriteriaId":"9EE67CDB-92D6-4E1F-A95F-EF77D1E9D05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:0.99:*:*:*:*:*:*:*","matchCriteriaId":"4DAC134A-135A-402E-97CA-D4C6EA52FE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1E103B07-E037-4D69-BBCD-38F3D6EDD03A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C48822E-6DA8-41EC-95FD-8D8E8B1D8A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4FE715D-3C77-4EE2-B123-AA093D054D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"69DC0C10-2A1B-42F4-BD6F-5501F6175658"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C45CA9D5-C67C-419F-A9F8-C3ECD3199C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5E2E81C0-6D65-43BC-A15A-3C0C0BC5C987"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"CF099F3B-4B14-4BB4-87C7-533859DE6C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7B808190-32FC-4CFA-92EB-D2764D14F56A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.5:*:*:*:*:*:*:*","matchCriteriaId":"86F543C0-1D8E-4613-A9B3-780956E50426"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephenjungels:plait:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C69D93D7-A5AE-4ACD-95DD-C8F9B1F83EB4"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496381","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/plait","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=147849&release_id=623154","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30928","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44786","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/plait","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=147849&release_id=623154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4086","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.133","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Reciprocal Links Manager 1.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetor site de una acción open."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:source_workshop:reciprocal_links_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6DA1908A-7563-4132-9BD2-B18D24340309"}]}]}],"references":[{"url":"http://secunia.com/advisories/31703","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30960","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2470","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44801","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6349","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4087","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project (aka bcproj) file with a long string in a certain instruments title field."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Acoustica Beatcraft 1.02 Build 19 permite a atacantes asistidos por usuario provocar una denegación de servicio o ejecutar código de su elección a través de un fichero Beatcraft Project (también conocido como bcproj) con una cadena larga en el campo título de determinados instrumentos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:beatcraft:1.02:build_19:*:*:*:*:*:*","matchCriteriaId":"5BAC24C5-ACC8-4FFC-97FA-111E2311C4D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31660","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30938","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4088","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en print.php de myPHPNuke (MPN) versiones anteriores a 1.8.8_8rc2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.8.8_8","matchCriteriaId":"34D26AF4-D557-4CC6-8AB5-AFDF295DBA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_7:*:*:*:*:*:*:*","matchCriteriaId":"C837745C-62E4-4770-9FC6-F4299CA780B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_8:*:*:*:*:*:*:*","matchCriteriaId":"6B135D6D-BBD6-4C5D-BEF0-10C2B2CB74BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_8:rc1:*:*:*:*:*:*","matchCriteriaId":"F2F8382F-53BE-43F2-8CC9-A00253246EDA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4255","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30942","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31112","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45084","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6338","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4089","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.197","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en print.php de myPHPNuke (MPN) versiones anteriores a 1.8.8_8rc2 permite a atacantes remotos inyectar web script o HTML a través del parámetro sid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:*:rc1:*:*:*:*:*:*","versionEndIncluding":"1.8.8_8","matchCriteriaId":"3E99ACD7-417D-44B1-8313-6522F01D8505"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_7:*:*:*:*:*:*:*","matchCriteriaId":"C837745C-62E4-4770-9FC6-F4299CA780B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_8:*:*:*:*:*:*:*","matchCriteriaId":"6B135D6D-BBD6-4C5D-BEF0-10C2B2CB74BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30942","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31112","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31114","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6338","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4090","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de PHP Coupon Script 4.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción addtocart, un vector diferente a CVE-2007-2672."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:couponscript:coupon_script:4.0:*:*:*:*:*:*:*","matchCriteriaId":"213B52F9-0B72-4D12-B444-DFA33225BBBB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31699","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30961","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44800","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4091","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Web Directory Script 1.5.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro site en una acción open."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:source_workshop:web_directory_script:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D1A69CE4-2C2F-41E9-A514-DE6DB88E09BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31629","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30941","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45185","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6335","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4092","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en printfeature.php de myPHPNuke (MPN) versiones anteriores a 1.8.8_8rc2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro artid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.8.8_8","matchCriteriaId":"34D26AF4-D557-4CC6-8AB5-AFDF295DBA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_7:*:*:*:*:*:*:*","matchCriteriaId":"C837745C-62E4-4770-9FC6-F4299CA780B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_8:*:*:*:*:*:*:*","matchCriteriaId":"6B135D6D-BBD6-4C5D-BEF0-10C2B2CB74BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_8:rc1:*:*:*:*:*:*","matchCriteriaId":"F2F8382F-53BE-43F2-8CC9-A00253246EDA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4261","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/2398/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30959","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2469","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44798","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6347","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/2398/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4093","sourceIdentifier":"cve@mitre.org","published":"2008-09-15T17:12:51.290","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en memberstats.php de YourOwnBux 3.1 y 3.2 beta, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourownbux:yourownbux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2401F786-2F9E-4AD3-8C54-39377EF24A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:yourownbux:yourownbux:3.2:beta:*:*:*:*:*:*","matchCriteriaId":"ACEC1698-CFFD-4DE1-9E69-B0E7C035456A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30868","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44758","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6321","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4094","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer."},{"lang":"es","value":"\"Múltiples vulnerabilidades de inyección SQL en Ruby on Rails anterior a versión 2.1.1, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de los parámetros (1): limit y (2): offset, relacionados con ActiveRecord, ActiveSupport, ActiveResource, ActionPack y ActionMailer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"49B9DD7F-DA3A-49C5-B2D4-8A8BD73C6FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EB938651-C874-4427-AF9B-E9564B258633"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1D59FAFB-5D48-4BD8-AD51-FF9A204E373D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"FE23CCE1-1713-4813-A0AB-1E10DBDA4D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"897109FF-2C37-458A-91A9-7407F3DFBC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"289B1633-AAF7-48BE-9A71-0577428EE531"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B947FD6D-CD0B-44EE-95B5-E513AF244905"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"E3666B82-1880-4A43-900F-3656F3FB157A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"BE622F6D-AC7D-4D82-A33C-82C2CEFDB9B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"C06D18BA-A0AB-461B-B498-2F1759CBF37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"61EBE7E0-C474-43A7-85E3-093C754A253F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"D7195418-A2E9-43E6-B29F-AEACC317E69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"39485B13-3C71-4EC6-97CF-6C796650C5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E16D8B-4FBD-4FB6-ABA8-B38ECA4D413F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D8A3B30A-65F0-4D63-9A09-B23E9FC8D550"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"62323F62-AD04-4F43-A566-718DDB4149CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A8E890B1-4237-4470-939A-4FC489E04520"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24F3B933-0F68-4F88-999C-0BE48BC88CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E13DAEA-F118-4CB2-88A5-54E3327B6B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC33BF68-D887-4C67-8E8C-D2A6CD877FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7BFCB88D-D946-4510-8DDC-67C32A606589"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E793287E-2BDA-4012-86F5-886B82510431"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF706143-996C-4120-B620-3EDC977568DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"43E7F32B-C760-4862-B6DB-C38FB2A9182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"FD68A034-73A2-4B1A-95DB-19AD3131F775"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2E78C912-E8FF-495F-B922-43C54D1E2180"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"15B72C17-82C3-4930-9227-226C8E64C2E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FA59F311-B2B4-40EE-A878-64EF9F41581B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"035B47E9-A395-47D2-9164-A2A2CF878326"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BDA55D29-C830-45EF-A3B3-BFA9EED88F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0A9356A6-D32A-487C-B743-1DA0D6C42FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2B3C7616-8631-49AC-979C-4347067059AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"EC487B78-AAEA-4F0E-8C8B-F415013A381E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"50EEAFDA-7782-4E1E-9058-205AD4BE9A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CAC748BB-BFC5-44F7-B633-CEEBB1279889"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"38CF2C31-70BB-41D3-9462-0A8B9869A5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F8584B37-7950-4C89-83D2-04E1ACDC60BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8CB26F65-5CFB-4BF8-BCC4-679327D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EF12EA5D-5EB5-46A8-AC60-65B327D610AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B4B121-94BD-4E0F-8860-6239890043B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"9CE42D86-A8FE-493F-9AB6-4E032E9294FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"04FDC63D-6ED7-48AE-9D72-6419F54D4B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"DBF12B2F-39D9-48D5-9620-DF378D199295"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"22E1EAAF-7B49-498B-BFEB-357173824F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1B9AD626-0AFA-4873-A701-C7716193A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BF69F60A-E8D3-4A4D-BBB5-DE42A1402262"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"986D2B30-FF07-498B-A5E0-A77BAB402619"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0E3141A-162C-4674-BD7B-E1539BAA0B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"86E73F12-0551-42D2-ACC3-223C98B69C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D6BA0659-2287-4E95-B30D-2441CD96DA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B01A4699-32D3-459E-B731-4240C8157F71"}]}]}],"references":[{"url":"http://blog.innerewut.de/2008/6/16/why-you-should-upgrade-to-rails-2-1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://gist.github.com/8946","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org"},{"url":"http://rails.lighthouseapp.com/projects/8994/tickets/288","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rails.lighthouseapp.com/projects/8994/tickets/964","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31875","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31909","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31910","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/13/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/1","source":"cve@mitre.org"},{"url":"http://www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31176","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020871","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2562","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45109","source":"cve@mitre.org"},{"url":"http://blog.innerewut.de/2008/6/16/why-you-should-upgrade-to-rails-2-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://gist.github.com/8946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rails.lighthouseapp.com/projects/8994/tickets/288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rails.lighthouseapp.com/projects/8994/tickets/964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4095","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T16:12:23.757","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vectors, different vulnerabilities than CVE-2007-6713."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Flip4Mac WMV anterior a la 2.2.1 tiene un impacto y vectores de ataque desconocidos, vulnerabilidad distinta de CVE-2007-6713."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3.9","matchCriteriaId":"2E3161BE-F3D6-4A0F-AD39-38B9DBA9192B"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BFC2599B-6742-4A07-A17B-34BA2B60DABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EBFC8995-DFCF-4C8E-93F2-0CE77299AC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C629F875-6F67-4D36-ACC7-412CB5669B45"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.0.33:*:*:*:*:*:*:*","matchCriteriaId":"FD3FA537-AD91-4C26-996F-78DC361479B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.1.70:*:*:*:*:*:*:*","matchCriteriaId":"285B2DA9-AEFF-43CF-9E58-25F2B81796F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.1.72:*:*:*:*:*:*:*","matchCriteriaId":"2A368D2A-10B6-492B-BFA0-62EB09F4DCFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:flip4mac:flip4mac_wmv:2.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D9705197-67A4-496B-AB43-20A7AD7C2BA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/31925","source":"cve@mitre.org"},{"url":"http://www.flip4mac.com/downloads/wmv_components/flip4mac-wmv-release-notes.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31505","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020956","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2710","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45187","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.flip4mac.com/downloads/wmv_components/flip4mac-wmv-release-notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4096","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function."},{"lang":"es","value":"libraries/database_interface.lib.php en phpMyAdmin anterior a 2.11.9.1, permite a usuarios autenticados en remoto ejecutar código de su elección a través de una solicitud a server_databases.php con un parámetro sort_by que contenga secuencias PHP que son procesadas por create_function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.9","matchCriteriaId":"D221D53F-B6ED-4AA6-BF41-B72E9BEA513A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"784EF815-B20A-4D26-8FCA-04BCBAD65BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E6C869A-0307-40D9-85D6-05453B6BEA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"795B4F23-BA5E-466B-9FC3-C7A00A110774"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC1F099-04AC-4210-8477-07B21E087162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8F3A44D6-F174-428E-8456-5B7B093D7A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*","matchCriteriaId":"EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"CD5CB748-A953-4CAD-B8F9-21F43D2992E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*","matchCriteriaId":"A4843917-B7B1-4871-AE2B-2219C6EB85F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5rc1:*:*:*:*:*:*:*","matchCriteriaId":"A217F2AE-185D-4385-8804-475DB12CFA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*","matchCriteriaId":"CC99B93D-2171-40DE-90B3-61D6DB9F6D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"}]}]}],"references":[{"url":"http://fd.the-wildcat.de/pma_e36a091q11.php","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/48196","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32034","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-32.xml","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080916-1/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"cve@mitre.org"},{"url":"http://www.nabble.com/phpMyAdmin-2.11.9.1-is-released-td19497113.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/15/2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/2","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2585","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2619","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462430","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45157","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01137.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01155.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01228.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01290.html","source":"cve@mitre.org"},{"url":"http://fd.the-wildcat.de/pma_e36a091q11.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080916-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/phpMyAdmin-2.11.9.1-is-released-td19497113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/15/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01228.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01290.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4097","sourceIdentifier":"secalert@redhat.com","published":"2008-09-18T15:04:27.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://www.securityfocus.com/bid/29106 this vulnerability is remotely exploitable.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079."},{"lang":"es","value":"MySQL 5.0.51a permite a los usuarios locales evitar la comprobación de ciertos privilegios por la llamada a CREATE TABLE en una tabla MyISAM con argumentos modificados (1) DATA DIRECTORY o (2) INDEX DIRECTORY que son asociados con symlinks dentro de nombres de ruta (pathnames), para subdirectorios del directorio de datos principal de MySQL , el cual es seguido cuando las tablas son creadas en el futuro. NOTA: Esta vulnerabilidad por una incompleta solución para CVE-2008-2079."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*","matchCriteriaId":"BD39950F-FBBF-4505-8FB5-EEF2886095F1"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32769","source":"secalert@redhat.com","tags":["Broken Link","Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/20","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45648","source":"secalert@redhat.com","tags":["VDB Entry"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4098","sourceIdentifier":"secalert@redhat.com","published":"2008-09-18T15:04:27.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097."},{"lang":"es","value":"MySQL anterior a 5.0.67, permite a usuarios locales evitar determinadas comprobaciones de privilegios haciendo una llamada CREATE TABLE en una tabla MyISAM que modifica los argumentos (1) DATA DIRECTORY o (2) INDEX DIRECTORY que están asociados originalmente con los nombres de ruta (pathname) sin enlaces simbólicos, y que pueden apuntar a tablas creadas después de que un nombre de ruta sea modificado para tener un enlace simbólico a un subdirectorio del directorio de datos inicial de MySQL. NOTA: esta vulnerabilidad es debida a que no se solucionó completamente la vulnerabilidad CVE-2008-4097."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed in Red Hat Enterprise Linux 4 via https://rhn.redhat.com/errata/RHSA-2010-0110.html and in Red Hat Application Stack v2 via https://rhn.redhat.com/errata/RHSA-2009-1067.html .\n\nIn Red Hat Enterprise Linux 5, issue CVE-2008-2079 was fixed without introducing CVE-2008-4098 in https://rhn.redhat.com/errata/RHSA-2009-1289.html .","lastModified":"2010-02-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"FB92A552-079E-4A5E-B65E-8A6C956FC7DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9A5CD839-1C18-44F2-836F-97B85572D491"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.36:sp1:*:*:*:*:*:*","matchCriteriaId":"4BA355E8-593E-470C-B565-60CD51B14C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.40:*:*:*:*:*:*:*","matchCriteriaId":"7AF30535-45D3-4845-8B7C-16F7B6D05F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.44:sp1:*:*:*:*:*:*","matchCriteriaId":"87BAAF59-A8F5-46AB-9CAC-E0F76B47D942"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*","matchCriteriaId":"60540719-8329-47E4-820F-8B4E4AA55AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.48:*:*:*:*:*:*:*","matchCriteriaId":"7147148B-BD26-4280-9B3F-1B27551E0CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:sp1:*:*:*:*:*:*","matchCriteriaId":"DC81D22D-72FE-4FEC-8277-A994B184B91C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.56:sp1:*:*:*:*:*:*","matchCriteriaId":"B15A96B9-3982-49DF-A836-1DBC3FD29EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.58:*:*:*:*:*:*:*","matchCriteriaId":"A02DEBB1-65A5-4422-8B75-E8C86EA0B947"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.60:sp1:*:*:*:*:*:*","matchCriteriaId":"56225075-5A65-409E-AFC9-CACA381EAC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.62:*:*:*:*:*:*:*","matchCriteriaId":"AFB11E34-4045-4ACA-AD7D-48B70D13CD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.64:*:*:*:*:*:*:*","matchCriteriaId":"6D2FC440-4D06-4CE2-BE20-A46EB196182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.66:sp1:*:*:*:*:*:*","matchCriteriaId":"455E364E-5010-47D9-8F09-58FE4B15615B"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://bugs.mysql.com/bug.php?id=32167","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32578","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32759","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32769","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/38517","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://ubuntu.com/usn/usn-897-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1662","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/20","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45649","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10591","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://bugs.mysql.com/bug.php?id=32167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/32769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/09/20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-671-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4099","sourceIdentifier":"secalert@redhat.com","published":"2008-09-18T17:59:32.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447."},{"lang":"es","value":"PyDNS (también conocido como python-dns) anterior a 2.3.1-4 en Debian GNU/Linux no utiliza puertos de origen aleatorios o transacciones ID's para petidiones DNS, lo que facilita a los atacantes remotos  falsera respuestas DNS. Vulnerabilidad distinta de CVE-2008-1447."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1-3","matchCriteriaId":"399E0A21-71C6-43AF-9EC8-EFD8FA50CD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-1:*:*:*:*:*:*:*","matchCriteriaId":"7F07B638-3E16-4A58-9380-495A21FB56FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-2:*:*:*:*:*:*:*","matchCriteriaId":"FC6F9EC4-0F3B-415A-B518-911716059350"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-3:*:*:*:*:*:*:*","matchCriteriaId":"C75EED6D-9C9E-47C8-B411-9A15072A82D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-4:*:*:*:*:*:*:*","matchCriteriaId":"C1FF1443-4AF9-4A90-BD01-4BD6DC9494EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-5:*:*:*:*:*:*:*","matchCriteriaId":"FE12FBCE-B3EC-43E2-AAFE-FA0497921C47"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-5.1:*:*:*:*:*:*:*","matchCriteriaId":"06410162-F3CE-4E90-A9CB-6BA35117A259"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-6:*:*:*:*:*:*:*","matchCriteriaId":"F369971A-A314-4883-84DD-07F906F06145"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.1-1:*:*:*:*:*:*:*","matchCriteriaId":"F9B62615-D57C-4567-B2A6-AD4BDE465864"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.1-2:*:*:*:*:*:*:*","matchCriteriaId":"34A10018-9535-4865-9FC0-0ED7EDE74691"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:debian:linux:unknown:unknown:etch:*:*:*:*:*","matchCriteriaId":"3CFF5E16-B757-4F51-9896-EA47AEBD5A91"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/4","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4100","sourceIdentifier":"secalert@redhat.com","published":"2008-09-18T17:59:32.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.  NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment."},{"lang":"es","value":"GNU adns 1.4 y versiones anteriores que utilizan un puerto de origen fijo e IDs de transacciones secuenciales, el cual hace más fácil a los atacantes remotos envenenar las repuestas DNS, diferente vulnerabilidad que CVE-2008-1447. NOTA: el fabricante anuncia que este comportamiento previsto es compatible con la función prevista del producto en un entorno seguro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"434C4ED3-43BD-467C-9D8F-7421DFC563D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEE19CD-6E24-4A81-BF54-9D0EE5A27DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.2:*:*:*:*:*:*:*","matchCriteriaId":"64660E8F-F1CA-41E0-8224-5BF9E338B460"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.3:*:*:*:*:*:*:*","matchCriteriaId":"18D77B02-B07D-44EE-A3C1-1562858ECBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.4:*:*:*:*:*:*:*","matchCriteriaId":"030CD10C-22D3-4767-AB1F-DBF8324D5D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.5:*:*:*:*:*:*:*","matchCriteriaId":"D6145DA9-C2F3-47F8-9ABA-DFE138F50704"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.6:*:*:*:*:*:*:*","matchCriteriaId":"39C335F3-3105-4BB8-A917-382AF723B86D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0DD1AB3-408C-4985-BBFB-4F5E775D6F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.8:*:*:*:*:*:*:*","matchCriteriaId":"F0DD9FC0-8F5F-4CDB-8F44-2D1FA5C2B03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:0.9:*:*:*:*:*:*:*","matchCriteriaId":"3AF85609-95B2-492F-9507-A7E7D575B3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DFDA2B1-D881-4AA6-886E-3E53E76EFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1D942ADC-A8FF-4068-8129-1B6F17E67FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9776D776-3EEA-437C-BCCA-3998D2314BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:adns:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0D685E8A-A979-489E-9572-703E6371457D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492698","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/4","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/6197","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4101","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:32.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Must have a valid e-mail address to access the patch on the \"google groups\" link.","cveTags":[],"descriptions":[{"lang":"en","value":"Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712."},{"lang":"es","value":"Vim 3.0 hasta 7.x anterior a 7.2.010, no escapa los caracteres de forma adecuada, esto permite a atacantes con la ayuda del usuario local (1) ejecutar instrucciones de su elección en el intérprete de comandos al introducir una pulsación de la tecla K en una línea que contiene un \";\" (punto y coma), seguido de un comando, o ejecutar comandos Ex de su elección al introducir un argumento después de una secuencia de teclado: (2)\"Ctrl-]\" (control corchete de cierre) o (3) \"g]\" (g corchete de cierre). NOTA: se trata de una vulnerabilidad diferente de CVE-2008-2712."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"DC771166-EF16-4755-ABD4-9390F366FE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1B91822-8DC4-471C-B6D4-EC7F114914B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:4.0:*:*:*:*:*:*:*","matchCriteriaId":"12B90731-2B67-4859-A873-EFEFE4A66CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F325C23E-BFBC-4371-AF74-E189FC2515F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.1:*:*:*:*:*:*:*","matchCriteriaId":"2527B955-E25A-4A33-A6F4-27DEDA99C7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.2:*:*:*:*:*:*:*","matchCriteriaId":"BEA82FC2-F2A3-4BE2-8EE2-5A3BC3555401"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.3:*:*:*:*:*:*:*","matchCriteriaId":"808C36C4-0523-4FBC-B3B7-3E6E29FF24EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.4:*:*:*:*:*:*:*","matchCriteriaId":"404E256E-B823-4BC4-8F29-C3724604F474"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.5:*:*:*:*:*:*:*","matchCriteriaId":"75F0563C-7156-4166-87AA-4C122F26CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.6:*:*:*:*:*:*:*","matchCriteriaId":"0CDFBFEB-D79E-4CEB-905E-FA89A0F0D494"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.7:*:*:*:*:*:*:*","matchCriteriaId":"AAEC13F6-0526-47FB-BF98-D864CE297D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.8:*:*:*:*:*:*:*","matchCriteriaId":"477A2C0C-5229-4A08-8AB1-B9C8C2D4F3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D9FE70D0-5931-49D1-A750-7D03C8C28228"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.1:*:*:*:*:*:*:*","matchCriteriaId":"8A08C510-8774-4FEB-BCA3-1868F692BF94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.2:*:*:*:*:*:*:*","matchCriteriaId":"464D5E9A-EB5A-47AB-8657-15A68AD30D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4F51CA-18C1-4043-B4E6-F1AD9D3C1346"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D2BAA6B0-4956-4D98-872A-BCCBD0D4CE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97CCAA40-55CE-4AB9-9268-AADA06E29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"}]}]}],"references":[{"url":"http://ftp.vim.org/pub/vim/patches/7.2/7.2.010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32864","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33410","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/6","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim-K.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0618.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495662","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30795","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-712-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0033","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461927","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44626","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812","source":"cve@mitre.org"},{"url":"http://ftp.vim.org/pub/vim/patches/7.2/7.2.010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim-K.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0617.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0618.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-712-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4102","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:32.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008-3681."},{"lang":"es","value":"Joomla! 1.5 anterior a v1.5.7 inicializa el PHP's PRNG con una semilla débil, lo que facilita a los atacantes obtener valores pseudo-aleatorios originados por la función PHP's mt_rand, como se ha demostrado obteniendo un reinicio de contraseña. Vulnerabilidad distinta de CVE-2008-3681."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/272-20080902-core-random-number-generation-flaw.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31789","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4271","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496237/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-04.txt","source":"cve@mitre.org"},{"url":"http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45068","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/272-20080902-core-random-number-generation-flaw.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496237/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4103","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:32.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam."},{"lang":"es","value":"El componente mailto (alias com_mailto) en Joomla! 1.5 y versiones anteriores 1.5.7 que envía un mensaje de e-mail sin validar la URL, el cual permite a los atacantes remotos enviar spam."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mailto:*:*:*:*:*:*:*:*","matchCriteriaId":"493019F7-EEEF-4CAE-B4E5-7D455835CD52"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/273-20080903-core-commailto-spam.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31789","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45070","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/273-20080903-core-commailto-spam.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4104","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:32.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a \"passed in\" URL."},{"lang":"es","value":"Múltiples vulnerabilidades involuntarias de redirección en Joomla! 1.5 anterior a 1.5.7; permiten a atacantes remotos redireccionar a los usuarios a sitios web de su elección y provocar ataques de phishing mediante una URL \"de paso\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45071","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4105","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:32.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct \"variable injection\" attacks and have unspecified other impact."},{"lang":"es","value":"JRequest en Joomla! 1.5 y versiones anteriores a 1.5.7 limpia correctamente variable establecidas con JRequest::setVar, el cual permite a los atacante remotos realizar un ataque de \"inyección de variable\" y tiene otras consecuencias no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31789","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4275","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020843","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45069","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4106","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:33.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the user_login column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's password to a random value by registering a similar username and then requesting a password reset, related to a \"SQL column truncation vulnerability.\" NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107."},{"lang":"es","value":"WordPress anterior a v2.6.2 no maneja adecuadamente las advertencias MySQL relacionadas con la inserción de nombres de usuarios con un tamaño superior al ancho de la columna del user_login, y no maneja correctamente los espacios a la hora de comparar nombres de usuario, lo que permite a atacantes remotos modificar las contraseñas de usuarios de su elección a un valor aleatorio registrando un nombre de usuario similar y posteriormente realizando un reinicio de contraseña, relacionado con la \"Vulnerabilidad de truncado de columna SQL\" (SQL column truncation vulnerability). NOTA: el atacante puede descubrir la contraseña aleatoria explotando  la vulnerabilidad CVE-2008-4107."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"869012B6-AB3F-43DB-8C25-E2C643D5AB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*","matchCriteriaId":"FC499ABC-D1A6-4A9B-A06B-12C8275462DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*","matchCriteriaId":"FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*","matchCriteriaId":"C516C041-B945-4992-8104-E20B3B6CECDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*","matchCriteriaId":"AFBD4E49-EA17-4FFD-AF9C-950E542555A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*","matchCriteriaId":"6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*","matchCriteriaId":"4C4229BC-1646-4202-92B8-FC718D557518"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A777651-D2B2-47E0-A13C-BD667635F3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=122152830017099&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4272","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020869","source":"cve@mitre.org"},{"url":"http://wordpress.org/development/2008/09/wordpress-262/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496287/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31068","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-05.txt","source":"cve@mitre.org"},{"url":"http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2553","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6397","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6421","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152830017099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/development/2008/09/wordpress-262/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496287/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-05.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4107","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:33.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Download the latest version of PHP to fix this vulnerability: http://www.php.net/downloads.php","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102."},{"lang":"es","value":"Las funciones (1) rand y (2) mt_rand en PHP 5.2.6 no producen criptográficamente fuertes números aleatorios, el cual permite a los atacantes aprovechar que algunos productos confían en estas funciones para relevantes funcionalidades de seguridad, como demuestra la funcionalidad de reinicialización de contraseñas en Joomla! 1.5.x y WordPress en versiones anteriores a 2.6.2, son diferentes vulnerabilidades a CVE-2008-2107, CVE-2008-2108, y CVE-2008-4102."}],"vendorComments":[{"organization":"Red Hat","comment":"The risks associated with fixing this bug are greater than the security risk. We therefore currently have no plans to fix this flaw in Red HatEnterprise Linux 2.1, 3, 4, or 5.\n\nFor more information please see our bug for this issue:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=462772","lastModified":"2017-08-07T21:32:25.513"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.8","matchCriteriaId":"B31A8BEA-1BA9-4900-87D2-F23C1C598AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.5","matchCriteriaId":"18255FF5-3F40-483F-85DC-21D9B6B4FE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=122152830017099&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/48700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4271","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020869","source":"cve@mitre.org"},{"url":"http://wordpress.org/development/2008/09/wordpress-262/","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496237/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496287/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31115","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-02.txt","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-04.txt","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-05.txt","source":"cve@mitre.org"},{"url":"http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2553","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45956","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152830017099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/development/2008/09/wordpress-262/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496237/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496287/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-05.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4108","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:33.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file.  NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory."},{"lang":"es","value":"Tools/faqwiz/move-faqwiz.sh (también conocido como \"la herramienta de movimiento del asistente genérico del FAQ\") en Python 2.4.5, puede que permita a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal tmp$RANDOM.tmp. NOTA: puede que no existan escenarios de uso comunes en los que tmp$RANDOM.tmp esté localizado en un directorio que no sea de confianza."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of python as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n","lastModified":"2009-03-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python_software_foundation:python:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"00DEEEDB-98B2-43FE-A1B2-340294097399"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498899","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122148330903513&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122152861617434&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31184","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020904","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2659","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462326","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45161","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122148330903513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122152861617434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4109","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051."},{"lang":"es","value":"Cierto parche de Debian para OpenSSH en versiones anteriores a 4.3p2-9etch3 en etch, y versiones anteriores a 4.6p1-1 en sid y lenny, que utiliza funciones que no son señales asíncronas seguras (async-signal-safe) en el gestor de señales para los tiempos de autentificado, el cual permite a los atacantes remotos causar una denegación de servicio (agotamiento de la ranura de conexión) a través de múltiples intentos de autenticación. NOTA: esto existe por una incorrecta solución de CVE-2006-5051."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  The patch used to fix CVE-2006-5051 in Red Hat Enterprise Linux 2.1, 3, 4, and 5 was complete and does not suffer from this problem.","lastModified":"2017-08-07T21:32:25.653"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:debian:linux:unknown:unknown:etch:*:*:*:*:*","matchCriteriaId":"3CFF5E16-B757-4F51-9896-EA47AEBD5A91"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3p2","matchCriteriaId":"E2B74B16-DE22-4206-891D-5EB3BC4F58C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7BEB67BB-A442-46C2-8BC1-BBEB009AC532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B6E307F1-C765-409C-835C-133026A5179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"114134F3-BDFD-465D-8317-82F9D6EFA5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.3:*:*:*:*:*:*:*","matchCriteriaId":"DAB55300-F90D-45D3-88BC-5ADCEC366264"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3EC5611-31B5-4253-B99A-E81C202768A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"43060323-1B51-45B4-BEB9-0E472896D8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5441C616-D127-42D9-88AA-0FC9AA16EB03"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2:*:*:*:*:*:*:*","matchCriteriaId":"FE60A415-91E3-4819-A252-E86A32EC3018"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F2EDC0-3189-4523-882B-9188C852F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEF5203-9D6B-4431-BF0D-C81B1E250AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2991C07-5486-4590-A74E-46A379DD3339"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EB9BE06-0A36-4853-ADF4-9C1A1854278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC57F38-6545-497B-B6DA-FCAF51755988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*","matchCriteriaId":"EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*","matchCriteriaId":"80C55B73-497D-4A22-9230-A4160BF97344"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*","matchCriteriaId":"0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*","matchCriteriaId":"4B235167-9554-4431-88C5-9472DD36FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E05D8E86-EC01-4589-B372-4DEB7845C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*","matchCriteriaId":"764AD252-CA2F-4A87-BCAA-7747E8C410E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*","matchCriteriaId":"269BB9F7-55E5-4CB3-8429-C37C7132799F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F639-31A0-4026-B6D4-51BA79FB1D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0211BCE3-0DED-40BA-8A21-1A97B91F71C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*","matchCriteriaId":"B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5AD7BB30-AC79-4153-852C-1053DCF4DE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F48519C6-0C28-49A5-94C7-EF3AA88E2667"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*","matchCriteriaId":"9039BE91-AF0A-41E7-8F9F-15375890E120"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*","matchCriteriaId":"08BCB2EA-DF9D-4853-805B-29FA6274E2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*","matchCriteriaId":"0F93417F-2498-4576-9F5D-B59F77D39669"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AF3AB42C-B614-4746-99AD-E94140D91BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*","matchCriteriaId":"458167E5-9BC2-40BE-AC8A-9761A4F19494"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*","matchCriteriaId":"86ACA0ED-A3D0-48A7-B06F-13709AD23B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*","matchCriteriaId":"0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8176879B-1875-4AC9-B15A-2ABCFCD04F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*","matchCriteriaId":"FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*","matchCriteriaId":"A02751E9-2D38-4495-9572-8D84D71D4773"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*","matchCriteriaId":"7A36BEA2-DAE4-423C-8D85-0F6036351F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*","matchCriteriaId":"DF23EBA1-D3A9-413F-9E83-43A91492C031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*","matchCriteriaId":"44CCF5CD-B434-4392-A79A-C1945D2AE30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*","matchCriteriaId":"AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*","matchCriteriaId":"C35F4ABE-1B0C-4195-8F99-BF993A17882B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*","matchCriteriaId":"ADC7352D-2916-47F7-A256-F897D763DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"AEC3FC36-B246-4DCB-8984-228525D9A356"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*","matchCriteriaId":"BC861000-37D8-4B0F-BFA0-57E9BE125B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E003AB3C-8DF3-4AE8-82A3-984F30E5599B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*","matchCriteriaId":"5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FF67D77-02AC-4807-984D-C5AE9799F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*","matchCriteriaId":"683B26F0-5EA2-455A-8948-27C100BBA3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E5A75B23-2DD7-4EB2-BEAA-049FF4E51A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*","matchCriteriaId":"7279E1EC-DEBC-4ACC-925D-06A7697C162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7910598E-BEC1-4644-9DE4-D8BE505A4F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*","matchCriteriaId":"FB416D0C-6C86-450F-8917-D4B1BD82AB1E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:debian:linux:unknown:unknown:sid:*:*:*:*:*","matchCriteriaId":"0E64AB89-A4A4-4FD8-A22A-B03D24650B4B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"A410C8F9-717C-4657-91DD-BAEAB53ECC16"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7BEB67BB-A442-46C2-8BC1-BBEB009AC532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B6E307F1-C765-409C-835C-133026A5179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"114134F3-BDFD-465D-8317-82F9D6EFA5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.3:*:*:*:*:*:*:*","matchCriteriaId":"DAB55300-F90D-45D3-88BC-5ADCEC366264"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3EC5611-31B5-4253-B99A-E81C202768A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"43060323-1B51-45B4-BEB9-0E472896D8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5441C616-D127-42D9-88AA-0FC9AA16EB03"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2:*:*:*:*:*:*:*","matchCriteriaId":"FE60A415-91E3-4819-A252-E86A32EC3018"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F2EDC0-3189-4523-882B-9188C852F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEF5203-9D6B-4431-BF0D-C81B1E250AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2991C07-5486-4590-A74E-46A379DD3339"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EB9BE06-0A36-4853-ADF4-9C1A1854278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC57F38-6545-497B-B6DA-FCAF51755988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*","matchCriteriaId":"EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*","matchCriteriaId":"80C55B73-497D-4A22-9230-A4160BF97344"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*","matchCriteriaId":"0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*","matchCriteriaId":"4B235167-9554-4431-88C5-9472DD36FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E05D8E86-EC01-4589-B372-4DEB7845C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*","matchCriteriaId":"764AD252-CA2F-4A87-BCAA-7747E8C410E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*","matchCriteriaId":"269BB9F7-55E5-4CB3-8429-C37C7132799F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F639-31A0-4026-B6D4-51BA79FB1D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0211BCE3-0DED-40BA-8A21-1A97B91F71C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*","matchCriteriaId":"B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5AD7BB30-AC79-4153-852C-1053DCF4DE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F48519C6-0C28-49A5-94C7-EF3AA88E2667"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*","matchCriteriaId":"9039BE91-AF0A-41E7-8F9F-15375890E120"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*","matchCriteriaId":"08BCB2EA-DF9D-4853-805B-29FA6274E2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*","matchCriteriaId":"0F93417F-2498-4576-9F5D-B59F77D39669"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AF3AB42C-B614-4746-99AD-E94140D91BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*","matchCriteriaId":"458167E5-9BC2-40BE-AC8A-9761A4F19494"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*","matchCriteriaId":"86ACA0ED-A3D0-48A7-B06F-13709AD23B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*","matchCriteriaId":"0FEB9262-D05E-4610-9C79-3EDE44AC7C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8176879B-1875-4AC9-B15A-2ABCFCD04F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*","matchCriteriaId":"FAA26A12-F96A-4025-BBCA-72B7A3B1E60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*","matchCriteriaId":"A02751E9-2D38-4495-9572-8D84D71D4773"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*","matchCriteriaId":"7A36BEA2-DAE4-423C-8D85-0F6036351F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"80DC64F6-FE28-44BA-91D1-EC2DB11B2CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p1:*:*:*:*:*:*:*","matchCriteriaId":"DF23EBA1-D3A9-413F-9E83-43A91492C031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*","matchCriteriaId":"44CCF5CD-B434-4392-A79A-C1945D2AE30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*","matchCriteriaId":"AEB456B8-9D8B-4985-858D-6A43FA5EE2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2BD4E0F6-4EEA-4EC7-83E7-FC6F7D2E7A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*","matchCriteriaId":"C35F4ABE-1B0C-4195-8F99-BF993A17882B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*","matchCriteriaId":"ADC7352D-2916-47F7-A256-F897D763DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"AEC3FC36-B246-4DCB-8984-228525D9A356"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*","matchCriteriaId":"BC861000-37D8-4B0F-BFA0-57E9BE125B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E003AB3C-8DF3-4AE8-82A3-984F30E5599B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*","matchCriteriaId":"5EBE75FE-DDE2-43BA-80EF-15A6698EABC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FF67D77-02AC-4807-984D-C5AE9799F051"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*","matchCriteriaId":"683B26F0-5EA2-455A-8948-27C100BBA3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E5A75B23-2DD7-4EB2-BEAA-049FF4E51A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*","matchCriteriaId":"7279E1EC-DEBC-4ACC-925D-06A7697C162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7910598E-BEC1-4644-9DE4-D8BE505A4F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3p1:*:*:*:*:*:*:*","matchCriteriaId":"FB416D0C-6C86-450F-8917-D4B1BD82AB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3p2:*:*:*:*:*:*:*","matchCriteriaId":"3640CCC9-EC4A-44A4-B747-7BAAAD3460C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2DD362E-9EA9-4E88-9A94-D7B471EB1FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.4p1:*:*:*:*:*:*:*","matchCriteriaId":"E3094069-AC2E-43BD-8094-D48E2526DECC"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32080","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32181","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1638","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/3","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020891","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-649-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45202","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-649-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4110","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T22:00:00.743","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\\Binn\\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method.  NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings."},{"lang":"es","value":"Un desbordamiento del búfer en el control ActiveX de SQLVDIRLib.SQLVDirControl en la biblioteca Tools\\Binn\\sqlvdir.dll en SQL Server 2000 de Microsoft (también se conoce como SQL Server versión 8.0) permite a los atacantes remotos causar una denegación de servicio (bloqueo del navegador) o posiblemente ejecutar código arbitrario por medio de una URL larga en el segundo argumento al método Connect. NOTA: este problema no es una vulnerabilidad en muchos entornos, ya que el control no está marcado como seguro para el scripting y no se ejecutaría con la configuración predeterminada de Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4262","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496232/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45186","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496232/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4111","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) 6.1 anterior a 6.1.0.19, cuando la opción FileServing está activada, tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32296","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK64302","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2566","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45122","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK64302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4112","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.383","lastModified":"2023-11-07T02:02:40.350","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3195.  Reason: This candidate is a duplicate of CVE-2008-3195.  Notes: All CVE users should reference CVE-2008-3195 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4113","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.413","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function."},{"lang":"es","value":"Función The sctp_getsockopt_hmac_ident en net/sctp/socket.c la implementación de Stream Control Transmission Protocol (sctp) en el kernel de Linux anterior a 2.6.26.4, cuando la extensión SCPT-AUTH está activada, basada en un valor de tamaño no confiable en el límite de la copia de datos de la memoria del kernel, permite a usuarios locales obtener información sensible a través de una petición SCTP_HMAC_IDENT IOCTL manipulada implicando a la función sctp_getsockopt."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via:  https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.25.14","matchCriteriaId":"BD4AD0AC-1483-4E8B-AE00-9D349D5982DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4266","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/6","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496256/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31121","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021000","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-007.txt","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45188","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7618","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496256/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-007.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4114","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to \"insufficiently validating the buffer size,\" as demonstrated by a request to the \\PIPE\\lsarpc named pipe, aka \"SMB Validation Denial of Service Vulnerability.\""},{"lang":"es","value":"SRV.sys en el servicio de servidor en Microsoft Windows versiones 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, vista Gold y SP1, y Server 2008 permite a los atacantes remotos causar una denegación de servicio (bloqueo de sistema) o posiblemente tener otro impacto no especificado por medio de un paquete SMB WRITE_ANDX con un desplazamiento que es incompatible con el tamaño del paquete, relacionado con \"insufficiently validating the buffer size\", como fue demostrado por una petición a la tubería llamada \\PIPE\\lsarpc , también conocida como \"SMB Validation Denial of Service Vulnerability\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://secunia.com/advisories/31883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.reversemode.com/index.php?option=com_content&task=view&id=54&Itemid=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496354/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020887","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-013A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vallejo.cc/proyectos/vista_SMB_write_DoS.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45146","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5262","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6044","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6463","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.reversemode.com/index.php?option=com_content&task=view&id=54&Itemid=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-013A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vallejo.cc/proyectos/vista_SMB_write_DoS.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4115","sourceIdentifier":"cve@mitre.org","published":"2008-09-16T23:00:01.460","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function."},{"lang":"es","value":"TalkBack 2.3.6 permite a atacantes remotos obtener información de la configuración a través de una petición directa a install/info.php que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talkback:talkback:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"731C4D54-AA52-4532-BF43-84CDBA1935A1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4267","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45103","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6451","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4116","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento del búfer en QuickTime versión 7.5.5 y iTunes versión 8.0, de Apple, permite a los atacantes remotos causar una denegación de servicio (bloqueo del navegador) o posiblemente ejecutar código arbitrario por medio de un atributo type largo en una etiqueta de quicktime (1) en una página web o insertado en un archivo ( 2) .mp4 o (3) .mov, posiblemente relacionado con la función Check_stack_cookie y un error por un paso que conduce a un desbordamiento del búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"816395FD-EA69-4994-8004-D699831649DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45311","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5936","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6113","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7995","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6471","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4117","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:04:27.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en una página Web en el módulo PRM de Sun Management Center (SunMC) 3.6.1 y 4.0; permite a atacantes remotos provocar una denegación de servicio (consumo de memoria), a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management_center:3.6.1:sparc:*:*:*:*:*:*","matchCriteriaId":"EC111BC3-2D40-4822-8949-8AE5AD8AE8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management_center:3.6.1:x86:*:*:*:*:*:*","matchCriteriaId":"1EE6D5CA-4462-45FA-9985-D0DA954E3A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management_center:4.0:unknown:sparc:*:*:*:*:*","matchCriteriaId":"FBE84271-AE66-43A1-A075-69A8D3E893F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management_center:4.0:unknown:x86:*:*:*:*:*","matchCriteriaId":"9A4A0F03-4C07-476D-AC29-FE8CDF15878A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31841","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241686-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31194","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020890","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2587","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241686-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4118","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T15:06:09.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en High Norm Sound Master 2nd 1.0  que permite a los atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:high_norm:sound_master_2nd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"28198E0C-C76F-4F49-8220-1A8707422AD8"}]}]}],"references":[{"url":"http://high-norm.rash.jp/script_soundmaster2nd.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://high-norm.rash.jp/script_soundmaster2nd.html.","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN55010230/index.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44977","source":"cve@mitre.org"},{"url":"http://high-norm.rash.jp/script_soundmaster2nd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://high-norm.rash.jp/script_soundmaster2nd.html.","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN55010230/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4119","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.350","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving \"multiple web forms.\""},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en CA Service Desk v11.2 y CMDB v11.0 hasta v11.2, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados implicando a \"múltiples formas web\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:service_desk:11.2:*:*:*:*:*:*:*","matchCriteriaId":"5DE05D81-FD7C-41D4-9FA7-42214110FBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:cmdb:11.0:*:*:*:*:*:*:*","matchCriteriaId":"97F5ED43-DF93-4A8E-8D15-5115339806DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:cmdb:11.1:*:*:*:*:*:*:*","matchCriteriaId":"B2EAFA0C-9992-42F3-A3A4-F37BB89E5567"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:cmdb:11.2:*:*:*:*:*:*:*","matchCriteriaId":"ADE5CAD0-D95F-4927-9B9F-6432C968D507"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/09/25.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32038","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496755/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31412","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020949","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2673","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45416","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=186585","source":"cve@mitre.org"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/09/25.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496755/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=186585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4120","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en FlatPress v0.804, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"user\", (2)\"pass\" en login.php, o (3) \"name\" en contact.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flatpress:flatpress:0.804:*:*:*:*:*:*:*","matchCriteriaId":"BAB09663-66BC-4A89-9C15-20D4E96BD84C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4324","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=157089&release_id=628765_id=628765","source":"cve@mitre.org"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-4120-flatpress.html","source":"cve@mitre.org"},{"url":"http://www.flatpress.org/home/comments.php?entry=entry080925-180744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496740/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31407","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=157089&release_id=628765_id=628765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-4120-flatpress.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.flatpress.org/home/comments.php?entry=entry080925-180744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496740/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4121","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:00.990","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information: http://cpcommerce.cpradio.org/downloads.php","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en cpCommerce en versiones anteriores a 1.2.4 que permite a los atacantes remotos, inyectar arbitrariamente una secuencia de comandos web o HTML a través del (1) parámetro search en una acción search.quick para el archivo search.php y (2) el parámetro name en una acción sendtofriend para el archivo sendtofriend.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.3","matchCriteriaId":"B0BE4BD2-CD8B-4DDD-9B55-E6B81FEE4F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:0.5f:*:*:*:*:*:*:*","matchCriteriaId":"C1A76E93-7DF7-439F-906B-8C1282901966"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6B47692E-BF0E-405E-9F84-F98954A7A03D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB243261-AB50-46AF-B7A3-42ACF9FAC8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CF21D39C-1BEA-4595-A869-ACC08F0AF744"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BB29AF15-B8BE-4160-9FCE-11C97710F1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A0A411EE-19E6-44CA-879D-0C2FCB2E1963"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"8425BFB3-5349-44C7-A378-75F2BE3820B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"013D4ED2-C532-4A1A-AF37-B21D83BEADB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F8A3E39-2CCF-4DE8-BC76-1B101F7C4415"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"07FBA21A-1B1A-44FD-BC41-F95E4CD24A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0C8EE244-FD27-4184-BB8A-49293A40C479"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.9a:*:*:*:*:*:*:*","matchCriteriaId":"27B52C0D-174E-4EBF-86B8-E918824E75F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC2E775-D3FF-4C06-8818-DA6105D7F2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0BD02E75-F434-4B84-9E88-430485C023BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E2458A0A-3018-42BE-9C9D-8670E0ADBCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19CCEF08-5E94-45BE-B8AC-0FB3D63918CA"}]}]}],"references":[{"url":"http://cpcommerce.cpradio.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4448","source":"cve@mitre.org"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-4121-cpcommerce.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497545/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31825","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45970","source":"cve@mitre.org"},{"url":"http://cpcommerce.cpradio.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.datensalat.eu/~fabian/cve/CVE-2008-4121-cpcommerce.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497545/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4122","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:02.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."},{"lang":"es","value":"Joomla! 1.5.8 no habilita el flag 'secure' para la cookie de la sesión en una sesión https, lo faciita a los atacantes remotos el capturar esta cookie interceptando su transmisión dentro de una sesión http."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"466E5E84-4C69-49F2-83DA-FC86202DB7F4"}]}]}],"references":[{"url":"http://int21.de/cve/CVE-2008-4122-joomla.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4794","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499295/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/499354/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://int21.de/cve/CVE-2008-4122-joomla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/499354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4125","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:33.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632."},{"lang":"es","value":"La función de búsqueda en phpBB 2.x proporciona un valor search_id que pierde el estado de PHP's PRNG, el cual permite a los atacantes remoto obtener potencialmente información sensible, como se demuestra por un ataque de aplicaciones cruzadas contra WordPress, vulnerabilidad diferente a CVE-2006-0632."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2:*:*:*:*:*:*:*","matchCriteriaId":"7FB07A06-3A4E-47F4-9B3F-3EDF16130EB2"}]}]}],"references":[{"url":"http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45415","source":"cve@mitre.org"},{"url":"http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4126","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:33.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099."},{"lang":"es","value":"PyDNS (también conocido como Python DNS) anterior a 2.3.1-5 en Debian GNU/Linux no utiliza puertos de origen aleatorios para las peticiones DNS ni usa ID's de transacción aleatorios para para los intentos DNS, lo que facilita a los atacantes remotos falsear las respuestas DNS. Una vulnerabilidad distinta de CVE-2008-1447. NOTA: esta vulnerabilidad existe debido a una solución incompleta de CVE-2008-4099."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1-4","matchCriteriaId":"19619421-DA18-4493-9A13-F652C7329708"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-1:*:*:*:*:*:*:*","matchCriteriaId":"7F07B638-3E16-4A58-9380-495A21FB56FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-2:*:*:*:*:*:*:*","matchCriteriaId":"FC6F9EC4-0F3B-415A-B518-911716059350"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-3:*:*:*:*:*:*:*","matchCriteriaId":"C75EED6D-9C9E-47C8-B411-9A15072A82D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-4:*:*:*:*:*:*:*","matchCriteriaId":"C1FF1443-4AF9-4A90-BD01-4BD6DC9494EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-5:*:*:*:*:*:*:*","matchCriteriaId":"FE12FBCE-B3EC-43E2-AAFE-FA0497921C47"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-5.1:*:*:*:*:*:*:*","matchCriteriaId":"06410162-F3CE-4E90-A9CB-6BA35117A259"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.0-6:*:*:*:*:*:*:*","matchCriteriaId":"F369971A-A314-4883-84DD-07F906F06145"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.1-1:*:*:*:*:*:*:*","matchCriteriaId":"F9B62615-D57C-4567-B2A6-AD4BDE465864"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.1-2:*:*:*:*:*:*:*","matchCriteriaId":"34A10018-9535-4865-9FC0-0ED7EDE74691"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:python-dns:2.3.1-3:*:*:*:*:*:*:*","matchCriteriaId":"3EF11BC6-303A-4B2E-8F60-2782219915CC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:debian:linux:unknown:unknown:etch:*:*:*:*:*","matchCriteriaId":"3CFF5E16-B757-4F51-9896-EA47AEBD5A91"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4127","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T17:59:33.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function."},{"lang":"es","value":"Mshtml.dll en Microsoft Internet Explorer 7 Gold 7.0.5730 y 8 Beta 8.0.6001 en Windows XP SP2 que permite a los atacantes remotos causar una denegación de servicios (fallo en rendererizado posterior de la imagen) a través de un fichero PNG manipulado, en relación a un bucle infinito en la función CDwnTaskExec::ThreadExec."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730:unknown:gold:*:*:*:*:*","matchCriteriaId":"817636ED-5E42-460E-89F1-24D5C64AB8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8.0.6001:beta:*:*:*:*:*:*","matchCriteriaId":"612B8367-DAEF-4EE3-BC57-16A5CF4D3030"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4273","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496483/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31215","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45225","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496483/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4128","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T20:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain \"show privilege\" command to the /level/15/exec/- URI, and (2) a certain \"alias exec\" command to the /level/15/exec/-/configure/http URI.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad múltiple de falsificación de petición en sitios cruzados - CSRF en el componente de administración HTTP en el IOS Cisco 12.4 en el Router de Servicios Integrados 871, que permite a los atacantes remotos ejecutar arbitrariamente comandos a través de(1) ciertos comandos que \"muestran lo privilegios\" en /level/15/exec/- URI, y (2) ciertos comandos \"alias exec\" en /level/15/exec/-/configure/http URI. NOTA: algunos de estos detalles fueron obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:871_integrated_services_router:-:*:*:*:*:*:*:*","matchCriteriaId":"F1A300FE-D6D3-41AC-9792-4D0E28621F72"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31218","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45226","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6476","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6477","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4129","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T20:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality."},{"lang":"es","value":"Gallery, versiones anteriores a 1.5.9, y 2.x y versiones anteriores a 2.2.6, no trata adecuadamente archivos ZIP que contienen enlaces simbólicos, el cual permite a los usuarios remotos autentificados manejar los ataques de salto de directorio y leer archivos arbitrariamente a través de vectores relativos a el fichero cargado funcionalmente (alias zip cargado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"F63EDF9A-1818-41D4-96EF-DFF61994C27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAD2DDED-A01D-4026-B8C3-0DA916466D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D400C30B-BD93-4419-BEC2-24A470F5E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8180C4E9-EFC9-438C-AAAF-B09B838CA17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B2ED9F1B-D3BD-42BA-8300-6A719A577F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3A821D29-75FA-4A6D-BE1A-D11906FA188D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.8","matchCriteriaId":"B2630CD9-31D8-4E24-B518-03D94B3383B9"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_1.5.9_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://gallery.menalto.com/gallery_2.2.6_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33144","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31231","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45228","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_1.5.9_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://gallery.menalto.com/gallery_2.2.6_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4130","sourceIdentifier":"cve@mitre.org","published":"2008-09-18T20:00:03.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the animation to \"interact with the embedding page.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en Gallery 2.x y versiones anteriores a 2.2.6 que permite a los atacantes remotos inyectar una secuencia de comandos web o HTML arbitrarios a través de una animación Flash manitulada, en relación a la habilidad de la animación a \"interactuar con la página incrustada\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"F63EDF9A-1818-41D4-96EF-DFF61994C27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAD2DDED-A01D-4026-B8C3-0DA916466D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D400C30B-BD93-4419-BEC2-24A470F5E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8180C4E9-EFC9-438C-AAAF-B09B838CA17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B2ED9F1B-D3BD-42BA-8300-6A719A577F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3A821D29-75FA-4A6D-BE1A-D11906FA188D"}]}]}],"references":[{"url":"http://gallery.menalto.com/gallery_2.2.6_released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33144","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31231","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45227","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/gallery_2.2.6_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4131","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T17:15:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the :tag command in the (a) vi, (b) ex, (c) vedit, (d) view, and (e) edit programs."},{"lang":"es","value":"Múltiples vulnerabilidades inespecíficas en Sun Solaris 8 a 10 permite a atacantes remotos aumentar privilegios a través de vectores relacionados con el manejo de etiquetas con la opcion (1) -t y (2) el comando :tag en los programas (a) vi, (b) ex, (c) vedit, (d) view, y (e) edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31907","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020898","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237987-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-387.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31229","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45218","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5884","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237987-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-387.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4132","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T17:15:05.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX VSFlexGrid.VSFlexGridL en ComponentOne VSFlexGrid 7.0.1.151 y 8.0.20072.239 permite a atacantes remotos ejecutar código de su elección a través del primer argumento largo para el método Archive. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:componentone:vsflexgrid:7.0.1.151:*:*:*:*:*:*:*","matchCriteriaId":"A3D098AF-1C87-41CF-B543-E99EA61F581B"},{"vulnerable":true,"criteria":"cpe:2.3:a:componentone:vsflexgrid:8.0.20072.239:*:*:*:*:*:*:*","matchCriteriaId":"D1D8899A-DDE2-4547-8999-32EF1114E8F2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31200","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4133","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T17:15:05.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters."},{"lang":"es","value":"El servicio web proxy en el  D-Link DIR-100 con firmware 1.12 y anteriores no filtra de manera apropiada las peticiones web con URLs de mucha longitud, permite a atacantes remotos evitar los filtros de restricción web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dir-100:1.02:*:*:*:*:*:*:*","matchCriteriaId":"35434946-565C-4756-BB73-BD1A02566999"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dir-100:1.12:*:*:*:*:*:*:*","matchCriteriaId":"866C86B9-9CE9-45CC-BECF-1B00869ABE14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4276","source":"cve@mitre.org"},{"url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496072/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31050","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44961","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496072/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4134","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T17:15:05.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en manager/static/view.php en phpRealty 0.03 y anteriores y posiblemente tambien en otras versiones anteriores a la 0.05 , permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro INC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprealty:phprealty:*:*:*:*:*:*:*:*","versionEndIncluding":"0.03","matchCriteriaId":"FEC4F101-5570-44C4-B619-419A32120CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprealty:phprealty:0.021:*:*:*:*:*:*:*","matchCriteriaId":"12B9D678-E02F-4719-A339-9DC90F1D816C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprealty:phprealty:0.022:*:*:*:*:*:*:*","matchCriteriaId":"82E02730-AE11-4514-86D8-DBAEC0776E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprealty:phprealty:0.023:*:*:*:*:*:*:*","matchCriteriaId":"308DB260-8156-4690-8A0E-1464DA5998EB"}]}]}],"references":[{"url":"http://php-realty.com/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31874","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4277","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31213","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2611","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45181","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6473","source":"cve@mitre.org"},{"url":"http://php-realty.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4135","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T17:15:05.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to cause a denial of service (device crash) via multiple deauthentication (DeAuth) frames."},{"lang":"es","value":"Symbian OS S60 3rd edition en el Nokia E90 Communicator y  en el Nseries N82 permite a atacantes remotos provocar una denegación de servicio (device crash) a través de múltiples marcos (frames) de desautenticación (DeAuth)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:s60:symbian_os:unknown:unknown:3:*:*:*:*:*","matchCriteriaId":"F5D06409-4397-47B8-8626-21B4BD080D45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:nokia:e90_communicator:*:*:*:*:*:*:*:*","matchCriteriaId":"5ADF5FA6-CE66-4304-9C32-5F21B13F8FC0"},{"vulnerable":false,"criteria":"cpe:2.3:h:nokia:n82:*:*:*:*:*:*:*:*","matchCriteriaId":"B8B1F8A1-7B7E-406D-B943-B51D2B922DF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31857","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4278","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31175","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2599","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45158","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6459","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4136","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:37.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service crash) via multiple RETR commands, possibly involving long filenames."},{"lang":"es","value":"Michael Roth Software Personal FTP Server (PFT)6.0f que permite a los atacantes remotos causar una denegación de servicio (caída del servicio) a través de múltiples comandos RETR, posiblemente involucrando nombres largos de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_roth_software:pftp:6.0f:*:*:*:*:*:*:*","matchCriteriaId":"862B3BDA-4B76-4F56-BD7E-25A9DA60DFA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31852","source":"cve@mitre.org"},{"url":"http://shinnok.evonet.ro/vulns_html/pftp.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020897","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45129","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6458","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shinnok.evonet.ro/vulns_html/pftp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4137","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footer_file parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en footer.php en PHP-Crawler 0.8 que permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de una URL en el parámetro footer_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_crawler:php_crawler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.6","matchCriteriaId":"D93F55E7-0950-4EA2-810B-A7D33502816F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_crawler:php_crawler:*:alpha:*:*:*:*:*:*","versionEndIncluding":"0.7.7","matchCriteriaId":"C2263C0C-5829-4E04-BB4E-5B6CC14B0515"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_crawler:php_crawler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"3A62F773-936B-430E-B500-9E3B4C9123BC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31217","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31217/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45213","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31217/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4138","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto PHP en skin_shop/standard/3_plugin_twindow/twindow_notice.php en TECHNOTE 7 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro shop_this_skin_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:technote:technote:7:*:*:*:*:*:*:*","matchCriteriaId":"BD7EC2DA-0A8F-454D-B37C-FF50689E8EBF"}]}]}],"references":[{"url":"http://osvdb.org/48166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31916","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31222","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2609","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45215","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6478","source":"cve@mitre.org"},{"url":"http://osvdb.org/48166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4139","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en admin.php para OpenSolution Quick.Cms.Lite 2.1 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de la consulta string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensolution:quick.cms.lite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BB82A012-3E3D-4BC6-8A52-58CA1D6069FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496435/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31210","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496435/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4140","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en admin.php para Quick.Cart 3.1 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de una consulta string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensolution:quick.cart:3.1:*:*:*:*:*:*:*","matchCriteriaId":"68028C0D-01AB-46C7-8CCD-A014946DC68C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496477/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31216","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45441","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496477/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4141","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos PHP en x10Media x10 Automatic MP3 Script 1.5.5 que permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de una URL en el parámetro web_root para (1) includes/function_core.php y (2) templates/layout_lyrics.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x10media:.x10_automatic_mp3_script:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"636FB97C-B2DF-4885-8E08-AB69DF3E5A71"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/x10media-rfi.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31920","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31225","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2608","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45224","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6480","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/x10media-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4142","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the es_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en article.php en E-Php CMS que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro es_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ephpscripts:e-php_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"675A49D6-6B77-455F-88C7-2A86032CBD3F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31923","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15410","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2607","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45220","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/62994","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6483","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/15410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/62994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4143","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category_search.php en RazorCommerce Shopping Cart que permite a los atacante remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorecommerce:shopping_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"84838F2C-C57B-471B-81AB-23973C7E815C"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/razorcommerce-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45145","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/razorcommerce-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4144","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el fichero index.php en ACG-ScriptShop E-Gold Script Shop, permite a atacantes remotos la ejecucion de comandos SQL de su elección a través del parametro \"cid\" en una acción showcat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discountedscripts:e-gold_script_shop:*:*:*:*:*:*:*:*","matchCriteriaId":"B4354E1C-1F42-4030-8E62-FAFB034E9AF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44966","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6364","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4145","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en user_read_links.php en Addalink 1.0 beta 4 y versiones anteriores, cuando magic_quotes_gpc es deshabilitada, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro category_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:addalink:addalink:*:beta4:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"F226E4C1-E7C5-4E1B-9D28-470DD52812A1"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2606","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45245","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6485","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4146","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field and (2) change the visit-counter value via a modified counter field."},{"lang":"es","value":"Addalink 1.0 beta 4 y versiones anteriores, que permite a los atacantes remotos (1) aprobar componentes del sitio web a través de un campo modificado aprobado (2) cambiando el valor del contador de visitas a un campo contador modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:addalink:addalink:*:beta4:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"F226E4C1-E7C5-4E1B-9D28-470DD52812A1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4295","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2606","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45246","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6482","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4147","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modified Content-Type."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en el módulo Mailsave 5.x y versiones anteriores a 5.x-3.3 y 6.x y versiones anteriores a 6.x-1.3, para Drupal, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de un mensaje de e-mail con un fichero adjunto que tiene un Content-Type modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-3.2","matchCriteriaId":"FDB92FC7-98B9-4387-8D93-78DA12876FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.2","matchCriteriaId":"15804616-D813-49EB-B5EB-62B76270586E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C9E649A-3475-4E9C-ABF7-07ECF50AD769"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"93150F16-06CB-4BF5-9EC4-70373BEFF977"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"1383F776-FAC1-4324-9AEC-38C630421001"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"B3E6161B-70EF-47E4-971D-CA54ECA76588"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"6046429D-4933-4333-BC42-22FAB6F70918"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"F29D71E5-D204-40FE-878D-20D102168EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:5.x-3.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"599EBB39-D317-4F55-BADB-18E51B3A52B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"BEBD864A-EE4E-40BD-BB8B-474C3DE6E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailsave:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"4D5D1321-2F1E-48E9-99DD-371CD56D83CC"}]}]}],"references":[{"url":"http://drupal.org/node/309802","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31889","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31232","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2617","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45212","source":"cve@mitre.org"},{"url":"http://drupal.org/node/309802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4148","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Mailhandler 5.x y versiones anteriores 5.x-1.4 y 6.x y versiones anteriores 6.x-1.4, a módulo para Drupal, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de un vector no especificado, en relación a componer consultas sin usar la base de datos de la API de Drupal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.3","matchCriteriaId":"0F81D7AC-3CB3-4505-9A47-A6B5FD341BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.3","matchCriteriaId":"3916F026-791B-4571-90CB-138174DE0ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"0A450AB9-CED8-47F5-BA79-43BD6C4D5C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"D7959A1F-0F00-4DD0-B941-7192156DEDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"02627781-79D7-46AB-876A-A20E73AA4D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"5333C4C9-3695-443B-BC93-8013F943BB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"2D0B3136-93C8-425F-929F-3DE64146F195"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"B5A57EDC-1AB2-4162-B642-46B39E992D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"2D031605-388D-4012-8D35-33180B1E1A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:mailhandler:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"8825553C-E06A-4768-8491-A14E5B9083A0"}]}]}],"references":[{"url":"http://drupal.org/node/309769","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31230","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45216","source":"cve@mitre.org"},{"url":"http://drupal.org/node/309769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4149","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:38.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the \"Link page header\" field."},{"lang":"es","value":"Vulnerabilidad ejecución de secuencias de comandos en sitios cruzados - XSS en el módulo Greg Holsclaw Link to Us 5.x y versiones anteriores a 5.x-1.1 para Drupal, que permite a los usuarios autenticados remotamente inyectar una secuencia de comandos web o HTML arbitrariamente a través del campo \"Link page header\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:link_to_us:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0","matchCriteriaId":"14604D78-4CE5-471A-9333-3522794E31A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:link_to_us:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"2AC7532F-6A9B-442E-B86C-3E96788276EE"}]}]}],"references":[{"url":"http://drupal.org/node/309861","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064527.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31914","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31224","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2618","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45221","source":"cve@mitre.org"},{"url":"http://drupal.org/node/309861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064527.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4150","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:39.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en picture_category.php en Diesel Joke Site que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id, un vector diferente de CVE-2006-3763."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dieselscripts:diesel_joke_site:*:*:*:*:*:*:*:*","matchCriteriaId":"A46051BD-8121-4966-8595-6B292D3E3ED1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4296","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31240","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45217","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6488","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4151","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:39.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (dot dot) in the neturl parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en collect.php en CYASK 3.x, que permite a los atacantes remotos leer arbitrariamente archivos a través de .. (punto punto) en el parámetro neturl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyask:cyask:3:*:*:*:*:*:*:*","matchCriteriaId":"210A8F8F-00E0-4A88-8B6D-50ED3D689C09"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4297","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496511/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45238","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6487","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496511/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4152","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:39.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via a node title."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Talk 5.x y versiones anteriores a 5.x-1.3 y 6.x versiones anteriores a 6.x-1.5, para Drupal, permite a los usuarios autenticados remotamente insertar arbitrariamente una secuencia de comandos web o HTML a través del nodo título."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.2","matchCriteriaId":"350FA5A2-6889-4AF0-95CD-AE53AB77BC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.4","matchCriteriaId":"51A3AA61-0D56-4AC0-8E65-82666E5A03AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"B58385AB-1FEE-4BED-8916-0EBA12F75A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"D3D96A57-6FA0-4DD0-951D-46D39AD4F5F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"99018BB1-D2EC-4FF2-B841-B1528BC87DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"839BF99E-4C3A-4B84-8FA6-223C8DA07ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"97A3DD3E-D6D3-437C-99EC-5A377390EE61"}]}]}],"references":[{"url":"http://drupal.org/node/309758","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31236","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2615","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45222","source":"cve@mitre.org"},{"url":"http://drupal.org/node/309758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4153","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T05:41:39.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information."},{"lang":"es","value":"El módulo Talk 5.x y versiones anteriores a 5.x-1.3 y 6.x y versiones anteriores a 6.x-1.5, para Drupal, no realiza comprobación de acceso para un nodo antes de mostrar comentarios, lo que permite a los atacantes remotos obtener información delicada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.2","matchCriteriaId":"350FA5A2-6889-4AF0-95CD-AE53AB77BC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.4","matchCriteriaId":"51A3AA61-0D56-4AC0-8E65-82666E5A03AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"B58385AB-1FEE-4BED-8916-0EBA12F75A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"D3D96A57-6FA0-4DD0-951D-46D39AD4F5F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"99018BB1-D2EC-4FF2-B841-B1528BC87DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"839BF99E-4C3A-4B84-8FA6-223C8DA07ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:talk:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"97A3DD3E-D6D3-437C-99EC-5A377390EE61"}]}]}],"references":[{"url":"http://drupal.org/node/309758","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31236","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2615","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45223","source":"cve@mitre.org"},{"url":"http://drupal.org/node/309758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4154","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T23:00:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the we_objectID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en living-e webEdition CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro we_objectID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:living-e:webedition_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"A8E67AAB-76E8-4188-BDE5-2831C175D01E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4279","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30778","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44577","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4155","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T23:00:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. (dot dot) in the (1) module or (2) action parameter in (a) www/index.php; the (3) module, (4) ss_module, or (5) ss_action parameter in (b) modules/Module/index.php or (c) modules/Themes/index.php; or the (6) module parameter in (d) inc/vmenu.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en EasySite 2.3 permite a atacantes remotos leer archivos de su elección o listar directorios a través de un .. (punto punto) en los parámetros (1)module o (2)action en (a) www/index.php; (3)module, (4) ss_module, o (5) ss_action en (b) modules/Module/index.php o (c) modules/Themes/index.php; (6) module en (d) inc/vmenu.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easybrik:easysite:2.3:*:*:*:*:*:*:*","matchCriteriaId":"9CAC7EFE-6897-419B-91C8-BBDF30827038"}]}]}],"references":[{"url":"http://secunia.com/advisories/31570","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4280","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30784","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44599","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4156","sourceIdentifier":"cve@mitre.org","published":"2008-09-19T23:00:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en print.php en CustomCms (CCMS) Gaming Portal 4.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:customcms:gaming_portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B210522-5B4E-466C-B3B0-1E8258DCA190"}]}]}],"references":[{"url":"http://secunia.com/advisories/31562","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4281","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30787","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44611","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4157","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:15.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610.  NOTE: it was later reported that 1.2.3 is also affected."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en groups.php en Vastal I-Tech phpVID 1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\", vector distinto del CVE-2007-3610."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:phpvid:1.1:*:*:*:*:*:*:*","matchCriteriaId":"465C4D44-E4C0-4662-A660-523EEFA115B0"}]}]}],"references":[{"url":"http://osvdb.org/show/osvdb/48018","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2015/Mar/58","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4291","source":"cve@mitre.org"},{"url":"http://tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/27519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31108","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2552","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45028","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6422","source":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/48018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2015/Mar/58","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/27519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4158","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:15.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) flag and (2) inc parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en Zanfi CMS lite 1.2, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de ..(punto punto) en los parámetros (1)\"flag\" y (2) \"inc\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:zanfi_cms_lite:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3164DCF9-246A-4F76-A98E-DB93C313F7F3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45027","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6413","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4159","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:15.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid) parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Jaw Portal y Zanfi CMS lite, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"page\" (pageid)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:jaw_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"993C1EB4-362B-4BA7-B928-B9F30D2E9555"},{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:zanfi_cms_lite:*:*:*:*:*:*:*:*","matchCriteriaId":"3436386E-4E08-4350-9702-D4BF7B7B174A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4283","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31116","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45029","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6423","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4160","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:52:13.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation."},{"lang":"es","value":"Vulnerabilidad sin especificar en el módulo UFS en Sun Solaris v8 a la v10 y OpenSolaris, permite a usuarios locales provocar una denegación de servicio (puntero a referencia NULL y kernel panic) a través de vectores desconocidos relacionados con la implementación de la Lista de control de Acceso (ACL - Solaris Access Control List)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://secunia.com/advisories/31919","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32125","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242267-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-383.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31250","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020899","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2626","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45236","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242267-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-383.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4161","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:52:13.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and order_by parameters in a search_all action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search_inv.php en Assetman 2.5b, permite a atacantes remotos ejecutar comandos SQL de su elección y llevar a cabo ataques de fijado de sesión a través de una combinación de parámetros \"order\" y \"order_by\" manipulados en una acción  \"search_All\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:assetman:assetman:2.5b:*:*:*:*:*:*:*","matchCriteriaId":"2CE289DF-1901-49C0-A64A-FF5E77547DFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31248","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45233","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6490","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4162","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:52:13.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the g_site_url parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en admin/auth.php en NooMS, permite a atacantes remotos, redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro g_site_url"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nooms:nooms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F0D6551-697B-458B-98B2-1222228FB37F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4289","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496236/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45075","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4163","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:52:13.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, y 9.5.0-P2-W1 sobre Windows, permite a atacantes remotos provocar una denegación de servicio (caída del manejador cliente UDP) a través de vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This flaw does not affect the version of BIND as shipped in Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2017-08-07T21:32:28.420"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.5:p2_w1:*:*:*:*:*:*","matchCriteriaId":"9C9815B1-9555-45A9-8C52-8DE24C7CFEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:p2_w1:*:*:*:*:*:*","matchCriteriaId":"5674A0D0-415A-4C2D-A0F7-46DE7AAFC595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2_w1:*:*:*:*:*:*","matchCriteriaId":"4FF37B1D-04AD-4E37-A238-34BE7C5311E2"}]}]}],"references":[{"url":"http://marc.info/?l=bind-announce&m=122180244228376&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bind-announce&m=122180244228378&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bind-announce&m=122180376630150&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31924","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31252","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020901","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2637","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45234","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bind-announce&m=122180244228376&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bind-announce&m=122180244228378&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bind-announce&m=122180376630150&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4164","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:52:13.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message."},{"lang":"es","value":"cron.php en MemHT Portal 3.9.0 y anteriores, permite a atacantes remotos obtener información sensible a través de una petición directa que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"3.9.0","matchCriteriaId":"F6360500-42EE-4B5E-BAF8-5D50359AEC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.1:*:*:*:*:*:*:*","matchCriteriaId":"68C9DAD4-3EC1-4EAF-9615-12D74D8B2249"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4:*:*:*:*:*:*:*","matchCriteriaId":"90EC849C-194B-4F34-BAC8-448E0BF9AB1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4563E7A1-66B4-425B-8AEC-3F7C222BCA50"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FB08C1CB-F9AB-456D-981D-23F1EC87030C"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"85F80D85-2857-4653-97B7-0DA5127364AF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4288","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45413","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6393","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4165","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string."},{"lang":"es","value":"admin/user/create_user.php en Kolab Groupware Server 1.0.0 coloca la contraseña de usuario en una petición HTTP GET, lo que permite a aadministradores locales, y posiblemente a atacantes remotos, obtener contraseñas en texto plano leyendo el archivo ssl_access_log o la cadena mencionada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A625918-F49F-4643-86D5-E80546006744"}]}]}],"references":[{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31165","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45124","source":"cve@mitre.org"},{"url":"https://qa.mandriva.com/show_bug.cgi?id=43434","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://qa.mandriva.com/show_bug.cgi?id=43434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4166","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service (application crash) by attempting to URL encode a string containing many instances of an invalid character."},{"lang":"es","value":"Desbordamiento de entero en el motor JavaScript en Avant Browser 11.7 Build 9 y anteriores, permite a atacantes remotos provocar una denegación de servicio (Caída de aplicación) intentando codificar una cadena que contiene múltiples instancias de un carácter no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avantbrowser:avant_browser:*:build_9:*:*:*:*:*:*","versionEndIncluding":"11.7","matchCriteriaId":"D3C78730-3F18-4AE0-AFBE-A12F683CB754"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4284","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496301/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45121","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496301/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4167","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account."},{"lang":"es","value":"useradmin.php en Easy Photo Gallery (también conocido Ezphotogallery) 2.1 no requiere autenticación con permisos de administrador, lo que permite a atacantes remotos (1) añadir o (2) eliminar cuentas de Administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezphotogallery:ezphotogallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8825D681-D4AC-4BC1-99A5-CA2D28033D3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31774","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4282","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31161","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45119","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6437","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4168","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in verify_login.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the form_username parameter (aka user name field)."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias  de comandos en sitios cruzados (XSS) en verify_login.jsp en Pro2col Stingray FTS, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"form_username\" (También conocido como campo \"user_name\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pro2col:stingray_fts:*:*:*:*:*:*:*:*","matchCriteriaId":"7C61D8A9-3033-4839-872C-18FFB9E438C6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4285","source":"cve@mitre.org"},{"url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3809","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496302/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45107","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496302/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4169","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detaillist.php en iScripts EasyIndex, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"produid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iscripts:easyindex:*:*:*:*:*:*:*:*","matchCriteriaId":"44EEAB01-F1C1-4E5A-A851-4EBDA4BC5767"}]}]}],"references":[{"url":"http://secunia.com/advisories/31788","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4286","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31202","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45160","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4170","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message."},{"lang":"es","value":"create_account.php en osCommerce 2.2 RC 2a, permite a atacantes remotos obtener información sensible a través de un parámetro \"dob\" inválido, lo que muestra el directorio de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*","matchCriteriaId":"FF757944-C09B-4B03-9453-72ACB917E124"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4293","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496417/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45193","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496417/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4171","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en xmlout.php en Invision Power Board (IP.Board o IPB) 2.2.x y 2.3.x permite a atacantes remoto ejecutar comandos SQL de su elección a través del parámetro \"name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.2:*:*:*:*:*:*:*","matchCriteriaId":"05AF1F12-0E9C-478C-9DDA-356E5231A073"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DE56D215-CECF-4FB2-9042-A0CA9FC1D3AD"}]}]}],"references":[{"url":"http://forums.invisionpower.com/index.php?showtopic=276512","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31288","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020817","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2487","source":"cve@mitre.org"},{"url":"http://forums.invisionpower.com/index.php?showtopic=276512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4172","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute arbitrary SQL commands via the lnkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en page.php en Cars & Vehicle (también conocido como Cars-Vehicle Script), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"lnkid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rfaah:cars-vehicles_script:*:*:*:*:*:*:*:*","matchCriteriaId":"B4045967-03A8-4A85-AF05-B648E881B292"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/carsvehicle-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45210","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/carsvehicle-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4173","sourceIdentifier":"cve@mitre.org","published":"2008-09-22T18:34:16.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ProArcadeScript 1.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"random\" a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proarcadescript:proarcadescript:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2EAA9AB-5E6C-445C-8149-8171F0714AD4"}]}]}],"references":[{"url":"http://secunia.com/advisories/31931","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4292","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31238","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45231","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4174","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Dynamic MP3 Lister v2.0.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"currentpath\", (2)\"invert\", (3)\"search\", y (4) sort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_kuz:dynamic_mp3_lister:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"141039A7-F24F-4F72-85C3-C5DCE6CC1BB5"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/dynamicmp3-xss.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45111","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/dynamicmp3-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4175","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Link Bid Script 1.5 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro (1) ucat en upgrade.php y el (2) parámetro id en linkadmin/edit.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkbidscript:linkbidscript:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB5D20D-05F3-462D-A102-2D8C4CEBADEE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31853","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4299","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31191","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6466","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4176","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en izle.asp para FoT Video scripti 1.1 beta que permite a loa atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro oyun."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp_indir:fot_video_scripti:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"B22A93D6-21D0-417A-BB24-9C9D3AD0B6BF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4309","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45098","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6453","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4177","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php para Pre Real Estate Listings que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_real_estate_listings:*:*:*:*:*:*:*:*","matchCriteriaId":"B43DFC40-2989-422A-A4A4-143CB10CC898"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31192","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45151","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6465","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4178","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr.php para DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, y Downline Goldmine Builder que permite a los atacantes remotos ejecutar arbitariamente comandos SQL a través del parámetro id. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:downline_goldmine:builder:*:*:*:*:*:*:*:*","matchCriteriaId":"7DE9CE32-AAA6-4EC0-AB77-896FD84FBB3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:downline_goldmine:builder:special_category_addon:*:*:*:*:*:*:*","matchCriteriaId":"FCD0CC04-097F-4455-995E-BC82723F46ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:downline_goldmine:builder:unknown:unknown:pro:*:*:*:*:*","matchCriteriaId":"49C85BB9-3E89-4D3D-BC7D-04DB53E40216"},{"vulnerable":true,"criteria":"cpe:2.3:a:downline_goldmine:new_addon:*:*:*:*:*:*:*:*","matchCriteriaId":"BB86E912-0A05-4337-B573-B2E5EA3ACCE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:downline_goldmine:new_addon:pro:*:*:*:*:*:*:*","matchCriteriaId":"5BE9D3ED-5EB3-4190-9A7C-46299368E3A6"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31812","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31169","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2992","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2993","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2994","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2995","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45128","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6946","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6947","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6950","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6951","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4179","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to smileys.php and the (2) q parameter to search.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en NooMS 1.1 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de (1) el parámetro page_id para smileys.php y el (2) parámetro q para search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nooms:nooms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F0D6551-697B-458B-98B2-1222228FB37F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31859","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4289","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496236/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31131","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4180","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwords via a username in the g_dbuser parameter and a password in the g_dbpwd parameter, and possibly a \"localhost\" g_dbhost parameter value, related to a \"Mysql Remote Brute Force Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en db.php para NooMS 1.1, que permite a los atacantes remotos ejecutar un ataque de fuerza bruta contra passwords, a través de un nombre de usuario en el parámetro g_dbuser, y posiblemente un valor \"localhost\" para el parámetro g_dbhost, en relación a una \"Vulnerabilidad de fuerza bruta remota Mysql."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nooms:nooms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F0D6551-697B-458B-98B2-1222228FB37F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4289","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496236/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45076","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4181","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) or absolute pathname in the fantasticopath parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/xml.php para el módulo the Netenberg Fantastico De Luxe y versiones anteriores a  2.10.4 r19 para cPanel, cuando cPanel PHP Register Globals está habilitado, permite a los usuarios remotos autentificados incluir y ejecutar arbitrariamente archivos locales a través de .. (punto punto)o una ruta absoluta en el parámetro fantasticopath . NOTA: en algunos entornos, esto puede ser aprovechado para la inclusión de archivos remotos, usando una ruta compartid UNC o un ftp, ftps, o ssh2.sftp URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:r12:*:*:*:*:*:*","versionEndIncluding":"2.8.2","matchCriteriaId":"4B99C027-CBB4-4A94-9452-7917AFC58040"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:r11:*:*:*:*:*:*","versionEndIncluding":"2.8.8","matchCriteriaId":"42512974-FBDC-422C-95C9-D03DAC7E4B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:r17:*:*:*:*:*:*","versionEndIncluding":"2.10.0","matchCriteriaId":"CDBD9A1C-CF43-443F-9C1F-E56218EA1DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:r8:*:*:*:*:*:*","versionEndIncluding":"2.10.0","matchCriteriaId":"AAFC3E06-EF98-44A4-80A9-CFB564F3E6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:r46:*:*:*:*:*:*","versionEndIncluding":"2.10.2","matchCriteriaId":"CA9BDC49-E107-4F64-83C7-F2E3B03397E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:r18:*:*:*:*:*:*","versionEndIncluding":"2.10.4","matchCriteriaId":"874628CD-4324-4DEE-8346-B0047BE16587"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r1:*:*:*:*:*:*","matchCriteriaId":"7D2B45D1-5CB1-4782-94D8-0A34AA474BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r10:*:*:*:*:*:*","matchCriteriaId":"FE02D9CA-593E-4165-AB45-E9AFE9766A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r11:*:*:*:*:*:*","matchCriteriaId":"F651A5A9-814D-460F-B152-92CCBEC70BDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r2:*:*:*:*:*:*","matchCriteriaId":"BCFDEC0C-7D48-4B5E-BCB5-8ED9920A0E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r3:*:*:*:*:*:*","matchCriteriaId":"19BA26EB-BE73-43EE-8B88-86441ED9D717"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r4:*:*:*:*:*:*","matchCriteriaId":"383930D3-683B-4242-AAE0-B332A53FB930"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r5:*:*:*:*:*:*","matchCriteriaId":"AB6C4E2A-0661-4281-A6AF-16658B9C3EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r6:*:*:*:*:*:*","matchCriteriaId":"AFE68872-8E34-4518-8787-11B82EF8980F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r7:*:*:*:*:*:*","matchCriteriaId":"E7F98AFB-5777-4BA5-B44F-8B6B0BD550B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r8:*:*:*:*:*:*","matchCriteriaId":"FC478E94-0C8F-4BD7-A919-227D7978914D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.2:r9:*:*:*:*:*:*","matchCriteriaId":"928F493E-230B-46AC-9593-DB8338B5ADA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r1:*:*:*:*:*:*","matchCriteriaId":"EAF9198B-14F3-4677-A951-10E4BBB3E9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r2:*:*:*:*:*:*","matchCriteriaId":"C79BDF33-C5BE-43E8-8CEB-E5A166FD5902"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r3:*:*:*:*:*:*","matchCriteriaId":"A9336D90-28C1-47FB-8600-F0AFEAD30F2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r4:*:*:*:*:*:*","matchCriteriaId":"11B6D029-2FD1-4093-9885-41EB4BF626DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r5:*:*:*:*:*:*","matchCriteriaId":"080891D0-6303-438C-A6C2-484F2D313475"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r6:*:*:*:*:*:*","matchCriteriaId":"5BEA0AB4-71D5-4792-89BD-15B82EC2A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.4:r7:*:*:*:*:*:*","matchCriteriaId":"9AE8B282-AF23-478F-BD84-F76DCC23019F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.6:r1:*:*:*:*:*:*","matchCriteriaId":"3D5DF767-AFEA-4073-9F3D-45BDA33DEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.6:r2:*:*:*:*:*:*","matchCriteriaId":"B2286FF0-1D90-462F-AEAD-EB8BD5732B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.6:r3:*:*:*:*:*:*","matchCriteriaId":"EB8EE364-3371-4835-805D-2045905A7F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r1:*:*:*:*:*:*","matchCriteriaId":"A642400F-9803-47CB-9511-7CA8F2D79E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r10:*:*:*:*:*:*","matchCriteriaId":"8E02B1DC-219E-41E4-BE87-D937A9C6C62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r2:*:*:*:*:*:*","matchCriteriaId":"2911A35A-5FE6-419F-A86E-7AE2308C7A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r3:*:*:*:*:*:*","matchCriteriaId":"9A6ABDF4-F65B-4A82-8266-E4A753C12293"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r4:*:*:*:*:*:*","matchCriteriaId":"4741CE17-DC9D-4E02-B691-A115F620AA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r5:*:*:*:*:*:*","matchCriteriaId":"942CFFEB-28A3-4848-8499-624151FF193B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r6:*:*:*:*:*:*","matchCriteriaId":"E5495A76-7552-4393-990E-0F61579E3D15"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r7:*:*:*:*:*:*","matchCriteriaId":"4FFF9366-5E11-4A29-B62A-D96C7EB17A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r8:*:*:*:*:*:*","matchCriteriaId":"F2536855-E3AB-4876-A905-23A2111F5C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.8:r9:*:*:*:*:*:*","matchCriteriaId":"A04547EA-D648-472B-BB80-9704AB74D94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r1:*:*:*:*:*:*:*","matchCriteriaId":"11D24D11-3B4C-4FAB-85AE-A885282D33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r2:*:*:*:*:*:*:*","matchCriteriaId":"70F11D97-7534-4BD0-9B6A-D24781923C28"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r3:*:*:*:*:*:*:*","matchCriteriaId":"2FB5AE0F-A352-4313-B336-DE8C065E1FFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r4:*:*:*:*:*:*:*","matchCriteriaId":"33951239-4904-4F59-A459-8E7D775F7267"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r5:*:*:*:*:*:*:*","matchCriteriaId":"80352D07-2447-43D2-985F-B998F8F8DF38"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r6:*:*:*:*:*:*:*","matchCriteriaId":"4ACE7EFD-14B3-40BB-8C77-D72DE670E22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r7:*:*:*:*:*:*:*","matchCriteriaId":"482C4C77-26AF-44E4-AC23-D7019CFA8508"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r8:*:*:*:*:*:*:*","matchCriteriaId":"C61DFEB9-7FB9-4FFF-A37E-C7C93421C780"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r9:*:*:*:*:*:*:*","matchCriteriaId":"1FA8E8C7-E6FC-4BB5-AA28-B14F30474702"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r10:*:*:*:*:*:*:*","matchCriteriaId":"B303ABE3-CDA8-4DD2-8376-97EB8B5FE5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r11:*:*:*:*:*:*:*","matchCriteriaId":"619EBF82-1509-4E5D-83A6-B4CDC04CA0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r12:*:*:*:*:*:*:*","matchCriteriaId":"B1C0AFB5-2A6B-4A48-B460-F0709A33B870"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r13:*:*:*:*:*:*:*","matchCriteriaId":"CE2E8D5C-642B-4B84-80ED-BF7ECC606646"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r14:*:*:*:*:*:*:*","matchCriteriaId":"34F9A2B3-E652-4C22-993C-B8C2289DC380"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r15:*:*:*:*:*:*:*","matchCriteriaId":"BBFFA86F-C13E-4551-81B7-E8516EDB4A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r16:*:*:*:*:*:*:*","matchCriteriaId":"7E3C3428-0BC2-4C0C-8F3E-BD607D42A927"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r17:*:*:*:*:*:*:*","matchCriteriaId":"8EC08036-1D2F-481C-B96A-988CB1945246"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r18:*:*:*:*:*:*:*","matchCriteriaId":"9693CC25-1679-48E0-B680-6D03D9CE1A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8.r19:*:*:*:*:*:*:*","matchCriteriaId":"619FE0E7-64B4-4A57-8EDD-948CE70B9186"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r1:*:*:*:*:*:*","matchCriteriaId":"E941DEAF-4618-4B10-831D-874DCD207432"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r10:*:*:*:*:*:*","matchCriteriaId":"20B13391-27AE-42BD-9746-889E75264E20"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r11:*:*:*:*:*:*","matchCriteriaId":"5054F02C-CC6C-426E-A7BA-F4B702C0C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r12:*:*:*:*:*:*","matchCriteriaId":"388242AC-25B3-4ABB-9186-57D3D413FC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r13:*:*:*:*:*:*","matchCriteriaId":"2FC64966-D968-4630-85A6-82EC8134F9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r14:*:*:*:*:*:*","matchCriteriaId":"91900510-8163-48A5-BF99-A0F33CA62D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r15:*:*:*:*:*:*","matchCriteriaId":"91471E47-BF6F-48C5-BD2D-355DB16A8D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r16:*:*:*:*:*:*","matchCriteriaId":"E2FA0CCD-9102-4079-81E2-3A2B2A771680"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r2:*:*:*:*:*:*","matchCriteriaId":"E924C902-D628-4375-A4BE-A858D82DC730"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r3:*:*:*:*:*:*","matchCriteriaId":"3C4BEFFA-FE40-4C15-83EC-E5C41AB699D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r4:*:*:*:*:*:*","matchCriteriaId":"39124319-ACDA-44D0-8C6E-B82BDC90A39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r5:*:*:*:*:*:*","matchCriteriaId":"0F4DE823-CFEE-48CF-A1F7-805C50533580"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r6:*:*:*:*:*:*","matchCriteriaId":"6D55C548-80F0-41CB-861A-C65FAA92208F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r7:*:*:*:*:*:*","matchCriteriaId":"9366B730-9EDC-40C2-A6C4-EA7AEDAFEB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.0:r9:*:*:*:*:*:*","matchCriteriaId":"D128D67E-AC32-488A-A633-49FC621843FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r1:*:*:*:*:*:*","matchCriteriaId":"971649CD-C367-4D4E-9FE7-E88E9F3184D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r10:*:*:*:*:*:*","matchCriteriaId":"FF5FC39A-48D1-4FC6-AF10-E729B4A3F0FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r11:*:*:*:*:*:*","matchCriteriaId":"55DB31EC-1B4A-4975-A923-5AA6A1D2A63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r12:*:*:*:*:*:*","matchCriteriaId":"DFDBA732-880E-44E0-BD4D-604276537B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r13:*:*:*:*:*:*","matchCriteriaId":"FC73D12A-E0ED-4651-9F50-B09E2D3B2540"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r14:*:*:*:*:*:*","matchCriteriaId":"A542FC6C-1500-4814-97FE-03007B1BB5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r15:*:*:*:*:*:*","matchCriteriaId":"A5608466-FC5C-4528-BCF3-1FF5D265A5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r16:*:*:*:*:*:*","matchCriteriaId":"67B21102-52F2-43C4-B4F8-C1933F0CEE2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r17:*:*:*:*:*:*","matchCriteriaId":"6533804B-97B3-40CD-A1AD-5365EB3A9814"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r18:*:*:*:*:*:*","matchCriteriaId":"7255D6C7-E9F4-47D6-9A8F-B098735D2A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r19:*:*:*:*:*:*","matchCriteriaId":"6BEC44B2-7F2A-402B-BC9B-3DBC15D89B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r2:*:*:*:*:*:*","matchCriteriaId":"5DB9AFC4-BE8F-46C2-9001-50E69223D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r20:*:*:*:*:*:*","matchCriteriaId":"6ACF7665-27F3-41E6-8C95-1CB31BCB9B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r21:*:*:*:*:*:*","matchCriteriaId":"CD1E65AA-1FAC-4DB0-ADCD-3C8089C07E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r22:*:*:*:*:*:*","matchCriteriaId":"F5128BEC-0F56-4F6D-AA11-CE92A244DD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r23:*:*:*:*:*:*","matchCriteriaId":"0EB39352-720B-4CB5-A31C-79405850EFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r24:*:*:*:*:*:*","matchCriteriaId":"B7BC134E-9ABF-4DEB-952E-04826B412270"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r25:*:*:*:*:*:*","matchCriteriaId":"02018A48-6E1C-47EF-BF63-79EC0727F3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r26:*:*:*:*:*:*","matchCriteriaId":"D2FBEAAD-18F5-4ECC-8E74-5B451E063ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r27:*:*:*:*:*:*","matchCriteriaId":"15EEDAE2-046E-4301-85AB-0E371E148C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r28:*:*:*:*:*:*","matchCriteriaId":"FE5573AC-B356-45C1-9C89-3E5E1F7D0DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r29:*:*:*:*:*:*","matchCriteriaId":"671AA105-5FD7-4D3F-B6C3-C56C03302BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r3:*:*:*:*:*:*","matchCriteriaId":"28722C9D-9FB6-4A94-A64F-062E7456CD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r30:*:*:*:*:*:*","matchCriteriaId":"F9A700FF-4483-4573-9E1B-7DEFF2CAE15D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r31:*:*:*:*:*:*","matchCriteriaId":"7B87085C-73C5-4E08-B020-8902E862D0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r32:*:*:*:*:*:*","matchCriteriaId":"BD1779F7-9207-4680-8D6E-849D44B30CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r33:*:*:*:*:*:*","matchCriteriaId":"3AC7414A-16A5-4F0B-9916-D28520885671"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r34:*:*:*:*:*:*","matchCriteriaId":"0174735D-5246-4612-8988-2EA170925706"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r35:*:*:*:*:*:*","matchCriteriaId":"DCDEDA26-25D2-48DC-AEFE-801923B72108"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r36:*:*:*:*:*:*","matchCriteriaId":"77689F66-CF45-4D11-B7E6-925920E3BFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r37:*:*:*:*:*:*","matchCriteriaId":"3824C3FA-6487-4008-9832-DA019332631E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r38:*:*:*:*:*:*","matchCriteriaId":"FC896FE9-8620-4150-A46E-2265C85ED853"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r39:*:*:*:*:*:*","matchCriteriaId":"3A4A562B-DF8B-4FDB-B3DF-374003137387"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r4:*:*:*:*:*:*","matchCriteriaId":"07453242-3551-4F4C-9DF4-3B65677860E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r40:*:*:*:*:*:*","matchCriteriaId":"789632FC-922A-49E7-96D5-18010D8449E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r41:*:*:*:*:*:*","matchCriteriaId":"94EE4BB3-079B-43C4-8C11-FDD81E197907"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r42:*:*:*:*:*:*","matchCriteriaId":"96ACC737-C5E3-4956-8484-1422A3844672"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r43:*:*:*:*:*:*","matchCriteriaId":"EAA8E96E-73E3-4E7F-88C7-8BDEA2C65856"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r44:*:*:*:*:*:*","matchCriteriaId":"5D6F8430-5E09-4508-B7A0-9359CC717233"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r45:*:*:*:*:*:*","matchCriteriaId":"41B3FC8B-FD48-4321-9C10-9015B95B210A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r5:*:*:*:*:*:*","matchCriteriaId":"41B8BC5B-9602-446C-837B-9A844F215B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r6:*:*:*:*:*:*","matchCriteriaId":"98598B36-6E7C-46A3-96D0-19B6C8E37A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r7:*:*:*:*:*:*","matchCriteriaId":"7BB38407-D6C7-4F5E-9BF8-FD193953E7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r8:*:*:*:*:*:*","matchCriteriaId":"E7DCF3E7-32E6-4338-B6FE-6D1802DFBDD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.2:r9:*:*:*:*:*:*","matchCriteriaId":"B99586F0-EB79-418E-A0FC-87A3F4172529"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r1:*:*:*:*:*:*","matchCriteriaId":"70D8441D-2883-4225-91C2-EBB079BFFA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r10:*:*:*:*:*:*","matchCriteriaId":"761ECE30-7C3D-4BD4-A22A-31D27BA60623"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r11:*:*:*:*:*:*","matchCriteriaId":"3A612282-EFBE-4D48-B87E-6CEF3B8C0DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r12:*:*:*:*:*:*","matchCriteriaId":"2D5C8867-23BA-440F-8E15-23AB0C6D2168"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r13:*:*:*:*:*:*","matchCriteriaId":"4E04B7B2-82E5-4CA0-8FA5-A9D64F0D6A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r14:*:*:*:*:*:*","matchCriteriaId":"39BA4118-25F8-4E74-9439-D8855D791690"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r15:*:*:*:*:*:*","matchCriteriaId":"6F0105E8-62CE-4BAD-8B21-B3919873018E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r16:*:*:*:*:*:*","matchCriteriaId":"0043D948-0364-485F-B9B9-1C2921A9C95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r17:*:*:*:*:*:*","matchCriteriaId":"0822AC99-25E1-452B-B13B-74160EA74263"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r2:*:*:*:*:*:*","matchCriteriaId":"93F82A13-7DAA-47EF-8A2C-1A5875310757"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r3:*:*:*:*:*:*","matchCriteriaId":"59AB5DE8-BD3D-4472-803C-E7EF0B822BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r4:*:*:*:*:*:*","matchCriteriaId":"64D55D01-A266-4E39-902A-CA53B662900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r5:*:*:*:*:*:*","matchCriteriaId":"1517A7A5-D822-4298-B385-8F38C6B93BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r6:*:*:*:*:*:*","matchCriteriaId":"DE1BDD60-DCBE-4EA7-BA5D-A5F7B1947FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r7:*:*:*:*:*:*","matchCriteriaId":"E2524B3D-8B31-4C83-8488-20081ED53EA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r8:*:*:*:*:*:*","matchCriteriaId":"6277BF1A-F50C-4D13-8FA5-6498D979BCB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.10.4:r9:*:*:*:*:*:*","matchCriteriaId":"0E8DE004-335E-435E-A478-7AF476D29362"}]}]}],"references":[{"url":"http://secunia.com/advisories/31863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4301","source":"cve@mitre.org"},{"url":"http://www.netenberg.com/forum/index.php?topic=6768.0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31196","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45147","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netenberg.com/forum/index.php?topic=6768.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4182","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions before 2.3.1, and possibly other Horde Project products, allows remote attackers to inject arbitrary web script or HTML via the User field in an IMAP session."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en imp/test.php para Horde Turba Contact Manager H3 2.2.1, y posiblemente otros productos Horde Project, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del campo User en una sesión IMAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_contact_manager_h3:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"49AE90C7-99D8-4763-B918-DEBDFC82DDB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_contact_manager_h3:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"44902F9E-9D4B-4318-96F1-0AAAC6D1CD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_contact_manager_h3:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCE81A59-15B6-4E2A-B2B9-4F7FD8B2071C"}]}]}],"references":[{"url":"http://lists.horde.org/archives/announce/2008/000465.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/turba-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34703","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31168","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45131","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000465.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0809-exploits/turba-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4183","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename."},{"lang":"es","value":"IntegraMOD 1.4.x almacena información sensible bajo la el directorio raiz web con control de acceso, insuficiente, lo que permite a los atacantes remotos, descargar un copia de seguridad a través de una petición directa a un archivo backup/backup-yyyy-dd-mm.sql"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:integramod:integramod:1.4:*:*:*:*:*:*:*","matchCriteriaId":"019A27E1-7CFF-4A01-BA09-F192117DE848"}]}]}],"references":[{"url":"http://secunia.com/advisories/31749","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4300","source":"cve@mitre.org"},{"url":"http://www.integramod.com/forum/viewtopic.php?f=3&t=5089","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31149","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45096","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.integramod.com/forum/viewtopic.php?f=3&t=5089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4184","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados - XSS en index.php para webCMS Portal Edition que permite a los atacantes remotos ejecutar arbitrariamente una secuencia de comandos web o HTML a través del parámetro patron. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcms:webcms_portal_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"85E1A0B9-6522-4535-AD04-8168804C73E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31153","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4185","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:42.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php para webCMS Portal Edition que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id un action documentos, diferente vector que CVE-2008-3213."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcms:webcms_portal_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"85E1A0B9-6522-4535-AD04-8168804C73E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4314","source":"cve@mitre.org"},{"url":"http://spanish-hackers.com/exploits/24.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31153","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45448","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://spanish-hackers.com/exploits/24.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4186","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T15:25:43.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id_doc parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad e inyección SQL en index.php para webCMS Portal Edition, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id_doc. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcms:webcms_portal_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"85E1A0B9-6522-4535-AD04-8168804C73E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45449","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4187","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T17:01:22.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php para ProActive CMS que permite a los atacantes remotos leer arbitrariamente archivos a través de .. (punto punto) en el parámetro template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proactive_cms:proactive_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"DB0247F5-79FA-4E5B-9462-9A8F6B47DDA3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4315","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45235","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6489","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4188","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T17:01:22.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to \"injection of control characters.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en la extensión TYPO3 Secure Directory (kw_secdir) anterior a la v1.0.2, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos relacionados con \"la inyección de caracteres de control\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:secure_directory:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"2E312627-9495-4A8A-93EA-A1CD07EFA3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:secure_directory:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"061E2316-F51A-4E24-AF38-6624DBCBE390"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:secure_directory:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5B0A9C78-DAEA-4A86-B44C-B0A75ACEB3F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/kw_secdir/1.0.2/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31253","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45260","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/kw_secdir/1.0.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4189","sourceIdentifier":"cve@mitre.org","published":"2008-09-23T17:01:22.577","lastModified":"2023-11-07T02:02:41.090","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1105.  Reason: This candidate is a duplicate of CVE-2008-1105.  Notes: All CVE users should reference CVE-2008-1105 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4190","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T11:42:25.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files.  NOTE: in many distributions and the upstream version, this tool has been disabled."},{"lang":"es","value":"La herramienta livetest de IPSEC en Openswan versión 2.4.12 y anteriores, y versiones 2.6.x hasta 2.6.16, permite a los usuarios locales sobrescribir archivos arbitrarios y ejecutar código arbitrario mediante un ataque de tipo symlink en los archivos temporales (1) ipseclive.conn y (2) ipsec.olts.remote.log. NOTA: en muchas distribuciones y en la versión anterior, esta herramienta se ha deshabilitado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed via: https://rhn.redhat.com/errata/RHSA-2009-0402.html","lastModified":"2009-03-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"83BD9C38-8D11-4A21-9A80-83D4D02ECC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7BF7EA37-F5B2-4EBE-A959-29F559A47F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6C062450-8D41-4E0C-AEAD-6C51D9B8F107"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4D15B299-2298-4617-8CED-5F98C2E68D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F7FA0C68-A45A-42EB-9F1F-E911F32589BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"411E9D06-5756-4918-965C-3E83890F0316"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3A9EABDE-514F-42BA-A335-135209605981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2425AF51-C42B-4EAA-A619-EE47EAFCBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"892D939B-4649-4B90-A2C0-6C2E4DDF7DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1A321B57-5E08-48C8-9288-A92342770FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"54780B50-9CFE-43B6-8BB9-C7246F817773"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.2:*:*:*:*:*:*:*","matchCriteriaId":"001E2700-CE33-495A-8F8A-81E2E550CFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6A628FE6-A042-4DF9-A141-8BE65FD236C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"112D7B10-50E4-4903-9E34-DB4857D6C658"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F7841F42-1226-43C4-A007-88847925D872"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"77930F86-13FF-4787-A39F-2D00110AFBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7B1ADD64-2503-4EED-9F6F-E425A3406123"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A3067BE9-4314-42BD-8131-89C4899F7D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E00CA6E5-1F63-4D59-BA72-0F8697671718"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C35A2049-8502-41F2-894E-E39AEBEB6816"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"1109A84D-1815-4A7B-8EDA-E493A1973224"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B20531A3-F6F8-4FE1-9C0A-FDFABAC4C6AA"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C9F212AE-D5B3-4A88-A1E6-00A13A0A2AD5"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD82E956-8C8E-4B38-9E82-4AA9AEFE6891"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2D0F0EA4-A0DF-48CC-9B42-465A36945503"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"8945D2A7-B1C3-4981-B840-FB046AB6F4B6"},{"vulnerable":false,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"338E969E-2CC6-44F3-A938-EE7131375AB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*","matchCriteriaId":"78325087-599F-448B-8C47-570914FF6C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*","matchCriteriaId":"059CFA5C-B262-47AF-94A6-8E74AFB19204"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*","matchCriteriaId":"12F25627-235B-4312-80A4-4E36DE0E72A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*","matchCriteriaId":"B3E70B88-6348-42BB-AE96-46BDB1F3C6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*","matchCriteriaId":"12A9DF25-48E8-4D52-A267-1BE0437E9000"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*","matchCriteriaId":"C986533F-E320-46FA-A9F7-DAFDB1A0628A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*","matchCriteriaId":"7C77DED4-2696-4172-92B7-43034E61F845"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2EDCCFDA-99A8-4590-99F1-95F3A5AD70B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"BED1BA7D-B603-49D4-9080-4A9FEC056A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"9E8EB86B-2DD9-4C4B-9C9A-E88B2C458C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"207B98DB-5962-4F62-AF5B-D48EF0C0E2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"DFB65639-AE3A-4984-93F9-2A8100DCEE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"B8921D08-FBA3-4C0A-8944-362909C5EB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"3FBD5312-E44F-4996-AA29-AFED53A90E8E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/openswan","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34182","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1760","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0402.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/501624/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501640/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31243","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460425","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45250","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9135","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/openswan","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/501624/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501640/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4191","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T11:42:25.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file."},{"lang":"es","value":"extract-table.pl de Emacspeak 26 y 28 permite a usuarios locales sobrescribir archivos de su elección mediante un ataque de enlaces simbólicos en el archivo temporal extract-table.csv"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=460435\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emacspeak_inc:emacspeak:26.0:*:*:*:*:*:*:*","matchCriteriaId":"3F6E35E9-FF83-4771-A0DD-49EE727E8171"},{"vulnerable":true,"criteria":"cpe:2.3:a:emacspeak_inc:emacspeak:28.0:*:*:*:*:*:*:*","matchCriteriaId":"6DB0D342-8EFD-4EEB-B51C-76526406FBC3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32071","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31241","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45237","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4192","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file."},{"lang":"es","value":"La función pserver_shutdown en fence_egenera en cman versiones 2.20080629 y 2.20080801, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink en el archivo temporal /tmp/eglog."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-4192\n\nThe Red Hat Security Response Team has rated this issue as having low security\nimpact, a future update may address this flaw. More information regarding\nissue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n","lastModified":"2008-10-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.20080629:*:*:*:*:*:*:*","matchCriteriaId":"717C7241-213A-4513-9C68-A520475D6F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.20080801:*:*:*:*:*:*:*","matchCriteriaId":"98367126-EF71-4B1D-95B6-2DFAEDE795D8"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cman","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32387","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43362","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/18/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0266.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30898","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460476","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44845","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cman","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/18/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0266.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4193","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T11:42:25.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en SecurityGateway.dll de Alt-N Technologies SecurityGateway 1.0.1 permite a atacantes remotos ejecutar código de su elección mediante un parámetro username largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:securitygateway:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"38B06D27-AA7B-4332-B58B-516FDDCC4381"}]}]}],"references":[{"url":"http://files.altn.com/securitygateway/release/relnotes_en.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4302","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29457","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020156","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1717/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42769","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5718","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5827","source":"cve@mitre.org"},{"url":"http://files.altn.com/securitygateway/release/relnotes_en.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1717/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4194","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T11:42:25.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a \"dangling pointer bug.\""},{"lang":"es","value":"La función p_exec_query en src/dns_query.c de pdnsd antes de 1.2.7-par permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una respuesta DNS con muchas entradas en la sección de respuesta, relacionado con un \"dangling pointer bug (error de puntero colgado)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.6-par","matchCriteriaId":"48C89DEE-EA5F-4A74-8D84-9632633DC9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"72E5E5EA-123B-4187-BAC0-77B3034BB665"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.7a:*:*:*:*:*:*:*","matchCriteriaId":"1848A537-D8B7-4C56-980B-B19237603A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par4:*:*:*:*:*:*:*","matchCriteriaId":"6AA9D9AA-7FD4-4640-8A05-F353F193F624"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par5:*:*:*:*:*:*:*","matchCriteriaId":"55C8B60D-9ABF-44EA-8C5F-737F12790C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par6:*:*:*:*:*:*:*","matchCriteriaId":"958FDA46-C58C-440E-B164-A88681CCDE50"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par7:*:*:*:*:*:*:*","matchCriteriaId":"4A591F5A-9C82-4125-9F3E-F8FB22F84A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par8:*:*:*:*:*:*:*","matchCriteriaId":"A48F1CAE-0A43-43AD-8945-2EDDAE3A3E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.9-par:*:*:*:*:*:*:*","matchCriteriaId":"8587AC06-C4F3-4078-A661-602BA9E568B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.10-par:*:*:*:*:*:*:*","matchCriteriaId":"E4DAA355-14BE-4462-B1D0-A2D4B5642ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.11-par:*:*:*:*:*:*:*","matchCriteriaId":"EE0CC736-279C-4215-98CE-4904A35B4C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.1.11a-par:*:*:*:*:*:*:*","matchCriteriaId":"176CCFD5-9AE7-43B2-9DE5-EA09C22465E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.2-par:*:*:*:*:*:*:*","matchCriteriaId":"CA858757-834E-45E1-BB1A-E9A9E377C6FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.2.1_par:*:*:*:*:*:*:*","matchCriteriaId":"DF7A894A-4CE6-415E-8601-F495D8DBEE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.2.4-par:*:*:*:*:*:*:*","matchCriteriaId":"1FEE1472-7A5B-4344-8B95-EC898D55419E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdnsd:pdnsd:1.2.5-par:*:*:*:*:*:*:*","matchCriteriaId":"853163E2-965E-4E35-9DD1-05710F1CAF3B"}]}]}],"references":[{"url":"http://www.phys.uu.nl/~rombouts/pdnsd.html","source":"cve@mitre.org"},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2582","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45594","source":"cve@mitre.org"},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4195","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script."},{"lang":"es","value":"Opera anterior a v9.52 no restringe adecuadamente la habilidad de una página web enmarcada a cambiar la dirección asociada con un marco diferente, lo cual permite a atacantes remotos provocar la muestra de una dirección arbitraria en un marco a través del uso no especificado de secuencia de comandos web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"C8ECEB59-5441-49AC-857E-10092DB86028"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/893/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30768","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020718","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/893/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4196","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.397","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Opera anterior a v9.52 que permite a los atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"C8ECEB59-5441-49AC-857E-10092DB86028"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020719","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4197","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut."},{"lang":"es","value":"Opera anterior a v9.52 en Windows, Linux, FreeBSD y Solaris. Cuando se procesan accesos directos y comandos de menú habitualmente utilizados, puede producir cadenas de argumentos que contienen memoria no inicializada, lo cual puede permitir a atacantes remotos con la ayuda del usuario local ejecutar código de su elección o conducir otros ataques a través de vectores relacionados con la activación de un acceso directo."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"9.52","matchCriteriaId":"7B8343D9-B06B-4E3D-8707-CCC175F97A28"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*","matchCriteriaId":"3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"},{"vulnerable":false,"criteria":"cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*","matchCriteriaId":"91F372EA-3A78-4703-A457-751B2C98D796"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/support/search/view/894/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30768","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020720","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44552","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/support/search/view/894/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/30768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4198","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.443","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page."},{"lang":"es","value":"Opera anterior a v9.52, cuando se renderiza un página http que tiene cargada una página https en un marco, muestra un icono de un candado que  ofrece un diálogo con información de seguridad informando de que la conexión es segura, lo cual puede permitir a atacantes remotos engañar a un usuario, haciendo que realice acciones no seguras en la página http."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"C8ECEB59-5441-49AC-857E-10092DB86028"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/895/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30768","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020721","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44555","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/895/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4199","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving \"detection of JavaScript events and appropriate manipulation.\""},{"lang":"es","value":"Opera anterior a v9.52 no previene del uso de enlaces de páginas web a archivos fuente feed en el disco local, lo cual puede permitir a atacantes remotos determinar la validez de nombres de archivo locales a través de vectores involucrando \"detección de eventos JavaScript y manipulación apropiada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"C8ECEB59-5441-49AC-857E-10092DB86028"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020722","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/896/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30768","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44557","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/896/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4200","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.507","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker."},{"lang":"es","value":"Opera anterior a v9.52 no asegura que el campo dirección de una fuente de noticias representa la URL actual de las fuentes, lo cual permite a atacantes remotos cambiar este campo para mostrar la URL de una página que contiene una secuencia de comandos web controlados por el atacante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"C8ECEB59-5441-49AC-857E-10092DB86028"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/897/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30768","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020723","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44559","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/search/view/897/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4201","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T11:42:25.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4 (MP4) file."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la función decodeMP4file (archivo frontend/main.c) en FAAD2 versión 2.6.1 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un archivo MPEG-4 (MP4) creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:audiocoding:faad2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"F6542405-0980-402E-B1CC-FE82C90EC581"},{"vulnerable":true,"criteria":"cpe:2.3:a:audiocoding:faad2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B215E265-DCA1-455E-B1F7-80D2AB113846"},{"vulnerable":true,"criteria":"cpe:2.3:a:audiocoding:faad2:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BC87E82A-17B6-4B95-95F6-B3ABD2AC2D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:audiocoding:faad2:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"CC378FBC-832A-429D-A1C9-67B9276FBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:audiocoding:faad2:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AC80062B-B5F1-43F4-8165-952B3AF162B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:audiocoding:faad2:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BDDB427F-A661-4F1E-8EFC-536883A061DD"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499899","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/attachment.cgi?id=166174&action=view","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=238445","source":"cve@mitre.org"},{"url":"http://osvdb.org/48349","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-03.xml","source":"cve@mitre.org"},{"url":"http://www.audiocoding.com/archive.html","source":"cve@mitre.org"},{"url":"http://www.audiocoding.com/patch/main_overflow.diff","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31219","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/attachment.cgi?id=166174&action=view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=238445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.audiocoding.com/archive.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.audiocoding.com/patch/main_overflow.diff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4202","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.553","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action."},{"lang":"es","value":"vulnerabilidad de inyección SQL en index.php de Gonafish LinksCaffePRO 4.5 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro idd en una acción deadlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gonafish:linkscaffepro:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9A091FD7-B9A9-42B2-A5A0-F5F28E5C1615"}]}]}],"references":[{"url":"http://secunia.com/advisories/31844","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4305","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31187","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45179","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6469","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4203","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.600","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cn_users.php de CzarNews 1.20 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante una cookie recook."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:czaries:czarnews:*:*:*:*:*:*:*:*","versionEndIncluding":"1.20","matchCriteriaId":"A85C9773-8C93-4D62-8767-6520D9A29AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:czaries:czarnews:1.12:*:*:*:*:*:*:*","matchCriteriaId":"9854A486-157D-40B0-B7C7-5C77215DACDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:czaries:czarnews:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D5289E78-C10A-4AF7-99F8-3A53E54C35B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:czaries:czarnews:1.13:*:b:*:*:*:*:*","matchCriteriaId":"DE11012D-0E01-4C87-B0BC-9A23311F014F"},{"vulnerable":true,"criteria":"cpe:2.3:a:czaries:czarnews:1.14:*:*:*:*:*:*:*","matchCriteriaId":"DFD1AA8F-AAD4-4953-8A8F-62EEAB4AA89C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4306","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31182","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45127","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6462","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4204","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.647","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute arbitrary SQL commands via the city parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en city.asp de SoftAcid Hotel Reservation System (HRS) permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro city."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softacid:hotel_reservation_system:*:*:*:*:*:*:*:*","matchCriteriaId":"5399CDFC-C79D-4A36-9A7C-EB7FAD8B22F0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4308","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31211","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45190","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6470","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4205","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Attachmax Dolphin 2.1.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro category en una acción Search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:attachmax:dolphin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"345CE3EF-0193-4F1A-8681-E69DFCC8E8BC"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/48270","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31794","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496427/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6468","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/48270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496427/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4206","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.693","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en config.php de Attachmax Dolphin 2.1.0 y anteriores, cuando está habilitado register_globals permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro rel_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:attachmax:dolphin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"345CE3EF-0193-4F1A-8681-E69DFCC8E8BC"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/48269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31794","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496427/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6468","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/48269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496427/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4207","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.710","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Attachmax Dolphin 2.1.0 y anteriores no protege correctamente info.php en la carpeta principal, lo que permite a atacantes remotos obtener información sensible mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:attachmax:dolphin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"345CE3EF-0193-4F1A-8681-E69DFCC8E8BC"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/48271","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31794","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496427/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6468","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/48271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496427/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4208","sourceIdentifier":"cve@mitre.org","published":"2008-09-24T14:56:52.740","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OSADS Alliance Database before 2.1 has unknown impact and attack vectors, possibly related to includes/functions.php, a different issue than CVE-2006-2874."},{"lang":"es","value":"Vulnerabilidad no especificada en OSADS Alliance Database antes de la 2.1 tiene impacto y vectores de ataque desconocidos, posiblemente relacionados con includes/functions.php, un problema distinto a CVE-2006-2874."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osads_alliance_database:osads_alliance_database:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"27BB4EBD-6638-4794-8307-9EA50F45C562"},{"vulnerable":true,"criteria":"cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7AF39097-39DF-4F37-A650-28F4CE5D5F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.2:*:*:*:*:*:*:*","matchCriteriaId":"23A6AE3D-ECEC-42E7-8E52-1F7A30D3BF44"},{"vulnerable":true,"criteria":"cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.3:*:*:*:*:*:*:*","matchCriteriaId":"45299E47-1CCC-4C97-8D09-89480A9D3A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osads_alliance_database:osads_alliance_database:1.4:*:*:*:*:*:*:*","matchCriteriaId":"94B20E2F-91E8-49CC-B925-3E62CB4F09FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=163285&release_id=625654","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31198","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45149","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=163285&release_id=625654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4210","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.190","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O."},{"lang":"es","value":"fs/open.c en el kernel de Linux anterior a v2.6.22 no elimina de forma adecuada los bits \"setuid\" y \"setgid\" cuando los escribe en un fichero , lo que permite a usuarios locales obtener privilegios de grupos diferentes, y obtener información sensible o posiblemente tener otro impacto no especificado, creando un fichero ejecutable en el directorio setgid a través de las funciones (1) truncate o (2) ftruncate en conjunción con una E/S mapeada en memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.21.7","matchCriteriaId":"7D253C55-0E1E-4D3F-B0BB-D59BEC5C5937"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=8420","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=7b82dc0e64e93f430182f36b46b79fcee87d3532","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32237","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32356","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32799","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33201","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33280","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/8","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31368","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463661","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45539","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=8420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=7b82dc0e64e93f430182f36b46b79fcee87d3532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0972.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0787.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0973.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=463661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4211","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to \"handling of columns.\""},{"lang":"es","value":"Un error en la propiedad signedness de enteros en (1) QuickLook en Mac OS X versión 10.5.5 de Apple y (2) Office Viewer en iPhone OS de Apple versiones 1.0 hasta 2.1 y iPhone OS para iPod touch versiones 1.1 hasta 2.1, permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y ejecutar código arbitrario por medio de un archivo de Microsoft Excel diseñado que desencadena un acceso de memoria fuera de límites, relacionado con el \"handling of columns”."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"B669868B-F358-4D5B-9D64-4A462F261553"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*","matchCriteriaId":"4261E5C1-DC93-437E-B84F-A30380AFDC40"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*","matchCriteriaId":"DF292FED-19A4-4031-9B1F-151C0146F3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*","matchCriteriaId":"5183082C-556F-479F-9FC1-42B59BBB840B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*","matchCriteriaId":"2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*","matchCriteriaId":"4FA51920-223B-4DF4-802C-188F5A8B0563"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*","matchCriteriaId":"2C63C36E-1997-4F44-80AD-E665CE46A278"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*","matchCriteriaId":"02BFDD6F-B9C3-42BB-A84A-828193FAA137"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"CFD4325B-A86A-4C1B-930F-56C17FB6281D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"079BB54C-25FD-4B26-B171-368911960F76"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"7E7AA027-8CF9-49BD-A000-82880E41D622"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"4385635D-46F2-4642-9C78-1346DC120492"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"20DAE911-C037-4F10-82A3-EF42D5FB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"D4CE4199-BBF5-4F42-8BBC-BD946079C912"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"34346F55-4972-427B-8F96-780FA91DB95D"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31707","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021027","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45784","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4212","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.137","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in rlogind in the rlogin component in Mac OS X 10.4.11 and 10.5.5 applies hosts.equiv entries to root despite what is stated in documentation, which might allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Vulnerabilidad sin especificar en rlogind en el componente rlogin en Mac OS X v10.4.11 v10.5.5 aplica entradas hosts.equiv a root a pesar de que en la documentación se indica que podría permitir a atacantes remotos evitar las restricciones de acceso establecidas."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of rsh-server packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n\nThe glibcs ruserok function is used to check users authorization against rhosts files.  That implementation of ruserok never opens /etc/hosts.equiv for superuser.","lastModified":"2008-10-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31708","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021028","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45785","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4214","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local users to cause the scripting dictionary to be written to arbitrary locations, related to an \"insecure file operation\" on temporary files."},{"lang":"es","value":"Vulnerabilidad no especificada en el editor de scripts de Mac OS X v10.4.11 y v10.5.5 que permite a usuarios locales producir que el diccionario de scripts se escriba en lugares arbitrarios, relacionado con una \"operación insegura de fichero\" en los ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31716","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021029","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45786","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4215","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.183","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which might allow attackers to bypass intended access restrictions."},{"lang":"es","value":"Vulnerabilidad en la lista de control de acceso a publicación de el Weblog en el servidor Mac OS X v10.4.11 que no comprueba adecuadamente cuando un usuario posee múltiples nombres cortos que permite a los atacantes evitar las restricciones de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31718","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021030","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45787","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4216","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive information via vectors that \"launch local files.\""},{"lang":"es","value":"La interface plug-in en WebKit de Apple Safari versiones anteiores a v3.2 no impide que los plug-ins de acceso de URLs local, lo cual permite a atacantes remotos obtener información sensible a través de vectores que \"lanzan archivos locales\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","matchCriteriaId":"7EDB7C2F-79A9-486A-BC40-736DE867E48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.2","matchCriteriaId":"40BC89F2-6654-4A53-8B1E-0A9832DCDE68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:windows:*:*:*:*:*","matchCriteriaId":"4201B398-4223-4731-9645-445231909295"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32706","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32291","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021227","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4217","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow."},{"lang":"es","value":"Error de presencia de signo en entero en BOM en Apple Mac OS X versiones anteriores a 10.5.6 que permite a los atacantes remotos ejecutar arbitrariamente código a través de las cabeceras de un fichero CPIO manipulado, permitiendo un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32876","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021399","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4218","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt."},{"lang":"es","value":"Multiples desbordamientos de entero en el kernel de Apple Mac OS X anteriores a v10.5.6 en plataformas Intel permite a usuarios locales ganar privilegios a través de una llamada manipulada a (1) i386_set_ldt or (2) i386_get_ldt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32879","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021403","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4219","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in this application."},{"lang":"es","value":"El núcleo en Apple Mac OS X versiones anteriores a 10.5.6 permite a usuarios locales provocar una denegación de servicio (bucle infinito y parada del sistema) mediante la ejecución de una aplicación que está dinámicamente enlazada a librebrías en un servidor NFS, relacionado con la aparición de una excepción es esta aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32873","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021404","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4220","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.  NOTE: this may be related to the WLB-2008080064 advisory published by SecurityReason on 20080822; however, as of 20081216, there are insufficient details to be sure."},{"lang":"es","value":"Desbordamiento de entero en el API inet_net_pton de Libsystem de Apple Mac OS X anterior a v10.5.6, permite a atacantes dependientes del contexto ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de vectores no especificados. NOTA: Puede que esté relacionado con el aviso WLB-2008080064 publicado por SecurityReason el 22-08-2008; sin embargo a 16-12-2008 no hay suficientes detalles para confirmarlo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32877","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021406","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4221","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string, related to improper memory allocation."},{"lang":"es","value":"La API strptime en Libsystem en Apple Mac OS X anteriores a v10.5.6, permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación o agotamiento de memoria) o ejecutar código a su elección a través de una cadena de código de fecha manipulada, relacionada con la localización errónea de memoria"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32881","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021406","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4222","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service (infinite loop) via a crafted TCP packet."},{"lang":"es","value":"natd en network_cmds de Apple Mac OS X anterior a v10.5.6, cuando Internet Sharing está habilitado, permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete TCP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32874","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021408","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4223","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors."},{"lang":"es","value":"Podcast Producer en Apple Mac OS X v10.5 anterior a v10.5.6 permite a atacantes remotos evitar la autenticación y conseguir acceso de administrador a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32870","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021409","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4224","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file."},{"lang":"es","value":"UDF en Apple Mac OS X anterior a v10.5.6, permite a atacantes asistidos por el usuario local provocar una denegación del servicio (caída del sistema) a través de un volumen UDF mal formado en un fichero ISO manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32872","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021410","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4225","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document."},{"lang":"es","value":"Desbordamiento de entero en la función xmlBufferResize de libxml2 v2.7.2; permite a atacantes dependientes del contexto provocar una denegación de servicio (bucle infinito) a través de un documento XML largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"10D332CB-2A51-468F-A0BC-3A68B189A148"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32764","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36235","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021239","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1666","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:231","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49992","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0988.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32331","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-673-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3176","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0034","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0323","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470480","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10025","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6234","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6415","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0988.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-673-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4226","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document."},{"lang":"es","value":"Desbordamiento de entero en la función xmlSAX2Characters en libxml2 2.7.2 que permite a los atacantes dependientes de contexto causar una denegación de servicios (corrupción de memoria) o posiblemente ejecutar arbitrariamente código a través de un documento largo XML"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"10D332CB-2A51-468F-A0BC-3A68B189A148"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36235","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021238","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1666","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:231","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49993","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0988.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32326","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-673-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3176","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0034","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0323","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470466","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6219","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6360","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9888","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0988.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-673-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4227","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network traffic."},{"lang":"es","value":"El sistema operativo Apple iPhone  desde la v1.0 hasta la v2.1 y el sistema operativo iPhone para el iPod Touch desde la v1.0 hasta la v2.1 cambian el nivel de cifrado de las conexiones VPN PPTP a un nivel mas bajo del que fue usado previamente, lo cual facilita a atacantes remotos obtener información sensible o secuestras una conexión mediante el descifrado del trafico de red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50024","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021269","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4228","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number."},{"lang":"es","value":"La funcionalidad de bloqueo del terminal (Passcode Lock) en Apple iPhone OS 1.0 hasta 2.1 y iPhone OS para iPod touch 1.1 hasta 2.1 permite a atacantes con acceso físico aprovechar la llamada de emergencia en dispositivos bloqueados hacer una llamada de teléfono a un número de se elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50025","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021271","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4229","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup."},{"lang":"es","value":"Condición de carrera en la funcionalidad Passcode Lock de Apple Iphone OS v2.0 hasta v2.1 e iPhone OS para iPod touch v2.0 hasta v2.1, permite a atacantes físicamente próximos eliminar el bloqueo y lanzar aplicaciones de su elección al restaurar el dispositivo desde una copia de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50026","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021271","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4230","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages.  NOTE: this might be a duplicate of CVE-2008-4593."},{"lang":"es","value":"La funcionalidad Passcode Lock en el sistema operativo del iPhone de Apple desde la v1.0 hasta la v2.1 y el sistema operativo iPhone para el iPod touch desde la v1.0 hasta la v2.1 muestra los mensajes SMS cuando la pantalla de llamada de emergencia esta visible, lo que permite a atacantes físicamente próximos obtener información sensible mediante la lectura de estos mensajes. NOTA: Podría ser una vulnerabilidad duplicada de CVE-2008-4593"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50027","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4231","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."},{"lang":"es","value":"Safari en Apple iPhone OS v1.0 hasta v2.1 e iPhone OS para iPod touch v1.1 hasta v2.1 no maneja adecuadamente los elementos HTML TABLE, esto permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un documento HTML manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50028","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-23.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504211/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021272","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504211/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4232","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document."},{"lang":"es","value":"Safari en Apple iPhone OS 2.0 hasta 2.1 y  iPhone OS para iPod touch 2.1 no restringe mostrar contenidos IFRAME para los límites del IFRAME, el cual permite a los atacantes remotos espiar una interfaz de usuario a través de documentos HTML manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50029","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021272","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4233","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document."},{"lang":"es","value":"Safari en Apple iPhone OS v1.0 hasta v2.1 e iPhone OS para iPod touch v1.1 hasta v2.1; no aísla el diálogo de aceptar llamadas (call-approval) del proceso de lanzamiento de nuevas aplicaciones, esto permite a atacantes remotos realizar llamadas de teléfono de su elección a través de un documento HTML manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32756","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021264","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4234","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a \"potentially unsafe\" warning message."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en la característica Quarantine en CoreTypes en Apple Mac OS X 10.5 y versiones anteriores a 10.5.6, permite a los atacantes remotos usuarios asistidos, ejecutar arbitrariamente código a través de un archivo ejecutable con el tipo de contenido, no indicando  la asociación de aplicación para el archivo, el cual no lanza un \"potencialmente inseguro\" mensaje de aviso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021400","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47689","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4236","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file."},{"lang":"es","value":"Apple Type Services (ATS) de Apple Mac OS X v10.5 anterior a 10.5.6, permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de una fuente manipulada insertada en un documento PDF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021398","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32875","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4237","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting."},{"lang":"es","value":"Managed Client en Apple Mac OS X anterior a v10.5.6 a veces no identifica los parámetros de configuración de un sistema cuando instala a través de un cliente, lo que permite a atacantes dependientes del contexto producir un impacto inespecifico mediante la utilización involuntaria de parámetros, como se demuestra en el parámetro de bloqueo del salvapantallas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"E75D6FCB-40E7-4A52-A4CC-CB99C64FA319"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.5","matchCriteriaId":"59451C51-8DF8-40AB-8B57-40FD70E69DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32880","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021407","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4241","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.647","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CJ Ultra Plus 1.0.4 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cookie SID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cj:ultra_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"24B44783-98B3-4D22-AD24-C070A8F68F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:cj:ultra_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"3B66C825-31AB-45EA-81A6-5804FE927873"},{"vulnerable":true,"criteria":"cpe:2.3:a:cj:ultra_plus:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F735C63F-D847-405D-8BCE-5B1169C61443"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4316","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31333","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45458","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6536","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4242","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.693","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser."},{"lang":"es","value":"ProFTPD  v1.3.1 interpreta como múltiples comandos los comandos largos de un cliente FTP, lo que permite a atacantes remotos llevar a cabo ataques de falsificación de petición en sitios cruzados (CSFR) y ejecutar comdos FTP de su elección a través de una URI ftp:// larga que aprovecha la sesión existente en la implementación de cliente FTP en un navegador web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"71965620-399A-450C-95A5-5B327438768A"}]}]}],"references":[{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33413","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/56","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4313","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1689","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:061","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31289","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020945","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45274","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00078.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00245.html","source":"cve@mitre.org"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00245.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4243","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.723","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en ImageServer (también conocida como UTImageServer) en WebAdmin anterior a v1.7 para Epic Games Unreal Tournament 3 (UT3) v1.3, permite a atacantes remotos leer archivos de su elección a través de ..\"punto punto) en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3601:linux:*:*:*:*:*","matchCriteriaId":"08851034-5D30-4027-9F00-E74A0D5CA500"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3601:windows:*:*:*:*:*","matchCriteriaId":"EAC605A4-9AD7-42A1-8CF1-2F8F230D84BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3614:linux:*:*:*:*:*","matchCriteriaId":"E650985E-8477-4EB9-A89F-34F2F1DF8AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3614:windows:*:*:*:*:*","matchCriteriaId":"DB3D7224-A419-44EF-B94B-189B3578E242"}]}]}],"references":[{"url":"http://aluigi.org/adv/ut3webown-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31926","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4317","source":"cve@mitre.org"},{"url":"http://ut3webadmin.elmuerte.com/download.php?t=2008-09-21","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31272","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2635","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45292","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6506","source":"cve@mitre.org"},{"url":"http://aluigi.org/adv/ut3webown-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ut3webadmin.elmuerte.com/download.php?t=2008-09-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4244","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.740","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1."},{"lang":"es","value":"Rianxosencabos CMS v0.9 permite a atacantes remotos evitar la autenticación y obtener acceso como administrador configurando en la cookie el usuario y contraseña a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rianxosencabos_cms:rianxosencabos_cms:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9F468393-BC50-4183-82A4-67995C4C661E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4312","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31292","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45291","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6521","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4245","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.770","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the default URI, possibly related to useradmin.php."},{"lang":"es","value":"El Admin Control Panel en Rianxosencabos CMS v0.9 no requiere privilegios de administrador, esto permite a usuarios autenticados remotamente (1) modificar los privilegios de usuario, (2) borrar usuarios o realizar otras acciones administrativas no especificadas a través de vectores relacionados con una acción \"lista\" en la URI por defecto, posiblemente relacionado con useradmin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rianxosencabos_cms:rianxosencabos_cms:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9F468393-BC50-4183-82A4-67995C4C661E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31296","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45290","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6513","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4246","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.787","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service (application crash) via a crafted CTCP response."},{"lang":"es","value":"Vulnerabilidad sin especificar en Denora IRC Stats Server anterior a v1.4.1, permite a los servidores IRC remotos provocar una denegación de servicio (caída de aplicación) a través de una respuesta CTPC manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denora_irc_stats:denora_irc_stats:1.0:*:*:*:*:*:*:*","matchCriteriaId":"342C7809-FBB1-4CC8-B9C8-D9093DBE2738"},{"vulnerable":true,"criteria":"cpe:2.3:a:denora_irc_stats:denora_irc_stats:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9275C8-B144-4E39-A6F3-EE1C81437AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:denora_irc_stats:denora_irc_stats:1.2:*:*:*:*:*:*:*","matchCriteriaId":"97FE0BB0-2A7C-4F95-97FB-58D1FF2FEF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:denora_irc_stats:denora_irc_stats:1.4:*:*:*:*:*:*:*","matchCriteriaId":"0852F4C7-6255-4DAF-9B09-7CC9F1C6BCD8"}]}]}],"references":[{"url":"http://denorastats.org/?p=home","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://dev.denorastats.org/news/show/4","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/31233","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45230","source":"cve@mitre.org"},{"url":"http://denorastats.org/?p=home","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://dev.denorastats.org/news/show/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/31233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4247","sourceIdentifier":"cve@mitre.org","published":"2008-09-25T19:25:18.817","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser."},{"lang":"es","value":"ftpd en OpenBSD 4.3, FreeBSD 7.0, y NetBSD 4.0 interpreta como múltiples comandos los comandos largos desde un cliente FTP, lo que permite a atacantes remotos llevar a cabo ataques de falsificación de petición en sitios cruzados (CSFR) y ejecutar comandos FTP de su elección a través de una URI ftp:// larga que aprovecha una sesión FTP existente en la implementación de un cliente FTP en un navegador web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-014.txt.asc","source":"cve@mitre.org"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32068","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32070","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33341","source":"cve@mitre.org"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:12.ftpd.asc","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/56","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4313","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y.diff?r1=1.51&r2=1.52&f=h","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c.diff?r1=1.183&r2=1.184&f=h","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020946","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021112","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-014.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-08:12.ftpd.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y.diff?r1=1.51&r2=1.52&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c.diff?r1=1.183&r2=1.184&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4250","sourceIdentifier":"secure@microsoft.com","published":"2008-10-23T22:00:01.357","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\""},{"lang":"es","value":"El servicio servidor en Microsoft Windows versiones 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, vista Gold y SP1, Server 2008 y 7 Pre-Beta, permite a los atacantes remotos ejecutar código arbitrario por medio de una petición RPC creada que desencadena el desbordamiento durante una Canonicalización de Path, como explotación en la naturaleza por Gimmiv.A en octubre de 2008, también se conoce como \"Server Service Vulnerability\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:*","matchCriteriaId":"8856A97B-4C43-45E5-B1DB-89EB9C350265"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:itanium:*","matchCriteriaId":"87842DF1-F3AC-4585-A117-904B936D5C9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*","matchCriteriaId":"3A118DC8-CD3A-461F-867E-5174F24FBAE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*","matchCriteriaId":"1114016B-B51D-495D-96AC-A0E7992DA551"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*","matchCriteriaId":"889F98DA-4266-470B-AE3D-480BDF6BADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:-:*:*:professional:*:x64:*","matchCriteriaId":"4902A7BD-0645-4CAC-8EA8-24BD2D8B893A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://blogs.securiteam.com/index.php/archives/1150","source":"secure@microsoft.com","tags":["Permissions Required"]},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"secure@microsoft.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32326","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/827267","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/497808/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497816/100/0/threaded","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31874","source":"secure@microsoft.com","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021091","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-297A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-088A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2902","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46040","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/6824","source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6841","source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7104","source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7132","source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://blogs.securiteam.com/index.php/archives/1150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122703006921213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/827267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/497808/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497816/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-297A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-088A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/6824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4252","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.923","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the \"system state,\" aka \"DataGrid Control Memory Corruption Vulnerability.\""},{"lang":"es","value":"El control ActiveX DataGrid de Microsoft Visual Basic 6.0 y Visual FoxPro 8.0 SP1, y 9.0 SP1 y SP2, no maneja adecuadamente los errores en el acceso a objetos no iniciados correctamente, esto permite a atacantes remotos ejecutar código de su elección a través de un documento HTML manipulado; está relacionado con la corrupción del \"estado del sistema\". También se como \"Vulnerabilidad de Corrupción en el Control de Memoria DataGrid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F2D429D9-577E-4CD6-ADEC-1119B60DB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"25881D4B-06E5-4083-AEEF-B6E1CE5C459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*","matchCriteriaId":"9CD3B021-8145-49FA-8809-C3976ED1BE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"145E1D64-840B-4AE8-91CB-EA4884ED51D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*","matchCriteriaId":"DD65D7E8-016B-44EC-A416-E9247810CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"478347F8-6256-4DE6-AD6A-91631A9E6DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32591","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021369","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5894","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4253","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the \"system state,\" aka \"FlexGrid Control Memory Corruption Vulnerability.\""},{"lang":"es","value":"El control ActiveX FlexGrid en Microsoft Visual Basic v6.0, Visual FoxPro v8.0 SP1 y v9.0 SP1 y SP2, Office FrontPage 2002 SP3, y Office Project 2003 SP3, no maneja adecuadamente los errores durante el acceso a objetos incorrectamente inicializados, lo que permite a atacantes remotos ejecutar código de su elección mediante un documento HTML manipulado, relacionado con la corrupción del \"system state\", alias \"Vulnerabilidad de Corrupción de Memoria en el Control FlexGrid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F2D429D9-577E-4CD6-ADEC-1119B60DB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"25881D4B-06E5-4083-AEEF-B6E1CE5C459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*","matchCriteriaId":"9CD3B021-8145-49FA-8809-C3976ED1BE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"145E1D64-840B-4AE8-91CB-EA4884ED51D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*","matchCriteriaId":"DD65D7E8-016B-44EC-A416-E9247810CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"478347F8-6256-4DE6-AD6A-91631A9E6DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32592","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021369","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5994","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4254","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the \"system state,\" aka \"Hierarchical FlexGrid Control Memory Corruption Vulnerability.\""},{"lang":"es","value":"Múltiples desbordamientos de enteros en el control  ActiveX de Hierarchical FlexGrid (en el archivo mshflxgd.ocx) en Visual Basic versión 6.0 y Visual FoxPro versiones 8.0 SP1 y 9.0 SP1 y SP2, de Microsoft, permiten a los atacantes remotos ejecutar código arbitrario por medio de las propiedades diseñadas (1) Rows y (2) Cols de los métodos (a) ExpandAll y (b) CollapseAll, relacionados con el acceso a objetos inicializados incorrectamente y la corrupción del  \"system state,\"  también se conoce como \"Hierarchical FlexGrid Control Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F2D429D9-577E-4CD6-ADEC-1119B60DB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"25881D4B-06E5-4083-AEEF-B6E1CE5C459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*","matchCriteriaId":"9CD3B021-8145-49FA-8809-C3976ED1BE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"145E1D64-840B-4AE8-91CB-EA4884ED51D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*","matchCriteriaId":"DD65D7E8-016B-44EC-A416-E9247810CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"478347F8-6256-4DE6-AD6A-91631A9E6DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://secunia.com/secunia_research/2007-72/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499059/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021369","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5805","source":"secure@microsoft.com"},{"url":"http://secunia.com/secunia_research/2007-72/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499059/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4255","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.970","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an \"allocation error\" and memory corruption, aka \"Windows Common AVI Parsing Overflow Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el archivo mscomct2.ocx (también se conoce como control ActiveX de Windows Common o control ActiveX de Microsoft Animation) en Visual Basic versión  6.0, Visual Studio .NET 2002 SP1 y 2003 SP1, Visual FoxPro versiones 8.0 SP1 y 9.0 SP1 y SP2, y Office Project 2003 SP3 y 2007 Gold y SP1, de Microsoft,  permite a atacantes remotos ejecutar código arbitrario por medio de un archivo AVI con una longitud de secuencia diseñada, lo que desencadena un \"allocation error\"  y corrupción de memoria, también se conoce como \"Windows Common AVI Parsing Overflow Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F2D429D9-577E-4CD6-ADEC-1119B60DB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"25881D4B-06E5-4083-AEEF-B6E1CE5C459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*","matchCriteriaId":"9CD3B021-8145-49FA-8809-C3976ED1BE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"145E1D64-840B-4AE8-91CB-EA4884ED51D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*","matchCriteriaId":"DD65D7E8-016B-44EC-A416-E9247810CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"478347F8-6256-4DE6-AD6A-91631A9E6DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/32613.pl","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499061/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32613","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021369","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-083","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-083/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6032","source":"secure@microsoft.com"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/32613.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499061/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-083/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4256","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:00.987","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the \"system state,\" aka \"Charts Control Memory Corruption Vulnerability.\""},{"lang":"es","value":"El control ActiveX Charts en Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 y 2003 SP1, y Visual FoxPro 8.0 SP1 y 9.0 SP1 y SP2 no maneja adecuadamente errores durante el acceso de objetos inicializados incorrectamente, lo que permite a atacantes remotos ejecutar código de su elección a través de documentos HTML manipulados, relacionados con la corrupción del \"estado del sistema,\" también conocido como vulnerabilidad de corrupción de memoria en el control de caracteres.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"F2D429D9-577E-4CD6-ADEC-1119B60DB20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"25881D4B-06E5-4083-AEEF-B6E1CE5C459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*","matchCriteriaId":"9CD3B021-8145-49FA-8809-C3976ED1BE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"145E1D64-840B-4AE8-91CB-EA4884ED51D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*","matchCriteriaId":"DD65D7E8-016B-44EC-A416-E9247810CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*","matchCriteriaId":"478347F8-6256-4DE6-AD6A-91631A9E6DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"747E3E3A-85C1-4E55-B7F8-C5207F247498"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32614","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021369","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5651","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4258","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka \"Parameter Validation Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v5.01 SP4 y v6 SP1, no valida adecuadamente los parámetros en las llamadas a los métodos de navegación; esto permite a atacantes remotos ejecutar código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También se conoce como \"Vulnerabilidad de Corrupción de la Memoria de Validación de Parámetros\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021371","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5231","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4259","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.033","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 sometimes attempts to access uninitialized memory locations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, related to a WebDAV request for a file with a long name, aka \"HTML Objects Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer versión 7 algunas veces intenta acceder a las ubicaciones de memoria no inicializadas, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de un documento HTML creado que desencadena la corrupción de la memoria, relacionada con una petición WebDAV para un archivo con un nombre largo, también se conoce como “HTML Objects Memory Corruption Vulnerability\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499065/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021371","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-087","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-087/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5706","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499065/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-087/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4260","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 7 en ocasiones intenta acceder a objetos que han sido eliminados; esto permite a atacantes remotos ejecutar código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También se conoce como \"Vulnerabilidad de Corrupción de Memoria que No ha sido Iniciada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021371","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5903","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4261","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.067","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not properly handle extraneous data associated with an object embedded in a web page, which allows remote attackers to execute arbitrary code via crafted HTML tags that trigger memory corruption, aka \"HTML Rendering Memory Corruption Vulnerability.\""},{"lang":"es","value":"El desbordamiento del búfer en región stack de la memoria en Microsoft Internet Explorer versiones 5.01 SP4, 6 SP1 en Windows 2000 y 6 en Windows XP y Server 2003, no maneja apropiadamente los datos extraños asociados con un objeto incrustado en una página web, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de etiquetas HTML creadas que desencadenan daños en la memoria, también se conoce como \"HTML Rendering Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:*","matchCriteriaId":"8D91FC0B-92FA-4182-9B87-A462850BD510"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*","matchCriteriaId":"F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:*","matchCriteriaId":"74EE55A2-6020-4591-9F15-80E57D19207C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=761","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021371","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5829","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4264","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.080","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/Bulletin/MS08-074.mspx\r\n\r\n\t\r\nFile Format Parsing Vulnerability - CVE-2008-4264\r\n\r\nA remote code execution vulnerability exists in Microsoft Office Excel as a result of pointer corruption when loading Excel formulas. The vulnerability could allow remote code execution if a user opens a specially crafted Excel file that includes a malformed formula. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed formula, which triggers \"pointer corruption\" during the loading of formulas from this spreadsheet, aka \"File Format Parsing Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, y 2007 Gold y SP1; Excel Viewer 2003 Gold y SP3; Excel Viewer; Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats Gold y SP1; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac que permite a los atacantes remotos ejecutar arbitrariamente código a través de hojas de Excel manipulada que pueden contener fórmular malformadas, las cuales lanzan una \"corrupción de puntero\" durante la carga de fórmulas desde esta hoja, alias \"Vulnerabilidad de analizador de formato de archivo\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"ECDF1C1D-EF63-4A3E-AEE2-2D2D9FDBF368"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:*:*:*:*:*:*:*","matchCriteriaId":"3BCABD31-F406-4184-97AF-21AD95353D26"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:20007_office_system:*:*:*:*:*:*:*:*","matchCriteriaId":"B507F860-5D28-4E86-8F61-FC71F4C030C3"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:20007_office_system:sp1:*:*:*:*:*:*:*","matchCriteriaId":"F9A0B1B7-21A7-4038-8738-02AFADAAB06D"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"0BB3D66F-9028-4703-9D6A-629331EEB492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32621","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021368","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3386","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5556","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4265","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.097","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/Bulletin/MS08-074.mspx\r\n\r\n\t\r\nFile Format Parsing Vulnerability - CVE-2008-4265\r\n\r\nA remote code execution vulnerability exists in Microsoft Office Excel as a result of memory corruption when loading Excel records. The vulnerability could allow remote code execution if a user opens a specially crafted Excel file that includes a malformed object. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka \"File Format Parsing Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2000 SP3 permite a atacantes remotos ejecutar código de su elección mediante una hoja de cálculo manipulada que contiene un objeto malformado, lo que dispara una corrupción de memoria durante la carga de registros desde esta hoja de cálculo, alias \"Vulnerabilidad de Análisis de Formato de Fichero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"ECDF1C1D-EF63-4A3E-AEE2-2D2D9FDBF368"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:*:*:*:*:*:*:*","matchCriteriaId":"3BCABD31-F406-4184-97AF-21AD95353D26"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:20007_office_system:*:*:*:*:*:*:*:*","matchCriteriaId":"B507F860-5D28-4E86-8F61-FC71F4C030C3"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:20007_office_system:sp1:*:*:*:*:*:*:*","matchCriteriaId":"F9A0B1B7-21A7-4038-8738-02AFADAAB06D"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"0BB3D66F-9028-4703-9D6A-629331EEB492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=763","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021368","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3386","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5614","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4266","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/Bulletin/MS08-074.mspx\r\n\r\n\t\r\nExcel Global Array Memory Corruption Vulnerability - CVE-2008-4266\r\n\r\nA remote code execution vulnerability exists in Microsoft Office Excel as a result of stack corruption when loading Excel records. The vulnerability could allow remote code execution if a user opens a specially crafted Excel file that includes a malformed object. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.","cveTags":[],"descriptions":[{"lang":"en","value":"Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Excel spreadsheet with a NAME record that contains an invalid index value, which triggers stack corruption, aka \"Excel Global Array Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2000 SP3, 2002 SP3 y 2003 SP3; Excel Viewer 2003 Gold y SP3; Office 2004 y 2008 para Mac; y Open XML File Format Converter para Mac, permite a los atacantes remotos ejecutar código arbitrario por medio de una hoja de cálculo de Excel con un registro NAME que contiene un valor de índice no válido, que desencadena una corrupción de pila, también se conoce como \"Excel Global Array Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"439B26BA-376C-4D6B-B7BA-B66B8BDA8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://secunia.com/secunia_research/2008-36/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499055/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021368","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3386","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5808","source":"secure@microsoft.com"},{"url":"http://secunia.com/secunia_research/2008-36/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4268","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.143","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/Bulletin/MS08-075.mspx\r\n\r\nWindows Saved Search Vulnerability - CVE-2008-4268\r\n\r\nA remote code execution vulnerability exists when saving a specially crafted search file within Windows Explorer. This operation causes Windows Explorer to exit and restart in an exploitable manner.","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka \"Windows Saved Search Vulnerability.\""},{"lang":"es","value":"El componente Windows Search en Microsoft Windows Vista Gold y SP1 y Server 2008 no procesa adecuadamente la memoria libre durante la operación de grabado de un fichero de búsqueda, lo cual permite a atacantes remotos ejecutar código de su elección a través de un fichero guardado modificado, anteriormente conocida como \"Vulnerabilidad del Windows Search guardado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"}]}]}],"references":[{"url":"http://secunia.com/advisories/33053","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021366","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3387","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-075","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5853","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4269","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/Bulletin/MS08-075.mspx\r\n\t\r\nWindows Search Parsing Vulnerability - CVE-2008-4269\r\n\r\nA remote code execution vulnerability exists in Windows Explorer that allows an attacker to construct a malicious web page that includes a call to the search-ms protocol handler. The protocol handler in turn passes untrusted data to Windows Explorer.","cveTags":[],"descriptions":[{"lang":"en","value":"The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka \"Windows Search Parsing Vulnerability.\""},{"lang":"es","value":"El manipulador de protocolo search-ms en Windows Explorer en Microsoft Windows Vista Gold y SP1 y Server 2008 utiliza datos de parametros que no son de confianza por una comprobacion incorrecta, lo cual permitira a atacantes remotos ejecutar codigo de su eleccion a traves de un domcumento HTML manipulado, anteriormente conocida como \"Vulnerabilidad de comprobacion de Windows Search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"}]}]}],"references":[{"url":"http://secunia.com/advisories/33053","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021366","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3387","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-075","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6110","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4270","sourceIdentifier":"secure@microsoft.com","published":"2008-12-30T19:30:00.187","lastModified":"2023-11-07T02:02:43.670","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-5416.  Reason: This candidate is a duplicate of CVE-2008-5416.  Notes: All CVE users should reference CVE-2008-5416 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4278","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:54:36.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password."},{"lang":"es","value":"VMware VirtualCenter 2.5 antes de la actualización 3 build 119838 sobre Windows muestra la contraseña de un usuario en texto sin formato cuando la contraseña contiene caracteres especiales no especificados, lo cual permite robar la contraseña a atacantes físicamente próximos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:vmware:virtual_infrastructure_client:*:*:*:*:*:*:*:*","matchCriteriaId":"9A303926-5369-413E-93AB-FF3337B790D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:*:update_2:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"5A5B6A72-ACC7-4320-BD95-F555ACE3B71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3CE3C34C-EC77-4C5B-8B0C-130BAF2776D4"},{"vulnerable":false,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0:unknown:client:*:*:*:*:*","matchCriteriaId":"65811F69-FE15-44EB-A6BD-DAC10698047D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B422C79D-ACB5-4650-9542-0AA562296286"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EDFF5385-64AA-48AD-A5FE-25918E4F07D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:update_2:*:*:*:*:*:*","matchCriteriaId":"E15CB55D-DE86-4A1F-90E8-BEC3ABBF256B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:update_3:*:*:*:*:*:*","matchCriteriaId":"0CE6C817-1129-4570-9F04-1FC7EA42FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:update_4:*:*:*:*:*:*","matchCriteriaId":"181F6A06-A95F-401D-B835-F630722064F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D17E8DFD-AC99-45E6-81F9-ED66369FBD0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.5:update_1:*:*:*:*:*:*","matchCriteriaId":"C3AB56C1-35F2-448D-9EB7-35FB4E00C227"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31569","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020992","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45664","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4279","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:54:36.513","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address."},{"lang":"es","value":"La emulación de hardware de CPU para sistemas operativos invitados de 64 bits en VMware Workstation versión 6.0.x anterior a 6.0.5 build 109488 y versión 5.x anterior a 5.5.8 build 108000; Player versión 2.0.x anterior a 2.0.5 build 109488 y versión 1.x anterior a 1.0.8; Server versión 1.x anterior a 1.0.7 build 108231; y ESX versión 2.5.4 anterior a 3.5, permite a los usuarios del sistema operativo invitado autenticado conseguir privilegios adicionales del sistema operativo invitado mediante la activación de una excepción que hace que la CPU virtual realice un salto indirecto a una dirección no canónica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.8","matchCriteriaId":"F29FCDD4-79B7-4047-997D-0AB10226072D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.8","matchCriteriaId":"5DC7AFE3-A672-43B2-A77A-8C240198029B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.4","versionEndIncluding":"3.5","matchCriteriaId":"C75330AD-47BB-408C-A407-3685891A98BF"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32157","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32180","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31569","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020991","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45668","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4281","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.623","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement privilege to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en VMWare ESXi 3.5 anterior a ESXe350-200810401-O-UG y ESX 3.5 anterior a ESX350-200810201-UG; permite a los administradores con el privilegio Datastore.FileManagement, ganar privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"15D67D46-2772-4007-B158-C83820847DF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"8A1C83D1-5B70-4F0F-B8A6-3B19C7BCC09A"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000042.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32624","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498138/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32172","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021155","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0018.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46418","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6425","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498138/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4292","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors.  NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory."},{"lang":"es","value":"Opera anterior a v9.52 no comprueba el inválido CRL tras encontrar un certificado que carece de un CRL, lo cual tiene impacto y vectores de ataque desconocidos. NOTA: no está claro si esto es una vulnerabilidad, pero el vendedor lo incluye en la sección de avisos de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"C8ECEB59-5441-49AC-857E-10092DB86028"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"cve@mitre.org"},{"url":"http://my.opera.com/community/forums/topic.dml?id=241988&t=1222404671&page=1","source":"cve@mitre.org"},{"url":"http://my.opera.com/yngve/blog/2008/06/27/nobody-checks-the-padlock-debunked-by-opera-users","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45589","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://my.opera.com/community/forums/topic.dml?id=241988&t=1222404671&page=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://my.opera.com/yngve/blog/2008/06/27/nobody-checks-the-padlock-debunked-by-opera-users","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4293","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.553","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors in which Opera is launched by other applications."},{"lang":"es","value":"Vulnerabilidad no especificada en Opera antes de v9.52 para Windows, cuando se registra como un manejador del protocolo, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos en los cuales se ejecuta Opera a través de otras aplicaciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.51","matchCriteriaId":"5A6BC1AC-5F8E-4CE5-B4B2-4DAB315F64BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*","matchCriteriaId":"DB0E448B-8A9C-44BF-AE29-D05900F6FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*","matchCriteriaId":"E751386F-0179-4BE7-9F46-66455EAFB1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*","matchCriteriaId":"6A7D9843-8967-4E36-9609-4497EECB2842"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*","matchCriteriaId":"16F85686-88F9-412C-9105-F94D4D4D61FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*","matchCriteriaId":"29DDD7BF-9265-4202-93C1-98FAEC336190"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/31549","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/892/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30768","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44547","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/952/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/892/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4294","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation, as demonstrated by a root session that is still valid after a subsequent read-only session has begun."},{"lang":"es","value":"IBM Tivoli Netcool/Webtop v2.1 antes de v2.1.0.5 preserva privilegios de usuario cacheados después de cerrar sesión, lo cual permite a atacantes aproximarse físicamente para secuestrar una sesión visitando una workstation desatendida, como se demuestra por una sesión raíz que es aún válida después de que una sesión posterior de sólo lectura se haya iniciado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_netcool_webtop:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A303AACF-6137-4AE8-A541-F52F0BA9D8A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24018932","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ21888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2690","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45419","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24018932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ21888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4295","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.600","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices."},{"lang":"es","value":"Microsoft Windows Mobile 6.0 en dispositivos HTC Wiza 200 y HTC MDA 8125 no trata adecuadamente el primer intento de establecer la conexión Bluetooth a un punto con un nombre largo, lo cual permite a atacantes remotos causar denegación de servicio (reinicio de dispositivo)  por la configuración de un dispositivo Bluetooth  con un nombre hci largo y (1) conexión directamente al sistema Windows Mobile o (2) esperar para escanear dispositivos cercanos  del sistema Windows Mobile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"54F2E86B-81CA-45D7-94B4-048F0A01650C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:htc:mda:8125:*:*:*:*:*:*:*","matchCriteriaId":"2B038B84-F19A-4235-94B0-0604A6AC9BD7"},{"vulnerable":false,"criteria":"cpe:2.3:h:htc:wiza:200:*:*:*:*:*:*:*","matchCriteriaId":"76A4A26F-4944-4802-B0E1-A87B67AEE4D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32066","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31420","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45463","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6582","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4296","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.617","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Linksys WRT350N with firmware 1.0.3.7 has \"admin\" as its default password for the \"admin\" account, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"El Cisco Linksys WRT350N con firmware v1.0.3.7 tiene \"admin\" como contraseña por defecto para la cuenta \"admin\", lo cual facilita obtener el acceso a atacantes remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:linksys_wrt350n:*:*:*:*:*:*:*:*","matchCriteriaId":"F6AFC084-9102-4511-AF46-0DBE37611C24"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4319","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496756/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45588","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496756/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4297","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.647","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an \"hg pull\" request."},{"lang":"es","value":"Mercurial anterior a 1.0.2 no hace cumplir la configuración de permisos para una operación pull del hgweb, la cual permite a atacantes remotos leer arbitrariamente archivos de un repositorio a través de una petición \"hg pull\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mercurial:mercurial:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"D4D11B91-DBB1-4999-BC7A-DCC84F8C418A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122169840003798&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32182","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496488/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31223","source":"cve@mitre.org"},{"url":"http://www.selenic.com/mercurial/wiki/index.cgi/WhatsNew#head-905b8adb3420a77d92617e06590055bd8952e02b","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2604","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45229","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2753","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122169840003798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496488/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.selenic.com/mercurial/wiki/index.cgi/WhatsNew#head-905b8adb3420a77d92617e06590055bd8952e02b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4298","sourceIdentifier":"cve@mitre.org","published":"2008-09-27T10:30:03.680","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers."},{"lang":"es","value":"Fugas de memoria en la función http_request_parse en request.c en lighttpd anteriores a v1.4.20 permite a atacantes remotos causar denegación de servicio (corrupción de memoria) a través de un gran número de peticiones con cabeceras de peticiones duplicadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"78C95091-A48E-4C17-BB2C-ED771DDDF6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F2549EBF-E4B6-4574-BCD8-9DB5F195C9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B29F5471-E2A9-421D-A1B5-F0B1444CA9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F44FDF24-03A1-43F3-9D9E-F744F0A1AC3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A4B990A8-B28C-4A4C-89AB-50C754EF6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"55C0A9A3-E628-4AA8-8676-81A8528CC174"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"8119BEB6-5CBC-4279-9BDE-53ADF1A55F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"211959AC-B76B-4E87-8A08-7789B47F823E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B10DF110-D68E-448F-8BEE-39E0B569596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"1A4B7EDE-CA57-4FB2-8306-924FC8BD9C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"769931EC-F36A-4F72-A836-85B65CA815C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D4FE8C27-6822-4AA2-AB80-D29871C74DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6FB702A9-C175-477C-B4C7-30AF7DB26165"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"08784A81-A00C-4FBD-9A79-35D139FA3079"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"957A7575-FCAB-4C6B-93C8-C9065B412D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"1BE481AA-EF32-47AD-846A-FEDE38637680"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FFC56FD6-481A-4D60-BAF3-C988AA2395D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"5C691300-EA97-4F67-9C27-3C44FE22E283"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0D09EDA-6E8F-4535-98ED-D972940E2E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E384FD34-327C-40E7-9043-67BC69E6A52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B922D725-F31A-453B-B396-6C7FE0D4844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EB61C0DE-BAEB-4D65-91EA-D34BA0BEFC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"C395148E-BF0E-4C27-B903-444238736B1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0C001488-5A41-45F8-A270-C184728C1614"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"AAA6EA41-CE55-4854-A5FA-4A49D1A648BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"D7FE9EF8-936E-4351-B512-02B181C4DF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"16152422-AE34-4970-95B5-440CE8821A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"F8D34AB8-5DDD-421F-9C9D-65B6B10EDC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"53143B04-BB2D-4C40-83B1-8BF8BC6547E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"589775AF-21DF-4E41-BFE6-41E4FAAB0F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"E35D1709-6B2C-4F22-9948-F69F88F9156A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"B4949447-0590-4F76-A00E-1EB94FB7621F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"FAF5B9E9-8BB5-42A6-AF87-5CEE31D2EDC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"518A4727-ECB7-41C4-8DF5-5375BA5281C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"17207B51-0E7F-4AD2-8AC4-5A5CDC5CDEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"45FC99E1-57D4-4B12-BA26-090142B7CBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"21E0FB64-62A3-4875-AFF1-CF4D1E7BA0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"068AD0FA-306D-4C29-857C-21C6067287E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"1125A525-36BA-43E1-A316-6BB33DCEC672"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A7E488CF-A3F1-4C8B-A92A-8764FA1E6032"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A5DEAF46-95C2-4187-AF5A-FB8CB2E6FD04"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"24C0ECA9-5A9F-47CA-B8CA-28C7324EC722"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B4F8F89B-5A10-4EE3-A035-1CEA44B1691A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"F89FCD49-0C73-4E73-9D99-38700B622A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"FFA9AF51-F423-4167-88AB-5BF916BCC273"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A21B3F82-1C1D-46EE-92EF-46F7F590957E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"482312DE-D483-42EC-B8B3-C71CE088C7B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"D5549E74-A7A7-4D99-B08B-C6ACFB3917FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"72ABD4D8-8AD9-45E5-8FF5-FA947AC07F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"0EC04CE1-4C31-42B7-A92D-38393F549014"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"F79EED03-A95B-4636-A0AA-1F9E72DEF930"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"176D53A7-A81C-4C1F-A7B8-90604A9545F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"8372FF7B-CF9B-4963-AB53-704E87AF3540"},{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"DA46E89A-565E-439D-BCB2-6CEE44EFDFAC"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=238180","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32972","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-04.xml","source":"cve@mitre.org"},{"url":"http://trac.lighttpd.net/trac/changeset/2305","source":"cve@mitre.org"},{"url":"http://trac.lighttpd.net/trac/ticket/1774","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0309","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1645","source":"cve@mitre.org"},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497932/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31434","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2741","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45471","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=238180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.lighttpd.net/trac/changeset/2305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.lighttpd.net/trac/ticket/1774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4299","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect."},{"lang":"es","value":"Un determinado control ActiveX en el componente Helper COM de Internet Authentication Service (IAS) de Microsoft en la biblioteca iashlpr.dll, permite a los atacantes remotos causar una denegación de servicio (bloqueo del navegador) por medio de un valor entero largo en el primer argumento al método PutProperty. NOTA: este problema fue revelado por un investigador poco confiable, por lo que podría ser incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_authentication_service_helper_com_component:*:*:*:*:*:*:*:*","matchCriteriaId":"4FEAB8CB-CEF9-4BE3-82C9-F41BF8D8B4B9"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496695/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45556","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496695/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4300","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.237","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect."},{"lang":"es","value":"Un determinado control ActiveX en la biblioteca adsiis.dll en Internet Information Services (IIS) Microsoft, permite a los atacantes remotos causar una denegación de servicio (bloqueo del navegador) por medio de una cadena larga en el segundo argumento al método GetObject. NOTA: este problema fue revelado por un investigador poco confiable, por lo que podría ser incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:-:*:*:*:*:*:*:*","matchCriteriaId":"866547A0-AC34-41F8-A6AA-E8D820237C0B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4325","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496696/100/0/threaded","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45584","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/4325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496696/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4301","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method.  NOTE: this issue could not be reproduced by a reliable third party.  In addition, the original researcher is unreliable.  Therefore the original disclosure is probably erroneous"},{"lang":"es","value":"** DISPUTADA ** Cierto control ActiveX en iisext.dll en Microsoft Internet Information Services (IIS) permite a atacantes remotos establecer una contraseña a través de un argumento de tipo cadena en el método SetPassword. NOTA: un tercero de confianza no pudo reproducir este problema. En adición, el investigador original no es de confianza. Por lo tanto la divulgación original es probablemente errónea."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:-:*:*:*:*:*:*:*","matchCriteriaId":"866547A0-AC34-41F8-A6AA-E8D820237C0B"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2008-October/002081.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496694/100/0/threaded","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45587","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.attrition.org/pipermail/vim/2008-October/002081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496694/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-4302","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T17:17:29.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool."},{"lang":"es","value":"fs/splice.c en el subsistema \"splice\" en el kernel de Linux anterior a v2.6.22.2 no maneja de forma adecuada un fallo en la función add_to_page_cache_Lru, y como consecuencia intentar desbloquear una página que no está bloqueada, lo que permite que usuarios locales puedan provocar una denegación de servicio (Error del Kernel y caída del sistema), como se demostró por la herramienta \"fio I/O\"."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2008-0957.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.22.2","matchCriteriaId":"3964F496-69A9-4EDE-B659-442233AC27C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=6a860c979b35469e4d77da781a96bdb2ca05ae64","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/20/168","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32237","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32485","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln31201.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/10","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31201","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462434","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45191","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10547","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=6a860c979b35469e4d77da781a96bdb2ca05ae64","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2007/7/20/168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln31201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/16/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=462434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-4303","sourceIdentifier":"secalert@redhat.com","published":"2008-12-23T18:30:03.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en phpCollab v2.5 rc3, v2.4 y anteriores, permiten a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"loginForm\" en general/login.php, y otros vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:*:rc3:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"2742023E-1196-47AE-A4E3-598D9A097C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C6E26828-5548-4E30-99E9-43C81826A446"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F20B78DC-1A56-41F9-BB8A-19E18B66FD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A802131D-71BF-4B6B-884B-2B50A8A05070"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235052","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/19449","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33258","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-20.xml","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32964","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47520","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4304","sourceIdentifier":"secalert@redhat.com","published":"2008-12-23T18:30:03.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells."},{"lang":"es","value":"general/login.php en phpCollab 2.5 rc3 y anteriores, permiten a atacantes remotos ejecutar comandos arbitrarios a través de metacaracteres shell en entradas no específicas, relacionadas con la variable de entorno SSL_CLIENT_CERT. NOTA, en algunos entornos, SSL_CLIENT_CERT siempre tiene valor de cadena codificado en base 64, lo cual impone limitaciones a la inyección para shells típicas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:*:rc3:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"306A4BD2-EDA5-4C5C-9EDF-4A30002835C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6FEB4154-4FBA-439C-85B6-02EAAD97DCC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C2E0172B-98CB-4777-A388-E9B0AB09A655"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:2.4:*:*:*:*:*:*:*","matchCriteriaId":"82E3645C-2A9B-4F9D-B8FC-EFABB5550706"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:2.5:beta_4:*:*:*:*:*:*","matchCriteriaId":"D35D5533-5262-4A52-80E2-40A2AAC1F52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"A5C6C16C-9DC9-45C6-AA12-8A6B73F018ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcollab:phpcollab:2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"8A23D06B-FB8A-42CC-B3B6-F720A2D892EE"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235052","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33258","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-20.xml","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32964","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47522","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4305","sourceIdentifier":"secalert@redhat.com","published":"2008-12-23T18:30:03.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en installation/setup.php de phpCollab v2.5 rc3 y anteriores, permiten a administradores autenticados de forma remota, inyectar código PHP arbitrario en include/settings.php a través de la URI.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:*:rc3:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"2742023E-1196-47AE-A4E3-598D9A097C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C6E26828-5548-4E30-99E9-43C81826A446"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F20B78DC-1A56-41F9-BB8A-19E18B66FD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-collab:php-collab:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A802131D-71BF-4B6B-884B-2B50A8A05070"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235052","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/19449","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33258","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-20.xml","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32964","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47521","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=235052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4306","sourceIdentifier":"secalert@redhat.com","published":"2008-11-04T21:00:01.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence."},{"lang":"es","value":"Vulnerabilidad inespecífica en enscript antes de la v1.6.4 en Ubuntu Linux v6.06 LTS, v7.10, v8.04 y v8.10 que tiene un impacto y unos vectores de ataque desconocidos, posiblemente este relacionado con el desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:6.06:lts:*:*:*:*:*:*","matchCriteriaId":"B25664CA-ACA3-4BFD-AE57-5799AF833CB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"8FD4456F-5506-486F-B459-1287B8F327BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:8.04:lts:*:*:*:*:*:*","matchCriteriaId":"0816971B-91BE-4D9E-BE54-299C89FF4D38"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"A997A76A-22F0-4A67-9D66-97911B8BDDD9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/49569","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1021.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32521","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32530","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32753","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32854","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32970","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33109","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-02.xml","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1670","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:243","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1016.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498385/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-660-1","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2887","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10718","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498385/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-660-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4309","sourceIdentifier":"secalert@redhat.com","published":"2008-10-31T20:29:09.497","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,  related to the number of responses or repeats."},{"lang":"es","value":"El código getbulk en net-snmp 5.4 antes de v5.4.2.1, 5.3 antes de v5.3.2.3, y 5.2 antes de v5.2.5.1 permite a atacantes remotos   provocar una denegación de servicio (caída) mediante vectores relacionados con el número de respuestas o repeticiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6F129CD3-B1ED-4FF4-8A86-2F76898E8915"},{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"53505415-38BE-4EDC-824E-B64B5BF5B0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.4:*:*:*:*:*:*:*","matchCriteriaId":"950BC4AA-60A3-4512-A452-F205FF843C29"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com"},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32539","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32664","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32711","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33003","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33095","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33631","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33746","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33821","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35679","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200901-15.xml","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=882903","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262908-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4298","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0315","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1663","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:225","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/31/1","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0971.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498280/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32020","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021129","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-685-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2973","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3400","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1771","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46262","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6171","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6353","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9860","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-2-5-1/net-snmp/agent/snmp_agent.c?r1=17271&r2=17272&pathrev=17272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200901-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=882903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262908-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-467.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/31/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498280/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-685-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4310","sourceIdentifier":"secalert@redhat.com","published":"2008-12-09T00:30:00.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3656."},{"lang":"es","value":"El archivo httputils.rb en WEBrick en Ruby versiones 1.8.1 y 1.8.5, tal y como es usado en versiones 4 y 5 de Red Hat Enterprise Linux, permite a los atacantes remotos causar una denegación de servicio (consumo de CPU) por medio de una petición HTTP diseñada. NOTA: este problema se presenta debido a una corrección incompleta del CVE-2008-3656."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"31160797-6920-4BA1-B355-1CCD1FCDBFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"C80BDE13-9CBB-4A5F-9BF4-BEB907CED271"}]}]}],"references":[{"url":"http://secunia.com/advisories/33013","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/12/04/2","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0981.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470252","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/12/04/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0981.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4311","sourceIdentifier":"secalert@redhat.com","published":"2008-12-10T00:30:00.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply."},{"lang":"es","value":"La configuración por defecto de system.conf en \r\nD-Bus (alias DBus) y versiones anteriores a 1.2.6 omite el atributo send_type en ciertas reglas, el cual permite a los usuarios locales evitar las restricciones de acceso (1) enviando mensajes, en relación a send_requested_reply; y posiblemente (2) recibiendo mensajes, relativos a receive_requested_reply."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"BA717BEA-178B-462B-A6D7-D355366F5A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1A2945FB-BDB8-49B7-BA9A-2BB390345FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0FE08E05-948A-4A9C-BA91-B2935355D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB0A3D5A-8823-4365-83B9-1E370C131F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6262F9B-30B5-4A7E-AC49-B9221B06CA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C2F4A579-8F26-47CF-9AE0-41334A9751AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E12E1141-5FE4-43BF-B3A0-DC45C593F880"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B04817C0-14A2-4B75-8747-691D48E70BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09C8C79E-AE58-48AE-89DB-E84637543783"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.9:*:*:*:*:*:*:*","matchCriteriaId":"ED4ECF06-79CC-4142-BE6A-AF4E1E981543"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.10:*:*:*:*:*:*:*","matchCriteriaId":"A87CC329-AF59-4882-82E1-851C4E0BB0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.11:*:*:*:*:*:*:*","matchCriteriaId":"9BDA4ACC-9166-491C-A8D4-A5418F3B0965"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.12:*:*:*:*:*:*:*","matchCriteriaId":"084A8212-B0FC-41BA-9532-080E8F92B949"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.13:*:*:*:*:*:*:*","matchCriteriaId":"0EB88CDF-0C71-4FE7-9210-C43EBE806416"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.20:*:*:*:*:*:*:*","matchCriteriaId":"0D84E94E-18EB-4276-AF55-2FB9850B08CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.21:*:*:*:*:*:*:*","matchCriteriaId":"0C6D0AAC-7F4B-48FF-9ACB-8C8844BDD722"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.22:*:*:*:*:*:*:*","matchCriteriaId":"5FD40B16-FF56-4C23-B8A9-D79433713F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23:*:*:*:*:*:*:*","matchCriteriaId":"C5A81FE8-37A0-46CE-AAA4-F00CF4122C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.1:*:*:*:*:*:*:*","matchCriteriaId":"D8815B87-7910-4E41-AB28-AEAD9F53475A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.2:*:*:*:*:*:*:*","matchCriteriaId":"DCEF7E9B-3F19-48CF-862B-B5935824A4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB32F7B-8616-40F5-8D94-4FC97F6AD958"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.31:*:*:*:*:*:*:*","matchCriteriaId":"4EC42FAD-C541-4D91-BDF6-62AA1C894B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.32:*:*:*:*:*:*:*","matchCriteriaId":"FAECF21B-68AF-47D8-9540-BB0001087881"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.33:*:*:*:*:*:*:*","matchCriteriaId":"30D0DE09-5F83-423B-AD86-033005D35994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.34:*:*:*:*:*:*:*","matchCriteriaId":"D6618ACC-B506-4A92-BE4F-346FAC29D24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35:*:*:*:*:*:*:*","matchCriteriaId":"BB406736-7185-4E0A-ACC6-4F79AB312FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35.1:*:*:*:*:*:*:*","matchCriteriaId":"18867CA7-E4AE-4312-A6E8-0CC514FCF063"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35.2:*:*:*:*:*:*:*","matchCriteriaId":"5C443F3D-5BD0-4E89-99F1-1BC0798666F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36:*:*:*:*:*:*:*","matchCriteriaId":"2DA75AB4-4ADF-4E42-8840-B044DC4D9FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36.1:*:*:*:*:*:*:*","matchCriteriaId":"D809A431-7BA6-4C9F-8644-33A14389B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36.2:*:*:*:*:*:*:*","matchCriteriaId":"732CD552-3E19-4389-B426-77D5B473866F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.50:*:*:*:*:*:*:*","matchCriteriaId":"1702AE33-38F4-40C5-B448-C863A7E95553"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.60:*:*:*:*:*:*:*","matchCriteriaId":"3801D383-91A6-4F2F-87D5-32882005BF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.61:*:*:*:*:*:*:*","matchCriteriaId":"2392266A-BE81-4494-81C3-942ED56B0558"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.62:*:*:*:*:*:*:*","matchCriteriaId":"BCCA6868-E09D-4616-A9A8-EF63F20C981D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.90:*:*:*:*:*:*:*","matchCriteriaId":"60B6DA02-F08B-4ACE-8F93-F869467BC628"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.91:*:*:*:*:*:*:*","matchCriteriaId":"3B4E7E9B-722E-4EE1-A435-906DE07BEB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.92:*:*:*:*:*:*:*","matchCriteriaId":"BEF4902A-5598-42B7-8BB0-E9F8AB645D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DEF0BA7-4EE6-482A-BFE4-A159A7C329AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E93056D8-497A-4C08-B3FA-8372A92A6ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0380A55A-541E-450B-8092-280BD5DA736D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C55E6EEB-A408-45F5-AF95-37DBDEBA17EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4C9908FE-6B10-41BF-ADE2-1639CAC1340E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FA34903A-9D38-46FF-B702-D6BEECA96031"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"39753912-8A2D-49B0-B90B-43DAF723B34A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"11FF206A-8E96-40A2-9687-E0C4F00F020F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503532","source":"secalert@redhat.com"},{"url":"http://forums.fedoraforum.org/showthread.php?t=206797","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/dbus/2008-December/010702.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33047","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33055","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34360","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34642","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32674","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3355","source":"secalert@redhat.com"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=18229","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474895","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47138","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00436.html","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forums.fedoraforum.org/showthread.php?t=206797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/dbus/2008-December/010702.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=18229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00436.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4313","sourceIdentifier":"secalert@redhat.com","published":"2008-11-27T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services."},{"lang":"es","value":"Un parche de Red Hat para tog-pegasus en OpenGroup Pegasus 2.7.0 no configura adecuadamente el nombre PAM tty, lo que permite a usuarios autenticados remotamente evitar las restricciones de acceso previstas y enviar peticiones a servicios OpenPegasus WBEM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client:*:*:*:*:*","matchCriteriaId":"13B6DE5F-3143-4C63-8D8D-4679CF0F9DC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openpegasus:openpegasus_wbem:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"D47969DA-1CAD-4547-9BF6-85EDA8710B89"}]}]}],"references":[{"url":"http://osvdb.org/50277","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32862","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1001.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32460","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021283","source":"secalert@redhat.com"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9","source":"secalert@redhat.com"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459217","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46829","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556","source":"secalert@redhat.com"},{"url":"http://osvdb.org/50277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4314","sourceIdentifier":"secalert@redhat.com","published":"2008-12-01T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a \"cut&paste error\" that causes an improper bounds check to be performed."},{"lang":"es","value":"Una vulnerabilidad en smbd en versiones de Samba desde la 3.0.29 hasta la 3.2.4 podría permitir a atacantes remotos leer zonas arbitrarias de memoria y causar una denegación de servicio a través de peticiones modificadas de (1)trans, (2) trans2, y (3) nttrans. Esta vulnerabilidad está relacionada con un error  \"cortado y pegado\" que causa un control de límites inadecuado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Samba as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-12-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=125003356619515&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=125003356619515&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/50230","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32813","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32919","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32968","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36281","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1","source":"secalert@redhat.com"},{"url":"http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch","source":"secalert@redhat.com"},{"url":"http://us1.samba.org/samba/security/CVE-2008-4314.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32494","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021287","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-680-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3277","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0067","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2245","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125003356619515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125003356619515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://us1.samba.org/samba/security/CVE-2008-4314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-680-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4315","sourceIdentifier":"secalert@redhat.com","published":"2008-11-27T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks."},{"lang":"es","value":"tog-pegasus en OpenGroup Pegasus 2.7.0 en Red Hat Enterprise Linux (RHEL) 5, Fedora 9, y Fedora 10 no registra los intentos de autenticacion fallidos a el servidor OpenPegasus CIM, lo cual facilita a atacantes remotos evitar la detección de ataques de intento de adivinar passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client:*:*:*:*:*","matchCriteriaId":"13B6DE5F-3143-4C63-8D8D-4679CF0F9DC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openpegasus:openpegasus_wbem:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"D47969DA-1CAD-4547-9BF6-85EDA8710B89"}]}]}],"references":[{"url":"http://osvdb.org/50278","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32862","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1001.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021281","source":"secalert@redhat.com"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9","source":"secalert@redhat.com"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472017","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46830","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431","source":"secalert@redhat.com"},{"url":"http://osvdb.org/50278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4318","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T19:25:32.167","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php."},{"lang":"es","value":"El analizador de redes Observer v0.3.2.1 y anteriores permite a atacantes remotos ejecutar código de su elección mediante la utilización de meta-caracteres del intérprete de comandos en el parámetro \"query\" en whois.php o netcmd.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.2.1","matchCriteriaId":"863B2AA5-844E-4B9B-9379-E9CD6D28A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8782383-D111-4467-B81F-D0B93A578113"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"98C486ED-FA00-4FD2-987B-ED6432862518"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"39E2218A-9FE3-4E9A-8769-D4995E761ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D103CBE-54CE-4552-87E7-06E8AA9810AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"315DDAE1-A228-4E6E-9D8F-07F93FE8F498"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A3037E0C-940A-46FB-8B74-338A5BF58EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B9DCBD01-52FD-4829-86EF-D22905222036"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3FCEDE50-A0C4-48E3-B4F0-769FD3FE9C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4A49D13B-3E0A-4D9E-9C40-1660319DA4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6D0731A9-2DF1-493C-9D51-0A0B8C60C088"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"48EE5F48-E63F-4F21-A80D-9CA4C0370CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:project-observer:observer:0.30-pre-1:*:*:*:*:*:*:*","matchCriteriaId":"1F18AD0E-BE4D-4842-8274-E3C0C541FE81"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4322","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45398","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6559","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4319","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T19:25:35.760","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string."},{"lang":"es","value":"El módulo fileadmin.php en Libra File Manager (también conocido como Libra PHP File Manager) v1.18 y anteriores permite a atacantes remotos evitar la autenticación, leer ficheros arbitrarios, modificar ficheros arbitrarios y listar el contenido de directorios arbitrarios, al insertar ciertos parámetros \"user\" e \"isadmin\" en la cadena de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.18","matchCriteriaId":"93AF7428-B3B2-4962-A3EC-7417FCF22B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.00:*:*:*:*:*:*:*","matchCriteriaId":"9C83A5C9-A836-4B7F-A0E0-4C354525A08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.03:*:*:*:*:*:*:*","matchCriteriaId":"BB9543DA-0F76-4438-BE61-51D42412A813"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.05:*:*:*:*:*:*:*","matchCriteriaId":"8A152A89-1E0A-47A3-AABD-C5FBC4869EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.08:*:*:*:*:*:*:*","matchCriteriaId":"6D225985-9697-4704-AA54-1A9B9D7B8988"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.17:*:*:*:*:*:*:*","matchCriteriaId":"4DFE7EF9-9374-4DF3-9851-E830D424A7AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/496742","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31415","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45423","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6567","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4320","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T19:25:35.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter parameter to event/list."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en OpenNMS anteriores a 1.5.94, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"j_username\" a j_acegi_security_check, (2)el parámetro \"username\" a notification/list.jsp, y (3) el parámetro \"filter\" a event/list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"D6756CA1-8204-49E1-A34E-618B0D6AB18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"C50071BC-C35D-468C-AEC4-68207AC927AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"F4C7019B-E89F-4B4E-92D6-FEF5118CD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.0","matchCriteriaId":"B9929893-2278-482C-97BB-6E4B6CE03E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.90","matchCriteriaId":"65663400-C91A-4DDE-B7B7-4C77F2A3AE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3D55CA3-1EAC-4042-9910-9B03EE9EFE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"778C09CD-4A28-4509-A2B1-FFA363BAFA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"88A5E335-D4E3-4CED-8E1D-E6F6180FEDC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"EE86D63E-9DD9-48A9-94F8-7A4DAC7C213D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C843F51A-9935-4126-BACA-2A6D056552BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B07DB5C-1D6F-4E0B-95D0-438714559B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5AB58BD6-7B40-4AAD-AFF0-E6C545D84F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"73B904FB-45A7-44DF-8B0C-D21CDD988907"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EFEB4C76-58B0-4E6E-9631-61F5538DC01C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DBFA2AAA-B6EE-4DA4-9B26-E010B66BB7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"63750949-CB53-4765-ACC2-B0C07D8AF304"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"10FC31B4-782F-47F4-96B3-999FF540A27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F2AA5CF2-931B-4C67-B0AD-620E46986C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8A80CAD2-89EC-4301-8122-36D61780E7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"6B9EEE4F-4D5B-4278-A8A6-8BCE74868448"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"186B870F-B510-4C29-9938-15C65759CBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1E90D068-7C47-47D5-B7D9-5CADC8EDF981"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"90DD9C66-275C-4B8D-86EE-D3AFD5692C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"FFE194CE-BCB3-4AEC-A416-6C75815BC5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D1C26D1E-348A-4F52-8253-C5089FBD1DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.5.91:*:*:*:*:*:*:*","matchCriteriaId":"3399DFDD-C77C-445B-A5B4-890F8991D513"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.5.92:*:*:*:*:*:*:*","matchCriteriaId":"31785E64-3255-49D6-9441-5704D572C14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opennms.org:opennms:1.5.93:*:*:*:*:*:*:*","matchCriteriaId":"95126302-E8ED-400E-AAAD-FA97A98FB21A"}]}]}],"references":[{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2631","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2633","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2634","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opennms.org/documentation/ReleaseNotesUnStable.html#d788e257","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31410","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45417","source":"cve@mitre.org"},{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opennms.org/documentation/ReleaseNotesUnStable.html#d788e257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4321","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T19:25:59.337","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command."},{"lang":"es","value":"Desbordamiento de búfer en FlashGet (antes conocido como JetCar) FTP v1.9 permite a servidores FTP remotos ejecutar código de su elección mediante una respuesta especialmente larga al comando PWD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flashget:flashget_ftp:1.9:*:*:*:*:*:*:*","matchCriteriaId":"9A57C75C-CD64-467D-8C36-EF414EE5B13E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4327","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30685","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2381","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44443","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6240","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6248","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4322","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T19:25:59.353","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FC_INFOTAG/SET_CONTROL packet."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en RealFlex Technologies Ltd. RealWin Server v2.0, como el distribuido por DATA, permite a atacantes remotos ejecutar código de su elección mediante un paquete FC_INFOTAG/SET_CONTROL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realflex_technologies_ltd:realwin_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A0C3A1B6-2DC2-4DAB-959A-2DC5AEE22324"}]}]}],"references":[{"url":"http://reversemode.com/index.php?option=com_content&task=view&id=55&Itemid=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/976484","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/496759/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31418","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2694","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45465","source":"cve@mitre.org"},{"url":"http://reversemode.com/index.php?option=com_content&task=view&id=55&Itemid=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/976484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/496759/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4323","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T20:09:59.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application crash) via a crafted .ZIP file."},{"lang":"es","value":"El navegador Windows Explorer en Microsoft Windows XP SP3 permite a atacantes remotos con la intervención del usuario provocar una denegación de servicio (finalización de la aplicación) mediante un fichero .ZIP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:sp3:unknown:english:*:*:*:*:*","matchCriteriaId":"78995D27-1EE0-4983-A6A4-BB89B49475E0"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/6616","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4324","sourceIdentifier":"cve@mitre.org","published":"2008-09-29T20:09:59.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events.  NOTE: it was later reported that Firefox 3.0.2 on Mac OS X 10.5 is also affected."},{"lang":"es","value":"El despachador de eventos de la interfaz de usuario en Mozilla Firefox versión 3.0.3, en Windows XP SP2, permite a los atacantes remotos causar una denegación de servicio (desreferencia del puntero NULL y bloqueo de aplicación) por medio de una serie de eventos de keypress, click, onkeydown, onkeyup, onmousedown, y onmouseup. NOTA: más tarde se reportó que Firefox versión 3.0.2 en Mac OS X versión 10.5 también está afectado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://evilfingers.com/advisory/Firefox_User_Interface_Null_Pointer_Dereference_Dispatcher_Crash_n_Remote_DoS.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4321","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.secniche.org/moz303.html","source":"cve@mitre.org"},{"url":"http://www.secniche.org/moz303/index.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496807/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496846/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31476","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6614","source":"cve@mitre.org"},{"url":"http://evilfingers.com/advisory/Firefox_User_Interface_Null_Pointer_Dereference_Dispatcher_Crash_n_Remote_DoS.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.secniche.org/moz303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secniche.org/moz303/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496807/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496846/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4325","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T16:13:50.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the requested object.  NOTE: this issue might not be a vulnerability, since it requires attacker access to the repository that is being viewed."},{"lang":"es","value":"lib/viewvc.py en ViewVC v1.0.5 utiliza el parametro \"content-type\" en la peticion HTTP para la cabecera \"content-type\" en la respuesta HTTP, que permite a los atacantes remotos provocar una malinterpretacion del contenido por parte del navegador, a traves de el parametro \"content-type\" que no corresponde con el objeto solicitado.\r\nNOTA: Esta caracteristica puede no ser una vulnerabilidad, dado que requiere que el atacante acceda al repositorio que esta viendo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"91ADB624-1826-405C-BB1E-3D286ED03D5A"}]}]}],"references":[{"url":"http://viewvc.tigris.org/issues/show_bug.cgi?id=354","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/viewvc.py?rev=2011&r1=1968&r2=1978","source":"cve@mitre.org"},{"url":"http://viewvc.tigris.org/source/browse/viewvc?rev=1978&view=rev","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/20/1","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01101.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01142.html","source":"cve@mitre.org"},{"url":"http://viewvc.tigris.org/issues/show_bug.cgi?id=354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://viewvc.tigris.org/source/browse/viewvc/trunk/lib/viewvc.py?rev=2011&r1=1968&r2=1978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://viewvc.tigris.org/source/browse/viewvc?rev=1978&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/19/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01142.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4326","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T16:13:50.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a \"</script\" sequence."},{"lang":"es","value":"La función PMA_escapeJsString de libraries/js_escape.lib.php de phpMyAdmin antes de v2.11.9.2, al usar Internet Explorer, permite a usuarios remotos evitar los mecanismos de protección contra la ejecución de secuencias de comandos en sitios cruzados (XSS) y llevar a cabo ataques XSS a través de un byte NULL dentro de una sentencia \"</script\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.9.1","matchCriteriaId":"DD358C91-F735-4A7C-B71E-C87AF82A4CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"784EF815-B20A-4D26-8FCA-04BCBAD65BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*","matchCriteriaId":"40B0D6C2-AF9E-4395-861D-64502D82589A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9C3663CE-AF25-4A0A-811E-DE58B7E5D934"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"6F14B08F-6583-4686-B534-616D42B7D90B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"D4CD5425-79A4-4506-8BDA-299449EB51DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F754BBA9-765F-4BDE-9AF3-3DA4300B17C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7A136E97-05EA-4ADF-82F5-E2D0C7737D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"53AE58C1-CB8C-415F-BF58-BD356D3AC000"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F666B78D-5DC9-4256-8A23-A4021AE7044A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"229DE8B7-489B-4848-B1BE-2339CB771573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D9BC58E6-CA26-4760-A6A4-D65184A50539"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"ACE7C97E-60C6-417F-86F7-963ADE52A895"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"ADDE752A-19A1-4910-9C56-0FDFFA367E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3FF189AE-9485-4F8C-AAAE-25088DF6F964"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*","matchCriteriaId":"643C7F9B-B8C5-4C76-B706-F8CB5A800936"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"560BC57D-BDCE-4479-9847-6DB53A89FFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4859644F-E5FF-4AE4-B16D-CC2243964D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"48888218-B238-4F0D-A4C2-E9877D3F3A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A393256A-A5BE-4467-8058-E9CA5D626D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9C4839-2356-4630-BDB3-4A0171F3A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6F6E3468-78AF-471C-A09E-1ACCC6867256"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DF345665-3C1D-4F44-B648-B695D88267BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"F2C525B9-636F-49B9-B528-50AEB0E98F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*","matchCriteriaId":"DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"74632C65-6711-4425-A43F-CCF1664C8542"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*","matchCriteriaId":"BD740315-190A-43B7-8399-9B72FA592AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*","matchCriteriaId":"794AE77E-843C-4CB4-9462-E4FE8C4C2896"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B51601C-EDDC-41B7-82E9-EA4E7745F935"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_dev:*:*:*:*:*:*:*","matchCriteriaId":"704C4359-A80E-456F-AA69-D188E4DFDBA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"5DAB33AF-D8A9-444F-AC69-FACCFA0EEB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D1600D28-5583-4FA2-835F-BCE10813DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"EAEA71B2-99EE-4975-A46B-A38112CD4F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*","matchCriteriaId":"80AAD482-064D-4CFB-A1AE-49095036485A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl2:*:*:*:*:*:*:*","matchCriteriaId":"33423F75-0F5A-49F6-BF70-66DC2CE39E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*","matchCriteriaId":"6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*","matchCriteriaId":"CD3C5C9D-A802-40F3-B3CE-593CFED745CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D8FE9713-54BE-4A70-82F8-03B8E1915E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7:*:*:*:*:*:*:*","matchCriteriaId":"0611660F-F060-453C-8BE2-1599FE3FF9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"2887738D-57A8-4E43-8498-5C8D0FAAA030"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"892F5D72-1814-48A5-8CCA-A74EE9D633CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"E25A359B-8FFD-4941-9419-4E99373D9588"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"1F79633E-19C0-4448-92F1-7C291C9CCD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9FD0D-2786-43BB-938B-A45D9B60E08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"4D3CE1C3-59FF-457F-8579-996CA60CF6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"60F2B3C2-0EDB-48D3-92BC-B1CA0E41F230"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9852676-A91F-4FD6-A734-BF7E048411FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FC64B22B-E415-4510-A0DF-CE4763A423D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"12375469-DD81-42BE-8BC0-FCAB0D2D6253"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FCEF6246-C393-41BE-BABC-840585795D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*","matchCriteriaId":"E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2ACC829-CF64-4F20-8827-AA95002A6F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"05D4C98E-D127-40EB-BE71-A6BB91D4392C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C26B2DE-669F-4F79-99AE-3210662AAB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E4B64201-5B5B-4D22-B341-C601DC54BFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"44DA3E88-1572-484D-A4DB-A99EF7D73129"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E65F392-A841-461A-921C-91F40330F3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5A7F2F4E-7DCC-43F8-BB69-BE553C2F8F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1CDE3326-8B3F-4C3A-BA40-6F91CDFAFA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"36C4A673-5ACD-4D1A-A780-5CD279230051"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*","matchCriteriaId":"0534C39C-A421-4C97-8A96-A74ABFA78B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9BD0DFB0-92F1-4914-A637-A2EBCE0A9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E6354257-6B1A-4729-9EE2-19D3CD2AD62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4686B445-3843-4173-8565-16BF364EF911"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"1519A451-0EC8-4718-991D-948572C08410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9ACAA116-2853-456B-BC9C-B036A0F99FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A8AF5A1A-328E-43A1-8C41-0DAB1F337FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B3130CFD-FF94-48D2-BF9A-D7FDD3CD6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E6C869A-0307-40D9-85D6-05453B6BEA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"795B4F23-BA5E-466B-9FC3-C7A00A110774"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC1F099-04AC-4210-8477-07B21E087162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8F3A44D6-F174-428E-8456-5B7B093D7A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*","matchCriteriaId":"EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"CD5CB748-A953-4CAD-B8F9-21F43D2992E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*","matchCriteriaId":"A4843917-B7B1-4871-AE2B-2219C6EB85F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5rc1:*:*:*:*:*:*:*","matchCriteriaId":"A217F2AE-185D-4385-8804-475DB12CFA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*","matchCriteriaId":"CC99B93D-2171-40DE-90B3-61D6DB9F6D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*","matchCriteriaId":"8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN54824688/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000061.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/48511","source":"cve@mitre.org"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/libraries/js_escape.lib.php?r1=11514&r2=11603&pathrev=11603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/js_escape.lib.php?view=log&pathrev=11603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31992","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32954","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080924-1/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1675","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/22/2","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-8","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2657","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN54824688/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/libraries/js_escape.lib.php?r1=11514&r2=11603&pathrev=11603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/js_escape.lib.php?view=log&pathrev=11603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080924-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/22/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/downloads.php?relnotes=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4327","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T16:13:54.923","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of service (divide-by-zero error and persistent application crash) via this crash.ico file on the desktop, a different vulnerability than CVE-2007-2237."},{"lang":"es","value":"gdiplus.dll de GDI+ en Microsoft Windows XP SP3, no maneja adecuadamente los ficheros .ico, esto permite a atacantes remotos provocar una denegación de servicio (error de división entre cero y caída de la aplicación) a través de un determinado fichero crash.ico en un sitio web, y permite a atacantes asistidos por el usuario provocar una denegación de servicio (error de división entre cero y caída continua de la aplicación) mediante este fichero crash.ico en el escritorio. Se trata de una vulnerabilidad diferente de CVE-2007-2237."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31432","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45464","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6588","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4328","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.210","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the (1) item, (2) search_ordermethod, and (3) search_order parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en site_search.php de EasyRealtorPRO 2008 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) item, (2) search_ordermethod, y (3) search_order."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyrealtorpro:easyrealtorpro:2008:*:*:*:*:*:*:*","matchCriteriaId":"EE725E8A-14C9-425F-AB29-2A60122284A7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4337","source":"cve@mitre.org"},{"url":"http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496744/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31401","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45418","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496744/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4329","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en cms/system/openengine.php de openEngine 2.0 beta4 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro oe_classpath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0_beta4","matchCriteriaId":"54041464-0BFD-4F06-B27F-795C681E2CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5BACD83C-CEE5-4C9B-9092-B1681B9821CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:1.8_beta2:*:*:*:*:*:*:*","matchCriteriaId":"A9AFF99A-459E-4562-A7C6-937189A22CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:1.9_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D16B33E7-6B9A-4FD0-8450-AA358A037B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:1.9_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DD88D6B9-D588-406D-BC1E-F41A8D18A1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:1.9_beta3:*:*:*:*:*:*:*","matchCriteriaId":"1DC351F6-13DC-420B-8235-BCD2BCF37B2A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31413","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45435","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6571","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4330","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.257","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the design parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en LanSuite 3.3.2, permite a atacantes remotos ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"design\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lansuite:lansuite:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"288CA46C-C1BD-4690-886B-E986E45ECA36"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31402","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45583","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6562","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4331","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en library/pagefunctions.inc.php en phpOCS v0.1 beta3 y anteriores; permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro act de index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpocs:phpocs:*:beta3:*:*:*:*:*:*","versionEndIncluding":"0.1","matchCriteriaId":"425CC306-B476-48D6-BF69-29CB7562BE0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpocs:phpocs:0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"382A75D1-1795-4A98-AC6E-548ACCBD46ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpocs:phpocs:0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"CF338DA0-00EB-4C50-8253-17C46A852A33"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31392","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45424","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4332","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.287","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función showjavatopic de func.php en PHP infoBoard V.7 Plus  permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"idcat\" de showtopic.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cannot:php_infoboard:v.7:*:*:*:*:*:*:*","matchCriteriaId":"8A70605F-B020-4B9D-9EAA-2BEBD29161B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31977","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31405","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45440","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4333","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en PHP infoBoard versión V.7 Plus, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro isname en una acción newtopic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cannot:php_infoboard:v.7:*:*:*:*:*:*:*","matchCriteriaId":"8A70605F-B020-4B9D-9EAA-2BEBD29161B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31977","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31405","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45442","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4334","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.333","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1."},{"lang":"es","value":"PHP infoBoard V.7 Plus permite a atacantes remotos evitar la autenticación y obtener acceso como administrador estableciendo la cookie de información de usuario (inforuser) a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cannot:php_infoboard:v.7:*:*:*:*:*:*:*","matchCriteriaId":"8A70605F-B020-4B9D-9EAA-2BEBD29161B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31404","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6568","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4335","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.350","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apa_album_ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  album.php in Atomic Photo Album (APA) 1.1.0pre4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro apa_album_ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"D3D1795D-E84D-4C6F-BBDF-16D8956F66E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31409","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2691","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45433","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6572","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4336","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apa_album_ID parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en album.php de Atomic Photo Album (APA) 1.1.0pre4 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro apa_album_ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:constantin_charissis:atomic_photo_album:1.1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"CE8B0761-F558-4AFC-A93B-7399DE6F9044"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31409","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45432","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4337","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.397","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to (1) edit.php and (2) list.php in articles/; (3) list_blogs.php and (4) rankings.php in blogs/; (5) calendar/index.php; (6) calendar.php, (7) index.php, and (8) list_events.php in events/; (9) index.php and (10) list_galleries.php in fisheye/; (11) liberty/list_content.php; (12) newsletters/edition.php; (13) pigeonholes/list.php; (14) recommends/index.php; (15) rss/index.php; (16) stars/index.php; (17) users/remind_password.php; (18) wiki/orphan_pages.php; and (19) stats/index.php, different vectors than CVE-2007-0526 and CVE-2005-4379.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bitweaver 2.0.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"URL\" en (1) edit.php y (2) list.php en articles/; (3) list_blogs.php y (4) rankings.php en blogs/; (5) calendar/index.php; (6) calendar.php, (7) index.php, y (8) list_events.php en events/; (9) index.php y (10) list_galleries.php en fisheye/; (11) liberty/list_content.php; (12) newsletters/edition.php; (13) pigeonholes/list.php; (14) recommends/index.php; (15) rss/index.php; (16) stars/index.php; (17) users/remind_password.php; (18) wiki/orphan_pages.php; y (19) stats/index.php, vectores distintos a CVE-2007-0526 y CVE-2005-4379. \r\n\r\nNOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BAA2896F-D3E4-489D-A08F-7B2E926182C0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31395","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4338","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.413","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brilliant Gallery 5.x and 6.x, a module for Drupal, allows remote authenticated users with \"access brilliant_gallery\" permissions to execute arbitrary SQL commands via the (1) nid, (2) qid, (3) state, and possibly (4) user parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función brilliant_gallery_checklist_save bgchecklist/save  en el módulo para Drupal Brilliant Gallery Script v5.x y 6.x, permite a usuarios autenticados remotamente con permisos \"access brilliant_gallery\" ejecutar comandos SQL de su elección a través de los parámetros (1) \"nid\", (2) \"qid\", (3) \"state\" y posiblemente (4) \"user\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vacilanda:brilliant_gallery:*:*:*:*:*:*:*:*","matchCriteriaId":"0EF586D0-CB36-49F8-A78E-6B02335AD310"},{"vulnerable":true,"criteria":"cpe:2.3:a:vacilanda:brilliant_gallery:5:*:*:*:*:*:*:*","matchCriteriaId":"4F20C3A2-7A83-4889-B9C3-D6902AC3D1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vacilanda:brilliant_gallery:6:*:*:*:*:*:*:*","matchCriteriaId":"3FE13633-5067-4FA9-B174-1F4DA27F0271"}]}]}],"references":[{"url":"http://drupal.org/node/313054","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064662.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4338","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496726/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31387","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45411","source":"cve@mitre.org"},{"url":"http://drupal.org/node/313054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064662.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496726/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4339","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.443","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to \"bpjava* binaries.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Java Administration GUI (jnbSA) de Symantec Veritas NetBackup Server y NetBackup Enterprise Server v5.1 antes de MP7, v6.0 antes de  MP7, y v6.5 antes de v6.5.2 permite a usuarios autenticados obtener privilegios a través de vectores de ataque desconocidos relacionados a \"binarios bpjava*\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_enterprise_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"41EACE89-5A6D-44C6-8E58-F3773FA24F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_enterprise_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"557DE286-5961-46B0-AB74-1FAB81214200"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_enterprise_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"16280E59-273D-4A09-A7A0-24C102746715"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C6C3B5DE-1376-4079-B16D-2DF63BB1B7D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"691FB20C-C2F7-4E04-9296-CDB3289FEA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"0A3134C1-5569-4161-8251-4B6055858977"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31221","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020928","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4340","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.460","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an HTML document containing a carriage return (\"\\r\\n\\r\\n\") argument to the window.open function."},{"lang":"es","value":"Google Chrome 0.2.149.29 y 0.2.149.30, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un documento HTML que contiene un argumento de retorno de carro  en la función window.open."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"}]}]}],"references":[{"url":"http://secniche.org/gcrds.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4339","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496688/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31375","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45403","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6554","source":"cve@mitre.org"},{"url":"http://secniche.org/gcrds.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496688/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4341","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin."},{"lang":"es","value":"add.php en MyBlog v0.9.8 y anteriores permite a atacantes remotos evitar la autenticación y obtener acceso con privilegios de administrador asignando el valor admin=yes y login=admin en la cookie de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8","matchCriteriaId":"D85F729F-EE5D-43D3-8894-E58C9ADE879F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31311","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2654","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45576","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6531","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4342","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.507","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs."},{"lang":"es","value":"El control ActiveX de NMSDVDX.DVDEngineX.1 (biblioteca NMSDVDX.dll) de NuMedia Soft NMS DVD Burning SDK Activex versión 1.013C y anteriores, tal como es usado en CDBurnerXP versión 4.2.1.976, BurnAware versión 2.1.3, Blaze Media Pro versión 8.02 Edición Especial, y posiblemente otros productos, permite a los atacantes remotos sobrescribir y crear archivos arbitrarios por medio de llamadas a los métodos EnableLog y LogMessage. NOTA: este problema solo podría ser explotable en entornos limitados o configuraciones de navegador no predeterminadas. NOTA: algunos de estos detalles son obtenidos de información de terceros. NOTA: esto puede ser aprovechado para la ejecución de código remota mediante el acceso a archivos usando las URL hcp://."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:free:*:*:*:*:*","matchCriteriaId":"68B389E7-BC30-4955-826F-C391031ED019"},{"vulnerable":true,"criteria":"cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:home:*:*:*:*:*","matchCriteriaId":"FFCB0E22-3CA2-4785-882E-C63F17B7F731"},{"vulnerable":true,"criteria":"cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:professional:*:*:*:*:*","matchCriteriaId":"2545356E-7888-42FA-A5A5-A7C63C4B953D"},{"vulnerable":true,"criteria":"cpe:2.3:a:impressum:cdburnerxp:4.2.1.976:*:*:*:*:*:*:*","matchCriteriaId":"0CF01099-9B7D-478C-BC6F-283930174F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:numedia_soft:numedia_dvd_burning_sdk:1.008:*:*:*:*:*:*:*","matchCriteriaId":"FF824977-059F-45C0-8B36-C058FDBB6376"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_numedia_xpl.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31936","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497831/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31374","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45330","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6491","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_numedia_xpl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497831/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4343","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.537","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) SaveToTempFile, or (3) AppendBinary method.  NOTE: this issue might only be exploitable in limited environments or non-default browser settings.  NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs."},{"lang":"es","value":"El control ActiveX Chilkat XML ChilkatUtil.CkData.1 (ChilkatUtil.dll) 3.0.3 y versiones anteriores permite a atacantes remotos crear, sobrescribir, y modificar ficheros de su elección a través de una llamada a los métodos (1) SaveToFile, (2) SaveToTempFile, o (3) AppendBinary.\r\nNOTA: esta cuestión sólo puede ser explotada en entornos limitados o configuración del navegador no por defecto.\r\nNOTA: esto puede ser aprovechado para la ejecución de código remoto mediante el acceso a los ficheros utilizando URLs hcp://."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:chilkat_xml_activex_control:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3.0","matchCriteriaId":"BF53F3B6-C7F8-44A6-82E7-10BBF48F6E02"}]}]}],"references":[{"url":"http://secunia.com/advisories/31951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31332","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/xplits/TXT_rNowA1916DKFNUF48NyS","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45333","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/xplits/TXT_rNowA1916DKFNUF48NyS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4344","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T17:22:09.553","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cat.php de 6rbScript permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro CatID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:6rbscript:6rbscript:*:*:*:*:*:*:*:*","matchCriteriaId":"63CE0211-9C97-4B72-A0DD-9B15D20A3594"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/6rbscriptcat-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31945","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45339","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/6rbscriptcat-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4345","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en download.php en WebPortal CMS v0.7.4 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de una el parámetro \"aid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.4","matchCriteriaId":"6A483803-510D-4C60-9B02-179F19BAF43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"374297B1-97B4-45ED-AEEC-DA828D42B99C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:0.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"56776AA3-3EAD-479E-9E45-3AEF312868BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6505AF02-3530-4000-95CB-32648DFBEEB8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31156","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2560","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6443","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4346","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.623","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to comments.php, a different vector than CVE-2008-3371."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en TalkBack 2.3.6 y 2.3.6.4 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro languaje (lengua) a comments.php, un vector distinto a CVE-2008-3371."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talkback:talkback:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"731C4D54-AA52-4532-BF43-84CDBA1935A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:talkback:talkback:2.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A481FB4A-9164-4C80-B3C0-AF7FBFB732B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4267","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31164","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45102","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4347","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en newskom.php de Powie pNews 2.03 permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante el parámetro newsid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pnews:2.03:*:*:*:*:*:*:*","matchCriteriaId":"84B15555-109F-4E04-A63A-24D4BD1E64E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31160","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45114","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6447","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4348","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo photo.php en PHPortfolio, posiblemente versión 1.3, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:outshine:phportfolio:-:*:*:*:*:*:*:*","matchCriteriaId":"7046E6BE-D249-4E0E-8084-070020AF7F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:outshine:phportfolio:1.3:*:*:*:*:*:*:*","matchCriteriaId":"22518F9E-04A3-4EC6-8604-68CA1C1C62D9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31828","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31143","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45078","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4349","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) page parameter in a details action."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de comandos en sitios cruzados (XSS) en news.php de s0nic Paranews 3.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) id or (2) page en una acción details."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s0nic:paranews:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AB7199B6-C0FA-4264-AF97-54940FAC1A25"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/paranews-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31152","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45101","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/paranews-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4350","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main.php de vbLOGIX Tutorial Script 1.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_id en una acción list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vblogix:tutorial_script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"3EA0466D-DD7D-4725-84C4-0C0D90CF536A"}]}]}],"references":[{"url":"http://osvdb.org/48107","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31829","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31157","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2563","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45108","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6446","source":"cve@mitre.org"},{"url":"http://osvdb.org/48107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4351","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the p parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en phpSmartCom 0.2, permite a atacantes remotos incluir y ejecutar archivos de su elección a través de ..(punto punto) en el parámetro \"p\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpsmartcom:phpsmartcom:0.2:*:*:*:*:*:*:*","matchCriteriaId":"4B85A557-56C7-4895-A552-40D0F9DEF448"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31167","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45125","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6452","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4352","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.763","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en nc/pages/viewprofile.php en phpSmartCom 0.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"uid\" en una acción \"viewprofile\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpsmartcom:phpsmartcom:0.2:*:*:*:*:*:*:*","matchCriteriaId":"4B85A557-56C7-4895-A552-40D0F9DEF448"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31167","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45126","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6452","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4353","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. NOTE: although one component of Linkarity is distributable PHP code, this issue might be site-specific. If so, it should not be included in CVE."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en link.php en Linkarity, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_id\". NOTA: aunque un componente de linkarity se distribuye como código PHP, esta cuestión afecta exclusivamente al sitio web. si así fuera no debería ser incluida en el CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkarity:linkarity:*:*:*:*:*:*:*:*","matchCriteriaId":"80AB3E0B-7961-4F51-B360-DFED4503D5E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45100","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4354","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.810","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo \"products\" en NetArt Media iBoutique 4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net_art_media:iboutique:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B4670C1A-D2C5-44F3-86B9-1E121199C414"}]}]}],"references":[{"url":"http://secunia.com/advisories/31871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31159","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2561","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45110","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6444","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4355","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"The vulnerability is reported in version 1.30. Other versions may also be affected but have not been proven.","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showprofil.php en Powie PSCRIPT Forum (también conocido como PHP Forum o pForum) 1.30 y anteriores, permite a atacantes remotos ejecutar comando SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.30:*:*:*:*:*:*:*","matchCriteriaId":"1E0B4A5A-16B5-4B51-AD29-F08EEA190D19"}]}]}],"references":[{"url":"http://secunia.com/advisories/31872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31150","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45079","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6442","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4356","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.857","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News module; (2) the vid parameter to index.php in a Result action to the Voting module; (3) the fid parameter to index.php in a ShowForum action to the Forum module; (4) the tid parameter to index.php in a ShowTopic action to the Forum module; (5) the uname parameter to index.php in a UserInfo action to the Account module; or (6) the module parameter to index.php, probably related to the TopSites module."},{"lang":"es","value":"Múltiples vulnerabilidades SQL en Kasseler CMS 1.1.0 y 1.2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"nid\" al index.php en una acción View al módulo  News; (2) \"vid\" al  index.php en una acción Result al módulo Voting ; (3) \"fid\" al index.php en una acción  ShowForum al módulo Forum; (4) \"tid\" al index.php en una acción ShowTopic al módulo Forum; (5) \"uname\" al index.php en una acción UserInfo al módulo Account; o (6) \"module\" al index.php, probablemente relacionado con el módulo TopSites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C19E5E3F-6B12-4763-892D-E58628CDFC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:1.2.0:lite:*:*:*:*:*:*","matchCriteriaId":"4CCC4E4C-B6EE-49E1-983F-1A83F5F4220D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31170","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45120","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4357","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.873","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en linkto.php en Powie pLink 2.07, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:plink:2.07:*:*:*:*:*:*:*","matchCriteriaId":"58CF3E1F-7A6A-4135-93A8-CB2C0AB9AD8F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31163","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45115","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6449","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4358","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T18:15:08.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name."},{"lang":"es","value":"Vulnerabilidad sin especificar en class/theme.class.php en SPAW Editor PHP Edition 2.0.8.1 tiene un impacto y vectores de ataque desconocidos, probablemente relacionados con las secuencias transversales de salto de directorio en el nombre \"theme\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8","matchCriteriaId":"6F544164-4510-46D3-AAD3-1E6F06E1D7D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0971506E-CA54-4A9A-826D-BD367C19A2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"16AE05A7-82E0-4320-9B13-0EC04C1D73F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C3BE436B-CC61-4037-BD27-9E393DDE19A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7CC7F0EF-5C67-4AF1-B837-055E4DA349F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CD7DB482-8D93-4FD6-BAE0-81D484843E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C2375362-A03D-4E87-914C-F8B5EDBCD1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"66A3ED26-3B53-4886-8FCA-4B05C0064A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"01252EAC-AE95-4ED3-A6F2-AEDFBC352B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B9314F2C-43CF-488E-8F80-1E665B1E62CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FDD4E921-D01F-4165-99FA-F921C63374E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CB28C8A-DED5-4FCC-AF7D-3B63AD5CF8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.1:*:*:*:*:*:*:*","matchCriteriaId":"235D1152-F7AD-493B-8407-524B04DFEF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"8357ADA5-9E54-43E1-AD2E-BC8CBE49A888"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"58BE8F2D-0DEE-4326-91B6-030EC143A8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B8BA3521-7A6F-44FA-88A7-70E950700DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"2471F346-CB24-48A9-A692-022563B0F107"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.2:beta_2:*:*:*:*:*:*","matchCriteriaId":"11C4D204-F801-493C-B560-3E66460A6BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D3F9CB96-13CE-4A80-B056-F8C941A02976"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9C6C619F-EF81-415B-9B55-4D5D418DEFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"37842F25-59E4-42A0-B8B7-65118FB6F05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B46B16C9-0723-488D-AFB9-5FCCBA23CFA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"E73FC77A-9256-4AED-A346-78D232260124"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.0:rc:*:*:*:*:*:*","matchCriteriaId":"D8970BBD-46B2-411B-975E-FFA535FC513D"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"89D8AABC-9FB3-4C7C-93B6-915B5BF71E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6F94244D-6AD4-4770-B498-0636E359435E"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F23EA6FD-6951-4413-B747-96EA469825DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1C46F19C-2DE3-4C40-9F28-0B7D1C6C44B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"D57B47C9-61D5-437F-8DFE-8875341AB960"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"D9C33FA9-84B7-45D4-A5B1-127D34C28408"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7E1554C2-AF1C-4451-8F70-98917D2A5492"},{"vulnerable":true,"criteria":"cpe:2.3:a:spaw_editor:spaw_php:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"579C4163-F550-40D7-9561-449971D0E6B0"}]}]}],"references":[{"url":"http://blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=625333&group_id=77954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31185","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45104","source":"cve@mitre.org"},{"url":"http://blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=625333&group_id=77954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4359","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data."},{"lang":"es","value":"lighttpd versiones anteriores a v1.4.20 compara URIs con patrones en los ajustes de configuración (1) url.redirect y (2) url.rewrite antes de realizar la decodificación de URL, lo cual puede permitir a atacantes remotos evitar restricciones de acceso intencionado, y obtener información sensible o posiblemente modificar datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.20","matchCriteriaId":"26A3F66A-350C-4592-9E11-855B5DFAE013"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/1","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32069","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32132","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32480","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-04.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2278","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2307","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2309","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2310","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/1720","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1645","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd-1.4.x_rewrite_redirect_decode_url.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497932/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31599","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2741","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45690","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/1720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd-1.4.x_rewrite_redirect_decode_url.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4360","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.447","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files."},{"lang":"es","value":"mod_userdir de lighttpd versiones anteriores a  v1.4.20, cuando un sistema operativo insensible a mayúsculas o minúsculas o sistemas de ficheros son utilizados, realiza comparaciones entre mayúsculas y minúsculas en componentes de nombres de ficheros en las opciones de configuración, lo cual puede permitir a atacantes remotos evitar restricciones de acceso intencionadas, como lo demostrado por un fichero .PHP cuando hay una regla de configuración de ficheros .php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.20","matchCriteriaId":"26A3F66A-350C-4592-9E11-855B5DFAE013"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32069","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32132","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32480","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-04.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2283","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2308","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/1589","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1645","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd-1.4.x_userdir_lowercase.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497932/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31600","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2741","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45689","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2008/09/30/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/changeset/2308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.lighttpd.net/trac/ticket/1589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd-1.4.x_userdir_lowercase.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4361","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T23:24:53.527","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary files via a .. (dot dot) in the path parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en PowerPortal 2.0.13, permite a atacantes remotos listar y posiblemente leer ficheros de su elección a través de ..(punto punto) en el parámetro \"path\" a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"03F92D3F-2F5C-43D9-B12D-D5C87E5DB445"}]}]}],"references":[{"url":"http://secunia.com/advisories/32031","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4340","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31454","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45491","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4362","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T23:24:53.587","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to \\Device\\DLPTokenWalter0."},{"lang":"es","value":"El controlador Virtual Token (vdlptokn.sys) 1.0.2.43 en DESlock+ 3.2.7, permite a usuarios locales provocar una denegación de servicio (caída de sistema) a través de peticiones IOTCL manipuladas a \\Device\\DLPTokenWalter0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deslock:deslock:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD625B2-C9BE-42FE-AF96-90BE16A09F41"}]}]}],"references":[{"url":"http://secunia.com/advisories/31921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4341","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2638","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6515","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4363","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T23:24:53.603","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially execute arbitrary code via a certain DLMFENC_IOCTL request to \\\\.\\DLKPFSD_Device that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was intended."},{"lang":"es","value":"DLMFENC.sys v1.0.0.28 de DESlock+ v3.2.7 permite a usuarios locales provocar una caída del sistema (system crash) o ejecutar potencialmente código de su elección a través de ciertas peticiones a \\\\.\\DLKPFSD_Device que sobrescriben un puntero, lo que probablemente esté relacionado con el uso de la función ProbeForRead cuando debería haberse ejecutado ProbeForWrite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deslock:deslock:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD625B2-C9BE-42FE-AF96-90BE16A09F41"}]}]}],"references":[{"url":"http://digit-labs.org/files/exploits/deslock-probe-read.c","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4342","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2638","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6498","source":"cve@mitre.org"},{"url":"http://digit-labs.org/files/exploits/deslock-probe-read.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4364","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T23:24:53.637","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the \"page\" page and (2) txtSearch parameter in the \"Search\" page."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.aspx de ParsaGostar ParsaWeb CMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1)\"id\" en la página \"page\" y a través del parámetro (2)\"tctSearch\" en la página \"Search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parsagostar:parsaweb_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"5A3FE7B5-7E1B-4411-BF4F-AB8AACEC4F89"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4343","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_53.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496799/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31450","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45494","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6610","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_53.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496799/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4365","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T23:24:53.650","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en Siteman v1.1.11 y anteriores permite a atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través de vectores no especificados. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"050F564D-3767-456B-A409-0EC9981A972E"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795D113C-63C7-4C01-B743-FFBCB1395DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"794BFBDB-D4CF-466B-AF01-69B7432D5795"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteman:siteman:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"2DD032BB-869C-4DAF-A54A-FADC314B9C16"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4366","sourceIdentifier":"cve@mitre.org","published":"2008-09-30T23:24:53.683","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/upload."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en el componente de subida de imagenes en Camera Life 2.6.2b4, permite a usuarios autenticados remotos ejecutar código de su elección mediante la subida de un fichero con la extensión de un ejecutable y el posterior acceso a él a través de una petición directa a el fichero en el directorio del usuario bajo images/photos/upload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:camera_life:camera_life:2.6.2b4:*:*:*:*:*:*:*","matchCriteriaId":"8A6AC95D-6758-4AD6-8399-785E33D9EEDB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4344","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31456","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45492","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6594","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4368","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:32.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension (JCE) key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE."},{"lang":"es","value":"La configuración por defecto de Java 1.5 en Mac OS X 10.5.4 y 10.5.5 de Apple tiene una política de jurisdicción que limita los tamaños de claves de la Extensión de Criptografía de Java (JCE) a 128 bits, lo que facilita a los atacantes descifrar texto cifrado por JCE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3179","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45650","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4369","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:32.747","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pics.php de Availscript Photo Album permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_photo_album:*:*:*:*:*:*:*:*","matchCriteriaId":"3D065973-5530-44DD-8FFF-8CDC38F75CB7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31085","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45017","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6411","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4370","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.700","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Availscript Photo Album permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) sid a pics.php y (2) a a view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_photo_album:*:*:*:*:*:*:*:*","matchCriteriaId":"3D065973-5530-44DD-8FFF-8CDC38F75CB7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31085","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45018","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6411","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4371","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.747","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en articles.php de AvailScript Article Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro aIDS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_article_script:*:*:*:*:*:*:*:*","matchCriteriaId":"352D7827-379E-4A41-ABBD-27558E7C784E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31816","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31095","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45019","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4372","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.793","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en articles.php de AvailScript Article Script permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro aIDS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_article_script:*:*:*:*:*:*:*:*","matchCriteriaId":"352D7827-379E-4A41-ABBD-27558E7C784E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31816","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31095","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45020","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4373","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.823","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en job_seeker/applynow.php de AvailScript Job Portal Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro jid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_jobs_portal_script:*:*:*:*:*:*:*:*","matchCriteriaId":"855C7D0D-6647-495E-A374-447583CF4DAF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4332","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31101","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45041","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6417","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4374","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.840","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de CMS Buzz permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción playgame."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsbuzz:cms_buzz:*:*:*:*:*:*:*:*","matchCriteriaId":"2DB9B3F6-1B2B-4D4D-BDDF-5BF4466E64AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4333","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31097","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45014","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4375","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.870","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewprofile.php de Availscript Classmate Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro p."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_classmate_script:*:*:*:*:*:*:*:*","matchCriteriaId":"1E36F755-231D-4088-9FE1-01D80D46F74A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4334","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31100","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45025","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6412","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4376","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.903","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Live TV Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro mid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livetvscript:live_tv_script:*:*:*:*:*:*:*:*","matchCriteriaId":"5A3DD2D5-5F46-44DC-BD79-75D39E625122"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6404","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4377","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.917","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.asp de Creative Mind Creator CMS 5.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro sideid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:creative_mind:creator_cms:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C4EB14F0-CB07-460E-83C0-B26E0AE4AB22"}]}]}],"references":[{"url":"http://osvdb.org/47979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31819","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4335","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6405","source":"cve@mitre.org"},{"url":"http://osvdb.org/47979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4378","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.950","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en report.php de Mr. CGI Guy Hot Links SQL-PHP 3.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mr._cgi_guy:hot_links_sql_php:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"819DC648-1693-44F3-A27F-A7CF099AF314"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4336","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31078","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44991","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6403","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8918","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4379","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en report.php de Mr. CGI Guy Hot Links SQL-PHP 3.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mr._cgi_guy:hot_links_sql_php:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"819DC648-1693-44F3-A27F-A7CF099AF314"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44992","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6403","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4380","sourceIdentifier":"cve@mitre.org","published":"2008-10-01T15:38:36.980","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and \"/x\" characters."},{"lang":"es","value":"La interfaz web en Samsung DVR SHR2040 permite a atacantes remotos provocar una denegación de servicio (caída) mediante una petición HTTP mal formada, relacionado con el filtro para propiedades de configuración e caracteres \"/x\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:samsung:dvr_shr2040:b3.03e-k1.53-v2.19_0705281908:*:*:*:*:*:*:*","matchCriteriaId":"10F543CD-4382-4A59-A38C-8849044BFED1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31047","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sybsecurity.com/advisors/SYBSEC-ADV16-Samsung_DVR_SHR_2040_HTTPD_Remote_Denial_Of_Service","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44995","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sybsecurity.com/advisors/SYBSEC-ADV16-Samsung_DVR_SHR_2040_HTTPD_Remote_Denial_Of_Service","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4381","sourceIdentifier":"cve@mitre.org","published":"2008-10-02T18:18:05.837","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters."},{"lang":"es","value":"El navegador Microsoft Internet Explorer v7 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de Javascript que llama a la función alert con una cadena codificada en formato URL de un número largo de caracteres inválidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4345","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/03/7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/03/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496830/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496926/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45639","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/03/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/03/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496830/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496926/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4382","sourceIdentifier":"cve@mitre.org","published":"2008-10-02T18:18:05.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters."},{"lang":"es","value":"Konqueror de KDE v3.5.9 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un Javascript que llama a la función alert con una cadena codificada en formato URL de un número largo de caracteres inválidos."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider a crash of a client application such as Konqueror to be a security issue.","lastModified":"2017-08-07T21:32:36.217"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"4A1F1157-C9DB-43EF-B215-04E7FBDD8E17"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/496849/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45645","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496849/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4383","sourceIdentifier":"cret@cert.org","published":"2008-10-03T22:22:41.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servidor web de gestión embebido Agranet-Emweb de Alcatel OmniSwitch dispositivos OS7000, OS6600, OS6800, OS6850, y OS9000 Series con AoS 5.1 versiones anteriores a v5.1.6.463.R02, 5.4 versiones anteriores a v5.4.1.429.R01, 6.1.3 versiones anteriores a v6.1.3.965.R01, 6.1.5 versiones anteriores a v6.1.5.595.R01, y 6.3 versiones anteriores a v6.3.1.966.R01 permite a atacantes remotos ejecutar código de su elección a través de una cookie Session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1","versionEndExcluding":"5.1.6.463.r02","matchCriteriaId":"C6A279F1-071D-4863-9B8A-203DC16F93B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"5.4.1.429.r01","matchCriteriaId":"F42552F9-66F9-4BAE-B9D1-A26493BFC03B"},{"vulnerable":true,"criteria":"cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.3","versionEndExcluding":"6.1.3.965.r01","matchCriteriaId":"BD33FE30-180C-4595-A132-FAFD6DF3ACB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.5","versionEndExcluding":"6.1.5.595.r01","matchCriteriaId":"48CD9501-9110-4BDB-8BB8-E1E109A0E902"},{"vulnerable":true,"criteria":"cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.3.1.966.r01","matchCriteriaId":"3B8892FF-96F1-4249-A9E2-DCCB0B251CA6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:alcatel-lucent:omniswitch:os6600:*:*:*:*:*:*:*","matchCriteriaId":"18275D45-CBFB-4F72-AED3-50CF6B26A58D"},{"vulnerable":false,"criteria":"cpe:2.3:h:alcatel-lucent:omniswitch:os6800:*:*:*:*:*:*:*","matchCriteriaId":"9EABF0C1-2359-445F-B5E2-72E754F72C9D"},{"vulnerable":false,"criteria":"cpe:2.3:h:alcatel-lucent:omniswitch:os6850:*:*:*:*:*:*:*","matchCriteriaId":"3EAD34DA-3CB4-4E7E-B486-07E9F2796AC3"},{"vulnerable":false,"criteria":"cpe:2.3:h:alcatel-lucent:omniswitch:os7000:*:*:*:*:*:*:*","matchCriteriaId":"A3768D0F-92EC-4F4B-AD24-11B0459903AF"},{"vulnerable":false,"criteria":"cpe:2.3:h:alcatel-lucent:omniswitch:os9000:*:*:*:*:*:*:*","matchCriteriaId":"FE7A3488-15B6-4EB3-B478-5EF005997EB2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31435","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4347","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.layereddefense.com/alcatel12aug.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495343/100/0/threaded","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30652","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020657","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2346","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44400","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.layereddefense.com/alcatel12aug.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/495343/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4384","sourceIdentifier":"cret@cert.org","published":"2008-10-07T20:00:17.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control ActiveX MGI Software LPViewer (LPControl.dll), adquirido por Roxio y iseemedia, permite a los atacantes remoto ejecutar arbitrariamente código, a través de (1) url, (2) toolbar y (3) métodos enableZoomPastMax ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iseemedia:lpviewer:*:*:*:*:*:*:*:*","matchCriteriaId":"8F6D98F4-A143-4D58-AB55-189EFD7DF1EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mgi_software:lpviewer:*:*:*:*:*:*:*:*","matchCriteriaId":"FF5732B5-E262-4638-8B5B-5B751A2A94F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roxio:lpviewer:*:*:*:*:*:*:*:*","matchCriteriaId":"A5F79B6C-9359-4A48-8206-CE8FA305338A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32140","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/848873","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31604","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/2749","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45699","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/848873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/31604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4385","sourceIdentifier":"cret@cert.org","published":"2008-10-14T21:10:35.643","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar."},{"lang":"es","value":"Husdawg, LLC Systems Requirements Lab versión 3, tal y como es usado por Instant Expert Analysis, permite a los atacantes remotos forzar la descarga y ejecución de programas arbitrarios por medio de la especificación de un argumento website malicioso para el método Init en (1) un cierto control ActiveX (en archivo sysreqlab2.cab, en bibliotecas sysreqlab.dll, sysreqlabsli.dll o sysreqlab2.dll) y (2) un determinado applet Java en RLApplet.class en sysreqlab2.jar o sysreqlab.jar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:systemrequirementslab:system_requirements_lab:3:*:*:*:*:*:*:*","matchCriteriaId":"C1F6A998-055A-4566-8F74-132EEEFEE311"}]}]}],"references":[{"url":"http://secunia.com/advisories/32236","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/166651","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.sec-consult.com/files/20081016-0_sysreqlab.txt","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/497400","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/31752","source":"cret@cert.org"},{"url":"http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45873","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/32236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/166651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.sec-consult.com/files/20081016-0_sysreqlab.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4387","sourceIdentifier":"cret@cert.org","published":"2008-11-10T16:15:04.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information (SAP Login Required) = http://service.sap.com/sap/support/notes/1142431","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer."},{"lang":"es","value":"Vulnerabilidad no especificada en el control ActiveX  MDrmSap de Simba en mdrmsap.dll en SAP SAPgui permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos que involucran la instanciación por Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:*:*:*:*:*:*:*:*","matchCriteriaId":"2B5B9DE5-0BD7-48C8-B09C-1F1E1AB58F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:simba_technologies:mdrmsap_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"9956870B-8039-46E9-9839-ECD464D08CE8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://osvdb.org/49721","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/277313","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32186","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2008/3106","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46440","source":"cret@cert.org"},{"url":"http://osvdb.org/49721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/277313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4390","sourceIdentifier":"cret@cert.org","published":"2008-12-09T00:30:00.237","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network."},{"lang":"es","value":"La cámara de vídeo inalámbrica Linksys WVC54GC de Cisco con firmware anterior al 1.25, envía en texto plano los datos de configuración en una respuesta al comando Setup Wizard remote-management, lo que permite a atacantes remotos obtener información sensible como contraseñas rastreando la red."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:linksys_wvc54gc_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.25","matchCriteriaId":"AB178094-7CC3-466B-981D-1E68979F41E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:linksys_wvc54gc:-:*:*:*:*:*:*:*","matchCriteriaId":"0698E417-EEDE-40E4-AAD5-CF890FC7BEB1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33032","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/528993","source":"cret@cert.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7HJKSA","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobheadervalue2=inline%3B+filename%3DWVC54GC-V1.0_non-RoHS-v1.25_fw_ver.txt&blobkey=id&blobtable=MungoBlobs&blobwhere=1193776031728&ssbinary=true&lid=8104724130B17","source":"cret@cert.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/32666","source":"cret@cert.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/33032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/528993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7HJKSA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobheadervalue2=inline%3B+filename%3DWVC54GC-V1.0_non-RoHS-v1.25_fw_ver.txt&blobkey=id&blobtable=MungoBlobs&blobwhere=1193776031728&ssbinary=true&lid=8104724130B17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/32666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4391","sourceIdentifier":"cret@cert.org","published":"2008-12-09T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método SetSource del control ActiveX CamPlayerWeb11gv2 de NetCamPlayerWeb11gv2.ocx en la cámara de vídeo sin cables Cisco Linksys WVC54GC anterior al software empotrado (firmware) v1.25; permite a atacantes remotos ejecutar código de su elección a través de argumentos largos no válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gc:*:*:*:*:*:*:*:*","versionEndIncluding":"1.19","matchCriteriaId":"C882AB42-F04C-4968-A9C9-035A7411153E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gc:1.15:*:*:*:*:*:*:*","matchCriteriaId":"39AE4F03-2623-476F-BFBF-5D458432BAEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33032","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/639345","source":"cret@cert.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/WDON-7M2U52","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32665","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/639345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/WDON-7M2U52","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4393","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T20:00:17.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Login required for vendor patch.","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to zodiac/servlet/zodiac."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en VeriSign Kontiki Delivery Management System (DMS) 5.0 y versiones anteriores, que permite a los atacantes remotos ejecutar arbitrariamente una secuencia de comandos web o HTML a través el parámetro action para zodiac/servlet/zodiac."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verisign:kontiki_delivery_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"E51F49FD-A4BC-42CA-98D4-3E02985506C1"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2008/Oct/0054.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.irmplc.com/researchlab/advisories/170","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31580","source":"cve@mitre.org"},{"url":"https://customersupport.kontiki.com/software/patch-20102","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45670","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Oct/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.irmplc.com/researchlab/advisories/170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://customersupport.kontiki.com/software/patch-20102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4394","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.200","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds."},{"lang":"es","value":"Múltiples vulnerabilidades de búsqueda en ruta no confiable en Portage en versiones anteriores a la v2.1.4.5 incluido el directorio actual de trabajo que permite a usuarios locales ejecutar código de su elección a traves de un modulo modificado de Python que se carga a traves de (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds y otros ebuilds"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.4.4","matchCriteriaId":"DF07C844-F3BF-4B64-9067-019011E752E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:2.0.51.22:r3:*:*:*:*:*:*","matchCriteriaId":"B1A333DF-BC3A-4DDE-A5E3-41FF1EBD78A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:2.1.1:r2:*:*:*:*:*:*","matchCriteriaId":"A8469FBB-223E-43B5-8708-B984E72A683F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:2.1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"F663C7AD-8AEF-4C78-A501-FC72C49F9ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:2.1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"4CA86E5F-4496-4485-99B7-24BB4EDEEAE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32228","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200810-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31670","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200810-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4395","sourceIdentifier":"security@ubuntu.com","published":"2008-11-06T15:55:51.667","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el modulo ndiswrapper v1.53 en el kernel de Linux v2.6 permite a atacantes remotos ejecutar código a su elección mediante el envío de paquetes a través de una red inalámbrica local que obligue a tener un ESSID largo."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. ndiswrapper is not shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2008-11-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:C/I:C/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.3},"baseSeverity":"HIGH","exploitabilityScore":6.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26","matchCriteriaId":"3AE239CC-BC6E-4102-BE54-A49ADB24AB30"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=239371","source":"security@ubuntu.com"},{"url":"http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/32509","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/frugalware-git%40frugalware.org/msg22366.html","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/32118","source":"security@ubuntu.com"},{"url":"http://www.securitytracker.com/id?1021142","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-662-1","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-662-2","source":"security@ubuntu.com"},{"url":"https://bugs.launchpad.net/bugs/cve/2008-4395","source":"security@ubuntu.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/linux/+bug/275860","source":"security@ubuntu.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46437","source":"security@ubuntu.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=239371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/frugalware-git%40frugalware.org/msg22366.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-662-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-662-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/bugs/cve/2008-4395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/linux/+bug/275860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4396","sourceIdentifier":"cve@mitre.org","published":"2008-10-02T20:37:29.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via an executable with malformed version data."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Safer Networking FileAlyzer v1.6.0.0 y v1.6.0.4 beta, y posiblemente otras versiones, permite a atacantes remotos con usuario asistido ejecutar código de su elección a través de un ejecutable con la versión de datos malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safer_networking:filealyzer:1.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B128A869-7059-4BF6-87D2-E1A2712E8084"},{"vulnerable":true,"criteria":"cpe:2.3:a:safer_networking:filealyzer:1.6.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"9A1867CC-BB24-4DFE-B9BD-DD01248AAB0C"}]}]}],"references":[{"url":"http://forums.spybot.info/showthread.php?t=34737","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/09/filealyzer-1604-stak-overflow.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-advisories/filealyzer-overflow.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31474","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45516","source":"cve@mitre.org"},{"url":"http://forums.spybot.info/showthread.php?t=34737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lostmon.blogspot.com/2008/09/filealyzer-1604-stak-overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0809-advisories/filealyzer-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4397","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.677","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la interfaz RPC (asdbapi.dll) en CA ARCserve Backup (antes BrightStor ARCserve Backup) vr11.1 hasta vr12.0 permite a atacantes remotos ejecutar comandos de su elección a través de .. (punto punto) en una llamada RPC con un opnum 0x10A."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AB3E8F-50D3-41EC-BC2B-CF86FB4801E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"9389EFCA-4989-4946-A92C-8C54EE9E55B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"97C8F8E4-C75F-49FF-82AA-295286BA26CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*","matchCriteriaId":"05B760BC-64EF-4BE1-BBB5-70B9DCC5E74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*","matchCriteriaId":"19A3DA98-A072-4EE3-8542-A0AF89F9DBCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497281/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31684","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021032","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45774","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497281/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4398","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.707","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request."},{"lang":"es","value":"Vulnerabilidad no especificada en el servicio de motor de cinta en asdbapi.dll de CA ARCserve Backup (anteriormente BrightStor ARCserve Backup) de r11.1 a r12.0 permite a atacantes remotos provocar una denegación de servicio (caída) mediante una petición manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AB3E8F-50D3-41EC-BC2B-CF86FB4801E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"9389EFCA-4989-4946-A92C-8C54EE9E55B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"97C8F8E4-C75F-49FF-82AA-295286BA26CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*","matchCriteriaId":"05B760BC-64EF-4BE1-BBB5-70B9DCC5E74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*","matchCriteriaId":"19A3DA98-A072-4EE3-8542-A0AF89F9DBCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31684","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021032","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45775","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4399","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.723","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to \"insufficient validation.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el servicio del motor de la base de datos en asdbapi.dll en CA ARCserve Backup (antes BrightStor ARCserve Backup) vr11.1 hasta vr12.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición manipulada, relacionado con \"validación insuficiente\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AB3E8F-50D3-41EC-BC2B-CF86FB4801E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"9389EFCA-4989-4946-A92C-8C54EE9E55B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"97C8F8E4-C75F-49FF-82AA-295286BA26CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*","matchCriteriaId":"05B760BC-64EF-4BE1-BBB5-70B9DCC5E74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*","matchCriteriaId":"19A3DA98-A072-4EE3-8542-A0AF89F9DBCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31684","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021032","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45776","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4400","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.753","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to \"insufficient validation.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en asdbapi.dll de CA ARCserve Backup (antes llamado BrightStor ARCserve Backup)r11.1 hasta r12.0 permite a un atacante remoto causar una denegación de servicio (caída de varios servicios) por medio de credenciales de autentificación manipulados, relacionado con una validación insuficiente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AB3E8F-50D3-41EC-BC2B-CF86FB4801E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:business_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"9389EFCA-4989-4946-A92C-8C54EE9E55B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:server_protection_suite:r2:*:*:*:*:*:*:*","matchCriteriaId":"97C8F8E4-C75F-49FF-82AA-295286BA26CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_premium:*:*:*:*:*","matchCriteriaId":"05B760BC-64EF-4BE1-BBB5-70B9DCC5E74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:business_protection_suite:r2:*:microsoft_small_business_server_standard:*:*:*:*:*","matchCriteriaId":"19A3DA98-A072-4EE3-8542-A0AF89F9DBCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31684","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021032","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45777","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=188143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4401","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T19:31:15.073","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file."},{"lang":"es","value":"ActionScript en Adobe Flash Player 9.0.124.0 y anteriores no requiere interacción del usuario en conjunción con (1) la operación FileReference.browse en la API de subida FileReference upload o (2) la operación FileReference.download en la API de descarga FileReference, lo que permite a atacantes remotos crear un cuadro de diálogo de exploración y ,posiblemente tener otro impacto no especificado, mediante un fichero SWF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0_r67:*:*:*:*:*:*:*","matchCriteriaId":"7AB20235-B2F2-426E-B797-BFA361CEC488"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32270","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32448","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021061","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2838","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45913","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4402","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T15:07:10.790","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer en los módulos CGI el servidor de Trend Micro OfficeScan v8.0 SP1 anterior a la b2439 y v8.0 SP1 Patch 1 anterior a b3087, permite a atacantes remotos ejecutar código a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1_patch1:*:*:*:*:*:*","matchCriteriaId":"8FCFB646-3649-454D-8492-1640D98ED0C9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32097","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31531","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020974","source":"cve@mitre.org"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt","source":"cve@mitre.org"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2712","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4403","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T15:07:10.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the \"error handling mechanism.\""},{"lang":"es","value":"El módulo CGI en el servidor en Trend Micro OfficeScan v8.0 SP1 versiones anteriores a build 2439 y v8.0 SP1 Patch 1 versiones anteriores a build 3087 permite a atacantes remotos provocar una denegación de servicio (puntero de referencia NULL y caída del proceso hijo) a través de cabeceras HTTP manipuladas, relacionado con \"mecanismo de manejo de errores\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1_patch1:*:*:*:*:*:*","matchCriteriaId":"8FCFB646-3649-454D-8492-1640D98ED0C9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32097","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31531","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020974","source":"cve@mitre.org"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt","source":"cve@mitre.org"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2712","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45599","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4404","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T15:07:10.837","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476."},{"lang":"es","value":"La implementación IPv6 Neighbor Discovery Protocol (NDP) de servidores IBM zSeries no valida los mensajes originales de Neighbor Discovery, lo cual permite a atacantes remotos provocar una denegación de servicio (pérdida de conectividad) o leer tráfico de red privado a través de mensajes suplantado que modifican la Forward Information Base (FIB), una cuestión relacionada con CVE-2008-2476."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:zseries:*:*:*:*:*:*:*:*","matchCriteriaId":"4D9C7025-5ACA-496C-9AD7-2DFE3B159EA4"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/472363","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RZ8","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/472363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RZ8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2008-4405","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen."},{"lang":"es","value":"libvirt v0.3.3 se basa en ficheros localizados bajo subdirectorios de /local/domain en xenstore a pesar de la falta de protección contra modificaciones introducida por Xen en máquinas virtuales invitado, lo cual permite a usuarios del sistema operativo (SO) huésped tener un impacto desconocido, como lo demostrado mediante la escritura en (1) consola de texto (console/tty) o (2) el puerto VNC para el gráfico framebuffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xen:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6C9A466D-2E51-4662-8E85-8F5FA7B94A04"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00994.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/09/30/6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32064","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/04/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0003.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31499","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020955","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2709","source":"cve@mitre.org"},{"url":"http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464817","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464818","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10627","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00994.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/09/30/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/04/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=464818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4406","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.510","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files."},{"lang":"es","value":"Cierto parche de Debian para ejecutar secuencias de comandos (scripts) de sabre (también conocido como xsabre) v0.2.4b permite a usuarios locales borrar o sobrescribir ficheros de su elección a través de un ataque symlink en ficheros .tmp no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:xsabre:0.2.4b:*:*:*:*:*:*:*","matchCriteriaId":"8536A767-27B9-4060-B2CE-5593A2351954"}]}]}],"references":[{"url":"http://bugs.debian.org/433996","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/10/01/1","source":"cve@mitre.org"},{"url":"http://osvdb.org/48895","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31512","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45609","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45715","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/433996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/10/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4407","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service (application unavailability) by creating a /tmp/sabre.log file that cannot be overwritten."},{"lang":"es","value":"XRunSabre de sabre (aka xsabre) v0.2.4b se basa en la capacidad de crear /tmp/sabre.log, lo cual permite a usuarios locales provocar una denegación de servicio (aplicación no disponible) mediante la creación de un fichero /tmp/sabre.log que no se puede sobrescribir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:xsabre:0.2.4b:*:*:*:*:*:*:*","matchCriteriaId":"8536A767-27B9-4060-B2CE-5593A2351954"}]}]}],"references":[{"url":"http://bugs.debian.org/433996","source":"cve@mitre.org"},{"url":"http://osvdb.org/48900","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/433996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4408","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows remote attackers to inject arbitrary web script or HTML via the useskin parameter to an unspecified component."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MediaWiki vv1.13.1, 1.12.0, y posiblemente otras versiones anteriores a v1.13.2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"useskin\" en un componente no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"746023B5-2472-4FC9-BEDF-FE6A321F12B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-October/000078.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/10/02/3","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32128","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32131","source":"cve@mitre.org"},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_1/phase3/RELEASE-NOTES","source":"cve@mitre.org"},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_2/phase3/RELEASE-NOTES","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31540","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2737","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45632","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00179.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00220.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-October/000078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/10/02/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_1/phase3/RELEASE-NOTES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_2/phase3/RELEASE-NOTES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00179.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00220.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4409","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://www.securityfocus.com/bid/30783/solution","cveTags":[],"descriptions":[{"lang":"en","value":"libxml2 2.7.0 and 2.7.1 does not properly handle \"predefined entities definitions\" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281."},{"lang":"es","value":"libxml2 v2.7.0 y v2.7.1 no maneja apropiadamente \"definiciones de entidades predefinidas\" en entidades, lo cual permite a atacantes dependientes de contexto provocar una denegación de servicio (consumo de memoria y caída de aplicación), como lo demostrado por la utilización de xmllint en un determinado documento XML, una vulnerabilidad diferente a CVE-2003-1564 y CVE-2008-3281."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libxml2 as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2017-08-07T21:32:37.420"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"87E895B9-5AF7-4A1F-B740-B3E13DE3254E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8FD29EFD-1ADB-4349-8E7D-EA6B34B0F6DE"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=554660","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/10/02/4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32130","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32175","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31555","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45633","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00125.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00130.html","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=554660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/10/02/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00130.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4410","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T17:41:40.587","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the Virtual Machine Interface (VMI) in the Linux kernel 2.6.26.5 invokes write_idt_entry where write_ldt_entry was intended, which allows local users to cause a denial of service (persistent application failure) via crafted function calls, related to the Java Runtime Environment (JRE) experiencing improper LDT selector state, a different vulnerability than CVE-2008-3247."},{"lang":"es","value":"La función vmi_write_ldt_entry de arch/x86/kernel/vmi_32.c en Virtual Machine Interface (VMI) de Linux kernel v2.6.26.5 invoca write_idt_entry donde write_ldt_entry fue pretendido, lo cual permite a usuarios locales provocar una denegación de servicio (fallo continuo de aplicación) a través de llamadas a función manipuladas, relacionado con Java Runtime Environment (JRE) experimentando estado de selector inapropiado, una vulnerabilidad distinta a CVE-2008-3247."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2017-08-07T21:32:37.483"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=de59985e3a623d4d5d6207f1777398ca0606ab1c","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/48743","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32386","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/03/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45687","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=de59985e3a623d4d5d6207f1777398ca0606ab1c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/03/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4411","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.277","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en versiones de HP System Management Homepage (SMH) anteriores a la 2.1.15.210 en Linux y Windows permite a atacantes remotos inyectar código HTML o secuencias de comandos web o arbitrarios a través de vectores no especificados. Se trata de una vulnerabilidad diferente a la CVE-2008-1663."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.12-200","matchCriteriaId":"D8066A84-6198-4E4B-85AF-B3C99B3F7CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD9A9442-18B7-4858-AB3A-19FE272A5C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90042282-9151-4D8E-8093-D85E57BD332C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EF92B4-AAC3-4957-9D8F-1796C2045962"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D44CEFC1-CE95-4549-A981-C3F259075B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*","matchCriteriaId":"1C035D5C-90ED-4259-B05C-BEF93D81F42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103\\(a\\):*:*:*:*:*:*:*","matchCriteriaId":"824996A5-C2CC-4FC5-8705-F6B4D69F39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*","matchCriteriaId":"7DBF9F0E-AA30-4E5A-B23E-DD895303245C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*","matchCriteriaId":"DA2005B3-1914-4B4B-892A-8CCC0F39EF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6426924C-AA5C-4C93-AB8B-9314CD010139"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*","matchCriteriaId":"4D7DCF4F-609A-497B-A32E-3D946EC2EE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6E5C789-9827-47DF-A47C-454DF7687E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*","matchCriteriaId":"D85F0390-B076-4B54-9E4E-67472FF3759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*","matchCriteriaId":"0ECF53BE-0E3A-41F8-AFD2-29CA3F2D0C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EBB25A-A1DE-4943-9EE5-0FCF21A55666"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*","matchCriteriaId":"C43EF082-E9AB-41D3-B7AF-936B84BB6AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B61485E4-6EC1-4886-AB47-F5BC8E72A08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*","matchCriteriaId":"203163D8-15E8-4F2D-A807-7643EA0D6920"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E354FF4-5CDD-4B79-B56C-2C774B235D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*","matchCriteriaId":"DAC9CEFE-23C2-4455-BE6F-51D26487D3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*","matchCriteriaId":"4D0DA8D6-3B1D-4935-855E-9431EB4BA683"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8AFAF26C-7BFE-479E-880C-B13E78780625"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*","matchCriteriaId":"FC95912B-8C95-4CA8-BDA7-76074E20E362"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"3162C720-A042-48D8-A598-5CC9845C5715"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*","matchCriteriaId":"DEDD728B-9E92-4EC8-BD61-6E1AE300CE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"ABEEE1E4-1883-411E-A4BA-985041880439"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*","matchCriteriaId":"7E3E3BC1-A986-4942-80FA-5911428F8E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*","matchCriteriaId":"7038AC00-8A30-49CB-956D-715053A920D2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122356588429626&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122356588429626&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4398","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31663","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2778","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45754","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122356588429626&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122356588429626&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4412","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T20:33:55.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Systems Insight Manager (SIM) before 5.2 Update 2 (C.05.02.02.00) allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP Systems Insight Manager (SIM) anterior a v5.2 Update 2 (C.05.02.02.00) permite a atacantes remotos obtener información sensible mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:*:sp1:*:*:*:*:*:*","matchCriteriaId":"BD4196A9-9F61-4D5D-88BD-B9203507673E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:*:update_1:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"37D86872-97C2-4100-9FB5-B03A16786913"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"859C04D0-1DBF-4686-8A8C-59CEF4AA74FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"12F9B9A8-D820-4B90-8DCA-54F4DD15E87E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD41C87-86F3-4E4E-A54F-C56C5C90C361"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"F4879BF5-2647-4335-91CD-BDD0B2CAF862"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D430EB3C-EF10-4E39-821B-C4CFB91FCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.2:sp1:*:*:*:*:*:*","matchCriteriaId":"ABFA4EDE-1BF2-4E45-AB4A-23E981104ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:4.2:sp2:*:*:*:*:*:*","matchCriteriaId":"202984FE-E221-4E2E-A9A4-236D41EB7D11"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"441A0127-F774-4D68-9663-94FBBD13A8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"59AA99D8-868E-446C-8DA0-988CEAF86174"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.0:sp2:*:*:*:*:*:*","matchCriteriaId":"1FDB329C-240D-4D81-AF90-A005BF72517E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.0:sp3:*:*:*:*:*:*","matchCriteriaId":"4BFFA879-49E9-42C8-B180-4178115752A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D24DCC30-30B3-4715-A02B-4C0667B1BFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.0:sp5:*:*:*:*:*:*","matchCriteriaId":"EF4C5A74-7186-4331-B607-2A9BFD4AFAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"6C627E16-44E7-4559-B0F2-25BFEE8FFAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"3F1E270F-D317-45B9-A0CB-84FEB8248EA5"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01571962","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01571962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31777","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021064","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2836","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45916","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01571962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01571962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4413","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T18:29:47.870","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain \"unauthorized access\" via unknown vectors, possibly related to temporary file permissions."},{"lang":"es","value":"Vulnerabilidad no especificada en HP System Management Homepage (SMH) v2.2.6 y anteriores en HP-UX B.11.11 y B.11.23, y SMH 2.2.6 y 2.2.8  y anteriores en HP-UX B.11.23 y B.11.31; permite a usuarios locales obtener \"acceso no autorizado\" a través de vectores desconocidos. Puede que esté relacionado con los permisos de los ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.6","matchCriteriaId":"5EC644AD-85F1-4985-849B-9AB54A401042"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD9A9442-18B7-4858-AB3A-19FE272A5C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90042282-9151-4D8E-8093-D85E57BD332C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EF92B4-AAC3-4957-9D8F-1796C2045962"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D44CEFC1-CE95-4549-A981-C3F259075B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*","matchCriteriaId":"1C035D5C-90ED-4259-B05C-BEF93D81F42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103\\(a\\):*:*:*:*:*:*:*","matchCriteriaId":"824996A5-C2CC-4FC5-8705-F6B4D69F39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*","matchCriteriaId":"7DBF9F0E-AA30-4E5A-B23E-DD895303245C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*","matchCriteriaId":"DA2005B3-1914-4B4B-892A-8CCC0F39EF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6426924C-AA5C-4C93-AB8B-9314CD010139"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*","matchCriteriaId":"4D7DCF4F-609A-497B-A32E-3D946EC2EE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6E5C789-9827-47DF-A47C-454DF7687E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*","matchCriteriaId":"D85F0390-B076-4B54-9E4E-67472FF3759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*","matchCriteriaId":"0ECF53BE-0E3A-41F8-AFD2-29CA3F2D0C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EBB25A-A1DE-4943-9EE5-0FCF21A55666"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*","matchCriteriaId":"C43EF082-E9AB-41D3-B7AF-936B84BB6AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B61485E4-6EC1-4886-AB47-F5BC8E72A08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*","matchCriteriaId":"203163D8-15E8-4F2D-A807-7643EA0D6920"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E354FF4-5CDD-4B79-B56C-2C774B235D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*","matchCriteriaId":"DAC9CEFE-23C2-4455-BE6F-51D26487D3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*","matchCriteriaId":"4D0DA8D6-3B1D-4935-855E-9431EB4BA683"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8AFAF26C-7BFE-479E-880C-B13E78780625"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*","matchCriteriaId":"FC95912B-8C95-4CA8-BDA7-76074E20E362"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"3162C720-A042-48D8-A598-5CC9845C5715"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*","matchCriteriaId":"DEDD728B-9E92-4EC8-BD61-6E1AE300CE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"ABEEE1E4-1883-411E-A4BA-985041880439"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*","matchCriteriaId":"7E3E3BC1-A986-4942-80FA-5911428F8E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*","matchCriteriaId":"7038AC00-8A30-49CB-956D-715053A920D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*","matchCriteriaId":"F425004A-EC16-44E8-A297-21F33F802FE8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.8","matchCriteriaId":"BC0E18B8-6613-42D0-97BA-E13AE2B152C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD9A9442-18B7-4858-AB3A-19FE272A5C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90042282-9151-4D8E-8093-D85E57BD332C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EF92B4-AAC3-4957-9D8F-1796C2045962"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D44CEFC1-CE95-4549-A981-C3F259075B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*","matchCriteriaId":"1C035D5C-90ED-4259-B05C-BEF93D81F42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103\\(a\\):*:*:*:*:*:*:*","matchCriteriaId":"824996A5-C2CC-4FC5-8705-F6B4D69F39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*","matchCriteriaId":"7DBF9F0E-AA30-4E5A-B23E-DD895303245C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*","matchCriteriaId":"DA2005B3-1914-4B4B-892A-8CCC0F39EF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6426924C-AA5C-4C93-AB8B-9314CD010139"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*","matchCriteriaId":"4D7DCF4F-609A-497B-A32E-3D946EC2EE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6E5C789-9827-47DF-A47C-454DF7687E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*","matchCriteriaId":"D85F0390-B076-4B54-9E4E-67472FF3759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*","matchCriteriaId":"0ECF53BE-0E3A-41F8-AFD2-29CA3F2D0C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EBB25A-A1DE-4943-9EE5-0FCF21A55666"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*","matchCriteriaId":"C43EF082-E9AB-41D3-B7AF-936B84BB6AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B61485E4-6EC1-4886-AB47-F5BC8E72A08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*","matchCriteriaId":"203163D8-15E8-4F2D-A807-7643EA0D6920"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E354FF4-5CDD-4B79-B56C-2C774B235D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*","matchCriteriaId":"DAC9CEFE-23C2-4455-BE6F-51D26487D3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*","matchCriteriaId":"4D0DA8D6-3B1D-4935-855E-9431EB4BA683"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8AFAF26C-7BFE-479E-880C-B13E78780625"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*","matchCriteriaId":"FC95912B-8C95-4CA8-BDA7-76074E20E362"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"3162C720-A042-48D8-A598-5CC9845C5715"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*","matchCriteriaId":"DEDD728B-9E92-4EC8-BD61-6E1AE300CE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"ABEEE1E4-1883-411E-A4BA-985041880439"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*","matchCriteriaId":"7E3E3BC1-A986-4942-80FA-5911428F8E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*","matchCriteriaId":"7038AC00-8A30-49CB-956D-715053A920D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*","matchCriteriaId":"F425004A-EC16-44E8-A297-21F33F802FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2C14DB20-E22E-466E-A3CD-C841CFDF2A6E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122581539223159&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122581539223159&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/49521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4545","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021133","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2999","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46313","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122581539223159&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122581539223159&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4414","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:35:55.883","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no específica en el comando showfile AdvFS en HP Tru64 UNIX v5.1B-3 y 5.1B-4 permite a usuarios locales para obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1b3:*:*:*:*:*:*:*","matchCriteriaId":"E02E8BEA-D9EC-4375-917F-BAF20CA79FD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1b4:*:*:*:*:*:*:*","matchCriteriaId":"AE9742A9-4703-42E9-A1FD-B831087DC955"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122600765224240&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122600765224240&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32621","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4567","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2008/Nov/1021152.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32160","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46414","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122600765224240&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122600765224240&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2008/Nov/1021152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4415","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP Service Manager (HPSM) anterior a v7.01.71 permite a usuarios autenticados en remoto ejecutar código de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:service_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"FF519205-F4A0-4F33-A027-CD401AD6C6A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122652356130271&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122652356130271&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/49831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32712","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4601","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32272","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021171","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122652356130271&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122652356130271&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4416","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecifica en el kernel en HP HP-UX vB.11.31 permite a usuarios locales producir una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122832651727633&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122832651727633&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32969","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4686","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021297","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32601","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3331","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47012","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6077","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122832651727633&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122832651727633&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4418","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"http://marc.info/?l=bugtraq&m=122893704624601&w=2\r\n\r\nHP has made the following software patches available to resolve the vulnerabilities.\r\n\r\nThe patches can be downloaded from http://itrc.hp.com \r\n \r\nOS/Product Version - HP-UX B.11.31 running DCE\r\nAction - Install PHSS_38259 or subsequent\r\n \r\nOS/Product Version - HP-UX B.11.23 running DCE\r\nAction - Install PHSS_38258 or subsequent\r\n \r\nOS/Product Version - HP-UX B.11.11 running DCE\r\nAction - Install PHSS_38183 or subsequent\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en DCE en HP HP-UX B.11.11, B.11.23, y B.11.31 permite a atacantes remotos provocar una denegación de servicio a través de vectores no conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122893704624601&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122893704624601&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50679","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4705","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021377","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32754","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3411","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122893704624601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122893704624601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4421","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T20:00:17.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) in the URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en MetaGauge 1.0.0.17, y probablemente en otras versiones anteriores a 1.0.3.38, que permite a los atacantes remotos leer arbitariamente archivos, a través de \"..\\\"(punto punto barra invertida) en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hammer-software:metagauge:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.20","matchCriteriaId":"5AEFC4EF-4AE4-419A-A361-BCC056223809"},{"vulnerable":true,"criteria":"cpe:2.3:a:hammer-software:metagauge:1.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"9C08AB5E-8C7F-4F1D-BAC5-E7DB779A8A7D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32094","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4360","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497039/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31596","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45697","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6686","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497039/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4422","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T21:01:52.227","lastModified":"2023-11-07T02:02:47.873","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-4409.  Reason: This candidate is a duplicate of CVE-2008-4409.  Notes: All CVE users should reference CVE-2008-4409 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4423","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:44.820","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Ovidentia v6.6.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"item\" en una acción de modificación de contacto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ovidentia:ovidentia:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"48A2375A-FB03-4D1B-82BC-1F86F1AB8C6A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31425","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495313/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30645","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020650","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44380","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6232","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495313/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4424","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:44.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web script or HTML via the s parameter in a comments action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Domain Group Network GooCMS v1.02 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"s\" en una acción \"comments\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:domain_group_network:goocms:1.02:*:*:*:*:*:*:*","matchCriteriaId":"2A3A52A0-BF67-4223-B012-A81AE65DAC73"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30635.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31449","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30635","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44398","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30635.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4425","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:44.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en upload.php de Phlatline's Personal Information Manager (pPIM) v1.0 permite a atacantes remotos borrar ficheros de su elección a través de secuencias de salto de directorio en el parámetro \"file\" dentro de una acción \"delfile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phlatline:personal_information_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C86878E-F826-4762-A19A-DF876F758A00"}]}]}],"references":[{"url":"http://secunia.com/advisories/31424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4348","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44386","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4426","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:44.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en events.php de Phlatline's Personal Information Manager (pPIM) v1.0 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"date\" en una acción \"new\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phlatline:personal_information_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C86878E-F826-4762-A19A-DF876F758A00"}]}]}],"references":[{"url":"http://secunia.com/advisories/31424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4348","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44388","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4427","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:44.960","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords."},{"lang":"es","value":"changepassword.php de Phlatline's Personal Information Manager (pPIM) v1.0 y versiones anteriores no requiere autenticación como administrador, lo cual permite a atacantes remotos cambiar contraseñas de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phlatline:personal_information_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"397CEF35-1A7B-45B4-9C97-AB7C6A22AC09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44389","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6231","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4428","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:44.993","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en upload.php de Phlatline's Personal Information Manager (pPIM) v1.0 y versiones anteriores permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero .php, accediendo a él a través de una petición directa al fichero en el directorio de nivel superior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phlatline:personal_information_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"397CEF35-1A7B-45B4-9C97-AB7C6A22AC09"}]}]}],"references":[{"url":"http://secunia.com/advisories/31424","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44390","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6231","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4429","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via malformed compressed files.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad no especificada en SOURCENEXT Virus Security ZERO v9.5.0173 y versiones anteriores y Virus Security v9.5.0173 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (consumo de memoria o caída de aplicación) a través de ficheros comprimidos mal formados.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourcenext:virus_security:*:*:*:*:*:*:*:*","versionEndIncluding":"9.5.0173","matchCriteriaId":"C19FE832-BEA3-4F7B-80DC-9D0C331D17A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourcenext:virus_security_zero:*:*:*:*:*:*:*:*","versionEndIncluding":"9.5.0173","matchCriteriaId":"8F240994-6824-42A6-B2B1-9C8E83DC070E"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN66077895/","source":"cve@mitre.org"},{"url":"http://sec.sourcenext.info/support/bulletin.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30650","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2335","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44397","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN66077895/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sec.sourcenext.info/support/bulletin.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4430","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.040","lastModified":"2023-11-07T02:02:47.977","vulnStatus":"Rejected","evaluatorSolution":"Patch Information: http://amarok.kde.org/en/node/535/","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3699.  Reason: This candidate is a duplicate of CVE-2008-3699.  Notes: All CVE users should reference CVE-2008-3699 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4431","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.070","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://sourceforge.net/project/showfiles.php?group_id=157188&package_id=175626&release_id=619251","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, probably related to an incorrect protection mechanism in the clean_string function in includes/functions.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de IceBB 1.0-rc9.3 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"skin\", posiblemente relacionado con un mecanismo de protección incorrecto en la función clean_string de includes/functions.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:*:rc9.3:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"240243FE-CBF7-4F35-BE6C-20E6A5E09FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:0.9:rc1:*:*:*:*:*:*","matchCriteriaId":"E6269527-51CA-4C5D-8F69-1EB101C21E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"81476F79-F1F7-4742-A7A9-B9361C35A907"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"2FAF79EE-168B-479F-8669-E82B287C2F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D8F54313-89B8-4951-9489-EB2453469791"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"F9CBAAF6-C37D-4588-830E-9BE3D28A2CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:0.9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"635FF1C8-7200-4E41-AE56-E4002BE6AD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"FF46073D-8F88-41A5-9DAF-F5529B033AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc5.1:*:*:*:*:*:*","matchCriteriaId":"59BDB5CB-FF29-4BA5-99FB-BE05209D270A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc6:*:*:*:*:*:*","matchCriteriaId":"223FD946-0533-41A4-9890-1827EE93A4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc7:*:*:*:*:*:*","matchCriteriaId":"96561A8A-DB28-4721-801E-04CC73EAC324"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc8:*:*:*:*:*:*","matchCriteriaId":"E2C050D3-3EE1-4254-83F8-6BAC9337F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc9:*:*:*:*:*:*","matchCriteriaId":"5AD317C8-7A2E-445D-BB30-B43CEECB1709"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc9.1:*:*:*:*:*:*","matchCriteriaId":"1767BB4C-703C-455E-B8DD-8F2A8DB180C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icebb:icebb:1.0:rc9.2:*:*:*:*:*:*","matchCriteriaId":"9A7AC70F-169F-4B91-8390-812E64AD3603"}]}]}],"references":[{"url":"http://forums.xaos-ia.com/?topic=765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44403","source":"cve@mitre.org"},{"url":"http://forums.xaos-ia.com/?topic=765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4432","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.100","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en el módulo RMSOFT MiniShop v1.0 de Xoops permiten a atacantes remotos inyectar web script o HTML a través del parámetro \"itemsxpag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rmsoft:minishop_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9ADADBE7-F0F9-4DD5-AFC6-C0D2FD0412AA"},{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/rmsoft-minishop-module-multiple.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30616","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44374","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/rmsoft-minishop-module-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4433","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php en el módulo RMSOFT MiniShop v1.0 de Xoops pueden permitir a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"itemsxpag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rmsoft:minishop_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9ADADBE7-F0F9-4DD5-AFC6-C0D2FD0412AA"},{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/rmsoft-minishop-module-multiple.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45714","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/rmsoft-minishop-module-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4434","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en (1) uTorrent v1.7.7 build 8179 y versiones anteriores y (2) BitTorrent v6.0.3 build 8642 y versiones anteriores permiten a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de un campo largo Created By en un fichero .torrent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.7","matchCriteriaId":"06D5FF42-9626-44FF-862A-305F9E5F237E"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F133D6CF-1F5C-4DA9-AD2B-A0EBD3F8783F"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E1BE1497-6C95-41B3-861D-318B79C0BD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8FD2577B-7D73-414F-ABD9-99B8DB77277A"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A91C32-D05F-459B-8CF1-BC965610F70F"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DE4258E9-055A-4079-917B-B1C9680816FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"64611E61-2728-437C-B35C-B104C0828A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2FD9058B-A162-466A-95F9-3FC1BB6838D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5F63991-BFBD-4C52-B87F-DD59F4974AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2148FDA-313B-4603-A89C-EDE7E41A31C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2F1A8AD9-50CD-4254-9A54-E439EC4B11AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.4:*:*:*:*:*:*:*","matchCriteriaId":"068F4B69-E6C1-4DA9-9EEB-EECB6899B3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E4950A28-EB7F-4991-86E4-CDC4FA381ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.5:*:*:*:*:*:*:*","matchCriteriaId":"36CE40C8-0FB1-4656-9BAD-155B4409FE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.6:*:*:*:*:*:*:*","matchCriteriaId":"18259FA6-04B8-4C50-B74C-306F59DC090B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7:*:*:*:*:*:*:*","matchCriteriaId":"7A643D2C-DFEC-4A98-8B56-C4B9511F65C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9D1773-3FCB-4D0C-A837-7D3B9ABA7B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E6B47FF8-885A-4509-B259-447EBDE79831"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"01788873-AAB2-464E-B564-0E0EA62078E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"69E3BDC4-9B81-4D5C-897E-793173F973FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"EC998099-553A-4719-A903-0C67EC0D23DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B81DCF33-72C0-42C2-BE0D-2B9F171E59E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.3","matchCriteriaId":"2EE4DA9D-FD94-4CE4-B957-3EE921AE2B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A3628182-3D58-4555-9DFF-1921CA3C54F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"68FDECB8-8713-4D37-A0DB-E2FB5D3A16DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EFF04516-5372-4D39-A58A-E0840E99C9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"738167A5-9052-4ABA-843B-D5DC2DD0EAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FF3687F7-A1DC-4AB1-91F2-60C2639A3146"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"946E1E70-E472-4C8F-BDE9-63E952F1AD41"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE2183E7-8338-4CE5-9D10-85E623BC50AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"02DE484A-930E-40CE-8FC7-25C32D94DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"79D7B8AC-D171-413B-B1DF-82484A4C4B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"23512725-DA47-47F9-8081-2B0A74471DBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"168AAA79-E82A-426B-ABAB-C62FA18D757E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4E21B17B-EA03-4B0A-B944-E869994E596E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"2A5D0343-9AD0-4F1D-ACDA-20BDD76F6EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"43485B34-530E-4A80-8C39-3A751E8090B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"184686B8-37F7-43F7-AFAD-4B92946424C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"22BD68CE-00DD-457E-8195-96670270D543"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D822D5A-F3C2-4726-9A87-B3AEC6A7D2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19B5B235-6BE8-477B-B7D1-21FF14541391"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"34604F10-6D7A-48D3-9761-5907B1511018"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B6EC9CC-538E-4F44-B065-9C0B7AD9F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1EABCAD8-2455-4817-8352-E1C99D6031C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5BAAD599-5C89-48FA-99F3-1EFE5D491E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"24BB8DB0-1342-4D49-9883-3C853FBD858A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5DA8E4C7-A501-4506-9D47-4CB75EE23459"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"73653253-EEDA-410E-B7F0-3A6997F4CCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DB6F507B-8AEC-488F-879C-73EDB63E72B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F08D41D8-E7F7-4F78-BA39-F480C1327C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8E190768-A30C-473A-ABF2-9306C2807918"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9C5230C8-4BCF-4366-A925-9A282DD9537F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"211C4C3B-0587-45BE-819E-51426E849A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"A75C68D1-F42F-4B49-9C26-767E7285001E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"BBE28509-8681-4875-B3F2-6CB89FB31B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"4C9FCE5F-1B0F-4A33-98EB-FC3F0CDE2EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"437FACF4-0016-4E00-AFD8-0C4D32EEBF73"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"A196C475-C350-462F-8B20-29FA403BAC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.0:*:*:*:*:*:*:*","matchCriteriaId":"6ED97A72-801C-40EB-AE70-FAC1A4593BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.1:*:*:*:*:*:*:*","matchCriteriaId":"85E091CB-F105-4032-B6CE-E2AB5098B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.2:*:*:*:*:*:*:*","matchCriteriaId":"142AF7BB-E734-45D0-A82A-A66C212296A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.3:*:*:*:*:*:*:*","matchCriteriaId":"BF0E7BF1-5C10-469A-BB85-F83B0348B0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.4:*:*:*:*:*:*:*","matchCriteriaId":"54685CE2-734E-4DD2-92E5-D170C9AC8C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.6:*:*:*:*:*:*:*","matchCriteriaId":"24B3E9A7-759A-474B-B5A2-77336D010F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBF44AF-C4F1-4EF8-BFCD-6E43FEA76FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.8:*:*:*:*:*:*:*","matchCriteriaId":"826E9D27-A316-4A99-AAD0-C73A8E81513E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.9:*:*:*:*:*:*:*","matchCriteriaId":"3D4E9832-90DA-4D4F-A7F5-EDC118EC85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.0:*:*:*:*:*:*:*","matchCriteriaId":"51155C5E-5394-4015-9ECE-CA7B63EA4C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"C216CC0F-4AB7-4CAA-A44B-EE83500F0C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.4:*:*:*:*:*:*:*","matchCriteriaId":"9FCBFEB7-419A-468D-BA8C-5FBDEE7D1C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.24.0:*:*:*:*:*:*:*","matchCriteriaId":"122BCB78-104C-48B1-B0AF-BA9E1DBAC496"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.24.2:*:*:*:*:*:*:*","matchCriteriaId":"74325695-412A-465E-8278-AEA222354A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.26.0:*:*:*:*:*:*:*","matchCriteriaId":"112ACDDE-7742-4D7A-BA03-FE50ADF8ED02"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.27.1:*:*:*:*:*:*:*","matchCriteriaId":"751E51E0-F2B9-4FB2-97C1-1D7EC3F9A6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.27.2:*:*:*:*:*:*:*","matchCriteriaId":"37E6EF53-6DC8-49C5-9125-BC32CA644131"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4BAEFBC6-5B93-4C44-AD87-7946367AF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F393E6B-6576-4671-8311-3B64EDAB621F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898F4B04-1329-4442-A01B-BAF47549E3E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6715F83C-7928-41CE-AB4D-7B855C3038B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9865DE2B-0BDF-4120-BD0C-408518F84286"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ECC8D79A-3A04-4E26-8EDD-7A07F3EF5D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EDA4DD9D-E3C9-4818-BB2C-9F4A86F65216"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"153A361C-691C-4126-9FE5-EC964437F1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E6395ECE-34FF-43D3-9DDA-0503B06F08E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8D7B594F-AB4B-4C92-BFFD-CD55C5FB2393"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"696B8F10-DCCB-41F5-B771-3B8EF8DD33B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1FFA73B3-9FA6-4026-A59E-3EBBE3CDFBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE1695B6-872B-4308-A529-E18EE228886B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F88598A6-F2B5-4542-9B7E-D0DF2E07325A"}]}]}],"references":[{"url":"http://forum.utorrent.com/viewtopic.php?id=44003","source":"cve@mitre.org"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf","source":"cve@mitre.org"},{"url":"http://seclists.org/dailydave/2008/q3/0155.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31441","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30653","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020664","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2340","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2341","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44404","source":"cve@mitre.org"},{"url":"http://forum.utorrent.com/viewtopic.php?id=44003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/dailydave/2008/q3/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4435","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to search.php and the (2) id parameter to down.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en el módulo RMSOFT Downloads Plus (rmdp) v1.5 and v1.7 de Xoops permiten a atacantes remotos inyectar web script o HTML de su elección a través del parémtro (1) key de search.php y el parámetro (2) id de down.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rmsoft:downloads_plus_module:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B0A444B5-06C9-4EF0-A7B7-2468B5050601"},{"vulnerable":true,"criteria":"cpe:2.3:a:rmsoft:downloads_plus_module:1.7:*:*:*:*:*:*:*","matchCriteriaId":"23BAA1B8-57D5-4296-A92B-19774687B0E8"},{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/08/rmsoft-downloads-plus-two-scripts-two.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30620","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44376","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/08/rmsoft-downloads-plus-two-scripts-two.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4436","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.197","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"bBlog is no longer actively maintained, and there are no plans to carry on with development. \r\n\r\nSource: http://www.bblog.com/","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bblog_plugins/builtin.help.php de bBlog v0.7.6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mod\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bblog:wbblog:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"A469AC38-1016-400D-A780-93C40812ACB6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4351","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30658","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44406","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6233","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4437","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en importxml.pl de Bugzilla versiones anteriores a v2.22.5, y 3.x versiones anteriores a v3.0.5, cuando --attach_path está activo, permite a atacantes remotos leer ficheros de su elección a través de un fichero XML con .. (punto punto) en el elemento \"data\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.9:*:*:*:*:*:*:*","matchCriteriaId":"A3B3EF74-4784-47A7-8994-21EF489F4008"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*","matchCriteriaId":"02846865-D124-4C72-85C8-59A7C6F43E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*","matchCriteriaId":"99B59422-ED6E-4F82-8D0C-091058D1C438"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*","matchCriteriaId":"F658844A-6253-4A18-8A5D-1E818BE7A367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.3:*:*:*:*:*:*:*","matchCriteriaId":"4753AB35-B95C-4544-A874-5E6D83929AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C4880D54-CA42-4CCA-B01E-2C125002BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"585F05F2-B294-4218-9209-C487B4D2994B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3246890-8D66-474F-AC9C-BC556426467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7090332F-4CC2-4ADD-AEEC-75238BCA55CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F960BE59-05B1-4438-A854-279612E13A7B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.22.4/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30661","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020668","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2344","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=437169","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44407","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.22.4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1020668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=437169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4438","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de Datafeed Studio v1.6.2 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"q\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datafeed_studio:datafeed_studio:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5F92CEE5-B491-4AB8-AD03-28EBC74A0941"}]}]}],"references":[{"url":"http://blog.datafeedstudio.com/datafeed-studio-v163-released","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30660.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30660","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44417","source":"cve@mitre.org"},{"url":"http://blog.datafeedstudio.com/datafeed-studio-v163-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30660.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4439","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.303","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALL_FOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo admin/bin/patch.php en Datafeed Studio de MartinWood anterior a versión 1.6.3, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro INSTALL_FOLDER. NOTA: la procedencia de esta información es desconocida; Los detalles se obtienen únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martinwood:datafeed_studio:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"E0F96EB0-2E69-482E-A594-82D0DF7634AE"}]}]}],"references":[{"url":"http://blog.datafeedstudio.com/datafeed-studio-v163-released","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30659","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30659/exploit","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44420","source":"cve@mitre.org"},{"url":"http://blog.datafeedstudio.com/datafeed-studio-v163-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30659/exploit","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4440","sourceIdentifier":"cve@mitre.org","published":"2008-10-03T22:22:45.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta.install.$USER and (2) /tmp/feta.avail.$USER temporary files."},{"lang":"es","value":"La extensión (plugin) to-upgrade de feta v1.4.16 permite a usuarios locales sobrescribir ficheros de su elección a través de symlink en un fichero temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:feta:*:*:*:*:*:*:*:*","matchCriteriaId":"E2688905-A017-4E92-889A-F117FDE79B8C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496397","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/feta","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32155","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1643","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30899","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/feta","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4441","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T15:28:16.677","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service (reboot or hang-up) via a malformed association request containing the WEP flag, as demonstrated by a request that is too short, a different vulnerability than CVE-2008-1144 and CVE-2008-1197."},{"lang":"es","value":"El controlador de dispositivo Marvell para el punto de acceso Wi-fi Linksys WAP4400N con version de firmware 1.2.14 sobre chipset Marvell 88W8361P-BEM1, cuando el modo WEP está activado, no analiza adecuadamente las tramas 802.11 mal formadas. Lo cual permite a atacantes remotos causar una denegación de servicio (reinico o cuelgue) a través de una petición de asociación mal formada que contenga el flag WEP, como lo demuestra una solicitud de dicho tipo demasiado corta. Se trata de una vulnerabilidad diferente a la CVE-2008-1144 y CVE-2008-1197."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap400n:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A0CE5313-A2B1-4343-8405-FD471CB3C0F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:marvell:88w8361p-bem1:*:*:*:*:*:*:*:*","matchCriteriaId":"4E1A6CCA-F8A6-4018-8A51-6AD1B60BBC85"}]}]}],"references":[{"url":"http://secunia.com/advisories/32259","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497285/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31742","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497285/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4445","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:54:36.560","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113."},{"lang":"es","value":"La función sctp_auth_ep_set_hmacs en net/sctp/auth.c en la implementación del Protocolo de Control de Transmisión de Streaming(sctp) la del kernel de Linux anterior a 2.6.26.4, cuando la extensión SCTP-AUTH está habilitada, no comprueba que el indice del identificador esta dentro de los límites establecido por SCTP_AUTH_HMAC_ID_MAX, lo que permite a usuarios locales obtener información sensible a través de una solicitud SCTP_HMAC_IDENT IOCTL modificada que involucre a la función sctp_getsockopt, una vulnerabilidad diferente que CVE-2008-4113."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html","lastModified":"2009-01-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.25.14","matchCriteriaId":"BD4AD0AC-1483-4E8B-AE00-9D349D5982DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-sctp&m=121986743009093&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-sctp&m=121986743209110&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32393","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/9","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/27/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/29/4","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31121","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021001","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-sctp&m=121986743009093&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-sctp&m=121986743209110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/26/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/27/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/09/29/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0857.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-659-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4446","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:54:36.623","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el Nucleus EUC-JP en sus versión 3.31 SP1 y anteriores permite a atacantes remotos inyectar secuencia de comandos web o HTML arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_cms:nucleus:*:sp1:*:ja:*:*:*:*","versionEndIncluding":"3.31","matchCriteriaId":"1F6DC63C-B457-4362-BD6F-DC2FF3983E68"}]}]}],"references":[{"url":"http://japan.nucleuscms.org/bb/viewtopic.php?t=4131","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://japan.nucleuscms.org/item/47","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN92651529/index.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000066.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32123","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31590","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45666","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://japan.nucleuscms.org/bb/viewtopic.php?t=4131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://japan.nucleuscms.org/item/47","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN92651529/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4447","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:56:52.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via (1) the fn parameter during a dload action, (2) the mask parameter during a search action, and (3) the tab parameter during a sysinfo action."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS), en el archivo actions.php en el Software H-Sphere WebShell de Positive versión 4.3.10, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de (1) el parámetro fn durante una acción de descarga, (2) el parámetro mask durante una acción dload, y (3) el parámetro tab durante una acción sysinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:positive_software:h-sphere:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D5D61605-2920-4694-B482-D08F48E91523"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45613","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4448","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:56:52.970","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the (1) overkill, (2) futils, or (3) edit actions."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en actions.php en H-Sphere WebShell 4.3.10 de Positive Software permite a atacantes remotos llevar a cabo acciones no autorizadas como administrador, incluidos el borrado y la creación de archivos, a través de un enlace o etiqueta IMG a las acciones (1) Overkill, (2) futils, o (3) edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:positive_software:h-sphere:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D5D61605-2920-4694-B482-D08F48E91523"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32086","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45614","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4449","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T19:56:53.003","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en mIRC 6.34 permite a atacantes remotos ejecutar código arbitrario a través de un nombre de host demasiado largo en un mensaje PRIVMSG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirc:mirc:6.34:*:*:*:*:*:*:*","matchCriteriaId":"5FEB6DB9-A383-4B49-8083-ADB96A0F99EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32102","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4352","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31552","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2736","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45624","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6654","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4450","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.490","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the (1) dbserver, (2) host, (3) user, (4) password, (5) database, and (6) table parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de secuencias de comándos en sitios cruzados (XSS) en adodb.php en XAMPP para Windows 1.6.8 permite a atacantes remotos inyectar secuencias de comándos web o HTML arbitrarios a través de los parámetros (1) dbserver, (2) host, (3) user, (4) password(5), database, y (6) table. NOTA: La procedencia de esta información es desconocida; los detalles se obtienen exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache_friends:xampp:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"303A5179-E5AE-4CF3-8190-866DB2040C21"}]}]}],"references":[{"url":"http://secunia.com/advisories/32134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31472","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4451","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.520","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \\Device\\esiasdrv that overwrites a pointer."},{"lang":"es","value":"El controlador de SysInspector AntiStealth (archivo esiasdrv.sys) versión 3.0.65535.0 en System Analyzer Tool de ESET versión 1.1.1.0, permite a los usuarios locales ejecutar código arbitrario por medio de una determinada petición de METHOD_NEITHER IOCTL en \\Device\\esiasdrv que sobrescribe un puntero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset_software:system_analyzer_tool:1.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"84E03FB0-977F-4488-9A1C-F0F03BCC558C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4353","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31521","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45619","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6647","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4452","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.600","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (crash and hang) and possibly execute arbitrary code via a long CWD request."},{"lang":"es","value":"Un desbordamiento de búfer en Cambridge Computer Corporation vxFtpSrv 2.0.3 permite a atacantes remotos causar una denegación de servicio (falla y se cuelga) y posiblemente ejecutar código arbitrario a través de una solicitud CWD demasiado larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cambridge_computer_corporation:vxftpsrv:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8D69359D-B49B-4F2E-BC2A-2B0838D98A86"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4356","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31532","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45620","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6651","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4453","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.630","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control (gdpicturepro5s.ocx) 5.7.0.1 allows remote attackers to create, overwrite, and modify arbitrary files via the SaveAsPDF method.  NOTE: this issue might only be exploitable in limited environments or non-default browser settings.  NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Los controles ActiveX GdPicture GdPicture4S.Imaging (gdpicture4s.ocx) 4.7.0.1 de Luz Imaging Toolkit 4.7.1  y  GdPicturePro5S.Imaging (gdpicturepro5s.ocx) 5.7.0.1 de Pro Imaging SDK 5.7.1  permiten a atacantes remotos crear, sobrescribir, y modificar archivos arbitrarios a través del método SaveAsPDF. \r\nNOTA: Este problema sólo podría ser explotado en entornos limitados o con configuraciones del navegador diferentes a la que viene por defecto. \r\nNOTA: Esto puede ser aprovechado para la ejecución de código remoto mediante el acceso a los ficheros utilizando URLs hcp://.\r\nNOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dspicture:light_imaging_toolkit:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2F1964B5-07E8-45FC-81F8-4CD8E1B7997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dspicture:pro_imaging_sdk:5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AFEEF1B7-53C6-488D-94C8-C087F440CD37"}]}]}],"references":[{"url":"http://secunia.com/advisories/31898","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31966","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4355","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31504","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2708","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45536","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4454","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.660","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the lang parameter to actions.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el administrador de MySQL EKINdesigns MySQL Quick Admin 1.5.5, permite a atacantes remotos leer y ejecutar archivos arbitrarios a través de un .. (punto punto) en el parámetro lang a actions.php. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql_quick_admin:mysql_quick_admin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C1C0608-FFA6-41E8-9E71-BD7491610D26"}]}]}],"references":[{"url":"http://secunia.com/advisories/31820","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4455","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.677","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the language cookie."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el fichero index.php del administrador de MySQL EKINdesigns MySQL Quick Admin versiones 1.5.5 anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos leer y ejecutar archivos arbitrarios a través de un .. (punto punto) en la cookie del idioma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql_quick_admin:mysql_quick_admin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C1C0608-FFA6-41E8-9E71-BD7491610D26"}]}]}],"references":[{"url":"http://secunia.com/advisories/31820","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31517","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45606","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4456","sourceIdentifier":"cve@mitre.org","published":"2008-10-06T23:25:50.707","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be accessed by this client when composing an HTML document.  NOTE: as of 20081031, the issue has not been fixed in MySQL 5.0.67."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el cliente command-line en MySQL v5.0.26 a la v5.0.45, cuando la opción --html está activa, permite a los atacantes inyectar web script o HTML de su elección colocándolo en una celda de la base de datos, a la que puede acceder el cliente al comoponer un documento HTML."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-4456\n\nThis issue was addressed for Red Hat Enterprise Linux 5 by https://rhn.redhat.com/errata/RHSA-2009-1289.html and Red Hat Enterprise Linux 4 by https://rhn.redhat.com/errata/RHSA-2010-0110.html .\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, future MySQL package updates may address this flaw for Red Hat Enterprise Linux 3, and Red Hat Application Stack 2.","lastModified":"2010-02-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"35F21A5A-F9C0-4860-80AD-1D3937483F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.67:*:*:*:*:*:*:*","matchCriteriaId":"C98C5EFF-B629-4FFF-B535-0C25DADD1C25"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=27884","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2008/Oct/0026.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32072","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4357","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1783","source":"cve@mitre.org"},{"url":"http://www.henlich.de/it-security/mysql-command-line-client-html-injection-vulnerability","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496842/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496877/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497158/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497885/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31486","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45590","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11456","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/bug.php?id=27884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2008/Oct/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.henlich.de/it-security/mysql-command-line-client-html-injection-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496842/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496877/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497158/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497885/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4457","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a stats_res cookie to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/inc_statistics.php en MemHT Portal v3.9.0 y anteriores, cuando están deshabilitadas magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante una cookie stats_res al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"3.9.0","matchCriteriaId":"F6360500-42EE-4B5E-BAF8-5D50359AEC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:1.0:final:*:*:*:*:*:*","matchCriteriaId":"52701B65-E8C2-47B0-83B7-B283A019FBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:1.5:full:*:*:*:*:*:*","matchCriteriaId":"281AF81D-989F-4C69-9E41-F8B4C66E3584"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:1.5:update:*:*:*:*:*:*","matchCriteriaId":"BD4DC033-7838-4FF5-914C-6691EB0D32F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.0:full:*:*:*:*:*:*","matchCriteriaId":"249573E7-7C14-4CAF-AE2B-A09392E143D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.0:update:*:*:*:*:*:*","matchCriteriaId":"093E3EE8-8524-4709-BC67-EFBFFD8D2EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.5:full:*:*:*:*:*:*","matchCriteriaId":"54141E05-C819-4AF7-A31A-01C78AE24CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.5:update:*:*:*:*:*:*","matchCriteriaId":"8DA8EE80-FBF3-48E3-B08A-D4DA95FFB866"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.9:full:*:*:*:*:*:*","matchCriteriaId":"214C8095-C406-464E-8CA8-7929BF04CE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.9:update:*:*:*:*:*:*","matchCriteriaId":"9FE3B714-5407-4B46-94AD-A05B4F86C51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.0:full:*:*:*:*:*:*","matchCriteriaId":"263FB9C1-20F0-48EA-B6C3-2D9237114609"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.0:update:*:*:*:*:*:*","matchCriteriaId":"94E57AFB-F4CE-4107-92FC-4860B90479B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.1:full:*:*:*:*:*:*","matchCriteriaId":"7BF2D662-CDDA-40E2-A7B9-C2492279263E"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.1:update:*:*:*:*:*:*","matchCriteriaId":"74CFAFEB-90A3-4091-A35A-3BA9E8A04AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.2:update:*:*:*:*:*:*","matchCriteriaId":"99B71D89-51E2-43F2-94C0-A7701A279C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.3:full:*:*:*:*:*:*","matchCriteriaId":"4C6816A8-7785-4727-859A-60A913028D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.3:update:*:*:*:*:*:*","matchCriteriaId":"74679D05-32CF-45B3-8ACC-284B13D4A894"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4:full:*:*:*:*:*:*","matchCriteriaId":"DE18ED97-FF4B-4815-B530-7070C3051A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4:update:*:*:*:*:*:*","matchCriteriaId":"DAB926F8-8C1D-40B2-919A-BB6A5315FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4.5:full:*:*:*:*:*:*","matchCriteriaId":"6C148B4A-6160-4922-BE7A-622AEA5F9A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4.5:update:*:*:*:*:*:*","matchCriteriaId":"8BB51BE2-50DC-45E5-A745-7D077C0D0674"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.5.0:full:*:*:*:*:*:*","matchCriteriaId":"4C7FF087-80B1-467B-B85D-F89ED702A504"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FB08C1CB-F9AB-456D-981D-23F1EC87030C"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"D1D84840-5F56-4608-8CFF-295E8D24D67F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"EE033096-92CA-4116-9CFE-DF76E77CC8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"2DD8EF5F-79DE-4050-A04A-DE113E54916F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CD347869-E32D-45D1-997A-724FDD72A046"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6A6B772F-CE04-44D4-876A-7DC0C7C23294"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"85F80D85-2857-4653-97B7-0DA5127364AF"}]}]}],"references":[{"url":"http://secunia.com/advisories/31751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4288","source":"cve@mitre.org"},{"url":"http://www.memht.com/news_95_Important-fix-for-all-MemHT-Versions.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31045","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2510","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44930","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6393","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.memht.com/news_95_Important-fix-for-all-MemHT-Versions.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4458","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listings.php en E-Php B2B Trading Marketplace Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cid en una acción del producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-php_scripts:b2b_trading_marketplace_script:*:*:*:*:*:*:*:*","matchCriteriaId":"7BF83368-1967-4DA7-8CD5-3D4150C51DEA"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/ephpb2b-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31795","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496186/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44975","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/ephpb2b-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496186/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4459","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pick_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the uname_search parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pick_users.php en el módulo de grupos en el software eXtrovert Thyme v1.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro uname_search. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extrovert_software:thyme:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0E4CFDC9-1E63-43D4-9778-99B1FFC972A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31782","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-thyme.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31063","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-thyme.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4460","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.363","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en game.php en Vastal I-Tech MMORPG Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro game_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:mmorpg_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"0161D90E-B157-42CD-A4EA-5008FE6B12BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44951","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6379","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4461","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en advanced_search_results.php en Vastal I-Tech Dating Zone, posiblemente v0.9.9, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro fage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:dating_zone:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"3E0945A4-A10E-4432-8815-93E66F83C4F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://z0rlu.blogspot.com/2008/09/vastal-i-tech-dating-zone-fage-sql.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44946","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://z0rlu.blogspot.com/2008/09/vastal-i-tech-dating-zone-fage-sql.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4462","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.410","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php en Vastal I-Tech Visa Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro news_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:visa_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"5ABC4CEC-F942-4882-BCE4-072CF8946AA3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6373","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4463","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_news.php en Vastal I-Tech Jobs Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro news_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:jobs_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"0F1F015C-C028-4833-AAC8-03AA36BAC566"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4358","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44952","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6378","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4464","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.473","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_mags.php en Vastal I-Tech Mag Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:mag_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"AE5699A4-B8BD-4D22-B40C-800BF96716AC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44949","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6380","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4465","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.643","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_mags.php en Vastal I-Tech DVD Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:dvd_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"B69CAA9B-8704-4DF0-AC76-E835E67BC12D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4466","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.660","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_products_cat.php en Vastal I-Tech Cosmetics Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:cosmetics_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"F59D9619-1C93-4EB6-A0D6-1180700B93ED"}]}]}],"references":[{"url":"http://secunia.com/advisories/31718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44948","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6382","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4467","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.690","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show_series_ink.php en Vastal I-Tech Toner Cart permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:toner_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"E1D0245D-2774-4011-BA12-959F08597F14"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44955","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6374","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4468","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.707","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_news.php en Vastal I-Tech Share Zone permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:share_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"4F4B72EF-A187-4C65-8473-4C9BFBEA5814"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44954","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6375","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4469","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.737","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_cresume.php en Vastal I-Tech Freelance Zone, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro coder_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal_i-tech:freelance_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"82B1EE35-D35E-42C6-B478-AA203BC63F84"}]}]}],"references":[{"url":"http://secunia.com/advisories/31717","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4359","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44950","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6381","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4470","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T00:31:08.770","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (application crash) or execute arbitrary code via an M3U playlist file that contains a long absolute pathname."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Numark CUE v5.0 rev2 permite a atacantes remotos con la intervención del usuario provocar una denegación de servicio (finalización de la aplicación) o ejecutar código de su elección a través de un fichero Lista de Reproducción que contiene un nombre de ruta absoluto largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:numark:cue:5.0:rev2:*:*:*:*:*:*","matchCriteriaId":"4B5ED092-8E0B-49B5-80B7-E45F82D8B298"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4354","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31042","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2516","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44958","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6389","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4471","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T20:00:17.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via \"..\\\" sequences in the argument to the SaveAS method."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la clase CExpressViewerControl en el control ActiveX DWF Viewer (AdView.dll 9.0.0.96), utilizado en Revit Architecture 2009 SP2 y Autodesk Design Review 2009, que permite a los atacante remotos sobrescribir arbitrariamente archivos a través de secuencias \"..\\\" en el argumento to del método SaveAs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:design_review:2009:*:*:*:*:*:*:*","matchCriteriaId":"D015F7C3-BBFB-418C-8B50-2047AE1E142E"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:dwf_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"9E11496F-A4A3-48B2-BFD4-D00D13BD9E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:revit_architecture:2009:sp2:*:*:*:*:*:*","matchCriteriaId":"877A0489-AC5E-4A8C-827B-EDD6EF62E0BD"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31989","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4361","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496847/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31487","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2704","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45519","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6630","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496847/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4472","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T20:00:17.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method."},{"lang":"es","value":"La clase UpdateEngine en el control Active X LiveUpdate (LiveUpdate16.DLL 17.2.56), utilizado en Revit Architecture 2009 SP2 y Autodesk Design Review 2009, que permite a los atacantes remotos ejecutar arbitrariamente programas a través del segundo argumento del método ApplyPatch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:design_review:2009:*:*:*:*:*:*:*","matchCriteriaId":"D015F7C3-BBFB-418C-8B50-2047AE1E142E"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:dwf_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"9E11496F-A4A3-48B2-BFD4-D00D13BD9E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:revit_architecture:2009:sp2:*:*:*:*:*:*","matchCriteriaId":"877A0489-AC5E-4A8C-827B-EDD6EF62E0BD"}]}]}],"references":[{"url":"http://images.autodesk.com/adsk/files/live_update_hotfix0.html","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4361","source":"cve@mitre.org"},{"url":"http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=12452198&linkID=11705366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496847/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31490","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2704","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45521","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6630","source":"cve@mitre.org"},{"url":"http://images.autodesk.com/adsk/files/live_update_hotfix0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=12452198&linkID=11705366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496847/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4473","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T19:31:15.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en Adobe Flash CS3 Professional en Windows y Flash MX 2004 permite a atacantes remotos ejecutar código de su elección a través de un fichero SWF que contiene largos parámetros de control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs3:*:professional:*:*:*:*:*","matchCriteriaId":"BC1265C1-5D07-46CB-91B2-F1DBAB1647EC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:mx_2004:*:*:*:*:*:*:*","matchCriteriaId":"33446303-71A3-4676-8D1D-E1E6EEF46BA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32246","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4429","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021060","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-09.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31769","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4474","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T21:11:38.510","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4) tot_stats, and (5) truncate_radacct."},{"lang":"es","value":"freeradius-dialupadmin en freeradius 2.0.4 permite a los usuario locales sobrescribir arbitrariamente archivos a través de un ataque de enlace simbólico en un archivo temporal en (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4) tot_stats, y (5) truncate_radacct."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of freeradius as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-02-06T02:00:36.217"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6A113B67-B9B6-421C-9EC9-E1FB462A4214"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496389","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/freeradius-dialupadmin","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00271.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32170","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33151","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30901","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/freeradius-dialupadmin","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4475","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T21:11:38.527","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"ibackup 2.27 permite a los usuarios locales sobrescribir arbitrariamente archivos a través de un ataque de enlaces simbólicos en un fichero temporal no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ibackup:2.27:*:*:*:*:*:*:*","matchCriteriaId":"69CD36E6-10A4-45BD-8925-162983089ED3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496432","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496464","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ibackup","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00271.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45852","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ibackup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4476","sourceIdentifier":"cve@mitre.org","published":"2008-10-07T21:11:38.590","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file.  NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability."},{"lang":"es","value":"El archivo sympa.pl en sympa versión 5.3.4, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink en el archivo temporal /tmp/sympa_aliases.$$. NOTA: también se reportó el archivo wwsympa.fcgi, pero el problema se produjo en una función inactiva, por lo que no es una vulnerabilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1DBC7648-5CA9-4FF3-A6FF-C55F0D1A6D38"}]}]}],"references":[{"url":"http://bugs.debian.org/496405","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494969","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/sympa","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00312.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30727","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44499","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/sympa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00312.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4477","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T00:00:04.133","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file."},{"lang":"es","value":"alert.d/test.alert en mon 0.99.2 permite a los usuarios locales, sobrescribir arbitrariamente un archivo a través de un ataque symlink en el archivo temporal test.alert.log"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jim_trocki:mon:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"4FCDCD9A-AF30-4958-864A-6154C7D618EB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496398","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mon","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00312.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32183","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:214","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31597","source":"cve@mitre.org"},{"url":"http://www.us.debian.org/security/2008/dsa-1648","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45738","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mon","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00312.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us.debian.org/security/2008/dsa-1648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4478","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T22:36:53.587","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Múltiples desbordamientos de entero en dhost.exe en Novell eDirectory v8.8 anterior a v8.8.3, y v8.73 anterior a v8.7.3.10 ftf1, permite a atacantes remotos ejecutar código de su elección a través de (1) una cabecera \"Content-Length\" manipulada en una petición SOAP o (2) mediante un mensaje Netware Core Protocol opcode 0x0F, que lanza un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionEndIncluding":"8.7.3.10","matchCriteriaId":"ABCFB5DD-D24D-4C3B-9188-C264D9AC0B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*","matchCriteriaId":"D27AAA23-21E1-4C35-97FA-7F038E2C8923"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*","matchCriteriaId":"6658D417-B666-400A-89BD-C74A84E4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*","matchCriteriaId":"A5286A48-E77F-4D5F-8B8C-D701B9DC1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A18AD730-2782-4BC3-8B2E-D35D29EBC699"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*","matchCriteriaId":"36699D76-090F-4ED3-9C02-A09EB68F5CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*","matchCriteriaId":"9775274E-21A5-466E-B792-54F53ECCD8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*","matchCriteriaId":"1CE0CDA6-DFF5-45F7-A641-180AED4F074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B490E624-9A8E-4AD2-9B6F-BFDA431CD77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*","matchCriteriaId":"4747583B-125F-423F-863F-5CBC4CB46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*","matchCriteriaId":"F2AD4208-DD3E-427E-ADF8-5C59C59EDC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*","matchCriteriaId":"BEE923F3-28AB-4C29-A920-F363F415CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"F4DB1610-FDB3-432C-8AD7-C667DCAA29D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*","matchCriteriaId":"30ABEC83-326A-4888-BFC7-3A40BC2E2CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*","matchCriteriaId":"762D694C-7942-4265-BF99-1DE9F3BC9128"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*","matchCriteriaId":"20851E26-511C-41B2-A3BF-4E4A083A73F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*","matchCriteriaId":"57A9A26E-0FB6-4766-9C7E-CB82551BC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*","matchCriteriaId":"7CD4DD41-AD88-4AB2-BAC2-2B59AECA16BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32111","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4406","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000087&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001184&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497163/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497165/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020989","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020990","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2738","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-063","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000087&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001184&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497165/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4479","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T22:36:58.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en dhost.exe de Novell eDirectory 8.8 anterior a 8.8.3 y 8.7.3 antes de 8.7.3.10 ftf1, permite a atacantes remotos ejecutar código de su elección mediante una petición SOAP con una cabecera Accept-Language larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.3","versionEndExcluding":"8.7.3.10","matchCriteriaId":"7DE174F7-A69B-4EDB-ADA0-588E815EEFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8","versionEndExcluding":"8.8.3","matchCriteriaId":"0753F127-9985-465D-AC49-177E3585F817"}]}]}],"references":[{"url":"http://secunia.com/advisories/32111","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4405","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000086&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497164/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020989","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2738","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-064","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000086&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497164/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4480","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T22:36:58.617","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Novell eDirectory v8.x anteriores a v8.8.3, y v8.7.3 anteriores a v8.7.3.10 ftf1, permite a atacantes remotos ejecutar código arbitrario a través del mensaje manipulado del \"opcode\" 0x024 en el \"Netware Core Protocol\", que provoca un error de calculo que desborda el búfer de montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.3","versionEndExcluding":"8.7.3.10","matchCriteriaId":"7DE174F7-A69B-4EDB-ADA0-588E815EEFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8","versionEndExcluding":"8.8.3","matchCriteriaId":"0753F127-9985-465D-AC49-177E3585F817"}]}]}],"references":[{"url":"http://secunia.com/advisories/32111","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4404","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3477912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497169/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020990","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2738","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-066/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3477912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-066/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4481","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Redmine 0.7.2 y versiones anteriores que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.2","matchCriteriaId":"64580467-2FAB-4103-9F61-BC398C575B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCB74CF-B69C-4ACF-B676-17082D54A769"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D0254A2D-10A5-4843-BE58-72A3B5284DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E19773B3-33A6-439A-93BB-1FB4FA86D4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1314065B-1B7A-41BC-89F2-EAEE8EA8A6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F0BE09F2-954D-4A3E-B2D1-981EEF6AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBEA2E09-2CA8-4999-A841-02A8488F851A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F99DB71A-FBBE-4FFF-8EC6-D0EDAE8EDEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CF1E2430-4FFB-4AB4-A2BD-55711486D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0026FFCE-D748-41F4-B4E8-9852B3ED9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"554098E4-A9E5-4153-B8CD-8C987B7A8527"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"117F62E1-BEC6-416F-AD68-BC1AA260CC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"086659CB-5DD4-4B19-8223-76A85DF82D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1850A5B4-747D-4D6F-B625-7DE4857790E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5FDE853B-C003-4C9F-9A00-AF84CCD0A05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E235F356-CE27-4CFC-A064-D93E3FE0C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F66B7C8-0D70-4E53-90BC-938101BEB3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D4EDE791-F1E6-4E9C-9924-9AA8A34A2D36"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN00945448/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000038.html","source":"cve@mitre.org"},{"url":"http://www.redmine.org/wiki/redmine/Changelog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30241","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43884","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN00945448/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redmine.org/wiki/redmine/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4482","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file."},{"lang":"es","value":"El analizador XML en Xerces-C++ versiones anteriores a 3.0.0, permite a los atacantes dependientes de contexto causar una denegación de servicios (consumo de pila y caída) a través de un esquema de definición XML con un valor largo maxOccurs, el cual lanza un excesivo consumo de memoria durante la validación de un archivo XML."}],"vendorComments":[{"organization":"Red Hat","comment":"Not Vulnerable. Red Hat Enterprise MRG does not use Xerces-C++ in a manner that is vulnerable to this flaw.","lastModified":"2008-12-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.0","matchCriteriaId":"9217BE2F-D83B-4808-9829-F96694D9744D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"568CFB1C-B7E6-4E9E-A1D2-68649ECCDC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"998FBACC-799E-49BA-B5D8-D8EB0A4761C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B48C9D91-FC42-4806-8EBA-B47E19EB3B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3CD2F3C7-3764-4A74-A702-DEA03DDB9CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2553647B-FE08-4C9E-8171-4F768DA529B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1C7A4853-F0D3-4D24-B739-F632B5DB11B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D765E51D-150F-49AC-BDE0-6E59041B0434"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C835FB54-A31B-4C00-A2FD-868769B46FAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F5C179CD-415A-41A1-8327-657F9A1CB967"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7A68344B-CEB2-4A3F-8C2E-8C0D32B21525"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"85DAE439-D943-4ADC-A971-A6CB0519EE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4CA0B545-6088-49DE-A9D9-074BCC4A7AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"82C0855F-7EE8-4F56-ACBB-A64855ED0FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D2C7BA37-EAB4-47C7-BB28-2B75BEF632AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AB6DCE7B-2112-46A3-8E6C-013099FFB722"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F2369E73-C4A8-46ED-8A1F-6BC2E3C8D478"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"00E71C8D-D4DF-4F54-8CF8-D2AA67AC5690"}]}]}],"references":[{"url":"http://issues.apache.org/jira/browse/XERCESC-1051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31533","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://xerces.apache.org/xerces-c/releases.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45596","source":"cve@mitre.org"},{"url":"http://issues.apache.org/jira/browse/XERCESC-1051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://xerces.apache.org/xerces-c/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4483","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo index.php en Crux Gallery 1.32 y versiones anteiores, cuando magic_quotes_gpc es deshabiitado, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de .. (punto punto) en el parámetro theme."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:*:php5:*:*:*:*:*:*","versionEndIncluding":"1.32","matchCriteriaId":"0F5D6725-099C-432D-B587-20F09EB9A76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C5011A8E-B5CF-4097-BE8C-19E308CD6A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"528AA925-4C9C-47B0-B8A1-DAFCA5B73E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"653AD4CC-EA28-4F64-9D00-5F9BB8831DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.30:*:*:*:*:*:*:*","matchCriteriaId":"1DEDBC2D-D47C-444F-BB05-0726CB08B76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.31:*:*:*:*:*:*:*","matchCriteriaId":"A6C68F19-3778-4E52-A76C-D17DD22FE359"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.32:*:*:*:*:*:*:*","matchCriteriaId":"743DA39C-CF64-46EE-A28C-5195F160A55E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31516","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6645","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4484","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.363","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to \"users,\" as demonstrated via index.php."},{"lang":"es","value":"main.php en Crux Gallery 1.32 y versiones anteriores, supone que el usuario es un administrador, si el nombre del parámetro no es \"users\", el cual permite a los atacantes remotos obtener acceso como administrador, estableciendo el nombre del parámetro a \"users\", como se demuestra a través de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:*:php5:*:*:*:*:*:*","versionEndIncluding":"1.32","matchCriteriaId":"0F5D6725-099C-432D-B587-20F09EB9A76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C5011A8E-B5CF-4097-BE8C-19E308CD6A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"528AA925-4C9C-47B0-B8A1-DAFCA5B73E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"653AD4CC-EA28-4F64-9D00-5F9BB8831DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.30:*:*:*:*:*:*:*","matchCriteriaId":"1DEDBC2D-D47C-444F-BB05-0726CB08B76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.31:*:*:*:*:*:*:*","matchCriteriaId":"A6C68F19-3778-4E52-A76C-D17DD22FE359"},{"vulnerable":true,"criteria":"cpe:2.3:a:crux_software:gallery:1.32:*:*:*:*:*:*:*","matchCriteriaId":"743DA39C-CF64-46EE-A28C-5195F160A55E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4365","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2008-October/002083.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496763/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31430","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45443","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6586","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2008-October/002083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496763/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4485","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.470","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en \"ICAP patience page\" (XSS) en Blue Coat Security Gateway OS (SGOS) 4.2 y versiones anteriores a 4.2.9, 5.2 y versiones anteriores a 5.2.5, y 5.3 y versiones anteriores a 5.3.1.7, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:security_gateway_os:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9B860118-690A-4370-9E21-8B286861A4FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:security_gateway_os:5.2:*:*:*:*:*:*:*","matchCriteriaId":"ACE4A2CE-430E-47E5-82FA-2D607B603C47"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:security_gateway_os:5.3:*:*:*:*:*:*:*","matchCriteriaId":"5B382A8B-4EC6-4EA4-A718-A7165D5F9566"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122210321731789&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122298544725313&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4367","source":"cve@mitre.org"},{"url":"http://www.bluecoat.com/support/securityadvisories/icap_patience","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31543","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020979","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2739","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45625","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122210321731789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=122298544725313&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bluecoat.com/support/securityadvisories/icap_patience","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4486","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.503","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo index.php en SAC.php (SACphp), utilizado en Yerba 6.3 y versiones anteriores, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de .. (punto punto) en el parámetro mod."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yerba:yerba:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3","matchCriteriaId":"E15FD304-CF2C-4622-9CC2-A9BC3BF28F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:yerba:yerba:6.28:*:*:*:*:*:*:*","matchCriteriaId":"A79871AF-F1A6-440E-A2EC-127FFA457111"}]}]}],"references":[{"url":"http://secunia.com/advisories/32093","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4368","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31606","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2754","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45708","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4487","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) site_name, (2) email, (3) theme_chosen, (4) hp, (5) c_meta, (6) id, and (7) c_js parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo ap-save.php en Atarone CMS 1.2.0, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) site_name, (2) email, (3) theme_chosen, (4) hp, (5) c_meta, (6) id, y (7) c_js. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atarone:atarone:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EB4C1401-43B9-4E35-9B68-13DF2D317CEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4488","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.550","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) id parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo ap-pages.php en Atarone CMS 1.2.0 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de (1) nombre y (2) el parámetro id.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atarone:atarone:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EB4C1401-43B9-4E35-9B68-13DF2D317CEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4489","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme_chosen parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo ap-save.php en Atarone CMS 1.2.0, permite a los atacantes remotos, incluir y ejecutar arbitrariamente archivos locales a través de una secuencia de salto de directorio en el parámetro theme_chosen. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atarone:atarone:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EB4C1401-43B9-4E35-9B68-13DF2D317CEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4490","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T02:00:01.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the userInfo cookie."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo config.inc.php en phpAbook 0.8.8b y versiones anteriores, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos a través de .. (punto punto) en la cookie userInfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpabook:phpabook:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.8b","matchCriteriaId":"94F86FC9-BA87-4A3C-9131-76535366380C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpabook:phpabook:0.8.4b:*:*:*:*:*:*:*","matchCriteriaId":"3E3D2349-7E26-481C-BB7D-53DC25DBCE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpabook:phpabook:0.8.6b:*:*:*:*:*:*:*","matchCriteriaId":"A3ED7309-73BA-4606-8E39-2C7D696E70B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpabook:phpabook:0.8.7b:*:*:*:*:*:*:*","matchCriteriaId":"177BE709-B457-434E-80EB-CDC8A3BA9602"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4364","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31581","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45680","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6679","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4491","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T18:00:03.503","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mail.app 3.5 on Mac OS X, when \"Store draft messages on the server\" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail."},{"lang":"es","value":"Apple Mail.app v3.5 en Mac OS X, cuando está habilitado \"Guardar los borradores en el servidor\", guarda los borradores del correo electrónico S/MIME en texto plano en el servidor de correo, esto permite a los propietarios del servidor y a atacantes de tipo \"hombre en el medio\" (man-in-the-middle) leer los borradores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mail:3.5:*:*:*:*:*:*:*","matchCriteriaId":"2D4AFB0E-488A-4102-AFEA-D697E21EC43C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]}]}],"references":[{"url":"http://enablesecurity.com/2008/10/03/apple-mailapp-security-advisory/","source":"cve@mitre.org"},{"url":"http://resources.enablesecurity.com/advisories/apple-mailapp-smime.txt","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4363","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497057/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31598","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45688","source":"cve@mitre.org"},{"url":"http://enablesecurity.com/2008/10/03/apple-mailapp-security-advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://resources.enablesecurity.com/advisories/apple-mailapp-smime.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497057/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4492","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T18:00:03.550","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en referrals.php en YourOwnBux 4.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cookie usNick."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourownbux:yourownbux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0A927C2E-DA07-4957-80FB-322E8BE995BA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4362","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31624","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45737","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6693","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4493","sourceIdentifier":"cve@mitre.org","published":"2008-10-08T22:00:02.013","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request.  NOTE: this issue might only be exploitable in limited environments or non-default browser settings."},{"lang":"es","value":"Control ActiveX Microsoft PicturePusher (PipPPush.DLL 7.00.0709), como el utilizado en Microsoft Digital Image 2006 Starter Edition; permite a atacantes remotos forzar la subida de ficheros de su elección utilizando los métodos de \"AddString\" y \"Post\" y una PostURL modificada para construir una solicitud HTTP POST. NOTA: esta vulnerabilidad puede que sólo sea explotada en determinados entornos o en navegadores que no tengan definidas las características por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image:2006:unknown:starter:*:*:*:*:*","matchCriteriaId":"EEDE9D26-E13C-489B-AD73-9C3063647090"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31632","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45735","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6699","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4494","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:00.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabildiad de inyección SQL en completed-advance.php de TorrentTrader Classic v1.08, y v1.04 y anteriores; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" (identificador)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08","matchCriteriaId":"8F933F26-6A1F-4D01-8F2F-D129F010EC41"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.04:*:*:*:*:*:*:*","matchCriteriaId":"C2929911-F921-48D0-B264-B69E97595F78"}]}]}],"references":[{"url":"http://secunia.com/advisories/32118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4375","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31626","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45728","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6698","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4495","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_cat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the v_cat parameter."},{"lang":"es","value":"Vulnerabildiad de inyección SQL en view_cat.php de PHP Auto Dealer 2.7, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro v_cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:select_development_solutions:php_auto_dealer:2.7:*:*:*:*:*:*:*","matchCriteriaId":"AC1F8991-64BD-40B4-9A0A-870A68EF7CFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32147","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4369","source":"cve@mitre.org"},{"url":"http://selectdevelopment.com/products/phpautodealer/changelog.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45725","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://selectdevelopment.com/products/phpautodealer/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4496","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_cat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the v_cat parameter."},{"lang":"es","value":"Vulnerabildiad de inyección SQL en view_cat.php de PHP Realtor 1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro v_cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:select_development_solutions:php_realtor:1.5:*:*:*:*:*:*:*","matchCriteriaId":"03C1165A-1EF8-454F-8DBF-7D075AB71AE3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4374","source":"cve@mitre.org"},{"url":"http://selectdevelopment.com/products/phprealtor/changelog.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45726","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://selectdevelopment.com/products/phprealtor/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4497","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.070","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the event_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en event_detail.php de Built2Go Real Estate Listings 1.5; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro event_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:built2go:real_estate_listings:1.5:*:*:*:*:*:*:*","matchCriteriaId":"705A50C9-6954-4249-A45B-BFE6BAC3E4A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32129","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4373","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31628","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45736","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4498","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en searchresults.php de PHP Autos v2.9.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpautos:phpautos:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F28921BE-4C0A-4486-A5F4-26ECD9CFE7BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32139","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4372","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31622","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45727","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6696","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4499","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.150","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) refer parameter to main.php and the (2) file parameter to edit.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en PHP Web Explorer v0.99b y anteriores, permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en los parámetros (1) \"refer\" de main.php y (2) \"file\" (fichero) de edit.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_web_explorer:php_web_explorer_lite:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99b","matchCriteriaId":"EDD5021C-F6E1-4823-884F-C7A5B28BE89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_web_explorer:php_web_explorer_lite:0.99a:*:*:*:*:*:*:*","matchCriteriaId":"D2B127A8-C6EC-4307-B110-9575767B2977"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122332154511973&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31595","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45691","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122332154511973&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4500","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using \"con:1\"."},{"lang":"es","value":"Serv-U v7.3, y v7.2.0.1 y anteriores, permite a usuarios autenticados en remoto provocar una denegación de servicio (consumo de la CPU) a través de un comando stou manipulado; probablemente está relacionado con los nombres de dispositivo de MS-DOS, como se ha demostrado usando \"con:1\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CD3CE83-3E37-464C-A511-CDF7E735E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"243CCCC8-9860-4440-9E80-12668270F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6D6DD1-D98B-46C1-921C-9B045C234377"}]}]}],"references":[{"url":"http://secunia.com/advisories/32150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4377","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31556","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2746","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45652","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4501","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.213","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\\ (dot dot backslash) in the RNTO command."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servidor FTP de Serv-U v7.3, y v7.2.0.1 y anteriores, permite a usuarios autenticados en remoto sobrescribir o crear ficheros de su elección mediante un ..\\ (punto punto barra invertida) en el comando RNTO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CD3CE83-3E37-464C-A511-CDF7E735E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"243CCCC8-9860-4440-9E80-12668270F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6D6DD1-D98B-46C1-921C-9B045C234377"}]}]}],"references":[{"url":"http://secunia.com/advisories/32150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4378","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2746","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6661","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4502","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T00:00:01.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow remote attackers to execute arbitrary PHP code via a URL in the DFF_config[dir_include] parameter to (1) DFF_affiliate_client_API.php, (2) DFF_featured_prdt.func.php, (3) DFF_mer.func.php, (4) DFF_mer_prdt.func.php, (5) DFF_paging.func.php, (6) DFF_rss.func.php, and (7) DFF_sku.func.php in include/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP DataFeedFile (DFF) PHP Framework API; permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"DFF_config[dir_include]\" en (1) DFF_affiliate_client_API.php, (2) DFF_featured_prdt.func.php, (3) DFF_mer.func.php, (4) DFF_mer_prdt.func.php, (5) DFF_paging.func.php, (6) DFF_rss.func.php,  y (7) DFF_sku.func.php en include/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datafeedfile:dff_framework_api:*:*:*:*:*:*:*:*","matchCriteriaId":"A08BBCBB-F786-4640-A2A0-2DC24F3E322B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32166","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31644","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45764","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4503","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:01.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to \"clickjacking.\""},{"lang":"es","value":"El Administrador de configuración en el Adobe Flash Player v9.0.124.0 y versiones anteriores permite a atacantes remotos que los usuarios hagan clic sin saberlo en unos controles que no se distinguen de los normales en un lugar que permite secuestrar la camara o el microfono, esta relacionado con el clickjacking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0_r67:*:*:*:*:*:*:*","matchCriteriaId":"7AB20235-B2F2-426E-B797-BFA361CEC488"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0_r67:*:solaris:*:*:*:*:*","matchCriteriaId":"5E3A9173-468E-4054-B00F-6D506EBF47FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/","source":"cve@mitre.org"},{"url":"http://ha.ckers.org/blog/20081007/clickjacking-details/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32163","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32448","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-08.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31625","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020996","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2764","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45721","source":"cve@mitre.org"},{"url":"http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ha.ckers.org/blog/20081007/clickjacking-details/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa08-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4504","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:01.927","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a \"long entry.\" NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mplayer.exe en Herosoft Inc. Hero DVD Player v3.0.8 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un fichero .M3u con una entrada demasiado larga. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:herosoft:hero_dvd_player:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1D1CE3B0-6D21-4810-953B-392805C58372"}]}]}],"references":[{"url":"http://secunia.com/advisories/31933","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4505","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:01.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow attackers to cause a denial of service (system crash) via a \"nonstandard URL argument\" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability."},{"lang":"es","value":"Vulnerabilidad inespecifica en IBM Lotus Quickr v8.1 anterior al parche 1 (v8.1.0.1) que permite a atacantes producir una denegación de servicio (caida del sistema) a través de un argumento URL no estandar al comando OpenDocument.NOTA: Debido a la falta de detalles del vendedor, no queda claro que esto sea una vulnerabilidad"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.1:*:*:*:*:*:*:*","matchCriteriaId":"83B3B388-0438-4806-9F21-2170428739DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31608","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2753","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45692","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4506","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:01.973","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place manager to \"demote or delete a place superuser group\" via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en Lotus Quickr de IBM versiones 8.1 anteriores al Fixpack 1 (8.1.0.1), permite a un administrador de lugares \"demote or delete a place superuser group\" por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.1:*:*:*:*:*:*:*","matchCriteriaId":"83B3B388-0438-4806-9F21-2170428739DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31608","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4507","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.003","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows editors to delete pages that were created by a different author via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM Lotus Quickr 8.1 anterior a Fix pack 1 (8.1.0.1) permite a los editores borrar paginas que fueron creadas por un autor diferente mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.1:*:*:*:*:*:*:*","matchCriteriaId":"83B3B388-0438-4806-9F21-2170428739DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31608","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2753","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4508","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.020","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string.  NOTE: this is probably a different vulnerability than CVE-2005-2210."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el fichero de la función de parseado en el Tonec Internet Download Manager, posiblemente el v5.14 y versiones anteriores, lo que permite a atacantes remotos producir una denegación de servicio (caida) y una posible ejecución de código a elección del atacante a través del fichero AppleDouble llevando una cadena larga. NOTA: Probablemente esta es una vulnerabilidad diferente de CVE-2005-2210."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tonec_inc.:internet_download_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"428EDDC6-8C59-43A6-B112-5BE9162518E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tonec_inc.:internet_download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.14","matchCriteriaId":"584F606B-9803-4289-AACD-C3F705AB595F"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45711","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4509","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the root directory."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en el archivo processFiles.php en FOSS Gallery Admin y FOSS Gallery Public 1.0 beta, que permite a los atacante remotos ejecutar arbitrariamente código a través de la subida de un archivo con una extensión ejecutable, entonces accedemos a través de una petición directa al archivo en el directorio raíz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foss_gallery:foss_gallery:1.0:beta:admin:*:*:*:*:*","matchCriteriaId":"E69FFBA6-08FE-49BD-8040-C412B2AA5317"},{"vulnerable":true,"criteria":"cpe:2.3:a:foss_gallery:foss_gallery:1.0:beta:public:*:*:*:*:*","matchCriteriaId":"C8754F81-A8BF-4B72-ADB4-8064FCF5CCE8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4379","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45683","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6670","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6674","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6680","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4510","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.067","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service (page fault and system crash) via multiple attempts to access a virtual address in a PAGE_NOACCESS memory page."},{"lang":"es","value":"Microsoft Windows Vista Home y Ultimate Edition SP1 y anteriores permite a usuarios locales provocar una denegación de servicio (fallo de página de memoria y caída del sistema) mediante intentos múltiples de acceso a la dirección virtual en una página de memoria \"PAGE_NOACCESS\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:home_basic:*:*:*:*:*","matchCriteriaId":"5461D077-7C1B-4B9C-AEF0-E967FC07F502"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:home_premium:*:*:*:*:*","matchCriteriaId":"80171C26-D9B8-41F2-B39C-9FE883985C19"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:ultimate:*:*:*:*:*","matchCriteriaId":"C982A77E-4EDF-4E32-BED4-CCC175A3D882"}]}]}],"references":[{"url":"http://secunia.com/advisories/32115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4388","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31570","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45719","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6671","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4511","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.097","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request."},{"lang":"es","value":"Todd Woolums ASP News Management, posiblemente 2.21, guarda el archivo db/news.mdb bajo el directorio raíz web, con insuficiente control de acceso, lo que permite a los atacante remotos obtener información privilegiada a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:todd_woolums:asp_news_management:*:*:*:*:*:*:*:*","matchCriteriaId":"32F633FF-DD29-4687-AEA4-F6BCB0BDEE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_woolums:asp_news_management:2.21:*:*:*:*:*:*:*","matchCriteriaId":"BC84C394-A992-486C-B0A3-8544D45E12C7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4380","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496787/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45838","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496787/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4512","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request."},{"lang":"es","value":"ASP/MS Access Shoutbox, probablemente v1.1 Beta almecena db/shoutdb.mdb en el directorio raiz web con insuficiente control de acceso, el cual permite a atacantes remotos conseguir información sensible a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:designplace:asp\\/ms_access_shoutbox:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"FC063EC2-72CC-43DB-A3CD-3FF05665D012"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4395","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496789/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45837","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496789/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4513","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.143","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo BBcode API en Phorum v5.2.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una etiqueta \"image\" (imagen) en BBcode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FB5E063A-F59F-4CEB-9950-2FE8D25FF9FF"}]}]}],"references":[{"url":"http://nulledcore.com/?p=126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32225","source":"cve@mitre.org"},{"url":"http://trac.phorum.org/changeset/3528","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.phorum.org/phorum5/read.php?64%2C133699","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31589","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45686","source":"cve@mitre.org"},{"url":"http://nulledcore.com/?p=126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.phorum.org/changeset/3528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.phorum.org/phorum5/read.php?64%2C133699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4514","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.160","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a font tag with a long color value, which triggers an assertion error."},{"lang":"es","value":"El analizador HTML en KDE Konqueror 3.5.9 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante una etiqueta font con una valor de color largo, que desemboca en un error de aserción."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider a crash of a client application such as Konqueror to be a security issue.","lastModified":"2017-09-28T21:32:11.913"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:konqueror:konqueror:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"9B70AF59-B19C-46E7-B320-FB5E629F707D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4394","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31605","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6689","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4515","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.190","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript."},{"lang":"es","value":"Blue Coat K9 Web Protection 4.0.230 Beta basado en el JavaScript del cliente como mecanismo de proteccion, permite a atacantes remotos evitar la autenticación y el acceso a (1) summary, (2) detail, (3) overrides, and (4) pwemail desactivando el JavaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blue_coat_systems:k9_web_protection:4.0.230:beta:*:*:*:*:*:*","matchCriteriaId":"2DB7FD37-F31E-416F-BF91-8101914BDE05"}]}]}],"references":[{"url":"http://dicas3000.blogspot.com/2008/10/blue-coat-k9-web-protection-v40230-beta.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Oct/0070.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45696","source":"cve@mitre.org"},{"url":"http://dicas3000.blogspot.com/2008/10/blue-coat-k9-web-protection-v40230-beta.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2008/Oct/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4516","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:00:02.223","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via the pic parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo galerie.php en Galerie 3.2 que permite a los atacantes remotos ejecutar arbitrariamente comando SQL a través del parámetro pic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galerie:galerie:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D888F99E-4C3A-4D02-BAB4-2D6EACCE7917"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4381","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31593","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6675","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4517","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:14.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en leggi.php de     geccBBlite 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parametro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geccbblite:geccbblite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2690DF9D-83CE-4BB2-AA2C-0982B61036D1"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31585","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45682","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6677","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4518","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:14.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbitrary SQL commands via the (1) sprache parameter to index2.php and the (2) artikel parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de código SQL en Fastpublish CMS 1.9.9.9.9 d (1.9999 d) que permite a atacantes remotos ejecutar comandos SQL a su elección a traves de (1) el parámetro \"sprache\" a index2.php y el (2) parámetro \"artikel\" a index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastpublish:fastpublish_cms:1.9.9.9.9d:*:*:*:*:*:*:*","matchCriteriaId":"26BE2239-1C65-40C3-8420-A7650A9C7033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastpublish:fastpublish_cms:1.9999d:*:*:*:*:*:*:*","matchCriteriaId":"6630D638-8EDA-4848-9698-391E645A95D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31582","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45671","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4519","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the target parameter to (1) index2.php and (2) index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Fastpublish CMS v1.9.9.9.9.d permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante los caracteres .. (punto punto) en el parámetro \"target\" (objetivo) en (1) index2.php y en (2) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastpublish:fastpublish_cms:1.9.9.9.9d:*:*:*:*:*:*:*","matchCriteriaId":"26BE2239-1C65-40C3-8420-A7650A9C7033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastpublish:fastpublish_cms:1.9999d:*:*:*:*:*:*:*","matchCriteriaId":"6630D638-8EDA-4848-9698-391E645A95D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31582","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45673","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4520","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.060","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bulk_update.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en bulk_update.pl en AutoNessus en versiones anteriores a 1.2.2 que permite a atacantes remotos inyectar una secuencia de comandos web o HTML a su elección a traves del parametro \"remark\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonessus:autonessus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"174293A2-DA78-455E-A9DD-517C453E0B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonessus:autonessus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CAF1B03F-D43E-4842-83D4-A4C025C25AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonessus:autonessus:1.1:*:*:*:*:*:*:*","matchCriteriaId":"55F8FF20-9C6B-4C50-ACA7-DB145648A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonessus:autonessus:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F7F9137F-CD80-4B3C-9623-AF473D6BD33A"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonessus:autonessus:1.2:*:*:*:*:*:*:*","matchCriteriaId":"5083B9AA-2BEE-4296-930A-AAF0354DE810"}]}]}],"references":[{"url":"http://autonessus.cvs.sourceforge.net/viewvc/autonessus/AutoNessus/www/bulk_update.pl?r1=1.2&r2=1.3","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=216367&release_id=630124","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2141884&group_id=216367&atid=1037394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31559","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45634","source":"cve@mitre.org"},{"url":"http://autonessus.cvs.sourceforge.net/viewvc/autonessus/AutoNessus/www/bulk_update.pl?r1=1.2&r2=1.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=216367&release_id=630124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2141884&group_id=216367&atid=1037394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4521","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFO_RAID_ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo thisraidprogress.php en el módulo World of Warcraft tracker infusion (raidtracker_panel) 2.0 para PHP-Fusion que permite a los atacante remotos ejecutar arbitariamente comandos SQL a través del parámetro INFO_RAID_ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:world_of_warcraft_tracker_infusion_module:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45716096-F386-4910-9E6F-D6F4D88D1349"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4384","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31579","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45675","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6682","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4522","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.107","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the src parameter to (1) listen.php and (2) download.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en JMweb MP3 Music Audio Search and Download Script que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de ..(punto punto), el parámetro SRC para (1) listen.php y (2) download.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jesse-web:jmweb_mp3_music_audio_search_and_download_script:*:*:*:*:*:*:*:*","matchCriteriaId":"72CDE99A-6B56-4762-893A-72BAC3C6AD65"}]}]}],"references":[{"url":"http://secunia.com/advisories/32141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4386","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31573","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45672","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4523","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the user_name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en IP Reg v0.4 y versiones anteriores que permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"user_name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ip_reg:ip_reg:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"DA660776-AC61-4C86-9ED2-D55BD521B28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ip_reg:ip_reg:0.1:*:*:*:*:*:*:*","matchCriteriaId":"FE66880A-E208-472C-A3D0-4014FDB5523F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ip_reg:ip_reg:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E62AB109-F948-4392-9E30-5B863036E87F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ip_reg:ip_reg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E994A6F-0AE8-4B4D-938A-671F47C70CB0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4389","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31561","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45641","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6657","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4524","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the \"Check User\" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la funcionalidad \"Check User\" (includes/check_user.php) en AdaptCMS Lite y AdaptCMS Pro v1.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"user_name\" (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adaptcms:adaptcms:1.3:unknown:lite:*:*:*:*:*","matchCriteriaId":"570519AB-4E6A-413E-B7A5-31BE1BFE48C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adaptcms:adaptcms:1.3:unknown:pro:*:*:*:*:*","matchCriteriaId":"0DD6852B-1847-4849-9FD1-BB27849E19DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32171","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4392","source":"cve@mitre.org"},{"url":"http://www.adaptcms.com/article/51/News/URGENT-AdaptCMS-13-Security-Fix-Released/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31557","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45642","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adaptcms.com/article/51/News/URGENT-AdaptCMS-13-Security-Fix-Released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4525","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via the special parameter in a performerid action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en AmpJuke 0.7.5 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de el parámetro special en una acción performerid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ampjuke:ampjuke:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"89843005-113F-48E7-88D4-278B5865F010"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ampjuke-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32168","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31592","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45665","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ampjuke-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4526","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php, (2) forums.php, (3) admin.php, (4) header.php, (5) pages/story.php and (6) pages/poll.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en CCMS 3.1 que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de ..(punto punto) en el parámetro skin para (1) index.php, (2) forums.php, (3) admin.php, (4) header.php, (5) pages/story.php y(6) pages/poll.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:customcms:ccms:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2008007C-3FD9-4E62-A677-4BD958225B37"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6663","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4527","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the kat_id parameter in a kategorier action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en recept.php en el modulo Recepies (Recept) 1.1 para PHP-Fusion que permite a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro \"kat_id\" en una acción Kategorier. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:recepies_module:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D38E7C39-1E08-4CFC-A1A9-411B6FDC1F28"}]}]}],"references":[{"url":"http://secunia.com/advisories/32004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4385","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45674","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4528","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter in an edit action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en notes.php en Phlatline's Personal Information Manager (pPIM) v1.01 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante los caracteres .. (punto punto) en el parámetro \"id\" en la acción \"edit\" (editar)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phlatline:personal_information_manager:1.01:*:*:*:*:*:*:*","matchCriteriaId":"BF68C474-A34A-40C0-8E4C-452E48B079A6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4390","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31571","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45681","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6667","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4529","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the _ENV[asicms][path] parameter to (1) Association.php, (2) BigMath.php, (3) DiffieHellman.php, (4) DumbStore.php, (5) Extension.php, (6) FileStore.php, (7) HMAC.php, (8) MemcachedStore.php, (9) Message.php, (10) Nonce.php, (11) SQLStore.php, (12) SReg.php, (13) TrustRoot.php, and (14) URINorm.php in classes/Auth/OpenID/; and (15) XRDS.php, (16) XRI.php and (17) XRIRes.php in classes/Auth/Yadis/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en asiCMS alpha 0.208 que permite a los atacante remotos ejecutar arbitrariamente código PHP a través de URL en el parámetro the _ENV[asicms][path] para (1) Association.php, (2) BigMath.php, (3) DiffieHellman.php, (4) DumbStore.php, (5) Extension.php, (6) FileStore.php, (7) HMAC.php, (8) MemcachedStore.php, (9) Message.php, (10) Nonce.php, (11) SQLStore.php, (12) SReg.php, (13) TrustRoot.php, y (14) URINorm.php en classes/Auth/OpenID/; y (15) XRDS.php, (16) XRI.php y (17) XRIRes.php en classes/Auth/Yadis/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asicms:asicms:0.208:alpha:*:*:*:*:*:*","matchCriteriaId":"EB2570CA-6A15-48A0-A5EC-A06AE3FEFD56"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31601","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2755","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45684","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6685","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4530","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS)en Brilliant Gallery v5.x y anteriores a 5.x-4.2, un modulo de Drupal que permite que usuarios remotos autenticados con permisos inyectar arbitrariamente una secuencia de comandos web o HTML a trves de vectores no especificados relacionados con la publicacion de respuestas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-4.1","matchCriteriaId":"AECACF72-4B4B-4AC1-BECF-266A55DA2C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"AEAD7FB8-9589-46FC-91BD-1966BEFD17E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0527F2-6959-419E-A97E-4CFD718C41D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"77DBA77C-4DE9-433F-BD7D-2A254716D662"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"AA523D91-BAEB-4D74-B7B7-44D26143D1EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"CD51AAC7-E4D2-4082-B2E4-3CD1625430F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"21F96200-C05A-4A1C-9181-429A97C00932"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"61C6AEFE-E6FA-4428-8E76-21A9AC419AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"B8ED84A9-0DF0-4D82-87D7-DD967FFD58DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"C5273EDC-14D8-4C3E-80C0-618E3E040DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.7:*:*:*:*:*:*:*","matchCriteriaId":"94CFC732-D0D1-40FA-AA0E-3FD2FB9E547A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.8:*:*:*:*:*:*:*","matchCriteriaId":"08EA434A-25C3-4AD2-ADDF-6A45EEF84156"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.9:*:*:*:*:*:*:*","matchCriteriaId":"D183BDED-EE22-4E2F-A403-BA3E3C1CB4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.10:*:*:*:*:*:*:*","matchCriteriaId":"8CE03200-80CD-49EE-91D2-9DC7704EA2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.11:*:*:*:*:*:*:*","matchCriteriaId":"B708ED3C-069D-4E97-9E7B-B8DA6D972C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.12:*:*:*:*:*:*:*","matchCriteriaId":"D818BA57-5C1B-420F-9828-A339D2955690"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.13:*:*:*:*:*:*:*","matchCriteriaId":"CA67758C-3BAF-43DA-9D01-9F385AFC8E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.14:*:*:*:*:*:*:*","matchCriteriaId":"3D862E18-FB75-4189-AB78-D5B5D4013D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.15:*:*:*:*:*:*:*","matchCriteriaId":"40F8C899-E712-4299-9C55-DC0B8DEA1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.16:*:*:*:*:*:*:*","matchCriteriaId":"2483F7C2-805E-418B-9427-EF59C0E3F499"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.17:*:*:*:*:*:*:*","matchCriteriaId":"F9ECD33F-E8B2-4DD8-9448-1D79F800FE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"E39B6F12-E6FA-4EDD-B6A4-9D7724F1EA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"D8DD8BD6-D53B-44CB-A98B-8D7C136A0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"6DC5BC1F-082A-47AD-96F3-3AB06D797B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"D830D093-C602-4708-8972-05EAB201FF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"25FBBB95-2FC1-47E7-8303-EB7E9B72980E"}]}]}],"references":[{"url":"http://drupal.org/node/315919","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31554","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45636","source":"cve@mitre.org"},{"url":"http://drupal.org/node/315919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4531","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries.  NOTE: this might be the same issue as CVE-2008-4338."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Brilliant Gallery (para Drupal) 5.x y versiones anteriores a 5.x-4.2, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados, en relación a preguntas. NOTA: esto debe de ser el mismo asunto que CVE-2008-4338."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-4.1","matchCriteriaId":"AECACF72-4B4B-4AC1-BECF-266A55DA2C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"AEAD7FB8-9589-46FC-91BD-1966BEFD17E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0527F2-6959-419E-A97E-4CFD718C41D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"77DBA77C-4DE9-433F-BD7D-2A254716D662"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"AA523D91-BAEB-4D74-B7B7-44D26143D1EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"CD51AAC7-E4D2-4082-B2E4-3CD1625430F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"21F96200-C05A-4A1C-9181-429A97C00932"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"61C6AEFE-E6FA-4428-8E76-21A9AC419AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"B8ED84A9-0DF0-4D82-87D7-DD967FFD58DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"C5273EDC-14D8-4C3E-80C0-618E3E040DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.7:*:*:*:*:*:*:*","matchCriteriaId":"94CFC732-D0D1-40FA-AA0E-3FD2FB9E547A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.8:*:*:*:*:*:*:*","matchCriteriaId":"08EA434A-25C3-4AD2-ADDF-6A45EEF84156"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.9:*:*:*:*:*:*:*","matchCriteriaId":"D183BDED-EE22-4E2F-A403-BA3E3C1CB4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.10:*:*:*:*:*:*:*","matchCriteriaId":"8CE03200-80CD-49EE-91D2-9DC7704EA2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.11:*:*:*:*:*:*:*","matchCriteriaId":"B708ED3C-069D-4E97-9E7B-B8DA6D972C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.12:*:*:*:*:*:*:*","matchCriteriaId":"D818BA57-5C1B-420F-9828-A339D2955690"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.13:*:*:*:*:*:*:*","matchCriteriaId":"CA67758C-3BAF-43DA-9D01-9F385AFC8E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.14:*:*:*:*:*:*:*","matchCriteriaId":"3D862E18-FB75-4189-AB78-D5B5D4013D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.15:*:*:*:*:*:*:*","matchCriteriaId":"40F8C899-E712-4299-9C55-DC0B8DEA1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.16:*:*:*:*:*:*:*","matchCriteriaId":"2483F7C2-805E-418B-9427-EF59C0E3F499"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-2.17:*:*:*:*:*:*:*","matchCriteriaId":"F9ECD33F-E8B2-4DD8-9448-1D79F800FE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"E39B6F12-E6FA-4EDD-B6A4-9D7724F1EA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"D8DD8BD6-D53B-44CB-A98B-8D7C136A0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"6DC5BC1F-082A-47AD-96F3-3AB06D797B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"D830D093-C602-4708-8972-05EAB201FF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:brilliant_gallery:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"25FBBB95-2FC1-47E7-8303-EB7E9B72980E"}]}]}],"references":[{"url":"http://drupal.org/node/315919","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32106","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31554","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45637","source":"cve@mitre.org"},{"url":"http://drupal.org/node/315919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4532","sourceIdentifier":"cve@mitre.org","published":"2008-10-09T18:14:15.357","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en MaxiScript Website Directory que permite a los atacantes remotos, inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro keyword en una acción de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxiscript:website_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"E7804243-E42A-43A8-921C-898EB8EBE327"}]}]}],"references":[{"url":"http://secunia.com/advisories/32176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496967/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31562","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45657","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4533","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T10:30:05.230","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://unyora.sakura.ne.jp/soft/EasyHTTPServer/index.html","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Kantan WEB Server 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Kantan WEB Server v1.8 y versiones anteriores que permite a atacantes remotos insertar una secuencia arbitraria de comandos web o HTML a través de vectores no especificados"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katan:web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"9BBE4B93-BC08-46C7-876C-A994701C8D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:katan:web_server:1.6:*:*:*:*:*:*:*","matchCriteriaId":"E8B3EA93-4F19-439B-A7E6-D8EDBCB449B8"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN94163107/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000060.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31917","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48222","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31244","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45242","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN94163107/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4534","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T18:13:00.473","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el paquete EC_CUBE Ver2 2.1.2a y anteriores y Ver2 RC 2.3.0-rc1 y anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2a","matchCriteriaId":"099EFDBC-54E7-476C-A372-1E141A655270"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"20CB26F0-B24E-46EE-8BEF-6127E8A37AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A4556C6-7E7D-448F-AC14-AC7E357B1946"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5B2C6C16-0495-4D81-A491-7CA851DF9E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.5.0:b2:*:*:*:*:*:*","matchCriteriaId":"BA1CD6E5-E598-4203-8FB5-71F3DD390BFF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN81111541/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/080829","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45593","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN81111541/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/080829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4535","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T18:13:00.503","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE Community Edition Nighly-Build r17623 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4536 and CVE-2008-4537."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en EC-CUBE Ver1 versionles 1.4.6 y anteriores, Ver1 beta-beta 1.5.0 y anteriores, Ver2 2.1.2a y anteriores, Ver2 Beta (RC)-beta 2.1.1 y anteriores, Community Edition 1.3.4 y anteriores, y Community Edition Nightly-build r17336 y anteriores permite a atacantes remotos inyectar HTML o secuencias de comandos arbitrarios a través de vectores no especificados. Se trata de una vulnerabilidad diferente a la CVE-2008-4535 y CVE-2008-4536."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2a","matchCriteriaId":"099EFDBC-54E7-476C-A372-1E141A655270"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"20CB26F0-B24E-46EE-8BEF-6127E8A37AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A4556C6-7E7D-448F-AC14-AC7E357B1946"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5B2C6C16-0495-4D81-A491-7CA851DF9E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.5.0:b2:*:*:*:*:*:*","matchCriteriaId":"BA1CD6E5-E598-4203-8FB5-71F3DD390BFF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN99916563/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000064.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32065","source":"cve@mitre.org"},{"url":"http://www.ec-cube.net/release/detail.php?release_id=193","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45591","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN99916563/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ec-cube.net/release/detail.php?release_id=193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4536","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T18:13:00.520","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4537."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en EC-CUBE Ver1 Versiones 1.4.6 y anteriores, Ver1 beta-beta 1.5.0 y anteriores, Ver2 2.1.2a y anteriores, Ver2 Beta (RC)-beta 2.2.0 y anteriores, Community Edition 1.3.4 y anteriores, y Community Edition Nightly-build r17319 y anteriores, permite a atacantes remotos inyectar HTML o secuencias de comandos Web arbitrarios a través de vectores no especificados. Se trata de un problema diferente a las vulnerabilidades CVE-2008-4535 y CVE-2008-4537."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:unknown:community_edition:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"C0BC2394-8D3B-488D-A9DC-78283EA40AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2a","matchCriteriaId":"099EFDBC-54E7-476C-A372-1E141A655270"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"20CB26F0-B24E-46EE-8BEF-6127E8A37AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A4556C6-7E7D-448F-AC14-AC7E357B1946"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5B2C6C16-0495-4D81-A491-7CA851DF9E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.5.0:b2:*:*:*:*:*:*","matchCriteriaId":"BA1CD6E5-E598-4203-8FB5-71F3DD390BFF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN36085487/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32065","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ec-cube.net/release/detail.php?release_id=193","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45850","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN36085487/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ec-cube.net/release/detail.php?release_id=193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4537","sourceIdentifier":"cve@mitre.org","published":"2008-10-10T18:13:00.550","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados(XSS) en EC-CUBE Ver1 Versiones 1.4.6 y anteriores, Ver1 beta-beta 1.5.0 y anteriores, Ver2 2.1.2a y anteriores, Ver2 Beta (RC)-beta 2.1.1 y anteriores, Community Edition 1.3.4 y anteriores, y Community Edition Nightly-build r17336  y anteriores, permite a atacantes remotos inyectar HTML o secuencias de comandos arbitrarios Web a través de vectores no especificados. Se trata de un problema diferente a las vulnerabilidades CVE-2008-4535 y CVE-2008-4536."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:unknown:community_edition:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"C0BC2394-8D3B-488D-A9DC-78283EA40AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2a","matchCriteriaId":"099EFDBC-54E7-476C-A372-1E141A655270"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"20CB26F0-B24E-46EE-8BEF-6127E8A37AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A4556C6-7E7D-448F-AC14-AC7E357B1946"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5B2C6C16-0495-4D81-A491-7CA851DF9E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.5.0:b2:*:*:*:*:*:*","matchCriteriaId":"BA1CD6E5-E598-4203-8FB5-71F3DD390BFF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN26621646/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000062.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/release/detail.php?release_id=193","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45851","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN26621646/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/release/detail.php?release_id=193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4539","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX \"bitblt\" heap overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2007-1320."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la implementación Cirrus VGA en (1) KVM anterior a kvm-82 y (2) QEMU sobre Debian GNU/Linux y Ubuntu, podría permitir a usuarios locales obtener privilegios mediante el uso de la consola VNC para realizar una conexión, también conocido como el desbordamiento LGD-54XX \"bitblt\". NOTA: esta cuestión existe por una incorrecta corrección del CVE-2007-1320."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kvm_qumranet:kvm:*:*:*:*:*:*:*:*","versionEndIncluding":"81","matchCriteriaId":"E9E9C624-AC0A-4BD4-9D3F-85BC3E0FD620"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.0","matchCriteriaId":"650BA65B-ADD5-44ED-819D-609E4CF57749"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:*","matchCriteriaId":"019A2188-0877-45DE-8512-F0BF70DD179C"},{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*","matchCriteriaId":"5920923E-0D52-44E5-801D-10B82846ED58"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.kernel.dk/?p=qemu.git%3Ba=commitdiff%3Bh=65d35a09979e63541afc5bfc595b9f1b1b4ae069","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/linux.debian.changes.devel/msg/9e0dc008572f2867?dmode=source","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/25073","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29129","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33350","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35031","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35062","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5587","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1799","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mail-archive.com/cvs-all%40freebsd.org/msg129730.html","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/secure-testing-commits%40lists.alioth.debian.org/msg09322.html","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=237342","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448525","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=466890","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47736","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://launchpad.net/ubuntu/jaunty/+source/qemu/0.9.1+svn20081112-1ubuntu1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.dk/?p=qemu.git%3Ba=commitdiff%3Bh=65d35a09979e63541afc5bfc595b9f1b1b4ae069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/linux.debian.changes.devel/msg/9e0dc008572f2867?dmode=source","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/25073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/29129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mail-archive.com/cvs-all%40freebsd.org/msg129730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/secure-testing-commits%40lists.alioth.debian.org/msg09322.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=237342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=466890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://launchpad.net/ubuntu/jaunty/+source/qemu/0.9.1+svn20081112-1ubuntu1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4540","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.293","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access."},{"lang":"es","value":"Windows Mobile 6 en dispositivos HTC Hermes deja activado el mecanismo de auto-completado de las contraseñas de la WLAN, lo cual permite a atacantes físicamente próximos al dispositivo evitar la autenticación de la contraseña y obtener acceso a la WLAN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:htc:hermes:*:*:*:*:*:*:*:*","matchCriteriaId":"E94943F8-4522-4ADC-8B97-10506F70EFA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"54F2E86B-81CA-45D7-94B4-048F0A01650C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4402","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497151/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45857","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497151/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4541","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.307","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el subsistema FTP en Sun Java System Web Proxy Server versiones 4.0 hasta 4.0.7, permite a los atacantes remotos ejecutar código arbitrario por medio de una petición GET de HTTP  diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB8D89B7-2C74-4CDC-8708-D9FACC4DE7C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"927171C0-E754-4FC1-AA9F-6565ADE2B63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EECC7DD-79F8-4189-91C7-2E8F5AB6A50F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A14869F3-76A8-4407-85C8-3D9764721EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"18658A61-81D2-4FDD-8DB2-8222CCCF85C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"C0B02862-58BD-4D29-A2D1-3A7925FA8DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"BE09D9A5-4A81-4771-9D1F-E74845537486"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp5:*:*:*:*:*:*","matchCriteriaId":"B4B978A8-4D6D-4E1F-94FF-3ED6ECB584C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.1:sp6:*:*:*:*:*:*","matchCriteriaId":"D03FFC6C-1CDB-49ED-B693-DC53D87118C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9FA1C4E0-1EB0-4CDE-90D5-1A600BCBA93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp1:*:*:*:*:*:*","matchCriteriaId":"399B9003-1841-4F68-ABD9-EFAF8FDAFADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp2:*:*:*:*:*:*","matchCriteriaId":"CE035EA8-4F06-4C14-9E27-8F1533D1433B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp3:*:*:*:*:*:*","matchCriteriaId":"9D93A98A-39F3-44C7-9150-90C3892508C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp4:*:*:*:*:*:*","matchCriteriaId":"D2B7A60C-89B5-4851-BE12-4196A6A4D616"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp5:*:*:*:*:*:*","matchCriteriaId":"29307BC1-6FC6-4F82-9031-E7317B2AFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:sp6:*:*:*:*:*:*","matchCriteriaId":"1BAD5224-978C-4317-8FA2-FF56FF022E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CC07AB3E-09D4-47B2-B065-8E5A73775982"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp1:*:*:*:*:*:*","matchCriteriaId":"69CE3DFF-8BFD-45BF-BA2A-DB176BF17C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp2:*:*:*:*:*:*","matchCriteriaId":"4DB543F2-7DC6-4EED-92D3-EBC12E70AC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp3:*:*:*:*:*:*","matchCriteriaId":"559B8C70-F680-4578-9E68-258D91B41E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp4:*:*:*:*:*:*","matchCriteriaId":"C7C836B7-564C-4EAD-A9EF-FB41C0533238"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp5:*:*:*:*:*:*","matchCriteriaId":"3C5C06DE-0800-4A43-BEC1-B38811660DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:sp6:*:*:*:*:*:*","matchCriteriaId":"511AEA73-AECF-4ECF-9690-03BF516875E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"97EB8961-9F4D-498D-B2C7-421175F8FE72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp1:*:*:*:*:*:*","matchCriteriaId":"CF2CB27C-5F5A-4057-9B47-61365F0658C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp2:*:*:*:*:*:*","matchCriteriaId":"766DA0FE-CAA8-4946-A4AE-4E464D0D0D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp3:*:*:*:*:*:*","matchCriteriaId":"67DBCAEE-BC63-4C92-8A91-839F475FBB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp4:*:*:*:*:*:*","matchCriteriaId":"13903015-75DD-4F12-9E9A-F12844CEA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp5:*:*:*:*:*:*","matchCriteriaId":"C48458F0-E844-4654-B450-77E2BF97B047"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:sp6:*:*:*:*:*:*","matchCriteriaId":"6CA00153-D1EF-44BE-9288-00D2358DA55F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D9B4BC20-945E-4F5E-A850-AE9BC30119F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp1:*:*:*:*:*:*","matchCriteriaId":"BDE95076-C3FF-41E0-A5A0-B70E779EAF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp2:*:*:*:*:*:*","matchCriteriaId":"4435E1C4-BAD3-4902-A5F0-3C024CE78766"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp3:*:*:*:*:*:*","matchCriteriaId":"982A6037-F163-4F48-9CF9-D07D37824565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp4:*:*:*:*:*:*","matchCriteriaId":"5FB0CAFB-AA1A-408D-9436-CFDAB6985FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp5:*:*:*:*:*:*","matchCriteriaId":"848A771F-CB1D-49BC-A1D7-48C31AA91590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:sp6:*:*:*:*:*:*","matchCriteriaId":"B976BD9A-CC17-40DD-A167-FB549460AA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.6:*:hp_ux:*:*:*:*:*","matchCriteriaId":"84FAC4BC-5A3F-41E6-B881-1ABB00C8167D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"61285CF6-F5BD-4C19-B288-1EF1A9AAFBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.6:*:sparc:*:*:*:*:*","matchCriteriaId":"ED09307B-02D6-4861-8FF6-5EEC4CE257FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.6:*:windows:*:*:*:*:*","matchCriteriaId":"48DEE6A3-3EED-408A-BC93-85BAB1EA336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.6:*:x86:*:*:*:*:*","matchCriteriaId":"1C1A1FDC-6DF3-45CF-A4B7-3847429C6C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1F4F13A0-8097-4A06-9989-F33918FE8ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.7:*:hp_ux:*:*:*:*:*","matchCriteriaId":"1693ED80-2CE6-4536-A0EA-E7D0C24FDF10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.7:*:linux:*:*:*:*:*","matchCriteriaId":"FDB620CE-A4C0-4A49-8022-DA5FA40FFF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.7:*:sparc:*:*:*:*:*","matchCriteriaId":"4BCF42A1-BAB1-40C8-959F-0AC16B542577"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.7:*:windows:*:*:*:*:*","matchCriteriaId":"82BBA16B-3F2F-49D3-99FC-4F3A45F1B68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0.7:*:x86:*:*:*:*:*","matchCriteriaId":"A0C6FF56-864E-408C-AFDE-68D6DC7C6880"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=747","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021038","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242986-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31691","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2781","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45782","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242986-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4542","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.340","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store)."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Cisco Unity 4.x anteriores a v4.2(1)ES162, 5.x anteriores a v5.0(1)ES56, y 7.x anteriores a v7.0(2)ES8, que permite a los administradores autenticados remotos inyectar una secuencia de comandos web o HTML arbitrarios metiéndolos en la base de datos (también conocida como almacén de datos)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2\\(1\\)","matchCriteriaId":"E0008B2C-C3EF-4C4F-AE0F-BFC2C373D68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0\\(1\\)","matchCriteriaId":"FDD69DB2-FD94-403D-BD18-A25FD470C817"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0\\(2\\)","matchCriteriaId":"049041BD-EBC5-4971-BD51-DD63EFB2F430"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7069DF8-3006-4651-816A-855C980256FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CDE9975D-17B0-4EC8-8278-A715F4BF14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"9555A7EC-C0B6-4F48-99BE-BCE51446CF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"16F3E72C-FF4B-425E-A8FB-C1C4BEDDB019"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):sr2:*:*:*:*:*:*","matchCriteriaId":"6871C23B-9B4F-4621-A1C9-55D040558610"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A164F687-98DB-409D-A9C4-D04ECF6DD53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):sr1:*:*:*:*:*:*","matchCriteriaId":"255CAB12-EE1D-4DC3-B854-E0D645F4C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"0A9BA9FD-99EC-4571-ACE8-2EFD13EFEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B746D68B-C6A4-494C-9302-F4652E1E2A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*","matchCriteriaId":"20DAD5D8-6882-48FE-AE7A-9440F47F6C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5EED32D3-A1C5-430C-8488-4D221196CB76"}]}]}],"references":[{"url":"http://secunia.com/advisories/32207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021012","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=127","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4543","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.370","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections."},{"lang":"es","value":"Cisco Unity v4.x anteriores a v4.2(1)ES161, 5.x anteriores a v5.0(1)ES53, y v7.x anteriores a v7.0(2)ES8, cuando utilizan autentificación anónima (también conocida como autenticación nativa Unity), permite a atacantes remotos provocar una denegación de servicio (agotamiento de sesión) a través de un gran número de conexiones.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2\\(1\\)","matchCriteriaId":"E0008B2C-C3EF-4C4F-AE0F-BFC2C373D68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0\\(1\\)","matchCriteriaId":"FDD69DB2-FD94-403D-BD18-A25FD470C817"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0\\(2\\)","matchCriteriaId":"049041BD-EBC5-4971-BD51-DD63EFB2F430"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7069DF8-3006-4651-816A-855C980256FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CDE9975D-17B0-4EC8-8278-A715F4BF14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"9555A7EC-C0B6-4F48-99BE-BCE51446CF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"16F3E72C-FF4B-425E-A8FB-C1C4BEDDB019"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):sr2:*:*:*:*:*:*","matchCriteriaId":"6871C23B-9B4F-4621-A1C9-55D040558610"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A164F687-98DB-409D-A9C4-D04ECF6DD53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):sr1:*:*:*:*:*:*","matchCriteriaId":"255CAB12-EE1D-4DC3-B854-E0D645F4C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"0A9BA9FD-99EC-4571-ACE8-2EFD13EFEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B746D68B-C6A4-494C-9302-F4652E1E2A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*","matchCriteriaId":"20DAD5D8-6882-48FE-AE7A-9440F47F6C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5EED32D3-A1C5-430C-8488-4D221196CB76"}]}]}],"references":[{"url":"http://secunia.com/advisories/32187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021013","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=128","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45743","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4544","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.433","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a \"processing error.\""},{"lang":"es","value":"vulnerabilidad sin especificar en una API sin especificar, como las usadas por Cisco Unity y posiblemente otros productos, permiten a atacantes remotos, provocar una denegación de servicio enviando paquetes manipulados a puertos UDP dinámicos, relativos a \"error de procesamiento\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","matchCriteriaId":"1A7038D8-6914-4DDD-81F9-A92B84123FE4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021020","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=129","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45746","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4545","sourceIdentifier":"cve@mitre.org","published":"2008-10-13T20:00:02.463","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\\CommServer\\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory."},{"lang":"es","value":"Cisco Unity v4.x anteriores a v4.2(1)ES161, v5.x anteriores a v5.0(1)ES53, and v7.x anteriores a v7.0(2)ES8 usa permisos débiles para el directorio D:\\CommServer\\Reports directory, lo que permite a usuarios remotos autentificados conseguir información sensible, leyendo ficheros en este directorio. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2\\(1\\)","matchCriteriaId":"E0008B2C-C3EF-4C4F-AE0F-BFC2C373D68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0\\(1\\)","matchCriteriaId":"FDD69DB2-FD94-403D-BD18-A25FD470C817"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0\\(2\\)","matchCriteriaId":"049041BD-EBC5-4971-BD51-DD63EFB2F430"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7069DF8-3006-4651-816A-855C980256FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CDE9975D-17B0-4EC8-8278-A715F4BF14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"9555A7EC-C0B6-4F48-99BE-BCE51446CF47"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"16F3E72C-FF4B-425E-A8FB-C1C4BEDDB019"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(3\\):sr2:*:*:*:*:*:*","matchCriteriaId":"6871C23B-9B4F-4621-A1C9-55D040558610"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A164F687-98DB-409D-A9C4-D04ECF6DD53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(4\\):sr1:*:*:*:*:*:*","matchCriteriaId":"255CAB12-EE1D-4DC3-B854-E0D645F4C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"0A9BA9FD-99EC-4571-ACE8-2EFD13EFEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B746D68B-C6A4-494C-9302-F4652E1E2A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:5.0:*:*:*:*:*:*:*","matchCriteriaId":"20DAD5D8-6882-48FE-AE7A-9440F47F6C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unity:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5EED32D3-A1C5-430C-8488-4D221196CB76"}]}]}],"references":[{"url":"http://secunia.com/advisories/32187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021022","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=130","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45742","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4546","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T15:28:16.723","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers."},{"lang":"es","value":"Adobe Flash Player 9.0.45.0, 9.0.112.0, 9.0.124.0, y 10.0.12.10 permite a los servidores web remotos causar una denegación de servicio (referencia a puntero nulo y finalización de la aplicación) devolviendo una respuesta inapropiada cuando una solicitud HTTP se envía por segunda vez, como lo demuestran las respuestas que proporcionan dos ficheros SWF con números de versión SWF diferentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"}]}]}],"references":[{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"cve@mitre.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43026","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201101-09.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4401","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1024085","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1024086","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4435","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-14.html","source":"cve@mitre.org"},{"url":"http://www.mochimedia.com/~matthew/flashcrash/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0464.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0470.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496929/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31537","source":"cve@mitre.org"},{"url":"http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-162A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2010/1421","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1432","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1434","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1453","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1482","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1793","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45630","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16302","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7187","source":"cve@mitre.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201101-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-14.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mochimedia.com/~matthew/flashcrash/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0464.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496929/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-162A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2010/1421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4547","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T18:12:14.287","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method."},{"lang":"es","value":"Desbordamiento basado en montículo en el control PdvrAtl.PdvrOcx.1 ActiveX  (pdvratl.dll) de DVRHOST Web CMS OCX 1.0.1.25 permite a atacantes remotos ejecutar código de su elección mediante un segundo argumento largo al método TimeSpanFormat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dvrstation:dvrstation_cms:1.0.1.25:*:*:*:*:*:*:*","matchCriteriaId":"634564C9-90BC-449C-BC2A-999451237B16"}]}]}],"references":[{"url":"http://secunia.com/advisories/28443","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4407","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27267","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0132","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4903","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4548","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T18:12:14.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila del control ActiveX PTZCamPanelCtrl (CamPanel.dll) en RTS Sentry 2.1.0.2 permite a un atacante remoto ejecutar código de su elección por medio del paso de un segundo argumento largo al método ConnectServer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rtssentry:rtssentry:2.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE5B2CE2-5E1C-409A-9CF3-82DBA8876332"}]}]}],"references":[{"url":"http://secunia.com/advisories/28435","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4411","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27304","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39725","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4549","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T18:12:14.333","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method."},{"lang":"es","value":"El control ActiveX ImageShack Toolbar (ImageShackToolbar.dll) en ImageShack Toolbar v4.5.7, posiblemente incluyendo v4.5.7.69, permite a atacantes remotos forzar la subida de ficheros de imagen de su elección al sitio ImageShack a través de un fichero: argumento URI del método BuildSlideShow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imageshack:imageshack_toolbar:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2AB8AAB2-3EE6-472E-8E86-C2D27924C2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:imageshack:imageshack_toolbar:4.5.7.69:*:*:*:*:*:*:*","matchCriteriaId":"88950017-BEDE-4A92-96CA-EE53176F0B72"}]}]}],"references":[{"url":"http://osvdb.org/40628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4410","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486941/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39921","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4981","source":"cve@mitre.org"},{"url":"http://osvdb.org/40628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486941/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4551","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T20:00:01.637","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP)."},{"lang":"es","value":"strongSwan 4.2.6 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante un mensaje con un número grande de valores NULL en una carga útil Key Exchange, lo que dispara una referencia a un puntero NULL para el valor de retorno de la función mpz_export en la GNU Multiprecision Library (GMP) (Biblioteca de Multiprecisión GNU)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.6","matchCriteriaId":"B3DF2081-25C3-4838-BDF6-07BC6583761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A60B8687-A72A-4AF6-BDE9-795A1AC2F98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FD5EA677-BC73-4139-BF09-ADE65C2502A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68B10EB8-0A5B-4C63-9A7D-2F034C286E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3F13A264-EA51-4B92-B102-5316E45DB32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"406E1E6C-EA61-4FB8-9B0F-CE823046B09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F31D56AC-D037-42AE-B70F-C7700929DDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"43A3A15C-122A-4564-A2E3-CB0E7C314797"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6806075C-2433-4CCB-919B-27979C79C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3809AE25-E840-4DB3-879E-F678305EC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"959DA882-CC63-45F7-BF08-55F38DD8E999"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9313C88D-1C24-4623-87B4-ECA8285E28A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"08474171-A617-4163-BEAD-AA14F53A2BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5516113A-F0F6-478F-95F7-9B4FB2DC68B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7D5E9376-3ED9-4A3D-83CE-7E1725F8F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59BFC4CB-91E9-4181-A390-F0CE0D12EE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"339E325D-B76C-400C-B332-7CA675C4F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*","matchCriteriaId":"F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C78E4DAD-B255-4666-927F-D82AC7396FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9B602806-1420-4640-AD17-A2FEFDA6A967"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E1C417F-C18A-4902-B409-09DD023974B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"235DBD81-E542-4FF7-A620-1872DC81D618"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"489F9DFA-5B24-4206-A306-0BAE849C2D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"382D76A4-C2C6-4C1C-A0C0-757C372154DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E4BD021C-FDAC-4938-9390-D455577D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"A977F561-D324-48EA-BAC5-66920F6BD584"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3D09EEB6-386C-4A73-BC08-4243BDC49EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBE3B5F4-063F-4AE9-B589-932751182101"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24F75943-1327-4868-88D5-917D06BCF5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4BE9083-EF34-4B1A-A139-E779E9704F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0050370A-4CF0-4772-B287-DD05C5827E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"64C5AB11-3B59-4677-B544-28A22C413C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E595C454-4456-477A-BE51-75CEAB547E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6A40E983-4721-48FF-9EFB-702BA78DCB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"59E7FA4C-69EE-4225-99FF-0EAB4A6C0049"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1DDF25EB-5509-4D79-8D26-A1CA1092089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A558368F-D9B1-49DF-A64F-95909A4EE7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"74348E15-FF47-4B4D-B062-2EAE3141C84F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"90985506-224F-4AE2-899E-93CA64025396"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3386A9-3740-4861-84B0-AAAC5C01378E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4E823F7-7162-440E-A113-7B1F437BF508"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1D1DEE61-13CB-4810-81B6-2AEBF13619CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D6D82E08-D6BF-41E3-9C3D-52552C8753CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF06C431-DE35-4CCD-9DCE-ED9EE6A17464"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6C826191-A68F-4E02-945B-73F35AA580F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A316AF53-7E95-4E4F-8E50-22145F144CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7D3F068-778E-4BB7-AB22-368714BE1BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"96330C24-C1AB-4B00-A3CC-5CCD291E0069"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"BEF630C7-2AAB-4106-BAC9-AAE6FF278E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BF58206E-3086-45AC-91B6-032EF55D5552"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"7D636603-65D5-45DB-AF7F-DD01B3932914"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7A4D6E89-5313-4016-8A7E-036579330DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95A8E226-FCEC-4545-A628-24F5A8103BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"}]}]}],"references":[{"url":"http://download.strongswan.org/CHANGES4.txt","source":"cve@mitre.org"},{"url":"http://labs.mudynamics.com/advisories/MU-200809-01.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31291","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020903","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2660","source":"cve@mitre.org"},{"url":"http://download.strongswan.org/CHANGES4.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.mudynamics.com/advisories/MU-200809-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4552","sourceIdentifier":"secalert@redhat.com","published":"2008-10-14T20:00:01.667","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions."},{"lang":"es","value":"La función good_client en nfs-utils versión 1.0.9, y posiblemente otras versiones anteriores a 1.1.3, invoca la función hosts_ctl con el orden incorrecto de argumentos, lo que causa que la TCP Wrappers ignore los netgroups y permita a los atacantes remotos omitir las restricciones de acceso previstas."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue affected Red Hat Enterprise Linux 5 and was addressed by\nhttps://rhn.redhat.com/errata/RHSA-2009-1321.html\n","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"45AEA724-343E-4806-ACCE-2AA5F8F8BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*","matchCriteriaId":"025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"474B82D5-5D48-41ED-B2C1-68907A27491F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"813B76CA-5083-4697-A484-435113B7FF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0964EDA2-D86C-4189-9B03-61A292601649"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F83865C7-D7A1-4357-8C15-9865BDECD98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2EFD8CFB-A24A-49F0-856C-4B985E203C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4645DF7-A5C2-4E8D-A07F-22F77670D68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8616115-30AC-4160-B196-D417AF32C7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1234E468-8DC6-4474-8B3D-DB550AA801B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*","matchCriteriaId":"58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*","matchCriteriaId":"63515439-6FCC-43D7-B8DD-D14DD4D7878E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"38E96A1E-5A28-4177-A26F-F19573A17775"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*","matchCriteriaId":"8A54F7D1-A1CD-4804-B962-BC536602F6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*","matchCriteriaId":"2D1E56AB-B263-42AF-9034-D20AD604E50D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*","matchCriteriaId":"0D76C312-3E5D-4176-8691-DD8C21C6A5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*","matchCriteriaId":"D39D0EDE-8D14-42F7-BAEF-A64D559DE495"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9BDF2DB8-0570-43C1-9206-14CDD027EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D18EC9F4-50E7-4974-906E-09533BC7722C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4A1D1B-639F-467E-BE62-1BDDDCC9671A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8A54C8D7-D142-4DB5-8453-57E8612BFFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A4CED17F-B9CE-46D2-8F00-8419451E51FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"D0571302-7EC5-41D3-BBAE-821657A56BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E6F15C5-4D7E-499C-84F3-777F8C4C0B49"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32346","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33006","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36538","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38833","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0307","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:060","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/07/19/2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/07/19/5","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1321.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/497935/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31823","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-687-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458676","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45895","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/07/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/07/19/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1321.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-687-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=458676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4553","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:07:42.730","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories."},{"lang":"es","value":"qemu-make-debian-root de qemu 0.9.1-5 en Debian GNU/Linux permite a usuarios locales sobrescribir archivos de su elección mediante un ataque de enlaces simbólicos en archivos y directorios temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.1-5:*:*:*:*:*:*:*","matchCriteriaId":"F8BCDB83-93ED-43CC-9D12-FAB227BE48CE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/qemu","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32335","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1657","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/14/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30931","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235826","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44831","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/qemu","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/14/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4554","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:07:42.763","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file."},{"lang":"es","value":"La función do_splice_from en fs/splice.c del kernel de Linux anterior al 2.6.27 no rechaza los descriptores de fichero que tienen la bandera O_APPEND, lo que permite a usuarios locales evitar el modo append y hacer cambios de su elección a otros sitios en el archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26.5","matchCriteriaId":"B291C3CF-20EC-4D4E-B736-DB5059560455"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=efc968d450e013049a662d22727cf132618dcb2f","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33182","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33586","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:224","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/14/5","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1017.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31903","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=466707","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45954","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11142","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=efc968d450e013049a662d22727cf132618dcb2f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/14/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=466707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4555","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T21:10:35.770","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements."},{"lang":"es","value":"Desbordamiento de búfer en la función push_subg de parser.y (lib/graph/parser.c) en Graphviz 2.20.2 y posiblemente versiones anteriores, permite a atacantes remotos ayudados por el usuario provocar una denegación de servicio (corrupción de memoria) o ejecutar código de su elección mediante un archivo DOT con un número grande de elementos Agraph_t."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:*:*:*:*:*:*:*:*","versionEndIncluding":"2.20.2","matchCriteriaId":"48ADB706-41AB-48AA-873F-99F42C5E9DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"04867C7C-03F4-486E-A904-76B92DD2D231"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"881EFB0C-B1F9-4BEC-A691-B7E92D55CAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C33A3AE6-C333-4C18-9B1F-D8B9089FF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"52F50133-DBAC-4EFE-856B-13D4236B220B"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"64C3EB33-7B25-455C-BD94-9B86C5D76448"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA1B8359-D739-4B32-BBDA-26CC8AFD4D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4EBFA9B1-3312-499E-A45E-A992802996F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F75D86FD-E9AF-4932-B3D4-2C4BCC559FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.6:*:*:*:*:*:*:*","matchCriteriaId":"552B1521-AC06-4C20-8A49-752483E20121"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1C963327-0114-4016-8BF7-44FBFA97CD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5_0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B063B6C-AA10-41A3-B982-0B022DB0E596"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5_0.2:*:*:*:*:*:*:*","matchCriteriaId":"C08EF00E-F5CD-49E8-A4E0-603CEE02F8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.5_0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2A9748D-37DA-4D37-A743-96621FC65437"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E822EF19-28B2-4A84-8C2F-B8065D363A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.7.16.2:*:*:*:*:*:*:*","matchCriteriaId":"85A2DF81-E5ED-46A3-AEBD-08927B877712"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"52E70A3F-B326-483D-B0E4-67178A5AB9DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AA51A2D7-8268-4D45-8458-82AD91322569"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"B9BAF218-187D-4E4E-B941-451F38C773AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.10_2003-09-15_0415_1:*:*:*:*:*:*:*","matchCriteriaId":"34A7F6BA-B506-42C0-B86E-7A9C19D603CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.10_2003-09-15_0415_2:*:*:*:*:*:*:*","matchCriteriaId":"8F93B4CE-92E4-40D0-A44A-01592361EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"350A7BA0-E720-4B95-A9DB-7F06642ABEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"1B12FFD9-A002-4B2D-A7DA-56C6A80F92D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"47CCA1E6-8581-4DE1-9F61-0CAD41070673"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"779025D9-B0A4-4289-AE30-D1D5BEDE5AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:1.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E590CD96-193C-42EE-84FB-E03FFA0101B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.2:*:*:*:*:*:*:*","matchCriteriaId":"813BCA94-6788-4E91-8342-78A2566CBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B5B0A716-4F84-4923-9AD0-B2AC2B9BD6F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F08312F7-9551-4E6B-A9D5-A416ADBCD36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"477565F2-2833-4C4C-BDED-6458D1093B49"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.4:*:*:*:*:*:*:*","matchCriteriaId":"5F600528-A3A5-4217-B1E4-9BB965E413A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.6:*:*:*:*:*:*:*","matchCriteriaId":"75539435-9CBD-44C6-A440-8A4E622F9352"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.8:*:*:*:*:*:*:*","matchCriteriaId":"0B0BEE5F-DD57-4855-980E-27DB2EBAA48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.10:*:*:*:*:*:*:*","matchCriteriaId":"E74CB1DA-A055-4A70-A361-789C617C3261"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.12:*:*:*:*:*:*:*","matchCriteriaId":"C090C4CD-CAAC-4BD1-8889-1EC7709D438B"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.14:*:*:*:*:*:*:*","matchCriteriaId":"A91B224C-9D35-4729-8726-5C33686BAD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.16:*:*:*:*:*:*:*","matchCriteriaId":"432ED061-0F23-47CF-BDBC-39E81F722C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.18:*:*:*:*:*:*:*","matchCriteriaId":"0A3F6046-5475-44F8-B3EC-20D3FC650264"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.20.0:*:*:*:*:*:*:*","matchCriteriaId":"6E441704-9E08-440A-BB29-9729FC9BEA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphviz:graphviz:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"B9D9F70C-17E1-4901-B11F-A22F415BE6F8"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240636","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"cve@mitre.org"},{"url":"http://roeehay.blogspot.com/2008/10/graphviz-buffer-overflow-code-execution.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32656","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-04.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497150/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31648","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45765","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://roeehay.blogspot.com/2008/10/graphviz-buffer-overflow-code-execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497150/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4556","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T22:36:58.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila, en la función adm_build_path de sadmind en Solstice AdminSuite de Sun, en Solaris 8 y 9, permite a un atacante remoto ejecutar código de su elección por medio de una petición manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"}]}]}],"references":[{"url":"http://osvdb.org/50019","source":"cve@mitre.org"},{"url":"http://risesecurity.org/advisories/RISE-2008001.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32812","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4408","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245806-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-448.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497311/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31751","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021059","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2824","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45858","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5543","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6786","source":"cve@mitre.org"},{"url":"http://osvdb.org/50019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://risesecurity.org/advisories/RISE-2008001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245806-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-448.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497311/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4557","sourceIdentifier":"cve@mitre.org","published":"2008-10-14T22:36:58.667","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression."},{"lang":"es","value":"plugins/wacko/highlight/html.php en Strawberry en CuteNews.ru 1.1.1 permite a un atacante remoto ejecutar código PHP de su elección por medio del parámetro de texto, el cual es insertado en una expresión regular ejecutable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8B0CB500-5508-46B4-9E29-8ED03790BA18"}]}]}],"references":[{"url":"http://secunia.com/advisories/28330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4403","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39450","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4851","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4558","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T00:00:00.710","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison."},{"lang":"es","value":"Error de índice de array en VLC media player 0.9.2 permite a atacantes remotos sobrescribir memoria de su elección y ejecutar código de su elección a través de un fichero lista de reproduccio´n XSPF con una etiqueta con identificador negativo, lo cual pasa una comparación firmada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B32073-DBD5-4344-8498-A132B99807A8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32267","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/vlc-xspf-memory-corruption","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/6756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497354/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31758","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2826","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45869","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/vlc-xspf-memory-corruption","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/6756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4569","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:00:03.737","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en xlacomments.asp de XIGLA Software Absolute Poll Manager XE 4.1 permite a atacantes remotos ejecutar comandos SQL mediante el parámetro p."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_poll_manager_xe:4.1:*:*:*:*:*:*:*","matchCriteriaId":"62DE3B41-B7AE-49C6-B985-F23CD13F70DF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31724","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45823","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6731","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4570","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:00:03.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Real Estate Classifieds permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:real-estate-scripts:real-estate-scripts:*:*:*:*:*:*:*:*","matchCriteriaId":"9181E9B7-A731-444B-B082-BB2D45484A84"}]}]}],"references":[{"url":"http://secunia.com/advisories/32223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31723","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45819","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4571","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:00:03.783","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo LiveSearch de Plone antes de 3.0.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el campo Description para resultados de búsqueda, como se demostró utilizando el evento Javascript onerror  en una etiqueta IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3","matchCriteriaId":"C047BD17-7523-4751-9331-EED767783308"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"67D4EB7F-BC46-4F2E-B065-303961C47B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"78755057-2613-4D5E-8F59-2C117EE282B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.5:*:*:*:*:*:*:*","matchCriteriaId":"9762C674-380B-4831-BBA1-3B27742121B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D938645-80CE-4287-830E-A3BD0C5C84FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.5.1_rc:*:*:*:*:*:*:*","matchCriteriaId":"C01E0884-D0A4-4511-AD4B-DBB09CB8080E"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7B60568E-A688-46AF-B627-062A029A7324"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:2.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"C577B46C-7692-4B6F-B487-A28F73D403F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0B647E76-E8B8-4329-8848-3B90EB262807"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D0A6B8F-4018-44DC-9862-45309619DC6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plone:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0F10374F-2BB3-48D2-B19F-9B2D038A8E35"}]}]}],"references":[{"url":"http://dev.plone.org/plone/ticket/7439","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://osvdb.org/40660","source":"cve@mitre.org"},{"url":"http://plone.org/products/plone/releases/3.0.4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27098","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev.plone.org/plone/ticket/7439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://osvdb.org/40660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://plone.org/products/plone/releases/3.0.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-4572","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:00:03.817","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based buffer overflow."},{"lang":"es","value":"GuildFTPd 0.999.14 y posiblemente otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante argumentos largos a los comandos LIST y CWD, lo que dispara corrupción de montículo relacionada con una llamada de liberación impropia y posiblemente el disparo de un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guildftpd:guildftpd:0.999.14:*:*:*:*:*:*:*","matchCriteriaId":"2631884D-371C-4B7F-ADD0-149B491C6DA1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4422","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31729","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2794","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45818","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6738","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4573","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:00:03.847","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en kategori.asp de MunzurSoft Wep Portal W3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro kat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:munzursoft_web_portal_w3:*:*:*:*:*:*:*:*","matchCriteriaId":"853A91FB-F2E0-4AC3-87C7-512746EB0440"}]}]}],"references":[{"url":"http://secunia.com/advisories/32238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31713","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45817","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4574","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:00:03.863","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp en Ayco Okul Portali permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro linkid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:ayco_okul_portali:*:*:*:*:*:*:*:*","matchCriteriaId":"1503540B-55E4-46C5-87C1-407C6B3342A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32244","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4426","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31704","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45801","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4575","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:07:42.777","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to \"a bunch of potential string overflows.\""},{"lang":"es","value":"Desbordamiento de búfer en la función DoCommand de jhead before 2.84 podría permitir a atacantes dependientes del contexto provocar una denegación de servicio (caída) mediante (1) un argumento -cmd largo y (2) posiblemente otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:*","versionEndIncluding":"2.82","matchCriteriaId":"3F753BDB-F7EB-4706-ACF8-63A72A79D7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C1ABBB65-4E12-4A6D-903D-98E2F524A251"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4907E5C4-F67D-44BE-802F-65DC337E6164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1910C3BD-AD9D-41C4-AD12-29BB696FB1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB688443-0AEA-4B7D-8491-F686A5D6ACA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F6983872-D290-4DCB-A05C-863662975833"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EF951111-D7DD-4AF1-AE11-37E57F22A9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:*","matchCriteriaId":"00F2F739-404D-4A1D-8135-0221B8F2F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A25688F3-F170-4E30-84C4-13F2A65C8330"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D59D8811-EFCE-4C4B-8920-5B769568BE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CEB92C55-ABAD-4C88-BAB5-4201E98BE3F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*","matchCriteriaId":"89A00DA7-F005-4A4D-AEA5-78EB278B8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:*","matchCriteriaId":"074189B6-AC0D-4E27-B312-14BD471E1C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C1111843-76B8-4A0D-8DF8-CAE85E473C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:*","matchCriteriaId":"E21C7CBC-6BD4-45FA-86A8-CCA50BD8F1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:*","matchCriteriaId":"0A1A62D1-CB92-4E62-8D7F-AF87B113095B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:*","matchCriteriaId":"64252DB9-3EBF-4DBA-BE5D-C5C728A66FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:*","matchCriteriaId":"E61B2310-98E0-4D3B-83E9-204C04526182"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:*","matchCriteriaId":"329304C6-A227-463A-A6F7-6904335350A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:*","matchCriteriaId":"903E52E3-4B82-4814-B901-D199A879AE4F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32363","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31770","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sentex.net/~mwandel/jhead/changes.txt","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00511.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00531.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sentex.net/~mwandel/jhead/changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00511.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00531.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4576","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:07:42.810","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires."},{"lang":"es","value":"sctp en el kernel de Linux anterior a 2.6.25.18 permite a atacantes remotos provocar una denegación de servicio (OOPS) mediante un INIT-ACK que establece la AUTH de compartición no admitida, lo que provoca que la función sctp_process_init limpie los transportes activos y dispare la OOPS cuando el temporizador T1-Init se agota."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.25.17","matchCriteriaId":"5B6860C3-98C4-4E5B-879C-DEB3A7ED87BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"}]}]}],"references":[{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.18","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://permalink.gmane.org/gmane.comp.security.oss.general/1039","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33182","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33586","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"cve@mitre.org"},{"url":"http://www.gossamer-threads.com/lists/linux/kernel/981012?page=last","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.27-rc6-git6.log","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1017.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31634","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45773","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9822","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://permalink.gmane.org/gmane.comp.security.oss.general/1039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gossamer-threads.com/lists/linux/kernel/981012?page=last","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.27-rc6-git6.log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4577","sourceIdentifier":"secalert@redhat.com","published":"2008-10-15T20:08:02.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions."},{"lang":"es","value":"El plugin ACL en Dovecot anterior a 1.1.4 amenaza los derechos del acceso negativo como si fueran derechos de acceso positivos, lo que permite a atacantes evitar las restricciones de acceso previstas."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.4","matchCriteriaId":"B084417D-FA5E-45DE-AA03-3932D9292B30"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3-11.1:*:*:*:*:*:*:*","matchCriteriaId":"F7018930-D354-4B31-870E-D0E3CE19C8B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240409","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32164","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32471","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33149","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33624","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36904","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.dovecot.org/list/dovecot-news/2008-October/000085.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:232","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0205.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31587","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2745","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10376","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00816.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00844.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.dovecot.org/list/dovecot-news/2008-October/000085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00816.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00844.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-4578","sourceIdentifier":"secalert@redhat.com","published":"2008-10-15T20:08:02.700","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the \"k\" right to create unauthorized \"parent/child/child\" mailboxes."},{"lang":"es","value":"El plugin ACL en Dovecot anterior a 1.1.4 permite a atacantes remotos evitar las restricciones de acceso previstas utilizando la \"k\" derecha para crear buzones de correo \"parent/child/child\" no autorizados."}],"vendorComments":[{"organization":"Red Hat","comment":"The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 5.","lastModified":"2008-10-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"13310053-191A-4931-BA90-2D6F8850A7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*","matchCriteriaId":"D0616CCF-D278-4B6D-A58B-393BCA128CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:0.99.14:*:*:*:*:*:*:*","matchCriteriaId":"D3C7BE64-7C1E-4043-A1C5-D0A7377C01A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4240BD98-3C31-42CE-AF8F-045DD4BFC084"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05ACA0-ED87-4DDF-94B6-8D25BE1790F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8C0C4A-F9DB-4BB7-BFC5-BEC22C3FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7E00B56-A1E5-4261-8349-37654AA9FB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E66427AA-A9D4-413F-8354-EA61407307C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D74BE6C7-114D-4885-8472-FFE71C817B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4A349510-4D00-4978-93D9-3F9F5E0CD8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B65B9EFD-1531-463C-992E-F0F16AABF9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"34BA7146-5793-44F4-9569-9D868FE6E325"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B5078363-6B42-491B-A219-F8D8A86132BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B1DDF093-B5C7-4AE5-B3D6-466C543AB2BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta1:*:*:*:*:*:*:*","matchCriteriaId":"C9FBEF6C-4A09-4661-BED0-8B5BC8BAF1AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta2:*:*:*:*:*:*:*","matchCriteriaId":"9D680474-C329-4DD0-B4EA-2406E27EC474"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta3:*:*:*:*:*:*:*","matchCriteriaId":"165A0D0B-C6B0-431F-BF36-223A27CD6A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta4:*:*:*:*:*:*:*","matchCriteriaId":"92FB54D3-F856-4027-8AAF-6B05AE17D520"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta5:*:*:*:*:*:*:*","matchCriteriaId":"34759794-747B-4770-8DB5-4E07AA8A15AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta6:*:*:*:*:*:*:*","matchCriteriaId":"8D5AF2A0-3289-47FA-B8DB-D5E28504F012"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta7:*:*:*:*:*:*:*","matchCriteriaId":"99268D48-CF82-450B-A033-D87AF4109531"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta8:*:*:*:*:*:*:*","matchCriteriaId":"B2E09737-8107-45C0-BFF1-FB4CF81564CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.beta9:*:*:*:*:*:*:*","matchCriteriaId":"280BE28D-B8A8-4E76-BC96-DB756C00B994"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc1:*:*:*:*:*:*:*","matchCriteriaId":"91E74D81-DF10-423A-8549-3BB5ED02B5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc2:*:*:*:*:*:*:*","matchCriteriaId":"07D6853E-7E81-443D-8806-C8469217F55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc3:*:*:*:*:*:*:*","matchCriteriaId":"D1BE4B6A-47A2-457B-B6B8-8FE5C2026A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc4:*:*:*:*:*:*:*","matchCriteriaId":"7382F655-9B27-443D-9397-346FBEADEFDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc5:*:*:*:*:*:*:*","matchCriteriaId":"6F180045-A0DA-40A3-AD3E-F3402FB6456A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc6:*:*:*:*:*:*:*","matchCriteriaId":"C1A2FFE7-D008-47B4-80E7-AEC176918E06"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc7:*:*:*:*:*:*:*","matchCriteriaId":"8C840337-7B31-476B-BBCD-65F4899925E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc8:*:*:*:*:*:*:*","matchCriteriaId":"545EF2F5-9BAE-4612-9958-70A5413818A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc9:*:*:*:*:*:*:*","matchCriteriaId":"E80096F8-46D9-42E3-8CDB-99ADA2CBD970"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc10:*:*:*:*:*:*:*","matchCriteriaId":"9E504866-3429-4A4C-8278-5C2753D356C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc11:*:*:*:*:*:*:*","matchCriteriaId":"30857130-636F-4719-9F1E-8F6369F40DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc12:*:*:*:*:*:*:*","matchCriteriaId":"9843D7CE-4723-4200-AFD4-5B31545A287E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc13:*:*:*:*:*:*:*","matchCriteriaId":"54AF1D92-D89B-4DE4-9D47-72466873A4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc14:*:*:*:*:*:*:*","matchCriteriaId":"64A8FCA5-1666-48F7-9689-37D9315813F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc15:*:*:*:*:*:*:*","matchCriteriaId":"D4D517F3-F0A8-4362-89B9-0ED63515283F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc16:*:*:*:*:*:*:*","matchCriteriaId":"23883A94-559B-4655-82D4-F09868235771"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc17:*:*:*:*:*:*:*","matchCriteriaId":"520B52BF-FD23-429D-BAA4-E08DB84C82F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc18:*:*:*:*:*:*:*","matchCriteriaId":"0B7948AB-2061-4ADB-A01C-3CE8B47CCD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc19:*:*:*:*:*:*:*","matchCriteriaId":"C24F6BFB-AA8C-441A-9026-809183D0350E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc20:*:*:*:*:*:*:*","matchCriteriaId":"C22A513A-A94A-4BC4-B5B7-3CCA166C9874"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc21:*:*:*:*:*:*:*","matchCriteriaId":"65038654-6B35-4502-BD74-F9F0954C5EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc22:*:*:*:*:*:*:*","matchCriteriaId":"4307AA80-C0AC-4193-8353-D746DBF52FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc23:*:*:*:*:*:*:*","matchCriteriaId":"0E95BAF5-FC78-4286-B6BD-464E9F08CF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc24:*:*:*:*:*:*:*","matchCriteriaId":"0C6AA8FD-3692-4069-8980-9544044B8CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc25:*:*:*:*:*:*:*","matchCriteriaId":"F22AADE9-D37D-439B-B934-8DA01A29BB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc26:*:*:*:*:*:*:*","matchCriteriaId":"4ECCD893-A5EE-4696-80AA-FD9092548BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc27:*:*:*:*:*:*:*","matchCriteriaId":"0B960D71-04E5-45F7-8DC2-45C341673FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.rc28:*:*:*:*:*:*:*","matchCriteriaId":"658E275E-8C2C-46EE-850A-14ADBD097E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0_rc29:*:*:*:*:*:*:*","matchCriteriaId":"3AAE9E7C-49CC-48C3-B47C-CDC5802356A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8BE860F-A3C2-43E0-BC75-503C437DAADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"9E6F249C-2793-46B5-A9E2-5EB3A62FF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E4E57B06-8650-4374-B643-6FCBE3ABDAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0384E42-1506-4C08-AA5A-18B2A711C7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F5DC1CE5-50B9-426E-B98A-224DC499AB15"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240409","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32164","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33149","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"secalert@redhat.com"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-October/000085.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:232","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498498/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31587","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2745","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45669","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-October/000085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498498/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4579","sourceIdentifier":"secalert@redhat.com","published":"2008-10-15T20:08:02.730","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file."},{"lang":"es","value":"Los programas (1) fence_apc y (2) fence_apc_snmp,como se utilizan en (a) fence 2.02.00-r1 y posiblemente (b) cman, cuando se ejecutan en modo verbose, permiten a usuarios locales añadir a archivos de su elección mediante un ataque de enlaces simbólicos al archivo temporal apclog."}],"vendorComments":[{"organization":"Red Hat","comment":"The Red Hat Security Response Team has rated this issue as having low security\nimpact.\n\nThis issue is addressed in the cman package for Red Hat Enterprise Linux 5:\nhttps://rhn.redhat.com/errata/RHSA-2009-1337.html\n\nThis issue also affects the fence package in Red Hat Cluster Suite for Enterprise Linux 4AS, a future update may address this flaw:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-4579","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:cman:2.02.00:r1:*:*:*:*:*:*","matchCriteriaId":"6C3CBF73-99E7-4562-AA18-19EA3D9AF2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:fence:2.02.00:r1:*:*:*:*:*:*","matchCriteriaId":"7E9BCDBC-4566-417D-AEB6-B1377519648A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240576","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32390","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36530","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43362","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1341.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0266.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31904","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2011/0419","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467386","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10799","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1341.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0266.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4580","sourceIdentifier":"secalert@redhat.com","published":"2008-10-15T20:08:02.763","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file."},{"lang":"es","value":"fence_manual, tal y como es usado en fence versión 2.02.00-r1 y posiblemente cman, permite a los usuarios locales modificar archivos arbitrarios por medio de un ataque de tipo symlink en el archivo temporal fence_manual.fifo."}],"vendorComments":[{"organization":"Red Hat","comment":"Manual fencing agent is documented to only be provided for testing purposes and should not be used in production environments. Therefore, there is no plan to fix this flaw in Red Hat Cluster Suite for Red Hat Enterprise Linux 4, and in Red Hat Enterprise Linux 5.","lastModified":"2009-11-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:cman:2.02.00:r1:*:*:*:*:*:*","matchCriteriaId":"6C3CBF73-99E7-4562-AA18-19EA3D9AF2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:fence:2.02.00:r1:*:*:*:*:*:*","matchCriteriaId":"7E9BCDBC-4566-417D-AEB6-B1377519648A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240576","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/3","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45953","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=240576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4581","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:08:02.793","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view."},{"lang":"es","value":"El Editor en IBM ENOVIA SmarTeam 5 antes de la versión 18 SP5 y la 19 antes de SP01, permite a usuarios remotamente autentificados evitar las restricciones de acceso previstas y leer objetos Document mediante la vista del proceso Workflow (también conocido como Flow Process)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:enovia_smarteam:5:*:*:*:*:*:*:*","matchCriteriaId":"B8566E0D-1E78-41F6-8A60-2110C7350CF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45943","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4582","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T20:08:02.810","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via an HTML document that is directly accessible through a filesystem, as demonstrated by documents in (1) local folders, (2) Windows share folders, and (3) RAR archives, and as demonstrated by IFRAMEs referencing shortcuts that point to (a) about:cache?device=memory and (b) about:cache?device=disk, a variant of CVE-2008-2810."},{"lang":"es","value":"Mozilla Firefox 3.0.1 hasta la versión 3.0.3, Firefox 2.x en versiones anteriores a 2.0.0.18 y SeaMonkey 1.x en versiones anteriores a 1.1.13, cuando se ejecuta en Windows, no identifican correctamente el contexto de los archivos de acceso directo de Windows .url, lo que permite a atacantes remotos asistidos por usuario eludir la Same Origin Policy y obtener información sensible a través de un documento HTML que es accesible directamente a través de un sistema de archivos, como se demuestra por los documentos en (1) carpetas locales, (2) carpetas compartidas de Windows y (3) archivos RAR y como se demuestra por IFRAMEs referenciando shortcuts que apuntan a (a) about:cache?device=memory y (b) about:cache?device=disk, una variante de CVE-2008-2810."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://liudieyu0.blog124.fc2.com/blog-entry-6.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32192","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4416","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/alerts/2008/Nov/1021212.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-47.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497091/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31611","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31747","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021190","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2818","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=455311","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45740","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://liudieyu0.blog124.fc2.com/blog-entry-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/alerts/2008/Nov/1021212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497091/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/2818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=455311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-4583","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.037","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el componente ActiveX Chilkat FTP 2.0 (ChilkatCert.dll) permite a atacantes remotos sobrescribir archivos de su elección mediante un nombre de ruta completo en el método SavePkcs8File."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:ftp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"486D5745-535E-47F8-BA5A-03A4EC0E8780"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4427","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27540","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5028","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4584","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX Chilkat Mail 7.8 (ChilkatCert.dll) permite a atacantes remotos sobrescribir archivos de su elección mediante un nombre de ruta completo al método SaveLastError."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:mail:7.8:*:*:*:*:*:*:*","matchCriteriaId":"91081A96-DB86-4EF0-8510-F7C89C188F25"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4424","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40041","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5005","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4585","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.257","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php."},{"lang":"es","value":"Belong Software Site Builder 0.1 beta permite a atacantes remotos evitar las restricciones de acceso previstas y realizar acciones administrativas mediante una petición directa a admin/home.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:belong_software:site_builder:0.1:beta:*:*:*:*:*:*","matchCriteriaId":"C83C56B3-3537-4C75-A6CC-0D6A0D3E5BEC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486803/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27402","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39842","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486803/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4586","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX MVSNCLientWebAgent61.WebAgent.1 isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 permite a atacantes remotos forzar la descarga y ejecución de archivos arbitrarios mediante el método DownloadAndExecute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acresso:flexnet_connect:6.1:*:*:*:*:*:*:*","matchCriteriaId":"832ABFF7-1B6F-4ED8-A5C6-E53F580A0A58"}]}]}],"references":[{"url":"http://secunia.com/advisories/28496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4425","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27279","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0145","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4913","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4587","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.303","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods.  NOTE: this could be leveraged for code execution by uploading executable files to Startup folders."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX MSVNClientDownloadManager61Lib.DownloadManager.1  (ISDM.exe 6.1.100.61372) de Macrovision FLEXnet Connect 6.1 permite a atacantes remotos forzar la descarga y ejecución de archivos arbitrarios mediante los métodos AddFile y RunScheduledJobs. NOTA: esto se podría activar para ejecución de código subiendo archivos ejecutables a las carpetas Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acresso:flexnet_connect:6.1:*:*:*:*:*:*:*","matchCriteriaId":"832ABFF7-1B6F-4ED8-A5C6-E53F580A0A58"}]}]}],"references":[{"url":"http://secunia.com/advisories/28496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4428","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27279","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39653","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4588","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to the ABOR command."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servidor FTP de Etype Eserv 3.x, posiblemente 3.26, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su elección mediante un argumento largo al comando ABOR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8071783F-930B-41C1-9284-290314BDB568"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:3.25:*:*:*:*:*:*:*","matchCriteriaId":"4A76EA1C-D6C0-4AA3-91FD-2FF4301304B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:3.26:*:*:*:*:*:*:*","matchCriteriaId":"21A93346-0592-448E-9E46-E8C7CEF5F46A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4415","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31753","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zeroscience.org/codes/eserv_bof.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45864","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6752","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zeroscience.org/codes/eserv_bof.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4589","sourceIdentifier":"cve@mitre.org","published":"2008-10-15T22:45:31.350","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el driver del kernel tvtumin.sys de Lenovo Rescue and Recovery 4.20, incluyendo 4.20.0511 y 4.20.0512, permite a usuarios locales ejecutar código de su elección mediante un nombre de archivo largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:resuce_and_recovery:4.20:*:*:*:*:*:*:*","matchCriteriaId":"6EA25E18-EF07-42CF-8E63-5D8293C2F1F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:resuce_and_recovery:4.20.0511:*:*:*:*:*:*:*","matchCriteriaId":"3740CAB6-9763-4742-9191-5F4777E9B7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:resuce_and_recovery:4.20.0512:*:*:*:*:*:*:*","matchCriteriaId":"BBBBF274-64A0-4F79-808F-D92D5E407F3C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32252","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4421","source":"cve@mitre.org"},{"url":"http://www-307.ibm.com/pc/support/site.wss/MIGR-4Q2QAK.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-307.ibm.com/pc/support/site.wss/MIGR-70699.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-02-lenovornr.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497277/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31737","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021041","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2806","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-307.ibm.com/pc/support/site.wss/MIGR-4Q2QAK.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-307.ibm.com/pc/support/site.wss/MIGR-70699.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-02-lenovornr.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497277/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4590","sourceIdentifier":"cve@mitre.org","published":"2008-10-16T18:00:01.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Stash v1.0.3 permite a atacantes remotos ejecutar comandos SQL a su elección a traves de (1) el parámetro \"username\" a admin/login.php y el (2) parámetro \"post\" a admin/news.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stash:stash:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5439B328-3C50-49E4-A327-1BADA8474C85"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4413","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45799","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6714","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4591","sourceIdentifier":"cve@mitre.org","published":"2008-10-16T18:00:01.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[access_forbiden] and (2) lang[ident_title] parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en admin/include/isadmin.inc.php en PhpWebGallery v1.3.4 permiten a atacantes remotos inyectar web script o HTML de su elección a través del parámetro (1) \"lang[access_forbiden]\" y el parámetro (2) \"lang[ident_title]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"2847007A-5F0B-457E-9D56-1570B59B1589"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45061","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6425","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4592","sourceIdentifier":"cve@mitre.org","published":"2008-10-16T18:00:01.613","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Sports Clubs Web Panel v0.0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante los caracteres .. (punto punto) en el parámetro  \"p\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sportspanel:sports_clubs_web_portal:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABA8607-EA99-4E91-82E4-35CB4D7C367F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2550","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45062","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6427","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4593","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T20:33:55.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416."},{"lang":"es","value":"Apple iPhone v2.1 con el firmware 5F136, cuando está habilitado \"requerir clave de acceso\" y \"ver vista previa de los SMS\" está deshabilitado, permite a atacantes fisicamente próximos obtener información sensible realizando una llamada de emergencia y después leyendo los mensajes SMS en la pantalla del dispositivo, alias Apple error número 6267416."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:iphone:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F35FC825-720E-4D9D-B512-EE49983A5433"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021021","source":"cve@mitre.org"},{"url":"http://www.karlkraft.com/index.php/2008/10/03/yet-another-iphone-emergency-call-security-bug/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46062","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.karlkraft.com/index.php/2008/10/03/yet-another-iphone-emergency-call-security-bug/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4594","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T20:33:56.067","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and attack vectors, probably remote."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente SNMPv3 en el firmware 1.2.14 del Linksys WAP4400N con el chipset Marvell Semiconductor 88W8361P-BEM1 tiene un impacto y unos vectores de ataque, probablemente remotos, desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap400n:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A0CE5313-A2B1-4343-8405-FD471CB3C0F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:marvell:88w8361p-bem1:*:*:*:*:*:*:*:*","matchCriteriaId":"4E1A6CCA-F8A6-4018-8A51-6AD1B60BBC85"}]}]}],"references":[{"url":"http://secunia.com/advisories/32259","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=application%2Fmsword&blobheadervalue2=inline%3B+filename","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45842","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=application%2Fmsword&blobheadervalue2=inline%3B+filename","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4595","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T21:29:02.617","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact and remote attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Slaytanic Scripts Content Plus v2.1.1 tienen un impacto y unos vectores de ataque remoto desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slaytanic_scripts:content_plus:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A5640EDD-9620-487B-98CB-B639E70F2A50"}]}]}],"references":[{"url":"http://secunia.com/advisories/32245","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=632842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45947","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=632842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4596","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T21:29:02.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en el módulo de Drupal Shindig-Integrator permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados en las páginas generadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:shindig-integrator:*:*:*:*:*:*:*:*","matchCriteriaId":"20FE0F28-DAC0-436C-9FD1-AD239A641BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:shindig-integrator:5:*:*:*:*:*:*:*","matchCriteriaId":"6C1D6B5B-8BB7-4294-9B0B-31ACE4167FCE"}]}]}],"references":[{"url":"http://drupal.org/node/321758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45925","source":"cve@mitre.org"},{"url":"http://drupal.org/node/321758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4597","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T21:29:02.677","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors."},{"lang":"es","value":"El módulo para Drupal, Shindig-Integrator no restringe de manera apropiada el acceso a las páginas generadas, lo que permite a atacantes remotos obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:shindig-integrator:*:*:*:*:*:*:*:*","matchCriteriaId":"20FE0F28-DAC0-436C-9FD1-AD239A641BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:shindig-integrator:5:*:*:*:*:*:*:*","matchCriteriaId":"6C1D6B5B-8BB7-4294-9B0B-31ACE4167FCE"}]}]}],"references":[{"url":"http://drupal.org/node/321758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46069","source":"cve@mitre.org"},{"url":"http://drupal.org/node/321758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4598","sourceIdentifier":"cve@mitre.org","published":"2008-10-17T21:29:02.710","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to \"numerous flaws\" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo de Drupal Shindig-Integrator v5.x tiene un impacto no especificado y vectores de ataque remoto relacionados con \"numerosos fallos\" que no están relacionados con secuencias de comandos en sitios cruzados (XSS) o control de acceso. Una vulnerabilidad diferente a CVE-2008-4596 y CVE-2008-4597."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:shindig-integrator:*:*:*:*:*:*:*:*","matchCriteriaId":"20FE0F28-DAC0-436C-9FD1-AD239A641BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:shindig-integrator:5:*:*:*:*:*:*:*","matchCriteriaId":"6C1D6B5B-8BB7-4294-9B0B-31ACE4167FCE"}]}]}],"references":[{"url":"http://drupal.org/node/321758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46070","source":"cve@mitre.org"},{"url":"http://drupal.org/node/321758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4599","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en Mosaic Commerce permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mosaic_commerce:mosaic_commerce:*:*:*:*:*:*:*:*","matchCriteriaId":"376D3420-A758-4C15-8F10-73DAD2634F52"}]}]}],"references":[{"url":"http://secunia.com/advisories/32309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4430","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31782","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45926","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6763","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4600","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.700","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie."},{"lang":"es","value":"configure.php en PokerMax Poker League Tournament Script permite a atacantes remotos evitar la autenticación y obtener acceso con privilegios de administrador estableciendo la cookie ValidUserAdmin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_dawson:pokermax_poker_league_tournament_script:0.13:*:*:*:*:*:*:*","matchCriteriaId":"D8DE6DC3-7F36-4312-AC68-02E4BC64B3F5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4431","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31784","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45931","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4601","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://habariproject.org/en/download","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habari_username parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad de autenticación en Habari CMS v0.5.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"habari_username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:habari:cms:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9E752404-32B5-4152-B134-5F940809DC3F"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/habaricms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31794","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45951","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/habaricms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4602","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.747","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Post Affiliate Pro v2.0 permite a usuarios autenticados en remoto leer y posiblemente ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro \"md\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualityunit:post_affiliate_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"40DDC382-7CB5-4B41-8E26-6ABFF4452C4F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4432","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31796","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46060","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6772","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4603","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search_games action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php en iGaming CMS v2.0 Alpha 1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"keywords\"en una acción \"search_games\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igaming:cms:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"09504ABE-AB2A-408C-B69F-347056D4E687"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31793","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6769","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4604","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Easy CafeEngine v1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"itemid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafeengine:easycafeengine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9DC3B09B-EC75-4051-8380-FDF8FAE80903"}]}]}],"references":[{"url":"http://secunia.com/advisories/32307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31788","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45930","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4605","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CafeEngine permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" a (1) dish.php y a (2) menu.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafeengine:easycafeengine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9DC3B09B-EC75-4051-8380-FDF8FAE80903"}]}]}],"references":[{"url":"http://secunia.com/advisories/32308","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31786","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45929","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4606","sourceIdentifier":"cve@mitre.org","published":"2008-10-18T00:18:53.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) location_id parameter to locationdel.php and (2) vlan_id parameter to vlanedit.php.  NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en IP Reg versión 0.4 y anteriores, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) parámetro location_id en el archivo locationdel.php y (2) parámetro vlan_id en el archivo vlanedit.php . NOTA: los vectores vlanview.php y vlandel.php ya están cubiertos por el CVE-2007-6579."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ip_reg:ip_reg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E994A6F-0AE8-4B4D-938A-671F47C70CB0"}]}]}],"references":[{"url":"http://osvdb.org/show/osvdb/49231","source":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/49232","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4435","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31781","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45934","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6765","source":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/49231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/show/osvdb/49232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4609","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T17:59:26.163","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Please see also:\nhttp://blog.robertlee.name/2008/10/more-detailed-response-to-gordons-post.html\n\nand\n\nhttp://www.curbrisk.com/security-blog/robert-e-lee-discusses-tcp-denial-service-vulnerability-sc-magazine.html\n\n\n\n\n\n\n\n\n\n","evaluatorImpact":"The impact of this vulnerability has yet to be determined.  The full list of affected platforms is subject to change.  The NVD will continue to monitor this vulnerability and adjust the configurations as needed.","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress."},{"lang":"es","value":"La implementación del protocolo TCP en (1) Linux, (2) plataformas basadas en BSD Unix, (3) Microsoft Windows, (4) productos Cisco, y probablemente otros sistemas operativos, permite a atacantes remotos provocar una denegación de servicio (agotamiento de cola de conexión) a través de múltiples vectores que manipulan información en la tabla de estados del TCP, como lo demuestra sockstress."}],"vendorComments":[{"organization":"Red Hat","comment":"The attacks reported by Outpost24 AB target the design limitations of the TCP protocol. Due to upstreams decision not to release updates, Red Hat do not plan to release updates to resolve these issues however, the effects of these attacks can be reduced via the mitigation methods as written in http://kbase.redhat.com/faq/docs/DOC-18730.","lastModified":"2009-09-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:-:*:*:*:*:*:*:*","matchCriteriaId":"BAD1A8C6-A3A4-47A6-B8B0-6CB6787C5B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"BD1119D3-A2B4-45C2-8EC1-F28EB948CDC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"32E0E862-63E6-42DA-8CCC-AAAC581FE211"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"388BB5C2-53B3-4597-913C-7D86E585CCD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"3C37EB61-50BE-451A-916B-B05BAC79962B"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:-:*:*:*:*:*:*:*","matchCriteriaId":"2466F147-1EEC-442F-8066-EF7C65D17F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F5E922C-239D-4F98-87ED-BB7998BE99C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DD254562-D74A-4D7C-B846-E242D785B830"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBFBCFEE-C24C-4D38-83F9-810E05D27901"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"950CE88E-E396-4D32-AC9D-B76EB2B537C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F185FD65-A2A8-4170-8419-E939450055B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7ECF99E9-1C3B-4D8F-A52E-28D0BFEB2E9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A37687D5-1239-474B-994C-C638AB9B105B"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E0D6DE57-1B0D-4F40-9E9F-CB72BAC0201F"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.2:*:*:*:*:*:*:*","matchCriteriaId":"7267B83B-1DC7-4A38-9338-B3BC3B2ECD74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*","matchCriteriaId":"B6230A85-30D2-4934-A8A0-11499B7B09F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1:*:*:*:*:*:*:*","matchCriteriaId":"96C6FB91-22FC-4DA9-B19A-8065D8B89F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"06CF972E-A755-4FB7-BFD7-9F4CDDEA4F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9B4FC3E9-E88E-4C87-ADA4-AC9370BBFD32"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E72B3032-154D-45C2-8380-CCB28E4F2E8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:8.3:*:*:*:*:*:*:*","matchCriteriaId":"87395248-5E9C-4257-9CC7-2E2805B69F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.0:*:*:*:*:*:*:*","matchCriteriaId":"A476BFB0-E587-41A6-B691-2609E0146C2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.1:*:*:*:*:*:*:*","matchCriteriaId":"2E9A00D5-A594-4C64-B982-10CB4C554F51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.14:*:*:*:*:*:*:*","matchCriteriaId":"327028C0-D9F3-46A3-B2CC-4630FE18C43E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.0:*:*:*:*:*:*:*","matchCriteriaId":"79528F96-FD42-4A76-82EE-4B1324D53B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3:*:*:*:*:*:*:*","matchCriteriaId":"3824A6CC-5C3A-4146-9CDD-B7B213527552"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(3.3\\):*:*:*:*:*:*:*","matchCriteriaId":"F9FE0721-5166-4756-B620-9C2DFCB252A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(3.4\\):*:*:*:*:*:*:*","matchCriteriaId":"630947E3-6D04-4A99-AAB3-B988BD513885"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(4.2\\):*:*:*:*:*:*:*","matchCriteriaId":"850D8A04-E853-4570-A81D-EC053C47BB4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(4.3\\):*:*:*:*:*:*:*","matchCriteriaId":"67D70854-1DEC-43FF-ABA6-85009A253874"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"D48379D9-1189-4176-A48E-A6ED9B3F91BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(19a\\):*:*:*:*:*:*:*","matchCriteriaId":"5A60756F-CF53-4E57-B313-EC6B9E160B39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11:*:*:*:*:*:*:*","matchCriteriaId":"155F8A0D-EE85-4FB9-97FB-E410A9374310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D626B494-6210-4F74-8D17-BA480B6665C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"B5F4E6F1-8624-4672-A4F3-EC79E49E6D40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"E41CBC97-0C46-4717-A525-3A674F07C122"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(17\\)bt:*:*:*:*:*:*:*","matchCriteriaId":"275BF994-A447-4C58-855C-E0C21D114B2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(18\\):*:*:*:*:*:*:*","matchCriteriaId":"4742B4D8-971B-450F-916C-C83FAB808BF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(20.3\\):*:*:*:*:*:*:*","matchCriteriaId":"86AFAF8F-B8E2-453B-895C-F94138720745"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(22a\\):*:*:*:*:*:*:*","matchCriteriaId":"2D8524C5-FBC3-4A2F-96D0-15CC43287DFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(22b\\):*:*:*:*:*:*:*","matchCriteriaId":"53F3AD1F-6213-42A7-9C93-EA42C3F4288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(x\\):*:*:*:*:*:*:*","matchCriteriaId":"180E123C-BC2B-4CD0-B772-46253E46B93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0.12\\(a\\)bt:*:*:*:*:*:*:*","matchCriteriaId":"321EEFCA-4DDE-4F37-9F55-55B9500CC104"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"19F493EC-885B-4EA6-B1F3-CA5777B67D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"F7AE747C-2507-46FE-B3F8-3C1E6F50353D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(7\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"4B85BFC6-7053-4456-B52A-45F36F285F33"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(7\\)ca:*:*:*:*:*:*:*","matchCriteriaId":"D996F0BC-80EF-45BD-BA24-6F2E22C67D6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(9\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"D5E95809-C581-4D40-8237-AD74742EBB75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"AC86CED5-1421-40A9-9573-B87EDA6E462E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"328D5C81-27AC-41B9-81FE-7666CE9085B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"B36FF40E-EF0A-4149-A35D-8D765EBFFAE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"51382DA5-4EBC-44DC-951F-32FC7AA719A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\)ca:*:*:*:*:*:*:*","matchCriteriaId":"5BA2A1FD-11A3-403A-B5A6-0220CA18EC99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"3493F361-0C8A-4B66-AF6B-926E2D66BBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(14\\):*:*:*:*:*:*:*","matchCriteriaId":"1F7375C1-F60A-4793-8C09-70C950F36F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(15\\):*:*:*:*:*:*:*","matchCriteriaId":"DB9CBC6C-9824-486C-B8E2-76DF3EC2A5C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(15\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"FB42AFD1-7FEE-45D4-8CF4-58EF43AB7C93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(15\\)ca:*:*:*:*:*:*:*","matchCriteriaId":"841513AE-7521-4670-8438-AE5EB70F3A48"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(15\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"14BDD1FC-F0DF-443B-A498-CDD3A51F146E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"FF3E8F79-6177-453C-99B5-BC9BC7670869"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"4B244655-A6A5-40D0-A0D1-34C814DA9389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"CA064273-1A6E-4303-BAAB-F585691EF9BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"672742B0-7D4B-4B2E-96C2-0C74D9A5400A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\)cc:*:*:*:*:*:*:*","matchCriteriaId":"0A8158E2-0DFE-479B-B085-9775FF700C85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\)ct:*:*:*:*:*:*:*","matchCriteriaId":"29CA3070-B75D-4E56-A338-E10F5509394E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(18\\):*:*:*:*:*:*:*","matchCriteriaId":"AF085D4E-D2EB-46FA-A426-FC53EB7F5FFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(20\\)aa4:*:*:*:*:*:*:*","matchCriteriaId":"E36721A7-B29F-4C43-B77B-7C8BB9B8DF46"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(22\\):*:*:*:*:*:*:*","matchCriteriaId":"C2AA82A6-B7B8-4B3A-8E6A-968C24EE0FDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(24\\):*:*:*:*:*:*:*","matchCriteriaId":"81640A61-B4E4-4209-A9AB-726C15522037"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(24a\\):*:*:*:*:*:*:*","matchCriteriaId":"A53348EA-99B2-4091-9112-B3428E019597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(24b\\):*:*:*:*:*:*:*","matchCriteriaId":"6022E5C8-34BD-45C4-8FD0-7898902B01A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(24c\\):*:*:*:*:*:*:*","matchCriteriaId":"E9408971-2732-4CBF-A94E-8A1778DFEBCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(28a\\)ct:*:*:*:*:*:*:*","matchCriteriaId":"D1795C25-47DD-48E2-B1DE-FD080C497B40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(28a\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"6FDC895C-803F-4B04-BBC8-3571C7ECCC8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(36\\)ca2:*:*:*:*:*:*:*","matchCriteriaId":"B2ED206F-850A-4AEE-87DA-CC2688BC1173"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(36\\)ca4:*:*:*:*:*:*:*","matchCriteriaId":"F9B084A3-9F94-4F4C-8622-2D56BB2B3593"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(36\\)cc2:*:*:*:*:*:*:*","matchCriteriaId":"DF849813-7A2B-4EB2-8A93-2693636D4E93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(36\\)cc4:*:*:*:*:*:*:*","matchCriteriaId":"8C43AE16-7B01-4BE1-857D-CFE8AB504FEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1aa:*:*:*:*:*:*:*","matchCriteriaId":"C2842913-FEFF-4443-809B-F1793DDD08AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1ca:*:*:*:*:*:*:*","matchCriteriaId":"478D7C73-4039-4352-ADFF-55623B011C82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1cc:*:*:*:*:*:*:*","matchCriteriaId":"D5F31EAA-F76F-4182-B90D-6997E52EEB25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1ct:*:*:*:*:*:*:*","matchCriteriaId":"8D419BED-A8C0-4304-A0E9-7805CE3E7FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1ia:*:*:*:*:*:*:*","matchCriteriaId":"BD4EA445-2947-4754-81BF-2046DFD4DE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"550EBE5B-3136-4D67-B2AF-869DE111A821"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\)f:*:*:*:*:*:*:*","matchCriteriaId":"9D1D2A78-BCE8-4E8A-B7DE-36A64B81820C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\)f1:*:*:*:*:*:*:*","matchCriteriaId":"17DE2319-19D9-4C02-80B4-0A6AAD853867"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"7CB0E1F3-CF25-4FD6-B33F-8C9FD660D8B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\)xaf:*:*:*:*:*:*:*","matchCriteriaId":"A9E42FA2-0827-4FCC-98F2-A5C0F79C7016"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"82BFEABB-6E90-4A24-BBE3-2BDB524028A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)p:*:*:*:*:*:*:*","matchCriteriaId":"F169E322-3D72-4F86-BD5F-74589E5DD823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa1:*:*:*:*:*:*:*","matchCriteriaId":"DBA5D334-6DB8-44B0-92EF-8694BBE79A9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa3:*:*:*:*:*:*:*","matchCriteriaId":"099CFED1-0E2F-46B2-8136-BFA146EB9A00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa5:*:*:*:*:*:*:*","matchCriteriaId":"754F06BF-EB7D-4DAD-BF5D-7DF2619A7499"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8.2\\)sa6:*:*:*:*:*:*:*","matchCriteriaId":"D97C1243-BBEB-44AC-96E1-AC46F946EA42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8.9\\)sa6:*:*:*:*:*:*:*","matchCriteriaId":"22CD9785-D78E-408F-A3A0-3974DFF3DE78"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)p:*:*:*:*:*:*:*","matchCriteriaId":"047F9781-38B8-488C-B999-A3CA6BDB639C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"3E3586C0-64AF-4584-8F56-7E0756B4A521"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"9B784C9F-79EE-4D08-9D03-985EC7E378FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"FFBA8825-442E-4CAD-A9B2-4DD8546F35F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"5947E00E-68E7-4E8C-99C5-D69CA67CFCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(11b\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"394E271B-557A-496C-813E-E067D0188136"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(14\\)gs2:*:*:*:*:*:*:*","matchCriteriaId":"0023E04A-6244-4221-AE19-616265074BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(15\\)g:*:*:*:*:*:*:*","matchCriteriaId":"52C4A8A9-A17E-48A1-99EC-A9F87CE17318"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(15a\\)p:*:*:*:*:*:*:*","matchCriteriaId":"B1928C83-1379-4D6C-A7C0-FC7326E558C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(15b\\):*:*:*:*:*:*:*","matchCriteriaId":"0485E527-0305-4C64-805B-6AD5E611EE50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"68C31722-3157-41D6-AABF-B9B18247CE6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(16\\)p:*:*:*:*:*:*:*","matchCriteriaId":"F33246EE-340C-4D61-B5D1-780A0785B9D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"F106D24F-7EDD-4A52-9A3A-F25E6EEC1870"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(18\\):*:*:*:*:*:*:*","matchCriteriaId":"ED418AF9-FCC1-4BFC-8526-AA1BBD5F8E8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(19\\)gs0.2:*:*:*:*:*:*:*","matchCriteriaId":"BDF4A90A-8F19-48C6-A340-0CF7701D4F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(19a\\)gs6:*:*:*:*:*:*:*","matchCriteriaId":"BD5681AC-1FF2-4CC9-959B-5B56E66AB1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(23a\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"82DE2BBD-70F5-42D6-AC32-A2AE2CF21789"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(26\\)p2:*:*:*:*:*:*:*","matchCriteriaId":"2C7B8494-A9C5-4ACD-B345-9650DE3E1003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(26\\)p5:*:*:*:*:*:*:*","matchCriteriaId":"8C30199A-2150-45A3-867C-AAAAEFECEED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(26a\\):*:*:*:*:*:*:*","matchCriteriaId":"6EDF0979-4462-4715-A4A0-77DC3273CF22"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(26b\\):*:*:*:*:*:*:*","matchCriteriaId":"FA28477F-5F6A-4627-B521-248A4533E7C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(26e\\):*:*:*:*:*:*:*","matchCriteriaId":"4EF5B2CA-33BC-4D82-97E9-19378EF7AE4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2bc:*:*:*:*:*:*:*","matchCriteriaId":"BB5BBB7A-3154-4B90-BFC9-17D788387002"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2f:*:*:*:*:*:*:*","matchCriteriaId":"64999EDC-0E53-4736-BA6E-219ADE6E75B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2gs:*:*:*:*:*:*:*","matchCriteriaId":"95ACBC17-10FA-449C-B418-F705E9A81363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2sa:*:*:*:*:*:*:*","matchCriteriaId":"AA95673E-1686-48D7-8FE9-99D8FAB47FCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2wa3:*:*:*:*:*:*:*","matchCriteriaId":"36548158-EA5E-4638-9309-532B1CCD20A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2wa4:*:*:*:*:*:*:*","matchCriteriaId":"29122FF8-92A4-4072-8B8F-2F9AC79BA4A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2xa:*:*:*:*:*:*:*","matchCriteriaId":"583E7622-18CB-4C58-B714-F14CB12D1491"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2A6F8329-15C7-4FED-A61D-5AF4F3A33976"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\)ed:*:*:*:*:*:*:*","matchCriteriaId":"CD13732A-DAE0-4D5B-9DAC-6D2CF391220D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\)t:*:*:*:*:*:*:*","matchCriteriaId":"A53DE80A-5865-4514-BE14-BA5992EE7BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(2\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"89347FD1-1C65-4947-8AA6-CCCB0F42AC28"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(7\\)db1:*:*:*:*:*:*:*","matchCriteriaId":"D7CB1B7D-F47E-488D-A4BB-5DABB2406673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(8\\)db2:*:*:*:*:*:*:*","matchCriteriaId":"C03D666A-4FFD-4486-B8ED-183FC10821E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(8\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"E8811993-BEBB-448C-A23A-EDF1344AC076"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(11\\)b:*:*:*:*:*:*:*","matchCriteriaId":"9C7C99C7-ABF5-4581-B3CB-A8B2DCD7A5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(11b\\):*:*:*:*:*:*:*","matchCriteriaId":"40EEA20D-C974-418D-90AD-2C7099BA76E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(11b\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"918ED671-E08D-4DA6-9FDB-E0878C759F1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(11c\\):*:*:*:*:*:*:*","matchCriteriaId":"E0DE733B-BDBC-49B0-B63C-4DC291DF99B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(11d\\):*:*:*:*:*:*:*","matchCriteriaId":"8C353926-CFF7-4B84-84FE-0D1B3CFB2057"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3aa:*:*:*:*:*:*:*","matchCriteriaId":"D8783C0A-990A-4B79-8BF9-64E425DA585E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3da:*:*:*:*:*:*:*","matchCriteriaId":"11B3630E-6ED6-4A8F-8FBC-AA68E81490F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3db:*:*:*:*:*:*:*","matchCriteriaId":"046D8679-38F8-4DC9-82A7-2562DE0495F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3ha:*:*:*:*:*:*:*","matchCriteriaId":"92509012-2DA2-4045-9AE4-4D8681F64D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3ma:*:*:*:*:*:*:*","matchCriteriaId":"1C993003-8B99-4CFF-8546-888E8C5D8FEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3na:*:*:*:*:*:*:*","matchCriteriaId":"80AEA6F5-907D-493F-AB07-971D13BC1CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*","matchCriteriaId":"655BB9C1-BA90-452E-A9C8-9B1E15B99650"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3wa4:*:*:*:*:*:*:*","matchCriteriaId":"3D3267A4-3654-4C7A-966F-9F26B132A065"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3xa:*:*:*:*:*:*:*","matchCriteriaId":"0A747DB2-A031-470F-8EA5-F37FBE175D18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5CFBBDA3-8A5E-407D-8608-45C1BD56BF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)s:*:*:*:*:*:*:*","matchCriteriaId":"D14EBDCA-7CEB-4394-95EF-D4AEE991E2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)st:*:*:*:*:*:*:*","matchCriteriaId":"F006CA61-42CD-4928-A445-E54B968553C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*","matchCriteriaId":"53D87AC5-0F63-4AE8-AC05-FCEC98D18BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*","matchCriteriaId":"AE210B04-7ECD-419C-9258-0F619A353A8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"3B467741-B277-4128-9804-E13ED23FD310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"12551307-4D72-4D24-BA0D-07235EB762AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"08E23131-D207-4D98-96D5-2B71FF792604"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"6E32C808-0471-443D-98AC-DF30AFFE633D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2b\\):*:*:*:*:*:*:*","matchCriteriaId":"593E5730-3777-4DEF-A1D3-73AF0B98448B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FF2207E5-7458-40C5-AEF4-73B271EAB3C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E7109585-1433-4940-B7C9-C561DEAF1498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"E4F96BEB-19C2-48E4-8884-EA61B32D5BA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3.2\\):*:*:*:*:*:*:*","matchCriteriaId":"851EF536-76E0-40E6-9051-7412A8235B4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3.3\\)s:*:*:*:*:*:*:*","matchCriteriaId":"4E61151D-1658-49B2-AEAA-11F61AB71118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3.4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"49869323-98A1-4258-8D7E-B6DE9DA45CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3.6\\)w5\\(9.0.5\\):*:*:*:*:*:*:*","matchCriteriaId":"52BDD49A-6D71-4C33-8B09-C0E9F2DD030E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"32B93745-F14C-428E-9A90-47ACE43451EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1A0D82E1-CCF7-429B-A637-479E839EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"4F1B2747-4A9C-44FC-BBA8-39E338B30417"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"65176343-0120-4038-844E-FDE48A920270"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xe1:*:*:*:*:*:*:*","matchCriteriaId":"EAE67104-9212-4E28-886B-ADFA9503DBBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xm:*:*:*:*:*:*:*","matchCriteriaId":"01F9B9CF-787B-4BE0-988C-669531BFFAA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xm1:*:*:*:*:*:*:*","matchCriteriaId":"43D88280-5701-45EF-99CA-3056AD2216F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5BB7513-C232-4B4F-BE68-972B05086ABD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)s:*:*:*:*:*:*:*","matchCriteriaId":"6C4F875A-D58F-47BA-A441-2362C1688256"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t:*:*:*:*:*:*:*","matchCriteriaId":"3BCEE111-BEFA-4285-B892-58DE3964F497"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"EA263B60-E7C0-4374-96DF-6E4EB9C16743"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"2C570B5A-185E-4AA7-A8B8-BE80605020FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc:*:*:*:*:*:*:*","matchCriteriaId":"2E17E7C3-53FE-424F-8F47-7B8C70C9807E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc2:*:*:*:*:*:*:*","matchCriteriaId":"47E6CE0D-852B-4169-9849-98CDC91E3118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc2b:*:*:*:*:*:*:*","matchCriteriaId":"DD620020-D5B4-4FE3-AEA5-C43686992F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc3:*:*:*:*:*:*:*","matchCriteriaId":"5B4705F7-8E36-4C2D-A23C-E6002E459F5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc3b:*:*:*:*:*:*:*","matchCriteriaId":"D2A0DF3A-430D-444F-BD02-D18D10245138"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc5a:*:*:*:*:*:*:*","matchCriteriaId":"DA39DE28-F3D3-4613-97EA-11896913F300"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(05\\)wc8:*:*:*:*:*:*:*","matchCriteriaId":"27476F7B-9DD2-4A7F-8C0A-65EF52F70DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc9:*:*:*:*:*:*:*","matchCriteriaId":"758CF4D4-46B9-4EE1-9C43-0620D1C31EFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc9a:*:*:*:*:*:*:*","matchCriteriaId":"62559EC5-D019-4C78-B589-80E16784A821"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc11:*:*:*:*:*:*:*","matchCriteriaId":"E52672D5-5DFD-484E-9463-522AA4348456"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc13:*:*:*:*:*:*:*","matchCriteriaId":"DE397409-D527-4283-833C-8A79F3CF8749"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wx:*:*:*:*:*:*:*","matchCriteriaId":"F92CF99B-5043-4EDA-965F-3D8F32F9D742"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"15295BD6-CC76-41BE-B5A0-A08888207011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"1423776F-1C73-4872-81F6-29C411B6E545"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xk2:*:*:*:*:*:*:*","matchCriteriaId":"06FA18C8-0152-4035-8C6F-9AAC4B1985B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xn:*:*:*:*:*:*:*","matchCriteriaId":"49DB7F15-B0C2-4EF0-A3E7-6DFD03C0A25E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xn1:*:*:*:*:*:*:*","matchCriteriaId":"6AE88EB7-215B-4FCA-82DD-AC2A9D243323"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xs:*:*:*:*:*:*:*","matchCriteriaId":"763A8E4B-B394-4EB2-829D-70A030551D36"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xu:*:*:*:*:*:*:*","matchCriteriaId":"198E5016-4494-4BA0-BC9A-C588264F79E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)yb4:*:*:*:*:*:*:*","matchCriteriaId":"83B3A893-6322-4E04-803E-1D18224E7AF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.1\\)xp:*:*:*:*:*:*:*","matchCriteriaId":"AEB89FCC-6602-4B41-9BFA-91B0B48827A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.2\\)xu:*:*:*:*:*:*:*","matchCriteriaId":"D5DF5835-5DE4-4C4E-BFF3-2B15B01771B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.3\\)wc1:*:*:*:*:*:*:*","matchCriteriaId":"238DCBE2-E511-42D1-B938-3FA15E4969E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.4\\)wc1:*:*:*:*:*:*:*","matchCriteriaId":"10065276-0C45-4B35-8ACC-9EB8A73E5739"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5a\\)e:*:*:*:*:*:*:*","matchCriteriaId":"21703640-6091-4136-A2A9-B046E0A8406E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"ECCE69A3-41C6-4893-86D4-7F264352C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6b\\):*:*:*:*:*:*:*","matchCriteriaId":"C575430A-762A-405F-95DA-92589BF4C611"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)db2:*:*:*:*:*:*:*","matchCriteriaId":"1AA412BD-1EFD-4FE2-AC6D-E9AC93B1F750"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)dc1:*:*:*:*:*:*:*","matchCriteriaId":"D9E45CDF-F745-4336-B5D2-0917C66C1D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"AE808362-AFA6-4270-8ECE-8FFD10EE3678"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)sc:*:*:*:*:*:*:*","matchCriteriaId":"6CA0B5C8-9BB3-40BC-ADED-3A21DD019A83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"1720AE47-5ED4-4E5D-AF25-F9FD7E43F6D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"E339A080-2572-4764-BB7C-F49F66432BD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)wx5\\(15a\\):*:*:*:*:*:*:*","matchCriteriaId":"2318131B-BA10-4C44-8F90-215CDA28576D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"E83EFCCC-D01E-4F0E-9990-1F323167B430"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xe2:*:*:*:*:*:*:*","matchCriteriaId":"9E737A2B-8B1A-4F53-B1AA-ECB354D10D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"0C977C71-7F61-444C-A0E4-14E5269E6B4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xf1:*:*:*:*:*:*:*","matchCriteriaId":"533BD959-48CF-4664-B4EC-37314AB93EFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"5EC5E6E9-E639-424B-963D-2760B2C38D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xk2:*:*:*:*:*:*:*","matchCriteriaId":"EDDCC99B-BC23-4101-9D73-A21107FF8630"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xk3:*:*:*:*:*:*:*","matchCriteriaId":"4ED4869D-EB53-4A7B-A630-69B8D76D48DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xv:*:*:*:*:*:*:*","matchCriteriaId":"9B5AE2F8-53B5-4B13-A1DB-57E2531943A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7.4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"EB26AA22-D05C-4B88-8E1B-63A8EFE6A841"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"D6833BBD-CB8C-40E3-BCB1-193E0E03A95F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"387FCCC1-B05D-4493-9F05-BAC5A0E57F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"33E0F459-8A71-4FAE-BE7A-6C56E28988BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8.0.2\\)s:*:*:*:*:*:*:*","matchCriteriaId":"F7976536-FD4C-4AE7-8838-6E28E0CFE740"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8.3\\)sc:*:*:*:*:*:*:*","matchCriteriaId":"D7D2F695-9A42-4425-8CA6-63CB8E99F893"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8a\\):*:*:*:*:*:*:*","matchCriteriaId":"4E63F87A-7BBB-4619-935E-F1F0C3C7E322"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"1B6ABDAE-182B-4367-80B6-B8C8ABF92059"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\)s:*:*:*:*:*:*:*","matchCriteriaId":"C4EB360F-7BAE-4BB5-BB55-E3FFC567A1E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"EAA03CF9-26C6-4621-B73C-EBABB20CB250"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9a\\):*:*:*:*:*:*:*","matchCriteriaId":"0B94014A-8415-4174-AF4B-C9026C6EC559"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"66FEB240-8BB9-4AD6-8188-836D866F4F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)s3b:*:*:*:*:*:*:*","matchCriteriaId":"F5F41EB6-4214-4A86-BBB5-619154971F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"14E5113C-945B-40CB-9F5C-0B7063704364"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"AFB25BAC-590E-4496-AB43-64A8EEBFDCBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5:*:*:*:*:*:*:*","matchCriteriaId":"75528B66-3966-4299-B9BD-69B039AB2F02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18f\\):*:*:*:*:*:*:*","matchCriteriaId":"09DFBF77-BBE3-41BA-A6C6-32DD555F0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18g\\):*:*:*:*:*:*:*","matchCriteriaId":"77D178AF-15CB-4352-8193-741F8B49688A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10a\\):*:*:*:*:*:*:*","matchCriteriaId":"1863F9E2-9FFB-4C19-92E3-15DD9ED72608"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(11\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"403EE717-FD69-405C-9544-6349CBE09D1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(11\\)st4:*:*:*:*:*:*:*","matchCriteriaId":"4CF987B2-BA35-4933-85F7-7F3F2C732961"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(11a\\):*:*:*:*:*:*:*","matchCriteriaId":"D77A942A-4A2C-4A87-A866-12B758DB645B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"63FACCFF-1222-4C02-A286-717E954A7ED1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(12\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"07E0B16B-D4C1-4140-830F-4F5C0D90AD42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(12\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"A15063AA-2800-4856-B3F2-F727BE44BAA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(12a\\):*:*:*:*:*:*:*","matchCriteriaId":"2B3C8355-42F3-43DE-A2D9-0B77138461FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"C9BD6B1C-DDA0-4C64-84C5-68F51BFAB457"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"050F0FAE-8871-4A14-9180-4779014D9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)w5\\(19c\\):*:*:*:*:*:*:*","matchCriteriaId":"B92AE5F7-DD9A-486C-AB39-580E8E29EB75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)wt6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"45246611-F8E6-4DD5-967B-815048CCAC65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"3572607D-5E92-4706-8B83-C5CF01E63416"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\):*:*:*:*:*:*:*","matchCriteriaId":"60C7CA43-AB0C-4085-BB46-78A622241E03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"5D7B8E04-A044-4A32-ADB7-9C25B32E9F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"EF44B838-8E44-4281-94FD-922A60047F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)st:*:*:*:*:*:*:*","matchCriteriaId":"353010B4-3E37-4451-9B17-EF5701DCE9B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)st3:*:*:*:*:*:*:*","matchCriteriaId":"828D84E5-E8E4-4425-9E35-B1EBDBE245BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)w5\\(20\\):*:*:*:*:*:*:*","matchCriteriaId":"4BC109F5-0907-4CDB-90BD-61788921DABC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14a\\):*:*:*:*:*:*:*","matchCriteriaId":"279DBE65-0402-4205-8820-48EB20386DB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E8ECE5F1-5153-4F93-9618-CF7AD2B3C426"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"9AC97D92-C82C-4CBF-93E3-4215B11FD896"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"295B139A-50F6-48E7-B42D-9A53BCA3777F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"992DF258-DAEC-4EF1-941D-7DBD347546B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)sc:*:*:*:*:*:*:*","matchCriteriaId":"52531223-05D2-41C7-ADE2-E957443297F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)sl:*:*:*:*:*:*:*","matchCriteriaId":"C4E611A0-B984-47A6-95F3-B582EE0766E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15a\\):*:*:*:*:*:*:*","matchCriteriaId":"6E93E4A5-6D2B-4E79-B713-7CA1BEE0E36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)s:*:*:*:*:*:*:*","matchCriteriaId":"B2BF480A-AD29-4CE3-9B88-E917D75F3FDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"2657AD4D-F324-4527-9C4F-360946FE0D89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)s8a:*:*:*:*:*:*:*","matchCriteriaId":"211CF1C3-3A5E-49CA-9D01-AC3DB4A7159E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)s10:*:*:*:*:*:*:*","matchCriteriaId":"B2C19B39-258F-4A26-B751-8E9AB4807718"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)sc:*:*:*:*:*:*:*","matchCriteriaId":"641A5B81-B92B-4A65-9828-C7795B0AB4C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)sc3:*:*:*:*:*:*:*","matchCriteriaId":"DD766E23-7CA6-4CC3-9CFF-4E81E370CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)st:*:*:*:*:*:*:*","matchCriteriaId":"5E68F0B5-D6B5-4012-A563-346FD83AC9B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)st1:*:*:*:*:*:*:*","matchCriteriaId":"39C3D66E-C49F-4A41-B67E-D9DE768356FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)w5\\(21\\):*:*:*:*:*:*:*","matchCriteriaId":"09D35D67-529A-425D-800A-D986297D42C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16.06\\)s:*:*:*:*:*:*:*","matchCriteriaId":"AC8BD083-812F-414A-8E21-A8119D3ADE7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16a\\):*:*:*:*:*:*:*","matchCriteriaId":"DD09CC38-FBBD-44DD-8322-F642DC8B6F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"6342713F-C4C6-4451-9637-B744311EC287"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)s:*:*:*:*:*:*:*","matchCriteriaId":"F95185E5-65CF-478B-B450-2FA9C05E4A13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"D281BAB0-994A-418A-8FB9-C8F6509DC56E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"FB5E2F5D-ED58-44F3-A26D-D93DCF093C1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)sl:*:*:*:*:*:*:*","matchCriteriaId":"04586FE6-78BF-4171-8A6A-EFAC90BAC8F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)sl2:*:*:*:*:*:*:*","matchCriteriaId":"C4444CF9-66F8-4941-8300-4547BA7C164B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)sl6:*:*:*:*:*:*:*","matchCriteriaId":"33C204A1-935D-4CFF-8FBA-9A6E37597E6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)sl9:*:*:*:*:*:*:*","matchCriteriaId":"C88479A3-251A-4D36-9737-CC454640E9F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)st1:*:*:*:*:*:*:*","matchCriteriaId":"6CA42C30-EB70-4030-9D02-0F3635C980EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)st5:*:*:*:*:*:*:*","matchCriteriaId":"4A4EE26C-9B9D-41B5-9E0D-46D599EDE8B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)st8:*:*:*:*:*:*:*","matchCriteriaId":"1A125557-4893-4C74-800D-D5A2FCFE6C62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17a\\):*:*:*:*:*:*:*","matchCriteriaId":"A3F7B649-548F-46B5-BC0C-AB4013CF290F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)s:*:*:*:*:*:*:*","matchCriteriaId":"3E4D37B0-460F-4F16-B4F4-33A4DB80FC79"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"6018992E-1FB3-4ED8-ADC3-3BA49B76165D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)s5a:*:*:*:*:*:*:*","matchCriteriaId":"1FF6C534-3DF7-45A5-8F76-DF75A7EB0E97"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"684ED113-91F6-41BC-BAF5-62041D850F2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)sl:*:*:*:*:*:*:*","matchCriteriaId":"5A6E2071-516B-41B6-A897-799B66907FFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)st1:*:*:*:*:*:*:*","matchCriteriaId":"2BEE0CBD-9810-46D0-87B8-0B46926C2F67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)w5\\(22b\\):*:*:*:*:*:*:*","matchCriteriaId":"C6710AB1-42BC-4612-99EB-4E3C9A811E30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18b\\):*:*:*:*:*:*:*","matchCriteriaId":"8BDD3722-C5FC-4AD0-83D3-7E5D2F4B51E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\):*:*:*:*:*:*:*","matchCriteriaId":"13BB143D-CE87-4B5B-8B41-F641C160624F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)s:*:*:*:*:*:*:*","matchCriteriaId":"53BF4CAE-9C49-412C-A3F3-F365D2E0F619"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"8DA28B36-9E53-4D2C-9ADB-C878182DB688"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)s2a:*:*:*:*:*:*:*","matchCriteriaId":"801F584F-A11B-4C28-BF74-2917BED984DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"CB6B7A5F-DFE1-4597-B121-BF4714CD2E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)sl:*:*:*:*:*:*:*","matchCriteriaId":"8F7D5266-C127-4CF4-B1CF-3D639A9E204C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)sl4:*:*:*:*:*:*:*","matchCriteriaId":"A78459C5-2762-4652-8D34-772F3A025381"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)sp:*:*:*:*:*:*:*","matchCriteriaId":"96C97A75-1498-40A2-8569-581FB3D13598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)st:*:*:*:*:*:*:*","matchCriteriaId":"52877E55-8DB4-4E4E-BBA1-72F2E1B0C6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)st2:*:*:*:*:*:*:*","matchCriteriaId":"C0B9AD4E-CF9A-4772-9E84-6C11401245A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\)st6:*:*:*:*:*:*:*","matchCriteriaId":"5B83B0C4-897E-487E-939F-1E40144399EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19a\\):*:*:*:*:*:*:*","matchCriteriaId":"B9ECD6C4-10AA-4B34-96F3-7EF6A093EDE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)sl:*:*:*:*:*:*:*","matchCriteriaId":"4017470C-5EB2-4E30-834F-EAAF1738B8FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)sp:*:*:*:*:*:*:*","matchCriteriaId":"67EC4390-6EDE-4235-83C9-DE8B0BE74539"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)sp1:*:*:*:*:*:*:*","matchCriteriaId":"3C89179A-562B-48C7-A4ED-E98ABC855972"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)st2:*:*:*:*:*:*:*","matchCriteriaId":"B9032AFE-430F-409F-9558-F2179CE19087"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)st6:*:*:*:*:*:*:*","matchCriteriaId":"587A531C-B3EF-4B7F-872B-7481E38BA785"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)st7:*:*:*:*:*:*:*","matchCriteriaId":"2F59E7FC-C1AB-4C4F-B1A6-2A30FF64405F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)sx:*:*:*:*:*:*:*","matchCriteriaId":"2B6C9A4F-1F21-4AF4-B694-6A6F3A6C2170"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20\\)w5\\(22b\\):*:*:*:*:*:*:*","matchCriteriaId":"F54D02AB-FED4-49C8-87C4-1745FA867A31"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20.4\\)sp:*:*:*:*:*:*:*","matchCriteriaId":"1AAFB5F7-4343-480B-B3DC-7ADC66582983"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(20a\\):*:*:*:*:*:*:*","matchCriteriaId":"1734A3F8-45A2-4590-9518-0753F503433D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s:*:*:*:*:*:*:*","matchCriteriaId":"2B8735B4-CD22-40E7-B7D2-C7A4B559F7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"7EAB9029-DC45-4F55-A4FF-F6DEEDFFA150"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"F5310F83-EB1F-423C-A5EF-681FECAD66FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s4a:*:*:*:*:*:*:*","matchCriteriaId":"390D496F-AFFE-4CAA-AA27-66E8C755887C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s5a:*:*:*:*:*:*:*","matchCriteriaId":"21CB6075-DB61-4BDE-BD9E-4DBE06CF25E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"E9AB2EF6-03CC-4C83-B81D-E7C4B2C03B82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"6B88B203-B522-428B-A273-2DDFF9CC2898"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)sl:*:*:*:*:*:*:*","matchCriteriaId":"F3408ED7-AAE8-4BD8-9A1C-B7F048C63CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)st:*:*:*:*:*:*:*","matchCriteriaId":"466E247E-5514-4489-A169-513115AB42D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)st6:*:*:*:*:*:*:*","matchCriteriaId":"7CEEF0AA-002E-4768-9302-B7CCBBF25C7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)st7:*:*:*:*:*:*:*","matchCriteriaId":"911BBC74-F18B-470A-A1E9-4D67F5866D87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21\\)sx:*:*:*:*:*:*:*","matchCriteriaId":"08A4E74E-DE87-4787-8E2E-3C7D77E02224"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(21a\\):*:*:*:*:*:*:*","matchCriteriaId":"442338B0-C242-45A1-8860-4386A5033C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)s:*:*:*:*:*:*:*","matchCriteriaId":"6070D9A2-9A74-46B1-979D-F3F80D69513E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"9DBB2CF9-2F36-4CA8-8814-C34AE5620942"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"7498FF80-0A4D-4510-9C1A-DA24E1A4A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"312DB4D6-81B5-44C5-B99F-D56603C00B98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"D448CA2F-8C4B-4834-8B36-B2E60D7A2D66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"CCBAB365-6B58-44D2-A078-B3B4369CA32C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"332C413B-7AC7-4475-A968-9D0B7EF14B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"35999D5E-F831-446C-B509-F1531A2D1DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"67DEFA98-F2AE-437A-8BE3-7F021C0AE76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)sx:*:*:*:*:*:*:*","matchCriteriaId":"02F37758-9AC2-4CAA-8A09-5A59FC622267"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)sz:*:*:*:*:*:*:*","matchCriteriaId":"53D11EA0-B7E1-46F5-9FCE-0812A7DD776D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"E3630462-F414-4D6B-8766-7CED5366C852"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"1D6D0C5A-87C7-4169-B9DC-2AFA217888F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"58DF5979-73D5-4B2E-B98E-CD0AB8517F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"1EA92F7A-C14E-4186-8E96-51D2BDC40DE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"F451B6F0-429F-4B75-93F2-52AF4F65D3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24.2\\)s:*:*:*:*:*:*:*","matchCriteriaId":"8C3E9A9A-B80F-43BD-8A63-762B60D6DBE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(25\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"3C634FD5-0716-435A-8D5A-0640DB34C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(25\\)w5\\(27\\):*:*:*:*:*:*:*","matchCriteriaId":"A0CCE7A4-A7EC-4926-90BA-B4AA87DAD99D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(25\\)w5\\(27c\\):*:*:*:*:*:*:*","matchCriteriaId":"00EDE5CF-FFB6-463A-B55A-53D76F3B7670"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(25\\)w5-27d:*:*:*:*:*:*:*","matchCriteriaId":"0D8FB0C2-4ECA-4371-B874-2496232965A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(25.4\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"2B5A4482-9555-4DA0-87CB-3F17EE84EA2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\):*:*:*:*:*:*:*","matchCriteriaId":"C17DD4A5-9E82-49EF-965D-DF714DDBFF44"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)s:*:*:*:*:*:*:*","matchCriteriaId":"25058DEF-01CC-4148-923C-7AC433D82E7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"179CEE21-E5CA-466A-BAF0-8936F2E0B06F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"2F22B210-D1B8-4875-BDF2-2BE5B116B527"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"DA1E0BA5-4A57-4D26-A453-A4D5D56DE66B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)w5\\(28\\):*:*:*:*:*:*:*","matchCriteriaId":"1D95BA23-C2A0-4659-B664-0B7FE74D9E34"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)w5\\(28a\\):*:*:*:*:*:*:*","matchCriteriaId":"FE1C0D16-5167-4A29-A8C8-3EF603AA8894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\):*:*:*:*:*:*:*","matchCriteriaId":"7A300584-6480-410F-8399-092682A62435"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)s:*:*:*:*:*:*:*","matchCriteriaId":"00682210-2C86-4912-A423-5F7011C2FA2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"1B5C5244-8E39-41AE-931D-D935DC3CE00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)sv:*:*:*:*:*:*:*","matchCriteriaId":"498F4C0D-393D-4406-9752-4E49D6BB42B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"E9C87916-D186-4E36-A4B6-5FA858FFC7E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)sv2:*:*:*:*:*:*:*","matchCriteriaId":"AAF9C316-FF3D-4C52-A770-B8597895BA06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28\\):*:*:*:*:*:*:*","matchCriteriaId":"816276EF-A529-4522-9F49-80E9FF64F795"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"1336C42E-DA75-4DBC-81E1-70DD987EE54B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"8D7042F5-2878-45B2-856B-5EBC93A2BE0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28\\)w5\\(31a\\):*:*:*:*:*:*:*","matchCriteriaId":"2B74536A-EC0C-4C39-BA91-72990A4886E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28\\)w5-30b:*:*:*:*:*:*:*","matchCriteriaId":"37E48A25-53DE-4A07-B6B2-A275F390ABAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28\\)w5-32a:*:*:*:*:*:*:*","matchCriteriaId":"6C4789A3-692B-4BC4-8A91-1F576C27C8B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28c\\):*:*:*:*:*:*:*","matchCriteriaId":"43C4011A-B88C-49BD-B798-786EAC87EB59"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(28d\\):*:*:*:*:*:*:*","matchCriteriaId":"0F864A21-658C-4789-940C-E915F6C9F8A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(30\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"D49C8C12-CE1E-41B9-991D-CC3AE51FEA8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(30\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"0F1DAEE2-8026-46DA-A652-6E0CD5A6A657"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(30\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"616EA4E3-C5FC-4145-963B-E3ABAFB5E5CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(31\\)s:*:*:*:*:*:*:*","matchCriteriaId":"3B896570-8184-4EC8-8EB3-95312E4ED869"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(31\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"5743923A-A78D-4C8C-99C5-5063A609700C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0ev:*:*:*:*:*:*:*","matchCriteriaId":"84299245-5091-4ED5-A107-4F7A2BE499E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sv:*:*:*:*:*:*:*","matchCriteriaId":"3999B90E-FE66-4B5D-8186-66C658855D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*","matchCriteriaId":"5A92DCEF-C205-4145-91B0-DB9991130457"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*","matchCriteriaId":"23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*","matchCriteriaId":"C6333F9A-2605-41EE-9AB4-1D04C5825BAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*","matchCriteriaId":"DDBE69A0-85B1-423B-88FB-CDA80E9186EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*","matchCriteriaId":"E2606209-91BE-4BEB-A163-0D3873A033FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*","matchCriteriaId":"4D0082D5-CE3E-433A-84E9-1311C8B7899A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xw:*:*:*:*:*:*:*","matchCriteriaId":"7ED30640-AABE-4CA2-8B45-509270748BBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D86E0B83-3098-47A6-9298-43D3D5F476DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)db:*:*:*:*:*:*:*","matchCriteriaId":"960F3C8E-AB3A-4A73-A1B8-E4DD98FACF14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)db2:*:*:*:*:*:*:*","matchCriteriaId":"516E4BEC-B9DA-4E21-9271-742F1CEDA087"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)dc:*:*:*:*:*:*:*","matchCriteriaId":"E9829AB1-BB64-4D0F-88BB-894FCF9CA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)dc2:*:*:*:*:*:*:*","matchCriteriaId":"C0ADD1EB-B46F-4B8C-BF4D-5A9631BDFA0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)e5:*:*:*:*:*:*:*","matchCriteriaId":"A09F6AD8-4B16-465A-9781-1B650062FB6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"96541BD7-7D90-4C56-BC23-7071A07711DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)t:*:*:*:*:*:*:*","matchCriteriaId":"89AA56EF-E123-4539-80EA-B94965EAA2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1.3\\)t:*:*:*:*:*:*:*","matchCriteriaId":"605C83F3-9159-4D8F-90C4-886543D2BBCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1a\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"9EDD9202-56A8-4924-AC60-08B223D5C3DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"2E960CA4-679E-4748-ADDA-D122C5A2D331"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"326374ED-7ADC-457A-A8E1-4C42CDB8F3BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"B2A0B63E-5CCF-4441-A6A1-B4EE1A556070"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"6255AFC2-DAC7-40AE-BD1C-3BFEB5544FF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2\\)xf4:*:*:*:*:*:*:*","matchCriteriaId":"CF37C54B-72D1-4D7C-B0BA-0D9C7BA6C80A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2\\)xf5:*:*:*:*:*:*:*","matchCriteriaId":"BDF1C787-B425-44FD-8C9B-8F6BFDD42BF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2b\\):*:*:*:*:*:*:*","matchCriteriaId":"B58DAD06-8EE4-4991-8D3F-087CB2D7B557"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F6812739-E9C0-425A-989D-E68CE3030E30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)db1:*:*:*:*:*:*:*","matchCriteriaId":"7BBD302C-CA25-4DB0-9183-CCE038573D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)dc2:*:*:*:*:*:*:*","matchCriteriaId":"D1FBD098-4B1E-4FEA-A5CB-DDB9F1E39411"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)t:*:*:*:*:*:*:*","matchCriteriaId":"156DB723-98BC-402A-A517-18D20DA45206"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)xi:*:*:*:*:*:*:*","matchCriteriaId":"02516D45-C6EB-4B06-B309-C093E4C75F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)xp:*:*:*:*:*:*:*","matchCriteriaId":"49176A2B-7194-49A3-AACA-2457F3733231"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)xp4:*:*:*:*:*:*:*","matchCriteriaId":"AE045552-B648-40DA-9F78-DBF1CA8818D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)xq:*:*:*:*:*:*:*","matchCriteriaId":"6C847187-D66E-4C06-BAA4-4C12DB167584"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)xt:*:*:*:*:*:*:*","matchCriteriaId":"8698ABDC-307A-4187-9F53-99F1428F75D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)xt3:*:*:*:*:*:*:*","matchCriteriaId":"9F051387-6398-4880-9A57-B52C31D9646F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"652D2AD8-3C65-4EE3-95B8-C03173031367"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3a\\)e7:*:*:*:*:*:*:*","matchCriteriaId":"30142776-CF36-485C-AD6D-2F245BFD88F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3a\\)e8:*:*:*:*:*:*:*","matchCriteriaId":"CF621A5A-A65E-42C6-A046-CE995DF4CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3a\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"F3061CCE-5295-426D-86AD-7E3905E50E4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3a\\)t7:*:*:*:*:*:*:*","matchCriteriaId":"35494253-675B-42E6-90CC-B5510024C4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3a\\)xi8:*:*:*:*:*:*:*","matchCriteriaId":"6CDE8D34-5405-45B6-BB59-3D2853123B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3b\\):*:*:*:*:*:*:*","matchCriteriaId":"28E0C1D4-265E-4505-8570-CE242B5FCECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"F16649D4-A884-45F0-AF7C-754AC68E777D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)db:*:*:*:*:*:*:*","matchCriteriaId":"EBE87A20-D684-4679-9B6E-3D945CD06CB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)db1:*:*:*:*:*:*:*","matchCriteriaId":"0D576D29-F8B4-408D-9982-0F08C6D8E862"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)db2:*:*:*:*:*:*:*","matchCriteriaId":"F3EB5F43-8D46-4E53-86E1-1B151EDD8068"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)dc:*:*:*:*:*:*:*","matchCriteriaId":"AF5DEDA7-DD61-4E78-92F1-77972B1C9E98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)dc2:*:*:*:*:*:*:*","matchCriteriaId":"41285CF3-A946-40FF-A6BB-C52713C2CBD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)e3:*:*:*:*:*:*:*","matchCriteriaId":"0BF1198D-69FA-48C1-A853-083CE294D2C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)ea1e:*:*:*:*:*:*:*","matchCriteriaId":"19D7A275-0889-400E-9CAD-BE6C5FE79356"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)xm4:*:*:*:*:*:*:*","matchCriteriaId":"7FDB25D1-E913-4EA1-959C-5103A860DE41"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)xz:*:*:*:*:*:*:*","matchCriteriaId":"71E06301-E2D0-42EF-AFA2-3FE2EFDE1E5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4\\)xz7:*:*:*:*:*:*:*","matchCriteriaId":"AD91CD31-9677-4CC2-A41D-FBD005E8E909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4.3\\)t:*:*:*:*:*:*:*","matchCriteriaId":"5B7ED6DD-D86C-4BF9-8F7F-7E2383B15366"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"3D0BE079-5746-4C3D-BA05-469C4E7F2C94"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)da1:*:*:*:*:*:*:*","matchCriteriaId":"A5F27868-5EBF-4613-B184-18F3EEF037C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)db1:*:*:*:*:*:*:*","matchCriteriaId":"52084CCC-4ACC-40F9-8F6B-3F0C838AE330"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)dc:*:*:*:*:*:*:*","matchCriteriaId":"F9A9E4A3-5CFB-4985-A20E-F0681EF0F0DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)dc2:*:*:*:*:*:*:*","matchCriteriaId":"32D1FD9E-5B47-4057-A6D2-ADD59B968F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)ey:*:*:*:*:*:*:*","matchCriteriaId":"CDA17170-13DB-4019-A1C1-A4A9A00601DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)t:*:*:*:*:*:*:*","matchCriteriaId":"0C60337C-9487-47FD-95AB-8F6D012B59BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"6CFF4E1E-FAA5-434B-80E8-E6EBE939C6A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)t12:*:*:*:*:*:*:*","matchCriteriaId":"AAF6864A-9F94-4A3F-B127-323F2220D6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)t15:*:*:*:*:*:*:*","matchCriteriaId":"EAED3057-BBBF-4A5C-B912-013307282E98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xg5:*:*:*:*:*:*:*","matchCriteriaId":"4AC91E63-4E93-4345-BC31-C1BF979AD618"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xm:*:*:*:*:*:*:*","matchCriteriaId":"A05A0F6A-B2F7-4F00-9E9C-002E0E48E1E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xm4:*:*:*:*:*:*:*","matchCriteriaId":"B2F2766E-6E82-416E-A24A-04D95459F99B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xm7:*:*:*:*:*:*:*","matchCriteriaId":"EA86FEC9-116E-4740-AD42-CF0093E48B71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xr2:*:*:*:*:*:*:*","matchCriteriaId":"3ABC7C22-4E6D-4908-8F64-9EE1574DD635"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xs:*:*:*:*:*:*:*","matchCriteriaId":"8B717378-F6D8-4A15-8D79-B70EF540CBF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xs2:*:*:*:*:*:*:*","matchCriteriaId":"55F3AF17-076E-4973-9573-DB46967F2CAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xu1:*:*:*:*:*:*:*","matchCriteriaId":"88F46869-0883-43B4-999A-21AFCD933193"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xv:*:*:*:*:*:*:*","matchCriteriaId":"F9607DFF-DD24-4BC1-BC40-04B89AB07F8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xv3:*:*:*:*:*:*:*","matchCriteriaId":"81A8947C-1B05-4EB7-86D1-003B091F8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xv4:*:*:*:*:*:*:*","matchCriteriaId":"F1D15335-C316-4681-87DF-C259C4A962D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xv5:*:*:*:*:*:*:*","matchCriteriaId":"BA0572EF-3070-43D1-91FE-3D33A66ED413"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)xy6:*:*:*:*:*:*:*","matchCriteriaId":"41940F9E-3381-452A-BBCC-E8CC96B9070F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)ya:*:*:*:*:*:*:*","matchCriteriaId":"C99915F7-2B91-4CA2-8499-F4B094475B79"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)ya2:*:*:*:*:*:*:*","matchCriteriaId":"4376EDFF-B9A0-4937-AC66-38676A06272B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yb:*:*:*:*:*:*:*","matchCriteriaId":"80262A82-A668-4C85-A9AA-D27DCA9C327D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yb4:*:*:*:*:*:*:*","matchCriteriaId":"F3F44952-5746-4D27-8025-27FC4B4E9CD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yb5:*:*:*:*:*:*:*","matchCriteriaId":"11CA7C44-0DC9-40C4-A57B-5D108209D931"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yc:*:*:*:*:*:*:*","matchCriteriaId":"C49E8DAE-2C34-4191-B888-BFF2398006E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yc1:*:*:*:*:*:*:*","matchCriteriaId":"FA64AC20-EC74-4EC4-B04B-D019F91A4A89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yc2:*:*:*:*:*:*:*","matchCriteriaId":"631B088C-18A1-411E-A62F-F0DD48832732"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yd:*:*:*:*:*:*:*","matchCriteriaId":"0E13FC17-7206-4055-A46D-47421F2F07BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yd2:*:*:*:*:*:*:*","matchCriteriaId":"A7353F76-EE99-48F1-A68B-BD4EAC823268"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yd6:*:*:*:*:*:*:*","matchCriteriaId":"410F01C8-0A60-44C8-8906-AA8AC7D9A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yf:*:*:*:*:*:*:*","matchCriteriaId":"37FA259A-F5F0-4D2B-A604-47D21A694BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yf2:*:*:*:*:*:*:*","matchCriteriaId":"128421E8-60B8-4986-8033-D0E69BB22296"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yf4:*:*:*:*:*:*:*","matchCriteriaId":"0B9DD4D5-8D5E-48AF-9B33-1C25CB5E701B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yh:*:*:*:*:*:*:*","matchCriteriaId":"BC7F832A-A24B-4A4F-BB6C-5DE8A25C4B24"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yh3:*:*:*:*:*:*:*","matchCriteriaId":"251419AA-0212-4269-A4C6-5C497BD2CAD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yi:*:*:*:*:*:*:*","matchCriteriaId":"18097A8F-588A-46B4-A203-01AFEA175595"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5\\)yi1:*:*:*:*:*:*:*","matchCriteriaId":"710E3A8C-7403-4BE5-9184-DBAF8DD218A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5a\\)e:*:*:*:*:*:*:*","matchCriteriaId":"72C05152-8070-4853-BC0A-01A0A2C226F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5c\\):*:*:*:*:*:*:*","matchCriteriaId":"E2544486-0053-4A71-A55B-E8EC529D4794"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5c\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"A661E88D-A248-4622-B667-FD2FD4AA3624"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5c\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"1637C389-A962-4695-AC35-47785C205FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5e\\):*:*:*:*:*:*:*","matchCriteriaId":"97B11FB8-9490-49D8-AC87-F63F48B39CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"4A9C34CF-FA5A-411D-94D6-3101625E871C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)e8:*:*:*:*:*:*:*","matchCriteriaId":"942A6040-051A-4FD1-935C-54CDF87C19DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"B0E5CA82-CA58-4B6B-B99E-59D905E7C304"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"E1168DD8-4DF7-4A2B-B080-D267BF815F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ea1a:*:*:*:*:*:*:*","matchCriteriaId":"CCEF5EBB-226A-4E8F-A78D-9C1754F1FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ea2:*:*:*:*:*:*:*","matchCriteriaId":"3316587B-3BCE-4F4A-8835-BDC12A7F12F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ea2a:*:*:*:*:*:*:*","matchCriteriaId":"148C0902-66C4-4952-8319-40B8B145A901"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ea2b:*:*:*:*:*:*:*","matchCriteriaId":"1037D61F-BDE2-4956-9B27-25FD5408F1A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ea2c:*:*:*:*:*:*:*","matchCriteriaId":"3CC077AA-909C-4344-B5A9-F71FBCC34B97"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ey:*:*:*:*:*:*:*","matchCriteriaId":"E4C9A6C0-F89B-4C11-B415-D78693C0E83E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ez1:*:*:*:*:*:*:*","matchCriteriaId":"D2D7E0FE-ABA8-4423-A126-EE56E4AC6E98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6\\)ez2:*:*:*:*:*:*:*","matchCriteriaId":"4B3C6083-0A69-4B38-B7AC-9F7DD4D41BA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6.5\\):*:*:*:*:*:*:*","matchCriteriaId":"2A759C05-80B5-4A5C-8B9A-C0AC13638EF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6.5\\)ec3:*:*:*:*:*:*:*","matchCriteriaId":"93063C37-AEEA-47EE-A87A-5BB4BB76F416"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6a\\):*:*:*:*:*:*:*","matchCriteriaId":"CDAE896A-4B97-4E67-8A55-046AB7CC0C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"A0C0CF63-FCC4-427A-9A86-48A03D913726"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7\\)cx:*:*:*:*:*:*:*","matchCriteriaId":"DB234FEB-C185-420C-87C0-B54E9463D24D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7\\)da2:*:*:*:*:*:*:*","matchCriteriaId":"DBFE5890-AA06-40A5-B02B-F6E02D6749BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7\\)da3:*:*:*:*:*:*:*","matchCriteriaId":"0E621324-E76F-446D-9477-DE68A28206F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"1481AA47-0E3F-4B64-B8EF-13358EDB4B8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7a\\)e6:*:*:*:*:*:*:*","matchCriteriaId":"7E24AB6D-AEDD-47D2-868E-7C2801B8A667"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7a\\)ey:*:*:*:*:*:*:*","matchCriteriaId":"0F0A9F96-4BBC-4154-8098-2E6CD2B9391E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7a\\)ey3:*:*:*:*:*:*:*","matchCriteriaId":"43155865-F9DF-43E9-B688-246AD46FFA4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(7b\\):*:*:*:*:*:*:*","matchCriteriaId":"989069B1-5B8B-4F6E-BD76-3B2999F2BC5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"DF384E8C-2EB1-4747-B749-E89E25A77321"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8\\)aa1:*:*:*:*:*:*:*","matchCriteriaId":"EA2FB3CC-64F1-4204-A04B-BCED3ADE7102"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8\\)e:*:*:*:*:*:*:*","matchCriteriaId":"4D37BA51-A0F6-4CF4-A729-44C1060DEBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8\\)ea:*:*:*:*:*:*:*","matchCriteriaId":"F1D0F1E8-B2AD-40A2-A7A5-8AF0D0198E00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8\\)ea1b:*:*:*:*:*:*:*","matchCriteriaId":"09C8E9BF-1C07-47FE-8F98-ED5960D302FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8\\)ea2b:*:*:*:*:*:*:*","matchCriteriaId":"4DFD542A-C3E0-4E81-AA6C-D32BE269B6C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8a\\)e:*:*:*:*:*:*:*","matchCriteriaId":"72BC63AE-31B1-44E7-BABF-B8C529283E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8a\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"429E111D-F383-4DCC-A378-D7F15234E059"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8a\\)ew1:*:*:*:*:*:*:*","matchCriteriaId":"F9B45852-A773-40E0-97D5-4F4A5F6E8D2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8a\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"5EA87A2A-E394-4EA4-82BA-9CA3A561C8E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e8:*:*:*:*:*:*:*","matchCriteriaId":"2CD2B299-8C70-444B-9AEC-B9EAD4650C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"37EC9304-51E7-4147-820B-E6DFA9267617"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"DFF5CF62-C9A7-43C7-82DD-3CDAD6218D1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e15:*:*:*:*:*:*:*","matchCriteriaId":"2D1AAD07-8EA0-496D-A4A7-6DD72B711813"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e16:*:*:*:*:*:*:*","matchCriteriaId":"25619ACF-6813-4470-B1F6-0D05D155DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e18:*:*:*:*:*:*:*","matchCriteriaId":"B7258C5E-8D61-4ADF-AF7D-F772C0A14C00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)e20:*:*:*:*:*:*:*","matchCriteriaId":"4859372A-D2F6-4D97-939D-91A28B65B1D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8b\\)ex4:*:*:*:*:*:*:*","matchCriteriaId":"C47237CD-540B-462F-8B29-AC1EF4AF868B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8c\\):*:*:*:*:*:*:*","matchCriteriaId":"3184A435-713F-499F-83D5-51233607861E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"F2C03276-B783-49BC-841B-6A75FFDDCBF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"E8737806-D06E-4859-ABC2-B6D764AA74A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)e:*:*:*:*:*:*:*","matchCriteriaId":"61B04BC6-B6BD-4CD2-9257-B7493B33ADAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)e3:*:*:*:*:*:*:*","matchCriteriaId":"718E435B-14E4-45AD-8565-CAE1F245772D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)ea:*:*:*:*:*:*:*","matchCriteriaId":"CB79AFC9-2863-4DAE-9235-56DBD7C4E066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"2465A016-415C-4EE9-9DEC-B71C3EDC0BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)ex3:*:*:*:*:*:*:*","matchCriteriaId":"71655A8A-9E5F-4B48-A490-2A3110230DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9a\\):*:*:*:*:*:*:*","matchCriteriaId":"FB6D148F-D29B-4610-85EB-557AC86C7FC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"791F8D35-C80C-4540-9FD4-A957F429C712"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"68E75B85-BD83-4183-8738-10B7ABFCD333"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)e:*:*:*:*:*:*:*","matchCriteriaId":"F32F2780-796C-4A03-BA5C-3B0CDCD2FEB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)e4:*:*:*:*:*:*:*","matchCriteriaId":"2046F5A7-EA7D-4C6F-9B93-467AB1CC2624"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"AA022E55-1EC7-4447-8B1F-1DE2102F71FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)ec1:*:*:*:*:*:*:*","matchCriteriaId":"11032330-069D-4E4A-8F65-BC9EC832EC24"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"6B9352A8-5C48-46D7-A9B9-61C6D003E9D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10\\)ey:*:*:*:*:*:*:*","matchCriteriaId":"401856C7-EDE5-4B89-8A09-EFC2F878E753"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10.5\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"95257024-EEB8-4111-BC17-82173B759397"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(10a\\):*:*:*:*:*:*:*","matchCriteriaId":"CB900989-74D8-4DD2-93BF-5A6D50E48213"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"D9B0EBB1-E870-4794-9474-F4E2A8AFEC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"91195861-AC53-4468-B1BB-3144A6F3CB3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"238FC81A-606E-49ED-B97C-432A82BF7318"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11.5\\)e:*:*:*:*:*:*:*","matchCriteriaId":"F6D3C225-A31E-4E61-9B90-BBD38A8F6C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11a\\):*:*:*:*:*:*:*","matchCriteriaId":"330A2017-426D-4D6D-86A1-1D063038366E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\):*:*:*:*:*:*:*","matchCriteriaId":"7FC01431-DCF5-4F12-B95C-4F0813A04070"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"7DA6CBB3-6F8D-40D4-9511-C9DD6F703C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12\\)e:*:*:*:*:*:*:*","matchCriteriaId":"5BF2C4D9-65CC-4C27-8240-C8F00F38A3F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12a\\):*:*:*:*:*:*:*","matchCriteriaId":"F5A3BEF7-B34D-4D07-A8E6-834F555D0468"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12b\\):*:*:*:*:*:*:*","matchCriteriaId":"4DC4D8BB-2A95-4A57-AF3F-1CD01F55D62F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12c\\):*:*:*:*:*:*:*","matchCriteriaId":"93AA3BC4-C536-4EEF-85E3-D521580F18D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12c\\)e7:*:*:*:*:*:*:*","matchCriteriaId":"2E8C082A-A9B7-4333-9ACB-CB75DCB73973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12c\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"1EF8CAD4-6B77-4B1F-B3EF-05873051949C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12c\\)ev01:*:*:*:*:*:*:*","matchCriteriaId":"014D2124-5158-4FCB-A831-9457CA435A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew4:*:*:*:*:*:*:*","matchCriteriaId":"5E89EF44-F094-4002-A325-C765D5CB9B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"7C9A3703-1082-45A6-B510-9B6C880F14A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)ay:*:*:*:*:*:*:*","matchCriteriaId":"7E473130-ED52-48FA-AAAD-A1EA427AEBE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"B9478F31-994D-4FD8-AC53-B000815FBA92"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e3:*:*:*:*:*:*:*","matchCriteriaId":"ADB275FD-926E-4875-AAA2-88F8DB3B8B98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e7:*:*:*:*:*:*:*","matchCriteriaId":"D3EEC237-DD65-43F0-9DFE-0D32C929153E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"EE497DA8-240B-44DE-92F4-6CAC88A89B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e13:*:*:*:*:*:*:*","matchCriteriaId":"2EFCFBFD-E998-4581-B7C1-5A8BFA27DE82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e17:*:*:*:*:*:*:*","matchCriteriaId":"337A0980-A5B4-4605-8572-8283FD1588C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"EC069569-859C-41DB-93FE-57E8B3F2EBCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1c:*:*:*:*:*:*:*","matchCriteriaId":"17B63153-D51A-40AE-887B-CC9362263602"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"DB3F54C6-FD33-442F-9E82-510EA39B0A4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)ew4:*:*:*:*:*:*:*","matchCriteriaId":"A6568612-226C-48A3-B619-4C540D05968A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)ex2:*:*:*:*:*:*:*","matchCriteriaId":"20A9F169-F1BB-4D40-81CF-9772B4E3BFEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13.4\\)e:*:*:*:*:*:*:*","matchCriteriaId":"8E6CA25F-5D9A-4996-AE41-FCF9BB9A6C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\):*:*:*:*:*:*:*","matchCriteriaId":"C0097ECF-6FB0-444C-997C-7FA44E82321C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"F633F237-0B44-482F-A120-53A90EE0A328"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\)e4:*:*:*:*:*:*:*","matchCriteriaId":"CD0E2DFA-B2B6-4FB3-97DD-D1167014323F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"6277E1AB-5962-47DA-BCBB-B6BF3A5BFAB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\)e10:*:*:*:*:*:*:*","matchCriteriaId":"ED09E588-89E8-416F-9A7B-0CF73807998C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"F1229A52-54B6-478F-A419-8D0340336BF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14\\)eb:*:*:*:*:*:*:*","matchCriteriaId":"2652E42C-E7FF-405A-8B6D-47C28A62757E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(14.5\\):*:*:*:*:*:*:*","matchCriteriaId":"5A69E21D-CF3F-4A57-9088-C9FF1C0ED5A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(15\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"D61DA1C6-B112-448D-8E23-07800DA3E3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"C2FA390A-9AE1-4C7D-906B-EFB5F927CC7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(18\\):*:*:*:*:*:*:*","matchCriteriaId":"2A8C2D22-61C6-4CA5-A275-DAEE2CD7D3B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(18.4\\):*:*:*:*:*:*:*","matchCriteriaId":"8A4ACEAA-2B21-4C3B-AA12-235626E54581"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\):*:*:*:*:*:*:*","matchCriteriaId":"4944AFEF-D002-4C86-958A-4EB753399FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e:*:*:*:*:*:*:*","matchCriteriaId":"00DEF5CE-8637-42DA-A371-AC9BF74D213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e6:*:*:*:*:*:*:*","matchCriteriaId":"46C3903E-94DA-409B-A0E9-A66BCB48204E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"54874F5C-4165-4CFA-9908-587A808CF3A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"184BB6B9-4E7D-4107-BFBA-847329C59209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)ew3:*:*:*:*:*:*:*","matchCriteriaId":"F0B06D76-49C9-412A-95C8-4C78C303488D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)fc1:*:*:*:*:*:*:*","matchCriteriaId":"17C19283-A797-4508-B180-0EA5A1D14310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19.3\\)e:*:*:*:*:*:*:*","matchCriteriaId":"4F62D015-0F71-4B7C-9B75-04F495725DF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\):*:*:*:*:*:*:*","matchCriteriaId":"DFC9A03B-752D-4F68-B360-CBE2EDBFD8F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e:*:*:*:*:*:*:*","matchCriteriaId":"D0C3B6E2-3D33-457E-B85D-8C2FC9DA2FE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"C41AB141-A566-4738-8E07-E6410590FB0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e2:*:*:*:*:*:*:*","matchCriteriaId":"F074DF74-81FA-4F09-A6E5-18DD9A4E76C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e3:*:*:*:*:*:*:*","matchCriteriaId":"9689234D-7762-4BA4-827E-702407F5BDF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e5:*:*:*:*:*:*:*","matchCriteriaId":"A390527A-7522-4580-8C0A-F68BF90A5CFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"E4041EB0-F402-4C01-9337-212E3E461AF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1a:*:*:*:*:*:*:*","matchCriteriaId":"00388B56-F514-4A9F-95FE-1D8239BE1EF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"0DEB16EF-D0C1-4C56-85B1-3C07D8CFD493"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec1:*:*:*:*:*:*:*","matchCriteriaId":"DFCFD88F-4320-4F4F-9CAD-BA8A5AA5D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec2:*:*:*:*:*:*:*","matchCriteriaId":"D89132D4-850A-4C33-BDE4-51F6A053C848"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)eo:*:*:*:*:*:*:*","matchCriteriaId":"ABF2BEC0-6D37-4BC2-9A78-FC0D06CE7573"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)eo1:*:*:*:*:*:*:*","matchCriteriaId":"4BBCCE83-076A-4B0C-9331-B9FE7DA8278E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)eo3:*:*:*:*:*:*:*","matchCriteriaId":"AA0B22A1-8B4B-4ECD-89B3-EDB5A14D1799"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"379E0F70-EE01-48F9-A4F0-BFCF9BDAB4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew1:*:*:*:*:*:*:*","matchCriteriaId":"17CD0C63-7500-4A32-BD85-27E6C2F70FB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew2:*:*:*:*:*:*:*","matchCriteriaId":"CCDFD76E-0668-4137-A747-8FDE700A3B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew4:*:*:*:*:*:*:*","matchCriteriaId":"17F7143A-9B42-47FC-8626-19A850A74E45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\):*:*:*:*:*:*:*","matchCriteriaId":"8E63F79F-BF31-4076-BBCA-1BC6CC23D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"F7744338-A68E-4F38-8C89-E07DC4BDCFB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)e3:*:*:*:*:*:*:*","matchCriteriaId":"32E01A6F-E21C-414E-BCA2-F7490DC78147"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)ea3:*:*:*:*:*:*:*","matchCriteriaId":"AB440BC6-9FC8-4EFD-B05E-3F5A5A68F8EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)ea4:*:*:*:*:*:*:*","matchCriteriaId":"1CF4A473-C851-4D2F-A22E-66A267A1BDB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)ea4a:*:*:*:*:*:*:*","matchCriteriaId":"4DD4687F-D78C-41C8-B2B8-D140813A8619"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)ea5a:*:*:*:*:*:*:*","matchCriteriaId":"FB8C33CF-9FD2-4DC5-B69C-0C8E0C6A987F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)ea6:*:*:*:*:*:*:*","matchCriteriaId":"1DFF09A6-DE59-4CBF-AF02-DF2862C05D1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(22\\)eb:*:*:*:*:*:*:*","matchCriteriaId":"5F7112F7-C3AB-4B67-A58B-A04E60F5F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(23\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"A43DD0D6-6890-472F-AA0B-75B218FCDC6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(23\\)e4:*:*:*:*:*:*:*","matchCriteriaId":"AB58F9A6-9298-4C47-A3C3-5C1DBF93E65A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(26\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"038514E5-49BA-4E0D-AEDB-6868117E0B25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(26\\)e3:*:*:*:*:*:*:*","matchCriteriaId":"0563D082-E449-40F0-93EE-437C1780CC75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(26\\)eb1:*:*:*:*:*:*:*","matchCriteriaId":"7FCF2E0B-0747-42A5-9EBC-22E81DFB2112"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(27\\):*:*:*:*:*:*:*","matchCriteriaId":"B430330A-8D7A-44F1-A338-7E6F702FB70A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(27b\\):*:*:*:*:*:*:*","matchCriteriaId":"A38345DF-A94B-4C8B-9F4D-9D70BC0ECA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*","matchCriteriaId":"D3B31AFC-9C72-4737-B6B7-E938C13695BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*","matchCriteriaId":"896A71EC-9508-406F-8DE8-58953D9A30FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1m:*:*:*:*:*:*:*","matchCriteriaId":"E6B13CDA-C376-412A-AF5D-8FC25C74A0A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1s:*:*:*:*:*:*:*","matchCriteriaId":"4EEFAB2C-172F-45AE-9C84-A036AD22B5EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1sec:*:*:*:*:*:*:*","matchCriteriaId":"7E3EFB16-B62B-4D24-B99F-AED2CD35C28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1x\\(l\\):*:*:*:*:*:*:*","matchCriteriaId":"3B11A6E0-36BB-44C5-893C-59AC283E515B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*","matchCriteriaId":"8A11AF3F-C82F-4431-9CF1-84FDAD388D04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"BF86B641-08DC-404A-9718-F2A99C1B0889"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)dx:*:*:*:*:*:*:*","matchCriteriaId":"324E754D-D755-4987-A892-D04A0690DD80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)s:*:*:*:*:*:*:*","matchCriteriaId":"67A304F2-D112-47B5-8859-10FF62990368"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)t:*:*:*:*:*:*:*","matchCriteriaId":"897A6F3D-9C80-4E3E-B3E3-5CA48227CA4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"915157AA-15BE-4792-95D8-4D1E1EF34EB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"F38C9EE3-1A86-4930-AEF7-EAC3A2713DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xd1:*:*:*:*:*:*:*","matchCriteriaId":"742CC70E-68FB-4658-A475-E7BBC5983878"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xd3:*:*:*:*:*:*:*","matchCriteriaId":"10CE5741-1569-4B69-B7F7-094F0C6101AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xd4:*:*:*:*:*:*:*","matchCriteriaId":"C9B4D71A-D418-4E6B-88F7-50833C00236C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"DDD14702-51AC-46B1-95A3-4AD47A4DCD21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xe2:*:*:*:*:*:*:*","matchCriteriaId":"6FA8E55E-7E11-4D46-A1BC-B3655906FDF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xe3:*:*:*:*:*:*:*","matchCriteriaId":"6E16ED18-4EB6-40D5-A857-6398A78693D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xh:*:*:*:*:*:*:*","matchCriteriaId":"979D4077-A3CB-4134-B180-EF10F01413BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xq:*:*:*:*:*:*:*","matchCriteriaId":"C6C96C90-8B2D-4A88-A4B8-FA43332BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xs:*:*:*:*:*:*:*","matchCriteriaId":"9C9B3920-D3F1-478F-ADE9-6022763E8740"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1\\)xs1:*:*:*:*:*:*:*","matchCriteriaId":"3BC9CF50-E0F7-4513-B7EB-A2E095D3E194"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1.1\\):*:*:*:*:*:*:*","matchCriteriaId":"52332F68-2C6B-4226-9B36-345AD0A904E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1.1\\)pi:*:*:*:*:*:*:*","matchCriteriaId":"7A1FCC6A-332A-43B9-B8D9-513D9B0DB374"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1.4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"D13AA694-BAAF-4BE0-B900-4C2BCCCDA00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"CAD94AB1-0D8D-4DBE-AB1B-6AE464743E75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1b\\)da1:*:*:*:*:*:*:*","matchCriteriaId":"AC4C28B5-4591-49E0-80F9-7C6059F24B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(1d\\):*:*:*:*:*:*:*","matchCriteriaId":"B2D6897E-33F3-409A-B874-501FFF989EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)b:*:*:*:*:*:*:*","matchCriteriaId":"9FE975E4-1D07-464A-8116-69393D07C362"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)bx:*:*:*:*:*:*:*","matchCriteriaId":"8FFF0815-8F37-4613-A54D-42D7AA299D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)by:*:*:*:*:*:*:*","matchCriteriaId":"CEB420B3-E9DA-4C5A-9299-FFAB48734116"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)by2:*:*:*:*:*:*:*","matchCriteriaId":"AFB7CEB1-84F0-405E-967A-A62B54B7CBCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)dd3:*:*:*:*:*:*:*","matchCriteriaId":"5BA91C37-5799-4B30-97FF-76A6A84F3606"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"BD6F2B76-43DA-4C2B-AA6F-C6A4BBF7DE12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"BFD6C223-10B9-4381-A4AE-77DD415B5AF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"F1A3E8C4-0E94-4027-ABDE-47A364071D1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"07398411-7920-4B52-92C8-3696F49370B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xa1:*:*:*:*:*:*:*","matchCriteriaId":"371FA715-3966-4071-961F-12E691608DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xa5:*:*:*:*:*:*:*","matchCriteriaId":"3E2713E8-3E4B-4C60-9ABD-01B962A85A9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"5400D72E-CD49-41E7-BA47-33E3AB920320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xb3:*:*:*:*:*:*:*","matchCriteriaId":"5A44418C-C041-4A98-9D1F-1E7510B9AD1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xb4:*:*:*:*:*:*:*","matchCriteriaId":"474FA3DA-6967-48A6-AAB4-E7C382D3C942"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xb11:*:*:*:*:*:*:*","matchCriteriaId":"D2808EB6-5964-4931-AEE2-BE1CF503B7E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xb14:*:*:*:*:*:*:*","matchCriteriaId":"BB0CD136-C54F-41F9-9969-9F367921B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xb15:*:*:*:*:*:*:*","matchCriteriaId":"6ABBB62E-EE60-4E80-9208-A6F5C1F80C06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xc1:*:*:*:*:*:*:*","matchCriteriaId":"78C39B9F-E597-473E-8297-6D1E8D9713E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"E319FE1E-8D75-4CA2-8EA9-C1C32C290891"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"B82C4003-D2CD-4243-8A8D-B8A9B449D096"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xh:*:*:*:*:*:*:*","matchCriteriaId":"29056463-CDD9-4399-964E-14BDBFF760A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xh2:*:*:*:*:*:*:*","matchCriteriaId":"259BD3FC-FFC5-44B7-8641-917A1BF2E98C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xh3:*:*:*:*:*:*:*","matchCriteriaId":"34F414DF-19C3-42BC-B43D-5CF60A3C0991"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xi:*:*:*:*:*:*:*","matchCriteriaId":"E32D7BFD-EC96-464D-81CB-E9CC12C21EC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xi1:*:*:*:*:*:*:*","matchCriteriaId":"32421120-BCA2-4218-8CB3-C77452A69295"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xi2:*:*:*:*:*:*:*","matchCriteriaId":"B03537E8-D899-44D5-976D-A6E10FF16FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xj:*:*:*:*:*:*:*","matchCriteriaId":"2C4C67B0-81D3-4430-A9F7-6F15C601693E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xj1:*:*:*:*:*:*:*","matchCriteriaId":"520E6B5D-C163-4633-A2DC-D02335838FDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"BA145839-3DC4-41C4-96B7-88B8EE87D70E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xk2:*:*:*:*:*:*:*","matchCriteriaId":"1FC95C37-9102-45C7-813A-15A0ACFF5D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xn:*:*:*:*:*:*:*","matchCriteriaId":"0F8D649D-474E-4661-A68E-517EA3563CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xr:*:*:*:*:*:*:*","matchCriteriaId":"420C23F6-1E44-418F-B6CA-DECA22218B87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xt:*:*:*:*:*:*:*","matchCriteriaId":"E0FEB158-215B-4C9D-8882-D44EE7F90B60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xt3:*:*:*:*:*:*:*","matchCriteriaId":"C1BD8E31-5117-4E79-92A4-5FF08BC8BB60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xu:*:*:*:*:*:*:*","matchCriteriaId":"274DF264-D0DE-46DC-A91F-DD53ACE06AAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)xu2:*:*:*:*:*:*:*","matchCriteriaId":"EC678F0D-4307-48B9-8C29-9E85DB756809"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2\\)yc:*:*:*:*:*:*:*","matchCriteriaId":"D917117D-CF4D-427C-8529-EB2D856E8A99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(2.2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"BCD87D10-0406-43C0-B961-47BAA4264641"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"16EA6782-77F4-4E2B-A882-A24ACEA5776B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(3.4\\)bp:*:*:*:*:*:*:*","matchCriteriaId":"80D35309-D236-4F49-88F9-AF29574630B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"8A33120F-F2DD-47A6-9BA3-58989C3CF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"7840C1F9-C5C6-42BE-97F3-BE6F174F8C87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)b:*:*:*:*:*:*:*","matchCriteriaId":"3A82EDE9-A7BD-4F36-8A97-DDDDAC45D80E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)b1:*:*:*:*:*:*:*","matchCriteriaId":"8697C1FE-2EC8-4116-809D-461801FDE1A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)b2:*:*:*:*:*:*:*","matchCriteriaId":"4181019C-3AF9-42A7-AD01-28B17AB6DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)b3:*:*:*:*:*:*:*","matchCriteriaId":"8C7265E4-1EE9-45E7-AB34-9BD6AA13E51D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)b4:*:*:*:*:*:*:*","matchCriteriaId":"DB5DC2C3-1DF3-47ED-BA83-9C9FEC2FD8F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"5B2979C5-DAF5-4A29-BD21-F6B0173574E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)bc1a:*:*:*:*:*:*:*","matchCriteriaId":"C8FDBABF-EDEC-4E65-925B-E4FB97FF27BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)bx:*:*:*:*:*:*:*","matchCriteriaId":"90E26E18-5F6D-4C34-AD4D-CC69135DC9B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"0200FB78-35ED-4CEF-A49E-52D6F8F6102D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ja1:*:*:*:*:*:*:*","matchCriteriaId":"8BCFAA1B-DDCC-4E2E-B9BF-B51E0B5710F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)mb3:*:*:*:*:*:*:*","matchCriteriaId":"213AB5CB-DB2C-4939-94D7-E211AD817FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)mb12:*:*:*:*:*:*:*","matchCriteriaId":"76A1F18F-77EB-4BE9-AFF4-00187613E5FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)mb13b:*:*:*:*:*:*:*","matchCriteriaId":"C785F596-113A-4B2E-9963-4D740F15DF7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)mb13c:*:*:*:*:*:*:*","matchCriteriaId":"E93B704C-55B8-4FFF-8910-314604143411"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)mx:*:*:*:*:*:*:*","matchCriteriaId":"FAEC62C5-DEAD-45A2-8339-EDA980833ED8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)mx1:*:*:*:*:*:*:*","matchCriteriaId":"86D1C216-F510-48C6-9065-708408D8CE1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"8330DE9E-EF94-4402-9B3A-AA876F9F0035"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"9934E886-22CD-489D-B90B-FD23B6A2D722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"51DD991F-682A-43E5-9BED-58F524616A9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)t6:*:*:*:*:*:*:*","matchCriteriaId":"BEA2B86D-05A1-4F17-903C-5E14A98493A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xl:*:*:*:*:*:*:*","matchCriteriaId":"AEB4D744-B7FA-41E4-8272-BC71C413BAA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xl4:*:*:*:*:*:*:*","matchCriteriaId":"06997F81-3A97-44C3-84B4-0868E0D20CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xm:*:*:*:*:*:*:*","matchCriteriaId":"52EA73E8-D40C-4E1D-94E9-E6FA63D7C253"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xm2:*:*:*:*:*:*:*","matchCriteriaId":"4478DFE6-341F-410D-967E-EFF8B67A2E80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xr:*:*:*:*:*:*:*","matchCriteriaId":"0570296A-6F1C-40E1-93F8-C23BF4330E2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xw:*:*:*:*:*:*:*","matchCriteriaId":"D79D38C9-271A-433C-9BED-C4893C2B0260"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)xw1:*:*:*:*:*:*:*","matchCriteriaId":"5507D5CE-F07A-4BAA-96E6-96A67F4C0A3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya:*:*:*:*:*:*:*","matchCriteriaId":"1119AC22-9A4E-468D-A9A4-27A4C9191F91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya1:*:*:*:*:*:*:*","matchCriteriaId":"35A326CF-ED69-44A6-B7BC-3DCCC2A1766C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya7:*:*:*:*:*:*:*","matchCriteriaId":"A76FBC72-6021-4535-8CD1-DD4208FD9CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya8:*:*:*:*:*:*:*","matchCriteriaId":"6D992EE7-4F7F-413F-9E4B-A7722249A74D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya9:*:*:*:*:*:*:*","matchCriteriaId":"2FA74A4B-A292-4825-9DDD-403A7EBAF007"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya10:*:*:*:*:*:*:*","matchCriteriaId":"A282CADD-CE0E-45F7-AE48-BC42133BF16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)ya11:*:*:*:*:*:*:*","matchCriteriaId":"A89A62A5-38CE-4BA6-8330-8345BB0F7B53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(4\\)yb:*:*:*:*:*:*:*","matchCriteriaId":"15DF8F59-0C88-4E38-B9A5-12293A2FE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"CC6829DD-33EA-40CE-A01B-EAA7667CBDF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(5\\)ca1:*:*:*:*:*:*:*","matchCriteriaId":"65C9A347-8EB3-4651-B7F4-BBE72E87B6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(5d\\):*:*:*:*:*:*:*","matchCriteriaId":"6F327B39-CCBA-4B2F-A083-CEEB625BD836"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(6.8\\)t0a:*:*:*:*:*:*:*","matchCriteriaId":"3AC7DFB1-014D-442E-B6B1-400B1F4BBDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(6.8\\)t1a:*:*:*:*:*:*:*","matchCriteriaId":"C289616B-36BA-440E-8380-5523844C2C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(6.8a\\):*:*:*:*:*:*:*","matchCriteriaId":"D295C746-6702-4DCF-91FE-62810B37549B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(6c\\):*:*:*:*:*:*:*","matchCriteriaId":"B858AB50-2EC6-4820-801B-5EAB72A0F947"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"87CED27A-7885-4D42-8A91-128BD76EF585"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(7\\)da:*:*:*:*:*:*:*","matchCriteriaId":"A057D34A-C0E0-4DA1-8E51-2E7C2572D28A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(7.4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"33AFA64E-4181-4751-B93E-EC067C97FC8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"A65C0314-7816-40C4-9950-1B40740204E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(7b\\):*:*:*:*:*:*:*","matchCriteriaId":"84CAE9D3-209C-4663-BD5E-424928E152F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(7c\\):*:*:*:*:*:*:*","matchCriteriaId":"191428C2-2F39-49B6-9ACA-E4C1A46F6C6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"9D67FDB9-FA6C-41F7-ACA0-AA04066B92F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"D359AB74-8958-477E-8B97-F5A1FC3BDC76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)t:*:*:*:*:*:*:*","matchCriteriaId":"402CF7F0-EC7B-474C-98F5-F9FA3486E45A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)t10:*:*:*:*:*:*:*","matchCriteriaId":"7BBE9430-02C3-41AE-899D-8935F3EF215E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)tpc10a:*:*:*:*:*:*:*","matchCriteriaId":"C0977D51-0EF6-4219-BEC9-400DF80B356C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)yd:*:*:*:*:*:*:*","matchCriteriaId":"A331B245-2FFC-41AE-9E17-61F6E9AD002C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)yw2:*:*:*:*:*:*:*","matchCriteriaId":"139DE650-5861-495E-9B87-6C9B68AA5233"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)yw3:*:*:*:*:*:*:*","matchCriteriaId":"F3A7C0DB-63E2-447A-A66C-1F7419F1EB3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)yy:*:*:*:*:*:*:*","matchCriteriaId":"70E5F20E-18F9-4108-AB48-E9A4DBB230B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)yy3:*:*:*:*:*:*:*","matchCriteriaId":"C91D2A28-D85D-4F62-92ED-11317A9C5947"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(8\\)zb7:*:*:*:*:*:*:*","matchCriteriaId":"5AF4480F-6C08-43B0-92C5-3FE07B5E09D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(9\\)s:*:*:*:*:*:*:*","matchCriteriaId":"4F575CA7-9875-4582-B9E0-446DE7227073"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(9.4\\)da:*:*:*:*:*:*:*","matchCriteriaId":"3021A9C0-3504-4B98-AD5A-9DB93E8803F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(10\\)da2:*:*:*:*:*:*:*","matchCriteriaId":"55396406-FB71-46A6-9CDF-27F041605097"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(10\\)da4:*:*:*:*:*:*:*","matchCriteriaId":"FC774495-327F-4488-A257-1F3C5FB2E00B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(10.5\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E0922A76-8F2E-4898-9AA6-32A0E3F2A8C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(10g\\):*:*:*:*:*:*:*","matchCriteriaId":"21E013BC-9F5F-4209-9588-1A3CDB017659"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)bc3c:*:*:*:*:*:*:*","matchCriteriaId":"6B059AD2-3215-4647-B4A6-AC9642E5623E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"665CB7BC-E97E-4461-B83B-681047A6EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)ja1:*:*:*:*:*:*:*","matchCriteriaId":"3F7E536B-DD9A-4F46-B8C1-F29DC3298972"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)t:*:*:*:*:*:*:*","matchCriteriaId":"92A9D069-4C88-4BE1-92E3-8A7056DD8825"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"F4E735E1-79B9-4FB3-B994-63D15AF6DBF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"7861C0AC-51C3-40F4-8D72-061153D71E64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"35B57355-CE86-4605-9123-15B1445C226D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"617CC100-06BA-4916-A2FA-EA91049DED27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yp1:*:*:*:*:*:*:*","matchCriteriaId":"F60222E3-B02F-44B8-9E64-DB8AE3BFAEC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yu:*:*:*:*:*:*:*","matchCriteriaId":"4B52D7F7-AC13-42FF-BBDC-FFF4A25DFD54"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yv:*:*:*:*:*:*:*","matchCriteriaId":"574C686D-F7B6-42F5-BBE6-AAA61425DF2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yx1:*:*:*:*:*:*:*","matchCriteriaId":"62A62D04-0DD5-456D-8C13-88A0DD3E1FC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yz2:*:*:*:*:*:*:*","matchCriteriaId":"CD2FDA81-E862-45C4-BB48-152BB4C33BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"F3568B82-1112-417F-8F2A-ADAC7BE9D0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12\\)da3:*:*:*:*:*:*:*","matchCriteriaId":"CA67A2F1-F728-4776-AC96-0FB1C0326572"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12\\)da8:*:*:*:*:*:*:*","matchCriteriaId":"37C0F9A6-F438-44B2-8CA4-F8810160801C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12\\)da9:*:*:*:*:*:*:*","matchCriteriaId":"4DCC7A72-05CB-4283-82B8-3F5501CDF923"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12.02\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E06B7024-F66C-4642-8BDB-5D88B66902DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12.02\\)t:*:*:*:*:*:*:*","matchCriteriaId":"C8BA5828-6F26-4F92-9B22-C1A403D34D85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12.05\\):*:*:*:*:*:*:*","matchCriteriaId":"B0DDBD22-6C29-4275-9BB6-0F9E7717D382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12.05\\)s:*:*:*:*:*:*:*","matchCriteriaId":"4569DDA0-1961-4CF2-ADBB-055144B6DDF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12.05\\)t:*:*:*:*:*:*:*","matchCriteriaId":"7A8BF6E5-BA09-4EBE-9C06-28CD8397AF69"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12b\\):*:*:*:*:*:*:*","matchCriteriaId":"FD9B22DC-353D-437E-B648-CFB39D6D34BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12c\\):*:*:*:*:*:*:*","matchCriteriaId":"DA8EA12C-A99D-4FE3-B18F-715D49764320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12g\\):*:*:*:*:*:*:*","matchCriteriaId":"9B7CC6B5-44B7-4DCA-86C8-F032AF65FDAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12h\\):*:*:*:*:*:*:*","matchCriteriaId":"208A52BF-BAE3-4F5F-9279-88C360FDCBC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12i\\):*:*:*:*:*:*:*","matchCriteriaId":"8F081454-D139-4630-BCCB-172303F78DF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12m\\):*:*:*:*:*:*:*","matchCriteriaId":"F440A82E-518E-4E35-AC1D-7B2BA9963EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"E926A720-D79D-4A81-8E28-137CE36C4995"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)ja1:*:*:*:*:*:*:*","matchCriteriaId":"2FB70336-4345-4B02-98A9-A8F1A16657C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)mc1:*:*:*:*:*:*:*","matchCriteriaId":"0E5B6FEA-3AD4-4401-96F6-8DC986D6509F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)t:*:*:*:*:*:*:*","matchCriteriaId":"59169A2A-FC3D-4C62-BD1A-F6AB7653BC23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"EB000AC6-C4C6-481E-A75C-7AA81BFAEE10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"DFE016D9-FA6A-4FF3-9B18-7CBC37CEB136"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)t14:*:*:*:*:*:*:*","matchCriteriaId":"0DF7BD28-EEC4-44C3-B54D-566A3D450D77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)t16:*:*:*:*:*:*:*","matchCriteriaId":"1EBA5AA2-2AEC-4A03-98AE-F7FD59E1944D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zc:*:*:*:*:*:*:*","matchCriteriaId":"37DA4E81-4BE9-42FD-AA1E-E99FE7817FFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zd:*:*:*:*:*:*:*","matchCriteriaId":"F6F77A78-FFCE-4BD5-A027-A3AE81AE4C69"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zd3:*:*:*:*:*:*:*","matchCriteriaId":"DA235645-9AC4-4876-A512-425097C5D2D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zd4:*:*:*:*:*:*:*","matchCriteriaId":"8886373B-3CEF-4B67-9137-736191C10D1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)ze:*:*:*:*:*:*:*","matchCriteriaId":"D71C31AB-60C5-41D3-9C28-E11D8C87BA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zf:*:*:*:*:*:*:*","matchCriteriaId":"B4F26995-8997-4665-B277-42119A370FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zg:*:*:*:*:*:*:*","matchCriteriaId":"F2F5E02F-2EDF-4C24-8279-5602638E0E26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zh:*:*:*:*:*:*:*","matchCriteriaId":"C9585CFD-C563-4D76-A606-6C629B0BA12C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zh3:*:*:*:*:*:*:*","matchCriteriaId":"D193A196-05E1-4143-961B-E8100C7A7323"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zh8:*:*:*:*:*:*:*","matchCriteriaId":"4B01E7FA-7314-4E50-BFA6-3E2E5A4552D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zj:*:*:*:*:*:*:*","matchCriteriaId":"C3BAAAC5-FD95-48C1-9834-A0BD5BB16699"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zk:*:*:*:*:*:*:*","matchCriteriaId":"A47C78ED-4BEA-4DC9-8FF4-11DD8803AAB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zl:*:*:*:*:*:*:*","matchCriteriaId":"E4CE1FD8-530B-4530-9109-76F852C196FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13.03\\)b:*:*:*:*:*:*:*","matchCriteriaId":"64098AE7-DEB7-4D7B-801A-AF624C9E00FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"02879682-3521-4E10-95C7-4F3C3B488B04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13e\\):*:*:*:*:*:*:*","matchCriteriaId":"20087BA2-1C64-4741-BF0B-7DF45DCC9364"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)s:*:*:*:*:*:*:*","matchCriteriaId":"1B721725-3499-4653-8489-A0337FE08215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)s13:*:*:*:*:*:*:*","matchCriteriaId":"C6181F56-00F9-4FF6-8285-271D9E1FEA5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)s14:*:*:*:*:*:*:*","matchCriteriaId":"8EC33DFE-2514-4A75-AB59-8EA0C03187B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)s15:*:*:*:*:*:*:*","matchCriteriaId":"034A3445-32E6-4CCE-89A4-DDB6DE25A9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)su2:*:*:*:*:*:*:*","matchCriteriaId":"C7682BC6-5FF5-449A-905D-2178C16361F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sx1:*:*:*:*:*:*:*","matchCriteriaId":"77C60F5A-0478-4CF1-B621-4B747DD02A77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy03:*:*:*:*:*:*:*","matchCriteriaId":"936E22FD-5210-46F7-89E5-5458A9C58F77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sz:*:*:*:*:*:*:*","matchCriteriaId":"C6D9BA55-F193-4BCA-ACC2-BBC892E9D7E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sz1:*:*:*:*:*:*:*","matchCriteriaId":"46974023-379B-4475-A59F-BD340043CFAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sz2:*:*:*:*:*:*:*","matchCriteriaId":"D71C21E1-BC04-4537-B64D-76492F282B76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)za:*:*:*:*:*:*:*","matchCriteriaId":"26835676-2738-47CB-A364-78D1964FEC4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)za2:*:*:*:*:*:*:*","matchCriteriaId":"209A1BE7-EEFC-476E-84E4-4EFD68DD7E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)za8:*:*:*:*:*:*:*","matchCriteriaId":"9B9BF07C-DB46-4646-A11D-FFC5C13D6387"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14.5\\):*:*:*:*:*:*:*","matchCriteriaId":"9802FF68-2932-42F6-B66F-545A59FB5EB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14.5\\)t:*:*:*:*:*:*:*","matchCriteriaId":"0E51D01E-F3CB-4413-985E-D72F71D7B423"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)b:*:*:*:*:*:*:*","matchCriteriaId":"7F3DF4A1-DF61-46CB-AFF5-9B7DD6F93317"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"EA8421C4-3CB5-40B8-AB20-5E883FAC276C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"D9CDFBF7-D393-42F5-89A8-482459A426A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1f:*:*:*:*:*:*:*","matchCriteriaId":"D2D17BA6-BA60-4019-8034-302777B06CB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2f:*:*:*:*:*:*:*","matchCriteriaId":"9185C8A1-426B-4313-832F-18B2F9507DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2h:*:*:*:*:*:*:*","matchCriteriaId":"3F4938C9-0511-4AC3-85F0-44A0AC8D5820"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc2i:*:*:*:*:*:*:*","matchCriteriaId":"9D137683-0B21-45E4-AA17-FCFA1085499D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bx:*:*:*:*:*:*:*","matchCriteriaId":"864B17DA-90A8-40F0-8885-3F9E47589131"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bz:*:*:*:*:*:*:*","matchCriteriaId":"31E2E42C-DB5E-4534-9BE5-E2717E96C784"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)cx:*:*:*:*:*:*:*","matchCriteriaId":"32737FE9-2E17-4DA9-B3DD-6B5A4CBE2C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)cz3:*:*:*:*:*:*:*","matchCriteriaId":"CAF872FE-9B30-4D0B-B129-6A317176A517"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)jk2:*:*:*:*:*:*:*","matchCriteriaId":"6C5B2939-F4F2-409F-8FFB-AC7B0D6C7B2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)jk4:*:*:*:*:*:*:*","matchCriteriaId":"1562A3BE-7447-4227-BD04-33C248F04C85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)jk5:*:*:*:*:*:*:*","matchCriteriaId":"711839A6-984E-4341-B7A0-DFEDC31FBF23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)mc1:*:*:*:*:*:*:*","matchCriteriaId":"5C02477E-BBB9-49A2-94CC-9457DC928EB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2c:*:*:*:*:*:*:*","matchCriteriaId":"05CA5BF4-05BD-4B26-A49F-AB3897B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)mc2e:*:*:*:*:*:*:*","matchCriteriaId":"2360BC32-F9AD-4407-9BB2-C19CC190B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)sl1:*:*:*:*:*:*:*","matchCriteriaId":"E5B71B83-3E4E-4ADE-97CE-F72B52E41BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t:*:*:*:*:*:*:*","matchCriteriaId":"284DFE38-63FE-45CC-8CF7-B84050674EBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t5:*:*:*:*:*:*:*","matchCriteriaId":"9A424753-62C6-466F-BD19-047A1611A4FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t7:*:*:*:*:*:*:*","matchCriteriaId":"C1A353C2-69AE-4343-A6FF-E0736836EAD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"56E5E477-2236-45DC-900E-75FAB2E7DFE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"A67A7F96-5B78-4466-B5D4-3811C6DE7A1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t15:*:*:*:*:*:*:*","matchCriteriaId":"CA1CEF76-1CB2-45BA-856C-3E23668DF0E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t16:*:*:*:*:*:*:*","matchCriteriaId":"DDB35113-BA54-4DAF-A293-2B6B328A5CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t17:*:*:*:*:*:*:*","matchCriteriaId":"7BC5651C-AA17-4275-997F-C85FB48D7ED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)xr:*:*:*:*:*:*:*","matchCriteriaId":"CC2B0007-128F-4B50-A7B5-3985C40890A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)xr2:*:*:*:*:*:*:*","matchCriteriaId":"A12EE4BC-9C6D-4791-B99C-5F1F0B89BA41"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)ys:*:*:*:*:*:*:*","matchCriteriaId":"77166237-71D5-40EF-AE47-32CE7BC300BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)ys_1.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"882715D1-D669-4107-A39F-41C27084B2E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj:*:*:*:*:*:*:*","matchCriteriaId":"FE530211-6ECF-4881-A069-826E0737CE5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj1:*:*:*:*:*:*:*","matchCriteriaId":"2C5C18D0-B516-4F5A-AB43-B3D5FBB14202"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj2:*:*:*:*:*:*:*","matchCriteriaId":"0CB1FC76-DFCC-4F06-A320-82C27A502B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj3:*:*:*:*:*:*:*","matchCriteriaId":"C17E0E7D-E7C0-434D-9142-F8A93BF63FCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zk:*:*:*:*:*:*:*","matchCriteriaId":"C81871C3-7AB6-41A1-BECF-2F34ED208E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zl:*:*:*:*:*:*:*","matchCriteriaId":"9FFB25CF-C329-46A0-A404-36D951C7A0B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zl1:*:*:*:*:*:*:*","matchCriteriaId":"D6CD80CB-7E2D-4DC0-A84E-D9E1ADFA141F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zn:*:*:*:*:*:*:*","matchCriteriaId":"776DCDA0-839D-4EA2-8C0C-D28E897C1E71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zo:*:*:*:*:*:*:*","matchCriteriaId":"55827F80-F1A1-4538-85C0-069413E3DB80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15.1\\)s:*:*:*:*:*:*:*","matchCriteriaId":"2C4B7EF3-FD99-4CCD-B05A-807EE53A58BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(16\\)b:*:*:*:*:*:*:*","matchCriteriaId":"CF6730C6-1387-4A52-8778-7FC144134AC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(16\\)b1:*:*:*:*:*:*:*","matchCriteriaId":"4D461538-0218-40E9-A74A-9982E4075485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(16\\)bx:*:*:*:*:*:*:*","matchCriteriaId":"79433418-CB13-4F11-B606-3D804926BB43"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(16.1\\)b:*:*:*:*:*:*:*","matchCriteriaId":"AB1A7354-F886-427D-943A-388824100550"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(16.5\\)s:*:*:*:*:*:*:*","matchCriteriaId":"A0C0B5AD-229E-4406-A5E6-190067352BBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(16f\\):*:*:*:*:*:*:*","matchCriteriaId":"680AC7AF-998A-4584-8087-9409A7407AFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"D298FE2E-227C-4385-9DFA-55A2D5C04E02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17\\)a:*:*:*:*:*:*:*","matchCriteriaId":"DCF5B18A-3F59-4CED-BADD-6C7E41E2A28A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17\\)zd3:*:*:*:*:*:*:*","matchCriteriaId":"3B284ED6-7182-4138-9111-8DE89F9EBD77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17a\\):*:*:*:*:*:*:*","matchCriteriaId":"2A28E43B-9153-4491-AA25-0011732C6E4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17a\\)sxa:*:*:*:*:*:*:*","matchCriteriaId":"CE7F49F3-0A0A-4270-A657-CDE987637684"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17b\\)sxa:*:*:*:*:*:*:*","matchCriteriaId":"5BC22162-36D7-43C0-966C-2DD62CA1DD6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17d\\):*:*:*:*:*:*:*","matchCriteriaId":"3514C99A-95B8-4827-A9D4-E8E851D7FB2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17d\\)sx:*:*:*:*:*:*:*","matchCriteriaId":"8089D89D-AF38-4445-82BE-61FF2ABFEF0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb:*:*:*:*:*:*:*","matchCriteriaId":"E947BE8B-DB42-45E9-89E9-2E42DF6242F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb7:*:*:*:*:*:*:*","matchCriteriaId":"E30C6E0A-6D9F-43EF-A202-678BAC2C9950"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb8:*:*:*:*:*:*:*","matchCriteriaId":"95CE4197-A9D6-4DF5-A8F9-8E1520D80D70"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17d\\)sxb10:*:*:*:*:*:*:*","matchCriteriaId":"0E2A7C58-5AF1-4486-B81D-A68DC3D738AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17f\\):*:*:*:*:*:*:*","matchCriteriaId":"75999E88-10C0-4F99-9F2E-7F2325E2737A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"9E49B392-5366-422D-A10E-EE4F3A33C4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)ew2:*:*:*:*:*:*:*","matchCriteriaId":"D11BE83A-EE4B-4495-BAEF-EA4802FE5376"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)ew3:*:*:*:*:*:*:*","matchCriteriaId":"A077B6B3-F0CA-45BC-8A62-EAC12EB28FBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)ew5:*:*:*:*:*:*:*","matchCriteriaId":"44E46610-76B6-4C7D-AC8B-64B24CFBE303"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)ewa:*:*:*:*:*:*:*","matchCriteriaId":"7EF707A6-5834-4295-8B38-17F279D49C82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)s:*:*:*:*:*:*:*","matchCriteriaId":"2D0E67EE-AF42-4B53-B70A-45562CE164D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"D8942C0A-8DDB-46CA-81CA-0DA442C27502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"9C7979BB-03BD-495B-8C4A-EF916AC5B546"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)s9:*:*:*:*:*:*:*","matchCriteriaId":"0BCFBB45-4784-490A-BDD2-DA2D54C792B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)s10:*:*:*:*:*:*:*","matchCriteriaId":"8E3AC772-803C-499C-85E7-7176688DCB4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)se:*:*:*:*:*:*:*","matchCriteriaId":"9E319ADC-C636-4933-BD50-B613677AD4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)so4:*:*:*:*:*:*:*","matchCriteriaId":"8AF320DA-468E-4E40-A55E-E74EA44A3122"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sv:*:*:*:*:*:*:*","matchCriteriaId":"1A15042D-EB07-4754-8144-947CDE669CAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sv3:*:*:*:*:*:*:*","matchCriteriaId":"3DC2BB88-ECB4-4F93-BDE7-8486852AB27A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sw:*:*:*:*:*:*:*","matchCriteriaId":"E58F4903-E834-4476-876F-8C144BD93D4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd1:*:*:*:*:*:*:*","matchCriteriaId":"6D890842-FBBC-4D2F-8403-E8FF383A0289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd4:*:*:*:*:*:*:*","matchCriteriaId":"5A59C144-2B35-470D-BF33-29CA7EFF2ED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd5:*:*:*:*:*:*:*","matchCriteriaId":"8F0B9E6B-439F-4623-BE70-68F1835747BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd6:*:*:*:*:*:*:*","matchCriteriaId":"086B1BAC-0C9A-40C7-BEBB-FF0E1FC72463"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxd7:*:*:*:*:*:*:*","matchCriteriaId":"B94D83AD-D5B4-4968-8080-92CE49A1494C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe:*:*:*:*:*:*:*","matchCriteriaId":"5AF6A337-FE37-4CE2-B0FC-AB0AE099C10F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe1:*:*:*:*:*:*:*","matchCriteriaId":"0076A522-5490-4D31-A10A-3611B587E5C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxe3:*:*:*:*:*:*:*","matchCriteriaId":"A041C16C-8A48-4470-B1E9-3159C3463A99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sxf:*:*:*:*:*:*:*","matchCriteriaId":"6A523641-0044-4A2A-9097-D32504F2A019"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18.2\\):*:*:*:*:*:*:*","matchCriteriaId":"C20E75F7-CEF6-4985-942D-F054879C312D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(19\\):*:*:*:*:*:*:*","matchCriteriaId":"532987C6-8D68-40B0-ABB3-236C49A63D31"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(19\\)b:*:*:*:*:*:*:*","matchCriteriaId":"9045CACC-F1AE-4924-94FE-825DE629C415"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)eu:*:*:*:*:*:*:*","matchCriteriaId":"522425D5-1EFE-4F07-88FE-9EE4376D7171"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)eu1:*:*:*:*:*:*:*","matchCriteriaId":"145A21CA-3E35-4F73-9451-72EF1265ECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)eu2:*:*:*:*:*:*:*","matchCriteriaId":"47186E81-9EAD-4AD6-B888-F1F94C2EA128"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"955BF110-FFBE-4368-BE06-21AC794C53AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)ew2:*:*:*:*:*:*:*","matchCriteriaId":"11DBF354-E96F-41C8-A393-077682738B4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)ew3:*:*:*:*:*:*:*","matchCriteriaId":"93FC49A2-CB0C-43CB-86F2-2D4483CFE5F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa:*:*:*:*:*:*:*","matchCriteriaId":"E0F08381-956E-4E97-8226-6EDC66C281D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa2:*:*:*:*:*:*:*","matchCriteriaId":"54CCAA24-53BB-4998-B986-358701A8A8F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)ewa3:*:*:*:*:*:*:*","matchCriteriaId":"7B2560DA-E091-4344-A7D0-9BEEB6998AC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s:*:*:*:*:*:*:*","matchCriteriaId":"10151339-0261-4F5D-9601-F048C0B70908"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"2498113D-65B7-4144-AD1C-9FCB6534B7BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"84685E46-066D-42B4-8800-7D529AFC4FAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"99299759-15D1-4BEB-95D3-8D53C27674A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"2A4528A0-A342-482E-BF87-AB4B7EC69C0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"1B2C7EF6-410E-4D27-8C09-D0CEFDA360AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s9:*:*:*:*:*:*:*","matchCriteriaId":"326FC2B8-62F0-46B9-961F-4D5526D41A7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)se3:*:*:*:*:*:*:*","matchCriteriaId":"BEA90AE6-0BC8-442E-81F3-49E6C8D71F72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(21\\):*:*:*:*:*:*:*","matchCriteriaId":"9324BF58-67E2-410D-AA71-F280B3D64498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(21a\\):*:*:*:*:*:*:*","matchCriteriaId":"060D7CA2-0A02-49E3-BCFB-EFE7F6EC08F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(21b\\):*:*:*:*:*:*:*","matchCriteriaId":"D3AAE391-8039-4BCA-851E-CC3992BE7F75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(22\\)ea6:*:*:*:*:*:*:*","matchCriteriaId":"848E6315-3901-48C5-95F4-81A397485C47"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(22\\)s:*:*:*:*:*:*:*","matchCriteriaId":"2B20E6F8-5E33-4F24-BB8B-8B61E39C01E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(22\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"F657AFFB-B3C7-419F-82A2-B244186EDD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(22\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"777381FD-8BC0-49AF-A4D9-83FC7E601BBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23\\):*:*:*:*:*:*:*","matchCriteriaId":"947062EE-A5CF-4A7F-8EF7-921F45118268"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"099D2308-DAFA-4790-AFD8-066B841CD0C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23\\)sw:*:*:*:*:*:*:*","matchCriteriaId":"2C78ECAE-978F-4DDE-83D4-DCF4ECC20EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23.6\\):*:*:*:*:*:*:*","matchCriteriaId":"24044D5B-B73A-4873-A36E-E35B8A6AB087"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23a\\):*:*:*:*:*:*:*","matchCriteriaId":"04D1C25C-1BED-41F9-8CCC-044065B7572A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23f\\):*:*:*:*:*:*:*","matchCriteriaId":"62B55C5D-F153-47CC-8E79-94B6451D04A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(24\\):*:*:*:*:*:*:*","matchCriteriaId":"2F4E83FE-4A5F-49A1-B6E5-B39171AA8825"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(24\\)sv:*:*:*:*:*:*:*","matchCriteriaId":"F69F16A8-ED8E-4B89-AA80-CEF9C488A03D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(24\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"016CB579-0452-4DFE-8CDE-D3161579DDDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa:*:*:*:*:*:*:*","matchCriteriaId":"878773DC-1360-4608-AB17-0081B33B11F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa1:*:*:*:*:*:*:*","matchCriteriaId":"0C2B085A-57AF-4A84-A354-166E61B5CAF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa3:*:*:*:*:*:*:*","matchCriteriaId":"A35979BE-B33F-4709-8B36-FB8297E321FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ewa4:*:*:*:*:*:*:*","matchCriteriaId":"66130668-1107-42B3-BFAF-5640D3AC7595"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"7346EC5B-4F87-423A-A579-AE0E1583190A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ey:*:*:*:*:*:*:*","matchCriteriaId":"C22E4042-3628-4A7E-BD93-1F3F282F9E14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ey2:*:*:*:*:*:*:*","matchCriteriaId":"A84C2CA8-1BA4-4899-9AFF-443FBC5003D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ey3:*:*:*:*:*:*:*","matchCriteriaId":"7B5E50CF-9084-459B-AFE5-5E0C63E17AB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ez:*:*:*:*:*:*:*","matchCriteriaId":"CFC9A8EF-FE37-42CB-A33F-4B6AF29A8827"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)ez1:*:*:*:*:*:*:*","matchCriteriaId":"B0C9F1F1-EA5E-4921-A862-06304CE55C4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)fx:*:*:*:*:*:*:*","matchCriteriaId":"8508A0FF-D18D-430C-9A26-6B5BBFD7DF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)fy:*:*:*:*:*:*:*","matchCriteriaId":"393A274B-BAA4-46F3-BC35-BE697B96A684"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)s:*:*:*:*:*:*:*","matchCriteriaId":"DA143186-1E3B-4B5F-A5FD-AE90A2664AFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"A4912CA3-2311-4D0F-8767-6815F43BE645"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"092374D9-6DFE-45A8-B3F1-562C56787304"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"B5E5E380-4843-4E2F-8807-BFBDB42CB734"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"065CBFDD-BF57-4FE4-A48E-03CFDE5530B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)se:*:*:*:*:*:*:*","matchCriteriaId":"36953AD6-CE36-480E-8679-DE5EEBCC5A26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)seb:*:*:*:*:*:*:*","matchCriteriaId":"F571ECA8-0AB1-4BC0-A6AE-06BAE1FD2375"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)seb2:*:*:*:*:*:*:*","matchCriteriaId":"7E67F0D3-5722-49F3-80FA-8BA7292C085D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)seb3:*:*:*:*:*:*:*","matchCriteriaId":"DA79BC8E-753F-4245-9885-A7A2733E4013"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)seb4:*:*:*:*:*:*:*","matchCriteriaId":"6B820873-78DF-401B-8A99-EB1F115FED35"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sec1:*:*:*:*:*:*:*","matchCriteriaId":"86F88317-18BE-4484-A027-D69500937799"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sec2:*:*:*:*:*:*:*","matchCriteriaId":"DF6CCDEE-0D38-4C6B-82D8-CDE5067CC704"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sed:*:*:*:*:*:*:*","matchCriteriaId":"0C342FEA-F2AC-4E0C-946E-1F7DB2994D14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sg:*:*:*:*:*:*:*","matchCriteriaId":"3B142BAA-613A-40F8-9FD2-EB081867B3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sv2:*:*:*:*:*:*:*","matchCriteriaId":"D1036B4D-4666-4BCC-9345-2DEAD2F49ABB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sw:*:*:*:*:*:*:*","matchCriteriaId":"3A3C8845-179E-4098-842D-2F886885CFFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sw3a:*:*:*:*:*:*:*","matchCriteriaId":"16F5683A-5EA5-4991-A677-2390477BA8A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sw4:*:*:*:*:*:*:*","matchCriteriaId":"CBF0E312-0A76-47FD-BCFD-39ABDDDB99A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(25\\)sw4a:*:*:*:*:*:*:*","matchCriteriaId":"5B3D41BA-41BD-4F4A-9CD5-1EDA026F0979"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(26\\)sv:*:*:*:*:*:*:*","matchCriteriaId":"183C82F0-09A5-406F-9362-E268335D4F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(26\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"5A1F98B3-23E1-475E-8CC4-7E39D091BDD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(26b\\):*:*:*:*:*:*:*","matchCriteriaId":"A40966B8-23E0-4ADC-BCEB-74DC2FA7EA3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(27\\)sbc:*:*:*:*:*:*:*","matchCriteriaId":"6ADFC5FC-CE15-4C83-8E11-7CC29EE8F32A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(27\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"BD3C951B-527D-4C0E-A1AF-D0F6871AEB6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(27b\\):*:*:*:*:*:*:*","matchCriteriaId":"85D4091C-087D-4267-B606-664EDA55DE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(28\\):*:*:*:*:*:*:*","matchCriteriaId":"968C42F5-9FB5-4442-9314-9D0156DA4719"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(28c\\):*:*:*:*:*:*:*","matchCriteriaId":"1625DE6D-5848-436B-A220-C0D1EE3ED0F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(29a\\):*:*:*:*:*:*:*","matchCriteriaId":"9F018CEF-2A91-4067-8104-63686F9489CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(30\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"84F12CDE-0C47-433D-81CC-EE33C3C36B86"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(31\\):*:*:*:*:*:*:*","matchCriteriaId":"9D5BAE50-27D4-4BAC-9C15-0EC889139144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*","matchCriteriaId":"22D57BED-1D99-4077-941C-E60BEA65324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2e:*:*:*:*:*:*:*","matchCriteriaId":"84E71A69-60C3-4F63-B368-A9AEE6E501A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2eu:*:*:*:*:*:*:*","matchCriteriaId":"FCA9F8FF-94EA-4D1D-93AE-623075014426"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2f:*:*:*:*:*:*:*","matchCriteriaId":"FD1C019A-0B91-4A3C-98DB-F467C054AA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jx:*:*:*:*:*:*:*","matchCriteriaId":"9A4BC2FA-19F0-41FC-9786-8006B1D2E7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mx:*:*:*:*:*:*:*","matchCriteriaId":"ED8A1FE0-F74A-4C92-8625-7C933128B567"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2n:*:*:*:*:*:*:*","matchCriteriaId":"0E90AD18-3ED7-4DA9-A6DF-281C1F3226D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2pb:*:*:*:*:*:*:*","matchCriteriaId":"CB3BD76F-F93A-4902-B4F6-4D9231C29EDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2pi:*:*:*:*:*:*:*","matchCriteriaId":"2AD6BA55-0A6B-4981-AA70-4D1FDD49B996"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sa:*:*:*:*:*:*:*","matchCriteriaId":"3CC41CCD-96B0-493D-B206-37773FD65388"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sh:*:*:*:*:*:*:*","matchCriteriaId":"BA4B787E-5700-44B8-8C98-24DB1983AE44"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2x:*:*:*:*:*:*:*","matchCriteriaId":"1975B29A-42E5-4DB8-928C-F8F775DAA3E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xz:*:*:*:*:*:*:*","matchCriteriaId":"972EC35D-B727-49A0-A0F1-654FD4E9576C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*","matchCriteriaId":"7F5B9BAF-59BA-4282-B387-489264D44429"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zi:*:*:*:*:*:*:*","matchCriteriaId":"41E5674D-D1D3-4597-8105-F787465E00A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zk:*:*:*:*:*:*:*","matchCriteriaId":"00462296-DF61-4438-818D-C240BFFCCD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zm:*:*:*:*:*:*:*","matchCriteriaId":"9AD345EA-D5E8-420B-98D0-92674BEBEEED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zn:*:*:*:*:*:*:*","matchCriteriaId":"56365432-1E57-4D35-B764-DDDA878B96ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zo:*:*:*:*:*:*:*","matchCriteriaId":"390755B3-30B7-4086-8FB2-A41614F747D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zq:*:*:*:*:*:*:*","matchCriteriaId":"94E748F5-FA9B-4627-AB30-5414A2952ADB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"6C2928F8-6C6B-4C3F-BBE7-EAE8A0C47E77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"5BC51475-7819-4C46-AF3C-251520C3EEFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)ja5:*:*:*:*:*:*:*","matchCriteriaId":"B5538B7E-6AB4-4DB5-920F-EC2BA61DF73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)jk:*:*:*:*:*:*:*","matchCriteriaId":"C8011951-B642-4706-8936-74DCB59304C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)jk1:*:*:*:*:*:*:*","matchCriteriaId":"042B6178-F186-40F3-A1AB-51AEAFCB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"19940BFF-0888-4717-AC5F-87A85BE165A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"35C4D3D1-5E63-4A1E-BF9B-588FFE5790B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xa4:*:*:*:*:*:*:*","matchCriteriaId":"D94D6CD6-3AF5-4CC6-991D-3D8C229A1C16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xa5:*:*:*:*:*:*:*","matchCriteriaId":"60704633-BFAB-486F-A613-A806733E9AB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*","matchCriteriaId":"9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*","matchCriteriaId":"1C268494-F83A-488D-AEE6-AF7D319B6F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc3:*:*:*:*:*:*:*","matchCriteriaId":"484207D7-0AC2-48B6-B86F-182651B6BBB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc4:*:*:*:*:*:*:*","matchCriteriaId":"0CC53452-31E6-4C9D-88DF-4AD17609DBFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xe3:*:*:*:*:*:*:*","matchCriteriaId":"5BF6C6D9-A2BD-469E-AA75-18C063A435D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xe4:*:*:*:*:*:*:*","matchCriteriaId":"6BE48276-21BF-4275-8512-4C5401423064"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(3e\\):*:*:*:*:*:*:*","matchCriteriaId":"40DD5508-B8BF-435C-B316-42FEDDDBA859"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(3h\\):*:*:*:*:*:*:*","matchCriteriaId":"114B5329-6A76-4BE9-AA57-3463D614D495"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(3i\\):*:*:*:*:*:*:*","matchCriteriaId":"CDC06EA9-D4D9-42EE-8A98-598356707894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)eo1:*:*:*:*:*:*:*","matchCriteriaId":"8FF2F9E9-AA00-4A78-A32C-14CAA1C171A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"2DEA47B2-B51E-4C9C-A9C7-DFC680B32986"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)ja1:*:*:*:*:*:*:*","matchCriteriaId":"A2530834-81C3-4524-A4F0-B4F77DBAEB65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"68BCC003-3F88-4369-A387-6B8D0FDFBE32"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"8DD45AA0-EEE1-43FF-B04D-4063769D71AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"7873D1DB-80D0-4076-8716-7618D7161EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"DF292613-B9BC-4CF1-A6FA-4AFC077D8632"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"208EF5CB-8131-443A-928B-391104DC1C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"3115134B-46F9-40F0-9ABD-3F35EE635EA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)tpc11a:*:*:*:*:*:*:*","matchCriteriaId":"0B810AFB-3555-4882-B12B-9DA52AD37AC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"23B1AF9D-106A-43CB-972C-5E85ADFC355D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*","matchCriteriaId":"25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd2:*:*:*:*:*:*:*","matchCriteriaId":"C1D460AE-3B86-4178-A9D4-172AD4AF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xe4:*:*:*:*:*:*:*","matchCriteriaId":"552EB570-BFD6-4BBE-805B-41A9A5AE35B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xg1:*:*:*:*:*:*:*","matchCriteriaId":"A6DFEF95-E48F-4586-9D70-89C192FD21E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xg2:*:*:*:*:*:*:*","matchCriteriaId":"77E1EA17-0717-4715-9F2E-48264E18885B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xg4:*:*:*:*:*:*:*","matchCriteriaId":"DACA1E35-3681-4E2C-BAB2-DAD99F24F8DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xg5:*:*:*:*:*:*:*","matchCriteriaId":"6EB85916-14A8-4D16-8BE0-D99B8E5B020E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xh:*:*:*:*:*:*:*","matchCriteriaId":"6BC5ED4F-1905-4EAA-8AFF-BC50B879725C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"F672CDF2-ACC2-485E-89C6-42E47974C8C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xk1:*:*:*:*:*:*:*","matchCriteriaId":"09C47064-BDD5-4EE7-BAB1-E8FE21EB7DE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xk3:*:*:*:*:*:*:*","matchCriteriaId":"AC204B9A-1C01-4900-B515-5796B0B06E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xk4:*:*:*:*:*:*:*","matchCriteriaId":"79A06F5D-ADA4-44C6-84EA-7229428B7AE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xq:*:*:*:*:*:*:*","matchCriteriaId":"67151B56-DD5F-4384-9651-FA927CE73D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xq1:*:*:*:*:*:*:*","matchCriteriaId":"111C62A4-9DF0-4317-9F95-0112BE24D727"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5\\)b1:*:*:*:*:*:*:*","matchCriteriaId":"691E3441-AF70-4959-BBA0-60F5328F8FF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*","matchCriteriaId":"53430E70-FBAD-42F7-8614-7AB04E566810"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*","matchCriteriaId":"B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\)b2:*:*:*:*:*:*:*","matchCriteriaId":"5FC9F410-782A-416C-9E10-AF43D5BD44FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\)b5:*:*:*:*:*:*:*","matchCriteriaId":"27107AB2-87AB-4909-9F6D-352BA94F8032"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*","matchCriteriaId":"4403BFFB-8A89-4512-8030-5DEDC0C0FF93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5c\\):*:*:*:*:*:*:*","matchCriteriaId":"DE38549C-107E-4350-90F2-BA928E3872AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5e\\):*:*:*:*:*:*:*","matchCriteriaId":"7601422B-1C22-44D2-A398-1586814A9F7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5f\\):*:*:*:*:*:*:*","matchCriteriaId":"40B9FEE8-FFBB-46E6-A1EA-A243A0073853"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"2D9B4FE3-7A03-430F-AE68-743559D74DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6a\\):*:*:*:*:*:*:*","matchCriteriaId":"6F5C4FD2-E4BC-447D-8B3B-0248BFBE9121"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6d\\):*:*:*:*:*:*:*","matchCriteriaId":"67BBFB86-2745-4817-9516-50CB08AAA82D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6e\\):*:*:*:*:*:*:*","matchCriteriaId":"6F645CEE-083C-412E-BCEF-2761AC266CD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6f\\):*:*:*:*:*:*:*","matchCriteriaId":"B5CCD5B9-0771-47B3-A280-6566A489A5AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"56529125-65D8-4900-A741-0AE18852B7A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)ja1:*:*:*:*:*:*:*","matchCriteriaId":"4DF14EE4-1D49-4E1B-9589-2F3A8BF3E3E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)jx:*:*:*:*:*:*:*","matchCriteriaId":"3029C050-D02D-4DA3-B8B9-901F808BBDD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"1BEADF66-3434-41E0-9527-4D97F1836A76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"C3C82EB5-8397-4C0D-8074-7B55D83708B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"E6735142-065C-4AA2-B78A-FCD7CA8CB50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"337C0195-34F6-4683-A944-2F698A677476"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t10:*:*:*:*:*:*:*","matchCriteriaId":"75901574-5BDD-4388-96F9-A2B4E9970F77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t12:*:*:*:*:*:*:*","matchCriteriaId":"6BBCC011-54AB-4E8E-BC20-68E6F274D323"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)xi3:*:*:*:*:*:*:*","matchCriteriaId":"FD0A3B5B-4E6B-437A-B355-D9DCDF078201"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)xi4:*:*:*:*:*:*:*","matchCriteriaId":"689D066C-972F-4868-A6A3-2F5522489D89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)xi7:*:*:*:*:*:*:*","matchCriteriaId":"63CA13FE-93EF-414A-A8D5-333D4A5B9320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)xr3:*:*:*:*:*:*:*","matchCriteriaId":"B19F9376-BE29-4F08-B86F-E1634FF750F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)xr4:*:*:*:*:*:*:*","matchCriteriaId":"68DC1732-CED8-4FA6-9A75-000BABBEA5C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)xr6:*:*:*:*:*:*:*","matchCriteriaId":"570AF3F9-D3F5-44B1-82A1-3C7966A27BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7.7\\):*:*:*:*:*:*:*","matchCriteriaId":"5719F49C-0BCC-40F9-825A-4C3C9D4D2239"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)ja:*:*:*:*:*:*:*","matchCriteriaId":"4701FFB8-6361-4B0F-B413-2649A6FC650E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)ja1:*:*:*:*:*:*:*","matchCriteriaId":"80CC4D9F-F7C1-4887-BDC6-62F4BDFE5079"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"21932884-D10B-4C2D-99C5-ED4DE3DA38E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)t7:*:*:*:*:*:*:*","matchCriteriaId":"AC4C56D7-435E-4AE3-BAE8-96A6EAB57488"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"C44A3B72-EFF5-460D-8EE0-13782AAFDB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"378FFEBE-3815-4293-943E-86771AB6D63D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)t11:*:*:*:*:*:*:*","matchCriteriaId":"BDB99DAF-0BF1-43FE-8263-AF8F5EEA7D59"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)xu2:*:*:*:*:*:*:*","matchCriteriaId":"B78D2BD4-CD3F-40D2-8F0F-FC765A9B1ADB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)xy4:*:*:*:*:*:*:*","matchCriteriaId":"A66A1B2C-D653-4275-ADC5-6298A70C939D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)xy5:*:*:*:*:*:*:*","matchCriteriaId":"76DFDE5D-231C-4B79-85CF-2B2097E12437"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)xy6:*:*:*:*:*:*:*","matchCriteriaId":"BA6F2B19-7FF1-45E7-91B6-A427343099DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)ya1:*:*:*:*:*:*:*","matchCriteriaId":"64F0AD5B-4C2D-4C9D-8207-0A67F9AF995A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yd:*:*:*:*:*:*:*","matchCriteriaId":"B91192EA-0320-43D1-8D73-FAD57CC18259"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yf:*:*:*:*:*:*:*","matchCriteriaId":"7CC57A97-0A3C-466F-AA15-5D97AC528503"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yg:*:*:*:*:*:*:*","matchCriteriaId":"581D9245-944E-4464-924B-6CB1E874FFEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yg1:*:*:*:*:*:*:*","matchCriteriaId":"FE205377-1B09-4498-8538-F2B7DF91E579"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yg2:*:*:*:*:*:*:*","matchCriteriaId":"ADBBB1FA-5FA9-4042-AE12-F39307C27F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yg3:*:*:*:*:*:*:*","matchCriteriaId":"8108DEF0-102A-452B-9B94-D5AAA3918322"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yh:*:*:*:*:*:*:*","matchCriteriaId":"B4666469-0A0F-4D28-8A1E-39D82ED210CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yi:*:*:*:*:*:*:*","matchCriteriaId":"61130D36-B1EF-41F1-AF14-57475BE25FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yi1:*:*:*:*:*:*:*","matchCriteriaId":"AAD8A9BF-F084-447C-B28C-2736E8C3A83D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(8\\)yi3:*:*:*:*:*:*:*","matchCriteriaId":"A515A997-5922-4C07-9C68-0D071E811F2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"21837255-F23B-488A-A9FB-ED984020147D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"51F92965-6498-40EC-8AF7-D31466F973A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc2:*:*:*:*:*:*:*","matchCriteriaId":"9417A9B3-CAD8-4E69-9871-484DED263683"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc6:*:*:*:*:*:*:*","matchCriteriaId":"39601936-034D-4F48-9F02-0F0E251E34F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9a\\)bc7:*:*:*:*:*:*:*","matchCriteriaId":"F3761893-292D-41E8-9800-C888B235E6F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9d\\):*:*:*:*:*:*:*","matchCriteriaId":"57EE4026-2A06-4E63-924C-43E663EA47DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9e\\):*:*:*:*:*:*:*","matchCriteriaId":"DAF8B6B9-3023-4C33-AFB1-C8C4E1504178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"697C9EFC-7B70-438F-A418-AEFA22841655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(10c\\):*:*:*:*:*:*:*","matchCriteriaId":"9FF6B0F5-0E61-4ECC-B329-80ABCAED3057"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(10d\\):*:*:*:*:*:*:*","matchCriteriaId":"19F6275E-146F-4B70-B14C-D857DDA13819"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(10e\\):*:*:*:*:*:*:*","matchCriteriaId":"9F590204-33CC-4A6A-9C37-380ADC15813A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"EDCFFDE0-284E-4107-98DA-C30724E4BF82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)t:*:*:*:*:*:*:*","matchCriteriaId":"CE4F50FF-2A42-4BE6-84D8-C6C2A5938125"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"B48ACEA8-6E12-40CF-868B-DE343BEBFE41"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)t5:*:*:*:*:*:*:*","matchCriteriaId":"71775098-8BA1-442F-9709-0BCE255DD773"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)t6:*:*:*:*:*:*:*","matchCriteriaId":"8355DB7C-2E2C-4108-BD0F-361B0B898D1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)t8:*:*:*:*:*:*:*","matchCriteriaId":"D80E065F-ABB5-4824-9C59-A53690B0CD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)t9:*:*:*:*:*:*:*","matchCriteriaId":"4A4E3DC5-0F83-42DE-9482-92DB413DCDE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)xl:*:*:*:*:*:*:*","matchCriteriaId":"C63FEE13-5E2A-4011-B720-63EFAFF55049"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)xl3:*:*:*:*:*:*:*","matchCriteriaId":"81FACB05-B13D-494E-8AA3-5590391E6F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yf:*:*:*:*:*:*:*","matchCriteriaId":"84E27655-2889-4B2A-9C48-ADD48ED5B365"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yf2:*:*:*:*:*:*:*","matchCriteriaId":"7F58FC83-C321-4A9F-8EE2-1531B73E064C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yf3:*:*:*:*:*:*:*","matchCriteriaId":"4C7D8166-6522-437F-AEDE-2AC02913FC87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yf4:*:*:*:*:*:*:*","matchCriteriaId":"B805F909-5650-4884-9990-F3776DF203AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yj:*:*:*:*:*:*:*","matchCriteriaId":"C705B7F5-2BE4-45F9-8B5F-9FAC900FF6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yk:*:*:*:*:*:*:*","matchCriteriaId":"F5610D63-0E50-4AB3-A6F7-36BCF7F69EF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yk1:*:*:*:*:*:*:*","matchCriteriaId":"17F5092A-473E-4356-9EFB-9E3EBFCD5F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yk2:*:*:*:*:*:*:*","matchCriteriaId":"DF310185-68F5-48BB-8E11-E38E1961B380"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yl:*:*:*:*:*:*:*","matchCriteriaId":"19E24302-D04B-45D1-AC6A-0CE45F9B9F71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yn:*:*:*:*:*:*:*","matchCriteriaId":"723B58EA-9686-425C-99DD-FBECDF6E2225"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yr:*:*:*:*:*:*:*","matchCriteriaId":"E3EA745A-8AFE-4461-AB53-1FC71E080BC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)ys:*:*:*:*:*:*:*","matchCriteriaId":"E109B3D5-90BB-45B6-8265-B32465AC85E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)ys1:*:*:*:*:*:*:*","matchCriteriaId":"C441F423-86ED-49DF-8BFC-3CA988C9177A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(11\\)yw:*:*:*:*:*:*:*","matchCriteriaId":"68D39082-D9B4-4AD2-BA93-D688E098F037"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"F4F0BFAB-D26C-4D17-B5AB-647780423E8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(12b\\):*:*:*:*:*:*:*","matchCriteriaId":"E59A3B6E-59F6-47B1-BC28-C0B171F1E1F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(12e\\):*:*:*:*:*:*:*","matchCriteriaId":"9B3FBFC2-0628-4A56-A96C-904807E85B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"8B69920A-6775-4D3B-81A8-F971875C43D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"4093FE1B-3B95-4F25-AAF5-329FEBE0F0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"B9411EF8-54EF-49CB-BA09-3AE1133D3146"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(13a\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"71AA815E-CD4A-44D5-A772-93CB340E7998"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(13b\\):*:*:*:*:*:*:*","matchCriteriaId":"31AB99B6-84C5-426A-A037-5022FD00E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)t:*:*:*:*:*:*:*","matchCriteriaId":"D32302AE-54E2-423A-A418-6C7EAE2CDF0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"6F616AE0-42B4-403B-B610-99DE15EE490D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"EFCEBBD5-FA7F-4478-8F00-AC6CA598CADC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)t5:*:*:*:*:*:*:*","matchCriteriaId":"68A83281-667D-4D1A-9F76-CFF3E5AD560F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)ym4:*:*:*:*:*:*:*","matchCriteriaId":"40FD8309-111A-45BC-819A-99FE9E002ACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yq:*:*:*:*:*:*:*","matchCriteriaId":"42C7F308-DB1C-4500-81E4-9E3325D58A92"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yq1:*:*:*:*:*:*:*","matchCriteriaId":"FCD9C9A9-9B90-479A-9D2D-8681056892AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yq3:*:*:*:*:*:*:*","matchCriteriaId":"19661048-2B60-437E-9D56-9189BFC4C8F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yq4:*:*:*:*:*:*:*","matchCriteriaId":"FF870144-DFCD-4ADC-A695-3DF9266890EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yt:*:*:*:*:*:*:*","matchCriteriaId":"D389A57A-005E-40B1-8DFC-3347F67F19F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yt1:*:*:*:*:*:*:*","matchCriteriaId":"FC7CEBAF-65BB-4A89-8C3B-CEF1052D99E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yu:*:*:*:*:*:*:*","matchCriteriaId":"3B311DEA-F602-49DA-8208-353D2D33283F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(14\\)yu1:*:*:*:*:*:*:*","matchCriteriaId":"A14407B6-FEC1-4FD8-8359-CA3EC5477B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(15\\):*:*:*:*:*:*:*","matchCriteriaId":"CD190476-DC7A-4033-9149-062D75704AD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(15b\\):*:*:*:*:*:*:*","matchCriteriaId":"C4510B95-F9F7-4407-B00F-F91B352C99C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"E236CDE4-3369-4CDF-B0F0-4888610CCFC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3j:*:*:*:*:*:*:*","matchCriteriaId":"550709E5-9302-4FCB-A969-2DA54BCB2184"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*","matchCriteriaId":"E2E3044F-3CE8-4970-9A7F-FDF555F622A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xm:*:*:*:*:*:*:*","matchCriteriaId":"AB57AAA9-4715-468F-A734-A12209A6069F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xn:*:*:*:*:*:*:*","matchCriteriaId":"480D480A-80A3-4113-A1A6-194A8DD47F65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xt:*:*:*:*:*:*:*","matchCriteriaId":"1A310F30-F94D-4A70-94BD-6B94D7B5F5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xv:*:*:*:*:*:*:*","matchCriteriaId":"72732395-1B82-4E4F-9D63-D1CA0C6BD929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yb:*:*:*:*:*:*:*","matchCriteriaId":"56032FBD-FEE7-4B38-B35E-CD277B931DE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yc:*:*:*:*:*:*:*","matchCriteriaId":"75CF930C-6871-4BCB-8605-B71F82455123"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ye:*:*:*:*:*:*:*","matchCriteriaId":"F80A9B6F-A5D8-403C-9018-0E627FBC9A0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yl:*:*:*:*:*:*:*","matchCriteriaId":"6F2BCA9F-5D56-4EF4-8675-7B76129B994B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yn:*:*:*:*:*:*:*","matchCriteriaId":"09698AAF-F4D1-41EE-A960-38FAB645B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yr:*:*:*:*:*:*:*","matchCriteriaId":"1B75FC35-2B4D-4CEE-BE71-D497DF787123"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yw:*:*:*:*:*:*:*","matchCriteriaId":"F8711A47-ABD5-40ED-847A-8D1663E3D819"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"65B65738-134F-4C1A-916B-D6CD6365CB43"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"D5331586-8380-4F77-8735-17EC0D0E503A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*","matchCriteriaId":"AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*","matchCriteriaId":"35536E91-A58D-40F7-A256-34128E64B920"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"0F69329B-4D37-428E-B467-E3B9314A4D61"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"9615B275-5748-46CC-8A77-4A9550A39050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"421CD923-6282-4404-A642-C04E1F57F12F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"AD4411CB-5EE9-455C-AE90-1770320EFD86"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"593D1680-4883-43FE-A925-B87ED1D2E785"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xb2:*:*:*:*:*:*:*","matchCriteriaId":"90769378-BBD1-48D0-921C-A79413B99CE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"6C6DF704-8CC8-42C3-83F1-4D38734DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E636DC68-59FE-4BA0-BCFC-4DA97EE17B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"7E0D6801-E9A8-416B-830B-7682A9AF65BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*","matchCriteriaId":"E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"23265E4D-855C-4CCC-A875-DFCBA55B3CB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)mr:*:*:*:*:*:*:*","matchCriteriaId":"2EB86291-EB40-4CFD-A424-898EFB3D518B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"A10AADAC-4687-4308-8E4F-B7F9549556DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"1A747987-5218-4C1E-87C4-0675CD4F7A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"7B6483CB-7838-45F7-AE28-824AD71172A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(5b\\):*:*:*:*:*:*:*","matchCriteriaId":"04759B1E-8B40-460F-B33F-4E6332CFC31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(6\\)t:*:*:*:*:*:*:*","matchCriteriaId":"08AF3694-9686-444B-8D92-E41D262F74E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(6\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"C5595E7D-3CFD-4FF2-A6BE-59645058C54F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"F4235428-5E2E-4BCB-98B7-8844B19C7AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"9A1E17AB-F645-4636-9337-3158556E85A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"86150D11-94D7-43F9-9D19-33778558255F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(9\\)t:*:*:*:*:*:*:*","matchCriteriaId":"EDC43701-8A3A-42FB-B4F5-566DE59E542E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:-:*:*:*:*:*:*:*","matchCriteriaId":"A17AD004-E2E0-4AC1-87E8-69B9C4AEBC9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFBE8937-E1BD-4601-AF1C-6DD20BB132AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D676C769-17D1-48B2-98F4-AC3BDF2C882B"},{"vulnerable":true,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"DEBD3CB7-D88A-4868-A6AD-0717A8A989EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:dragonflybsd:dragonflybsd:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C79071BA-D3FB-4FDF-96A1-477BA88C3E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*","matchCriteriaId":"3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:0.4_1:*:*:*:*:*:*:*","matchCriteriaId":"3A37C19D-B29E-44B3-8DEF-FA32D0B01F8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"44EFD22E-02C9-4B80-8934-A9AC8DD858CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1B4D4A5-25EB-48FE-BDFD-A274CE802648"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C11DD743-A21D-48F4-BD55-A8A4FA960F94"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3A037F1-98AD-47CC-8D83-B42666E1B61E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"973B0545-D595-4A82-A147-0AB28FE32E13"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"63236405-1F33-43DD-ACF7-B6D9656E0987"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6B3A2EBB-0359-49A7-B7F9-56EE6FD85D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF4F7002-A525-4A66-BE8B-E50ABBF144B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F1156954-25AD-45BE-AE49-9705ECD5BDA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8ED84E66-CFD9-4DF8-9679-13457D340D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:-:*:*:*:*:*:*","matchCriteriaId":"200000B9-E825-4986-B38F-5D45D34603F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:-:*:*:*:*:*:*","matchCriteriaId":"682CCB34-E6CD-42C5-A7A1-D5645BFAA189"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:-:*:*:*:*:*:*","matchCriteriaId":"D830933B-BD2B-482A-982C-088AF2F3A953"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:-:*:*:*:*:*:*","matchCriteriaId":"50CFCF96-C2E7-4039-AD7C-06DC79FA2C99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.1:p1:*:*:*:*:*:*","matchCriteriaId":"F3EE7C5E-3B50-474B-A63B-1649CB798109"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.1:p10:*:*:*:*:*:*","matchCriteriaId":"465C3783-F2CD-4BD2-9DBC-161B4683EA37"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.1:p4:*:*:*:*:*:*","matchCriteriaId":"08E04379-047A-4E0D-B74F-73B5C582EE26"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.1:p5:*:*:*:*:*:*","matchCriteriaId":"B8950112-B547-494B-BAC1-0B81F165034C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.1:p7:*:*:*:*:*:*","matchCriteriaId":"FD67FB47-726D-41A6-9D80-07848996FCB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:-:*:*:*:*:*:*","matchCriteriaId":"5364B2C0-677F-4F24-A9CD-D194CCC5C185"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:p2:*:*:*:*:*:*","matchCriteriaId":"E4470322-D617-4901-A062-C5E7DF124ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:p6:*:*:*:*:*:*","matchCriteriaId":"30609E89-EA47-415F-BFF3-CC7065F0EA9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:p7:*:*:*:*:*:*","matchCriteriaId":"48403EA5-779A-47F3-9341-A9516F06E0F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*","matchCriteriaId":"582B9BF3-5BF1-44A3-A580-62F2D44FDD34"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BAD73CDB-94C5-4DBF-8B4C-DD3E4E399445"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8A80E6A-6502-4A33-83BA-7DCC606D79AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*","matchCriteriaId":"AD85B1ED-1473-4C22-9E1E-53F07CF517E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.5:*:*:*:*:*:*:*","matchCriteriaId":"7752D43D-64AF-474F-BFBB-2625A29C1B88"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"F4416CBA-76B9-4051-B015-F1BE89517309"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:*:*:*:*:*:*:*","matchCriteriaId":"9118B602-3FB6-4701-AC09-763DD48334BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CCE246DE-641C-44A3-9FCC-5131655DBC1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD1C3260-28D8-47C8-AB61-E2EA4ED2B1C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6909B816-6778-48A8-A828-CA0AC5484388"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B988FF88-E782-4581-9E24-CDE7E1734258"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F9C11B5-5D63-4D2B-AD9A-5E657A8E1D01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F24BEDA8-2D1D-4AA1-8806-02838FB4C323"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7DAAF0A4-F1B1-4597-B9C1-E7F277061BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE95DD29-6E5F-475B-BCB3-6F756C62FA16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"19A5A944-8CFC-40ED-96D1-842ECA7316B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5BF38E2-7353-4A55-ABA3-84085BB5F8CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8C5C94F0-2390-4AF3-BE18-D00B10A67052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"E18C6032-012A-4B09-8D16-680CA3080D06"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"134ED367-9610-485D-8935-3C46BFC073AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"C150050C-6C08-4434-848D-EB71741DF29E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"08D41FAC-B0CD-48DE-AA43-27487FF9E424"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BC9CC013-D4FB-4EC0-B405-6B79DF7C2F65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"235B7E7D-3785-408A-AE53-7EB4F88F06C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"69A12556-5E7D-4832-A71A-66E6E9C2A710"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"DA9B296A-126A-42E3-B3DD-158F895A48EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"ACC75E5B-48A5-4C28-88B2-870C62DDA337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C3D2EFF1-78E4-4002-8904-9DA13D7D1DF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.19:*:*:*:*:*:*:*","matchCriteriaId":"73E02E89-832D-44D9-B2EE-1C070E99AE9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.20:*:*:*:*:*:*:*","matchCriteriaId":"3B55CD0D-0117-48F3-8643-4C191716AE20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.21:*:*:*:*:*:*:*","matchCriteriaId":"62BA4C24-FD29-421C-8F01-1798764C53F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"726B962B-D8B6-419E-BC0D-3DD9821234F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.23:*:*:*:*:*:*:*","matchCriteriaId":"985C2754-56B1-4638-B51E-313F7B8BA65F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.24:*:*:*:*:*:*:*","matchCriteriaId":"746D0402-66BD-4225-B847-6762BC4DC18E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.25:*:*:*:*:*:*:*","matchCriteriaId":"E657F58A-440D-40CB-97BF-ACB72AB36A3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.26:*:*:*:*:*:*:*","matchCriteriaId":"CF5E6A99-20FD-456C-A5E2-FEBA5DD672ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.27:*:*:*:*:*:*:*","matchCriteriaId":"7699FD2E-C211-4E7E-BCA5-B991FBA90EDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"F93B921F-B152-49F3-9AAD-9421F5867F49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.29:*:*:*:*:*:*:*","matchCriteriaId":"46381F67-EC99-4EA7-9599-BD4A25827E9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*","matchCriteriaId":"29AC849E-7D4E-4C00-8BD0-672F413A80B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.31:*:*:*:*:*:*:*","matchCriteriaId":"6996F1F1-5374-4BD2-B421-ABB15C7C0B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"87E18AFD-5090-4C1F-A2EE-A32A28DB5182"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*","matchCriteriaId":"FC91B71A-2456-4410-9633-CF5870027D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"92555500-16EB-4F76-B2C7-61A00A1AC722"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"1E55F8A8-1ABD-4760-9074-353BBAEE005B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"F873503F-C6E2-4AC2-859E-9431FE0FA0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"39E849AC-B85A-4C4F-878B-E95A5F661E1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*","matchCriteriaId":"15004105-9A55-4592-96D6-3FF539EC7513"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1.132:*:*:*:*:*:*:*","matchCriteriaId":"6E07DB8F-0BCF-4378-9BB5-CC948E09D37D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*","matchCriteriaId":"2498D898-D243-4D0C-9AEF-0138D19A68B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*","matchCriteriaId":"3924060B-1EC1-4003-B306-E327634E7797"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*","matchCriteriaId":"D45B43DF-FD4C-4C37-9569-1CCE450B8987"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*","matchCriteriaId":"99879B2B-7FFB-4181-8928-13B7E17F36C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*","matchCriteriaId":"83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.26:*:*:*:*:*:*:*","matchCriteriaId":"B6126B84-9D78-48AF-B5A3-B89F9B1D42DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"24A58614-0522-48B1-9DF2-20001A37A936"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C37E17F7-A276-4A33-B454-751BF639EF9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"97FBF069-C751-4F18-806A-DF8C809AE464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"66F7DACF-2AAB-4D9E-8F62-F2B10B39974D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4DE1FA10-5512-4147-8E5F-EAAAFE334B31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"94433CD6-B625-494C-A85A-330D0774D198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1565B9E4-02DF-4725-9D31-189B4D3D840D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1303C9DC-CD79-40B8-AF0B-8F90FA942106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"00530A0F-E726-4F52-BF0E-CE7203AE3A81"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"329B6CD3-7B84-4718-9436-5F8A1AAA60ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"FB796B30-701B-4D5A-BF4B-C5CD81A48417"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"EB8FF20C-82B0-42D7-92AB-B4C45651B955"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.13:*:*:*:*:*:*:*","matchCriteriaId":"E97F35A6-11F9-43D3-AD53-23351865F7C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.14:*:*:*:*:*:*:*","matchCriteriaId":"C10A1DB7-A847-43FA-92E6-4B2941DBECAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.15:*:*:*:*:*:*:*","matchCriteriaId":"0FEEF97A-83E8-4CEE-8913-2D25E0E8AF6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.16:*:*:*:*:*:*:*","matchCriteriaId":"CE443A39-5E8B-4303-9BE9-C3D934F06A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.17:*:*:*:*:*:*:*","matchCriteriaId":"A7258601-9481-4B43-A63D-825DB39ED51A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.18:*:*:*:*:*:*:*","matchCriteriaId":"24F31744-8A55-48A6-B934-18EBD9657FFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.19:*:*:*:*:*:*:*","matchCriteriaId":"8C9FD388-E804-41D1-B051-588C03ED83D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"D6ECC079-EBD4-4E01-9CAC-A4FC84F79656"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.21:*:*:*:*:*:*:*","matchCriteriaId":"249C1EEB-F267-44F2-B4D9-AEFA9E578FDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.22:*:*:*:*:*:*:*","matchCriteriaId":"E575B550-E957-4F68-A9FA-3EF4022028A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.23:*:*:*:*:*:*:*","matchCriteriaId":"256328E7-3F4E-49A3-9F66-6DAC1F7BE941"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.24:*:*:*:*:*:*:*","matchCriteriaId":"D3E3CFEB-CF89-4697-9D3C-C1D41F5B803B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.25:*:*:*:*:*:*:*","matchCriteriaId":"38F7C571-2713-402F-82CD-66B5C8A50319"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.26:*:*:*:*:*:*:*","matchCriteriaId":"D582D69B-65A9-4906-9FF3-1EC7AD2AF927"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.27:*:*:*:*:*:*:*","matchCriteriaId":"5D4E4BAD-E286-4F24-A786-B3DC281537B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.28:*:*:*:*:*:*:*","matchCriteriaId":"293E5303-3BC2-4A01-99EE-F519E17F2CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.29:*:*:*:*:*:*:*","matchCriteriaId":"73D6DAAF-6D2C-4D33-9109-BC112170762F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.30:*:*:*:*:*:*:*","matchCriteriaId":"7337DB6A-72E4-4F7C-8AA5-8EC546B632AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.31:*:*:*:*:*:*:*","matchCriteriaId":"6C655702-571C-481B-807C-9FE390B52159"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.32:*:*:*:*:*:*:*","matchCriteriaId":"48C775C8-DB4A-4D58-B573-2A8D612E26ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.33:*:*:*:*:*:*:*","matchCriteriaId":"61787316-0408-477D-937E-14596C215EFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.34:*:*:*:*:*:*:*","matchCriteriaId":"EC9628D9-86C8-4200-B605-1D00C7DF9257"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.35:*:*:*:*:*:*:*","matchCriteriaId":"96BBA71E-5517-400E-A82E-ECE165C78583"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.36:*:*:*:*:*:*:*","matchCriteriaId":"C70A57A6-6633-459A-8AB5-DC009D407108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.37:*:*:*:*:*:*:*","matchCriteriaId":"D2FCF983-1BD5-423D-A3A3-EAAA28BA4146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.38:*:*:*:*:*:*:*","matchCriteriaId":"04BF2B3C-7267-4C58-9CD8-270C27B5142F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.39:*:*:*:*:*:*:*","matchCriteriaId":"9152FDC9-A97F-455C-83EB-5070C7B32AE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.40:*:*:*:*:*:*:*","matchCriteriaId":"340F5E67-8F70-4374-BF9A-0AA425A4A5A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.41:*:*:*:*:*:*:*","matchCriteriaId":"430E39C3-0E40-42C6-9839-982610D97EEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.42:*:*:*:*:*:*:*","matchCriteriaId":"C0F96C09-D870-4DE7-A8D1-803D7071126D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.43:*:*:*:*:*:*:*","matchCriteriaId":"CEED38F2-9FC3-44E5-A4A9-D5573C6CAE06"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.44:*:*:*:*:*:*:*","matchCriteriaId":"1DAA6363-569D-4234-B784-A357C59C2ED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.45:*:*:*:*:*:*:*","matchCriteriaId":"7463B1BB-551E-4D0D-8FB0-6BE2D61DFA6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.46:*:*:*:*:*:*:*","matchCriteriaId":"B72CB2A8-18C3-4890-B03A-3FCD8638F857"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.47:*:*:*:*:*:*:*","matchCriteriaId":"B0B60B7E-619E-4844-BBAB-AB8F9D8CF430"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.48:*:*:*:*:*:*:*","matchCriteriaId":"40D99B33-99AC-4AD9-A599-270CC82744D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.49:*:*:*:*:*:*:*","matchCriteriaId":"3983BAF0-C2E1-440B-9A03-880DE197CAAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.50:*:*:*:*:*:*:*","matchCriteriaId":"2CAAF6CF-148D-4328-9C08-5A18CEF6B71F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.51:*:*:*:*:*:*:*","matchCriteriaId":"A0EF7B9C-46AF-4AD3-B940-9C631ED7A704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*","matchCriteriaId":"4817429F-B24F-47E3-BB3B-7EF9036D5F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*","matchCriteriaId":"550DFE6E-DCE6-4649-8746-522996021DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*","matchCriteriaId":"E17BB496-749A-40C8-BAA9-6CFBBE308065"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"0C30F255-1297-46EA-9FBC-05564792FF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*","matchCriteriaId":"934CBC22-864C-468F-B267-3CDE4449DA9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*","matchCriteriaId":"2AC432E3-7214-4B61-A666-2DAF5CCAEC52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*","matchCriteriaId":"7682650A-8332-484D-874F-2B67246880B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*","matchCriteriaId":"6DFF499A-6602-4BD3-90B5-E6C4AC888812"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*","matchCriteriaId":"0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:*","matchCriteriaId":"1C53EDB2-923D-4860-8251-9A07C9F8FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:*","matchCriteriaId":"2E2A5D6B-7011-40AE-8A94-02B062B19010"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35:*:*:*:*:*:*:*","matchCriteriaId":"9E460A86-FD22-4023-A0D7-0D2F43131635"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9BDB59EF-74EF-462E-BC84-89201F734380"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0755A136-3DE3-4B61-B5EF-F6282AACD38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"81D950C3-0DDC-4549-99F8-1E206768219A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"195A133A-26C9-401E-913F-285BA220D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B8D68E21-6C58-46A7-96F2-9A79DD880803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"38D11B12-AFD7-4055-A366-D932CA1BA8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BC990132-9DF2-4D23-B9DA-0819809A3CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FFA51D40-E72C-40A4-B238-70F6806FA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1E1B7D68-E41E-4A5A-9606-F14F057B39E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*","matchCriteriaId":"70BCB10C-FD72-4F18-84C9-AE0603402426"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*","matchCriteriaId":"54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*","matchCriteriaId":"CF742FF1-5504-41BB-8FAA-D71B83C791B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*","matchCriteriaId":"901C6D04-3226-4654-9A41-0325B48A2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*","matchCriteriaId":"072A77AD-BB27-4C24-91A0-A12D6E741593"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BF900D1D-E351-4407-8269-80E5403432B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"44915F9F-88DF-4304-8F66-58A869654BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*","matchCriteriaId":"4CC2D90D-2115-406C-B609-870B241F00B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EF681CC1-B3EC-467A-A10D-10840D3D4575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*","matchCriteriaId":"8660C030-328E-4221-847E-AC4BDA08CE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*","matchCriteriaId":"B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*","matchCriteriaId":"47AEC277-F9A4-412F-B2EA-C1AEA336A46C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*","matchCriteriaId":"7234AF29-BCDA-4728-A141-C169EE59CEC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*","matchCriteriaId":"E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*","matchCriteriaId":"374851C5-C61D-4964-8B4A-473B0A008F11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*","matchCriteriaId":"1FD55C81-3687-46BF-880E-58D7E005A185"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*","matchCriteriaId":"2953267F-16BF-404F-83F1-73E0908979B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*","matchCriteriaId":"9D953B61-3457-4A0E-A668-BA4937B79784"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*","matchCriteriaId":"5F5F3607-C0DD-494C-AB6E-46E383A6B17D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*","matchCriteriaId":"19138F52-25EA-42B6-89DC-692A8AF0A720"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4C2EBADC-0817-4E38-9F49-8446D8A20CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*","matchCriteriaId":"340368E7-0005-4F8A-8AF1-C20A1198288C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*","matchCriteriaId":"0DC860DD-57DF-4474-AE2B-9AADB9060175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*","matchCriteriaId":"DC1D576A-0763-4611-B3CF-CD8514F18783"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*","matchCriteriaId":"4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*","matchCriteriaId":"6F570226-CA89-46F4-8C68-9A59BC0602A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*","matchCriteriaId":"162A88DA-E2EA-4E92-B174-9AD86BE8D983"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*","matchCriteriaId":"EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*","matchCriteriaId":"5EE5C4F5-C64D-4714-B02E-689B435E3E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*","matchCriteriaId":"BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*","matchCriteriaId":"164F4483-9F28-491A-8F99-4242C9B9CBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*","matchCriteriaId":"34803A7D-45C4-4DBE-BF18-19CE9DE62A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*","matchCriteriaId":"1178D6EE-A462-4CC1-B430-9A44C75D2336"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*","matchCriteriaId":"4360530E-6E07-48F9-B8F8-B36622331052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*","matchCriteriaId":"17508D09-AE14-4458-93A2-E2764452EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*","matchCriteriaId":"05F2CD4A-CCA9-4743-86C4-7675D2487E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*","matchCriteriaId":"75C1504C-03C5-49E4-8192-E1E698CF07A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*","matchCriteriaId":"DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*","matchCriteriaId":"37A3172A-E663-42F6-90E7-51C3850AF9E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*","matchCriteriaId":"16F6692C-494F-44ED-97C6-A6CD05334DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*","matchCriteriaId":"3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*","matchCriteriaId":"5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*","matchCriteriaId":"77231F8B-137F-4FAE-BCD9-658F32943CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*","matchCriteriaId":"552ED77A-F09A-4923-A907-8E0DF8445363"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*","matchCriteriaId":"CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*","matchCriteriaId":"5DF940EA-676A-42C8-A6E0-7F53C8A34340"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*","matchCriteriaId":"BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*","matchCriteriaId":"5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*","matchCriteriaId":"29DCCFB1-054F-4BF0-92F1-78A2063415D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*","matchCriteriaId":"D3D3222C-7469-42F6-984D-3223BCD8080E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*","matchCriteriaId":"697B7069-D08D-41BD-8285-A1ABA0E1142F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*","matchCriteriaId":"72173CFB-BAB6-456C-B5F2-3AA31D799E74"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*","matchCriteriaId":"FDD08A67-195F-431B-98A5-42B2966055DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*","matchCriteriaId":"658C7317-D50B-475A-9E0E-E68AECD49B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*","matchCriteriaId":"1270F454-8E05-413C-BAF4-35D062CA5803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.0:*:*:*:*:*:*:*","matchCriteriaId":"7A252C50-D63A-4FC0-A51E-A63A939D6AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:midnightbsd:midnightbsd:-:*:*:*:*:*:*:*","matchCriteriaId":"11F7D4E2-850E-4FAC-B447-608F1D41B686"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:-:*:*:*:*:*:*:*","matchCriteriaId":"F7751B50-9C8D-45E9-93C1-FD4B27A1427B"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"249FA642-3732-4654-88CB-3F1D19A5860A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D18C95A3-15E3-41B8-AC28-ACEA57021E24"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"28BD9F91-2384-4557-9648-25FC00D04677"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3ECF9E5F-AF38-42B9-8B49-6C254394CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F9CABFAA-594C-45D7-A0C7-795872A0C68A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9432E9-AACA-4242-BDAB-8792ACF72C12"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29C02C6B-AAFD-4594-94A4-F26BA3648CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.99.15:*:*:*:*:*:*:*","matchCriteriaId":"F7C5D200-B40F-458D-8216-A3C22B21B46A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:-:*:*:*:*:*:*:*","matchCriteriaId":"41D2806B-D7B2-4982-B759-8D60866A36DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AEAE2873-0028-4744-B64E-8E2EA30447F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*","matchCriteriaId":"783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*","matchCriteriaId":"F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77812C-D84E-493E-9D21-1BA6C2129E70"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustedbsd:trustedbsd:-:*:*:*:*:*:*:*","matchCriteriaId":"30A1BB80-2569-4800-9668-ACE3978877B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp1:*:*:*:*:*:*","matchCriteriaId":"5494A20A-5927-4249-942C-189292E5F956"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catalyst_blade_switch_3020_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.2\\(50\\)","matchCriteriaId":"DC1F6E8C-07CB-4612-9CEA-5BB1D4C691B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_blade_switch_3020:-:*:*:*:*:*:*:*","matchCriteriaId":"E4EBA036-A69E-40FE-B8A2-6D99C0AB9F35"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catalyst_blade_switch_3120_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.2\\(50\\)","matchCriteriaId":"52B522E0-47BC-4885-9C27-D9B5F603880B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_blade_switch_3120:-:*:*:*:*:*:*:*","matchCriteriaId":"BEDE0913-7E59-4741-B0D9-EC6C90C5E21C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catalyst_blade_switch_3120x_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.2\\(50\\)","matchCriteriaId":"CDD283F6-CB69-4939-80F5-9BBAD7B7823E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_blade_switch_3120x:-:*:*:*:*:*:*:*","matchCriteriaId":"808DEBC5-0249-491C-9607-9263F781BCDC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*","matchCriteriaId":"4F864AD7-53A2-4225-870F-062876CE45DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://blog.robertlee.name/2008/10/conjecture-speculation.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://insecure.org/stf/tcp-dos-attack-explained.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=125856010926699&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125856010926699&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.outpost24.com/news/news-2008-10-02.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://blog.robertlee.name/2008/10/conjecture-speculation.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://insecure.org/stf/tcp-dos-attack-explained.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=125856010926699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125856010926699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.outpost24.com/news/news-2008-10-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-4610","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T17:59:26.210","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718."},{"lang":"es","value":"MPlayer permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante (1) un archivo mal formado, como lo demuestra lol-vlc.aac; o (2) un archivo malformado Ogg Media (OGM), como lo demuestra lol-ffplay.ogm, vectores distintos que CVE-2007-6718."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0_rc1","matchCriteriaId":"CB911389-3DF4-407A-B2B0-ADFD14763DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*","matchCriteriaId":"2AD73BA0-D315-4ADA-A942-8DCC2A920B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*","matchCriteriaId":"710ACCE6-B3E3-474A-B78B-5A123EC24DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*","matchCriteriaId":"55D3C3E6-862E-470E-8CEA-4B333B906172"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*","matchCriteriaId":"30D6A539-5523-4E52-854A-82CDCDBDFC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CA841B0B-8FA9-45F9-9B60-7C9BD1A92E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*","matchCriteriaId":"91907AEA-D84F-4DD9-AD22-41E563182FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"D200DE0F-D8BB-460D-928E-E59473F84B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*","matchCriteriaId":"5103A1E1-670A-4527-9FB8-9D8B0DA506D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"500E5BD7-3F17-455F-8463-50B145128873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"3BE4C532-1756-4B2E-94EE-8F8253281F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"0E6875BE-67F1-4E0E-A610-7B6EDBAB6431"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*","matchCriteriaId":"4E74EBC5-296E-4B20-8BCB-F104D06595AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"29A09BDA-DA05-4512-9E39-14819C410CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:*","matchCriteriaId":"A5650520-0CCA-47C1-A7B8-8A6129BE6B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:*","matchCriteriaId":"FD1FAB76-B1DB-400E-9224-09E82D9A8847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:*","matchCriteriaId":"D4D18950-F883-47D1-B95B-6F46F2F6F701"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre6:*:*:*:*:*:*:*","matchCriteriaId":"00928380-0E20-4678-98B7-18A634164F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7:*:*:*:*:*:*:*","matchCriteriaId":"A671EC1E-A917-4A9C-8254-7885FF612D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7try2:*:*:*:*:*:*:*","matchCriteriaId":"430103FB-6255-4581-A7DC-F218E5B86D4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34296","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/07/1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4611","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T18:14:04.310","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php in PHP Arsivimiz Php Ziyaretci Defteri permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro sayfa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arsivimiz:php_ziyaretci_defteri:*:*:*:*:*:*:*:*","matchCriteriaId":"60C436D8-E350-42DE-BE74-6DEEC68B035F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4436","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487317/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27518","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40069","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487317/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4612","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T18:14:04.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PortalApp v4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"keywords\" en (1) forums.asp y (2) content.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portalapp:portalapp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71C5A2AD-920A-49FA-9D93-5D48FA3F30EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4439","source":"cve@mitre.org"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_portalapp_1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/512073/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1630","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39455","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.htbridge.ch/advisory/xss_vulnerability_in_portalapp_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/512073/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4613","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T18:14:04.373","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forums.asp en PortalApp v4.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro sortby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portalapp:portalapp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71C5A2AD-920A-49FA-9D93-5D48FA3F30EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4439","source":"cve@mitre.org"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27170","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39454","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4614","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T18:14:04.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies."},{"lang":"es","value":"PortalApp v4.0 no requiere autenticación para (1) forums.asp y (2) content.asp, permitiendo a atacantes remotos crear y borrar foros, temas y respuestas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portalapp:portalapp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71C5A2AD-920A-49FA-9D93-5D48FA3F30EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/28337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4439","source":"cve@mitre.org"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27170","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39457","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4615","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T18:14:04.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en i_utils.asp en PortalApp versiones anteriores a v4.01a tienen un impacto desconocido y vectores de ataque no conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portalapp:portalapp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71C5A2AD-920A-49FA-9D93-5D48FA3F30EC"}]}]}],"references":[{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46056","source":"cve@mitre.org"},{"url":"http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4616","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T18:14:04.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key."},{"lang":"es","value":"El plugin SpamBam para WordPress permite a atacantes remotos evitar las restricciones y añadir comentarios al blog utilizando valores proporcionados por el servidor para calcular una clave compartida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_spanner:spambam_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"164A1DEB-C985-4E98-B9FB-FB8263E6BC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:spambam_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"A4C26621-9513-4D5F-97E5-3539C54092AC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486333/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27291","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39690","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486333/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4617","sourceIdentifier":"cve@mitre.org","published":"2008-10-20T20:00:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo actualite v1.0 de Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pyxicom:actualite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BE6C9DBC-BE43-4B93-9494-FAC05FA92D37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4437","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28565","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41579","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5337","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4618","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T00:10:53.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls."},{"lang":"es","value":"La implementación de Stream Control Transmission Protocol (sctp) en los nucleos de Linux anteriores a v2.6.27 no manejan correctamente una violación del protocolo en la que un parámetro tiene una longitud no válida, permitiendo a atacantes remotos provocar una denegación de servicio (finalización en modo pánico) mediante vectores no especificados, relacionados con sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, y tipos de datos incorrectos en las llamadas a funciones."}],"vendorComments":[{"organization":"Red Hat","comment":"The versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5 were not affected by this issue.\n\nThis issue only affected the version of Linux kernel as shipped with Red Hat Enterprise MRG and was addressed via: https://rhn.redhat.com/errata/RHSA-2009-0009.html","lastModified":"2009-01-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26.5","matchCriteriaId":"B291C3CF-20EC-4D4E-B736-DB5059560455"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=ba0166708ef4da7eeb61dd92bbba4d5a749d6561","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33586","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/06/1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31848","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=ba0166708ef4da7eeb61dd92bbba4d5a749d6561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4619","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T00:10:54.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE operation and the taddr2uaddr function.  NOTE: this might be a duplicate of CVE-2007-0165."},{"lang":"es","value":"El subsistema RPC en Sun Solaris 9 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una petición al procedimiento 8 especialmente construida, relacionada con la operación XDR_DECODE y la función taddr2uaddr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4440","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200412-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/28/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/31/2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2945","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46057","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6775","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00819.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200412-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/28/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/31/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00819.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4620","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:01.960","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Meeting Room Booking System (MRBS) versiones anteriores a v1.4 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"area\" en (1) month.php, y posiblemente en (2) day.php y (3) week.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.6","matchCriteriaId":"6E9662ED-8498-46F1-AA92-D9D2871472CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CFAE9473-63D8-4F62-9198-9047B414BC86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.6:*:*:*:*:*:*:*","matchCriteriaId":"F2B623EF-8577-4B8A-B4EE-5B3B54BE7F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0DFDB3DE-E235-4D14-BE58-72EA88D4F36B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:*:*:*:*:*:*:*","matchCriteriaId":"47EADF68-66EC-4451-A725-AC736E3D57F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:pre1:*:*:*:*:*:*","matchCriteriaId":"EABFB18E-5D50-46FD-9797-2818640509F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:pre2:*:*:*:*:*:*","matchCriteriaId":"FD2A1F3C-28AC-43CD-B672-68609FE34C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:pre3:*:*:*:*:*:*","matchCriteriaId":"82FD3EBE-A1B5-443D-BB4E-85989574165C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:pre4:*:*:*:*:*:*","matchCriteriaId":"01FE74F5-DC8B-4DF1-B130-B9F629CEF451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:pre5:*:*:*:*:*:*","matchCriteriaId":"B2593B07-1926-49B2-8861-F7506C272C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.8:pre6:*:*:*:*:*:*","matchCriteriaId":"3BB23E0D-8436-43DC-8AE2-C760E352EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.9:pre-1:*:*:*:*:*:*","matchCriteriaId":"38C8F314-C158-4714-8886-03699E317173"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.9:pre-2:*:*:*:*:*:*","matchCriteriaId":"9718319C-CF5C-43C9-AF5C-7819600DBF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CC316D35-0F8C-4E98-9C3F-30D0462E229F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"14120CBC-22CC-4462-A020-835CBD572FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.0:*:*:*:*:*:*:*","matchCriteriaId":"33CB5148-E525-46E4-9DCF-0B7BCC61CCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.0:pre-1:*:*:*:*:*:*","matchCriteriaId":"0CA692E1-2377-47EF-A5CE-24C350BCB3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.0:pre-2:*:*:*:*:*:*","matchCriteriaId":"D0EF1029-762B-4793-9795-D0B3EE717285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F92BF196-AF72-4536-887D-E473233E13D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.1:pre-1:*:*:*:*:*:*","matchCriteriaId":"ABAB6F8F-1ECF-4BF9-A904-01D2B2E97AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.1:pre-2:*:*:*:*:*:*","matchCriteriaId":"EB3FE2ED-A057-4958-A1A5-9BB589D9CE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F237A0F9-E806-4A28-8FAD-3738D0EA7191"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2:pre-1:*:*:*:*:*:*","matchCriteriaId":"FC23C619-388D-44EA-9E03-51EA42C5838B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2:pre-2:*:*:*:*:*:*","matchCriteriaId":"2A9CD391-31EA-4F58-851D-EA0D9E2EF212"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2:pre-3:*:*:*:*:*:*","matchCriteriaId":"8B775A8A-2C08-4A19-8FC6-7DEEC86827A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DE6366DF-9482-4E44-86C4-6681B82885EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A8762E1D-5AB8-4B80-BF26-2EF21CF7A5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E6F6CA38-FC9C-4E94-8506-E2127CD9E324"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1BF4BB3F-BF2F-4876-9CB1-3500770FA7F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"58A3759C-D905-4D4B-907F-6BF278F8413D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrbs:mrbs:1.2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"06C6E166-F679-4D75-92DE-6A4C4AA34EF5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4450","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31809","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2865","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45972","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6781","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4621","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers to execute arbitrary SQL commands via the adid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bannerclick.php en ZeeScripts Zeeproperty permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"adid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeescripts:zeeproperty:*:*:*:*:*:*:*:*","matchCriteriaId":"93FDAC30-546C-4646-B7FE-3BB5630B77E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32333","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4451","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31807","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2866","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45978","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6780","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4622","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1."},{"lang":"es","value":"La función isLoggedIn en el archivo fastnews-code.php en phpFastNews versión 1.0.0, permite a los atacantes remotos omitir la autenticación y conseguir acceso administrativo mediante el ajuste de la cookie fn-loggedin en 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpfastnews:phpfastnews:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"36CE59E2-D778-470A-8541-D8E8E3DA5AC6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4452","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31811","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2867","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45977","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4623","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.053","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feed_id parameter to index2.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el componente DS-Syndicate (com_ds-syndicate) versión 1.1.1 para Joomla, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro feed_id en el archivo index2.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_diphoorn:com_ds-syndicate:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F0CF5BAE-7EC6-4AE9-BC1E-9DBC1FD1C41C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/32321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4453","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31819","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2859","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45979","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4624","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.070","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión PHP remota de fichero en inti.php en Fast Click SQL Lite v1.1.7, cuando está habilitado register_globals, permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro \"CFG[CDIR]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftrsoft:fast_click_sql_lite:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C83BF3CD-11F0-4C29-BFDD-B6399ED2A4CB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4454","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31817","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2861","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45964","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6785","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4625","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.100","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en stnl_iframe.php en el plugin ShiftThis Newsletter (st_newsletter) para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"newsletter\", siendo un vector diferente que CVE-2008-0683."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shiftthis:shifthis_newsletter:*:*:*:*:*:*:*:*","matchCriteriaId":"E377CABA-0CC1-4DA5-AE64-1D7AA51E0271"},{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32336","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4446","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31806","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6777","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6777","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4626","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 and possibly other versions through 2.3.3-beta0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the album parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en \"Fritz Berger yet another php photo album - next generation\" (yappa-ng) v2.3.2 y posiblemente otras versiones hasta 2.3.3-beta0, cuando se ha deshabilitado magic_quotes_gpc, permite a atacantes remotos añadir y ejecutar ficheros locales de su elección al utilizar los caracteres .. (punto punto) en el parámetro album."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zirkon_box:yappa-ng:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1C6965F9-CFB5-4F87-B61A-DDB57F097CCF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4444","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49171","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31828","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45965","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6788","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4627","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.490","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el plugin rGallery v1.09 para WoltLab Burning Board (WBB), permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro itemID en la página RGalleryImageWrapper en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rgallery:rgallery_plugin:1.09:*:*:*:*:*:*:*","matchCriteriaId":"B719B8E2-7B71-4C5E-8D39-670C9F78953F"},{"vulnerable":false,"criteria":"cpe:2.3:a:woltlab:woltlab_burning_board:*:*:*:*:*:*:*:*","matchCriteriaId":"FD30EC58-8914-4395-A40F-04FD95D26C9F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4443","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31820","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45966","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6790","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4628","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función del.php en myWebland miniBloggie v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro post_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:minibloggie:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF7F35B5-15BD-432F-B17B-2A93AD95B0E6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4442","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31810","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2864","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45980","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6782","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4629","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.537","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Usagi Project MyNETS v1.2.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"00A406A1-0C55-4AE3-A2CB-ADCA16AAED85"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"001A5E27-2F13-41C0-8769-C1262DE3CB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EDF429A-B5AF-4B0B-887B-7009B310AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"41627062-FB62-47E2-8C1E-F0CFAE97504F"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8D55B140-E7E7-4E56-BAA2-620B50D9357D"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN53267766/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000071.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32348","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://usagi-project.org/PRESS/archives/53","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31835","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45989","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN53267766/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000071.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://usagi-project.org/PRESS/archives/53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4630","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Midgard Components (MidCOM) Framework before 8.09.1 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Midgard Components (MidCOM) Framework versiones anteriores a v8.09.1 tienen un impacto desconocido y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:2.9:beta16-beta:*:*:*:*:*:*","matchCriteriaId":"96EE5948-BFA5-4181-B822-27087B1AE0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:2.9:beta17:*:*:*:*:*:*","matchCriteriaId":"10161542-C98F-467E-9F12-E5B811B049B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:8.09.0:*:*:*:*:*:*:*","matchCriteriaId":"2F3C246D-C0F3-4604-9998-E4C2A43D6A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:8.09.0:beta1-beta:*:*:*:*:*:*","matchCriteriaId":"2547E3EE-217B-4FB1-86C7-542D61D260E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:8.09.0:beta2-beta:*:*:*:*:*:*","matchCriteriaId":"144C3194-AB11-4814-B8F3-1CD5790F53C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:8.09.0:rc_beta:*:*:*:*:*:*","matchCriteriaId":"0DAA06A2-EF05-4B98-BE93-57A155E43419"},{"vulnerable":true,"criteria":"cpe:2.3:a:midgard:midgard_components_framework:8.09.0:rc2_beta:*:*:*:*:*:*","matchCriteriaId":"1920C241-3C2C-4F37-831B-72C7FB931F08"}]}]}],"references":[{"url":"http://freshmeat.net/projects/midcom/?branch_id=38063&release_id=286210","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32178","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31829","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45962","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/midcom/?branch_id=38063&release_id=286210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4631","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.587","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted message.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función Message::AddToString en el módulo message/Message.cpp en MUSCLE versiones anteriores a v4.40 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un mensaje especialmente construido. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:*:*:*:*:*:*:*:*","versionEndIncluding":"4.30","matchCriteriaId":"3FB5BB00-FF9F-4E9D-8818-1C2C2CEDD224"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.00:*:*:*:*:*:*:*","matchCriteriaId":"72B01562-A7A9-4337-99FC-A80B5099CC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.01:*:*:*:*:*:*:*","matchCriteriaId":"AC53E596-5126-47A4-B69D-BDCE7B72D584"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.10:*:*:*:*:*:*:*","matchCriteriaId":"91FD175D-2630-4C17-BCEB-3C52D9A05BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.20:*:*:*:*:*:*:*","matchCriteriaId":"62568C51-2FDD-4C45-8347-5F021677799C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.21:*:*:*:*:*:*:*","matchCriteriaId":"958905EB-1AFD-4266-9C94-7CC9FEA3C366"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.22:*:*:*:*:*:*:*","matchCriteriaId":"BAF97104-A6FD-45D7-A81E-9E2FFAED702C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.23:*:*:*:*:*:*:*","matchCriteriaId":"53CBEC4B-6E2A-4FE0-B8FF-B26BD00F64C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.24:*:*:*:*:*:*:*","matchCriteriaId":"E36D5926-60BA-4038-A392-CA2B30485440"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.30:*:*:*:*:*:*:*","matchCriteriaId":"636EB10D-2C6E-4B50-9CBE-D4AB7D374A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.31:*:*:*:*:*:*:*","matchCriteriaId":"8840B4B6-10CE-400E-A983-C9B690F0C761"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.40:*:*:*:*:*:*:*","matchCriteriaId":"64EF279D-87F2-4CD5-8DD0-D09E83FE9C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.41:*:*:*:*:*:*:*","matchCriteriaId":"37FD1FF5-A945-4AA6-A8DF-4D429899F5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.42:*:*:*:*:*:*:*","matchCriteriaId":"75E77E66-AE80-4BC1-AC93-8FF44A7E7284"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.43:*:*:*:*:*:*:*","matchCriteriaId":"6244462A-078C-4019-B96A-563BBF282F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.44:*:*:*:*:*:*:*","matchCriteriaId":"0E00232B-07DF-4F08-86E3-C5E1A8B642EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.45:*:*:*:*:*:*:*","matchCriteriaId":"E80327CE-276B-4A16-88F1-7B78F20B547E"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.50:*:*:*:*:*:*:*","matchCriteriaId":"05DF66D6-7A14-423E-8D1A-07552DE1C6AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.51:*:*:*:*:*:*:*","matchCriteriaId":"01A62C7D-D49E-4441-9B55-C30A089D2235"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.60:*:*:*:*:*:*:*","matchCriteriaId":"7B4DF3F2-8C93-4619-BFCC-7DB2C909F78C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.61:*:*:*:*:*:*:*","matchCriteriaId":"1E3DF02C-C26D-4238-8F35-D85C85EFED01"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.62:*:*:*:*:*:*:*","matchCriteriaId":"A7C815B6-4F57-4B17-86C8-123C25D650B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.63:*:*:*:*:*:*:*","matchCriteriaId":"88E188F8-52A2-4BD9-8AF7-89A4F85E1093"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.64:*:*:*:*:*:*:*","matchCriteriaId":"ABE1B107-40E1-4CE7-BD57-65B229C34E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.70:*:*:*:*:*:*:*","matchCriteriaId":"F600CE84-3BEF-4156-BC56-B78603C97CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.71:*:*:*:*:*:*:*","matchCriteriaId":"13D8294F-6903-46CF-8FFB-FFAB9309D6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.72:*:*:*:*:*:*:*","matchCriteriaId":"7AF208F0-1FEB-4CB9-B2BF-ECE94B9AA47D"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.80:*:*:*:*:*:*:*","matchCriteriaId":"E05A3D04-AB00-4012-A778-AC19E9A0C2EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.82:*:*:*:*:*:*:*","matchCriteriaId":"F56D1A45-9936-46E1-91E7-27B16C42F7ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.83:*:*:*:*:*:*:*","matchCriteriaId":"FCA1DD06-3087-416D-8F60-3677D4FCE467"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.84:*:*:*:*:*:*:*","matchCriteriaId":"32BAB0BB-9867-4708-98F0-5D5378461488"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.90:*:*:*:*:*:*:*","matchCriteriaId":"100A03EF-97FC-427A-9743-EF507F56DE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.91:*:*:*:*:*:*:*","matchCriteriaId":"FC982066-B0F0-43DE-9CB0-DBA88E946820"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.92:*:*:*:*:*:*:*","matchCriteriaId":"401F574E-F23F-4D1D-AD45-A345E3E430EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:1.93:*:*:*:*:*:*:*","matchCriteriaId":"B99EEEFD-898A-43FF-94F7-05C5AB837191"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.00:*:*:*:*:*:*:*","matchCriteriaId":"7538A2BC-3EC6-4D4A-81C8-ABAC3273F0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.10:*:*:*:*:*:*:*","matchCriteriaId":"EEFFB7B9-B0D2-42BB-8846-CD6EB8EF5BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.11:*:*:*:*:*:*:*","matchCriteriaId":"3508E5C9-F661-483D-AA32-B04954C82FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.12:*:*:*:*:*:*:*","matchCriteriaId":"B4F7926F-DE8D-4C66-A0BC-7482B236C5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.13:*:*:*:*:*:*:*","matchCriteriaId":"E1A2CA65-500E-47F6-9C75-950AF3883AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.14:*:*:*:*:*:*:*","matchCriteriaId":"9132E5AD-A2B8-49D5-9E34-54EE268C399F"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.15:*:*:*:*:*:*:*","matchCriteriaId":"7564F357-30CB-47D6-B6E5-899D1398D13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.16:*:*:*:*:*:*:*","matchCriteriaId":"CF45B991-A833-4375-8D1C-2424524ECE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.17:*:*:*:*:*:*:*","matchCriteriaId":"26141E0C-D13F-47F3-85B4-DA18DB57D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.18:*:*:*:*:*:*:*","matchCriteriaId":"86E7AE67-47D7-451B-BED3-402C5A4051D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.19:*:*:*:*:*:*:*","matchCriteriaId":"1D3FF12D-5C3E-4EAC-9AB7-601822C13F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.20:*:*:*:*:*:*:*","matchCriteriaId":"C8F77F2A-73B4-4B03-8E64-864E76B73DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.21:*:*:*:*:*:*:*","matchCriteriaId":"BEEAD36F-6A69-42BB-8986-0CD2DDDD6C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.23:*:*:*:*:*:*:*","matchCriteriaId":"FAA58D91-3A4F-4061-A966-503092A210EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.24:*:*:*:*:*:*:*","matchCriteriaId":"822D27DB-AAAC-4D1D-B534-5A653EF33217"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.25:*:*:*:*:*:*:*","matchCriteriaId":"AC6364D7-A805-476A-AC65-C9E6394800F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.30:*:*:*:*:*:*:*","matchCriteriaId":"98D4684B-C1F3-4376-9F64-6F166B66D616"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.31:*:*:*:*:*:*:*","matchCriteriaId":"A269DCB4-7C58-40CF-BC4D-DA443CE2AFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.43:*:*:*:*:*:*:*","matchCriteriaId":"B33630D3-9F1C-4689-8E4F-B489082F6F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.44:*:*:*:*:*:*:*","matchCriteriaId":"2AB46D7E-4EDC-42B1-BE20-8D01536B0D3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.45:*:*:*:*:*:*:*","matchCriteriaId":"FC40548A-CD8F-470C-AD09-21F4BF8F53A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.46:*:*:*:*:*:*:*","matchCriteriaId":"A8F821E3-3227-49D4-8F36-CFDE402B67F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.47:*:*:*:*:*:*:*","matchCriteriaId":"22BAEDD9-1071-4E52-A234-21941FE46732"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.48:*:*:*:*:*:*:*","matchCriteriaId":"358B0738-15DC-44F6-BA90-4205A73946CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.49:*:*:*:*:*:*:*","matchCriteriaId":"61527E75-E0DD-4986-8B6F-D4AAA7CEE3A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.50:*:*:*:*:*:*:*","matchCriteriaId":"766559ED-3F48-4881-B77F-25AABB9AD8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.51:*:*:*:*:*:*:*","matchCriteriaId":"4998B9D8-9895-488F-A717-99F9B9C70DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.52:*:*:*:*:*:*:*","matchCriteriaId":"03D3AD5D-A3A8-4AF1-867E-882763EDED75"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.60:*:*:*:*:*:*:*","matchCriteriaId":"FCC5062A-C7CB-4B63-AB2D-C64012E017B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.61:*:*:*:*:*:*:*","matchCriteriaId":"0365F4B2-39E9-4132-B232-940A3296D375"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.62:*:*:*:*:*:*:*","matchCriteriaId":"3C2AA1EB-0B23-42C9-BC69-9303315DB3F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.63:*:*:*:*:*:*:*","matchCriteriaId":"522F5E02-BCB7-47AD-B219-16818B3B93CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.64:*:*:*:*:*:*:*","matchCriteriaId":"6FF043A8-0B24-45F9-8DC9-2A37D69CD253"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:2.65:*:*:*:*:*:*:*","matchCriteriaId":"F4032806-909F-4F48-B037-662EA83576A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.00:*:*:*:*:*:*:*","matchCriteriaId":"EA15F749-B531-4F16-8A90-7A4206EECDF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.01:*:*:*:*:*:*:*","matchCriteriaId":"B6E2F777-A480-4B3A-8B5A-64BE52C1B168"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.02:*:*:*:*:*:*:*","matchCriteriaId":"2F901C45-35D9-4137-BDBB-6FC69A1747F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.03:*:*:*:*:*:*:*","matchCriteriaId":"CD506F64-E143-4694-A20F-DC9BC22F8D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.10:*:*:*:*:*:*:*","matchCriteriaId":"650C18F5-17D3-4ECF-8ED2-A05908524627"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.11:*:*:*:*:*:*:*","matchCriteriaId":"49C87F1B-C584-4D95-AA10-00983B1948D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.20:*:*:*:*:*:*:*","matchCriteriaId":"84EACDB7-E1A9-4B8B-A471-067D7038341F"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.21:*:*:*:*:*:*:*","matchCriteriaId":"C0BB3303-0926-4702-B168-4B94AAE03C2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.22:*:*:*:*:*:*:*","matchCriteriaId":"BC4ECE8A-0747-4073-95CE-39A8B378BA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.23:*:*:*:*:*:*:*","matchCriteriaId":"AA0ABB32-65FB-43DD-AC5B-7D0F74423493"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.24:*:*:*:*:*:*:*","matchCriteriaId":"5505831A-3702-4CC8-A6EA-AF187B4915A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.30:*:*:*:*:*:*:*","matchCriteriaId":"4F98C37F-2A96-4DA7-9657-E8A090DF5345"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.31:*:*:*:*:*:*:*","matchCriteriaId":"5713F1E6-B43B-47D6-89BB-6CFDFDE07E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.32:*:*:*:*:*:*:*","matchCriteriaId":"F692E95F-1653-4203-98A0-C1BCDCBBD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.33:*:*:*:*:*:*:*","matchCriteriaId":"0DCF22F1-537B-4E66-88BE-DCED46AA9FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.34:*:*:*:*:*:*:*","matchCriteriaId":"AB8DE48B-31EE-4841-B406-5393BD74C2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:3.40:*:*:*:*:*:*:*","matchCriteriaId":"8B5D0035-5F48-484A-8655-C6C8D3246119"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.00:*:*:*:*:*:*:*","matchCriteriaId":"4CB5A802-57DA-43D3-8153-7058B92794CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.10:*:*:*:*:*:*:*","matchCriteriaId":"FED063EA-A912-46D5-8411-42A4EAA60451"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.11:*:*:*:*:*:*:*","matchCriteriaId":"62D80234-DE18-4562-9378-A79BDB74B6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.20:*:*:*:*:*:*:*","matchCriteriaId":"745E0EA2-41F9-42C6-B574-C6D23BDB4B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.21:*:*:*:*:*:*:*","matchCriteriaId":"DA3D2271-9E0B-4BAC-B125-2CE08F9C6B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.22:*:*:*:*:*:*:*","matchCriteriaId":"EF141194-3AFF-4B05-BE76-A8807B80C020"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.23:*:*:*:*:*:*:*","matchCriteriaId":"DF159C8E-8A6A-413E-A8CC-DF854B0A8EA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.24:*:*:*:*:*:*:*","matchCriteriaId":"C92866B6-872A-4953-BAD9-EC32CF46762B"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.25:*:*:*:*:*:*:*","matchCriteriaId":"D56CA3E8-EA03-4439-9353-C2F94F000E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.26:*:*:*:*:*:*:*","matchCriteriaId":"E36F3D7B-A8F6-413D-9DD6-1F6A4E5DDE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.27:*:*:*:*:*:*:*","matchCriteriaId":"C0E75C87-CADE-4EB5-8A3C-B63D112B72BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:myer_sound_laboratories:muscle:4.28:*:*:*:*:*:*:*","matchCriteriaId":"BCDEC69E-0205-4AD1-AB95-6CCA38036EB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31822","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2869","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45959","source":"cve@mitre.org"},{"url":"https://public.msli.com/lcs/muscle/muscle/HISTORY.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://public.msli.com/lcs/muscle/muscle/HISTORY.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4632","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.617","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the (1) post and (2) doc parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en Kure v0.6.3, cuando está deshabilitada la opción magic_quotes_gpc, permite a atacantes remotos leer y probablemente ejecutar ficheros locales de su elección utilizando los caracteres .. (punto punto) en los parámetros (1) post y (2) doc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kure:kure:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"3AB5A904-F827-4D04-B677-BB70F3B889AF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4445","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31785","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45927","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6767","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4633","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when \"Allow user to vote again\" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a \"previously cast vote.\""},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Node Vote v5.x anteriores a v5.x-1.1 y v6.x anteriores a v6.x-1.0, en un módulo de Drupal, cuando está habilitada la opción \"Allow user to vote again\", permite a usuarios autenticados remotos ejecutar comandos SQL de su elección mediante vectores no especificados relacionados con \"previously cast vote\" (votación anterior)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:4.7.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A46ADE6-7CFB-418F-80ED-43F39D4E4291"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:4.7.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"6F4668ED-C46D-4BE4-919E-F7BA878807BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:4.7.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9EF87E43-D8AC-4A5F-A557-EE069188F483"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:4.7.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"8C332A6D-FCB0-4C9E-BE4F-2C7CBE8CED58"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:4.7.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"1C9926BA-E41B-4384-9952-F2BF23A9318F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:5:*:*:*:*:*:*:*","matchCriteriaId":"7DE5896B-C4AA-482E-A28D-7A022AC3F393"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:node_clone:6:*:*:*:*:*:*:*","matchCriteriaId":"62B144A4-7696-4A45-B2EB-62BDB46A1EF9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/321685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31779","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45920","source":"cve@mitre.org"},{"url":"http://drupal.org/node/321685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4634","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Movable Type v4 hasta v4.21 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados relacionados con una página administrativa, siendo una vulnerabilidad diferente a CVE-2008-4079."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:*:*:*:*:*:*","matchCriteriaId":"D62FC8B9-3B6A-46C6-94CD-E35941BB64C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:unknown:community_solution:*:*:*:*:*","matchCriteriaId":"3376A0EE-CED7-495C-932D-239000C8E5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"00239DBB-03C7-4E5C-860E-D0437702748B"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:unknown:open_source:*:*:*:*:*","matchCriteriaId":"FB619291-69AA-4F90-8A3F-B9814906E890"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*","matchCriteriaId":"C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:unknown:community_solution:*:*:*:*:*","matchCriteriaId":"2F39B76A-C894-4CAD-8B0D-7B6B8F969D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"0B1D9C09-2BA0-484A-A0C3-6683B773F247"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:unknown:open_source:*:*:*:*:*","matchCriteriaId":"FCDC2602-7A4F-460A-B440-A0B6AC96C8C6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN81490697/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000072.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31826","source":"cve@mitre.org"},{"url":"http://www.sixapart.jp/movabletype/news/2008/10/15-1400.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45968","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN81490697/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sixapart.jp/movabletype/news/2008/10/15-1400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4635","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T01:18:02.693","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Hisanaga Electric Co, Ltd. hisa_cart 1.29 and earlier, a module for XOOPS, allows remote attackers to obtain sensitive user information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Hisanaga Electric Co, Ltd. hisa_cart v1.29 y anteriores, en un módulo de XOOPS, permite a atacantes remotos obtener información sensible del usuario mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hisanaga_electric_co:hisa_cart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.29","matchCriteriaId":"5D19E13C-7059-40F8-9E7B-5B198F774A20"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://hisacart.chushokigyo.net/modules/info/index.php/intro/url.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN67334580/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000068.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31795","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45946","source":"cve@mitre.org"},{"url":"http://hisacart.chushokigyo.net/modules/info/index.php/intro/url.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN67334580/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4636","sourceIdentifier":"cve@mitre.org","published":"2008-11-27T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process."},{"lang":"es","value":"yast2-backup de 2.14.2 a 2.16.6 en SUSE Linux y Novell Linux permite a usuarios locales obtener privilegios a través de metacaracteres de consola en nombres de archivos usados por el proceso de copia de respaldo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":false,"criteria":"cpe:2.3:o:novell:open_enterprise_server:-:*:*:*:*:*:*:*","matchCriteriaId":"C5C0C136-E406-4628-994A-682E8E729B50"},{"vulnerable":false,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":false,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":false,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*","matchCriteriaId":"FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp1:*:*:*:*:*:*","matchCriteriaId":"44320836-E2DE-4A1C-9820-AFFA087FF7FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"15E235E9-EC31-4F3F-80F7-981C720FF353"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:yast2-backup:*:*:*:*:*:*:*:*","versionStartIncluding":"2.14.2","versionEndIncluding":"2.16.6","matchCriteriaId":"4668731B-1AF7-48A2-A0BA-9A056E85A559"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://osvdb.org/50284","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32832","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32464","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46879","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://osvdb.org/50284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4637","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:01.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information: http://cpcommerce.cpradio.org/downloads.php","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature.  NOTE: this is probably a variant of CVE-2008-4121."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en cpCommerce v1.2.4, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores desconocidos en la función de búsqueda avanzada. NOTA: probablemente se trate de una variante de CVE-2008-4121."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.3","matchCriteriaId":"B0BE4BD2-CD8B-4DDD-9B55-E6B81FEE4F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:0.5f:*:*:*:*:*:*:*","matchCriteriaId":"C1A76E93-7DF7-439F-906B-8C1282901966"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6B47692E-BF0E-405E-9F84-F98954A7A03D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB243261-AB50-46AF-B7A3-42ACF9FAC8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CF21D39C-1BEA-4595-A869-ACC08F0AF744"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BB29AF15-B8BE-4160-9FCE-11C97710F1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A0A411EE-19E6-44CA-879D-0C2FCB2E1963"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"8425BFB3-5349-44C7-A378-75F2BE3820B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"013D4ED2-C532-4A1A-AF37-B21D83BEADB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F8A3E39-2CCF-4DE8-BC76-1B101F7C4415"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"07FBA21A-1B1A-44FD-BC41-F95E4CD24A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0C8EE244-FD27-4184-BB8A-49293A40C479"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.0.9a:*:*:*:*:*:*:*","matchCriteriaId":"27B52C0D-174E-4EBF-86B8-E918824E75F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CC2E775-D3FF-4C06-8818-DA6105D7F2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0BD02E75-F434-4B84-9E88-430485C023BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E2458A0A-3018-42BE-9C9D-8670E0ADBCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19CCEF08-5E94-45BE-B8AC-0FB3D63918CA"}]}]}],"references":[{"url":"http://cpcommerce.cpradio.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46090","source":"cve@mitre.org"},{"url":"http://cpcommerce.cpradio.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4638","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:01.037","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message."},{"lang":"es","value":"qioadmin en E/S Quick para la funcionalidad Database en Veritas File System (VxFS) de Symantec en HP-UX, y MP3 anterior a versión 5.0 en Solaris, Linux y AIX, permite a los usuarios locales leer archivos arbitrarios al causar que qioadmin escriba un contenido de archivo para un error estándar en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:aix:*:*:*:*:*","matchCriteriaId":"D696B174-AF11-4E36-BDC8-DF5EB6668303"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:linux:*:*:*:*:*","matchCriteriaId":"5E082D12-5E75-4CC2-B43C-84CE91063C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:5.0:mp2:solaris:*:*:*:*:*","matchCriteriaId":"3907B274-DCB7-43D2-ADE8-0DFCC536AD34"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_file_system:unknown:unknown:hp-ux:*:*:*:*:*","matchCriteriaId":"896CACC1-541E-45C0-8A3E-E8198892BC64"}]}]}],"references":[{"url":"http://seer.entsupport.symantec.com/docs/310872.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.security-objectives.com/advisories/SECOBJSADV-2008-05.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497675/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31679","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2875","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46009","source":"cve@mitre.org"},{"url":"http://seer.entsupport.symantec.com/docs/310872.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.security-objectives.com/advisories/SECOBJSADV-2008-05.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497675/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4639","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:01.053","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file."},{"lang":"es","value":"El archivo jhead.c en Matthias Wandel jhead versión 2.84 y anteriores, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque symlink en un archivo temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:*","versionEndIncluding":"2.84","matchCriteriaId":"D8BB879A-5153-47A3-A623-4F2A779AE47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C1ABBB65-4E12-4A6D-903D-98E2F524A251"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4907E5C4-F67D-44BE-802F-65DC337E6164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1910C3BD-AD9D-41C4-AD12-29BB696FB1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB688443-0AEA-4B7D-8491-F686A5D6ACA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F6983872-D290-4DCB-A05C-863662975833"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EF951111-D7DD-4AF1-AE11-37E57F22A9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:*","matchCriteriaId":"00F2F739-404D-4A1D-8135-0221B8F2F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A25688F3-F170-4E30-84C4-13F2A65C8330"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D59D8811-EFCE-4C4B-8920-5B769568BE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CEB92C55-ABAD-4C88-BAB5-4201E98BE3F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*","matchCriteriaId":"89A00DA7-F005-4A4D-AEA5-78EB278B8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:*","matchCriteriaId":"074189B6-AC0D-4E27-B312-14BD471E1C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C1111843-76B8-4A0D-8DF8-CAE85E473C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:*","matchCriteriaId":"E21C7CBC-6BD4-45FA-86A8-CCA50BD8F1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:*","matchCriteriaId":"0A1A62D1-CB92-4E62-8D7F-AF87B113095B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:*","matchCriteriaId":"64252DB9-3EBF-4DBA-BE5D-C5C728A66FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:*","matchCriteriaId":"E61B2310-98E0-4D3B-83E9-204C04526182"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:*","matchCriteriaId":"329304C6-A227-463A-A6F7-6904335350A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:*","matchCriteriaId":"903E52E3-4B82-4814-B901-D199A879AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.82:*:*:*:*:*:*:*","matchCriteriaId":"A31B060E-AEA5-430C-9536-6ECA81B69033"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/5","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4640","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:01.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final \"z\" character is replaced by a \"t\" character or (2) a final \"t\" character is replaced by a \"z\" character."},{"lang":"es","value":"La función DoCommand de jhead.c en Matthias Wandel jhead v2.84 y anteriores, permite a los usuarios locales eliminar ficheros de su elección a través de vectores que contengan un nombre de fichero de entrada modificado en los que (1) el carácter \"z\" final es reemplazado por un carácter \"t\" o (2) el carácter \"t\" final es reemplazado por un carácter \"z\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:*","versionEndIncluding":"2.82","matchCriteriaId":"3F753BDB-F7EB-4706-ACF8-63A72A79D7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C1ABBB65-4E12-4A6D-903D-98E2F524A251"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4907E5C4-F67D-44BE-802F-65DC337E6164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1910C3BD-AD9D-41C4-AD12-29BB696FB1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB688443-0AEA-4B7D-8491-F686A5D6ACA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F6983872-D290-4DCB-A05C-863662975833"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EF951111-D7DD-4AF1-AE11-37E57F22A9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:*","matchCriteriaId":"00F2F739-404D-4A1D-8135-0221B8F2F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A25688F3-F170-4E30-84C4-13F2A65C8330"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D59D8811-EFCE-4C4B-8920-5B769568BE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CEB92C55-ABAD-4C88-BAB5-4201E98BE3F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*","matchCriteriaId":"89A00DA7-F005-4A4D-AEA5-78EB278B8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:*","matchCriteriaId":"074189B6-AC0D-4E27-B312-14BD471E1C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C1111843-76B8-4A0D-8DF8-CAE85E473C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:*","matchCriteriaId":"E21C7CBC-6BD4-45FA-86A8-CCA50BD8F1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:*","matchCriteriaId":"0A1A62D1-CB92-4E62-8D7F-AF87B113095B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:*","matchCriteriaId":"64252DB9-3EBF-4DBA-BE5D-C5C728A66FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:*","matchCriteriaId":"E61B2310-98E0-4D3B-83E9-204C04526182"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:*","matchCriteriaId":"329304C6-A227-463A-A6F7-6904335350A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:*","matchCriteriaId":"903E52E3-4B82-4814-B901-D199A879AE4F"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/26/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32506","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/26/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4641","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:00:01.100","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input."},{"lang":"es","value":"La función DoCommand en el archivo jhead.c en Matthias Wandel jhead 2.84 y versiones anteriores, que permite a los atacantes remotos ejecutar arbitrariamente comandos a través del intérprete de meta-caracteres en entradas no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:*:*:*:*:*:*:*:*","versionEndIncluding":"2.82","matchCriteriaId":"3F753BDB-F7EB-4706-ACF8-63A72A79D7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C1ABBB65-4E12-4A6D-903D-98E2F524A251"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4907E5C4-F67D-44BE-802F-65DC337E6164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1910C3BD-AD9D-41C4-AD12-29BB696FB1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB688443-0AEA-4B7D-8491-F686A5D6ACA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F6983872-D290-4DCB-A05C-863662975833"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EF951111-D7DD-4AF1-AE11-37E57F22A9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.8:*:*:*:*:*:*:*","matchCriteriaId":"00F2F739-404D-4A1D-8135-0221B8F2F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A25688F3-F170-4E30-84C4-13F2A65C8330"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D59D8811-EFCE-4C4B-8920-5B769568BE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CEB92C55-ABAD-4C88-BAB5-4201E98BE3F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.2:*:*:*:*:*:*:*","matchCriteriaId":"89A00DA7-F005-4A4D-AEA5-78EB278B8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.3:*:*:*:*:*:*:*","matchCriteriaId":"074189B6-AC0D-4E27-B312-14BD471E1C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C1111843-76B8-4A0D-8DF8-CAE85E473C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-1:*:*:*:*:*:*:*","matchCriteriaId":"E21C7CBC-6BD4-45FA-86A8-CCA50BD8F1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.4-2:*:*:*:*:*:*:*","matchCriteriaId":"0A1A62D1-CB92-4E62-8D7F-AF87B113095B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.5:*:*:*:*:*:*:*","matchCriteriaId":"64252DB9-3EBF-4DBA-BE5D-C5C728A66FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.6:*:*:*:*:*:*:*","matchCriteriaId":"E61B2310-98E0-4D3B-83E9-204C04526182"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.7:*:*:*:*:*:*:*","matchCriteriaId":"329304C6-A227-463A-A6F7-6904335350A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentex:jhead:2.8:*:*:*:*:*:*:*","matchCriteriaId":"903E52E3-4B82-4814-B901-D199A879AE4F"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/26/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31921","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/26/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4642","sourceIdentifier":"cve@mitre.org","published":"2008-10-21T18:42:58.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo profile.php en AstroSPACES 1.1.1, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astrospaces:astrospaces:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D3D50B84-B133-42BC-B5C9-4E83174F39AF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4449","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31771","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45915","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4643","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.820","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo hits.php en myWebland myStats que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro sortby."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:mystats:*:*:*:*:*:*:*:*","matchCriteriaId":"60382AA9-B77E-41C3-B476-AD574646A1A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4455","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31772","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45917","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4644","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.850","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header."},{"lang":"es","value":"Función hits.php en myWebland myStats permite a atacantes remotos evitar restricciones de direcciones IP mediante la cabecera HTTP X-Forwarded-For modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:mystats:*:*:*:*:*:*:*:*","matchCriteriaId":"60382AA9-B77E-41C3-B476-AD574646A1A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32289","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4455","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31772","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45918","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4645","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.883","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by create_function."},{"lang":"es","value":"plugins/event_tracer/event_list.php en PhpWebGallery v1.7.2 y anteriores; permite a administradores autenticados en remoto ejecutar código PHP de su elección a través de secuencias PHP en el parámetro \"sort\" (ordenar), que es procesado como por create_function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.2","matchCriteriaId":"5B662306-A004-463F-BDA9-D52F5E47F380"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F0EE492-82CC-4B8D-A4C2-C03D90E3512C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"12A62835-F153-476A-8F73-D190E249C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"18716F33-C917-477A-8B02-8F3E03BADD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11243C68-0FEC-4C4B-B33A-CA393F6DCBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CCF0BF8D-0EBE-47E8-BF92-249308692253"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B9DC36B6-9AFA-4A90-ACBB-7BB25C27CBE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4C904823-1291-4883-950E-089443E1306F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"2847007A-5F0B-457E-9D56-1570B59B1589"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"340CE351-800F-4670-A4FF-2B56644B6DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B0A25DD-835C-43FF-A040-90B59B5C8D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E410A77F-8520-4011-A1CA-03B0A466CF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"029740C0-CC4B-412A-AD11-8B1D7ED66996"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4B249FD5-B164-41F3-970E-8701C8C469CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"261EA07E-62B1-45DF-A21B-3F63B0E528FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B90E5405-7F62-4696-BC32-E0133A3E9652"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"645D12DC-EBCE-4CAE-8B62-143B66AD1815"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CC5256C5-8612-4961-B813-D560D59E59EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"874E8A29-1530-4744-A466-05AC7E543EC5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4456","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31762","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45875","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6755","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4646","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.913","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database."},{"lang":"es","value":"El Websense Reporter Module en Websense Enterprise v6.3.2 almacena la contraseña de administrador de la base de datos SQL en texto plano en CreateDbInstall.log, lo que permite a usuarios locales obtener privilegios en la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websense:enterpise:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD46F04B-E20A-440D-8F34-55E4CF06B742"}]}]}],"references":[{"url":"http://secunia.com/advisories/32264","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31746","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021058","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2819","source":"cve@mitre.org"},{"url":"http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4647","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php en sweetCMS v1.5.2, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sweetcms:sweetcms:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"205A7A19-AAE4-44EA-BF1B-82F3574A68F3"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/sweetcms-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31774","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45921","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/sweetcms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4648","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or the (2) option, (3) Itemid, (4) id, (5) task, (6) bid, and (7) contact_id parameters.  NOTE: the error might be located in modules/mod_language.php, and index.php might be the interaction point."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php de Elxis CMS 2008.1 revisión 2204; permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) PATH_INFO o los parámetros (2) option, (3) Itemid, (4) id, (5) task, (6) bid y (7) contact_id. NOTA: Puede que el error esté localizado en modules/mod_language.php, e index.php sea el punto de interacción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elxis:elxis_cms:2008.1:revision_2204:*:*:*:*:*:*","matchCriteriaId":"7666ED44-B027-4E67-99B1-B29573ABBDD9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/elxis-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31764","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45866","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/elxis-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4649","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:50.993","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en Elxis CMS 2008.1 revisión 2204, permite a atacantes remotos secuestrar sesiones web estableciendo el parámetro \"PHSESSID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elxis:elxis_cms:2008.1:revision_2204:*:*:*:*:*:*","matchCriteriaId":"7666ED44-B027-4E67-99B1-B29573ABBDD9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/elxis-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31764","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45868","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/elxis-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4650","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.007","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en viewevent.php en myEvent v1.6 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro eventdate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:myevent:1.6:*:*:*:*:*:*:*","matchCriteriaId":"32B74A17-9BF6-43AC-AEEA-26E26672F1E0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31773","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45919","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6760","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4651","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id parameter in an editrecord action to admin/cms/nav.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Jetbox CMS 2.1, que permite a los usuarios remotos autentificados ejecutar arbitrariamente comandos SQL a través del (1) parámetro ORDERBY para el archivo admin/cms/images.php y el (2) parámetro nav_id en una acción editrecord para el archivo admin/cms/nav.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0916DF3D-71ED-423F-A2F4-842EE706ADDC"}]}]}],"references":[{"url":"http://www.digitrustgroup.com/advisories/web-application-security-jetbox","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31824","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45986","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-jetbox","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4652","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.100","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX (DartFtp.dll) de Dart Communications PowerTCP FTP para ActiveX 2.0.2; permite a atacantes remotos ejecutar código de su elección a través de una propiedad larga SecretKey (ClaveSecreta)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dart:powertcp_ftp_for_activex:2.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"19ECE6B0-BBF1-4392-BB34-B6FDA69BCF71"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4458","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31814","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45975","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6793","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6840","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4653","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo makale.php en Makale 0.26 y posiblemente otras versiones, un módulo para XOOPS, que mertie a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:makale:0.26:*:*:*:*:*:*:*","matchCriteriaId":"ECAB3E26-83E0-4E36-A73D-30544C9B46C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://secunia.com/advisories/32347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4459","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31834","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45991","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6795","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4654","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.147","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función parse_master en el plugin modules/demux/ty.c) en VLC Media Player v0.9.0 a la 0.9.4, permite a atacantes remotos ejecutar código de su elección a través de un archivo TiVo TY con una cabecera que contiene un valor de tamaño manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2989A186-A580-47FE-A8B0-87FD0861D325"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3E93836E-E9D1-4180-A589-43602647741C"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B32073-DBD5-4344-8498-A132B99807A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5330E5C4-BF18-498A-9AE2-1C57E2494AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"86D31A16-94EE-45D6-8C54-4F27D466A29E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502726","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=fde9e1cc1fe1ec9635169fa071e42b3aa6436033","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=26d92b87bba99b5ea2e17b7eaa39c462d65e9133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4460","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/19/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497587/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31813","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-010.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0809.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2856","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45960","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14803","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=fde9e1cc1fe1ec9635169fa071e42b3aa6436033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=26d92b87bba99b5ea2e17b7eaa39c462d65e9133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497587/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-010.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0809.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4655","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.163","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Simple survey (simplesurvey) 1.7.0 y versiones anteriores,  extensión para TYPO3, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.0","matchCriteriaId":"4F242896-9360-4B38-87B5-C6A03FF73B3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BFE067F4-7FCE-44AF-8E38-0A9F4B094F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E65DEE3B-33D3-442D-B9E8-36585F00357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3BB4840E-BBED-4EAB-AA04-F3193F815735"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"484497FB-51D0-47B0-9405-242018F52227"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E26A-94CA-4C4F-A792-64A5730811BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"98C7822E-E935-4B51-8A41-8C99A09AA035"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"EC1145E3-04DC-4D7F-A9DE-C4ADE6587D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9B2C8D35-7CAB-4A06-A467-1542FA794698"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C2186BEA-84A8-4845-BE7B-5B689AA4F619"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C851842A-E114-447A-89FE-F35442358A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"19CB2DEB-A82F-4A02-97BA-5E4B1F65B3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9FF96F1B-16AE-4DB5-A228-B54935D69C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CBB5372C-1710-4668-8B49-4CB71C61EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E9F8083E-752F-43A3-9F71-F367C5A068C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"02DE3588-4A36-494C-8AC7-D6A850AA7326"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"69740413-1D55-4A41-A8DB-C41F244BC586"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"FFF167AC-30F2-4E8E-97F6-9ACCF084879C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7F1C4862-BCB6-4A98-AFDD-929044FB469D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"117AF0F4-073D-42DD-8A2A-5BB9AA1C740F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"08C7EB07-A982-48DC-BDC4-E077EB8E4EE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"60D3B378-1549-466B-831A-3DA955E78308"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:simplesurvey:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A602B7CA-8A9A-42E3-9F8B-11F9167EA8EF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32369","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/simplesurvey/1.8.1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/simplesurvey/1.8.1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4656","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.197","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Frontend Users View (feusersview)  v.0.1.6 para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:frontend_users_view:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.6","matchCriteriaId":"BD1C2909-29B1-4D89-AAB8-ACBEBD79AE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:frontend_users_view:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7255B37A-234A-444F-AC1F-A4A76AB08EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:frontend_users_view:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F9C2A9E2-718F-4B04-A7E7-7C41782053C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31843","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4657","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.210","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Plugin Econda (econda) v0.0.2 y anteriores para TYPO3; permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:econda_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.2","matchCriteriaId":"A2D64A6E-89FD-4409-861A-9919E1D78202"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:econda_plugin:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB02C14D-107B-4CCD-AF9A-1DA1C4A83206"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/extensions/repository/view/econda/0.0.4/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31841","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://typo3.org/extensions/repository/view/econda/0.0.4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4658","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión JobControl (dmmjobcontrol) v1.15.4 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:*:*:*:*:*:*:*:*","versionEndIncluding":"1.15.4","matchCriteriaId":"C03C24A7-8C42-4E9F-AB4E-DF4BED771448"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DAAC766E-B1CD-46F4-AEFA-1E68768E8819"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5846A3C1-5C1C-4DC0-85EE-2FFBA0DFE1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9F70BF5D-CBED-4A26-8200-9EDF8396B383"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E3B6D1E-15B4-43FE-A236-E4D02520DC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"800F03FB-E265-476D-A291-B5F53C75A5BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E937CC1F-9F88-49A9-AD16-62ADAA8D55FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.3:*:*:*:*:*:*:*","matchCriteriaId":"819E4145-5FFE-49CA-91FC-75755478D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DEA66AF6-0F8F-43F5-B0D5-A534338D4D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E1E12955-CBEC-4AEF-932F-9FE0D6B1A734"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.6:*:*:*:*:*:*:*","matchCriteriaId":"72CF2A47-58B3-4628-9FAE-B2CED784562D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.7:*:*:*:*:*:*:*","matchCriteriaId":"5CB6E779-77E7-490E-B57E-BD0D5596E54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.8:*:*:*:*:*:*:*","matchCriteriaId":"78ACF2D8-AC99-43A3-8B8E-AC549E7BA815"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"EDEA5C33-E505-42DB-9B4C-99800907AD04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"5E9B8495-828D-407D-9283-FB0FC7C3D756"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"70497A42-264D-4C71-BEC5-613EB7D005CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.9:*:*:*:*:*:*:*","matchCriteriaId":"93B25DE6-B56A-4F43-95EC-469CF0A21728"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C167D767-5105-4342-95A9-4B062DA23198"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"006252F1-D4D8-46DB-AEFE-E96EBC17405E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FF1853DC-24BE-4F0F-9C16-19BFA3CFDB09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"1DD87AA7-1F71-433C-9D48-A4DF4B39C9A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B040E669-4DF9-4949-9699-8BA5650BEAE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"61D6DC9A-FA53-43CF-B755-64F515BD3711"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8372FE47-D502-4BAF-A703-F2B9D3C8B32E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC7B3F2A-4B80-4FA6-BA52-01675BCA00A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"875F2374-088E-411F-BFD4-6CC43F23DA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"05336E07-D5DF-44BC-8B67-C7E802A0A27B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"D3A97D89-C7B0-425C-90A9-00E59249ABE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"85ED59D6-AE2A-494C-B98D-7D132FABB946"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"46ABBEC8-C2DD-44BA-BB59-FC80A0C89433"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"237DE41B-CFB1-425F-93F2-513153DC001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"CD5BA8EE-A221-46E7-A23A-64198F367349"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"B4656CCF-9C97-4DE0-9E4E-2069FA8867E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.15.1:*:*:*:*:*:*:*","matchCriteriaId":"69CE8E4B-656A-4757-B631-A7B6B4BF56EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.15.2:*:*:*:*:*:*:*","matchCriteriaId":"EEFD7E36-EAE8-4937-B89F-A55C6387F743"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:jobcontrol:1.15.3:*:*:*:*:*:*:*","matchCriteriaId":"BF276B5D-D830-43C3-B4C9-DD4147032861"}]}]}],"references":[{"url":"http://secunia.com/advisories/32342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/dmmjobcontrol/1.15.5/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31840","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/dmmjobcontrol/1.15.5/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4659","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.257","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en la extensión Mannschaftsliste (kiddog_playerlist) v1.0.3 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:mannschaftsliste:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"F48A408D-D214-4B08-ADE3-3818B166D1AB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31844","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4660","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.290","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión M1 Intern (m1_intern) v1.0.0 para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:m1_intern:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1522E932-799C-4D78-A941-58EA640EAF91"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31845","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45999","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4661","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:51.303","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión Page Improvements (sm_pageimprovements) v1.1.0 y anteriores para TYPO3; permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:page_improvements:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"5ABFA6FF-77E4-4784-BBFA-C5B0FD62E582"}]}]}],"references":[{"url":"http://typo3.org/extensions/repository/view/sm_pageimprovements/0.3.0/info/ChangeLog/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://typo3.org/extensions/repository/view/sm_pageimprovements/0.3.0/info/ChangeLog/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4662","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T02:10:02.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo admin.php en LokiCMS 0.3.4, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos, incluir y ejecutar arbitrariamente archivos locales a través de .. (punto punto) en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"64C57EEB-4C90-494C-AD38-46CF0353DD98"}]}]}],"references":[{"url":"http://secunia.com/advisories/30472","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4463","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492877/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31743","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45843","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492877/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4663","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T02:10:02.097","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en analysis.cgi v1.44 usado  en K's CGI Access Log Kaiseki (1) jcode.pl y (2) Jcode.pm, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kumacchi:ks_cgi_access_log:1.44:*:*:*:*:*:*:*","matchCriteriaId":"69EDF733-C969-4B4E-B541-07ECD7DCB786"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN46869708/index.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN72065744/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000043.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000044.html","source":"cve@mitre.org"},{"url":"http://www.kumacchi.com/cgiroom/cgis/accesslogex/accesslogex.html","source":"cve@mitre.org"},{"url":"http://www.kumacchi.com/cgiroom/index.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46053","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN46869708/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN72065744/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kumacchi.com/cgiroom/cgis/accesslogex/accesslogex.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kumacchi.com/cgiroom/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4664","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T00:11:52.023","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Version 2.1.5 of QVOD Player does not exist.  The correct version is 2.5.1.","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX QvodInsert.QvodCtrl.1 (QvodInsert.dll) en QVOD Player en versiones anteriores a 2.1.5 build 0053 que permite a los atacantes remotos ejecutar arbitrariamente código a través de la propiedad larga URL. NOTA: algunas de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qvod:qvod_player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0533C601-A6A3-475D-8658-8808714BFD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:qvod:qvod_player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E824BD0B-100B-42D6-9C84-9FB3A20B0450"},{"vulnerable":true,"criteria":"cpe:2.3:a:qvod:qvod_player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6BF28A17-ECF6-402B-B56C-DBE581BB7C99"}]}]}],"references":[{"url":"http://hi.baidu.com/muma_reader/blog/item/46bd0d7a04eb75e92f73b36e.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28494","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27271","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39675","source":"cve@mitre.org"},{"url":"http://hi.baidu.com/muma_reader/blog/item/46bd0d7a04eb75e92f73b36e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4665","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.130","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) news_read.php and (2) gifts_show.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en PG Matchmaking, que permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro id para los archivos (1) news_read.php y (2) gifts_show.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datingpro:matchmaking:*:*:*:*:*:*:*:*","matchCriteriaId":"81AAF21C-465C-4734-B79E-A27C892FCA65"}]}]}],"references":[{"url":"http://secunia.com/advisories/32016","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4466","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31477","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2698","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45496","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6626","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4666","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.193","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en webboard.php en Ultimate Webboard v3.00, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"category\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deeserver:ultimate_webboard:3.00:*:*:*:*:*:*:*","matchCriteriaId":"9030D3C4-9A1B-4513-9516-3870D7B2AF6C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4467","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45469","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6576","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4667","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.207","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the rss parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en rss.php en ArabCMS v2.0 beta 1, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro \"rss\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arabcms:arabcms:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"33236BC1-6222-49A2-B7A1-6B17E9A2CBCC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4468","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31480","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45514","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6628","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4668","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.240","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Image Browser (com_imagebrowser) v0.1.5 para Joomla! permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro carpeta (folder) en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"640E188E-4B22-4EC2-A268-5B255B99FB78"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4464","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45490","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6618","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4669","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.257","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo search.php en Dan Fletcher Recipe Script que permite a los atacante remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro keyword. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dan_fletcher:recipe_script:*:*:*:*:*:*:*:*","matchCriteriaId":"32BF26EA-F8EF-4287-8076-A9A1176B8DEA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31442","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31442/exploit","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45489","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31442/exploit","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4670","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.287","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de Ed Pudol Clickbank Portal; permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un cuadro de búsqueda. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ed_putal:clickbank_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"851771FC-9436-4000-B478-31996DEC458F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31438/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45483","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31438/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4671","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.537","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo wp-admin/wp-blogs.php en Wordpress MU (WPMU), en versiones anteriores a 2.6, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de los parámetros (1) s y (2) ip_address"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","matchCriteriaId":"A51E6184-EC9F-46C8-879A-E086D6401278"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8D40A30E-7BA2-4121-90D0-55EB5ACDBC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B0EA81B6-0254-404D-8A2B-80C027383FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"738C3727-FCA0-4C7B-B6D6-2FC14987706A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EF5136FA-5060-4448-9874-3DF375467ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064748.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31482","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45512","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064748.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4672","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to inject arbitrary web script or HTML via the k parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search_results.php de buymyscripts Lyrics Script; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro k. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goodlyrics:lyrics_script:*:*:*:*:*:*:*:*","matchCriteriaId":"C6A96F6E-F5A5-4A3A-ACC7-9520A78B2CBB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31437","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31437/exploit","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45474","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31437/exploit","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4673","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.583","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the (1) path[docroot] and (2) component parameters."},{"lang":"es","value":"Vulnerabilidad de inclusión remota del fichero PHP en panel/common/theme/default/header_setup.php en WebBiscuits Software Events Calendar 1.1, que permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de una URL en los parámetros (1) path[docroot] y (2) component."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbiscuits:events_calendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD2423DC-AE94-49E1-92D5-B28595351EE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32053","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4461","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31471","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2701","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45500","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6623","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4674","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.613","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in browse mode."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo realestate-index.php en Conkurent Real Estate Manager 1.01, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro cat_id en modo navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:conkurent:real_estate:manager:1.01:*:*:*:*:*:*","matchCriteriaId":"568A48F4-F506-4115-9E4D-67A2BD266B21"}]}]}],"references":[{"url":"http://secunia.com/advisories/32049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4469","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45499","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6599","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4675","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.630","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en PHPcounter 1.3.2 y versiones anteriores que permite a lo atacante remoto, ejecutar arbitrariamente comandos SQL a través del parámetro name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"9C240815-F205-4A58-A3A3-769B96F7B022"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"99DEE8B3-97EF-4ED2-B659-296B097314F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"35B01FA5-9AAC-4D05-A522-CCAFE0CF1C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"69F921D4-DCFD-4599-BBD4-07C832B7FF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FA81D42E-90AF-49BD-AD6D-79AC4233B675"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"760B7941-500B-461B-B9E3-19ABA3485AD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA76DBFB-1DBF-4B4F-98BC-29E01443ECDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"ADF2CABA-A445-4E82-9D37-234D08D0D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"08A62F1D-2B8E-4A72-AD5D-60ED6FE9EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F93A1B0-3048-4F0B-97D9-43B6F69D4CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"172EF53D-312C-44FE-ADA0-375C90462BEC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4465","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31451","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45493","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6611","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4676","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T10:30:01.660","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file.  NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain."},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix XenApp (formalmente Presentation Server) 4.5 Feature Pack 1 y versiones anteriores, Presentation Server 4.0, y Access Essentials 1.0, 1.5, y 2.0 permite a los usuarios locales obtener privilegios a través de vectores de ataque desconocidos relativos a la creación de un archivo no especificado. NOTA: esto debería de ser el mismo asunto que CVE-2008-3485, pero el anuncio del vendedor es tan impreciso como para ser cierto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2FF9F197-991D-4920-BE9A-2E3495E76CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:1.5:*:*:*:*:*:*:*","matchCriteriaId":"21B89150-1806-481D-B0D9-FD37BA4798D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D04505CA-D715-4094-9B39-61FA8BDB3A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"967F31B0-0299-4BCE-91E5-45E2B38CFCE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenapp:*:fp1:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"60589E82-E176-4C0C-9034-B3E5C1F6B3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenapp:4.5:*:*:*:*:*:*:*","matchCriteriaId":"8FBAEA3D-7E35-4C89-B416-8CDEB3286253"}]}]}],"references":[{"url":"http://secunia.com/advisories/32017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX116310","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31484","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020954","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2702","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45507","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX116310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4677","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:00.910","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote FTP servers to obtain sensitive information in opportunistic circumstances by logging usernames and passwords.  NOTE: the upstream vendor disputes a vector involving different ports on the same host, stating \"I'm assuming that they're using the same id and password on that unchanged hostname, deliberately.\""},{"lang":"es","value":"autoload/netrw.vim (también conocido como  Netrw Plugin) v109, v131, y versiones anteriores a v133k para Vim v7.1.266, otras versiones v7.1 , y v7.2, guardan las credenciales de las sesiones FTP y envían estos datos al intentar establecer sesiones FTP posteriores a los servidores en diferentes host, lo que permite a los servidores FTP obtener información sensible en circunstancias oportunas mediante la validación con nombres de usuario y contraseñas. NOTA: el fabricante cuestiona un vector involucrando a distintos puertos en un mismo host afirmando que \"Asumimos que están usando el mismo id y contraseña sobre el mismo servidor de manera intencionada\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of vim as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-10-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"},{"vulnerable":false,"criteria":"cpe:2.3:a:vim:vim:7.1.266:*:*:*:*:*:*:*","matchCriteriaId":"99E9ABC5-442C-4693-8F86-A969AD89A0C1"},{"vulnerable":false,"criteria":"cpe:2.3:a:vim:vim:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3613F5F4-9B8C-4020-8550-23310A41C85C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:109:*:*:*:*:*:*:*","matchCriteriaId":"CD5B43D3-2813-4D24-A496-AEA00429117F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:110:*:*:*:*:*:*:*","matchCriteriaId":"A2051781-F1FC-4D47-B047-439DF77679F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:111:*:*:*:*:*:*:*","matchCriteriaId":"8DFB6EAD-0BEE-4FD3-823E-3B52D86603AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:112:*:*:*:*:*:*:*","matchCriteriaId":"CC46D98B-8655-4F84-A0C3-F29D989187D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:113:*:*:*:*:*:*:*","matchCriteriaId":"11E8CE7C-5483-48EC-9BFD-FDCEF4832E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:114:*:*:*:*:*:*:*","matchCriteriaId":"618E8E68-AF47-4EBD-A1CA-C310D4C36FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:115:*:*:*:*:*:*:*","matchCriteriaId":"CC4D79BA-5C46-4E9C-9611-F4405D35C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:116:*:*:*:*:*:*:*","matchCriteriaId":"6FEC552C-0A24-4A68-840A-301BA76B737A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:118:*:*:*:*:*:*:*","matchCriteriaId":"FEC61FD6-ED14-443D-96CA-0879BB5413BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:120:*:*:*:*:*:*:*","matchCriteriaId":"8BF927C2-06B4-4123-87D5-41F08CA98AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:121:*:*:*:*:*:*:*","matchCriteriaId":"778E1D0A-C2A7-43B7-B87E-05A1ADB8DDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:122:*:*:*:*:*:*:*","matchCriteriaId":"B94004A1-17C4-48D4-9DA0-A6A1C8F37601"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:123:*:*:*:*:*:*:*","matchCriteriaId":"046706FD-9A64-4FCD-BC46-0C301BA9E5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:128:*:*:*:*:*:*:*","matchCriteriaId":"6DE8FDD2-EB30-4B5D-BDDD-66338A6B816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:netrw:131:*:*:*:*:*:*:*","matchCriteriaId":"1910C099-42C8-45BD-B00E-FC2904E76423"}]}]}],"references":[{"url":"http://groups.google.com/group/vim_dev/browse_thread/thread/2f6fad581a037971/a5fcf4c4981d34e6?show_docid=a5fcf4c4981d34e6","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/06/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim-netrw-credentials-dis.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495432","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495436","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30670","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2379","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461750","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44419","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/vim_dev/browse_thread/thread/2f6fad581a037971/a5fcf4c4981d34e6?show_docid=a5fcf4c4981d34e6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/06/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim-netrw-credentials-dis.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=461750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4678","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:00.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to \"storage overlay\" on the stack and a \"parse failure.\""},{"lang":"es","value":"El método HTTP_Request_Parser en el componente HTTP Transport en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.31, permite a atacantes remotos provocar una denegación de servicio (Finalización incorrecta del controlador OC4 y cuelgue de aplicación) a través de una cabecera HTTP Host larga, relacionado con \"storage overlay (superposición de almacenamiento)\" sobre la pila y  \"parse failure. (fallo de validación)\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK69371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK69371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4679","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:00.973","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when Certificate Store Collections is configured to use Certificate Revocation Lists (CRL), does not call the setRevocationEnabled method on the PKIXBuilderParameters object, which prevents the \"Java security method\" from checking the revocation status of X.509 certificates and allows remote attackers to bypass intended access restrictions via a SOAP message with a revoked certificate."},{"lang":"es","value":"El componente Web Services Security en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.31 y v6.1 anterior a v6.1.0.19, cuando el Certificate Store Collections está configurado para usar las Certificate Revocation Lists (CRL), no llama al método setRevocationEnabled  en el objeto PKIXBuilderParameters, que previene el \"Java security method\" desde la validación del estado de revocación de lso certificados X.509 y permite a atacantes remotos saltarse las restricciones de acceso establecidas a través de un mensaje SOAP con un certificado revocado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D40DEF90-CE7F-46BB-A6FF-50C1797866B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C43D3515-D9F5-4DC8-A030-9F97593495F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1968803-FF03-477C-81FE-87528FC6DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"62C1CA3B-E575-4531-A336-8BFC9F5DEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6C130982-8C6E-413E-8296-C9C277FCBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5E1790E4-073A-4666-80CB-4D967928A0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"6239EEAE-5852-4DF7-8627-87139BBB03B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61258","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46002","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK61258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4680","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.003","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB)."},{"lang":"es","value":"packet-usb.c en el analizador USB en Wireshark v0.99.7 a la v1.0.3, permite a atacantes remotos provocar una denegación de servicio (aborto o caída de aplicación) a través de un USB Request Block (URB) mal formado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021069","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2922","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15091","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4681","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.037","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets."},{"lang":"es","value":"Vulnerabilidad sin especificar en el analizador  Bluetooth RFCOMM en Wireshark v0.99.7 a la v1.0.3, permite a atacantes remotos provocar una denegación de servicio (aborto o caída de aplicación) a través de paquetes desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"}]}]}],"references":[{"url":"http://secunia.com/advisories/32355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021069","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46014","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11194","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14853","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4682","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an \"unknown/unexpected packet type\" that triggers a failed assertion."},{"lang":"es","value":"wtap.c en Wireshark v0.99.7 a la v1.0.3, permite a atacantes remoto provocar una denegación de servicio (aborto de aplicación) a través de un archivo de captura Tamos CommView mal formado (también conocido como .ncf file) con un \"tipo de paquete desconocido/inesperado\" que lanza una aserción fallida."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4462","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021069","source":"cve@mitre.org"},{"url":"http://shinnok.evonet.ro/vulns_html/wireshark.html","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31468","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2926","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45505","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10955","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14705","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shinnok.evonet.ro/vulns_html/wireshark.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4683","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.083","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call."},{"lang":"es","value":"La función dissect_btacl function en packet-bthci_acl.c del analizador  Bluetooth ACL en Wireshark v0.99.2 a la v1.0.3, permite a atacantes remotos provocar una denegación de servicio (aborto o caída de aplicación) a través de un paquete con una longitud inválida relacionado con una llamada tvb_memcpy errónea."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021069","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1513","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14982","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4684","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.113","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector."},{"lang":"es","value":"packet-frame en Wireshark v0.99.2 a la v1.0.3 no maneja adecuadamente las excepciones a lanzadas por los analizadores \"post\", lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de determinadas series de paquetes como se ha demostrado activando los analizadores \"post\" (1) PRP o (2) MATE."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021069","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2549","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10223","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14767","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4685","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.143","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en la función dissect_q931_cause_ie en packet-q931.c en el analizador Q.931 de Wireshark v0.10.3 a la v1.0.3, permite a atacantes remotos provocar una denegación de servicio (aborto o caída de aplicación) a través de determinados paquetes que lanzan una excepción."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32355","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021069","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2870","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10788","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-06.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4686","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.177","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654."},{"lang":"es","value":"Múltiples desbordamientos de enteros en el archivo ty.c en el plugin TY demux (también se conoce como TiVo demuxer) en reproductor multimedia  VideoLAN VLC, probablemente versión 0.9.4, podría permitir a los atacantes remotos ejecutar código arbitrario por medio de un archivo .ty diseñado, una vulnerabilidad diferente de CVE-2008-4654."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C13FF305-2547-4E85-9007-0A89F5E34BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3E93836E-E9D1-4180-A589-43602647741C"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B32073-DBD5-4344-8498-A132B99807A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5330E5C4-BF18-498A-9AE2-1C57E2494AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"86D31A16-94EE-45D6-8C54-4F27D466A29E"}]}]}],"references":[{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/19/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31867","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4687","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.207","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php."},{"lang":"es","value":"manage_proj_page.php en Mantis v1.1.4, permite a usuarios autenticados remotamente ejecutar código de su elección a través de un parámetro \"sort\" que contiene secuencias PHP y que es procesado por create_function dentro de la función multi_sort en core/utility_api.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"132BAF7E-8047-417F-8C78-1C1FBDAF97A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48069606-59B6-4D20-B909-997CA7EDBD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E42CD1CB-49E7-484B-9629-78A24B754346"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F95B327F-94A8-4D4F-A330-1B9BF4B764FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"215420D5-4690-45BE-AE84-CF1522523299"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5621726F-CA50-4336-9BCE-55F39BE5CDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1B0ECF83-F61A-4745-AA0D-4822A38F24DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"91621575-AF90-4C01-AA87-A99C304227D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEE63A1-106C-4E50-8B6F-D134C69FD194"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C7729C7E-ECC1-48D0-BFF7-82A8D96DC0AF"}]}]}],"references":[{"url":"http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/utility_api.php?r1=5679&r2=5678&pathrev=5679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32314","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32975","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4470","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/view.php?id=0009704","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31789","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=242722","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45942","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/44611/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6768","source":"cve@mitre.org"},{"url":"http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/utility_api.php?r1=5679&r2=5678&pathrev=5679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/view.php?id=0009704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=242722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/44611/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4688","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.237","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number."},{"lang":"es","value":"core/string_api.php en Mantis anterior a 1.1.3 no valida los privilegios del visor antes de crear un enlace con los datos de la incidencia en el identificador de origen, lo que permite a atacantes remotos conocer el título y estado  de la incidencia a través de una petición con un número de incidencia modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"132BAF7E-8047-417F-8C78-1C1FBDAF97A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48069606-59B6-4D20-B909-997CA7EDBD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E42CD1CB-49E7-484B-9629-78A24B754346"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F95B327F-94A8-4D4F-A330-1B9BF4B764FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"215420D5-4690-45BE-AE84-CF1522523299"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5621726F-CA50-4336-9BCE-55F39BE5CDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1B0ECF83-F61A-4745-AA0D-4822A38F24DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"91621575-AF90-4C01-AA87-A99C304227D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEE63A1-106C-4E50-8B6F-D134C69FD194"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C7729C7E-ECC1-48D0-BFF7-82A8D96DC0AF"}]}]}],"references":[{"url":"http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/string_api.php?r1=5285&r2=5384&pathrev=5384","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32243","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32975","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/view.php?id=9321","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31868","source":"cve@mitre.org"},{"url":"http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/string_api.php?r1=5285&r2=5384&pathrev=5384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/view.php?id=9321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4689","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.270","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions."},{"lang":"es","value":"Mantis anterior a v1.1.3 no desasigna la cookie de sessión durante el cierre de la misma, lo que facilita a atacantes remotos el secuestro de sesiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"75F47971-BB00-499D-BDC4-5E24EA2FC79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8E7458-6655-4C86-85A9-81004FF38321"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*","matchCriteriaId":"AE92E018-C25C-468D-9EF5-5665F0B42EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DA5AE0B4-15AB-49E7-9B97-96BA322B0966"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48069606-59B6-4D20-B909-997CA7EDBD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E42CD1CB-49E7-484B-9629-78A24B754346"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F95B327F-94A8-4D4F-A330-1B9BF4B764FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"215420D5-4690-45BE-AE84-CF1522523299"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5621726F-CA50-4336-9BCE-55F39BE5CDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1B0ECF83-F61A-4745-AA0D-4822A38F24DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"91621575-AF90-4C01-AA87-A99C304227D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEE63A1-106C-4E50-8B6F-D134C69FD194"}]}]}],"references":[{"url":"http://secunia.com/advisories/32975","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug","source":"cve@mitre.org"},{"url":"http://www.mantisbt.org/bugs/view.php?id=9664","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46084","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mantisbt.org/bugs/view.php?id=9664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4690","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.287","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929.  NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler."},{"lang":"es","value":"lynx v2.8.6dev.15 y anteriores, cuando está activado el modo avanzado y lynx está configurado como manejador de URL, permite a atacantes remotos ejecutar comandos de su elección a través de un lynxcgi: URL manipulado. Cuestión relacionada con el CVE-2005-2929. NOTA: se trata de una vulnerabilidad únicamente en algunos desarrollos que tienen definido un lynxcgi: handler."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:*:dev15:*:*:*:*:*:*","versionEndIncluding":"2.8.6","matchCriteriaId":"7613ABE2-175E-4A48-9CEC-D3662A6EB183"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.1:*:*:*:*:*:*","matchCriteriaId":"862A5445-8315-4A2C-8695-E161449C24D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.10:*:*:*:*:*:*","matchCriteriaId":"C9D4E577-AE2E-415C-A270-C0114A73893B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.11:*:*:*:*:*:*","matchCriteriaId":"AD2ECEE2-8458-421E-AEB5-39ED85B968A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.12:*:*:*:*:*:*","matchCriteriaId":"B570E564-ED10-4871-ACB9-5663A2872E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.13:*:*:*:*:*:*","matchCriteriaId":"A4572C92-B30D-40FE-8EB2-614BB85D4D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.14:*:*:*:*:*:*","matchCriteriaId":"B4316D3B-6F6F-4DA3-89D5-191830BD731D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.15:*:*:*:*:*:*","matchCriteriaId":"531CF003-9A81-459F-972F-8D01660AEA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.16:*:*:*:*:*:*","matchCriteriaId":"C376BE36-FD58-4F28-8AD7-95E7AB640568"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.17:*:*:*:*:*:*","matchCriteriaId":"8007AF95-DD87-4711-A2A7-3A680BB06BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.18:*:*:*:*:*:*","matchCriteriaId":"F30D66EF-D058-4138-B85D-C5292401B1F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.19:*:*:*:*:*:*","matchCriteriaId":"63FC230B-EA6D-4DF1-AA47-4CDE062D4307"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.2:*:*:*:*:*:*","matchCriteriaId":"13E500F0-E922-4F48-A4F1-B626D7CCC71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.20:*:*:*:*:*:*","matchCriteriaId":"043D6299-0541-42A8-B25B-86AAFC8F02D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.21:*:*:*:*:*:*","matchCriteriaId":"3705A24D-622A-46DC-971E-F5B9A1C22924"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.22:*:*:*:*:*:*","matchCriteriaId":"3F885BED-CEE1-4EA0-9CC3-AA206D93EC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.23:*:*:*:*:*:*","matchCriteriaId":"3972751B-45FF-44F7-B43D-63CEF5A8E420"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.24:*:*:*:*:*:*","matchCriteriaId":"EF239E93-FC86-496C-B188-AE8E365E4830"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.26:*:*:*:*:*:*","matchCriteriaId":"EA2470E7-8D3D-4CD1-96B8-CDAC2E286883"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.27:*:*:*:*:*:*","matchCriteriaId":"A3CC6ED2-2163-4652-AF6E-97E90733EF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.28:*:*:*:*:*:*","matchCriteriaId":"219E37CC-7624-4F0F-B80C-CE8A751D6213"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.29:*:*:*:*:*:*","matchCriteriaId":"F8797B26-20B9-495C-B7F4-0AD152B4C22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.3:*:*:*:*:*:*","matchCriteriaId":"1DC8FB1A-AA96-488F-8DB1-703E74F3745D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.4:*:*:*:*:*:*","matchCriteriaId":"4B90FBE5-6905-4699-B167-4622A6D2A328"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.5:*:*:*:*:*:*","matchCriteriaId":"EBD9FCE8-DE5E-4558-816B-B6D4D1863827"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.6:*:*:*:*:*:*","matchCriteriaId":"6C175A7B-A967-493C-83BF-EC80579C50E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.7:*:*:*:*:*:*","matchCriteriaId":"4DC670C5-EE53-4D14-ACA0-E353EC760003"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.8:*:*:*:*:*:*","matchCriteriaId":"B3D922E9-A39D-436C-8AC7-8B64BE68A1A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:dev.9:*:*:*:*:*:*","matchCriteriaId":"CF8BE003-9D90-4DA4-B3F0-DD7C2514857B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.1:*:*:*:*:*:*","matchCriteriaId":"C74E230F-B0F6-49BB-9DD6-CF4C0800BB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.10:*:*:*:*:*:*","matchCriteriaId":"7CA8ABB8-7894-438C-8EF7-F6043B8CC69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.11:*:*:*:*:*:*","matchCriteriaId":"48820A7C-C55A-4B73-A837-2FD7BDEAA8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.2:*:*:*:*:*:*","matchCriteriaId":"63945073-0E2F-483F-AF88-2EC99127852D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.3:*:*:*:*:*:*","matchCriteriaId":"98605AD2-A416-4223-AF4F-0855C2C9AC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.4:*:*:*:*:*:*","matchCriteriaId":"44B18544-1B8B-4BAF-A82F-2A070190CE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.5:*:*:*:*:*:*","matchCriteriaId":"81AFD48B-EB2D-4A76-9421-3DE8E6E6C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.6:*:*:*:*:*:*","matchCriteriaId":"1DA4550C-5EC5-436C-9F18-BEC1AB6CEC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.7:*:*:*:*:*:*","matchCriteriaId":"79EF180E-5E02-4761-86D3-334BA5A46C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.8:*:*:*:*:*:*","matchCriteriaId":"8AB68958-C147-4B9E-8B84-7D04FDBF54F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:pre.9:*:*:*:*:*:*","matchCriteriaId":"260D7B17-8357-4B3F-B8EC-A40D5157BBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:rel.1:*:*:*:*:*:*","matchCriteriaId":"3C12D052-763F-4A5F-9CFC-E08A9706033F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.1:rel.2:*:*:*:*:*:*","matchCriteriaId":"5DA73148-3C3E-4501-AE45-02FC3FB487BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.1:*:*:*:*:*:*","matchCriteriaId":"D59F1BD2-EA67-481A-935A-6FC0D07C4F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.10:*:*:*:*:*:*","matchCriteriaId":"81FA0F2C-A817-467A-BCA8-C9207EBD538A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.11:*:*:*:*:*:*","matchCriteriaId":"FB8F0E29-88BC-4CF0-9843-F5A32DB27F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.12:*:*:*:*:*:*","matchCriteriaId":"EF93CE9B-3E63-40BE-8CCC-6C57A667DB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.13:*:*:*:*:*:*","matchCriteriaId":"DA42F704-D1EF-4855-8679-10DCCF661420"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.14:*:*:*:*:*:*","matchCriteriaId":"4921C912-5DC0-45B6-9748-81ED0BA83D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.15:*:*:*:*:*:*","matchCriteriaId":"04CCEA26-8F53-4F0A-893A-C9E8F4058366"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.16:*:*:*:*:*:*","matchCriteriaId":"FA1A5BBB-6F3E-4C91-9E7A-54BF5EB79921"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.17:*:*:*:*:*:*","matchCriteriaId":"3BD24C16-6BF9-438C-B124-E1394D4E67E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.18:*:*:*:*:*:*","matchCriteriaId":"BC302B05-153A-46B8-84EF-975286369E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.19:*:*:*:*:*:*","matchCriteriaId":"DEF3A639-D731-4E0D-8D43-9960AA998F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.2:*:*:*:*:*:*","matchCriteriaId":"9CA2172E-DD08-435F-BA3C-D84287F307B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.20:*:*:*:*:*:*","matchCriteriaId":"F1F23869-E42A-41F3-AC39-7AA24CD43EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.21:*:*:*:*:*:*","matchCriteriaId":"BE45B4F4-831B-46C4-94B0-B5A2E552FB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.22:*:*:*:*:*:*","matchCriteriaId":"A732341A-F6BD-4E98-A187-0E0CBA2DE003"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.23:*:*:*:*:*:*","matchCriteriaId":"4BF68D4F-C79D-48E8-A77E-5A6C1B773EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.24:*:*:*:*:*:*","matchCriteriaId":"7EBA2266-7A0F-46B4-8B3C-1F233C57AE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.25:*:*:*:*:*:*","matchCriteriaId":"0CA8BEC0-9B09-4252-A663-12D7527F42B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.26:*:*:*:*:*:*","matchCriteriaId":"D5EC9A87-B380-4C3E-ABFB-C31ABC0E7683"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.3:*:*:*:*:*:*","matchCriteriaId":"618B6F91-C5DC-44DE-8B04-1B8F458E6F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.4:*:*:*:*:*:*","matchCriteriaId":"1EAE8DDC-05C3-4C02-A193-614C901FF70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.5:*:*:*:*:*:*","matchCriteriaId":"E523B829-5BCE-4B23-B4CA-96EC164E630F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.6:*:*:*:*:*:*","matchCriteriaId":"E36A8455-89AF-4996-900A-DCA537E5967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.7:*:*:*:*:*:*","matchCriteriaId":"9AA632B2-2508-465C-B25A-1F14CC94CE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.8:*:*:*:*:*:*","matchCriteriaId":"038E89B8-3486-4D39-9FF5-1638092CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:dev.9:*:*:*:*:*:*","matchCriteriaId":"81D5CDA1-D682-49CB-A19C-754159533866"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.1:*:*:*:*:*:*","matchCriteriaId":"12D4953F-F735-4D99-81FA-B120F2CD6187"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.10:*:*:*:*:*:*","matchCriteriaId":"6DE542DF-5FA2-4C98-AE7A-98BEDCD32C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.11:*:*:*:*:*:*","matchCriteriaId":"E2875C64-5DE3-4612-8A2D-07368AE0E613"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.2:*:*:*:*:*:*","matchCriteriaId":"BEB48407-4A1C-4A2A-91AB-A7F2469C643D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.3:*:*:*:*:*:*","matchCriteriaId":"770E6D06-A8E8-46EC-8ECB-E5034A3ACDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.4:*:*:*:*:*:*","matchCriteriaId":"BB2C468C-053D-4516-BBD5-097D9CA3C6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.5:*:*:*:*:*:*","matchCriteriaId":"0BFA48A1-D025-4CB7-9D7A-3C3D3F84C344"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.6:*:*:*:*:*:*","matchCriteriaId":"2952132D-CE4A-4D85-AB0F-321DD73CB8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.7:*:*:*:*:*:*","matchCriteriaId":"F0DE6D59-D33B-499E-93C4-D57D821055DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.8:*:*:*:*:*:*","matchCriteriaId":"3DA6C82E-497A-4E68-A019-76732FCDE79D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:pre.9:*:*:*:*:*:*","matchCriteriaId":"A51E8735-1187-478B-A27E-E172A75D1E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.2:rel.1:*:*:*:*:*:*","matchCriteriaId":"D4D7D16D-2DA0-4052-9B91-942900CC24BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.1:*:*:*:*:*:*","matchCriteriaId":"EBE97229-F7E7-4767-86B2-61066B69D30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.10:*:*:*:*:*:*","matchCriteriaId":"AAF905CD-FB1F-46CB-A432-625A8F050223"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.11:*:*:*:*:*:*","matchCriteriaId":"556F1631-93C7-48EA-A6C2-E8E3E6ACBB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.12:*:*:*:*:*:*","matchCriteriaId":"C50B29E2-3837-499A-BC2E-813C2BB92DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.13:*:*:*:*:*:*","matchCriteriaId":"BFF73BCA-644B-4091-A6F9-3C0B4F1C220C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.14:*:*:*:*:*:*","matchCriteriaId":"11450D21-1F22-4314-9C97-13F39F152156"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.15:*:*:*:*:*:*","matchCriteriaId":"087425C2-7A81-4B0F-AE36-A77E6913876B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.16:*:*:*:*:*:*","matchCriteriaId":"5A6E40AF-1674-4E37-A175-BABB6CFE222C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.17:*:*:*:*:*:*","matchCriteriaId":"4CADE41F-8802-4EE2-9B49-C461DCA522B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.18:*:*:*:*:*:*","matchCriteriaId":"39549DA6-1DE4-4760-BECE-E9C207836DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.19:*:*:*:*:*:*","matchCriteriaId":"301D4516-8280-4FBE-8E40-6ACF1FA6EDAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.2:*:*:*:*:*:*","matchCriteriaId":"8B9FDC9F-9FBB-496E-BA0A-D45666BD23EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.20:*:*:*:*:*:*","matchCriteriaId":"C4430E79-886C-4987-BF6C-3A9BC107C488"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.21:*:*:*:*:*:*","matchCriteriaId":"8F45A77D-1185-4E63-B387-C4EAE44A2043"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.22:*:*:*:*:*:*","matchCriteriaId":"9362AB7A-7564-4553-88EA-EC2501D2C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.23:*:*:*:*:*:*","matchCriteriaId":"51033A6B-71FD-4392-B162-0C2C1D15062E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.3:*:*:*:*:*:*","matchCriteriaId":"0DAE9201-C90D-4764-B533-3DBB3FDC8E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.4:*:*:*:*:*:*","matchCriteriaId":"20F61B2C-AC76-4E7A-8675-CC7075441274"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.5:*:*:*:*:*:*","matchCriteriaId":"839CE73D-D363-46C0-A7D8-0E0970C9D960"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.6:*:*:*:*:*:*","matchCriteriaId":"609D3A11-7245-4347-94B6-349D665BBA1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.7:*:*:*:*:*:*","matchCriteriaId":"0CF2C0B8-8DBD-44E7-A247-46FBCA6DE606"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.8:*:*:*:*:*:*","matchCriteriaId":"22CF3A40-D17E-47AD-A109-20A476238BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:dev.9:*:*:*:*:*:*","matchCriteriaId":"7F5C7A93-25F2-4429-9278-46F990ECB310"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre1:*:*:*:*:*:*","matchCriteriaId":"9619AB62-947D-4DD8-9870-245DF1A6BE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre2:*:*:*:*:*:*","matchCriteriaId":"133925D5-A33B-4B85-A834-6A187C186250"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre3:*:*:*:*:*:*","matchCriteriaId":"445D1083-FF37-466F-97FA-2B757692BA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre4:*:*:*:*:*:*","matchCriteriaId":"6CAD635C-FAB2-4BB1-AFBA-FC6A692C58B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre5:*:*:*:*:*:*","matchCriteriaId":"A18F33E1-52BC-4A6F-99C6-02777FBE2D3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre6:*:*:*:*:*:*","matchCriteriaId":"7911DA89-EA53-4E8C-87AE-B0E14EDF0040"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre7:*:*:*:*:*:*","matchCriteriaId":"83F2DC55-5D05-4336-8090-4563847819D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:pre8:*:*:*:*:*:*","matchCriteriaId":"628F3D87-9FCE-4BF5-8381-01E3181464B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.3:rel1:*:*:*:*:*:*","matchCriteriaId":"D53E25C2-BE29-4123-8AC0-FFD4760C7D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev1:*:*:*:*:*:*","matchCriteriaId":"4C0A1E2A-6846-43B7-89F7-EAFE87F23EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev10:*:*:*:*:*:*","matchCriteriaId":"79B7CD30-4DFA-4516-BFCE-D1628C4CB9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev11:*:*:*:*:*:*","matchCriteriaId":"FC834555-D75D-4A46-847B-6E8531A805CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev12:*:*:*:*:*:*","matchCriteriaId":"6D08BCAF-B83C-426B-A826-5D78D7D22C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev13:*:*:*:*:*:*","matchCriteriaId":"960F3E0F-7C73-4D69-86DB-1307CF0B7F41"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev14:*:*:*:*:*:*","matchCriteriaId":"C4E41961-28B3-4CA1-98BE-CDDAC3E12E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev15:*:*:*:*:*:*","matchCriteriaId":"5569496E-BA89-40B6-A5C9-E8A8640F9606"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev16:*:*:*:*:*:*","matchCriteriaId":"1FF48553-45A3-449F-BAB1-B2A77352237B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev17:*:*:*:*:*:*","matchCriteriaId":"AF350141-E5CC-451E-A05A-AD5EA160D3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev18:*:*:*:*:*:*","matchCriteriaId":"D6739C37-A79B-49B5-B2FD-357F6B05E0CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev19:*:*:*:*:*:*","matchCriteriaId":"56F72A7B-217D-4EAF-8187-F8C59CF891E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev2:*:*:*:*:*:*","matchCriteriaId":"49BF5E5B-2AE0-4BBF-AF13-0E4F7E284A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev20:*:*:*:*:*:*","matchCriteriaId":"538BD607-D360-4436-919F-00F0735F2F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev21:*:*:*:*:*:*","matchCriteriaId":"3B07CAD3-7F2F-4549-AF28-A5CE69CB2038"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev3:*:*:*:*:*:*","matchCriteriaId":"692D1DAF-46EE-4782-9B03-13D258C8EF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev4:*:*:*:*:*:*","matchCriteriaId":"B31CE784-35EC-45C6-9D06-9577C66B051A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev5:*:*:*:*:*:*","matchCriteriaId":"6D94E3FF-08E2-42D0-8AB9-4FFC4C9834D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev6:*:*:*:*:*:*","matchCriteriaId":"F20427C6-347C-4E1E-B983-7DCDF2D72ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev7:*:*:*:*:*:*","matchCriteriaId":"8EE07315-C850-4181-A531-31220BFF9A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev8:*:*:*:*:*:*","matchCriteriaId":"C7982641-B75F-454F-834F-EAF3BA897C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:dev9:*:*:*:*:*:*","matchCriteriaId":"04EBC013-48E1-407C-A8E5-5F30CF11AFD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.1:*:*:*:*:*:*","matchCriteriaId":"FC3E52FF-3CD4-4A01-8F89-584563A06352"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.2:*:*:*:*:*:*","matchCriteriaId":"7C9C8B8B-CE71-4CB0-8C10-FBC3172B9269"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.3:*:*:*:*:*:*","matchCriteriaId":"66889F07-374C-4B9E-8C98-4578C5173A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.4:*:*:*:*:*:*","matchCriteriaId":"12F6F8F4-298D-460E-AC41-29FB448B96D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:pre.5:*:*:*:*:*:*","matchCriteriaId":"FCC527A6-4804-47B7-9A5A-61402431BAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.4:rel.1:*:*:*:*:*:*","matchCriteriaId":"76FBFA8F-B2EF-489E-A832-08DC1BA091AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.1:*:*:*:*:*:*","matchCriteriaId":"59FE42C9-ABE6-4622-8AAE-D58C5C3060B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.10:*:*:*:*:*:*","matchCriteriaId":"0D31A992-F02D-4F76-A6B5-F3A8C4BD1040"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.11:*:*:*:*:*:*","matchCriteriaId":"4D03BC65-AE7E-4AB1-805F-7BF3A15FE035"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.12:*:*:*:*:*:*","matchCriteriaId":"633F1F2A-4F8A-4C5F-9D95-B806CBC5B74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.13:*:*:*:*:*:*","matchCriteriaId":"80F84D1E-3C9F-48A6-BED2-F3669B8EC819"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.14:*:*:*:*:*:*","matchCriteriaId":"FA979A2C-FBA8-4A86-8830-C0824AF54C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.15:*:*:*:*:*:*","matchCriteriaId":"9EF93004-261D-4C40-A288-C029A3054E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.16:*:*:*:*:*:*","matchCriteriaId":"F96D987C-B89F-48F8-BD22-0EA7E845B920"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.17:*:*:*:*:*:*","matchCriteriaId":"D2BA9934-E4AC-43BF-B860-3C60B5F18DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.2:*:*:*:*:*:*","matchCriteriaId":"0990275A-E44E-43F9-9164-B1979719BC9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.3:*:*:*:*:*:*","matchCriteriaId":"C0D186F7-CDBE-415B-AB26-146BA8F3FC7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.4:*:*:*:*:*:*","matchCriteriaId":"B0A4224C-A1B5-4BEB-9B4A-78CD0243E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.5:*:*:*:*:*:*","matchCriteriaId":"5E733E5C-8272-4D18-99C4-2862728F7E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.6:*:*:*:*:*:*","matchCriteriaId":"386FC0D1-38F1-491B-949C-65138E864C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.7:*:*:*:*:*:*","matchCriteriaId":"2C2EF1AA-77DF-424F-9473-4831ACE3F47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.8:*:*:*:*:*:*","matchCriteriaId":"2436626C-6214-4D73-923C-4BBD9148AE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:dev.9:*:*:*:*:*:*","matchCriteriaId":"4F59D4B7-77A5-487B-B9D7-ACCDC25BE03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.1:*:*:*:*:*:*","matchCriteriaId":"A311B404-6815-434F-9948-971E316AB08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.2:*:*:*:*:*:*","matchCriteriaId":"CF21426F-0A83-4CAA-B8FE-5D1140840792"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.3:*:*:*:*:*:*","matchCriteriaId":"A440FBED-FBE9-499C-AAEE-A476526B3862"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.4:*:*:*:*:*:*","matchCriteriaId":"8BED0DE4-DC20-44FF-A491-E22A59BED1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:pre.5:*:*:*:*:*:*","matchCriteriaId":"FB00EE41-8071-46BB-B783-F37B25072C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.5:rel.1:*:*:*:*:*:*","matchCriteriaId":"4E00B7BF-21AC-4E32-96ED-641A39C79326"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev1:*:*:*:*:*:*","matchCriteriaId":"ABB39A6E-973C-429D-9BAA-0B7A377F4679"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev10:*:*:*:*:*:*","matchCriteriaId":"C78F3CA3-2C11-4019-BF9D-2B2A3149BC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev11:*:*:*:*:*:*","matchCriteriaId":"210DDCD6-36E2-4B3F-9765-D7F3C8DB49E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev12:*:*:*:*:*:*","matchCriteriaId":"64BCE913-DB20-40A7-9BC2-984541F3535C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev13:*:*:*:*:*:*","matchCriteriaId":"2EFD0B54-67F6-4149-AF8A-191C550EF088"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev14:*:*:*:*:*:*","matchCriteriaId":"19C5642E-037F-4E75-8949-255F1368596D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev2:*:*:*:*:*:*","matchCriteriaId":"C45DF1C4-4B67-4773-BF03-E15C18CEFA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev3:*:*:*:*:*:*","matchCriteriaId":"962E0199-2154-4F10-A58E-753FA840A631"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev4:*:*:*:*:*:*","matchCriteriaId":"F16BA322-D764-4648-BB7C-3AD5E4F76CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev5:*:*:*:*:*:*","matchCriteriaId":"FA8D13D1-56BF-4237-A86F-9C270992D047"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev6:*:*:*:*:*:*","matchCriteriaId":"1A1A3227-4F30-49F1-947D-E20D7A4A4A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev7:*:*:*:*:*:*","matchCriteriaId":"E77E1F5A-8BEC-4126-98DB-25F53CD95085"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev8:*:*:*:*:*:*","matchCriteriaId":"F044F727-1BA7-4307-B237-48B5D0127CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx:lynx:2.8.6:dev9:*:*:*:*:*:*","matchCriteriaId":"B65566DF-BEE2-4808-A03E-685B931EF827"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:217","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:218","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/09/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0965.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021105","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46228","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11204","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00066.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00143.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0965.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00143.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4691","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service (segmentation violation and trap) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la función  SQLNLS_UNPADDEDCHARLEN en el componente New Compiler (también conocido como Starburst derived compiler)  en el servidor en IBM DB2 v9.1 anterior a FP6, permite a atacantes remotos provocar una denegación de servicio (violación de segmentación y \"trap\" -trampa-) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp5:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"F9BA9539-3A77-4C6B-9FA3-51BB55645AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI73364","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013892","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2893","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI73364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4692","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors."},{"lang":"es","value":"El componete Native Managed Provider para .NET en IBM DB2 v8 anterior a FP17, v9.1 anteior a FP6, y v9.5 anterior a FP2, cuando un \"definer\" no puede mantener objetos, conserva las vistas (Views) y los disparadores (triggers) sin señalarlos como desactivados/no operativos para su ejecución, lo que tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"8A94F484-424C-4DF3-9327-95CFC7B4A83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp5:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"F9BA9539-3A77-4C6B-9FA3-51BB55645AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"DED8AD3B-99A5-4531-8762-A80B22B05C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*","matchCriteriaId":"72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*","matchCriteriaId":"BB299EAB-31AA-4BAA-B477-0F909A8418AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*","matchCriteriaId":"6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4a:*:*:*:*:*:*","matchCriteriaId":"1CA96F81-E7BD-4BEB-9B4F-6CEA95B57742"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*","matchCriteriaId":"222C1B84-0C28-451F-BB02-4CB925263312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*","matchCriteriaId":"08177181-660C-4BF4-9031-74EE89297CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*","matchCriteriaId":"AB51AF7F-6D09-4EEE-AE8E-E6CCF06C28E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*","matchCriteriaId":"64BC5E59-361E-4343-9BB9-9772D47E57B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*","matchCriteriaId":"A2E1FC49-96AF-4933-BBE8-71DAEAEDD855"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*","matchCriteriaId":"0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*","matchCriteriaId":"56B7F547-3519-4A12-AB65-C1768153A7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*","matchCriteriaId":"FE9D14B8-5B4E-4D27-88B9-EBAC46D8282C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*","matchCriteriaId":"19584860-5ADF-4647-AF39-88C236407FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*","matchCriteriaId":"6669F847-ED6A-422F-85F7-DAF9B0159F01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*","matchCriteriaId":"20FE296C-25D0-4689-BAA3-AFCA2C1CC388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*","matchCriteriaId":"E8D354AD-995D-4FC8-A7C4-7860549A1634"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22287","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013892","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2893","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46021","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4693","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T18:00:01.363","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading \"PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES.\""},{"lang":"es","value":"El componente SORT/LIST SERVICES en IBM DB2 v9.1 anterior a FP6 y v9.5 anterior a FP2 escribe información sensible en la salida del trazado (trace), lo que permite a atacantes obtener información sensible mediante la lectura de \"PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp5:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"F9BA9539-3A77-4C6B-9FA3-51BB55645AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"DED8AD3B-99A5-4531-8762-A80B22B05C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32368","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ23915","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28489","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013892","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2893","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46022","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ23915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4694","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.387","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL."},{"lang":"es","value":"Vulnerabilidad no especificada en Opera antes de la v.9.60 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante una redirección que especifica una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta1:*:*:*:*:*:*","versionEndIncluding":"9.60","matchCriteriaId":"365BA246-E3EE-4A6C-A526-F5604464ED93"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021016","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/901/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31631","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2765","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45722","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/901/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4695","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.403","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context."},{"lang":"es","value":"Opera versiones anteriores a v9.60 permite a atacantes remotos obtener información sensible y tener otros impactos desconocidos prediciendo la ruta de la caché de un applet de Java cacheado y entonces lanzar este applet desde la caché, llevando a cabo la ejecución del applet dentro del contexto de la máquina local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:beta_1:*:*:*:*:*:*","versionEndIncluding":"9.60","matchCriteriaId":"76CE040A-2200-48A9-946C-083649A1E681"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"1CBC39B3-4106-4B28-8AFB-4F4B5B5119D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"763CEF7F-AAB2-4C16-BDC2-E5F864111592"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"B66F0EC7-452C-4847-B028-5086FE657440"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"5F966486-485B-4B0D-9BE1-F1D39CB08863"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"A32E4272-6CEF-4C1C-BDA2-96863E8301DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*","matchCriteriaId":"47B21D05-A906-44B5-AEDA-73D383B905E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*","matchCriteriaId":"E0BA115B-C42E-4794-90BC-778B0C85CE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*","matchCriteriaId":"7C0F2643-923D-4072-B5A4-6321066C3AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*","matchCriteriaId":"4500A623-BD2C-461A-B862-2C51BD25BE71"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"63114EE0-54F7-4418-9B9E-C37BB2869F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CF5C9CB9-6396-415D-AC64-312F47A76177"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"C8F3056A-14B5-411F-8FE8-80AF5605001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4CF6B223-8575-40C7-9EDA-BDDCF6ABDBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*","matchCriteriaId":"BB1B176A-1200-4E75-BFC0-AA5F87E2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*","matchCriteriaId":"911B0336-02CE-426C-ABFF-8CFD3BC146CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"790C5B0D-9A06-4C0C-BBBF-9B4C17857213"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*","matchCriteriaId":"620666CE-AABB-4A36-9566-425F2C810F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*","matchCriteriaId":"E751386F-0179-4BE7-9F46-66455EAFB1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*","matchCriteriaId":"6A7D9843-8967-4E36-9609-4497EECB2842"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*","matchCriteriaId":"16F85686-88F9-412C-9105-F94D4D4D61FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"1646DDF9-C217-4EF6-83D0-8F0CB2A16E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*","matchCriteriaId":"29DDD7BF-9265-4202-93C1-98FAEC336190"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*","matchCriteriaId":"089A088C-6DAE-4335-AD14-DACE64641A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.52:*:*:*:*:*:*:*","matchCriteriaId":"FB8DBBA4-B5A1-41FC-9E09-7D2397383C49"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32177","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021017","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/960/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/902/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31643","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2765","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45723","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/960/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/902/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4696","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.433","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the \"optional fragment\"), which is not properly escaped before storage in the History Search database (aka md.dat)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Opera.dll de Opera versiones anteriores a v9.61 permite a atacantes remotos inyectar web script o HTML a través de identificadores ancla (también conocido como el \"fragmento opcional\"), el cual no escapa apropiadamente antes del almacenaje en la base de datos History Search (también conocido como md.dat)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","matchCriteriaId":"E55AA4C5-7075-4336-AFC0-F8981054F8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.6","matchCriteriaId":"70E481D9-4342-452F-84F9-45CA23E0E77A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*","matchCriteriaId":"DB0E448B-8A9C-44BF-AE29-D05900F6FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*","matchCriteriaId":"E751386F-0179-4BE7-9F46-66455EAFB1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*","matchCriteriaId":"6A7D9843-8967-4E36-9609-4497EECB2842"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*","matchCriteriaId":"16F85686-88F9-412C-9105-F94D4D4D61FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*","matchCriteriaId":"29DDD7BF-9265-4202-93C1-98FAEC336190"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*","matchCriteriaId":"089A088C-6DAE-4335-AD14-DACE64641A5A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4504","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/903/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31869","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6801","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/903/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4697","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks."},{"lang":"es","value":"La característica Fast Forward en Opera antes de la v9.61, cuando una página está en un marco, ejecuta un javascript: URL en el contexto de la última página en vez de la página que contiene esta URL, lo que permite a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.60","matchCriteriaId":"ECB2DEC1-B85B-4BC8-A524-DC2D7F16901F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/904/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31842","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46004","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/904/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4698","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.497","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds."},{"lang":"es","value":"Opera antes de la v9.61 no bloquea correctamente los scripts durante la previsualización de una fuente de noticias, lo que permite a atacantes remotos crear subscripciones de nuevas fuentes y leer los contenidos de fuentes aleatorias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.60","matchCriteriaId":"ECB2DEC1-B85B-4BC8-A524-DC2D7F16901F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/905/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31842","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46005","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/905/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4699","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T22:00:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en control ActiveX (PAWWeb11.ocx) en Peachtree Accounting 2004, permite a atacantes remotos ejecutar programas de su elección a través del método ExecutePreferredApplication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:peachtree_accounting:2004:*:*:*:*:*:*:*","matchCriteriaId":"B1395202-4D09-47C0-8647-70332D13C9B2"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2008/09/peachtree-accounting-is-not-safe.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31809","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4471","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31096","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020842","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45009","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6414","source":"cve@mitre.org"},{"url":"http://jbrownsec.blogspot.com/2008/09/peachtree-accounting-is-not-safe.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4700","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T22:00:00.857","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_pass cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en Libera CMS v1.12 y anteriores, cuando magic_quotes está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cookie \"libera_staff_pass\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12","matchCriteriaId":"8302A187-C1C6-4F05-9ABE-D17E732321FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:1.00:*:*:*:*:*:*:*","matchCriteriaId":"18CE1ECD-79A6-4C90-B68C-FA78BC55E8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"B34B39C1-5B70-4374-905C-F654F1363FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"042572E6-D520-405E-81AA-F371A38E10D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31102","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45011","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4701","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T22:00:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_user cookie parameter, a different vector than CVE-2008-4700.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en Libera CMS v1.12, cuando magic_quotes está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro para cookies \"libera_staff_user\". NOTA: el origen de esta información es desconocido. Los detalles se han obtenido a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12","matchCriteriaId":"8302A187-C1C6-4F05-9ABE-D17E732321FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:1.00:*:*:*:*:*:*:*","matchCriteriaId":"18CE1ECD-79A6-4C90-B68C-FA78BC55E8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"B34B39C1-5B70-4374-905C-F654F1363FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:liberiacms:liberia_cms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"042572E6-D520-405E-81AA-F371A38E10D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31102","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4702","sourceIdentifier":"cve@mitre.org","published":"2008-10-22T22:00:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) user[language] and (2) user[template] parameters to (a) init.inc.php, and (b) the user[language] parameter to isadmin.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en PhpWebGallery v1.3.4, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en los parámetros (1) user[language] y (2) user[template] al (a) init.inc.php, y el parámetro (b)user[language] al isadmin.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"2847007A-5F0B-457E-9D56-1570B59B1589"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45060","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6425","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4703","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.373","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php en BosDev BosNews v4.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro article."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosnews:4:*:*:*:*:*:*:*","matchCriteriaId":"18CE9C04-D232-4DBC-B009-438B0220FF55"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4474","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28778","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41806","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5446","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4704","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.683","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en SezHooTabsAndActions.php en SezHoo v0.1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mitre:sezhoo:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA5330E-CEB5-4C57-A3DE-AD4D90D2755F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4473","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31756","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45859","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6751","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4705","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.700","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en success_story.php en php Online Dating Software MyPHPDating permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phponlinedatingsoftware:myphpdating:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D07BAFC-5977-4C3E-84A9-E890F8A0AAC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32268","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4477","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31763","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45867","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6754","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4706","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en VBGooglemap Hotspot Edition 1.0.3, un módulo de vBulletin, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro mapid en una acción showdetails a (1) vbgooglemaphse.php y (2) mapa.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbgooglemap:1.0.3:*:hotspot:*:*:*:*:*","matchCriteriaId":"5D375CD7-F531-4BDC-9DA2-1B4B6D72E373"}]}]}],"references":[{"url":"http://secunia.com/advisories/32054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31453","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6593","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4707","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.747","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directories via a .. (dot dot) in the lien_2 parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en BbZL.PhP v0.92 permite a atacantes remotos tener acceso a directorios no autorizados mediante un .. (punto punto) en el parámetro \"lien_2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sylvain_pasquet:bbzl_php:0.92:*:*:*:*:*:*:*","matchCriteriaId":"BB91ED97-1505-4136-8DBE-FD6DCF246B80"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4493","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31464","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45497","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6617","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4708","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.763","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1."},{"lang":"es","value":"BbZL.PhP v0.92 permite a atacantes remotos evitar la autenticación y conseguir acceso administativo enviando la cookie phorum_admin_session a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sylvain_pasquet:bbzl.php:0.92:*:*:*:*:*:*:*","matchCriteriaId":"0EF1F174-71B5-43E9-B399-E973828AF0B4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31462","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45498","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6621","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4709","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.793","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news_read.php en Pilot Group (PG) eTraining permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilot_group:etraining:*:*:*:*:*:*:*:*","matchCriteriaId":"2A40DD3D-74E4-4852-BCD0-BE1E25F43093"}]}]}],"references":[{"url":"http://secunia.com/advisories/31969","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4496","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31455","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6613","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4710","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.810","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página stock quotes en Stock 6.x antes de 6.x-1.0, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:stock_module:6x:*:*:*:*:*:*:*","matchCriteriaId":"4B71E8DD-BB4F-48A7-8366-510A6BBC0DDA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/312923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31389","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45405","source":"cve@mitre.org"},{"url":"http://drupal.org/node/312923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4711","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Joovili v3.0 y anteriores, cuando magic_quotes está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"view.blog.php\", (2) \"view.event.php\", (3) \"view.group.php\", (4) \"view.music.php\", (5) \"view.picture.php\" y (6) view.video.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"5D8F4D40-E534-4E1E-B75F-B064C5258D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B27CAD2D-AC10-4FFD-90BA-20B92A1FB851"},{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"62B9373D-3D79-427B-BF21-623ACECB3E95"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31444","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45486","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6595","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4712","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.857","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the plugin parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en pages/showblog.php en LnBlog 0.9.0 y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro plugin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lnblog:lnblog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.0","matchCriteriaId":"A56535C7-91D4-4AC8-8027-642256FB2987"},{"vulnerable":true,"criteria":"cpe:2.3:a:lnblog:lnblog:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"198333C1-840F-4E27-A0C1-241E7FE76E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lnblog:lnblog:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"EEF4D1F1-F1D7-42C1-AE6A-B78BAB3460A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lnblog:lnblog:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C52BD363-746A-4AB2-9F3C-15185CA65E12"}]}]}],"references":[{"url":"http://secunia.com/advisories/32032","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31459","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4713","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.873","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands via the qID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php en 212cafe Board v0.07 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"qID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:212cafe:212cafeboard:0.07:*:*:*:*:*:*:*","matchCriteriaId":"EC34359D-76BE-4D68-AAB5-469321BE1EBF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4482","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31426","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45428","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6578","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4714","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.887","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies."},{"lang":"es","value":"Atomic Photo Album 1.1.0 pre4 no maneja correctamente las cookies apa_cookie_login y apa_cookie_password, lo que probablemente permita a atacantes remotos evitar la autentificación y obtener acceso de administrador mediante cookies modificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atomic_photo_album:atomic_photo_album:1.1.0:pre4:*:*:*:*:*:*","matchCriteriaId":"FAFA4F11-4FCF-4DC0-82EB-DC791F20F25C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4497","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31427","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6580","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4715","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T17:17:14.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Jpad (com_jpad) v1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jpad_project:jpad:1.0:*:*:*:*:joomla\\!:*:*","matchCriteriaId":"B8B450CF-AB28-4B3D-A801-B9A2D0A735BE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4485","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28923","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41983","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5493","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/4485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/28923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4716","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T20:00:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show.php en BitmixSoft PHP-Lance 1.52 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptdemo:php-lance:1.52:*:*:*:*:*:*:*","matchCriteriaId":"89D1F914-5178-40C0-93F8-2B0012ACEB42"}]}]}],"references":[{"url":"http://secunia.com/advisories/32027","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4500","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31446","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4717","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T20:00:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bannerclick.php en ZEELYRICS 2.0 permite a atacantes remotos ejecutar comandos SQL de su elección meddiante el parámetro adid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeelyrics:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D5FE79D1-1ED4-4F80-BE24-B8B58B07FCB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32020","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4479","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31449","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45508","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4718","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T20:00:01.247","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter, a different vector than CVE-2006-2156."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en help/mini.phpin X7 Chat v2.0.1 A1 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante una secuencia de salto de directorio en el parámetro help_file, un vector distinto que CVE-2006-2156."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:*:alpha_1:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"A4896C3F-DE40-4C5B-86B5-A5044E465F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"FEC03F78-787D-40D4-991D-FB9BA3AA755E"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.1.1b:*:*:*:*:*:*:*","matchCriteriaId":"377CCD11-EDF4-4906-BA22-343C79AEE922"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.1.2b:*:*:*:*:*:*:*","matchCriteriaId":"FAF439C9-889B-41A4-B7AC-1A6AFBBCB81D"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.2.0b:*:*:*:*:*:*:*","matchCriteriaId":"028EB15D-DCCA-4EA9-9BB0-44AFCBF29CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.0b:*:*:*:*:*:*:*","matchCriteriaId":"47A9F90B-3FDD-4CEC-882B-EC9657072F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.1b:*:*:*:*:*:*:*","matchCriteriaId":"380114DD-09AD-4A2E-A58A-98C91373FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.2b:*:*:*:*:*:*:*","matchCriteriaId":"3ADC9B27-A222-496B-B86E-093ED42DE291"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.3b:*:*:*:*:*:*:*","matchCriteriaId":"C7118CE2-E745-4DC4-BE17-2C1A135E263D"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.4b:*:*:*:*:*:*:*","matchCriteriaId":"58CB6A44-823A-4AA7-9F56-5344D8B4E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.5b:*:*:*:*:*:*:*","matchCriteriaId":"17916C46-6B28-4707-8FC0-6F1ADCBEEB5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"CEA6CF17-AEDE-45DD-8289-DDFA5E782F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B55245-6E89-4518-9235-C58420695C51"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4499","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45495","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6592","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6607","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4719","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T20:00:01.263","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter, a different vector than CVE-2008-4329."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en cms/classes/openengine/filepool.php en openEngine v2.0 beta2, cuando register_globals está activo, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro oe_classpath, una cuestión diferente a CVE-2008-4329."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openengine:openengine:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FDE504D6-382B-4E9C-A6C5-1C8E999CCF60"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4478","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31423","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45482","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6585","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4720","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T20:00:01.310","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) page/forums/bottom.php and (2) page/forums/category.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivo remoto en The Gemini Portal 4.7 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro lang a (1) page/forums/bottom.php y (2) page/forums/category.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arzdev:gemini_portal:4.7:*:*:*:*:*:*:*","matchCriteriaId":"5F1E5188-5F3E-4741-A6DF-FE1C2FB5B6B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32057","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4503","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31433","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45481","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6587","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4721","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T20:00:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting the PostCommentsAdmin cookie to \"logged.\""},{"lang":"es","value":"PHP Jabbers Post Comment 3.0 permite a atacantes remotos evitar la autentificación y obtener acceso de administración poniendo la cookie PostCommentsAdmin como \"logged\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_jabbers:post_comment:2.0:*:*:*:*:*:*:*","matchCriteriaId":"004416D1-2A6A-454B-9F8C-7578E63649B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/27991","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4502","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45503","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6625","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4722","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.527","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Integrated Lights-Out Manager (ILOM) v2.0.1.5 hsata v2.0.4.26 permite a usuarios autenticados remotos (1) acceder al procesador de servicio (SP) y provocar una denegación de servicio (apagado o reinicio), o (1) acceder al sistema operativo anfitrión y tener un impacto desconocido, a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:integrated_lights-out_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"FC722965-5E22-4F78-AA35-432A338BF382"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_6000_modular_system_with_chassis:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"F6286DD4-CBD6-4402-A67E-8900A72E8C3D"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_6048_modular_system_with_chassis:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"167AD900-02DF-4C45-82F7-DB7012CCFF69"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_8000_modular_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"0A0579FF-E060-432A-8C50-4D3C8393E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_8000p_modular_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"228364BF-C051-4761-A66B-B3785B22A1A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_t6320_server_module:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.6","matchCriteriaId":"61B2C3D4-64B8-4C5B-B474-BDBEDD213C15"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x6220_with_server_module_software:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"77692BFF-788B-4F6C-9AF3-C64FA9D45403"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x6250_with_server_module_software:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"FCC3D805-2B71-41FB-924F-748BD727097A"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x6450_with_server_module_software:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"EE822531-2970-4B7A-9D48-02C9A68486EB"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x8400:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"F9844042-A8A0-431E-ADC8-1A54C61D7963"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x8420:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"0065D280-4E56-4F06-A0F3-B95BF1314757"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x8440:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"830C9D5B-E79E-47A8-AD97-B528DC8F7B46"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_x8450:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"46DF25DB-F5E7-4C10-8BDA-4003DACD32BD"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x2250_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.1","matchCriteriaId":"8B2938AC-A611-475B-8D95-875783564C4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4100_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.5.1","matchCriteriaId":"3D28512E-AFEE-4F46-8A61-D189D04AFEF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4100m2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1","matchCriteriaId":"7C9E9C77-B261-4B99-A679-FA8CB5740256"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4140_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1","matchCriteriaId":"E3BD18FD-D761-474B-908B-9E8528720B23"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4150_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.0","matchCriteriaId":"485C37DB-70BB-431E-B331-35F21DCBC2B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4200_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.5.1","matchCriteriaId":"F5EC5948-5B38-4E68-B8BE-57630F55B7EE"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4200m2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1","matchCriteriaId":"AD67A9D7-0F55-4EBC-9227-84D4AD596CD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4240_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1","matchCriteriaId":"FE96FD96-2277-4F43-94B9-6A73D93F74AD"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4250_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.1","matchCriteriaId":"E6887994-F509-4CAC-8CA4-701ED5AE0C12"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4440_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1","matchCriteriaId":"1D087406-3BD5-4A35-A470-9C3DC2AC1D2E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4450_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1.0","matchCriteriaId":"9F2667E9-2BCD-4B6F-B26D-38244757492D"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4500_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.5","matchCriteriaId":"E8833C3C-9093-4014-8831-C82A5C585806"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4540_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.0","matchCriteriaId":"7D89240F-BAA6-48E4-82C6-FF113FAA4F31"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4600_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.4","matchCriteriaId":"4F24DE10-D999-4BE4-B55C-56F5B8095489"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x4600m2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1.2","matchCriteriaId":"00684E88-BD4A-4982-98A8-5D36C6C35598"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:*","versionEndIncluding":"cp3260_atca_blade_server","matchCriteriaId":"19F8D2B7-1E57-43E7-8B2B-49FFAAA9E255"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:*","versionEndIncluding":"t5220_server","matchCriteriaId":"89A8C663-21A6-48E7-ADB6-4404FC7468F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra:*:7.1.4a:*:*:*:*:*:*","versionEndIncluding":"t5440_server","matchCriteriaId":"5CAAAF29-0D17-4A57-8945-E862267F19FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_x4200m2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_2.1","matchCriteriaId":"FDAA3BBC-0B12-4E8B-9C91-7C27B49DAB50"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_x4250_server:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.1","matchCriteriaId":"C8316539-23C8-4145-941F-4D92F62D83C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_x4450:*:*:*:*:*:*:*:*","versionEndIncluding":"sw_1.1","matchCriteriaId":"A46A89DD-DEB7-4C49-B82F-6A29D2F01FC1"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5120:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.6","matchCriteriaId":"C47F9AF6-4F65-4A64-9463-7DD295F985FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5140:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.6","matchCriteriaId":"CC1A9D07-8FC3-4BDC-8B63-AD04324E94A2"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5220:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.6","matchCriteriaId":"DB69225C-45FB-418B-9C54-5D2D2479F9F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5240:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.6","matchCriteriaId":"11BB60D9-0E8C-493C-8567-EE9686E6A0F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5440:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.5b","matchCriteriaId":"55E017A5-0169-4D35-BDB8-65355E20ABF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31861","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021094","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2890","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4723","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.560","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Mozilla Firefox v3.0.1 hasta v3.0.3 permiten a atacantes remotos inyectar web script o HTML a través de una URL ftp:// de un documento HTML dentro de un fichero (1) JPG, (2) PDF, o (3) TXT.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a solamente a partir de la información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security flaw.  Firefox is handling the ftp:// URL as expected.","lastModified":"2009-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31855","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-4724","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.573","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Google Chrome v0.2.149.30 permiten a atacantes remotos inyectar web script o HTML a través de una URL ftp:// de un documento HTML dentro de un fichero (1) JPG, (2) PDF, o (3) TXT.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31855","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-4725","sourceIdentifier":"cve@mitre.org","published":"2008-10-23T22:00:01.590","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696.  NOTE: some of these issues were addressed before 9.60."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Opera.dll de Opera v9.52 permite a atacantes remotos inyectar web script o HTML a través de la cadena de consulta, la cual no está escapada adecuadamente antes de su almacenamiento en la base de datos History Search (también conocido como md.dat), un vector diferente a CVE-2008-4696.\r\nNOTA: alguna de estas cuestiones se nos enviaron antes de v9.60."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"}]}]}],"references":[{"url":"http://secunia.com/advisories/32299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4504","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/903/","source":"cve@mitre.org"},{"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6801","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/961/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/903/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497646/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4726","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T00:00:00.883","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long string to the (1) open (aka SSH_FXP_OPEN), (2) unlink, (3) opendir, and other unspecified parameters."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el subsistema SFTP de GoodTech SSH v6.4 permite a usuarios remotamente autentificados ejecutar código de su elección mediante una cadena larga a los parámetros (1) open (también conocido como SSH_FXP_OPEN), (2) unlink, (3) opendir y otros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goodtechsystems:goodtech_ssh:6.4:*:*:*:*:*:*:*","matchCriteriaId":"B889DC63-2911-4341-BAA1-2A5AD9436086"}]}]}],"references":[{"url":"http://secunia.com/advisories/32375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4498","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31879","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2895","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46038","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6804","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4727","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T00:00:00.917","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter.  NOTE: this might be resultant from a CSRF vulnerability, but there are insufficient details to be sure."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en la página de actualización del contacto ss/bwgkoemr.P_UpdateEmrgContacts) en SunGard Banner Student v7.3 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro addr1.\r\nNOTA: esto puede ser resultado de una vulnerabilidad CSRF, pero no hay suficientes detalles para asegurarlo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sungard:banner_student:7.3:*:*:*:*:*:*:*","matchCriteriaId":"EA0EC2A4-D3B2-4580-B330-FFAAA2668797"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27490.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/41077","source":"cve@mitre.org"},{"url":"http://osvdb.org/41078","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4494","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487250/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27490","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27490.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487250/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4728","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T00:00:00.947","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method.  NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders."},{"lang":"es","value":"Múltiples vulnerabilidades debido a un procedimiento inseguro en el control ActiveX DeployRun.DeploymentSetup.1 (DeployRun.dll) v10.0.0.44 in Hummingbird Deployment Wizard 2008 que permite a atacantes remotos ejecutar programas a su elección a través de los métodos de (1) Run y (2) PerformUpdateAsync y (3) modificación arbitraria de los valores del registro a traves del metodo SetRegistryValueAsString. NOTA: El método SetRegistryValueAsString podria activar la ejecución de código especificando valores de ficheros ejecutables de las carpetas de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:deployment_wizard:2008:*:*:*:*:*:*:*","matchCriteriaId":"CE81D1A0-679A-4B44-8D73-4E44CC55C9A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31799","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2857","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45961","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6773","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6774","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/2857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4729","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T00:00:00.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property.  NOTE: code execution might not be possible in 13.0."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en el control ActiveX de Hummingbird.XWebHostCtrl.1(hclxweb.dll) en Hummingbird Xweb ActiveX Control v13.0 y anteriores que permite a atacantes remotos ejecutar código de su elección a traves de la propiedad PlanTextPassword. NOTA: La ejecución de código podria no ser posible en la v13.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:*:*:*:*:*:*:*:*","versionEndIncluding":"13.0","matchCriteriaId":"044CA4D8-ACF2-4CDC-A51B-0FC63DAC4918"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C3F1215-D202-4783-A350-5E27952D7620"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:10.0:*:*:*:*:*:*:*","matchCriteriaId":"8742368E-B84F-444D-B791-7920028F0798"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:2006:*:*:*:*:*:*:*","matchCriteriaId":"61317B48-4B10-46D0-B37C-60CDAC9FAE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:2007:*:*:*:*:*:*:*","matchCriteriaId":"8C73870B-FD87-4628-9F22-23554D7BB9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed_powersuite:*:*:*:*:*:*:*:*","matchCriteriaId":"97D9D378-3C28-4D1F-9D86-7AAE4C04F005"}]}]}],"references":[{"url":"http://secunia.com/advisories/32319","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4505","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31783","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45941","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4730","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:00.847","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_trust_root parameter and an inconsistent openid_return_to parameter, which is not properly handled in an error message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MyID.php en phpMyID v0.9 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"openid_trust_root\" y el parámetro \"inconsistent openid_return_to\", que no son manejados correctamente en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyid:phpmyid:0.9:*:*:*:*:*:*:*","matchCriteriaId":"F7B73E64-4690-4AD0-BD48-D83CBFA49A80"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496930/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496930/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4731","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en YaCy versiones anteriores a v0.61 tienen un impacto desconocido y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:*:*:*:*:*:*:*:*","matchCriteriaId":"BFC8EB48-88DB-4393-87E6-B08FD77024F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:*:*:*:*:*:*:*:*","versionEndIncluding":"0.60","matchCriteriaId":"B71C055F-02BF-49AA-9A05-58AAC3EA9910"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:*","matchCriteriaId":"CD51396A-60D6-411F-8A6D-A665D7F086E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:*","matchCriteriaId":"5615D5BE-70CE-4C42-862D-E4EC8E7FCAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:*","matchCriteriaId":"2AA76E5A-0CE8-422F-8C45-4A431BCDFB0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:*","matchCriteriaId":"B16AE207-B9D3-469D-9102-9699F37F05A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:*","matchCriteriaId":"AA2398A7-2BC8-4D61-8A96-6B2733F969B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:*","matchCriteriaId":"855B5A40-BA77-4C7B-BEA0-D1BC2CB16E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:*","matchCriteriaId":"467CB8FF-3022-4294-AB4F-EFFF0637A553"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:*","matchCriteriaId":"CF09D549-C540-428C-B616-1709C7224C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:*","matchCriteriaId":"C92E2772-A440-43B1-9897-075AB8C07310"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:*","matchCriteriaId":"8CF6FE0C-54A0-42B9-A960-866A111B7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:*","matchCriteriaId":"B40D1222-0DA2-409E-B53C-F2C6910FF32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:*","matchCriteriaId":"2179CD5C-59F5-4FF6-8C00-44DBBC15D084"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:*","matchCriteriaId":"CE1DDC0E-8146-4F48-B672-28CB8E4A337A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:*","matchCriteriaId":"D740CD27-9692-43E8-950E-1EBC4367C7E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:*","matchCriteriaId":"04EFD8AB-4884-4FA8-8607-69104BB25976"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:*","matchCriteriaId":"AFA08BCA-2EAD-40D3-82D9-534B09F32F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:*","matchCriteriaId":"1D0A9201-C5E9-4FBF-8C33-16B3EF4C1063"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:*","matchCriteriaId":"AE9614DD-D293-49BC-86AE-31EDEC60E348"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:*","matchCriteriaId":"8A191F6A-15F7-4EAD-B784-A716CA2410A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.32:*:*:*:*:*:*:*","matchCriteriaId":"0242312C-79C6-435E-9F94-BD0345F8B71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.33:*:*:*:*:*:*:*","matchCriteriaId":"20C38084-2743-489F-B264-DCDE9784915D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.34:*:*:*:*:*:*:*","matchCriteriaId":"A96448FF-9070-460A-9885-E37E4E3BB324"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.35:*:*:*:*:*:*:*","matchCriteriaId":"0AB0EC2A-8F8F-4342-9366-9906780BE32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.36:*:*:*:*:*:*:*","matchCriteriaId":"F4345FDB-2083-4118-B2D6-1AA59671EE0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.37:*:*:*:*:*:*:*","matchCriteriaId":"5041F801-BF16-467E-A125-97BA4B148A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.38:*:*:*:*:*:*:*","matchCriteriaId":"6D756689-4FDC-4926-90B6-5736115CF64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.39:*:*:*:*:*:*:*","matchCriteriaId":"B07AB575-30F5-4767-9EEC-16F7DD5B0296"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.40:*:*:*:*:*:*:*","matchCriteriaId":"97FCE355-0C3F-4D9F-A725-AF67180417E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.41:*:*:*:*:*:*:*","matchCriteriaId":"54894E01-F1FF-4B86-AD23-7DD3F491B751"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.42:*:*:*:*:*:*:*","matchCriteriaId":"26376624-BDA1-47C7-90E8-7D93E347BD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.43:*:*:*:*:*:*:*","matchCriteriaId":"EF9CEB39-0AD8-4211-84D7-4389C4DBBCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.44:*:*:*:*:*:*:*","matchCriteriaId":"AD6A4AA1-6755-4C97-93EA-986C14BF6EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.45:*:*:*:*:*:*:*","matchCriteriaId":"991938C5-22D5-4CF2-99B4-D0E913E2DD3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.46:*:*:*:*:*:*:*","matchCriteriaId":"C94F9A4B-556C-4D4E-8398-DEC1C1663B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.47:*:*:*:*:*:*:*","matchCriteriaId":"7E038EDC-D535-4349-ABBF-BF1339E244A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.48:*:*:*:*:*:*:*","matchCriteriaId":"C0293003-7D2E-47E3-A007-DC11310A409B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.49:*:*:*:*:*:*:*","matchCriteriaId":"65D29B58-7F11-4F50-9D56-EE9C81FC7A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.50:*:*:*:*:*:*:*","matchCriteriaId":"70B8E74E-C313-423E-87A7-9BBC4812D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.51:*:*:*:*:*:*:*","matchCriteriaId":"7B4749CF-EF79-4A61-A6A1-357E9231E5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.52:*:*:*:*:*:*:*","matchCriteriaId":"213700FC-C1DD-41F2-AAE0-51F2513CFC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.53:*:*:*:*:*:*:*","matchCriteriaId":"6D043938-C389-4E93-B9C6-3C18C2F20E00"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.54:*:*:*:*:*:*:*","matchCriteriaId":"B2B16DD6-1053-4074-9DA3-EDB4B9D8BB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.55:*:*:*:*:*:*:*","matchCriteriaId":"DB0C156A-664E-483B-A0E4-80DDD7CA8516"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.56:*:*:*:*:*:*:*","matchCriteriaId":"519BF8AF-E54C-4710-BD73-04F207497DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.57:*:*:*:*:*:*:*","matchCriteriaId":"1E7A9B62-1440-492F-99D9-82E756327723"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.58:*:*:*:*:*:*:*","matchCriteriaId":"C55A0E0A-9C26-4F11-9BAD-30740F70B0E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.59:*:*:*:*:*:*:*","matchCriteriaId":"D35907B6-75B1-4A9A-ABB7-376A858DF890"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:*","matchCriteriaId":"6847C171-862E-4DDF-BBDE-C463ED743BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:*","matchCriteriaId":"EC57CC4A-F535-42F7-9F73-113A7577621E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:*","matchCriteriaId":"381A6A3C-8860-41BC-A65D-97CC95112618"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:*","matchCriteriaId":"06D988EA-94ED-4AFF-B3FD-CDD9E898183C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:*","matchCriteriaId":"349E575E-E47A-48CF-9290-50BFABBF0D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:*","matchCriteriaId":"E739D42E-096C-4C51-B64D-0C41E20514C2"}]}]}],"references":[{"url":"http://freshmeat.net/projects/yacy/?branch_id=51198&release_id=286006","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32159","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31657","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45769","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/yacy/?branch_id=51198&release_id=286006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4732","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:00.923","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ajax_comments.php en el plugin WP Comment Remix versiones anteriores a v1.4.4 para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"q\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pressography:wp_comment_remix_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"315D7262-1A75-4004-980F-DF7A4DEE3C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pressography:wp_comment_remix_plugin:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D6CF79C4-B5D3-4C24-84DB-51455C622A8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://chxsecurity.org/advisories/adv-3-full.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497313/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31750","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45860","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6747","source":"cve@mitre.org"},{"url":"http://chxsecurity.org/advisories/adv-3-full.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497313/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4733","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:00.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en wpcommentremix.php en el plugin WP Comment Remix versiones anteriores a v1.4.4 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"replytotext\", (2) \"quotetext\", (3) \"originallypostedby\", (4) sep, (5) \"maxtags\", (6) \"tagsep\", (7) tagheadersep, (8) \"taglabel\", y (9) \"tagheaderlabel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pressography:wp_comment_remix_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"315D7262-1A75-4004-980F-DF7A4DEE3C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pressography:wp_comment_remix_plugin:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D6CF79C4-B5D3-4C24-84DB-51455C622A8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://chxsecurity.org/advisories/adv-3-full.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497313/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31750","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45861","source":"cve@mitre.org"},{"url":"http://chxsecurity.org/advisories/adv-3-full.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497313/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4734","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:00.970","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidden_form_input parameter."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la función wpcr_do_options_page en WP Comment Remix versiones anteriores a v1.4.4 plugin para WordPress permite a atacantes remotos realizar acciones no autorizadas como si fueran administradores mediante una petición para fijar el parámetro \"wpcr_hidden_form_input\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pressography:wp_comment_remix_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"315D7262-1A75-4004-980F-DF7A4DEE3C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pressography:wp_comment_remix_plugin:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D6CF79C4-B5D3-4C24-84DB-51455C622A8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://chxsecurity.org/advisories/adv-3-full.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497313/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45862","source":"cve@mitre.org"},{"url":"http://chxsecurity.org/advisories/adv-3-full.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497313/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4735","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:00.987","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en header.php en Concord Asset, software, y Ticket system (CoAST) v0.95 permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro \"sections_file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coastal:coast:0.95:*:*:*:*:*:*:*","matchCriteriaId":"177EB373-6A41-4892-A86A-5EAAF4A63C0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32050","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31461","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4736","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the showtopic parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en RPG.Board v0.8 Beta2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"showtopic\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:*:beta_2:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"51F24E16-ABD8-4796-8C0A-F17B2898BF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:0.0.8:beta_2:*:*:*:*:*:*","matchCriteriaId":"36B8E9A1-93E7-4563-9525-1FDD4BA712F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:0.8:beta_1:*:*:*:*:*:*","matchCriteriaId":"65D1D9FB-0047-42CE-A142-AF45E5BB659C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122244414700901&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4483","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31417","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45444","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6589","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122244414700901&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4737","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:01.033","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the dom parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en wholite.cgi en WhoDomLite v1.1.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"dom\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noc2:whodomlite:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B58050E4-C9D9-4F98-AFF6-4D051528508A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31436","source":"cve@mitre.org"},{"url":"http://www.tryag.com/cc/showthread.php?t=27577","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://yee7.com/forums/showthread.php?p=8021","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/32085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tryag.com/cc/showthread.php?t=27577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://yee7.com/forums/showthread.php?p=8021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]}]}},{"cve":{"id":"CVE-2008-4738","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:01.067","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gallery.php en MyCard v1.0.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tufat:mycard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3690064F-F34C-44AD-8B13-87F7B3F72FA1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4476","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31447","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4739","sourceIdentifier":"cve@mitre.org","published":"2008-10-24T10:30:01.080","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the navi parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en PlugSpace v0.1, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección utilizando los caracteres .. (punto punto) en el parámetro \"navi\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plugspace:plugspace:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4C5738E6-1BBA-4898-91CE-2BD71278AB43"}]}]}],"references":[{"url":"http://secunia.com/advisories/32033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31457","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4740","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.240","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the config[template] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en templater.php del módulo ZZ_Templater de TinyCMS v1.1.2; cuando está habilitado register_globals y está deshabilitado magic_quotes_gpc. Permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro config[template]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinycms:tinycms:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"04EFBDC9-2F8C-426A-B475-0C714CF5D8B8"}]}]}],"references":[{"url":"http://1scripts.net/php-scripts/index.php?p=6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31569","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30785","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44596","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6287","source":"cve@mitre.org"},{"url":"http://1scripts.net/php-scripts/index.php?p=6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4741","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.270","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de FAR-PHP v1.00, cuando está deshabilitado magic_quotes_gpc; permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro \"c\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:far-php:far-php:1.00:*:*:*:*:*:*:*","matchCriteriaId":"FF62150B-2413-4C66-9667-448564017E25"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121933211712734&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31563","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495672/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30781","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44606","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121933211712734&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495672/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4742","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.303","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) password and (2) user_name parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de Secuencias de Comandos en Sitios Cruzados (XSS) en interface/Login.php de TimeTrex v2.2.11; permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) password (contraseña) y (2) user_name (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:timetrex:timetrex:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"3CF742BD-5888-4421-B0F9-D603F9AECEBC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-08/0224.html","source":"cve@mitre.org"},{"url":"http://www.hackerscenter.com/index.php?/HSC-Research-Group/Advisories/HSC-TimeTrex-Time-and-Attendance-Cookie-Theft.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495643/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495660/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30789","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44601","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-08/0224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hackerscenter.com/index.php?/HSC-Research-Group/Advisories/HSC-TimeTrex-Time-and-Attendance-Cookie-Theft.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495643/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495660/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4743","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de QuidaScript FAQ Management Script; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quidascript:faq_management_script:*:*:*:*:*:*:*:*","matchCriteriaId":"B40C0908-5853-443F-B121-DB93C9B8D51D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32052","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0808-exploits/faqman-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30775","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0808-exploits/faqman-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4744","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product_detail.php de DXShopCart v4.30mc; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxproscripts:dxshopcart:4.30mc:*:*:*:*:*:*:*","matchCriteriaId":"474AE45C-573A-4CDA-BB52-53448171D9E1"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0808-exploits/dxshopcart-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30772","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44582","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0808-exploits/dxshopcart-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4745","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.380","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en emailFriend.asp en Uniwin eCart Professional v2.0.17; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uniwin:ecart_professional:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"BCC1019C-F2F5-4855-96C2-D4B9052B3F97"}]}]}],"references":[{"url":"http://secunia.com/advisories/31545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.uniwin.com/eCart_revisions.asp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44610","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.uniwin.com/eCart_revisions.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4746","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T17:21:27.397","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) search.asp and (2) cartUtil.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Uniwin eCart Professional v2.0.17; permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados en (1) search.asp y (2) cartUtil.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uniwin:ecart_professional:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"BCC1019C-F2F5-4855-96C2-D4B9052B3F97"}]}]}],"references":[{"url":"http://secunia.com/advisories/31545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.uniwin.com/eCart_revisions.asp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.uniwin.com/eCart_revisions.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4747","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:01.647","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica de búsqueda de Sun Java System LDAP JDK anterior a v4.20; permite a atacantes dependientes del contexto obtener información sensible a través de vectores de ataque desconocidos relacionados con la biblioteca LDAP JDK."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_system_ldap_jdk:*:unknown:linux:*:*:*:*:*","versionEndIncluding":"4.19","matchCriteriaId":"B46CA181-A0B3-40FA-A5DE-166CE5162521"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_system_ldap_jdk:*:unknown:sparc:*:*:*:*:*","versionEndIncluding":"4.19","matchCriteriaId":"37EF57D7-1BB2-4E71-A787-6A9AFE34DF92"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_system_ldap_jdk:*:unknown:x86:*:*:*:*:*","versionEndIncluding":"4.19","matchCriteriaId":"13E65DCD-A796-4F50-A80F-8A5528598D7E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_access_manager:6:2005q1:*:*:*:*:*:*","matchCriteriaId":"B4B0ABF7-C898-4643-9A6B-7A58BC0003D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_access_manager:7:2005q4:*:*:*:*:*:*","matchCriteriaId":"116D1FC8-4360-400C-8F38-E9EE3F4F6480"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_access_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CE2CCD34-D8C6-4C67-9BA2-9E4B0984EF1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242246-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31905","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021103","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242246-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4748","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:01.677","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the irc:// URI."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en el manejador URI de KVirc v3.4.0, cuando se configura como la aplicación por defecto para procesar IRC URIs; permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) y puede que ejecutar código de su elección a través de unos especificadores de formato de cadena en la URI irc://."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kvirc:kvirc:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B91ED333-CB47-401A-894B-4A1CF5AED8E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32410","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31912","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2926","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46114","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6832","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4749","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:04.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via (1) the LogFile property and ClearLogFile method, and (2) the SaveToFile method."},{"lang":"es","value":"Múltiples vulnerabilidades debido a un procedimiento inseguro en el control ActiveX de VImpX.VImpAX (VImpX.ocx) v4.8.8.0 y puede que v4.7.7 en DB Software Laboratory VImp X; permiten a atacantes remotos sobrescribir ficheros de su elección a través de (1) la propiedad LogFile y el método ClearLogFile y (2) el método SaveToFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:db_soft_lab:vimp_x:4.8.8.0:*:*:*:*:*:*:*","matchCriteriaId":"41764932-E1B7-4CA4-A947-37DFFE9FBFB6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4509","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31907","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46096","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6828","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4750","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:04.693","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en el control ActiveX de VImpX.VImpAX (VImpX.ocx) v4.8.8.0 y puede que también en v4.7.7, en DB Software Laboratory VImp X; permite a atacantes remotos ejecutar código de su elección a través de una propiedad larga \"LogFile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dbsoftlab:vimp_x:4.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7D3AE26A-1E53-48FB-AC82-9D9D7F895A40"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4509","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46095","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6828","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4751","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:04.710","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de iPei Guestbook v2.0; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro \"pg\". Se trata de una vulnerabilidad diferente de CVE-2005-4597."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epistream:ipei_guestbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"ADB832B5-B31B-42F3-BC7E-BD6EF516A121"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/ipei-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32429","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4510","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497783/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31911","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2920","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46111","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/ipei-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497783/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4752","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:04.740","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNews_login cookie to admin."},{"lang":"es","value":"TlNews 2.2 permite a atacantes remotos evitar la autenticación y obtener acceso como administrador modificando la cookie \"tlNews_login\" a admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tech_logic:tlnews:2.2:*:*:*:*:*:*:*","matchCriteriaId":"97AAB1F5-65D2-41DB-B1EE-6664B1AFF0EF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31919","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46116","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4753","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:04.757","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en EditUrl.php de AJ Square RSS Reader; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"url\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square_inc:rss_reader:*:*:*:*:*:*:*:*","matchCriteriaId":"27722D3F-CC2B-45E1-9E13-951E48537E86"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4512","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31910","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46088","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6829","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4754","sourceIdentifier":"cve@mitre.org","published":"2008-10-27T20:00:04.787","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum.php de Scripts for Sites (SFS) Ez Forum; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"forum\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_forum:*:*:*:*:*:*:*:*","matchCriteriaId":"028C4637-881A-46C8-A4FF-0B032CF18DE1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2922","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4755","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gotourl.php de PozScripts Classified Auctions Script; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pozscripts:classified_auctions_script:*:*:*:*:*:*:*:*","matchCriteriaId":"AE842F26-00B5-4295-95EA-237DF2AD11B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4521","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31925","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2923","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46112","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4756","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.013","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo add_prest_date.php en PHP-Daily, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro date."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-daily:php-daily:*:*:*:*:*:*:*:*","matchCriteriaId":"13A03C9A-402A-459C-AE32-D331B81958FB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46128","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4757","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) add_postit.php (b) delete.php, and (c) mod_prest_date.php; and the (2) prev parameter to (d) prest_detail.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHP-Daily, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) parámetro id en los archivos (a) add_postit.php (b) delete.php, y (c) mod_prest_date.php; y el (2) parámetro prev en el archivo (d) prest_ detail.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-daily:php-daily:*:*:*:*:*:*:*:*","matchCriteriaId":"13A03C9A-402A-459C-AE32-D331B81958FB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46125","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4758","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. (dot dot) in the fichier parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo download_file.php en PHP-Daily, permite a los atacantes remotos leer archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro fichier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-daily:php-daily:*:*:*:*:*:*:*:*","matchCriteriaId":"13A03C9A-402A-459C-AE32-D331B81958FB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46126","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6833","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4759","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. (dot dot) in the id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php de BuzzyWall v1.3.1; permite a atacantes remotos leer ficheros locales de su elección a través de un .. (punto punto) en el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:buzzscripts:buzzywall:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C3D3A669-1CF4-4E68-B07D-C490B5D7D823"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31914","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2925","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46123","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6835","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4760","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.123","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lecture.php de Graphiks MyForum v1.3, cuando está habilitado register_globals; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphiks:myforum:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6593767F-16EC-4BC5-8FD7-3C9D090540AE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4519","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31926","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2921","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46124","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6844","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4761","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this issue is probably in the HTMLArea HTMLTidy (HTML Tidy) plugin, not eSupport."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados en includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php en Kayako eSupport v3.20.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro jsMakeSrc. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros. NOTA: esta cuestión es probable que sea del plugin HTMLArea HTMLTidy (HTML Tidy), no de eSupport."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:3.20.2:*:*:*:*:*:*:*","matchCriteriaId":"DD18B13B-2104-481F-8B71-B847D81A668D"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31908.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31908","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46097","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4762","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:00:04.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary code via a long argument to the (1) rename and (2) realpath parameters."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en freeSSHd 1.2.1, permite a usuarios autenticados remotamente provocar una denegación de servicio (caída de servicio) y seguramente la ejecución de código de su elección a través de un argumento largo a los parámetros (1) rename y (2) realpath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freesshd:freesshd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F810FB16-1D91-4996-BD80-39E5ED9FD951"}]}]}],"references":[{"url":"http://secunia.com/advisories/32366","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4515","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497746/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31872","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021096","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2897","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46046","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6800","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497746/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4763","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:03:37.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHP_SELF variable."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en sample.php en WiKID wClient-PHP v3.0-2 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de la variable PHP_SELF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikidsystems:wclient-php:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0-2","matchCriteriaId":"308EC672-B7D5-4C7B-936F-BDE8E443B8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikidsystems:wclient-php:3.0-1:*:*:*:*:*:*:*","matchCriteriaId":"C75BA5B9-AACF-484B-9878-D691C60864ED"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4514","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490768/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28740","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41791","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490768/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4764","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:03:38.003","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter in a show_error action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el módulo eXtplorer (com_extplorer) v2.0.0 RC2 y anteriores en  Joomla! permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"dir\" en una acción show_error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"B09444F5-5AF0-433C-936B-9B2F697A6427"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28764","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41873","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5435","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4765","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:03:38.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pollBooth.php de osCommerce Poll Booth Add-On v2.0; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pollID en una operación \"results\" (resultado). NOTA: Esta vulnerabilidad ha sido reportada por un investigador de poca confianza, por lo que puede tener incorrecciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:poll_booth:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3861856F-3F30-496C-BD44-166774B6829F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oscommerce:online_merchant:*:*:*:*:*:*:*:*","matchCriteriaId":"2BA6507A-8902-4818-8408-188544AEE9B4"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0804-exploits/pollbooth20-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28752","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41796","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5436","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0804-exploits/pollbooth20-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4766","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T02:03:38.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in member.php in Oxygen Bulletin Board 1.1.3 allows remote attackers to execute arbitrary SQL commands via the member parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  member.php en Oxygen Bulletin Board v1.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"member\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:o2php:oxygen_bulletin_board:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"12A80FE9-AE3E-4043-91E5-31E4F8C5EE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:o2php:oxygen_bulletin_board:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA5A823-BBC2-4B1F-9DB0-CA949E0ED915"},{"vulnerable":true,"criteria":"cpe:2.3:a:o2php:oxygen_bulletin_board:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F678AA6-F8FD-46DD-BB36-B619EDADBD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:o2php:oxygen_bulletin_board:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5405E52D-4062-43E0-B072-C06B221CF67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:o2php:oxygen_bulletin_board:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"044AF5A1-38A9-4C4A-9E67-33D527F9F4D8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28651/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28651/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4767","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T10:30:01.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with (1) .htm, (2) .html, or (3) .txt extensions, then accessing it via a direct request to the file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: it is unclear how allowing the upload of .html or .txt files supports arbitrary code execution; this might be legitimate functionality."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en el módulo DownloadsPlus en PHP-Nuke, permite a atacantes remotos ejecutar código de su elección a través la subida de ficheros con la extensión (1) .htm, (2) .html, o (3) .txt y después accediendo a ellos mediante una petición directa al archivo. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos de terceros. NOTA: no está claro cómo permitiendo la subida de archivos .txt o .html se permite la ejecución arbitraria de código; es posible que sea una funcionalidad legítima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:downloadsplus_module:*:*:*:*:*:*:*:*","matchCriteriaId":"35710335-96F5-46A9-9848-0BE9B7732DDD"}]}]}],"references":[{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28919.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28919","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42007","source":"cve@mitre.org"},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28919.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4768","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T10:30:01.277","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parameter to a-b-membres.php.  NOTE: the goodies.php vector is already covered by CVE-2007-4808.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en TLM CMS v3.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"nom\" al a-b-membres.php. NOTA:el vector goodies.php actualmente está cubierto por CVE-2007-4808. NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tlm_cms:tlm_cms:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A5AB4510-ECBE-4356-ACAE-39FA3EDF0C11"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28837/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41923","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28837/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4769","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T10:30:01.290","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función get_category_template  en  wp-includes/theme.php en WordPress v2.3.3 y anteriores y v2.5, permite a atacantes remotos incluir y posiblemente ejecutar archivos PHP de su elección a través del parámetro \"cat\" en index.php. NOTA: parte de estos detalles han sido obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.3","matchCriteriaId":"BC7D93B4-23A0-457E-B68C-BC6DDD1DB6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*","matchCriteriaId":"C3C33D37-2FFF-4DE5-B260-E090F4E6377B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"3E4139FE-7C43-44AC-856F-226E1194D936"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*","matchCriteriaId":"FC499ABC-D1A6-4A9B-A06B-12C8275462DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*","matchCriteriaId":"5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*","matchCriteriaId":"056E641C-9322-4BEE-97B4-FE16DE8D7336"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*","matchCriteriaId":"ADB42CEF-E12D-4DB0-8536-FD393D3697A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*","matchCriteriaId":"C4AF89F9-AE67-49B5-ACF0-3A645C454E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*","matchCriteriaId":"FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*","matchCriteriaId":"C516C041-B945-4992-8104-E20B3B6CECDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E85A88D7-07A1-4A8C-88B5-057AD9C675E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*","matchCriteriaId":"AFBD4E49-EA17-4FFD-AF9C-950E542555A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*","matchCriteriaId":"6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*","matchCriteriaId":"4C4229BC-1646-4202-92B8-FC718D557518"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*","matchCriteriaId":"947635DB-A86E-45F0-B946-559202C49503"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEABEFD-E248-42B7-B99E-FFDEE27F7064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:*","matchCriteriaId":"46B86AD1-967D-4C8E-BD31-C2A2197B1E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4801D56C-5ED6-4648-A0C9-EB4D06786A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.wordpress.org/changeset/7586","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"http://www.juniper.fi/security/auto/vulnerabilities/vuln28845.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28845","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.wordpress.org/changeset/7586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.juniper.fi/security/auto/vulnerabilities/vuln28845.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4771","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T19:20:14.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX VATDecoder.VatCtrl.1 en (1) 4xem VatCtrl Class (VATDecoder.dll v1.0.0.27 y v1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll v1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll v2.0.0.39), y posiblemente otros productos, permite a atacantes remotos ejecutar código de su elección a través de una propiedad de la URL larga.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4xem:vatctrl_class:1.0.0.27:*:*:*:*:*:*:*","matchCriteriaId":"0C84A5CF-EA18-4FB7-B925-6AC7287B5D7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4xem:vatctrl_class:1.0.0.51:*:*:*:*:*:*:*","matchCriteriaId":"E3F35DBA-B6F2-44DE-8E2E-61975A41A03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:d-link:mpeg4_shm_audio_control:1.7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C9872084-A125-4AAA-9E44-D333B5E58B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivotek:rtsp_mpeg4_sp_control:2.0.0.39:*:*:*:*:*:*:*","matchCriteriaId":"EAAEF976-8ADD-4B3D-B61C-D45CE40CF715"}]}]}],"references":[{"url":"http://osvdb.org/42378","source":"cve@mitre.org"},{"url":"http://osvdb.org/43007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4517","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0685/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0686/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0687/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40863","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40864","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40867","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5193","source":"cve@mitre.org"},{"url":"http://osvdb.org/42378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0685/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0686/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0687/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4772","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T19:46:09.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main/main.php en QuestCMS permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"obj\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:questwork:questcms:*:*:*:*:*:*:*:*","matchCriteriaId":"C32B3BA4-BCD1-445A-81CD-0FE672C54F97"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46150","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6853","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4773","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T19:46:09.927","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en main/main.php en QuestCMS permite a atacantes remotos leer ficheros locales de su elección a través de .. (punto punto) en el parámetro \"theme\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:questwork:questcms:*:*:*:*:*:*:*:*","matchCriteriaId":"C32B3BA4-BCD1-445A-81CD-0FE672C54F97"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46151","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6853","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4774","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T19:46:09.943","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en main/main.php en QuestCMS permite a atacantes remotos inyectar web script o HTML a través del parámetro \"cx\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:questwork:questcms:*:*:*:*:*:*:*:*","matchCriteriaId":"C32B3BA4-BCD1-445A-81CD-0FE672C54F97"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46149","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6853","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4775","sourceIdentifier":"cve@mitre.org","published":"2008-10-28T19:46:09.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the db parameter, a different vector than CVE-2006-6942 and CVE-2007-5977."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en pmd_pdf.php en phpMyAdmin v3.0.0, y posiblemente otras versiones incluyendo v2.11.9.2 y v3.0.1, cuando register_globals está activo, permite a atacantes remotos inyectar web script o HTML a través del parámetro \"db\", un vector diferente a CVE-2006-6942 y CVE-2007-5977."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA11353-1DD1-4593-84E8-1D3CBB2C2166"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32449","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-32.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4516","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497815/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46136","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00908.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00925.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497815/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00925.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4776","sourceIdentifier":"secalert@redhat.com","published":"2008-10-28T19:46:09.990","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which triggers a buffer over-read."},{"lang":"es","value":"libgadu versiones anteriores a v1.8.2 permite a servidores remotos provocar una denegación de servicio (caída) a través de una descripción de contacto con una longitud larga, lo cual dispara una sobre lectura del búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wojtek_kaniewsk:libgadu:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"A648C174-8DBE-4A54-A604-C02BFF131409"},{"vulnerable":true,"criteria":"cpe:2.3:a:wojtek_kaniewsk:libgadu:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAE1632-0750-4B70-B445-783E9D2320BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wojtek_kaniewsk:libgadu:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C5862F30-78CE-43D3-A026-2B0670AC6ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wojtek_kaniewsk:libgadu:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A7EF3C61-34B8-4546-9FA7-5DD373626E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wojtek_kaniewsk:libgadu:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"59577B17-866F-489B-A7D2-3BCD3E4B01B3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.ziew.org/pipermail/libgadu-devel/2008-October/000331.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1664","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31951","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-692-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=468830","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46158","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.ziew.org/pipermail/libgadu-devel/2008-October/000331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-692-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=468830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4777","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.337","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el componente Showroom Joomlearn LMS (com_lms)  para Joomla! y Mambo permite a un atacante remoto ejecutar código SQL de su elección por medio del parámetro cat en una tarea showTests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_lms:*:*:*:*:*:*:*:*","matchCriteriaId":"AC9CFEF0-0F3F-4B46-86D8-9B267AD965B2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-04/0031.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490410/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28586","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41614","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-04/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490410/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4778","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.353","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el módulo gallery de Koobi CMS 4.3.0 permite a un atacante remoto ejecutar código SQL de su elección por medio del parámetro galid en una acción showimages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dream4:koobi_cms:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AFF119F4-7DFD-4D4C-ADBA-6822B07536B4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4525","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490886/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46254","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5414","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5447","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490886/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4779","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.383","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en TUGzip 3.5.0.0 permite a atacantes remotos provocar una denegación de servicio (crash) o ejecutar código de su elección por medio de un nombre de fichero largo en un archivo .zip"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tguzip:tguzip:3.5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AB28DF-7BEA-42F9-855E-1E9E7E4036DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32411","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4528","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31913","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2918","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46120","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4780","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the padmin parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/centre.php en MyForum 1.3, cuando register_globals está activado, permite a un atacante remoto incluir y ejecutar archivos locales de su elección por medio de secuencias de salto de directorio en el parámetro padmin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:myforum:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D1164698-A6B8-406C-8543-46875ECA8430"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4522","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31934","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2938","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46155","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6846","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4781","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en update.php en MyKtools 2.4 permite a un atacante remoto incluir y ejecutar archivos locales de su elección por medio de .. (punto punto) en el proceso language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:myktools:2.4:*:*:*:*:*:*:*","matchCriteriaId":"5B7B5336-3845-4C8B-9E04-F96A35313D4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32432","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4526","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31942","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2941","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4782","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.447","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en public/code/cp_polls_results.php en All In One Control Panel (AIOCP) 1.4 permite a un atacante remoto ejecutar código SQL de su elección por medio del parámetro poll_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aiocp:aiocp:1.4.000:*:*:*:*:*:*:*","matchCriteriaId":"84ED39FF-F29E-4520-89C3-1C9AFBAAF480"},{"vulnerable":true,"criteria":"cpe:2.3:a:aiocp:aiocp:1.4.001:*:*:*:*:*:*:*","matchCriteriaId":"5AC8EEDB-8698-40F7-B29C-C949AFCA4768"}]}]}],"references":[{"url":"http://secunia.com/advisories/32431","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4518","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6854","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4783","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login cookie to \"admin.\""},{"lang":"es","value":"tlAds 1.0 permite a un atacante remoto eludir la autentificación y conseguir privilegios administrativos cambiando la cookie tlAds_login cookie a \"admin.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:tlads:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A7FFEEB-8C23-43EB-BB87-531D53628D94"}]}]}],"references":[{"url":"http://secunia.com/advisories/32427","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31939","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4784","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to \"A\" or \"O\" in (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, and (4) edit_form.php."},{"lang":"es","value":"aflog 1.01 permite a un atacante remoto eludir la autentificación y conseguir privilegios administrativos por medio de cambiar la cookie aflog_auth_a a \"A\" u \"O\" en (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, y (4) edit_form.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aflog:aflog:1.01:*:*:*:*:*:*:*","matchCriteriaId":"96002460-99F9-4174-A37A-AD22EE19ADB8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31894","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46083","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6818","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4785","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en newuser.php en el plugin alternate_profiles, posiblemente 0.2, para e107 permite a un atacante remoto ejecutar código SQL de su elección por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:alternate_profiles_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"64DE8AA5-9812-4482-9F18-2ECA551D4F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:alternate_profiles_plugin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"EA68227E-C80D-4154-BF08-AF3ED820D96D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4530","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31940","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2940","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6849","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4786","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T14:22:38.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary SQL commands via the category_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en easyshop.php del plugin EasyShop para e107 permite a un atacante remoto ejecutar comandos SQL de su elección por medio del parámetro category_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:easyshop_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"13355C0F-F242-4376-A194-3B2217CC0B84"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4531","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31948","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46147","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6852","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4787","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.417","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many &nbsp; (Non-Blocking Space character) sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025."},{"lang":"es","value":"Una vulnerabilidad de truncamiento visual en Microsoft Internet Explorer versión 6, permite a los atacantes remotos suplantar la barra de direcciones por medio de una dirección URL con un nombre de host que contiene muchos   (carácter de espacio sin bloqueo), que se renderizan como espacios en blanco, también se conoce como el ticket MSRC de MSRC7899, un problema relacionado con el CVE-2003-1025."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/497825/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31960","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46234","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497825/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4788","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to spoof example.com, aka MSRC ticket MSRC7900."},{"lang":"es","value":"Microsoft Internet Explorer 6 omite ciertos caracteres codificados al mostrar la barra de direcciones, lo que permite a un atacante remoto falsear la barra de direcciones por medio de una URL con un dominio que difiere de un dominio importante solo en esos caracteres, como se demuestra usando exam%A9ple.com para falsear example.com, también conocido como ticket MSRC MSRC7900."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/497825/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497827/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46235","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497825/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4789","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and \"attach files to content,\" related to a \"logic error.\""},{"lang":"es","value":"La funcionalidad de validación del núcleo del módulo de subida en Drupal 6.x anterior a 6.5 permite a un usuario remoto autentificado sobrepasar las restricciones de acceso y \"añadir archivos al contenido\"; está relacionado con un \"error lógico\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","matchCriteriaId":"522EC26C-B265-4A61-8751-0866EA735DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"7954FAA5-0455-407F-B16F-CB1FD24F9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"B254CD4E-51A2-4E8D-9B59-FA5610F76683"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*","matchCriteriaId":"A4DF0926-E487-4F3B-B85B-2690127FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*","matchCriteriaId":"D05C77D9-E816-41A6-80DB-F4815980A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"}]}]}],"references":[{"url":"http://drupal.org/node/318706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32198","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45755","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4790","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.527","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read \"files attached to content\" via unknown vectors."},{"lang":"es","value":"El módulo central de subidas de Drupal 5.x Anterior a 5.11 permite a un usuario remoto autentificado sobrepasar las restricciones de acceso y leer \"archivos adjuntos al contenido\" mediante un método desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionEndIncluding":"5.10","matchCriteriaId":"482347F6-0F92-4B6F-ACA9-7F6875D32726"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"45BE66AB-3491-42CB-8594-AB041D15EA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F6334858-DF62-467A-9126-6F0AD32D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A677D3A4-F15C-4287-94B3-4CAADA4679D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"24DAB8DE-2459-484C-88B5-9812CFBDC60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"}]}]}],"references":[{"url":"http://drupal.org/node/318706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32198","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32200","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45758","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4791","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.557","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors."},{"lang":"es","value":"El módulo de usuario en Drupal 5.x Anterior a 5.11 y de 6.x anterior a 6.5 puede permitir a un usuario remoto autentificado evitar las reglas de acceso y conseguir el login por medio de un ataque desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.11","matchCriteriaId":"670C8A78-8D5A-40B9-8295-CAF87F804BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.5","matchCriteriaId":"22BC2E4E-91B7-4D16-9B29-74695FAAF19C"}]}]}],"references":[{"url":"http://drupal.org/node/318706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32201","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45766","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/318706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4792","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.573","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values."},{"lang":"es","value":"El núcleo del módulo BlogAPI de Drupal 5.x anterior a 5.11 y de 6.x anterior a 6.5 no validad correctamente campos de contenido sin especificar  de un formulario interno de drupal, lo que permite a un usuario remoto autentificado evitar las restricciones de acceso por medio de valores de campos modificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.11","matchCriteriaId":"670C8A78-8D5A-40B9-8295-CAF87F804BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.5","matchCriteriaId":"22BC2E4E-91B7-4D16-9B29-74695FAAF19C"}]}]}],"references":[{"url":"http://drupal.org/node/318706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32201","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45761","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/318706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4793","sourceIdentifier":"cve@mitre.org","published":"2008-10-29T15:31:35.603","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules."},{"lang":"es","value":"El API del módulo nodo en Drupal 5.x anterior a 5.11 permite a un atacante remoto evitar la validación del nodo, y tiene otros impactos por medio de ataques desconocidos relacionados con los módulos contribuídos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionEndIncluding":"5.10","matchCriteriaId":"482347F6-0F92-4B6F-ACA9-7F6875D32726"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"45BE66AB-3491-42CB-8594-AB041D15EA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F6334858-DF62-467A-9126-6F0AD32D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A677D3A4-F15C-4287-94B3-4CAADA4679D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"24DAB8DE-2459-484C-88B5-9812CFBDC60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"}]}]}],"references":[{"url":"http://drupal.org/node/318706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32200","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45763","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/21/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4794","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:56:54.693","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696."},{"lang":"es","value":"Opera antes de v9.62 permite a atacantes remotos ejecutar comandos de su elección mediante la página de resultados Search History, una vulnerabilidad distinta a CVE-2008-4696."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.61","matchCriteriaId":"2C3DFADD-D936-4925-885F-1EA14395D466"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*","matchCriteriaId":"DB0E448B-8A9C-44BF-AE29-D05900F6FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*","matchCriteriaId":"E751386F-0179-4BE7-9F46-66455EAFB1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*","matchCriteriaId":"6A7D9843-8967-4E36-9609-4497EECB2842"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*","matchCriteriaId":"16F85686-88F9-412C-9105-F94D4D4D61FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*","matchCriteriaId":"29DDD7BF-9265-4202-93C1-98FAEC336190"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*","matchCriteriaId":"089A088C-6DAE-4335-AD14-DACE64641A5A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/906/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31991","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46219","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/906/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4795","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:56:54.740","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The links panel in Opera before 9.62 processes Javascript within the context of the \"outermost page\" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks."},{"lang":"es","value":"El panel de enlaces en Opera antes de v9.62 procesa el JavaScript dentro del contexto de la \"última página\" de un marco, lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante ataques de secuencias de comandos en sitios cruzados (XSS)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.61","matchCriteriaId":"2C3DFADD-D936-4925-885F-1EA14395D466"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*","matchCriteriaId":"DB0E448B-8A9C-44BF-AE29-D05900F6FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*","matchCriteriaId":"E751386F-0179-4BE7-9F46-66455EAFB1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*","matchCriteriaId":"6A7D9843-8967-4E36-9609-4497EECB2842"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*","matchCriteriaId":"16F85686-88F9-412C-9105-F94D4D4D61FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*","matchCriteriaId":"29DDD7BF-9265-4202-93C1-98FAEC336190"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*","matchCriteriaId":"089A088C-6DAE-4335-AD14-DACE64641A5A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32538","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/search/view/907/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31991","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46220","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200811-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/search/view/907/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4796","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:56:54.770","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs."},{"lang":"es","value":"La función _httpsrequest function (Snoopy/Snoopy.class.php) en Snoopy 1.2.3 y versiones anteriores, cuando es usada en (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost y posiblemente otros productos, permite a atacantes remotos ejecutar comandos arbitrarios a través de metacarácteres shell en URLs https."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snoopy_project:snoopy:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.3","matchCriteriaId":"41656D34-7042-48B9-9ADF-D58CA525087A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2.2","matchCriteriaId":"B23B79AF-8C39-4188-B404-40AE46D4617B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.3","matchCriteriaId":"A88DFCEE-A687-4A3E-9912-76E45C8B3B7E"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN20502807/index.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000074.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32361","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=879959","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496068/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31887","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2901","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46068","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201702-26","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.nagios.org/projects/nagios-core/history/4x/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jvn.jp/en/jp/JVN20502807/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=879959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496068/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201702-26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.nagios.org/projects/nagios-core/history/4x/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4797","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:56:54.803","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Arihiro Kurata Kantan WEB Server 1.8 and earlier allows remote attackers to read arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Arihiro Kurata Kantan WEB Server 1.8 y anteriores permite a atacantes remotos leer archivos de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arihiro_kurta:kantan_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"0F92403A-218E-4F32-B825-8E6370BD2AD6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN79026329/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000059.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31917","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48223","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31245","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45243","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN79026329/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4798","sourceIdentifier":"cve@mitre.org","published":"2008-10-30T20:56:54.817","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL."},{"lang":"es","value":"La función loadModule en lib/WebGUI/Asset.pm en WebGUI anterior a v7.5.30 (estable) permite a atacantes remotos ejecutar código de su elección subiendo un módulo de Perl y accediendo a él mediante un URL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3.22","matchCriteriaId":"74584DF1-A1EE-4C65-AA2B-115342E3A1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"F202E856-CE07-4750-B650-B4275506292A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.1","matchCriteriaId":"B486D1B5-B786-4B5A-858B-7FFD51AD04F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.2","matchCriteriaId":"F0E776DF-3B1C-45DC-8CCC-4799C7B1AF22"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.3","matchCriteriaId":"3D82075E-1245-4FFA-A172-BD9E3162B5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.4","matchCriteriaId":"BEBC7DD2-C64C-45E9-807D-7E8EB99A77A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"F07EDC8C-088B-4E1D-B037-557EF2E69882"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.6","matchCriteriaId":"9C497BB5-5527-4234-BB43-6200DB332064"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.7","matchCriteriaId":"9C588B89-E6EB-4C7A-914F-200D5B8CB3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.8","matchCriteriaId":"9907D414-C071-4ADC-8249-7E35F07139BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.9","matchCriteriaId":"C52BD988-5072-48E9-82C1-F287130B8A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.10","matchCriteriaId":"5759100B-09B3-4CC8-93ED-F727D3480366"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.11","matchCriteriaId":"7FBEE7BA-2D00-488D-B110-9FE0C803421C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.13","matchCriteriaId":"6AB94C55-6A84-4EBD-8EB1-700C0173E17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.14","matchCriteriaId":"807B9ECF-8CD4-4274-A3A1-FDE36083927F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.15","matchCriteriaId":"D177E30A-80AC-4369-AA6F-04F9D2DA3B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.16","matchCriteriaId":"AE02AEAF-9539-45C9-8AF6-4302EE0E63B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.17","matchCriteriaId":"A6D80D94-6134-4CF7-B7F5-5AD57537459B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.18","matchCriteriaId":"001354A3-BF27-47B4-8B45-C147F92CD779"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.19","matchCriteriaId":"391AA6D7-1FBB-4D98-B3EC-39AC70793F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.20","matchCriteriaId":"CFDB7BC9-D79D-4593-B9B8-CABFD13FFC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.21","matchCriteriaId":"5E0ECE58-6030-48B5-AD8F-AAE7515637D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.22","matchCriteriaId":"65758821-0C06-4C02-B16D-BA35D14B06A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.23","matchCriteriaId":"EF9E637D-DFB0-426A-B145-5F30876871A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.24","matchCriteriaId":"AAA0C33C-B3EB-40EC-8409-78939D44812E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0:*:*:*:*:*:*:*","matchCriteriaId":"20CB9C2D-A8D9-4A38-8550-ED0C40B82DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AADC79B6-3BC5-4C11-95EA-13A9C919AA70"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5F3F345D-AE85-4B12-88E1-365B2D050641"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"348C15A0-D64E-46C9-A508-C215D637E7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C1B92369-3E57-45B5-86AA-F401BDFD9632"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FD912824-84A5-4742-A470-41340214A345"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8211727F-CCF1-4E76-A698-4B1C316348D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"481EE763-D851-43FF-B4DD-E360D007CFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"655BBE71-51F9-456F-8451-3A54ED0A0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"4489D9EC-5311-4EA6-A445-19A956B1ADAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A1A00B94-425D-47B3-A8D6-E4F75F1DD9EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA6525F-FE2D-4C94-AA46-5C279082B4EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EDBDD587-2942-4D59-8F10-7E1854B4F759"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"421CC3D8-6489-4256-B6A6-EA6CA1E77CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0C18D2AF-8F78-467D-9563-01C5997140BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"20B6F2AA-C726-4380-9141-6FE40230D95D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"442E49E1-F353-4FF3-9906-6CDE21789530"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5B7C5D16-0FED-4B1E-AB04-1EB39269F42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3:*:*:*:*:*:*:*","matchCriteriaId":"62882566-9390-472E-8BB4-E4F2396B3624"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2DCB17C-678A-437C-A6A0-90F60CA77D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"11719947-593A-441F-9B76-3751281065DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"CDA122B5-891D-4F74-A2CA-DECF6D0B3E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"AF19EF6A-AD81-454E-B30B-5242D92869C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.5:*:*:*:*:*:*:*","matchCriteriaId":"26C434B2-FCBE-44F3-95EA-B7F4927C5940"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"07D837A4-20AC-44AB-B7C0-456074E5D582"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.7:*:*:*:*:*:*:*","matchCriteriaId":"6178E9BC-0990-43CA-B152-0DCBE010F1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"CF92F71F-CC87-4537-9996-DB76C73077B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"D1FD66AB-F06A-45C8-9F61-46919E460995"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"1BECE0A7-08D1-44BD-A0A2-CA2EE8860B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.11:*:*:*:*:*:*:*","matchCriteriaId":"88A00DC3-75D9-44E5-B7A0-099241036479"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.12:*:*:*:*:*:*:*","matchCriteriaId":"43911C51-6C20-4986-8873-5CB17AE61A91"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.13:*:*:*:*:*:*:*","matchCriteriaId":"9835F551-354A-4818-966C-837639D6860B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.14:*:*:*:*:*:*:*","matchCriteriaId":"20DC7D35-1AFE-45C6-8CD7-F1E72B2FBD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.15:*:*:*:*:*:*:*","matchCriteriaId":"69D2A7D5-2BF4-4513-915F-200CFE55D986"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.16:*:*:*:*:*:*:*","matchCriteriaId":"EFA2C263-67DB-47B7-8920-B8E5DB487B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.17:*:*:*:*:*:*:*","matchCriteriaId":"D92CF841-914E-4253-8F56-910681BFBF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.18:*:*:*:*:*:*:*","matchCriteriaId":"26F4FC3D-2F6C-40D8-871C-C73E3B0CB101"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.19:*:*:*:*:*:*:*","matchCriteriaId":"1C78A755-7A74-4988-9526-DAAAC0C812C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.20:*:*:*:*:*:*:*","matchCriteriaId":"8BE36541-FBF2-4163-8C23-261115532C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.3.21:*:*:*:*:*:*:*","matchCriteriaId":"C7564AFC-B551-4B2B-AE2D-C2AE9956CE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FA9309B-5D2D-4DEF-B3D1-4B7A71B6A309"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2697D591-553B-4183-B890-98A1C3FDE80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"2228E124-980F-4AF6-B7C5-7173B921487B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"371C0312-D203-4E7D-9A36-57770222E459"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"87A79FC3-A1AB-4F04-9D00-97801A5183D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"C79D2667-ED6E-457A-B1AF-69B8D027F0AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6DACB4C4-8F7C-476B-B6C3-70C85B2CE8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"415DEEE6-1F80-43EB-9C4D-F215A4475B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"7D6747BF-11E1-41BD-A73E-9151740CA6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"D61CFDF7-8438-4201-A53D-7CDD7CEC7A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"8E44D6BD-50D7-4A90-9C5F-647FA31F4C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"AB48AEDC-1F37-4CEE-98AC-1D0509FC00CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C2FEC347-08CC-4C60-94AB-23A3CE1971CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"3A9A1984-91C9-4A57-88DD-673AE49C1250"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.15:*:*:*:*:*:*:*","matchCriteriaId":"7262F96B-A760-45EA-AD88-CF7E42D0085F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"49227629-92BD-49A1-9C51-90DF0B40365C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"2363AA20-0467-414E-B7A1-64F6B9867B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"AB553BEA-4120-431D-A946-F990C931E102"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.19:*:*:*:*:*:*:*","matchCriteriaId":"927A9BD4-9E02-421C-A2FB-243C69D62ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.20:*:*:*:*:*:*:*","matchCriteriaId":"9164CB5C-90F8-466A-839D-ECFF4AA7352F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.21:*:*:*:*:*:*:*","matchCriteriaId":"C46405E4-D61E-4B6A-BE5E-867BDD6131E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.22:*:*:*:*:*:*:*","matchCriteriaId":"3EB52785-5E76-406B-B2D5-DB3AD74B5836"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.23:*:*:*:*:*:*:*","matchCriteriaId":"9AA5199D-E38A-4114-A2C5-B8AC5A9DDB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.25:*:*:*:*:*:*:*","matchCriteriaId":"E863925B-5233-49CA-B5FE-62DD9DA2AFBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgui:webgui:7.4.26:*:*:*:*:*:*:*","matchCriteriaId":"FB7C5B35-61DE-4721-AF0B-F8AC8A087AD4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31947","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2944","source":"cve@mitre.org"},{"url":"http://www.webgui.org/bugs/tracker/8980","source":"cve@mitre.org"},{"url":"http://www.webgui.org/getwebgui/advisories/webgui-7.5.30-stable-released","source":"cve@mitre.org"},{"url":"http://www.webgui.org/uploads/70/o2/70o29CTLCGWjntJrLYdmJA/asset-security-7.4.diff","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webgui.org/bugs/tracker/8980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webgui.org/getwebgui/advisories/webgui-7.5.30-stable-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webgui.org/uploads/70/o2/70o29CTLCGWjntJrLYdmJA/asset-security-7.4.diff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4799","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T00:00:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read."},{"lang":"es","value":"pamperspective en Netpbm anterior a v10.35.48 no calcula correctamente la altura de una ventana, lo que permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) mediante una archivo de imagen manipulado que dispara una lectura fuera de los límites."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue can only cause pamperspective to crash when used on specially crafted messages.  We do not consider this to be a security issue.","lastModified":"2008-10-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:*:*:*:*:*:*:*:*","versionEndIncluding":"10.35.47","matchCriteriaId":"82963CDA-0BC3-4B7C-A4E8-4DE594791817"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8A0FA58E-ED6E-428A-919B-385CADF04C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E377CD47-B4F8-49B0-B894-C7D0D9428897"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:8.3:*:*:*:*:*:*:*","matchCriteriaId":"4C517BF8-DA92-4700-BEBE-EE07E86E4E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:8.4:*:*:*:*:*:*:*","matchCriteriaId":"D633B098-9979-4D81-9122-A1A23B31C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0EF35F07-D445-42C4-BB9B-261A20FF4BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.1:*:*:*:*:*:*:*","matchCriteriaId":"58D13E0B-00CB-483D-8443-A400E62218DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.2:*:*:*:*:*:*:*","matchCriteriaId":"9661931F-2DCF-41CE-952C-BE4AC2C9FBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.3:*:*:*:*:*:*:*","matchCriteriaId":"12F335C6-5A79-4550-8A7B-6913F5391FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.4:*:*:*:*:*:*:*","matchCriteriaId":"35005AEB-02F1-46D7-8C15-C3F1D728B14A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.5:*:*:*:*:*:*:*","matchCriteriaId":"CC050899-40B9-41BE-B69D-97F3C40E9109"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.6:*:*:*:*:*:*:*","matchCriteriaId":"4940BA3B-51B3-42E8-AD3B-35920EEE1868"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.7:*:*:*:*:*:*:*","matchCriteriaId":"16A77FB0-4E73-4E7D-8500-2E83931ADD33"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.8:*:*:*:*:*:*:*","matchCriteriaId":"3D46BFA3-70FB-4841-A2E5-AF8C066020CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.9:*:*:*:*:*:*:*","matchCriteriaId":"BBB0710E-96B4-4533-89DA-92FED546643B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.10:*:*:*:*:*:*:*","matchCriteriaId":"F3F63560-A91B-4414-9EAB-42D4BBD68A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.11:*:*:*:*:*:*:*","matchCriteriaId":"53BA729C-B453-4B78-BFA9-FB653A22E25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.12:*:*:*:*:*:*:*","matchCriteriaId":"92E5C04B-55C9-4809-915D-E7F3E4FD711B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.13:*:*:*:*:*:*:*","matchCriteriaId":"0465F083-78C3-4A07-9BFE-AAFA5861B3A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.14:*:*:*:*:*:*:*","matchCriteriaId":"B9FED947-5586-420F-9F4E-1DB54EF7FADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.15:*:*:*:*:*:*:*","matchCriteriaId":"AD91C8C5-1248-4B6F-895A-DE8971B335B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.16:*:*:*:*:*:*:*","matchCriteriaId":"9268261C-3E8B-49F8-A078-A034B062C904"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.17:*:*:*:*:*:*:*","matchCriteriaId":"0F81484A-5277-4825-86B1-2C0B60442FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.18:*:*:*:*:*:*:*","matchCriteriaId":"4AF598EC-4646-49DC-96F2-507FDF1288A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.19:*:*:*:*:*:*:*","matchCriteriaId":"4F3866AE-D4E2-450E-838C-FC4C3E2BAB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.20:*:*:*:*:*:*:*","matchCriteriaId":"A4F53F73-F07D-48A3-B19F-BE0A10BC15A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.21:*:*:*:*:*:*:*","matchCriteriaId":"610A654F-2779-4EDB-B3BF-6BB4E60A1B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.22:*:*:*:*:*:*:*","matchCriteriaId":"F72046EA-E4D7-42B5-8A5E-E0719D30A063"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.23:*:*:*:*:*:*:*","matchCriteriaId":"16AE315C-30D3-4FEA-A5A0-00040487E8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.24:*:*:*:*:*:*:*","matchCriteriaId":"0D5D0B01-B60C-4312-8D23-9DD1A527CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:9.25:*:*:*:*:*:*:*","matchCriteriaId":"6A171D13-7A7E-4064-BF96-E99294016AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.0:*:*:*:*:*:*:*","matchCriteriaId":"F79F02C3-950F-4D47-971A-3C1367F1642C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.1:*:*:*:*:*:*:*","matchCriteriaId":"0344253A-AF59-499B-81DF-5494A34B115F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.2:*:*:*:*:*:*:*","matchCriteriaId":"E7297482-7D30-484A-8F8D-AFEA2E468725"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.3:*:*:*:*:*:*:*","matchCriteriaId":"93BA3D19-C291-468E-9E4E-E8374AE1BD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.4:*:*:*:*:*:*:*","matchCriteriaId":"85CF9240-FAEE-4BA2-8374-8B81F738521A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.5:*:*:*:*:*:*:*","matchCriteriaId":"45457716-9219-4A88-A824-B45FA16643D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.6:*:*:*:*:*:*:*","matchCriteriaId":"93A0526D-918E-4FAE-90AF-2BA49F9D5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.7:*:*:*:*:*:*:*","matchCriteriaId":"7AD350ED-1327-483A-BF73-02AB9924EDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.8:*:*:*:*:*:*:*","matchCriteriaId":"98C11849-BCD4-4982-A779-435669BD668F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.9:*:*:*:*:*:*:*","matchCriteriaId":"C94984E9-22EE-4B24-AFCB-52137A871117"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.10:*:*:*:*:*:*:*","matchCriteriaId":"23B10069-89E1-4E63-BCFF-C210CE3C5655"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.12:*:*:*:*:*:*:*","matchCriteriaId":"DFAE142A-4F71-4452-8DAD-9D6BA11EBF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.13:*:*:*:*:*:*:*","matchCriteriaId":"179366EE-D637-4345-8759-81D5E12EFFA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.14:*:*:*:*:*:*:*","matchCriteriaId":"725CFC44-43C8-47FF-9935-FA006B6338FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.15:*:*:*:*:*:*:*","matchCriteriaId":"3A331F93-08C2-4F45-98AD-46DBE38A9785"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.16:*:*:*:*:*:*:*","matchCriteriaId":"FEFB0157-CF91-4FCB-8786-4024595B3EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.17:*:*:*:*:*:*:*","matchCriteriaId":"92045C29-20B4-46D0-9643-491BB0642D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.18:*:*:*:*:*:*:*","matchCriteriaId":"148A51ED-1A00-45D3-934E-96CA2759F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.19:*:*:*:*:*:*:*","matchCriteriaId":"77BE0692-E688-4438-98C7-FA1FCE05F41C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.20:*:*:*:*:*:*:*","matchCriteriaId":"1904CB89-F576-4DFF-9639-9263D0ADE0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.21:*:*:*:*:*:*:*","matchCriteriaId":"50D11F39-3B4F-43E4-AC5E-E1B5931BCBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.22:*:*:*:*:*:*:*","matchCriteriaId":"97023E9B-520D-4E6F-BA7F-052BA89BF2E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.23:*:*:*:*:*:*:*","matchCriteriaId":"93A152B4-8483-4874-88C0-4679831BB60E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.24:*:*:*:*:*:*:*","matchCriteriaId":"9BBAE4A7-B0E1-4E50-8775-CAEF3E49B7EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.25:*:*:*:*:*:*:*","matchCriteriaId":"CDE78BA1-4001-4676-8BCB-FBC081A5D733"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.26:*:*:*:*:*:*:*","matchCriteriaId":"FF606C17-AD8A-4D81-AB55-50B0C4B7763F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.27:*:*:*:*:*:*:*","matchCriteriaId":"906047FD-1D75-4F97-977D-2A22A1DC87B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.28:*:*:*:*:*:*:*","matchCriteriaId":"2DA92693-6629-4A8D-9C54-418569C852F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.29:*:*:*:*:*:*:*","matchCriteriaId":"F078E1C6-3FB7-415B-A49A-455BE55148B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.30:*:*:*:*:*:*:*","matchCriteriaId":"9F97984A-04F4-4F69-B03B-D06FD0F21EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.31:*:*:*:*:*:*:*","matchCriteriaId":"53FB010A-9B82-41F9-9DDB-4DCC0BFA0365"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.32:*:*:*:*:*:*:*","matchCriteriaId":"07292430-0952-4E40-9012-1DD5709D2F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.33:*:*:*:*:*:*:*","matchCriteriaId":"019C4B30-4F04-4068-80B1-884F9607EC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.34:*:*:*:*:*:*:*","matchCriteriaId":"F74038FE-C361-415B-AC47-744D3792E707"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.00:*:*:*:*:*:*:*","matchCriteriaId":"7A6B8C20-2603-4BC6-A9C5-363E45B86492"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.01:*:*:*:*:*:*:*","matchCriteriaId":"16998237-B53D-4E6C-B2E7-3C17BE483780"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.02:*:*:*:*:*:*:*","matchCriteriaId":"4998E602-7E72-4ED9-806F-2DF117827F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.03:*:*:*:*:*:*:*","matchCriteriaId":"5A01D9E5-14BD-416D-8363-278FBA991BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.04:*:*:*:*:*:*:*","matchCriteriaId":"59B55BD5-0E1C-4A13-965C-BAFBE480C384"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.05:*:*:*:*:*:*:*","matchCriteriaId":"EC498C66-4E32-4E4B-9BB0-3943CB963BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.06:*:*:*:*:*:*:*","matchCriteriaId":"FF4F989C-B9AF-4A0D-A39E-A9405E38229F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.07:*:*:*:*:*:*:*","matchCriteriaId":"1FCC7D4D-09B1-4063-9FE8-F88032B91FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.08:*:*:*:*:*:*:*","matchCriteriaId":"BEF8AB55-8A95-47CD-960A-E9A920632B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.09:*:*:*:*:*:*:*","matchCriteriaId":"FB45C9DA-9503-4F5C-8079-0C47E778EAB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.10:*:*:*:*:*:*:*","matchCriteriaId":"3B1D6ABC-D56F-4484-90D0-45CD3E7B682C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.11:*:*:*:*:*:*:*","matchCriteriaId":"B48121BF-EDA1-4EAD-B24B-7BAF6668D4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.12:*:*:*:*:*:*:*","matchCriteriaId":"9E079966-8423-4638-8A55-BC9F2412D4E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.13:*:*:*:*:*:*:*","matchCriteriaId":"0BE5E653-3B78-4DCE-9FE8-1126FC18D8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.14:*:*:*:*:*:*:*","matchCriteriaId":"D339F6D7-9E9A-46C2-9823-E534F3BEBDC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.15:*:*:*:*:*:*:*","matchCriteriaId":"A829E428-77AA-4B8F-B4E6-BB89F0054F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.16:*:*:*:*:*:*:*","matchCriteriaId":"A6470755-BE74-49FB-B4C7-6869FB33A096"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.17:*:*:*:*:*:*:*","matchCriteriaId":"7FEFA0BB-1542-4A88-BC95-A60AAEF90D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.18:*:*:*:*:*:*:*","matchCriteriaId":"090C90E2-D688-44C2-88D7-E40F7D919FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.19:*:*:*:*:*:*:*","matchCriteriaId":"675512A2-6E2A-46BA-9237-114B4EA6248F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.20:*:*:*:*:*:*:*","matchCriteriaId":"185FF47F-321E-4D26-893D-BB4F4B532670"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.21:*:*:*:*:*:*:*","matchCriteriaId":"B402DB46-6103-4428-B6BF-9263D9270EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.22:*:*:*:*:*:*:*","matchCriteriaId":"599D4BAC-1266-4A30-A4C5-4BA13EC47F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.23:*:*:*:*:*:*:*","matchCriteriaId":"23241E2B-21B9-4C97-B865-5C3652C27401"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.24:*:*:*:*:*:*:*","matchCriteriaId":"B4A40DC0-AE35-4597-8A55-D5022289435E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.25:*:*:*:*:*:*:*","matchCriteriaId":"C12B85A1-5607-4037-A362-0270EF710514"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.26:*:*:*:*:*:*:*","matchCriteriaId":"03B39A1A-DC18-413E-A869-9D6C7C77BF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.27:*:*:*:*:*:*:*","matchCriteriaId":"4F62F30D-F8D9-4B47-9CFC-8F54B3F589C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.28:*:*:*:*:*:*:*","matchCriteriaId":"89B0ACB2-FE13-4145-8EAE-9D6FB7FEDD60"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.29:*:*:*:*:*:*:*","matchCriteriaId":"0253F8B8-346C-40F0-9225-4593EAF39861"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.30:*:*:*:*:*:*:*","matchCriteriaId":"2411D682-BEB2-41E0-B211-4E8EA0E551C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.31:*:*:*:*:*:*:*","matchCriteriaId":"97036446-8A06-4AB6-842B-2186A88FBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.32:*:*:*:*:*:*:*","matchCriteriaId":"FC9F56AC-906E-4713-83ED-79A8673F59BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.33:*:*:*:*:*:*:*","matchCriteriaId":"A77A17C7-C323-4182-A099-BB3E92BF12D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.34:*:*:*:*:*:*:*","matchCriteriaId":"82DB51EA-A050-417A-8603-97BD33ACB9B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.35:*:*:*:*:*:*:*","matchCriteriaId":"48468D84-76E9-476D-8470-3950C8281118"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.36:*:*:*:*:*:*:*","matchCriteriaId":"7472AD57-68B3-43BE-95D4-F21D39708A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.37:*:*:*:*:*:*:*","matchCriteriaId":"DAA0C21F-DB95-43D9-B7B2-B076043828E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.38:*:*:*:*:*:*:*","matchCriteriaId":"3658F6EA-E897-4A24-AD82-F3EBD4567D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.39:*:*:*:*:*:*:*","matchCriteriaId":"F887C654-43D9-4374-88D8-DCA800B7F449"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.40:*:*:*:*:*:*:*","matchCriteriaId":"34001491-58AD-4F6C-9159-C27671EA1574"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.41:*:*:*:*:*:*:*","matchCriteriaId":"347D3197-1915-4417-B72D-0C23BEFBAA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.42:*:*:*:*:*:*:*","matchCriteriaId":"0256E7B3-E119-41A4-B49D-4C08D364C22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.43:*:*:*:*:*:*:*","matchCriteriaId":"2EA3DD4D-28E0-4266-9024-A4DFF832512E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.44:*:*:*:*:*:*:*","matchCriteriaId":"02FAFCFB-0D3F-4906-ADCE-BF7F06167692"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.45:*:*:*:*:*:*:*","matchCriteriaId":"EB184F25-C4ED-4655-B79D-6B00E22F9097"},{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:10.35.46:*:*:*:*:*:*:*","matchCriteriaId":"43FC34D4-576B-46D6-B13C-EE17C0A5AAE9"}]}]}],"references":[{"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/23/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46054","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00058.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00069.html","source":"cve@mitre.org"},{"url":"http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/22/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4800","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T00:00:00.763","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service (NULL pointer dereference and Internet Explorer 6.0 crash) via a large negative integer argument to the GetEntryPointForThread method.  NOTE: this issue might only be exploitable in limited environments or non-default browser settings."},{"lang":"es","value":"El control ActiveX DebugDiag en CrashHangExt.dll, posiblemente en la v1.0, en Microsoft Debug Diagnostic Tool permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de Internet Explorer 6.0) mediante un argumento entero negativo grande al método GetEntryPointForThread. NOTA: este problema sólo podría  ser explotado en entornos limitados o configuraciones del navegador no por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:debug_diagnostic_tool:*:*:*:*:*:*:*:*","matchCriteriaId":"ADE37C36-8FF6-42ED-8B9B-FF2DED583260"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4532","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497943/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46309","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497943/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4801","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T00:00:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in IBM Tivoli Storage Manager (TSM); and the Backup-Archive client in TSM Express; allows remote attackers to execute arbitrary code by sending a large amount of crafted data to a TCP port."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la Protección de Datos para el servicio SQL CAD (también conocido como dsmcat.exe) en  Client Acceptor Daemon (CAD Demonio Aceptador de Clientes) y el programador en el cliente de archivos de respaldo de v5.1.0.0 a v5.1.8.1, de v5.2.0.0 a v5.2.5.2, de v5.3.0.0 a v5.3.6.1, de v5.4.0.0 a v5.4.2.2 y de v5.5.0.0 a v5.5.0.91 en Tivoli Storage Manager (TSM)de IBM; y el cliente de archivos de respaldo en TSM Express; permite a atacantes remotos ejecutar código de su elección enviando una gran cantidad de datos manipulados a un puerto TCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1","versionEndIncluding":"5.1.8.1","matchCriteriaId":"8AB2004B-D192-466B-8D82-054DBF48CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2","versionEndIncluding":"5.2.5.2","matchCriteriaId":"47EB988A-4087-4AFA-B80D-2B9F4960FE67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3","versionEndIncluding":"5.3.6.1","matchCriteriaId":"6B92E241-555F-4D68-B090-740DEA7CE674"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndIncluding":"5.4.2.2","matchCriteriaId":"B114A3EE-376F-4C45-8768-5D0BC4439808"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0.0","versionEndIncluding":"5.5.0.91","matchCriteriaId":"29656C7B-3716-4042-9114-3E352B328C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:*:*:*:*:*:*:*:*","matchCriteriaId":"FF1C67A0-883B-4703-A6A7-1345AC65C32F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32465","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21322623","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC56773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497950/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31988","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021122","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2969","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-071/","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46208","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21322623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC56773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497950/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-071/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4802","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:07.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Simple PHP Scripts blog 0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro id. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_scripts:blog:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5280CDA0-D250-4F39-9E5D-AD4A2095BCED"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28054","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4803","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:07.743","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Simple PHP Scripts gallery 0.1, 0.3 y 0.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro gallery. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_scripts:gallery:0.1:*:*:*:*:*:*:*","matchCriteriaId":"55C96D59-2E9B-474B-9BA8-D1C6AACA7812"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_scripts:gallery:0.3:*:*:*:*:*:*:*","matchCriteriaId":"67A8AA32-DA13-42EC-80A4-A2F09571FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_php_scripts:gallery:0.4:*:*:*:*:*:*:*","matchCriteriaId":"86621664-AB8D-4E33-963D-794E5590B6F8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4804","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:07.773","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the aid parameter in a showalbum action to index.php.  NOTE: some of these details are obtained from third party information.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Gallery 1.3 para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro aid en una acción showalbum a index.php. NOTA: algunos de estos detalles se han obtenido de información de terceros. NOTA: este problema fue descubierto por un investigador poco fidedigno, por lo que podría ser incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nukedgallery:gallery:*:*:*:*:*:*:*:*","matchCriteriaId":"834A650B-DD21-4425-995F-C32BD8B5441D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0395.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27957","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41006","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0395.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4805","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the community title, (2) API input, and vectors related to the (3) Homepage, (4) Blogs, (5) Profiles, (6) Dogear, (7) Activities, and (8) Global Search components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Lotus Connections 2.x anterior a v2.0.1 de IBM permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante 1) the community title, (2) API input, y vectores relacionados con (3) Homepage, (4) Blogs, (5) Profiles, (6) Dogear, (7) Activities y (8) Global Search components. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"73990A0F-86C8-495C-9356-9CE768F33112"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16C309-8D8D-42F1-8DAA-AD2D47D54113"}]}]}],"references":[{"url":"http://secunia.com/advisories/32466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31989","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46210","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46211","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4806","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.447","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Lotus Connections 2.x anterior a v2.0.1 de IBM permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro sortField a componentes no especificados. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"73990A0F-86C8-495C-9356-9CE768F33112"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16C309-8D8D-42F1-8DAA-AD2D47D54113"}]}]}],"references":[{"url":"http://secunia.com/advisories/32466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31989","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46212","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4807","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive information by reading this file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Lotus Connections 2.x anterior a v2.0.1 de IBM almacena la contraseña para el usuario administrador en el archivo trace.log, lo que permite a usuarios locales obtner información sensible leyendo este archivo. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"73990A0F-86C8-495C-9356-9CE768F33112"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16C309-8D8D-42F1-8DAA-AD2D47D54113"}]}]}],"references":[{"url":"http://secunia.com/advisories/32466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31989","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46213","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4808","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Lotus Connections 2.x anterior a v2.0.1 de IBM permite a atacantes descubrir contraseñas mediante vectores no especificados. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"73990A0F-86C8-495C-9356-9CE768F33112"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16C309-8D8D-42F1-8DAA-AD2D47D54113"}]}]}],"references":[{"url":"http://secunia.com/advisories/32466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31989","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4809","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknown impact and attack vectors related to \"Active\" content.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en las páginas de búsqueda Profiles en IBM Lotus Connections 2.x antes de v2.0.1 tienen impacto desconocido y vectores relacionados con contenido \"Activo\". NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AB9ABDF-CEDF-4C66-9760-3C5759150D3F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31989","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46217","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4810","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and (1) a dollar-sign character, aka \"php executed in templates;\" and (2) a double quoted literal string, aka a \"function injection security hole.\" NOTE: each vector affects slightly different SVN revisions."},{"lang":"es","value":"La función _expand_quoted_text en libs/Smarty_Compiler.class.php en Smarty 2.6.20 antes de r2797 permite a atacantes remotos ejecutar código PHP de su elección mediante vectores relacionados con plantillas y (1) un carácter del signo del dólar, también conocido como \"php ejecutado en plantillas\"; y (2) una cadena de un literal con dobles comillas, también conocido como \"agujero de seguridad en inyección de función\". NOTA: cada vector afecta de un modo ligeramente diferente a las revisiones SVN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D5FB053C-A0E3-49AF-ADF6-06A268B63061"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"20D6D0EB-C680-479C-867A-13A90408E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C83A1128-0AE1-41F4-A836-67F16CD65DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8EB346-D9D3-4EDC-A2BC-C08FE1B72183"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C647DEF-268B-4259-9C06-A802C6688AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D59EC271-7B08-4058-85EA-5C5B68915BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F786C297-9711-4753-AE70-F1EC8F3DC36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"64819A4D-5F8C-4FFF-92DD-BBFA53840043"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9B07FF05-D669-4323-B987-F8D33CF41CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6DEB456-742C-42A1-B96D-604ADFFB30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EACD5727-71A3-4CFE-8F66-246B1BA378A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"8E7033B8-8298-497B-ADD2-4A3E73205EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"AC146CA8-F777-43A8-850B-85DBCB1A1E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DB4902CC-B3BE-4C5F-9550-F33E8DBE94EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5BEA9CF5-BB3D-47FD-91F2-24AE73388B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3638BE10-DA43-4821-92ED-A60FF38AEB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CAE038A6-11B7-4A33-A5F6-864331C72828"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"44EAF434-A6A7-460D-B138-A7DBE27963AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"E76D49D2-4D30-475D-848E-C5D7986A18CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B13B482E-D2CF-4EE7-A4BC-0E866051D6A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"96E029B3-0375-4300-AB75-7FF25ABEC03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5289CD34-B0C5-4421-AF45-F121D1BC05A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1A405A14-0B55-4EA7-8F14-55AD784D6618"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"406D30AC-2746-4C9A-A886-6B9946C503B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B3690F3-EEC9-4D00-B5C6-EBAFA7983E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C1C62C2F-702C-4D6B-BA9B-36C3A84C5029"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D459162-8F88-4187-B683-7A873CFED17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8575FCF2-8F3B-4274-8201-D51A50C55ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E1DD77B1-E9BE-4386-9986-B733D9D41A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B488FCA5-B5CA-49D7-AE78-AB5DC0039CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7BCB54B1-99D8-4D4C-BCD5-47A34AB7540B"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"979E2B4D-CDB8-41AB-AC83-476BF0858E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"457C0F14-9FD1-4BEE-87BB-CDAE861592B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36394FA5-1E04-4C06-A36D-2A661AED7BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"644F6E4E-2B11-436F-A3A1-60042A7631D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F93CC1-7BD4-4006-BF13-3A044CF917ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0C344438-31E7-4180-9FE4-A0C575BA3CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"249A2041-C515-4072-8091-32E65A1F42A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"243A99DD-A54E-4D96-BF67-5853CE2FC5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"18214825-9B27-4DF1-A715-C1B825450070"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"46D805C7-D9B9-4E3A-8A6A-0F4AD53AF0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"15A5DCDA-32CC-4675-A1C1-E07AEFEE1491"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"31588789-D836-44F4-AD3C-26A4E071B451"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"96D8E66D-8726-460C-A60D-6F2E534AA507"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DDCDF3E7-441D-48E2-BA45-41E11AEB7458"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"EBD88BE2-82D0-4122-95F3-B3DB85F5A31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"DB7094A7-426F-44D6-AD97-97A10F46A3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"560FF27F-4899-4139-80E6-C7F6E4FAAA15"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"039BD24A-B097-44AF-A145-469AE27F3B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"BD4087E3-9EE0-4FDD-A822-973619B51FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"8DB44614-3BBB-4F3F-8558-D2FE258E1CDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"3488FA52-8180-42B8-9B36-EFB83051802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"EB761B72-10D4-4E8F-8E2E-C0D9F1D07E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"AE7458AC-3220-45B1-AA56-F7B82688105A"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"E8AAAB3C-403D-4912-884A-4D258AA03698"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"EEE3397B-7AF2-418F-8A07-7CF9A9CA8558"}]}]}],"references":[{"url":"http://code.google.com/p/smarty-php/source/detail?r=2784&path=/trunk/libs/Smarty_Compiler.class.php","source":"cve@mitre.org"},{"url":"http://code.google.com/p/smarty-php/source/detail?r=2797&path=/trunk/libs/Smarty_Compiler.class.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityvulns.ru/Udocument746.html","source":"cve@mitre.org"},{"url":"http://smarty-php.googlecode.com/svn/trunk/NEWS","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/25/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31862","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/attachment.cgi?id=169804&action=view","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46031","source":"cve@mitre.org"},{"url":"http://code.google.com/p/smarty-php/source/detail?r=2784&path=/trunk/libs/Smarty_Compiler.class.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/smarty-php/source/detail?r=2797&path=/trunk/libs/Smarty_Compiler.class.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityvulns.ru/Udocument746.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://smarty-php.googlecode.com/svn/trunk/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/attachment.cgi?id=169804&action=view","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4811","sourceIdentifier":"cve@mitre.org","published":"2008-10-31T18:09:08.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to templates and a \\ (backslash) before a dollar-sign character."},{"lang":"es","value":"La función _expand_quoted_text en libs/Smarty_Compiler.class.php en Smarty 2.6.20 r2797 y anteriores permite a atacantes remotos ejecutar código PHP de su elección mediante vectores relacionados con plantillas y una \\ (barra invertida) antes de un carácter del signo del dólar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.20","matchCriteriaId":"77A20DDC-B660-4707-9CF6-76998641F161"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D5FB053C-A0E3-49AF-ADF6-06A268B63061"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"20D6D0EB-C680-479C-867A-13A90408E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C83A1128-0AE1-41F4-A836-67F16CD65DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8EB346-D9D3-4EDC-A2BC-C08FE1B72183"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C647DEF-268B-4259-9C06-A802C6688AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D59EC271-7B08-4058-85EA-5C5B68915BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F786C297-9711-4753-AE70-F1EC8F3DC36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"64819A4D-5F8C-4FFF-92DD-BBFA53840043"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9B07FF05-D669-4323-B987-F8D33CF41CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6DEB456-742C-42A1-B96D-604ADFFB30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EACD5727-71A3-4CFE-8F66-246B1BA378A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"8E7033B8-8298-497B-ADD2-4A3E73205EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"AC146CA8-F777-43A8-850B-85DBCB1A1E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DB4902CC-B3BE-4C5F-9550-F33E8DBE94EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5BEA9CF5-BB3D-47FD-91F2-24AE73388B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3638BE10-DA43-4821-92ED-A60FF38AEB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CAE038A6-11B7-4A33-A5F6-864331C72828"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"44EAF434-A6A7-460D-B138-A7DBE27963AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"E76D49D2-4D30-475D-848E-C5D7986A18CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B13B482E-D2CF-4EE7-A4BC-0E866051D6A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"96E029B3-0375-4300-AB75-7FF25ABEC03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5289CD34-B0C5-4421-AF45-F121D1BC05A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1A405A14-0B55-4EA7-8F14-55AD784D6618"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"406D30AC-2746-4C9A-A886-6B9946C503B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B3690F3-EEC9-4D00-B5C6-EBAFA7983E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C1C62C2F-702C-4D6B-BA9B-36C3A84C5029"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D459162-8F88-4187-B683-7A873CFED17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8575FCF2-8F3B-4274-8201-D51A50C55ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E1DD77B1-E9BE-4386-9986-B733D9D41A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B488FCA5-B5CA-49D7-AE78-AB5DC0039CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7BCB54B1-99D8-4D4C-BCD5-47A34AB7540B"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"979E2B4D-CDB8-41AB-AC83-476BF0858E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"457C0F14-9FD1-4BEE-87BB-CDAE861592B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36394FA5-1E04-4C06-A36D-2A661AED7BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"644F6E4E-2B11-436F-A3A1-60042A7631D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F93CC1-7BD4-4006-BF13-3A044CF917ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0C344438-31E7-4180-9FE4-A0C575BA3CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"249A2041-C515-4072-8091-32E65A1F42A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"243A99DD-A54E-4D96-BF67-5853CE2FC5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"18214825-9B27-4DF1-A715-C1B825450070"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"46D805C7-D9B9-4E3A-8A6A-0F4AD53AF0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"15A5DCDA-32CC-4675-A1C1-E07AEFEE1491"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"31588789-D836-44F4-AD3C-26A4E071B451"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"96D8E66D-8726-460C-A60D-6F2E534AA507"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DDCDF3E7-441D-48E2-BA45-41E11AEB7458"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"EBD88BE2-82D0-4122-95F3-B3DB85F5A31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"DB7094A7-426F-44D6-AD97-97A10F46A3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"560FF27F-4899-4139-80E6-C7F6E4FAAA15"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"039BD24A-B097-44AF-A145-469AE27F3B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"BD4087E3-9EE0-4FDD-A822-973619B51FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"8DB44614-3BBB-4F3F-8558-D2FE258E1CDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"3488FA52-8180-42B8-9B36-EFB83051802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"EB761B72-10D4-4E8F-8E2E-C0D9F1D07E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"AE7458AC-3220-45B1-AA56-F7B82688105A"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"E8AAAB3C-403D-4912-884A-4D258AA03698"},{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"EEE3397B-7AF2-418F-8A07-7CF9A9CA8558"}]}]}],"references":[{"url":"http://secunia.com/advisories/32329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityvulns.ru/Udocument746.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/25/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31862","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46406","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityvulns.ru/Udocument746.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4812","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.460","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts."},{"lang":"es","value":"Error de índice de array en Adobe Reader y Acrobat, y la extensión de Explorer (también conocida como AcroRd32Info), v8.1.2, v8.1.1 y anteriores; permite a atacantes remotos ejecutar código de su elección a través de un documento PDF manipulado que provoca una escritura fuera de rango. Está relacionado con la validación de Tipo de fuentes 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"E3E09C95-5726-486C-86C6-F1E98D281DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"FF117631-0095-4139-AFAC-D2C9050674AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"3AA6AB66-8399-41E9-9688-7EEC083AFEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*","matchCriteriaId":"C05B37C5-3043-4398-B009-7FFD5AF9D9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*","matchCriteriaId":"73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*","matchCriteriaId":"A72B429E-3C05-49A2-8097-72D968473B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"612599DD-94C9-4ECF-8986-C3BF355779B4"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35163","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32100","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46332","source":"cve@mitre.org"},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4813","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing."},{"lang":"es","value":"Adobe Reader y Acrobat v8.1.2 y anteriores; permiten a atacantes remotos ejecutar código de su elección a través de un PDF manipulado que (1) realiza acciones no especificadas en un objecto Collab que provoca una corrupción de memoria, relacionado con le método GetCosObj; o (2) contiene un objecto PDF mal formado que provoca una corrupción de memoria en una validación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"E3E09C95-5726-486C-86C6-F1E98D281DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"FF117631-0095-4139-AFAC-D2C9050674AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"3AA6AB66-8399-41E9-9688-7EEC083AFEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*","matchCriteriaId":"C05B37C5-3043-4398-B009-7FFD5AF9D9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*","matchCriteriaId":"73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*","matchCriteriaId":"A72B429E-3C05-49A2-8097-72D968473B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"612599DD-94C9-4ECF-8986-C3BF355779B4"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4564","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498056/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498057/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32100","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-073/","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-074/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46344","source":"cve@mitre.org"},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498056/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498057/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-073/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-074/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4814","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.523","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an \"input validation issue.\""},{"lang":"es","value":"Vulnerabilidad no especificada en un método JavaScript en Adobe Reader y Acrobat 8.1.2 y anteriores permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Esté relacionado con un \"tema de validación de entrada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"E3E09C95-5726-486C-86C6-F1E98D281DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"FF117631-0095-4139-AFAC-D2C9050674AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"3AA6AB66-8399-41E9-9688-7EEC083AFEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*","matchCriteriaId":"C05B37C5-3043-4398-B009-7FFD5AF9D9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*","matchCriteriaId":"73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*","matchCriteriaId":"A72B429E-3C05-49A2-8097-72D968473B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"612599DD-94C9-4ECF-8986-C3BF355779B4"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32100","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.skyrecon.com/index.php?option=com_content&task=view&id=302&Itemid=124","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46334","source":"cve@mitre.org"},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.skyrecon.com/index.php?option=com_content&task=view&id=302&Itemid=124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4815","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.557","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en Adobe Reader y Acrobat 8.1.2 y anteriores en Unix y Linux; permite a los atacantes ganar privilegios mediante un programa troyano en un directorio no especificado que está asociado a una RPATH no segura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A7C398-5356-45D6-AA5C-53E63BC88DCA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"E3E09C95-5726-486C-86C6-F1E98D281DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"FF117631-0095-4139-AFAC-D2C9050674AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"3AA6AB66-8399-41E9-9688-7EEC083AFEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*","matchCriteriaId":"C05B37C5-3043-4398-B009-7FFD5AF9D9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*","matchCriteriaId":"73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*","matchCriteriaId":"A72B429E-3C05-49A2-8097-72D968473B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"612599DD-94C9-4ECF-8986-C3BF355779B4"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32100","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46335","source":"cve@mitre.org"},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4816","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.570","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el Gestor de Descargas de Adobe Reader v8.1.2 y anteriores en Windows; permite a atacantes remotos modificar las opciones de Seguridad de Internet en una máquina cliente a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"E3E09C95-5726-486C-86C6-F1E98D281DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"FF117631-0095-4139-AFAC-D2C9050674AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"3AA6AB66-8399-41E9-9688-7EEC083AFEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*","matchCriteriaId":"C05B37C5-3043-4398-B009-7FFD5AF9D9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*","matchCriteriaId":"73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*","matchCriteriaId":"A72B429E-3C05-49A2-8097-72D968473B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"612599DD-94C9-4ECF-8986-C3BF355779B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"BEE06D5B-6D21-4B3C-AA0B-06D421924D2D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4817","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.603","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption."},{"lang":"es","value":"El Gestor de Descargas (Download Manager) de Adobe Acrobat Professional y Reader v8.1.2 y anteriores; permite a atacantes remotos ejecutar código de su elección a través de un documento PDF manipulado que llama a una función AcroJS con un argumento de cadena larga provocando una corrupción del montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"BEE06D5B-6D21-4B3C-AA0B-06D421924D2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:3d:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"E3E09C95-5726-486C-86C6-F1E98D281DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:professional:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"FF117631-0095-4139-AFAC-D2C9050674AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:unknown:standard:*:*:*:*:*","versionEndIncluding":"8.1.2","matchCriteriaId":"3AA6AB66-8399-41E9-9688-7EEC083AFEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:3d:*:*:*:*:*","matchCriteriaId":"C05B37C5-3043-4398-B009-7FFD5AF9D9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:professional:*:*:*:*:*","matchCriteriaId":"73AE4111-A2AD-41A6-9F74-6C5DCBAD7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:unknown:standard:*:*:*:*:*","matchCriteriaId":"A72B429E-3C05-49A2-8097-72D968473B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"612599DD-94C9-4ECF-8986-C3BF355779B4"}]}]}],"references":[{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/49541","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021140","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"cve@mitre.org"},{"url":"http://download.oracle.com/sunalerts/1019937.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0974.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-309A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4818","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe Flash Player v9.0.124.0 y versiones anteriores permite a atacantes remotos inyectar web script o HTML a través de vectores envueltos en cabeceras de respuesta HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021146","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46531","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4819","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.747","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no específica en Adobe Flash Player v9.0.124.0 y anteriores, facilitan a atacantes remotos conducir ataques de revinvulación DNS, mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021147","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46532","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4820","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el control ActiveX de Flash Player en Adobe Flash Player v9.0.124.0 y anteriores para Windows; permite a los atacantes obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021148","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46533","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4821","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Adobe Flash Player 9.0.124.0 y anteriores, cuando se usa un navegador de Mozilla, no interpreta adecuadamente URLs jar:, lo que permite a atacantes obtener información sensible mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:camino:*:*:*:*:*:*:*:*","matchCriteriaId":"00F4BE3D-0CBC-4A26-AB40-994C11BC56CD"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021149","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46534","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4822","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.873","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy."},{"lang":"es","value":"Adobe Flash Player v9.0.124.0 y anteriores no interpretan de forma adecuada los ficheros de políticas, lo que permite a atacantes remotos saltarse la política de dominio “non-root”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021150","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46535","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4823","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.903","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe Flash Player v9.0.124.0 y versiones anteriores permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores relacionados con una interpretación perdida de un atributo ActionScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021151","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4824","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T22:21:26.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to \"input validation errors.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Adobe Flash Player 10.x versiones anteriores a v10.0.12.36 y 9.x versiones anteriores a v9.0.151.0"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.16.0","versionEndExcluding":"9.0.151.0","matchCriteriaId":"C9617651-EBE0-443C-9C56-75A6DB6DFA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"10","versionEndExcluding":"10.0.12.36","matchCriteriaId":"24B27C65-29D0-42D7-8293-67839687888A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/49958","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32772","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3189","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/49958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4829","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2008-11-25T23:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long \"Zwitterion v\" HTTP header, related to the http_parse_sc_header function; (2) a crafted pls playlist with a long entry, related to the http_get_pls function; or (3) a crafted m3u playlist with a long File entry, related to the http_get_m3u function."},{"lang":"es","value":"Múltiples desbordamientos de búfer en lib/http.c de Streamripper v1.63.5; permiten a atacantes remotos ejecutar código de su elección a través de (1) una cabecera larga HTTP \"Zwitterion v\" relacionada con la función http_parse_sc_header; (2) una lista de reproducción pls manipulada con una entrada larga, relacionada con la función http_get_pls; o (3) una lista de reproducción m3u manipulada con una entrada larga de Fichero, relacionada con la función http_get_m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:streamripper:streamripper:1.63.5:*:*:*:*:*:*:*","matchCriteriaId":"1860192B-F9E0-4507-AECB-7C9F5BB770BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32562","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33052","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33061","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-50/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/4647","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2008/dsa-1683","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.osvdb.org/49997","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/498486/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/32356","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2008/3207","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-50/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498486/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4831","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe ColdFusion v8 y v8.0.1 y ColdFusion MX v7.0.2; permite a usuarios locales evitar las restricciones de la caja de arena (sandbox) y obtener información sensible o posiblemente ganar privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*","matchCriteriaId":"8E7948AA-CB18-4666-B469-871F0680134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"28C8D6AF-EDE1-42BD-A47C-2EF8690299BD"}]}]}],"references":[{"url":"http://osvdb.org/49709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32567","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-21.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32130","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021145","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3032","source":"cve@mitre.org"},{"url":"http://osvdb.org/49709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4832","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run.  NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time."},{"lang":"es","value":"rc.sysinit en el paquete initscripts en sus versiones 8.12-8.21 y 8.56.15-0.1 de rPath permite a usuarios locales borrar archivos arbitrarios a través de un ataque de seguimiento de enlace simbólicos sobre un directorio bajo (1) /var/lock  o (2) /var/run. NOTA: Este problema existe debido a una condición de carrera en una incorrecta solución a la vulnerabilidad CVE-2008-3524. NOTA: La explotación podrá exigir un escenario inusual en el que se ejecuta rc.sysinit en un momento distinto al  arranque del sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rpath:initscripts:8.12-8.21:*:*:*:*:*:*:*","matchCriteriaId":"332AE477-DD2E-4012-9DFD-EC9A2FD5294C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rpath:initscripts:8.56.15-0.1:*:*:*:*:*:*:*","matchCriteriaId":"6887AA0A-EF95-4723-B059-C098935C60CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:rpath:appliance_platform_linux_service:1:*:*:*:*:*:*:*","matchCriteriaId":"23EA5FFA-702B-49D1-AF5F-518DE7FA6099"},{"vulnerable":false,"criteria":"cpe:2.3:o:rpath:appliance_platform_linux_service:2:*:*:*:*:*:*:*","matchCriteriaId":"55F9B489-0F83-4812-A2CA-A7607E7BCEAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:rpath:linux:1:*:*:*:*:*:*:*","matchCriteriaId":"A2B66383-4124-4579-BC8E-36DBE7ABB543"},{"vulnerable":false,"criteria":"cpe:2.3:o:rpath:linux:2:*:*:*:*:*:*:*","matchCriteriaId":"48D2FD6E-C9C1-4DF0-9F01-E869FA97B153"}]}]}],"references":[{"url":"http://secunia.com/advisories/32710","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46700","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4837","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.173","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Microsoft Works 8 allow remote attackers to execute arbitrary code via a crafted Word document that contains a malformed table property, which triggers memory corruption, aka \"Word Memory Corruption Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer en la región stack de la memoria en Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3 y 2007 Gold y SP1; Word Viewer 2003 Gold y SP3; Paquete de compatibilidad de Office para formatos de archivo de Word, Excel y PowerPoint 2007 Gold y SP1; y Microsoft Works versión 8 permite a los atacantes remotos ejecutar código arbitrario por medio de un documento de Word creado que contiene una propiedad de tabla malformada, lo que desencadena una corrupción de memoria, también se conoce como \"Word Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"523CCEC6-6B7D-4D77-B2B0-4E4C349A7030"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*","matchCriteriaId":"293914AF-6101-4F50-9560-A4EA99D767C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:*:*:*:*:*:*:*","matchCriteriaId":"29AB63E7-7FB6-47DE-9451-676887AFC55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_outlook:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"45E63CC9-6EBC-4672-A0DB-A73D455002C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:*:*:*:*:*:*:*","matchCriteriaId":"CF8D06FE-002B-48B2-991D-860C3AF7D2D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:*:2007:*:*:*:*:*:*","matchCriteriaId":"224A6712-E6DF-4BC6-9D61-73DD73C2F66B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:office_system:sp1:2007:*:*:*:*:*:*","matchCriteriaId":"491B00D2-3B9B-46AB-B068-B1AD96698EE2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499064/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021370","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-086","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-086/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5982","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/499064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-086/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4841","sourceIdentifier":"secure@microsoft.com","published":"2008-12-10T14:00:01.190","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.microsoft.com/technet/security/advisory/960906.mspx\r\n\r\n\r\nMicrosoft Security Advisory (960906)\r\nVulnerability in WordPad Text Converter Could Allow Remote Code Execution\r\nPublished: December 9, 2008\r\n\r\nMicrosoft is investigating new reports of a vulnerability in the WordPad Text Converter for Word 97 files on Windows 2000 Service Pack 4, Windows XP Service Pack 2, Windows Server 2003 Service Pack 1, and Windows Server 2003 Service Pack 2. Windows XP Service Pack 3, Windows Vista, and Windows Server 2008 are not affected as these operating systems do not contain the vulnerable code.\r\n\r\nUpon completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through a service pack, our monthly security update release process, or an out-of-cycle security update, depending on customer needs.\r\n\r\nAt this time, we are aware only of limited and targeted attacks that attempt to use this vulnerability. Additionally, as the issue has not been publicly disclosed broadly, we believe the risk at this time to be limited.\r\n\r\nWe continue to encourage responsible disclosure of vulnerabilities. We believe the commonly accepted practice of reporting vulnerabilities directly to a vendor serves everyone's best interests. This practice helps to ensure that customers receive comprehensive, high-quality updates for security vulnerabilities without exposure to malicious attackers while the update is being developed.\r\n\r\nCustomers who believe that they have been attacked can obtain security support at Get security support and should contact the national law enforcement agency in their country. Customers in the United States can contact Customer Service and Support at no charge using the PC Safety hotline at 1-866-PCSAFETY. Additionally, customers in the United States should contact their local FBI office or report their situation at Internet Crime Complaint Center.\r\n\r\nMicrosoft continues to encourage customers to follow the \"Protect Your Computer\" guidance of enabling a firewall, applying all software updates and installing anti-virus and anti-spyware software. Additional information can be found at Security at home.\r\n\r\nMitigating Factors:\r\n•\t\r\n\r\nThis issue does not affect Windows XP Service Pack 3, Windows Vista, and Windows Server 2008.\r\n•\t\r\n\r\nAn attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.\r\n•\t\r\n\r\nThe vulnerability cannot be exploited automatically through e-mail. For an attack to be successful, a user must open an attachment that is sent in an e-mail message.\r\n•\t\r\n\r\nWhen Microsoft Office Word is installed, Word 97 documents are by default opened using Microsoft Office Word, which is not affected by this vulnerability. However, an attacker could rename a malicious file to have a Windows Write (.wri) extension, which would still invoke WordPad. This file type can be blocked at the Internet perimeter.","cveTags":[],"descriptions":[{"lang":"en","value":"The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008.  NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure."},{"lang":"es","value":"El WordPad Text Converter para archivos Word 97 en Microsoft Windows 2000 SP4, XP SP2, y Server 2003 SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de un archivo (1) .doc, (2) .wri, o (3) .rtf Word 97 manipulado que provoca una corrupción de memoria, como se ha explotado libremente en Diciembre de 2008. NOTA: desde 10122008, no está claro si esta vulnerabilidad está relacionada con un caso de WordPad descubierto en 25092008 con el ejemplo 2008-crash.doc.rar, pero no hay suficientes detalles para verificarlo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wordpad:*:*:*:*:*:*:*:*","matchCriteriaId":"2531DDF2-D2AA-4919-B756-28478AEA5AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wordpad:unknown:*:*:*:*:*:*:*","matchCriteriaId":"8AD1E9AD-5463-48FD-812B-22E5A5460F09"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://milw0rm.com/sploits/2008-crash.doc.rar","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32997","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4711","source":"secure@microsoft.com"},{"url":"http://securitytracker.com/id?1021376","source":"secure@microsoft.com"},{"url":"http://www.microsoft.com/technet/security/advisory/960906.mspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31399","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32718","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3390","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6050","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/6560","source":"secure@microsoft.com"},{"url":"http://milw0rm.com/sploits/2008-crash.doc.rar","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/security/advisory/960906.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4844","sourceIdentifier":"secure@microsoft.com","published":"2008-12-11T15:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008."},{"lang":"es","value":"Una vulnerabilidad de uso de la memoria previamente liberada en la función CRecordInstance::TransferToDestination en la biblioteca mshtml.dll en Internet Explorer de Microsoft versiones 5.01, 6, 6 SP1 y 7, permite a atacantes remotos ejecutar código arbitrario por medio de enlaces DSO involucrando a (1) una Island XML, (2 ) DSOs XML, y (3) Tabular Data Control (TDC) en un documento HTML o XML diseñado, como es demostrado mediante elementos anidados SPAN o MARQUEE, y explotados \"in the wild\" en diciembre de 2008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx","source":"secure@microsoft.com"},{"url":"http://code.google.com/p/inception-h2hc/","source":"secure@microsoft.com"},{"url":"http://isc.sans.org/diary.html?storyid=5458","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=123015308222620&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=123015308222620&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33089","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.avertlabs.com/research/blog/index.php/2008/12/09/yet-another-unpatched-drive-by-exploit-found-on-the-web/","source":"secure@microsoft.com"},{"url":"http://www.breakingpointsystems.com/community/blog/patch-tuesdays-and-drive-by-sundays","source":"secure@microsoft.com"},{"url":"http://www.kb.cert.org/vuls/id/493881","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/961051.mspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.scanw.com/blog/archives/303","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/32721","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021381","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-352A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3391","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-078","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6007","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/7403","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/7410","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/7477","source":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/7583","source":"secure@microsoft.com"},{"url":"http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/inception-h2hc/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=5458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=123015308222620&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123015308222620&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.avertlabs.com/research/blog/index.php/2008/12/09/yet-another-unpatched-drive-by-exploit-found-on-the-web/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.breakingpointsystems.com/community/blog/patch-tuesdays-and-drive-by-sundays","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/493881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/961051.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.scanw.com/blog/archives/303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-344A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-352A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4863","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:00.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiada en BPY_interface in Blender v2.46 permite a usuarios locales ejecutar código de su elección mediante un archivo Python caballo de troya en el directorio actual, relacionado con una configuración errónea de sys.path por la función PySys_SetArgv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:2.46:*:*:*:*:*:*:*","matchCriteriaId":"AECA8835-9826-432C-A5EC-B7362D0C27E6"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503632","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201001-07.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:038","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/1","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201001-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4864","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679."},{"lang":"es","value":"Múltiples desbordamientos de entero en imageop.c en el módulo imageop en Python de v1.5.2 a v2.5.1 permite a atacantes dependientes del contexto romper Python VM y ejecutar código de su elección mediante valores enteros grandes en ciertos argumentos a la función crop, llevando a un desbordamiento de búfer, una vulnerabilidad distinta a CVE-2007-4965 y CVE-2008-1679."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.2","versionEndExcluding":"2.4.6","matchCriteriaId":"A0CCED44-46AE-43C0-985E-2C4B7D36371A"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndExcluding":"2.5.3","matchCriteriaId":"99EC8459-4F64-4433-AA8F-34C45AA83F27"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2008-008.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689&view=diff&r1=66689&r2=66688&p1=python/trunk/Modules/imageop.c&p2=/python/trunk/Modules/imageop.c","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://svn.python.org/view?rev=66689&view=rev","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31932","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31976","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46606","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2008-008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689&view=diff&r1=66689&r2=66688&p1=python/trunk/Modules/imageop.c&p2=/python/trunk/Modules/imageop.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://svn.python.org/view?rev=66689&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-4865","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options.  NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no confiable en valgrind anterior a la versión 3.4.0,  permite a los usuarios locales ejecutar programas arbitrarios por medio de un archivo .valgrindrc de tipo caballo de Troya en el directorio de trabajo actual, como se demuestra utilizando una configuración de opciones de comando --db- maliciosas .  NOTA: la gravedad de este problema se ha cuestionado, pero el CVE incluye este problema porque la ejecución de un programa desde un directorio que no es de confianza es un escenario común."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-4865\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-02-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:*:rc1:*:*:*:*:*:*","versionEndIncluding":"3.4.0","matchCriteriaId":"CF1EAC64-F4BD-4D47-8911-95BD992E7D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"94A64050-1C4E-4F15-B67B-56FDFCE08577"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"64F0D4F4-98F5-4425-8E2C-601B40ED59A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2EDB92F1-6418-4278-9885-D20BBCA44137"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F7D6BBF5-F4A1-410D-95EB-36893BDB01F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"730EF394-7A00-417F-8BD2-6EADE589488B"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7224BE5F-07B6-4E03-9B45-DA014B74BBAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:2.4.1:*:powerpc:*:*:*:*:*","matchCriteriaId":"561ECD31-3D7B-4D37-B27A-42B568493A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"93AC14DE-CBA0-4F89-A22D-2B919937AC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7992D2F0-419E-4E53-B51F-48619908205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C21779DD-28AD-4663-9A0B-EBF2C62C5B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1964E2AE-CF86-45B5-9A92-65DB4FF8A023"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"83D89EB5-3D7D-4063-B14B-C205298F0A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9477B98-6BDF-40E8-85F7-BB21901637C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A986472F-6273-4D79-8186-42B21CC5D811"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1A276C7C-BF1B-400F-A4F4-574E4D96389C"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D28840-D164-4F8F-B65E-A29BCF9CBD90"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"638B1E2A-0F2C-4A70-A104-8240DDB26AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AC7DA8BD-2DE1-4959-91DE-F320B7C3E1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"6702F6DC-0792-41D0-B143-74312F0B8A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"AE87E144-CEB2-41BF-9F7D-A57A5D3EC343"},{"vulnerable":true,"criteria":"cpe:2.3:a:valgrind:valgrind:3.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1630AF79-2303-45C6-8D47-6CC297ADABB8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200902-03.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=200901032045.17604.jseward%40acm.org&forum_name=valgrind-announce","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/28/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/9","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200902-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=200901032045.17604.jseward%40acm.org&forum_name=valgrind-announce","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/27/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/28/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/9","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4866","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAX_REORDER_DELAY."},{"lang":"es","value":"Múltiples desbordamientos de búfer en libavformat/utils.c en FFmpeg 0.4.9 antes de r14715, como lo usa MPlayer, permite a atacantes dependientes del contexto tener un impacto desconocido mediante vectores relacionados con código de generación de DTS con un retraso mayor que MAX_REORDER_DELAY."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:pre1:*:*:*:*:*:*","versionEndIncluding":"0.4.9","matchCriteriaId":"DA4553D3-E176-4412-9858-8B5793010CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2649A80-4739-4BBB-AB0B-99AD435BE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4A2E77D-B826-4B49-ADC8-7F704E149A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"18157837-4550-45E3-A12E-AE06E047E253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E9F42611-C3E2-416B-9AE7-A5AE83E4DEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3A20789F-26E3-4871-B24E-25E922BADDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"67C6C243-3ACC-49C3-80CA-D7CA8FEFF0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE6D368-0BA6-4499-B7E1-EE16C03012E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"26C0F6EF-0452-4AFE-AF3E-B88F963A0938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5B4DD372-4D3B-445C-8C38-E083A3C0D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"733C03D7-2780-4D69-A98D-BCFB91D1119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E6979C17-0BC6-47D1-9B73-254D84306A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"204C7C05-3441-4DB0-8702-D99C8FCB381E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"27582D6B-217E-43B0-A5A5-BEEB9199688F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016011.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016012.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34296","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34385","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34845","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1782","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:013","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:015","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33308","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46322","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4867","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.167","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCA_MAX_FRAME_SIZE value."},{"lang":"es","value":"Desbordamiento de búfer en libavcodec/dca.c en FFmpeg 0.4.9 antes de r14917, como es usado por MPlayer, permite a atacantes dependientes del contexto tener un impacto desconocido mediante vectores relacionados con un valor DCA_MAX_FRAME_SIZE incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:pre1:*:*:*:*:*:*","versionEndIncluding":"0.4.9","matchCriteriaId":"DA4553D3-E176-4412-9858-8B5793010CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2649A80-4739-4BBB-AB0B-99AD435BE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4A2E77D-B826-4B49-ADC8-7F704E149A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"18157837-4550-45E3-A12E-AE06E047E253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E9F42611-C3E2-416B-9AE7-A5AE83E4DEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3A20789F-26E3-4871-B24E-25E922BADDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"67C6C243-3ACC-49C3-80CA-D7CA8FEFF0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE6D368-0BA6-4499-B7E1-EE16C03012E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"26C0F6EF-0452-4AFE-AF3E-B88F963A0938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5B4DD372-4D3B-445C-8C38-E083A3C0D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"733C03D7-2780-4D69-A98D-BCFB91D1119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E6979C17-0BC6-47D1-9B73-254D84306A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"204C7C05-3441-4DB0-8702-D99C8FCB381E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"27582D6B-217E-43B0-A5A5-BEEB9199688F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"cve@mitre.org"},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016352.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34296","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34385","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:013","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:014","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:015","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33308","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46324","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016352.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4868","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.197","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free \"on random pointers.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la función avcodec_close en libavcodec/utils.c en FFmpeg 0.4.9 antes de r14787, como lo usa MPlayer, tiene un impacto y vectores de ataque desconocidos, relacionado con una liberación de \"punteros aleatorios\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:pre1:*:*:*:*:*:*","versionEndIncluding":"0.4.9","matchCriteriaId":"DA4553D3-E176-4412-9858-8B5793010CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2649A80-4739-4BBB-AB0B-99AD435BE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4A2E77D-B826-4B49-ADC8-7F704E149A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"18157837-4550-45E3-A12E-AE06E047E253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E9F42611-C3E2-416B-9AE7-A5AE83E4DEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3A20789F-26E3-4871-B24E-25E922BADDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"67C6C243-3ACC-49C3-80CA-D7CA8FEFF0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE6D368-0BA6-4499-B7E1-EE16C03012E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"26C0F6EF-0452-4AFE-AF3E-B88F963A0938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5B4DD372-4D3B-445C-8C38-E083A3C0D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"733C03D7-2780-4D69-A98D-BCFB91D1119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E6979C17-0BC6-47D1-9B73-254D84306A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"204C7C05-3441-4DB0-8702-D99C8FCB381E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"27582D6B-217E-43B0-A5A5-BEEB9199688F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"cve@mitre.org"},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016136.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34385","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46325","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4869","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors, aka a \"Tcp/udp memory leak.\""},{"lang":"es","value":"FFmpeg 0.4.9, del modo que lo usa MPlayer, permite a atacantes dependientes del contexto provocar una denegación de servicio (agotamiento de memoria) mediante vectores desconocidos, también conocido como \"Tcp/udp memory leak (fuga de memoria tcp/udp)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:pre1:*:*:*:*:*:*","versionEndIncluding":"0.4.9","matchCriteriaId":"DA4553D3-E176-4412-9858-8B5793010CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2649A80-4739-4BBB-AB0B-99AD435BE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4A2E77D-B826-4B49-ADC8-7F704E149A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"18157837-4550-45E3-A12E-AE06E047E253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E9F42611-C3E2-416B-9AE7-A5AE83E4DEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3A20789F-26E3-4871-B24E-25E922BADDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"67C6C243-3ACC-49C3-80CA-D7CA8FEFF0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE6D368-0BA6-4499-B7E1-EE16C03012E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"26C0F6EF-0452-4AFE-AF3E-B88F963A0938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5B4DD372-4D3B-445C-8C38-E083A3C0D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"733C03D7-2780-4D69-A98D-BCFB91D1119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E6979C17-0BC6-47D1-9B73-254D84306A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"204C7C05-3441-4DB0-8702-D99C8FCB381E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"27582D6B-217E-43B0-A5A5-BEEB9199688F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34385","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:297","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46326","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4870","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value."},{"lang":"es","value":"dovecot 1.0.7 en Red Hat Enterprise Linux (RHEL) 5 y posiblemente Fedora, utiliza permisos leíbles por todo el mundo para dovecot.conf, lo que permite a usuarios locales obtener el valor del parámetro ssl_key_password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4A349510-4D00-4978-93D9-3F9F5E0CD8DE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32164","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33149","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33624","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/10","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0205.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436287","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46323","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://secunia.com/advisories/32164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2008-4871","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.353","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en My Little Forum 1.75 and 2.0 Beta 23 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante etiquetas BBcode IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:my_little_forum:my_little_forum:1.75:*:*:*:*:*:*:*","matchCriteriaId":"FA8DCBF6-2D91-4988-96F8-FCF2B470719C"},{"vulnerable":true,"criteria":"cpe:2.3:a:my_little_forum:my_little_forum:2.0:beta_23:*:*:*:*:*:*","matchCriteriaId":"48CEADA4-8755-4FE2-ADD2-84D510F0FFE4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4533","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487987/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27746","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securityreason.com/securityalert/4533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487987/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-4872","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.367","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bidhistory.php en iTechBids Gold 5.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro item_id. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:5.0:unknown:gold:*:*:*:*:*","matchCriteriaId":"8054A640-4C77-4942-BA19-5482ABFFA80E"}]}]}],"references":[{"url":"http://secunia.com/advisories/28780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4873","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T00:00:01.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a down_file action."},{"lang":"es","value":"board.cgi en Sepal SPBOARD 4.5 permite a atacantes remotos ejecutar comandos de su elección mediante metacaracteres de consola en el parámetro file durante una acción down_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sepal:spboard:4.5:*:*:*:*:*:*:*","matchCriteriaId":"AF8A236F-4425-48A9-8684-1FFB5BB5A8C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32459","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31972","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46192","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6864","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4874","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T06:00:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door \"service\" account with \"service\" as its password, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"El componente web en Philips Electronics VOIP841 DECT Phone with firmware v1.0.4.50 y v1.0.4.80 tiene una cuenta de \"servicio\" de puerta trasera con \"service\" como contraseña, lo que facilita a atacantes remotos obtener acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:philips_electronics:voip841_dect_phone:1.0.4.48:*:*:*:*:*:*:*","matchCriteriaId":"D08A0A05-EF8F-4135-880B-C06707DE3CE3"},{"vulnerable":true,"criteria":"cpe:2.3:h:philips_electronics:voip841_dect_phone:1.0.4.50:*:*:*:*:*:*:*","matchCriteriaId":"F0364FBC-F56D-48CF-8ABB-226F8C01DD2A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0227.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/42940","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4536","source":"cve@mitre.org"},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2008-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488127/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27790","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0583","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5113","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2008-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488127/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4875","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T06:00:01.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a GET request.  NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access to sensitive files such as (1) save.dat and (2) apply.log, which can contain other credentials such as the Skype username and password."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servidor web en Philips Electronics VOIP841 DECT Phone con firmware v1.0.4.50 y v1.0.4.80 permite a usuarios remotamente autentificados leer archivos de su elección mediante un .. (punto punto) en una petición GET. NOTA: esto se puede utilizar con la CVE-2008-4874 para acceso no autentificado a archivos sensibles como (1) save.dat y (2) apply.log, que podrían contener otras credenciales como el nombre y contraseña de Skype."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:philips_electronics:voip841_dect_phone:1.0.4.48:*:*:*:*:*:*:*","matchCriteriaId":"D08A0A05-EF8F-4135-880B-C06707DE3CE3"},{"vulnerable":true,"criteria":"cpe:2.3:h:philips_electronics:voip841_dect_phone:1.0.4.50:*:*:*:*:*:*:*","matchCriteriaId":"F0364FBC-F56D-48CF-8ABB-226F8C01DD2A"}]}]}],"references":[{"url":"http://osvdb.org/42941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488127/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27790","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0583","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40534","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5113","source":"cve@mitre.org"},{"url":"http://osvdb.org/42941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488127/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4876","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T06:00:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente de servidor web en Philips Electronics VOIP841 DECT Phone con firmware v1.0.4.50 y v1.0.4.80 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el URL pedido, lo que no se administra correctamente en una página de error web 404."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:philips_electronics:voip841_dect_phone:1.0.4.48:*:*:*:*:*:*:*","matchCriteriaId":"D08A0A05-EF8F-4135-880B-C06707DE3CE3"},{"vulnerable":true,"criteria":"cpe:2.3:h:philips_electronics:voip841_dect_phone:1.0.4.50:*:*:*:*:*:*:*","matchCriteriaId":"F0364FBC-F56D-48CF-8ABB-226F8C01DD2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/28978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488127/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27790","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0583","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488127/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4877","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T06:00:01.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en WebCards 1.3, cuando magic_quotes_gpc está habilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro user. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebcards:webcards:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"C3F1F7D2-2BC3-44E9-82D4-DA48DE2CC163"}]}]}],"references":[{"url":"http://secunia.com/advisories/32440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4535","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46193","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4878","sourceIdentifier":"cve@mitre.org","published":"2008-11-01T06:00:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the \"Add Image Macro\" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo no restringida en la característica \"Add Image Macro\" en WebCards 1.3 permite a administradores remotamente autentificados ejecutar código de su elección actualizando un archivo con una ejecución ejecutable y a continuación accediendo a él mediante una petición directa al archivo actualizado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebcards:webcards:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"C3F1F7D2-2BC3-44E9-82D4-DA48DE2CC163"}]}]}],"references":[{"url":"http://secunia.com/advisories/32440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46222","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4879","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en prod.php en Maran PHP Shop permite a atacantes remotos ejecutar secuancias SQL arbitrarias a través del parámetro cat. Se trata de una vulnerabilidad diferente a CVE-2008-4880."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maran:php_shop:*:*:*:*:*:*:*:*","matchCriteriaId":"5BD606FC-23AF-4D1C-9CBA-D8796C32A55D"}]}]}],"references":[{"url":"http://osvdb.org/49532","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4543","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46307","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6953","source":"cve@mitre.org"},{"url":"http://osvdb.org/49532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4880","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.603","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en prodshow.php en Maran PHP Shop, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parametro id, un vector diferente de CVE-2008-4879."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maran:php_shop:*:*:*:*:*:*:*:*","matchCriteriaId":"5BD606FC-23AF-4D1C-9CBA-D8796C32A55D"}]}]}],"references":[{"url":"http://osvdb.org/49533","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4548","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2976","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46305","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6958","source":"cve@mitre.org"},{"url":"http://osvdb.org/49533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4881","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en tr.php en YourFreeWorld Reminder Service Script permite a atacantes remotos ejecutar secuencias SQL arbitrarias a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:reminder_service_script:*:*:*:*:*:*:*:*","matchCriteriaId":"F14E153A-1034-40DC-832E-982806D1D01F"}]}]}],"references":[{"url":"http://osvdb.org/49593","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32061","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6943","source":"cve@mitre.org"},{"url":"http://osvdb.org/49593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4882","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.680","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr.php in YourFreeWorld Autoresponder Hosting Script, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parametro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:autoresponder_hosting_script:*:*:*:*:*:*:*:*","matchCriteriaId":"131913A4-917B-4F0B-A9D9-DABFB27A06A4"}]}]}],"references":[{"url":"http://osvdb.org/49595","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32504","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4540","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32056","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6938","source":"cve@mitre.org"},{"url":"http://osvdb.org/49595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4883","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en tr.php en YourFreeWorld Blog Blaster Script permite a atacantes remotos ejecutar secuencias SQL arbitrarias a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:blog_blaster_script:*:*:*:*:*:*:*:*","matchCriteriaId":"51984206-08C1-4EAC-88E6-A24EAE983F94"}]}]}],"references":[{"url":"http://osvdb.org/49594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32055","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2988","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6937","source":"cve@mitre.org"},{"url":"http://osvdb.org/49594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4884","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.760","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en tr.php en YourFreeWorld Classifieds Hosting Script permite a atacantes remotos ejecutar secuencias SQL arbitrarias a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:classifieds_hosting_script:*:*:*:*:*:*:*:*","matchCriteriaId":"D9985614-7644-4A54-A1DF-9F378E571C0C"}]}]}],"references":[{"url":"http://osvdb.org/49596","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4538","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6948","source":"cve@mitre.org"},{"url":"http://osvdb.org/49596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4885","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.777","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tr1.php en YourFreeWorld Scrolling Text Ads Script permite a atacantes remotos ejecutar secuencias SQL arbitrarias a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:scrolling_text_ads_script:*:*:*:*:*:*:*:*","matchCriteriaId":"ECA3E967-9FE7-451F-B13B-DE5DA75331FD"}]}]}],"references":[{"url":"http://osvdb.org/49597","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32060","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6942","source":"cve@mitre.org"},{"url":"http://osvdb.org/49597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4886","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en YourFreeWorld Shopping Cart Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parametro c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:shopping_cart_script:*:*:*:*:*:*:*:*","matchCriteriaId":"99B2646C-1F06-4CC2-9802-3E81EF594BE9"}]}]}],"references":[{"url":"http://osvdb.org/49501","source":"cve@mitre.org"},{"url":"http://osvdb.org/49598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4539","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46270","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6952","source":"cve@mitre.org"},{"url":"http://osvdb.org/49501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4887","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.837","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) profile page (profile.php) or (2) game page (game.php).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en NetRisk 2.0 y anteriores permite a atacantes remotos ejecutar secuencias SQL arbitrarias través del parámetro ID en (1) un perfil ó (2) una página de juego."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netrisk:netrisk:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"6BA17F57-54CB-44F2-B0BF-0FA275E3B700"},{"vulnerable":true,"criteria":"cpe:2.3:a:netrisk:netrisk:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B87A51A4-7F50-4E48-ACF1-9289983DFF8F"}]}]}],"references":[{"url":"http://osvdb.org/49498","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32484","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4544","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46263","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6957","source":"cve@mitre.org"},{"url":"http://osvdb.org/49498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4888","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en NetRisk 2.0 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro Error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netrisk:netrisk:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"6BA17F57-54CB-44F2-B0BF-0FA275E3B700"},{"vulnerable":true,"criteria":"cpe:2.3:a:netrisk:netrisk:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B87A51A4-7F50-4E48-ACF1-9289983DFF8F"}]}]}],"references":[{"url":"http://osvdb.org/49497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46261","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6957","source":"cve@mitre.org"},{"url":"http://osvdb.org/49497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4889","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en deV!L'z Clanportal (DZCP) v1.4.9.6 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante del parámetro users en una operación addbuddy en una acción buddys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dev\\!l\\'s:clanportal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.9.6","matchCriteriaId":"CD8A4EA5-94BA-4029-B35C-9FF18EB2FFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dev\\!l\\'s:clanportal:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"28C0C4B7-5AB4-46BC-B115-FFBC53ADD1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dev\\!l\\'s:clanportal:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"1A21F506-3EDD-425A-9B46-127DFE13B719"}]}]}],"references":[{"url":"http://osvdb.org/49500","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2974","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46268","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6961","source":"cve@mitre.org"},{"url":"http://osvdb.org/49500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4890","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:08.963","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en products.php en 1st News 4 Professional (PR 1) permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1st_news:4_professional:pr_1:*:*:*:*:*:*:*","matchCriteriaId":"79D82839-A5FA-496E-8AFC-CD5FB5FD4DBB"}]}]}],"references":[{"url":"http://osvdb.org/49534","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4553","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32042","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46291","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6960","source":"cve@mitre.org"},{"url":"http://osvdb.org/49534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4891","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:38.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en signme.inc.php en Planetluc SignMe v1.5 anterior a v1.55, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro hash. Nota: algunos de estos detalles se han obtenido de información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:planetluc:signme:1.5:*:*:*:*:*:*:*","matchCriteriaId":"AA61FD57-C14A-450C-8920-329900D33EEB"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/88/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32506","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.planetluc.com/en/news/20081101_xss.php?navurl=/en/news.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46199","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/88/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.planetluc.com/en/news/20081101_xss.php?navurl=/en/news.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4892","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:39.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://planetluc.com/en/scripts_mygallery.php","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gallery.inc.php en Planetluc MyGallery v1.7.2 y anteriores, y posiblemente otras versiones anteriores a v1.8.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro mghash. Nota: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:planetluc:mygallery:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"41715D87-D567-43C2-AFF1-4A461437C9FF"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/86/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.planetluc.com/en/news/20081101_xss.php?navurl=/en/news.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46200","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/86/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.planetluc.com/en/news/20081101_xss.php?navurl=/en/news.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4893","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:39.463","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the template_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en emplates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php en Tribiq CMS v5.0.10a, cuando está habilitado register_globals, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro template_path. Nota: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.10a:*:*:*:*:*:*:*","matchCriteriaId":"D4064F5E-4827-49E9-87CF-1ACB5118B4EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46265","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4894","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:39.963","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the template_path parameter.  NOTE: it was later reported that this issue also affects 5.0.12c."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, cuando register_globals esté activado y magic_quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios a través de secuencias de salto de directorio en el parámetro template_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.10a:*:*:*:*:*:*:*","matchCriteriaId":"D4064F5E-4827-49E9-87CF-1ACB5118B4EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46264","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6888","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4895","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:39.993","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en tr.php en YourFreeWorld Downline Builder permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:downline_builder_script:*:*:*:*:*:*:*:*","matchCriteriaId":"C5C7DD4B-F707-4B6C-90D0-09DBEBF46CF5"}]}]}],"references":[{"url":"http://osvdb.org/49599","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32046","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32047","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2990","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6935","source":"cve@mitre.org"},{"url":"http://osvdb.org/49599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4896","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.010","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the art parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en fichiers/add_url.php en Logz CMS v1.3.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro art. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logz:logz:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D1AEFD03-CC22-43B5-A48F-6E12E0391AA7"}]}]}],"references":[{"url":"http://secunia.com/advisories/32542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4897","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en fichiers/add_url.php en logz podcast CMS 1.3.1, cuando está habilitado magic_quotes_gpc permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro art."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logz:logz:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D1AEFD03-CC22-43B5-A48F-6E12E0391AA7"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/logzpodcast-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4546","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46257","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6896","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/logzpodcast-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4898","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en planetluc RateMe 1.3.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro rate en una acción \"Enviar Rate\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:planetluc:rateme:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AEDFFAD7-C614-44A8-B9A5-C45830DBC779"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/85/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46202","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/85/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4899","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorized actions as other users via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Planetluc RateMe v1.3.3 permite a atacantes remotos llevar a cabo acciones no autorizadas como otros usuarios mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:planetluc:rateme:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AEDFFAD7-C614-44A8-B9A5-C45830DBC779"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/85/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32511","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46201","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/85/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4900","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en tr.php en YourFreeWorld Classifieds Blaster Script  permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro \"ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:classifieds_blaster_script:*:*:*:*:*:*:*:*","matchCriteriaId":"59EEBD5C-4490-4CDD-AF85-DAF94D9F2C08"}]}]}],"references":[{"url":"http://osvdb.org/49600","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32062","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6944","source":"cve@mitre.org"},{"url":"http://osvdb.org/49600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4901","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.133","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en admin/admin.php en Article Editor Pro 1.5 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"nombre de usuario\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts_frenzy:article_publisher_pro:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C8965993-ED7E-4F95-9D77-A4B5862DBB6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32030","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46373","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4902","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.150","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en contact_author.php en Article Editor Pro 1.5 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro userid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts_frenzy:article_publisher_pro:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C8965993-ED7E-4F95-9D77-A4B5862DBB6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4903","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.180","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment[url] (Website) parameters."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la funcionalidad \"dejar comentario\" (feedback) en Typo 5.1.3 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los parámetros (1) comentario [autor] (Nombre) y (2) comentario [url] (Website)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.3","matchCriteriaId":"1E3019EC-DA80-4761-B832-964F6EF93A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:1.6:*:*:*:*:*:*:*","matchCriteriaId":"8AB16906-D886-490E-B677-96E498869033"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"AA278206-6FE9-47B0-A2C5-29DB5FBA209D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B47D305A-E52B-487C-A224-A877B88153F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4CF012B6-1435-4030-AD9A-62DB01DE0662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"11CBA97F-C726-4C89-8669-3B54A20910B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CF0A64C3-BE11-4876-9080-9F48BE9FB1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"36A454B2-25F5-4D11-BB6F-8E3B59FFB0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DAD9ECE7-068C-45A7-9E84-5F39C16EC163"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCF5981C-6983-46E3-92E5-8AD5732CAF5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"829B4A24-B296-4998-9660-DFCCC84B5737"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"55B3F7BE-6A7F-4DF6-A8A5-255C80AC5394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2CACF067-89CB-4E95-9765-F440065DDDE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57BB7A8C-1F33-488A-AF97-422105AB1CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C43C4381-76D1-4E4D-929D-57CF7985268E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"B2169F77-8CDF-494F-8A5B-FBFA423F508A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F311CEC8-F619-4F79-A434-6BCB8505F1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.0:*:*:*:*:*:*:*","matchCriteriaId":"A9C58BA0-8E59-43BF-9558-E050C29AF181"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.1:*:*:*:*:*:*:*","matchCriteriaId":"10174180-CBD7-4481-A067-EB3CEA93A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.2:*:*:*:*:*:*:*","matchCriteriaId":"96B6FF23-B700-4B0D-8FA5-1CDED4E9A54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.3:*:*:*:*:*:*:*","matchCriteriaId":"E2A09B06-DF95-4112-9FC8-847BDBCAEBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.4:*:*:*:*:*:*:*","matchCriteriaId":"DF324FFC-353B-47C2-809E-1AF1003DBD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"634E850B-5C36-497C-9175-FBA1F5FF4C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A845374-834E-4696-A9C2-A32C83044CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FBAA0E-8E1D-4E8B-A08D-AA477FEDA85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9D419017-2B6C-4DF9-8B98-F74840721BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.3.98:*:*:*:*:*:*:*","matchCriteriaId":"028B2D4F-8BB6-4DB9-A1A3-3BB88407639E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.3.98.1:*:*:*:*:*:*:*","matchCriteriaId":"7FD1F53D-1911-445A-8230-748F2DD20621"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CF128B29-BFF1-4E99-A1B4-999C14FDB3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4225B42A-48BF-4AD3-ACB7-4806EA785B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"447033D5-7C0E-4184-AF79-E1CB31BD6AE2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4904","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.213","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the \"Manage pages\" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with \"blog publisher\" rights to execute arbitrary SQL commands via the search[published_at] parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la característica \"Manage pages\" (admin/pages) en Typo v5.1.3 y anteriores permite a usuarios remotos autenticados con derechos \"blog publisher\" ejecutar comandos SQL de su elección a través del parámetro search[published_at]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.3","matchCriteriaId":"1E3019EC-DA80-4761-B832-964F6EF93A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:1.6:*:*:*:*:*:*:*","matchCriteriaId":"8AB16906-D886-490E-B677-96E498869033"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"AA278206-6FE9-47B0-A2C5-29DB5FBA209D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B47D305A-E52B-487C-A224-A877B88153F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4CF012B6-1435-4030-AD9A-62DB01DE0662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"11CBA97F-C726-4C89-8669-3B54A20910B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CF0A64C3-BE11-4876-9080-9F48BE9FB1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"36A454B2-25F5-4D11-BB6F-8E3B59FFB0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DAD9ECE7-068C-45A7-9E84-5F39C16EC163"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCF5981C-6983-46E3-92E5-8AD5732CAF5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"829B4A24-B296-4998-9660-DFCCC84B5737"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"55B3F7BE-6A7F-4DF6-A8A5-255C80AC5394"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2CACF067-89CB-4E95-9765-F440065DDDE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57BB7A8C-1F33-488A-AF97-422105AB1CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C43C4381-76D1-4E4D-929D-57CF7985268E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"B2169F77-8CDF-494F-8A5B-FBFA423F508A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F311CEC8-F619-4F79-A434-6BCB8505F1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.0:*:*:*:*:*:*:*","matchCriteriaId":"A9C58BA0-8E59-43BF-9558-E050C29AF181"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.1:*:*:*:*:*:*:*","matchCriteriaId":"10174180-CBD7-4481-A067-EB3CEA93A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.2:*:*:*:*:*:*:*","matchCriteriaId":"96B6FF23-B700-4B0D-8FA5-1CDED4E9A54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.3:*:*:*:*:*:*:*","matchCriteriaId":"E2A09B06-DF95-4112-9FC8-847BDBCAEBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:3.99.4:*:*:*:*:*:*:*","matchCriteriaId":"DF324FFC-353B-47C2-809E-1AF1003DBD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"634E850B-5C36-497C-9175-FBA1F5FF4C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A845374-834E-4696-A9C2-A32C83044CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FBAA0E-8E1D-4E8B-A08D-AA477FEDA85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9D419017-2B6C-4DF9-8B98-F74840721BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.3.98:*:*:*:*:*:*:*","matchCriteriaId":"028B2D4F-8BB6-4DB9-A1A3-3BB88407639E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.0.3.98.1:*:*:*:*:*:*:*","matchCriteriaId":"7FD1F53D-1911-445A-8230-748F2DD20621"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CF128B29-BFF1-4E99-A1B4-999C14FDB3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4225B42A-48BF-4AD3-ACB7-4806EA785B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"447033D5-7C0E-4184-AF79-E1CB31BD6AE2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4905","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack."},{"lang":"es","value":"Typo 5.1.3 y anteriores utiliza una semilla scrita en código para el cálculo de los hashes de contraseñas, lo cual facilita a los atacantes adivinar las contraseñas a través de un ataque de fuerza bruta."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typosphere:typo:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.3","matchCriteriaId":"1E3019EC-DA80-4761-B832-964F6EF93A65"}]}]}],"references":[{"url":"http://secunia.com/advisories/32272","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4550","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/497970","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/497970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4906","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.260","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the l_id parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el fichero lyrics_song.php en el plugin Lyrics (lyrics_menu) plugin para e107 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro l_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w1n78:lyrics:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"00FA51F3-E71C-4BD0-ADCD-AAD8A40EE31D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]}]}],"references":[{"url":"http://secunia.com/advisories/32477","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4551","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32004","source":"cve@mitre.org"},{"url":"http://z0rlu.blogspot.com/2008/10/e107-plugin-lyricsmenu-lyricssongphp.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46236","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://z0rlu.blogspot.com/2008/10/e107-plugin-lyricsmenu-lyricssongphp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4907","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:58:40.277","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service (persistent crash) via an email with a malformed From address, which triggers an assertion error, aka \"invalid message address parsing bug.\""},{"lang":"es","value":"La característica de análisis sintáctico en Dovecot v1.1.4 y v1.1.5, cuando usa el comando FETCH ENVELOPE en el cliente IMAP, permite a atacantes remotos causar denegación de servicio (caída persistente) a través de un correo electrónico con una dirección From mal formada, que dispara una error de aserción, también conocido como \"error de análisis de dirección de mensaje inválido\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the dovecot package, as shipped with Red Hat Enterprise Linux 4 or 5.","lastModified":"2008-11-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"71057F4B-3040-4771-B989-9F3453934AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1730EBB1-4071-4A23-B770-D564AF422273"}]}]}],"references":[{"url":"http://secunia.com/advisories/32479","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33149","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"cve@mitre.org"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-October/000089.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31997","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-666-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46227","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dovecot.org/list/dovecot-news/2008-October/000089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-666-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4908","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:30.807","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file."},{"lang":"es","value":"maps/Info/combine.pl en CrossFire crossfire-maps v1.11.0 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre un archivo temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crossfire:crossfire:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"94CE04D2-B022-4550-AF84-A0031DC5BD8F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496358","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32487","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30893","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44841","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4909","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:30.837","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in CompactCMS 1.1 and earlier allows remote attackers to perform unauthorized actions as legitimate users via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en CompactCMS v1.1 y anteriores permite a atacantes remotos llevar a cabo acciones no autorizadas como usuarios legítimos mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compact_cms:compact_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"640619C9-1874-4CCA-B285-D2CB1F7D870A"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/90/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46198","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/90/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4910","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:30.900","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method."},{"lang":"es","value":"El BasicService en Sun Java Web Start permite a atacantes remotos ejecutar programas de su elección en una máquina cliente a través de un argumento file:// URL al método showDocument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_start:*:*:*:*:*:*:*:*","matchCriteriaId":"220CA362-5E47-4FCC-8645-E717C38AEE68"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497799/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497972/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46119","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497799/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497972/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4911","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:30.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute arbitrary PHP code via a URL in the data parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en read.php en Chattaitaliano Istant-Replay  permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chattaitaliano:istant-replay:*:*:*:*:*:*:*:*","matchCriteriaId":"EB8C3C05-FA94-4D62-8CDA-FE0005FE8CF5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-04/0196.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28797","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41844","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-04/0196.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4912","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:30.947","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en popup_img.php en el módulo fotogalerie en RS MAXSOFT permite a atacantes remotos ejecutar comandos SQL de su elección mediante del parámetro fotoID. Nota: este problema fue descubierto por un investigador poco fidedigno, por lo que podría ser incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rs_maxsoft:fotogalerie:*:*:*:*:*:*:*:*","matchCriteriaId":"AB2F531C-2313-4562-B591-F8D98B21A6C4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rs_maxsoft:rs_maxsoft:*:*:*:*:*:*:*:*","matchCriteriaId":"4223335C-24BB-40B2-88E1-6D599AD13D7A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4547","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41798","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5426","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4913","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T00:57:30.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin.php en LokiCMS v0.3.3 y anteriores permite a atacantes remotos borrar archivos de su elección mediante un .. (punto punto) en el parámetro delete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.3","matchCriteriaId":"E1170433-C6C9-42B8-B8AA-62459D9EA6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"524DB171-D7DE-4B7D-BCCB-C0C9AE508CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.1.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"CE0504E9-7090-4D4A-A9B8-A9B79A489840"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"483D2A1D-6C0D-41B3-A0AB-BC831103D3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F3FFAD14-7710-4D6C-BC50-E12C2DA8AE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.1b1:*:*:*:*:*:*:*","matchCriteriaId":"995173AA-DAA3-4D0C-8727-E6079AEC6146"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.1b2:*:*:*:*:*:*:*","matchCriteriaId":"1EC01CBD-2414-4AC6-81C5-C91124EAA176"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.2b1:*:*:*:*:*:*:*","matchCriteriaId":"99744F88-CF80-4635-A23D-B9EFED94F126"}]}]}],"references":[{"url":"http://lokicms.com/","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4554","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28985","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42247","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5522","source":"cve@mitre.org"},{"url":"http://lokicms.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4915","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.950","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS."},{"lang":"es","value":"Una vulnerabilidad sin especificar en la emulación de hardware de CPU en sistemas operativos internos de 32-bit y 64-bit, en VMware Workstation v6.0.5 y anteriores; Player v2.0.x a la v2.0.5 y v1.0.x a la v1.0.8; ACE v2.0.x a la v2.0.5 y anteriores, y v1.0.x a la v1.0.7; Server v1.0.x a la v1.0.7; ESX v2.5.4 a la v3.5; y ESXi v3.5; no maneja de forma adecuada el flag Trap, que permite a usuarios del sistema operativo (SO) huésped obtener privilegios en el SO huésped."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.7","matchCriteriaId":"303FD815-1A0D-41ED-AD0E-91BFC82C6E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.0.5","matchCriteriaId":"403B0C68-7F85-438C-95E2-5B6FDCF00E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.4","versionEndIncluding":"3.5","matchCriteriaId":"3AFBA799-7EC3-4DE3-BF3C-FA7C1C1E7632"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.8","matchCriteriaId":"44A6CE08-8BAB-4BCC-87AE-FA433CD1AC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.0.5","matchCriteriaId":"AA8737EE-4163-4B99-873A-21FC9748087A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.7","matchCriteriaId":"5B39E558-D6F4-4271-848C-E87A2CAD4A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndIncluding":"5.5.8","matchCriteriaId":"DEFA048E-E58D-481F-BE83-FF26795A0F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.0.5","matchCriteriaId":"1598C125-3339-4917-BCB6-A7F361887E15"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000042.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32612","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32624","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498138/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021154","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0018.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3052","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46415","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498138/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4917","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption."},{"lang":"es","value":"Vulnerabilidad sin especificar en VMware Workstation v5.5.8 y anteriores, y v6.0.5 y anteriores, versiones v6.x; VMware Player v1.0.8 y anteriores, y v2.0.5 y versiones anteriores a  v2.x; VMware Server v1.0.9 y anteriores; VMware ESXi v3.5; y  VMware ESX v3.0.2 a la v3.5, permite a los usuarios del sistema operativo huésped tener un impacto desconocido mediante el envío de una petición de hardware que lanza una operación de escritura física de la memoria, permitiendo una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.2","versionEndIncluding":"3.5","matchCriteriaId":"7EA6F7DC-90D0-40C4-A8CA-765125102DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.8","matchCriteriaId":"44A6CE08-8BAB-4BCC-87AE-FA433CD1AC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.0.5","matchCriteriaId":"AA8737EE-4163-4B99-873A-21FC9748087A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.9","matchCriteriaId":"BE92595D-2632-432D-A705-B1F21FA2AE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndIncluding":"5.5.8","matchCriteriaId":"DEFA048E-E58D-481F-BE83-FF26795A0F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.0.5","matchCriteriaId":"1598C125-3339-4917-BCB6-A7F361887E15"}]}]}],"references":[{"url":"http://kb.vmware.com/kb/1006980","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://kb.vmware.com/kb/1006986","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32965","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021300","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1021301","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498863/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498886/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32597","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6246","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kb.vmware.com/kb/1006980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://kb.vmware.com/kb/1006986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1021301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498863/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498886/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4918","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka \"universal website hijacking.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SonicWALL SonicOS Enhanced anterior a v4.0.1.1, como el utilizado en SonicWALL Pro 2040 y TZ 180 y 190; permite a atacantes remotos inyectar secuencias de comandos Web o HTML en sitios web de su elección a través de una URL a un sitio que se basa en el bloqueo de filtrado de contenidos; esto no se maneja adecuadamente en la página de bloqueo CFS. También se conoce como \"secuestro universal del sitio web\" (universal website hijacking)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos_enhanced:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.1.1","matchCriteriaId":"7E717C24-8D41-49F7-AD40-F35EDF2BCADD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:pro_2040:-:*:*:*:*:*:*:*","matchCriteriaId":"BF979EA3-E2E5-4075-9C85-4CA2C10E37B1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_180:-:*:*:*:*:*:*:*","matchCriteriaId":"96EBED65-E9EE-487E-9113-4A3ECD12E897"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_190:-:*:*:*:*:*:*:*","matchCriteriaId":"202D7BE0-5547-4376-B80E-0C97C089554B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32498","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://securityreason.com/securityalert/4556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gnucitizen.org/blog/new-technique-to-perform-universal-website-hijacking/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497948/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497958/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497968/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497989/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498043/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498073/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31998","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.sonicwall.com/downloads/SonicOS_Enhanced_4.0.1.1_Release_Notes.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2970","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-070","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-070/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46232","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://securityreason.com/securityalert/4556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gnucitizen.org/blog/new-technique-to-perform-universal-website-hijacking/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497958/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497968/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/497989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/498073/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.sonicwall.com/downloads/SonicOS_Enhanced_4.0.1.1_Release_Notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2008/2970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-070/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-4919","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:01.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method."},{"lang":"es","value":"Vulnerabilidad de método no seguro en el control ActiveX de VISAGESOFT eXPert PDF Viewer X (VSPDFViewerX.ocx) v3.0.990.0; permite a atacantes remotos sobrescribir ficheros de su elección a través de un nombre de ruta completo al método savePageAsBitmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visagesoft:expert_pdf_viewer_activex:3.0.990.0:*:*:*:*:*:*:*","matchCriteriaId":"53745B9E-03B0-4315-8F95-AAAF0380BF08"}]}]}],"references":[{"url":"http://secunia.com/advisories/32426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4558","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31984","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46218","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6875","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4920","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.673","lastModified":"2023-11-07T02:02:58.740","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate was based on an incorrect claim regarding a directory issue in Agavi.  The vendor has disputed the issue and the original researcher has retracted the original claim, so this is not a vulnerability.  Further investigation by the vendor and original researcher show that the original issue was in a site-specific modification, which is outside the scope of CVE.  Notes: CVE users should not use this identifier"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4921","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.707","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"board/admin/reguser.php de Chipmunk CMS 1.3; permite a atacantes remotos evitar la autenticación y obtener privilegios de administrador a través de una petición directa. NOTA: Algunos de estos detalles se han obtenido de informaciones de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk_scripts:chipmunk_cms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C23D4119-2B44-45F1-B8C8-19CAB138B979"}]}]}],"references":[{"url":"http://osvdb.org/49494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46259","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6959","source":"cve@mitre.org"},{"url":"http://osvdb.org/49494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4922","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.720","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties."},{"lang":"es","value":"Desbordamiento del búfer en el control ActiveX DjVu v3.0 para Microsoft Office (DjVu_ActiveX_MSOffice.dll) permite a atacantes remotos ejecutar código de su elección a través de un propiedad larga (1) ImageURL y puede que las propiedades (2) Mode, (3) Page, o Zoom."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:djvu:activex_control_for_microsoft_office_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"C0786CE1-7A34-4492-8C7F-3848B74FAA74"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4560","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31987","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2956","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46214","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6878","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4923","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.753","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método no seguro en el control ActiveX MW6 Technologies Aztec (AZTECLib.MW6Aztec, Aztec.dll) v3.0.0.1; permite a atacantes remotos sobrescribir ficheros de su elección a través de un argumento de nombre de ruta completo a los métodos (1) SaveAsBMP y (2) SaveAsWMF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mw6_technologies:aztec_activex:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"963B60F6-D727-4F02-A5D5-1702D6656CE3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4561","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31974","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4924","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.800","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods."},{"lang":"es","value":"Múltiples vulnerabilidades debido a un procedimiento inseguro en MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll) v3.0.0.1 que permitiría a atacantes remotos sobreescribir ficheros a su elección a través de un argumento de nombre de ruta completo en los procedimientos (1) SaveAsBMP y (2) SaveAsWMF"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mw6_technologies:1d_barcode_decoder_activex:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24F985D6-1AA1-4AAF-86B4-7D3A55CA15AB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4562","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31979","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6871","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4925","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.830","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método no seguro en el control ActiveX MW6 Technologies DataMatrix (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) v3.0.0.1; permite a atacantes remotos sobrescribir ficheros de su elección a través de un argumento de nombre de ruta completo a los métodos (1) SaveAsBMP y (2) SaveAsWMF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mw6_technologies:datamatrix_activex:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B9824FA-75EC-43E5-ADD6-F4E120E9C55D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32425","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31980","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4926","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.847","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método no seguro en el control ActiveX MW6 Technologies PDF417 (MW6PDF417Lib.PDF417, MW6PDF417.dll) v3.0.0.1; permite a atacantes remotos sobrescribir ficheros de su elección a través de un argumento de nombre de ruta completo a los métodos (1)SaveAsBMP y (2) SaveAsWMF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mw6_technologies:pdf417_activex:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F7AFDE71-2B95-421F-A306-4C504541DFF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4927","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to \"MThd Header Parsing.\" NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Microsoft Windows Media Player (WMP) v9.0 hasta v11 permite a atacantes asistidos por el usuario local provocar una denegación de servicio (caída de la aplicación) a través de ficheros (1) MIDO o (2) DAT mal formados. Está relacionado con \"La validación de cabeceras MThd\". NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*","matchCriteriaId":"C28602CC-7866-4C30-B518-055923599A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*","matchCriteriaId":"B27BB8B0-BC24-4A3F-A18B-63D57AB4799B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32077","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/32077.py","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/32077.py","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-4928","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the redirect function in functions.php in MyBB (aka MyBulletinBoard) 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a JavaScript redirect.  NOTE: this can be leveraged to execute PHP code and bypass cross-site request forgery (CSRF) protection."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función \"redirect\" de functions.php de MyBB (también conocido como MyBulletinBoard) v1.4.2; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro \"url\" en una acción \"removesubscriptions\" (eliminar las suscripciones) de moderation.php. Está relacionado con el uso de la opción ajax para solicitar una redirección JavaScript. NOTA: Esto puede ser empleado para ejecutar código PHP y evitar la protección de falsificación de petición en sitios cruzados (CSRF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9503D6C2-DCBC-4720-BE29-34913950407E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0212.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31935","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2967","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4929","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.957","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames."},{"lang":"es","value":"MyBB (también conocido como MyBulletinBoard) v1.4.2 no emplea suficiente aleatoriedad para componer los nombres de los ficheros que se hayan subido como adjuntos; esto facilita a los atacantes remotos leer estos ficheros deduciendo su nombre."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9503D6C2-DCBC-4720-BE29-34913950407E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/31936","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2967","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/31936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-4930","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T21:00:05.987","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka \"Incomplete protection against MIME-sniffing.\" NOTE: this could be leveraged for XSS and other attacks."},{"lang":"es","value":"MyBB (también conocido como MyBulletinBoard) v1.4.2 no maneja de forma adecuada un fichero que se haya subido y que sea de un tipo no estándar que contenga secuencias HTML; esto permite a atacantes remotos provocar que el fichero sea procesado como un HTML por las inspecciones de contenidos de Internet Explorer. También se conoce como \"Protección incompleta contra MIME-sniffing\". NOTA: Esto podría ser utilizado para XSS y otro tipo de ataques."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9503D6C2-DCBC-4720-BE29-34913950407E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/2","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/01/2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4931","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.633","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo account de firmCHANNEL Digital Signage v3.24 y puede que en versiones anteriores; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro \"action\" (acción) en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firmchannel:digital_signage:3.24:*:*:*:*:*:*:*","matchCriteriaId":"75A8BC68-1D1F-4F96-A049-ECD92E4368C3"}]}]}],"references":[{"url":"http://osvdb.org/49564","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32549","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4566","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498042/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/49564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498042/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4932","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.663","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter.  NOTE: this can be leveraged for code execution by writing to a file under the web document root."},{"lang":"es","value":"webmail/modules/filesystem/edit.php de U-Mail Webmail server v4.91; permite a atacantes remotos sobrescribir ficheros de su elección a través de un nombre de ruta absoluta en el parámetro de ruta (path) y contenido arbitrario en el parámetro \"content\" (contenido). NOTA: Esto puede derivar en ejecución de código al escribir un fichero en la raíz de documentos web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comingchina:u-mail_webmail_server:4.91:*:*:*:*:*:*:*","matchCriteriaId":"A1AB8D49-855D-4A8E-8D6B-99CF6A9BF158"}]}]}],"references":[{"url":"http://secunia.com/advisories/32540","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32013","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46300","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6898","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4933","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.697","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function."},{"lang":"es","value":"Desbordamiento del búfer en la función hfsplus_find_cat de fs/hfsplus/catalog.c en el kernel de Linux anterior a 2.6.28-rc1; permite a los atacantes provocar una denegación de servicio (corrupción de memoria o caída del sistema) a través de una imagen del sistema de ficheros hfsplus con un campo de la longitud del nombre (namelength) de catalog (catálogo) no válido. Está relacionado con la función hfsplus_cat_build_key_uni."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=efc7ffcb4237f8cb9938909041c4ed38f6e1bf40","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33858","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:234","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32093","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46405","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11061","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=efc7ffcb4237f8cb9938909041c4ed38f6e1bf40","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4934","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.727","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image."},{"lang":"es","value":"La función hfsplus_block_allocate en el archivo fs/hfsplus/bitmap.c en el kernel de Linux anterior a versión 2.6.28-rc1 no verifica cierto valor de retorno de la función read_mapping_page anterior al  llamar a kmap, lo que permite a los atacantes causar una denegación de servicio (bloqueo de sistema) por medio  de una imagen del sistema de archivos hfsplus."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.28","matchCriteriaId":"856DAAD3-9127-4681-90C3-D181270A765B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=649f1ee6c705aab644035a7998d7b574193a598a","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32510","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33180","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:234","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32096","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46327","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11635","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=649f1ee6c705aab644035a7998d7b574193a598a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-4935","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.743","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file."},{"lang":"es","value":"asciiview de aview 1.3.0, permite a usuarios loclaes sobrescribir ficheros de su elección a través de una ataque de enlace simbólico sobre un fichero temporal /tmp/aview#####.pgm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amiga:aview:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11C97912-B39B-4212-BA8B-9752246D0777"}]}]}],"references":[{"url":"http://bugs.debian.org/496422","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aview","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33139","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-14.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30885","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/235808","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44837","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aview","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/235808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4936","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.790","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file."},{"lang":"es","value":"faxspool de mgetty v1.1.36, permite a usuarios locales sobrescribir ficheros de su elección a través de una ataque de enlace simbólico sobre un fichero temporal /tmp/faxsp.#####."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mgetty as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5, as they include patch that resolves this issue.","lastModified":"2008-11-06T00:00:00.000"},{"organization":"Mandriva","comment":"This issue was fixed on May 5, 2003 for all Mandriva Linux products.","lastModified":"2008-12-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gert_doering:mgetty:1.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5EBE89B2-7BF0-4216-9C6B-5EBA17429406"}]}]}],"references":[{"url":"http://bugs.debian.org/496403","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33051","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-08.xml","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30927","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235806","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44833","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4937","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.820","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file."},{"lang":"es","value":"senddoc de OpenOffice.org (OOo) v2.4.1, permite a usuarios locales sobrescribir ficheros de su elección a través de una ataque de enlace simbólico sobre un fichero temporal /tmp/log.obr.#####."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenOffice.org as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2008-11-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"437E06E4-019B-4AFF-9D66-AE0A635B9A6E"}]}]}],"references":[{"url":"http://bugs.debian.org/496361","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/openoffice.org-common","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32856","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33140","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-13.xml","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:070","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30925","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-677-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-677-2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/235824","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44829","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/openoffice.org-common","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-677-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-677-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/235824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4938","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts."},{"lang":"es","value":"aegis v4.24 y aegis-web v4.24, permiten a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre los ficheros temporales (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log y (h) /tmp/aegis.#####.out. Está relacionado con los scripts (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aegis:aegis:4.24:*:*:*:*:*:*:*","matchCriteriaId":"2FFCD28D-5DBF-4E38-ACB6-4BC3A9D4ACFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:aegis:aegis-web:4.24:*:*:*:*:*:*:*","matchCriteriaId":"063221AD-E39B-4F2F-BB7E-914308BC0970"}]}]}],"references":[{"url":"http://bugs.debian.org/496400","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496402","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aegis","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31970","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30883","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44835","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/496402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aegis","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4939","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.883","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####.lex.cc, (b) /tmp/#####.deformat.l, (c) /tmp/#####.reformat.l, (d) /tmp/#####docxorig, (e) /tmp/#####docxsalida.zip, (f) /tmp/#####xlsxembed, (g) /tmp/#####xlsxorig, and (h) /tmp/#####xslxsalida.zip temporary files, related to the (1) apertium-gen-deformat, (2) apertium-gen-reformat, and (3) apertium scripts."},{"lang":"es","value":"apertium v3.0.7, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre los ficheros temporales (a) /tmp/#####.lex.cc, (b) /tmp/#####.deformat.l, (c) /tmp/#####.reformat.l, (d) /tmp/#####docxorig, (e) /tmp/#####docxsalida.zip, (f) /tmp/#####xlsxembed, (g) /tmp/#####xlsxorig, y (h) /tmp/#####xslxsalida.zip. Está relacionado con los scripts (1) apertium-gen-deformat, (2) apertium-gen-reformat y (3) apertium"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apertium:apertium:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1AA46FEB-EFF3-4726-9495-001FC9C5F8AE"}]}]}],"references":[{"url":"http://bugs.debian.org/496395","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/apertium","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30896","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44854","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/apertium","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4940","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.900","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file."},{"lang":"es","value":"xmlfile.py de aptoncd 0.1, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre el fichero temporal /tmp/aptoncd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aptoncd:aptoncd:0.1:*:*:*:*:*:*:*","matchCriteriaId":"77176A59-0E60-4D6B-BC77-75404E33EA22"}]}]}],"references":[{"url":"http://bugs.debian.org/496390","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aptoncd","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30882","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44756","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/aptoncd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4941","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.930","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts."},{"lang":"es","value":"arb-common versión 0.0.20071207.1, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink en archivos temporales (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tmp/arbdsmz.html, y (d) /tmp/arbdsmz.htm, relacionados con los scripts (1) arb_fastdnaml y (2) dszmconnect.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arb_project:arb-common:0.0:*:*:*:*:*:*:*","matchCriteriaId":"957758D9-67DA-4BC8-9667-E41B27D1D67B"}]}]}],"references":[{"url":"http://bugs.debian.org/496396","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/arb-common","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30895","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44844","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/arb-common","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4942","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.960","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/audiolink.db.tmp and (2) /tmp/audiolink.tb.tmp temporary files."},{"lang":"es","value":"audiolink de audiolink v0.05, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre los ficheros temporales (1) /tmp/audiolink.db.tmp y (2) /tmp/audiolink.tb.tm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:audiolink:audiolink:0.05:*:*:*:*:*:*:*","matchCriteriaId":"F1CEDA24-980C-4AFD-9A65-40A01E6F4D1A"}]}]}],"references":[{"url":"http://bugs.debian.org/496433","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/audiolink","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30886","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44757","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/audiolink","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4943","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:14.977","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts."},{"lang":"es","value":"bulmages-servers v0.11.1, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales a) /tmp/error.txt, (b) /tmp/errores.txt y puede que otros ficheros temporales. Está relacionado con los scripts (1) creabulmafact, (2) creabulmacont, y puede que (3) actualizabulmacont, (4) installbulmages-db y (5) actualizabulmafact"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iglues:bulmages-servers:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6703DBE7-0D2A-4278-8138-EB15B7A993B9"}]}]}],"references":[{"url":"http://bugs.debian.org/496382","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/bulmages-servers","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/bulmages-servers","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4944","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder*-out temporary files."},{"lang":"es","value":"writtercontrol de cdcontrol v1.90, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales /tmp/v-recorder*-out."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gleydson_mazioli_da_silva:cdcontrol:1.90:*:*:*:*:*:*:*","matchCriteriaId":"9DCD3464-4BFE-4E6F-82A7-A2BAE45F9554"}]}]}],"references":[{"url":"http://bugs.debian.org/496438","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cdcontrol","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30892","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44839","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cdcontrol","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4945","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.057","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw.##### temporary directory."},{"lang":"es","value":"amlabel-cdrw de cdrw-taper v0.4, puede que permita a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico que incluya un directorio temporal /tmp/amlabel-cdrw.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tivano:cdrw-taper:0.4:*:*:*:*:*:*:*","matchCriteriaId":"DE1AF3B6-7D92-4165-B3D9-23F632AC79AC"}]}]}],"references":[{"url":"http://bugs.debian.org/496380","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cdrw-taper","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30890","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44842","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cdrw-taper","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4946","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file, related to the (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh, (3) Fedora_PV_Install/provision.sh, (4) CentOS_PV_Install/provision.sh, (5) common/provision.sh, (6) example/provision.sh, and (7) Windows_CD_Install/provision.sh scripts in image_store/."},{"lang":"es","value":"convirt v0.8.2, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/set_output. Está relacionado con las secuencias de comandos (scripts) (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh, (3) Fedora_PV_Install/provision.sh, (4) CentOS_PV_Install/provision.sh, (5) common/provision.sh, (6) example/provision.sh, y (7) Windows_CD_Install/provision.sh en image_store/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:convirture:convirt:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"077FC498-A280-4CDF-9CE0-DB7D6A815F1A"}]}]}],"references":[{"url":"http://bugs.debian.org/496419","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/convirt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/convirt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4947","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.117","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file."},{"lang":"es","value":"dhis-dummy-log-engine de dhis-server v5.3, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/dhis-dummy-log-engine.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guus_sliepen:dhis-server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"CE7648E1-946A-4DDB-BA47-E6F514B0AAED"}]}]}],"references":[{"url":"http://bugs.debian.org/496388","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dhis-server","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30900","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dhis-server","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4948","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.133","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file."},{"lang":"es","value":"fest.pl de digitaldj v0.7.5, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/ddj_fest.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nostatic:digitaldj:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"C93B1513-EF3C-40D6-9337-4786DEEBB28B"}]}]}],"references":[{"url":"http://bugs.debian.org/496399","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/digitaldj","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30904","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/digitaldj","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4949","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.163","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts."},{"lang":"es","value":"dist v3.5,  permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (a) /tmp/cil#####, (b) /tmp/pdo#####, y (c) /tmp/pdn#####. Está relacionado con las secuencias de comandos (scripts) (1) patcil y (2) patdiff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manoj_srivastava:dist:3.5:*:*:*:*:*:*:*","matchCriteriaId":"014CC888-422D-4DFD-8D5B-55140C89C537"}]}]}],"references":[{"url":"http://bugs.debian.org/496412","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dist","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30908","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44818","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dist","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4950","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.197","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file.  NOTE: the vendor disputes this vulnerability, stating that \"There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot."},{"lang":"es","value":"** CUESTIONADA ** gccross de dpkg-cross v2.3.0,  permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal tmp/gccross2.log. NOTA: El vendedor ha impugnado esta vulnerabilidad argumentando que \"Esta vulnerabilidad no tiene ningún sentido, las secuencias de comandos... son llamadas dentro de determinados entornos de compilación cruzada (cross-building environments) con un chroot.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:dpkg-cross:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1B13D71C-B01E-40DF-9AE0-03F536E0B8B7"}]}]}],"references":[{"url":"http://bugs.debian.org/496413","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dpkg-cross","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dpkg-cross","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4951","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.210","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts."},{"lang":"es","value":"dtc v0.29.6 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (a) /tmp/awstats.log, (b) /tmp/spam.log.##### y (c) /tmp/spam_err.log. Está relacionado con las secuencias de comandos  (1) accesslog.php y (2) sa-wrapper"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:dtc-common:0.29.6:*:*:*:*:*:*:*","matchCriteriaId":"5D793893-94C6-4738-B362-968BF6140E7A"}]}]}],"references":[{"url":"http://bugs.debian.org/496362","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dtc-common","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46411","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/dtc-common","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4952","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.243","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.log temporary file."},{"lang":"es","value":"emacs-jabber de emacs-jabber v0.7.91, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal /tmp/*.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emacs:emacs-jabber:0.7.91:*:*:*:*:*:*:*","matchCriteriaId":"B121219F-9175-483E-B52D-AA12D18F5695"}]}]}],"references":[{"url":"http://bugs.debian.org/496428","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/emacs-jabber","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46409","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/emacs-jabber","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4953","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.273","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files.  NOTE: the vendor disputes this vulnerability, stating that an attack \"would require an attacker to create 1073741824*PID-RANGE symlinks."},{"lang":"es","value":"** CUESTIONADA ** firehol de firehol v1.256, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (1) /tmp/.firehol-tmp-#####-*-* y (2) /tmp/firehol.conf. NOTA: El vendedor ha impugnado esta vulnerabilidad, argumentando que un ataque \"requeriría al atacante crear 1073741824*RANGO-PID de enlaces simbólicos\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firehol:firehol:1.256:*:*:*:*:*:*:*","matchCriteriaId":"30EBF828-CADA-4DD4-8941-23C19E128B94"}]}]}],"references":[{"url":"http://bugs.debian.org/496424","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/firehol","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/firehol","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4954","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.290","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file."},{"lang":"es","value":"mead.pl de fml 4.0.3, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/debugbuf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fumitoshi_ukai:fml:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C11DAD7E-F807-4CF8-B9BA-80EBB637B101"}]}]}],"references":[{"url":"http://bugs.debian.org/496370","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/fml","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30903","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/fml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4955","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.320","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files.  NOTE: this issue is only a vulnerability when a verbose debug mode is activated by modifying source code."},{"lang":"es","value":"freevo.real de freevo 1.8.1, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, y (4) /tmp/*.stats. NOTA: Esta característica es sólo una vulnerabilidad cuando está activado el modo de depuración abundante (verbose debug mode) al modificar el código fuente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duncan_webb:freevo:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"494F3F46-4470-4676-BC72-AD2683D6685D"}]}]}],"references":[{"url":"http://bugs.debian.org/496373","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/freevo","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/freevo","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4956","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.353","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file."},{"lang":"es","value":"fwb_install de fwbuilder 2.1.19, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal /tmp/ssh-agent.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firewallbuilder:fwbuilder:2.1.19:*:*:*:*:*:*:*","matchCriteriaId":"E01F8609-B943-4F5B-9554-9C76A7F495EE"}]}]}],"references":[{"url":"http://bugs.debian.org/496406","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/fwbuilder","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235809","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/fwbuilder","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4957","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.383","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"find_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.cxx temporary file."},{"lang":"es","value":"find_flags de gccxml 0.9.0, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/*.cxx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gccxml:gccxml:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"7C7BB4B6-AAEF-46A4-8B70-1E7C6F88707D"}]}]}],"references":[{"url":"http://bugs.debian.org/496391","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/gccxml","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46408","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/gccxml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4958","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file."},{"lang":"es","value":"gdrae de gdrae 0.1, permite a usuarios locales sobrescribir ficheros de su elección mediante un ataque de enlace simbólico en el fichero temporal /tmp/gdrae/palabra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alejandro_garrido_mota:gdrae:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4AF67B37-3B12-43F3-AAF8-752BC471CAC5"}]}]}],"references":[{"url":"http://bugs.debian.org/496378","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/gdrae","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30888","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44838","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/gdrae","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4959","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, and (4) /tmp/geo#####.coords temporary files."},{"lang":"es","value":"geo-code de gpsdrive-scripts 2.10~pre4 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, y (4) /tmp/geo#####.coords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive-scripts:2.10:pre4:*:*:*:*:*:*","matchCriteriaId":"592281C3-F19D-4B4B-B0B1-CD9BAFB20A23"}]}]}],"references":[{"url":"http://bugs.debian.org/496436","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/gpsdrive-scripts","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33825","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30905","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44759","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/gpsdrive-scripts","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4960","sourceIdentifier":"cve@mitre.org","published":"2008-11-05T15:00:15.460","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files."},{"lang":"es","value":"impose en impose+ 0.2, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (1) /tmp/*-tmp.ps y (2) /tmp/bboxx-*"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dov_grobgeld:impose\\+:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5437FA49-FC14-459D-8E8F-6178EB2E5245"}]}]}],"references":[{"url":"http://bugs.debian.org/496435","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/impose+","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30906","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/impose+","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4963","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.713","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to cause a denial of service (device reload or hang) via a crafted VTP packet sent to a switch interface configured as a trunk port."},{"lang":"es","value":"Vulnerabilidad inespecífica en la implementación en Cisco IOS y CatOS del protocolo VLAN Trunking (VTP), cuando el modo de operación de VTP no es transparente, permite a atacantes remotos producir una denegación de servicio (el dispositivo se recarga o se cuelga) a través de un paquete VTP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:*:*:*:*:*:*:*:*","matchCriteriaId":"CE3424FF-8507-4C7A-8858-EA89931A74DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","matchCriteriaId":"5802E2D8-7069-474C-826F-AEE7B50BFE34"}]}]}],"references":[{"url":"http://osvdb.org/49601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021143","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a231cf.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32120","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021144","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46346","source":"cve@mitre.org"},{"url":"http://osvdb.org/49601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a231cf.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4964","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.730","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file."},{"lang":"es","value":"filters/any-UTF8 en konwert v1.8 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/any-#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:krzysztof_kozlowski:konwert:1.8:*:*:*:*:*:*:*","matchCriteriaId":"54CF4EA0-0C83-4ECB-AC20-51A2494B8C8E"}]}]}],"references":[{"url":"http://bugs.debian.org/496379","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/konwert-filters","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30914","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44821","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/konwert-filters","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4965","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.760","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, and (3) /tmp/emission.ogg temporary files."},{"lang":"es","value":"liguidsoap.py en liguidsoap v0.3.8.1+2 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, y (3) /tmp/emission.ogg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savonet:liguidsoap:0.3.8.1\\+2:*:*:*:*:*:*:*","matchCriteriaId":"C3456958-BDFF-4BD6-9A57-FF6E81A8C682"}]}]}],"references":[{"url":"http://bugs.debian.org/496360","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/liguidsoap","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30912","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44827","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/liguidsoap","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4966","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.793","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/snap##### and (b) /tmp/nightly##### temporary files, related to the (1) maysnap and (2) maytest scripts."},{"lang":"es","value":"linux-patch-openswan v2.4.12 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/snap##### y (b) /tmp/nightly#####, relacionada con la secuencia de comandos (scripts) (1) maysnap y (2) maytest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:linux-patch-openswan:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"793A85EF-74D7-48CA-BF03-1DED02F08647"}]}]}],"references":[{"url":"http://bugs.debian.org/496376","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/linux-patch-openswan","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30918","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44823","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/linux-patch-openswan","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4967","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.823","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts."},{"lang":"es","value":"linuxtrade v3.65 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/bwk, (b) /tmp/zzz, y (c) /tmp/ggg, relacionada con la secuencia de comandos (scripts) (1) linuxtrade.bwkvol, (2) linuxtrade.wn, y (3) moneyam.helper."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linuxtrade:linuxtrade:3.65:*:*:*:*:*:*:*","matchCriteriaId":"8C56A02E-2F3E-4C01-993A-3375125F2A7A"}]}]}],"references":[{"url":"http://bugs.debian.org/496372","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/linuxtrade","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30910","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44826","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/linuxtrade","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4968","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.840","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file."},{"lang":"es","value":"Las secuencias de comandos (scripts) (1) rccs y (2) STUFF en lmbech v3.0-a7 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/sdiff.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitmover:lmbench:3.0-a7:*:*:*:*:*:*:*","matchCriteriaId":"5962E698-D76B-45E0-9AC7-08FB59A4C5C9"}]}]}],"references":[{"url":"http://bugs.debian.org/496427","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/lmbench","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32587","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30913","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44828","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/lmbench","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4969","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.870","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2.log, (g) /tmp/nfs_fsstress.udp.3.log, (h) /tmp/nfs_fsstress.tcp.2.log, (i) /tmp/nfs_fsstress.tcp.3.log, and (j) /tmp/nfs_fsstress.sardata temporary files, related to the (1) ftp_setup_vsftp_conf and (2) nfs_fsstress.sh scripts."},{"lang":"es","value":"ltp-network-test v20060918 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2.log, (g) /tmp/nfs_fsstress.udp.3.log, (h) /tmp/nfs_fsstress.tcp.2.log, (i) /tmp/nfs_fsstress.tcp.3.log, y (j) /tmp/nfs_fsstress.sardata, relacionada con las secuencias de comandos (scripts) (1) ftp_setup_vsftp_conf y (2) nfs_fsstress.sh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alastair_mckinstry:ltp-network-test:20060918:*:*:*:*:*:*:*","matchCriteriaId":"37837814-7604-4577-B4EB-1C51E2D386D1"}]}]}],"references":[{"url":"http://bugs.debian.org/496411","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ltp-network-te","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46566","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ltp-network-te","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4970","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.900","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file."},{"lang":"es","value":"runiozone en lustre v1.6.5 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/iozone.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lustre:lustre-tests:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2861F7ED-27ED-4CA1-B935-6306F1B3F83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lustre:lustre-tests:1.6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0587B647-5DD8-4ADB-935A-26D620BF7907"}]}]}],"references":[{"url":"http://bugs.debian.org/496371","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/lustre-tests","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30911","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44819","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/lustre-tests","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4971","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.933","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/_vf#?????, (2) /tmp/_if#?????, (3) /tmp/_pf#?????, (4) /tmp/_af#?????, (5) /tmp/_rid#?????, (6) /tmp/_res#?????, (7) /tmp/_q#?????, and (8) /tmp/_bf#????? temporary files."},{"lang":"es","value":"mafft-homologs en mafft v6.240 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (1) /tmp/_vf#?????, (2) /tmp/_if#?????, (3) /tmp/_pf#?????, (4) /tmp/_af#?????, (5) /tmp/_rid#?????, (6) /tmp/_res#?????, (7) /tmp/_q#?????, y (8) /tmp/_bf#?????."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:align.bmr.kyushu-u.ac:mafft:6.240:*:*:*:*:*:*:*","matchCriteriaId":"0597467A-15D3-44FB-8320-838931AFD42D"}]}]}],"references":[{"url":"http://bugs.debian.org/496366","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mafft","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30915","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235804","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44825","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mafft","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4972","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.963","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo##### temporary file."},{"lang":"es","value":"mailgo en mgt v2.31 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/mailgo#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_robbins:mgt:2.31:*:*:*:*:*:*:*","matchCriteriaId":"7F171AFD-6503-4D57-8E55-2D313561EF97"}]}]}],"references":[{"url":"http://bugs.debian.org/496434","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mgt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46410","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/mgt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4973","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:51.997","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/i2my#####.1 and (2) /tmp/i2my#####.2 temporary files."},{"lang":"es","value":"i2myspell en myspell v3.1 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (1) /tmp/i2my#####.1 y (2) /tmp/i2my#####.2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:myspell:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0CF0A5A1-E77D-4018-B302-9B1D89D49A26"}]}]}],"references":[{"url":"http://bugs.debian.org/496392","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/myspell-tools","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30929","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44830","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/myspell-tools","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4974","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.010","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*.xml and (2) /tmp/*.backup temporary files."},{"lang":"es","value":"rrdedit en netmrg v0.20 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (1) /tmp/*.xml y (2) /tmp/*.backup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netmrg:netmrg:0.20:*:*:*:*:*:*:*","matchCriteriaId":"710E5765-55C0-4CA0-A88F-480E5FACF097"}]}]}],"references":[{"url":"http://bugs.debian.org/496384","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/netmrg","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32490","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30930","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44834","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/netmrg","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4975","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.043","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp##### temporary file."},{"lang":"es","value":"mkmailpost en newsgate v1.6 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/mmp#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:newsgate:1.6:*:*:*:*:*:*:*","matchCriteriaId":"96A05B15-04F0-48DD-BE89-DBE619BAC2C4"}]}]}],"references":[{"url":"http://bugs.debian.org/496437","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/newsgate","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30932","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/newsgate","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4976","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.073","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/ogle_audio.#####, (b) /tmp/ogle_cli.#####, (c) /tmp/ogle_ctrl.#####, (d) /tmp/ogle_gui.#####, (e) /tmp/ogle_mpeg_ps.#####, (f) /tmp/ogle_mpeg_vs.#####, (g) /tmp/ogle_nav.#####, and (h) /tmp/ogle_vout.#####, temporary files, related to the (1) ogle_audio_debug, (2) ogle_cli_debug, (3) ogle_ctrl_debug, (4) ogle_gui_debug, (5) ogle_mpeg_ps_debug, (6) ogle_mpeg_vs_debug, (7) ogle_nav_debug, and (8) ogle_vout_debug scripts."},{"lang":"es","value":"ogle v0.9.2 y ogle-mmx v0.9.2 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales a) /tmp/ogle_audio.#####, (b) /tmp/ogle_cli.#####, (c) /tmp/ogle_ctrl.#####, (d) /tmp/ogle_gui.#####, (e) /tmp/ogle_mpeg_ps.#####, (f) /tmp/ogle_mpeg_vs.#####, (g) /tmp/ogle_nav.#####, y (h) /tmp/ogle_vout.#####, relacionada con las secuencias de comandos (scripts) (1) ogle_audio_debug, (2) ogle_cli_debug, (3) ogle_ctrl_debug, (4) ogle_gui_debug, (5) ogle_mpeg_ps_debug, (6) ogle_mpeg_vs_debug, (7) ogle_nav_debug, y (8) ogle_vout_debug"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alan_woodland:ogle:0.92:*:*:*:*:*:*:*","matchCriteriaId":"9C8ADDCE-E5E3-4298-AE13-C56BF2D22984"},{"vulnerable":true,"criteria":"cpe:2.3:a:alan_woodland:ogle-mmx:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8A449FD1-FF88-4FFE-8F1B-C0F81B9D5A15"}]}]}],"references":[{"url":"http://bugs.debian.org/496420","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496425","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ogle","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ogle-mmx","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30926","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44832","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/496425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ogle","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/ogle-mmx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4977","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.103","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"postfix_groups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/postfix_groups.stdout, (2) /tmp/postfix_groups.stderr, and (3) /tmp/postfix_groups.message temporary files.  NOTE: the vendor disputes this vulnerability, stating \"This is not a real issue ... users would have to edit a script under /usr/lib to enable it."},{"lang":"es","value":"** CUESTIONADA ** postfix_groups.pl en Postfix v2.5.2 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (1) /tmp/postfix_groups.stdout, (2) /tmp/postfix_groups.stderr, y (3) /tmp/postfix_groups.message. NOTA: El vendedor ha impugnado esta vulnerabilidad, argumentando que \"Este no es un problema real...los usuarios deberían realizar una secuencia de comandos bajo /usr/lib para poder hacerlo\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of postfix as shipped with Red Hat Enterprise Linux 3, 4, or 5. Mentioned script is not part of the official postfix distribution and is not included in Red Hat Enterprise Linux postfix packages.","lastModified":"2008-11-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1DE90BD-B5F9-4762-B086-130AB04F3CB0"}]}]}],"references":[{"url":"http://bugs.debian.org/496401","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/postfix","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235811","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/postfix","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4978","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.137","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/opt.fmt, (b) /tmp/out#####.fmt, (c) /tmp/tf#####.dat, (d) /tmp/gsf#####, (e) /tmp/sc#####.sh, (f) /tmp/il#####.pic, (g) /tmp/tl#####.pic, (h) /tmp/ds#####.pic, (i) /tmp/tfa#####, and (j) /tmp/sed##### temporary files, related to the (1) optics2rad, (2) pdelta, (3) dayfact, and (4) raddepend scripts."},{"lang":"es","value":"radiance v3R9+20080530 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales a) /tmp/opt.fmt, (b) /tmp/out#####.fmt, (c) /tmp/tf#####.dat, (d) /tmp/gsf#####, (e) /tmp/sc#####.sh, (f) /tmp/il#####.pic, (g) /tmp/tl#####.pic, (h) /tmp/ds#####.pic, (i) /tmp/tfa#####, y (j) /tmp/sed#####, relacionado con la secuencia de comandos (scripts) (1) optics2rad, (2) pdelta, (3) dayfact, y (4) raddepend."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radiance:radiance:3:r9:*:*:*:*:*:*","matchCriteriaId":"1AE7490F-EBCA-439E-AEA6-2F762E0910A6"}]}]}],"references":[{"url":"http://bugs.debian.org/496433","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/radiance","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30953","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44846","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/radiance","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4979","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.150","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, and (4) /tmp/ipacct.##### temporary files."},{"lang":"es","value":"getipacctg en rancid v2.3.2~a8 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, y (4) /tmp/ipacct.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shrubbery:rancid:2.3.2\\~a8:*:*:*:*:*:*:*","matchCriteriaId":"C06FAE57-A628-43EF-BDC4-39B6CF9F8854"}]}]}],"references":[{"url":"http://bugs.debian.org/496426","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/rancid-util","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32588","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30954","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/rancid-util","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4980","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.183","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccp_tmp.txt temporary file."},{"lang":"es","value":"delqueueask en rccp v0.9 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado al fichero temporal /tmp/cccp_tmp.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zak_b_elep:rccp:0.9:*:*:*:*:*:*:*","matchCriteriaId":"023EF60D-7FC0-4D89-87B0-1E431A2A7D65"}]}]}],"references":[{"url":"http://bugs.debian.org/496364","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/rccp","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30955","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/rccp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4981","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.213","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"perl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl.robot.log temporary file."},{"lang":"es","value":"perl.robot en realtimebattle v1.0.8 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/perl.robot.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:remi_vanicat:realtimebattle:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC6F0CB4-3067-4778-9936-75B5901361E3"}]}]}],"references":[{"url":"http://bugs.debian.org/496385","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/realtimebattle-common","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30967","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44882","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/realtimebattle-common","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4982","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.247","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270."},{"lang":"es","value":"rkhunter en rkhunter v1.3.2 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/rkhunter-debug. NOTA: Probablemente sea una vulnerabilidad diferente que CVE-2005-1270."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_horne:rkhunter:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A8C9D684-D9FD-4883-81A5-F6C578D6E1E8"}]}]}],"references":[{"url":"http://bugs.debian.org/496375","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/rkhunter","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46511","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/rkhunter","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4983","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.277","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"scilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/SciLink#####1, (b) /tmp/SciLink#####2, (c) /tmp/SciLink#####3, (d) /tmp/*.#####, (e) /tmp/*.#####.res, (f) /tmp/*.#####.err, and (g) /tmp/*.#####.diff temporary files, related to the (1) scilink, (2) scidoc, and (3) scidem scripts."},{"lang":"es","value":"scilab-bin v4.1.2 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/SciLink#####1, (b) /tmp/SciLink#####2, (c) /tmp/SciLink#####3, (d) /tmp/*.#####, (e) /tmp/*.#####.res, (f) /tmp/*.#####.err, y (g) /tmp/*.#####.diff , relacionado con las secuencias de comando (scripts) (1) scilink, (2) scidoc, y (3) scidem."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scilab:scilab-bin:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F1878812-F367-42A8-9D29-15FFCCEC04EC"}]}]}],"references":[{"url":"http://bugs.debian.org/496414","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/scilab-bin","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33630","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200901-14.xml","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30968","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44883","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/scilab-bin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200901-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4984","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.293","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c) /tmp/sb2-pkg-chk.$tstamp.##### temporary files, related to the (1) dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts."},{"lang":"es","value":"scratchbox2 v1.99.0.24 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, y (c) /tmp/sb2-pkg-chk.$tstamp.#####, relacionado con las secuencias de comando (scripts)(1) dpkg-checkbuilddeps y (2) sb2-check-pkg-mappings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:scratchbox2:1.99.0.24:*:*:*:*:*:*:*","matchCriteriaId":"793692C4-E69F-43E6-B87E-454788527718"}]}]}],"references":[{"url":"http://bugs.debian.org/496409","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/scratchbox2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30969","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44907","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/scratchbox2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4985","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.323","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file."},{"lang":"es","value":"vdrleaktest en vdr v1.6.0 permite a usuarios locales sobrescribir ficheros a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/memleaktest.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cadsoft:vdr:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"27E3CB56-00D7-41A5-8352-5DBA8D3CF43F"}]}]}],"references":[{"url":"http://bugs.debian.org/496421","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/vdr-dbg","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44880","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/vdr-dbg","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4986","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.353","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c) /tmp/referer-home.log temporary files, related to the (1) coqweb and (2) account.sh scripts."},{"lang":"es","value":"winms v3.62 permite a usuarios locales sobrescribir ficheros a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/env#####, (b) /tmp/sed#####, y (c) /tmp/referer-home.log, relacionado con las secuencias de comando (scripts) (1) coqweb y (2) account.sh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:georges_khaznadar:wims:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9F5F59B3-2257-45B4-8B5A-E829177E3E41"}]}]}],"references":[{"url":"http://bugs.debian.org/496387","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/wims","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32244","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46510","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/wims","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4987","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.370","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts."},{"lang":"es","value":"xastir v1.9.2 permite a usuarios locales sobrescribir a través de un ataque de enlace simulado en los ficheros temporales (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, y (c) /tmp/ld.so.conf, relacionado con las secuencias de comando (scripts) 1) get-maptools.sh and (2) get_shapelib.sh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xastir:xastir:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8FBDEFF1-179B-48CC-A0BB-F6112F6C138D"}]}]}],"references":[{"url":"http://bugs.debian.org/496383","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xastir","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31771","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31030","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460429","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44920","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00199.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00307.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xastir","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00307.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4988","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T15:55:52.400","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal##### temporary file."},{"lang":"es","value":"pscal en xcal v4.1 permite a usuarios locales sobrescribir archivos a su elección a través de un ataque de enlace simulado en el fichero temporal /tmp/pscal#### ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lars_bahner:xcal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C880CD0A-BD04-4504-9371-40D59A1311E4"}]}]}],"references":[{"url":"http://bugs.debian.org/496393","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xcal","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xcal","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4989","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T01:00:01.177","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN)."},{"lang":"es","value":"La función _gnutls_x509_verify_certificate en lib/x509/verify.c en libgnutls en GnuTLS antes de v2.6.1 confía en las cadenas de certificado en las que el último certificado es un certificado de confianza arbitraria, auto-firmado, lo que permite a atacantes de tipo \"hombre en el medio\" (man-in-the-middle) insertar un certificado falso para cualquier Distinguished Name(DN)."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.1","matchCriteriaId":"5CA85285-1376-4569-8EC1-66E1625E258D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*","matchCriteriaId":"38C3AEB0-59E2-400A-8943-60C0A223B680"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32619","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32681","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32687","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32879","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33501","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33694","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35423","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200901-10.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0322","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1719","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.gnu.org/software/gnutls/security.html","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:227","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0982.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/498431/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32232","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021167","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-678-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3086","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1567","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46482","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2886","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/678-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/32619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200901-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.gnu.org/software/gnutls/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0982.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/498431/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-678-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.rpath.com/browse/RPL-2886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/678-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2008-4991","sourceIdentifier":"cve@mitre.org","published":"2008-11-06T19:29:33.497","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en LOCKON CO.,LTD. EC-CUBE v2.3.0 y anteriores, 1.4.7 y anteriores y 1.5.0-beta 2 y anteriores; y Community Edition 1.3.5 y anteriores que permite a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:unknown:community_edition:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"15E3DA33-4F20-4894-AD84-6BB819BB67ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.7","matchCriteriaId":"08047C73-D616-437F-B279-6D97B2542473"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:b2:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"79D905E5-70CC-4823-AB94-A952AED93097"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"20CB26F0-B24E-46EE-8BEF-6127E8A37AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube:1.3.4:unknown:community_edition:*:*:*:*:*","matchCriteriaId":"E234C4D7-2BFC-4A64-8334-D994742F8DA7"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN19072922/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000075.html","source":"cve@mitre.org"},{"url":"http://www.ipa.go.jp/security/english/vuln/200811_EC-CUBE_en.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46509","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN19072922/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipa.go.jp/security/english/vuln/200811_EC-CUBE_en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4992","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:35:55.913","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors."},{"lang":"es","value":"El hipervisor SPARC en el Firmware de los procesadores de Sun System v6.6.3 hasta v6.6.5 y v7.1.3 hasta 7.1.3.e en UltraSPARC T1, T2 y T2+, permite a usarios del dominio lógico acceder a memoria en otros dominios lógicos a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_t6300_server:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"09274149-E5C3-4FA5-A6D7-0F8332EDE98E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_t6300_server:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7BB215F6-FEA1-442A-BFF7-7E74B9729367"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_t6300_server:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"1D5EBB1C-542C-4182-B049-3086B0DF7C1C"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_t6320_server:7.1.3d:*:*:*:*:*:*:*","matchCriteriaId":"7FD2FB7F-3F0C-454C-A0A5-04045FA1C084"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:blade_t6320_server:7.1.3e:*:*:*:*:*:*:*","matchCriteriaId":"9A0111CB-929E-426D-918C-B14A02C3B514"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"BCB92906-D2C4-452F-8D61-BEC2F1127308"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"4F834E71-F05A-4750-93BE-864F405A8788"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_enterprise_server_t1000:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFB53493-49BB-49DB-838F-FDB03DDC15F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"350C2AA4-3E0A-46FB-8F29-83BCB55FB40E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"83796305-BFFB-44E7-B2EE-A7F4BCAEDF7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_enterprise_server_t2000:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"1DF05F11-04AA-49B0-97FF-89727C5C1774"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_cp3060_server:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7F9A986F-EF61-4660-A262-0FCCC6EAB5EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_cp3060_server:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"1489449A-0BFD-4CAD-A75A-2010E091F9EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_cp3060_server:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"07133D15-CE61-417E-A2A0-175847CB42F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_t2000_server:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"13D5B743-7ADB-40E9-AEF5-980E57F2BEA7"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_t2000_server:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F4C51203-47DF-4BE9-8A1E-28EB8D0EA487"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_t2000_server:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"4FF99272-0DED-4F63-A8E1-23CE9EC389C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_t5220_server:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FC5A92D1-1B30-4718-A79E-5C4691AAF74C"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8D2A77-41DB-4A32-A587-57F3013602EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"51C17E7B-B9D6-427A-92E8-87089EA09846"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t1000:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"B2DC7257-391C-451B-9F4F-E12D444DF517"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"891F5592-9F99-4A9E-81A6-C9FE8D46EDA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.4:*:*:*:*:*:*:*","matchCriteriaId":"FA3D4854-DFEA-4947-B51A-EA72CD1A06D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t2000:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"5D914F5E-B90C-4206-8AB2-03792E6249B5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5120:7.1.3e:*:*:*:*:*:*:*","matchCriteriaId":"2019E6C1-53D6-41E7-85CA-012B7A79EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5140:7.1.3d:*:*:*:*:*:*:*","matchCriteriaId":"8C09A7A0-BE8F-4AF6-8DF2-219C001DCEE0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5140:7.1.3e:*:*:*:*:*:*:*","matchCriteriaId":"E879A103-9DFF-4004-91BE-EDA090FFAE70"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5220:7.1.3d:*:*:*:*:*:*:*","matchCriteriaId":"37E81317-3D15-4D2C-8A6F-AC3F8D093CA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5220:7.1.3e:*:*:*:*:*:*:*","matchCriteriaId":"725F9305-2926-4CD0-9320-0DBF6AA47454"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5240:7.1.3d:*:*:*:*:*:*:*","matchCriteriaId":"37CD18A8-41D5-4804-AF66-D81FDBB9EB47"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server_t5240:7.1.3e:*:*:*:*:*:*:*","matchCriteriaId":"07FA5F7C-FC11-4A69-A067-53EF2A76CE79"}]}]}],"references":[{"url":"http://secunia.com/advisories/32582","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32143","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021153","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46407","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4993","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:23.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file."},{"lang":"es","value":"qemu-dm.debug en Xen v3.2.1 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico al fichero temporal /tmp/args.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"717A9642-5033-47B1-B795-5676E950286B"}]}]}],"references":[{"url":"http://bugs.debian.org/496367","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xen-utils-3.2-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0003.html","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46545","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9576","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xen-utils-3.2-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4994","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:23.883","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file."},{"lang":"es","value":"Los ficheros de comandos (1) ncsarmt y (2) ncsawrap en xmcd v2.6 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlaces simbólicos al fichero temporal /tmp/Mosaic.*pid.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ti_kan:xmcd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F00F244B-0428-44C4-992F-2296C0D8B07B"}]}]}],"references":[{"url":"http://bugs.debian.org/496416","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xmcd","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32288","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46550","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/xmcd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4995","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:23.900","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default."},{"lang":"es","value":"redirect.pl en bk2site v1.1.9 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólicoen el fichero temporal /tmp/redirect.log. NOTE: Esta vulnerabilidad está limitada solamente a modo depurar, que está desactiva por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jose_m.vidal:bk2site:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"C4D3FE84-56EC-452E-B1E0-10D27634CF9B"}]}]}],"references":[{"url":"http://bugs.debian.org/496430","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/bk2site","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46543","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/bk2site","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4996","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:23.963","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file.  NOTE: the vendor disputes this vulnerability, stating that \"init is [used in] a single-user context; there's no possibility that this is exploitable."},{"lang":"es","value":"** DISPUTADA ** init en initramfs-tools v0.92f permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico al fichero temporal /tmp/initramfs.debug. NOTA: El fabricante ha diputado esta vulnerabilidad, manteniendo que \"init es usado en un contexto de monousuario; no existe la posibilidad de hacer esto explotable\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:initramfs-tools:0.92f:*:*:*:*:*:*:*","matchCriteriaId":"57E97BA9-A2F3-4969-A092-90648E31787A"}]}]}],"references":[{"url":"http://bugs.debian.org/496386","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/initramfs-tools","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/initramfs-tools","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4997","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:24.040","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file.  NOTE: the vendor disputes this vulnerability, stating that the vector is solely \"an EXAMPLE used in the manpage."},{"lang":"es","value":"** DISPUTADA ** dfxml-invoice en datafreedom-perl v0.1.7, permite a atacantes locales sobrescribir archivos de su elección a través de un ataque de enlaces simbólicos al fichero temporal /tmp/zenity. NOTA: El fabricante disputa esta vulnerabilidad, manteniendo que este vector es unicamente \"un ejemplo utilizado en la página del manual\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilot-qof:datafreedom-perl:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"EA665AF1-F454-4BF1-B129-321FFED4269C"}]}]}],"references":[{"url":"http://bugs.debian.org/496429","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/datafreedom-perl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/datafreedom-perl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4998","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:24.070","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file.  NOTE: the vendor disputes this vulnerability, stating \"this bug is invalid."},{"lang":"es","value":"** DISPUTADA ** postinst en twiki v.4.1.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico al fichero temporal /tmp/twiki. NOTA: El fabricantes ha disputado esta vulnerabilidad, manteniendo \"este error es inválido\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9FE3EEC6-7E05-4A37-97AA-D73E7D7A0E01"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494648","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235802","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4999","sourceIdentifier":"cve@mitre.org","published":"2008-11-07T19:36:24.087","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet (\"ping of death\").  NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue."},{"lang":"es","value":"El teléfono IP Nortel Networks UNIStim 0604DAS , permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete ping largo (\"Ping de la muerte\"). Nota: Esta característica no ha podido ser reproducida por terceras partes, que lo chequearon en un 0604DAD. Como añadido, el desarrollador inicial no ha sido capaz de reproducir esta incidencia de forma fideligna.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:unistim_ip_phone:0604das:*:*:*:*:*:*:*","matchCriteriaId":"B83A5C60-DB69-46CD-AEFB-186985904EB2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4568","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488782/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488801/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488803/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40993","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488782/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488801/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488803/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5000","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via uppercase characters in the news_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/includes/news.inc.php de  PHPX 3.5.16 , cuando “magic_quotes_gpc” está desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante caracteres en mayúscula en el parámetro “news_id”"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.5.16:*:*:*:*:*:*:*","matchCriteriaId":"C40BACBB-64E9-490C-84DA-FF07A4AB6C4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4572","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46548","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6996","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5001","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.013","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610."},{"lang":"es","value":"Múltiples desbordamientos basados en pila en múltiples funciones en vncviewer/FileTransfer.cpp en vncviewer para UltraVNC v1.0.2 y v1.0.4 versiones anteriores a v01252008, cuando en modo ESCUCHA o cuando utilizan el extensión (plugin) DSM, permiten a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de vectores no especificados, una cuestión diferente a CVE-2008-0610."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C556A1A6-30ED-4988-B66B-CF823B297CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"700DA1B0-33D3-43A0-8080-733AD68CB903"}]}]}],"references":[{"url":"http://forum.ultravnc.info/viewtopic.php?p=45150#45150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887","source":"cve@mitre.org"},{"url":"http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp?view=log#rev183","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27687","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0486","source":"cve@mitre.org"},{"url":"http://forum.ultravnc.info/viewtopic.php?p=45150#45150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp?view=log#rev183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5002","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method.  NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX ChilkatCrypt2.ChilkatCrypt2.1 (ChilkatCrypt2.dll 4.3.2.1) en el componente ActiveX Chilkat Crypt permite a atacantes remotos crear y sobrescribir archivos de su elección mediante el método WriteFile. NOTA: esto se podría utilizar para ejecución de código creando archivos ejecutables en carpetas Startup o accediendo a archivos utilizando URLs hcp://. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkat_software:chilkat_crypt_activex_control:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9A059E37-20C4-4B46-8BD9-B4F12BEAC0EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4571","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32073","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2998","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46315","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5003","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ndetail.php en Shahrood permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shahrood:shahrood:*:*:*:*:*:*:*:*","matchCriteriaId":"2555519D-A57E-4620-9D65-C0E728115AFA"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4569","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2996","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46295","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6934","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5004","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.107","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted cookie."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo genscode.php en myWebland Bloggie Lite versión 0.0.2 beta, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de una cookie diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:bloggie_lite:0.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"541C2E62-C84A-4349-AE34-7315F81912CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32040","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46299","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6925","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5005","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en (1) University de Washington IMAP Toolkit 2002 hasta 2007c, (2) University de Washington Alpine 2.00 y versiones anteriores, y (3) Panda IMAP permiten (a) a usuarios locales conseguir privilegios mediante la especificación de un argumento de extensión de carpeta largo en la línea de comandos del programa tmail o dmail; y (b) a atacantes remotos ejecutar código de su elección mediante el envío de correos al nombre del buzón de destino compuesto de un nombre de usuario y el carácter \"+\" seguido de una cadena larga, procesado por tmail o posiblemente el programa dmail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.80:*:*:*:*:*:*:*","matchCriteriaId":"A0AABD8C-5588-4572-BD80-5EB75C53DBC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.81:*:*:*:*:*:*:*","matchCriteriaId":"F8341CA0-2A2A-4B6C-923C-2D716FC0D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.82:*:*:*:*:*:*:*","matchCriteriaId":"7A44A344-A73C-458C-8F1F-46C15C3FC4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.83:*:*:*:*:*:*:*","matchCriteriaId":"CA7A24B7-7CA9-448A-872F-22C98DEF17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.98:*:*:*:*:*:*:*","matchCriteriaId":"31D22762-CFCA-4504-A14D-EE45CB85D300"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.99:*:*:*:*:*:*:*","matchCriteriaId":"106D7FE0-8BA1-4864-9551-4D8E03DECC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.999:*:*:*:*:*:*:*","matchCriteriaId":"9F7EB8DC-BF04-429F-B2E5-B0F441CA22EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.9999:*:*:*:*:*:*:*","matchCriteriaId":"581CCD53-DFE9-4420-B81F-40A20EB7ECA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.99999:*:*:*:*:*:*:*","matchCriteriaId":"998277B4-511E-4601-9004-C911B3E10812"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:0.999999:*:*:*:*:*:*:*","matchCriteriaId":"8EA3B059-4C46-4ED7-A915-2FE0B6256C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:1.00:*:*:*:*:*:*:*","matchCriteriaId":"543690FB-F984-4170-AE1F-25FBD1E0C52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:1.10:*:*:*:*:*:*:*","matchCriteriaId":"DFD681FD-0E0D-4607-975F-B60B63ED1C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:alpine:2.00:*:*:*:*:*:*:*","matchCriteriaId":"F6B8E406-E3E3-4C55-A105-79F0365A2283"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2002:*:*:*:*:*:*:*","matchCriteriaId":"3F51DEAF-515C-473A-AEEE-4CE8BA8E85ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2003:*:*:*:*:*:*:*","matchCriteriaId":"CE4ECFD9-97A9-4B28-B6D8-8BBCA805F0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2004:*:*:*:*:*:*:*","matchCriteriaId":"2BE5ACC0-5B39-4F5D-ACA2-8098A00E5AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2005:*:*:*:*:*:*:*","matchCriteriaId":"5A32FBB2-5DCD-4F38-9127-8A2AFDD4A2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2006:*:*:*:*:*:*:*","matchCriteriaId":"6A532697-4FDB-4A2A-B11A-7BFADB6E7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2007:*:*:*:*:*:*:*","matchCriteriaId":"BBC02DF4-1883-4CBA-89A2-422A03CC28B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2007c:*:*:*:*:*:*:*","matchCriteriaId":"CE82091A-6857-4B2B-AA62-056CC14A3707"}]}]}],"references":[{"url":"http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002268.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=122572590212610&w=4","source":"cve@mitre.org"},{"url":"http://panda.com/imap/","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0275.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32483","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32512","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33142","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33996","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4570","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021131","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-065.htm","source":"cve@mitre.org"},{"url":"http://www.bitsec.com/en/rad/bsa-081103.c","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.bitsec.com/en/rad/bsa-081103.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.debian.org/security/2008/dsa-1685","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498002/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32072","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3042","source":"cve@mitre.org"},{"url":"http://www.washington.edu/alpine/tmailbug.html","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469667","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46281","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10485","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00058.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00082.html","source":"cve@mitre.org"},{"url":"http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002268.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=122572590212610&w=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://panda.com/imap/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0275.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-065.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bitsec.com/en/rad/bsa-081103.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.bitsec.com/en/rad/bsa-081103.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.debian.org/security/2008/dsa-1685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.washington.edu/alpine/tmailbug.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5006","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code."},{"lang":"es","value":"smtp.c en la biblioteca c-client en University of Washington IMAP Toolkit 2007b permite a servidores SMTP remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación)  por responder al comando QUIT con un cierre de la conexión TCP en lugar de con el código de respuesta 221 esperado."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected code is not used by any application shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5.  The impact of this flaw is limited to a crash of the applications connecting to a misbehaving SMTP server.  Due to those reasons, theres currently no plan to include the fix in the imap packages as shipped in Red Hat Enterprise Linux 2.1 and 3, and the libc-client packages as shipped in Red Hat Enterprise Linux 4 and 5.","lastModified":"2009-01-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap_toolkit:2007b:*:*:*:*:*:*:*","matchCriteriaId":"1AEEC15C-B840-4389-B6CF-F61E4A2244F1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33142","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1685","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5007","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.200","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary directory."},{"lang":"es","value":"create_lazarus_export_tgz.sh en lazarus 0.9.24 permite a usuarios locales sobrescribir o borrar archivos de su elección mediante un ataque de enlaces simbólicos en un (1) archivo temporal /tmp/lazarus.tgz o un (2) directorio temporal /tmp/lazarus."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lazarus:lazarus:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"156FAB29-6FB0-4E80-B230-762504E57815"}]}]}],"references":[{"url":"http://bugs.debian.org/496377","source":"cve@mitre.org"},{"url":"http://code.google.com/p/bollin/source/browse/lazarus/trunk/debian/patches/07_sh_using_tmp.dpatch?spec=svn3462&r=3462","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/lazarus-src","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30917","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235828","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44824","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/bollin/source/browse/lazarus/trunk/debian/patches/07_sh_using_tmp.dpatch?spec=svn3462&r=3462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/lazarus-src","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://uvw.ru/report.lenny.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5008","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:56.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when \"extreme low conversion ratios\" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file."},{"lang":"es","value":"Desbordamiento de búfer en src/src_sinc.c de Secret Rabbit Code (también conocido como SRC o libsamplerate) versiones anteriores a 0.1.4, cuando \"extreme low conversion ratios\" es utilizado, permite a atacantes asistidos por usuario tener un impacto desconocido a través de un fichero de audio manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.3","matchCriteriaId":"A802947F-CFE7-4228-A95B-D44035E2FE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D1BDC84F-5B91-4B3A-94F9-7A28CA288B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B71BD6C1-D9C6-4C54-8956-14769A089F90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"52B71E24-680A-4DF1-9315-8BBF61796C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"16D8FE14-E9DC-4257-A0DE-9BAD6FDE3434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"FAEDF14D-CC8C-4D75-8C71-7DF59B4D3AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1009D773-5F2D-4339-BDCD-847D6163AE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"323A783B-A0C6-4D05-8F8C-94B6B62CB7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"1B525EC2-3355-4CD7-B36A-0D200BB2B9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"85705661-D871-4C25-91B3-566B1D885976"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7D757A2E-0C87-41A2-AC4B-AFE2144208C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3E81409F-4859-4BCC-96D0-033E5906E3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D79778D8-F2F7-4EFD-A38A-8F7F7B6FED93"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200812-05.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:238","source":"cve@mitre.org"},{"url":"http://www.mega-nerd.com/SRC/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32090","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46542","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mega-nerd.com/SRC/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5009","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T15:23:19.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service (panic) via vectors involving reading the /dev/xty file."},{"lang":"es","value":"Condición de carrera en el módulo del kernel s_xout en Sun Solstice X.25 9.2, cuando se ejecuta en una máquina con múltiples CPUs, permite a usuarios locales provocar una denegación de servicio (pánico) mediante vectores que involucran la lectura del archivo /dev/xty."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_x.25:9.2:unknown:sparc:*:*:*:*:*","matchCriteriaId":"3322330B-7597-4C42-B252-CC9CD81D7935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_x.25:9.2:unknown:x86:*:*:*:*:*","matchCriteriaId":"55D3761B-BFE9-4461-AA81-D3D6E6CED482"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32667","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021156","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-108669-21-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-108670-21-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243106-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32215","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3087","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46466","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-108669-21-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-108670-21-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243106-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5010","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T15:23:19.580","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the \"number of offers,\" aka Bug ID 6713805."},{"lang":"es","value":"in.dhcpd para la implementación DHCP de Sun Solaris v8 hasta v10 y OpenSolaris anterior a snv_103; permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida del demonio) a través de solicitudes DHCP desconocidas relacionadas con el \"número de ofertas\" (number of offers). También se conoce como Fallo ID 6713805."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_102","matchCriteriaId":"8E0AC41F-C2F5-47DA-AF64-2960CFD265F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_102","matchCriteriaId":"EF6D0E27-D990-423C-98D2-920BD3BDB43F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32668","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021157","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243806-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32213","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3088","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46480","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243806-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5011","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T15:23:24.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to qpconfig_sample.xml, aka SPR CWIR7KMPVP and THES7F9NVR, a different vulnerability than CVE-2008-2163 and CVE-2008-3860."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Lotus Connections v2.x anterior a v2.0.1 de IBM Lotus Quickr v8.1 anteriores a v8.1.0.2, servicios para Lotus Domino, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados, posiblemente relativo a qpconfig_sample.xml, (también conocido como) SPR CWIR7KMPVP y THES7F9NVR, es una vulnerabilidad diferente a CVE-2008-2163 y CVE-2008-3860."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus:*:8.1.0.1:*:*:*:*:*:*","versionEndIncluding":"quickr","matchCriteriaId":"590D5871-EB1A-41F1-8F14-1D179BFB35FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus:quickr:8.1:*:*:*:*:*:*","matchCriteriaId":"1D4EDB39-5BF2-44DF-9E1B-341B7117643E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:lotus_domino:*:*:*:*:*:*:*:*","matchCriteriaId":"BE9179CA-5855-4F19-BAA6-D0A6DF468B9B"}]}]}],"references":[{"url":"http://osvdb.org/49777","source":"cve@mitre.org"},{"url":"http://osvdb.org/49778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32574","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32212","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3081","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46463","source":"cve@mitre.org"},{"url":"http://osvdb.org/49777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27013341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5012","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.190","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker.  NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon."},{"lang":"es","value":"Mozilla Firefox 2.x versiones anteriores a v2.0.0.18, Thunderbird 2.x versiones anteriores a v2.0.0.18, y SeaMonkey 1.x versiones anteriores a v1.1.13 no cambia apropiadamente la URI origen cuando procesa un elemento CANVAS y una redirección HTTP, lo cual permite a atacantes remotos evitar las mismas políticas de origen e imágenes aleatorias de acceso que no son directamente accesibles por el atacante.\r\nNOTA: esta cuestión se puede utilizar para enumerar software en un cliente mediante redirecciones realizadas con moz-icon.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"102B1C57-CBEE-467E-A563-FDAC61598A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.12","matchCriteriaId":"54CA4275-83F7-4BCC-8027-6610AB86BB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"8813A5AB-98DC-472F-ABED-C163C6D63976"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://scary.beasts.org/security/CESA-2008-009.html","source":"secalert@redhat.com"},{"url":"http://scarybeastsecurity.blogspot.com/2008/11/firefox-cross-domain-image-theft-and.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-48.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498468","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32351","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021187","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=355126","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451619","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10750","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2008-009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scarybeastsecurity.blogspot.com/2008/11/firefox-cross-domain-image-theft-and.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-48.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=355126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5013","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that \"dynamically unloads itself from an outside JavaScript function,\" which triggers an access of an expired memory address."},{"lang":"es","value":"Mozilla Firefox 2.x antes de 2.0.0.18 y SeaMonkey 1.x antes de 1.1.13 no comprueba correctamente cuando se ha descargado dinámicamente el módulo Flash, lo que permite a atacantes remotos ejecutar código de su elección mediante un archivo SWF manipulado que \"se descarga dinámicamente de una función Javascript externa\", lo que dispara un acceso a una dirección de memoria que ha expirado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"102B1C57-CBEE-467E-A563-FDAC61598A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.12","matchCriteriaId":"54CA4275-83F7-4BCC-8027-6610AB86BB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-49.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021181","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=433610","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9660","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-49.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=433610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5014","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function."},{"lang":"es","value":"jslock.cpp en Mozilla Firefox 3.x antes de 3.0.2, Firefox 2.x antes de 2.0.0.18, Thunderbird 2.x antes de 2.0.0.18, y SeaMonkey 1.x antes de 1.1.13, permite a atacantes remotos provocar una denegación de servicio (crash) y posiblemente ejecutar código de su elección mediante la modificación del objeto window.__proto__.__proto__ en el sentido en que causa un bloqueo en un objeto no nativo, lo que desencadena un fallo de afirmación, relacionado con la función OBJ_IS_NATIVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.2","matchCriteriaId":"2063D1EA-2DF3-4321-AB5F-2CA620B63003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-50.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021182","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=436741","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9157","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-50.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=436741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5015","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system."},{"lang":"es","value":"Mozilla Firefox v3.x anteriores a 3.0.4 asigna privilegios chrome a un fichero: URI cuando se accede desde una misma pestaña que tenga privilegios chrome o desde una pagina about: con privilegios, lo que permite a atacantes ayudados por el usuario ejecutar JavaSript a su elección con privilegios chrome a través de código malicioso en un fichero que ya este guardado en el sistema local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3","matchCriteriaId":"5207CF5A-8C0D-4796-AFA9-61F255D1063D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-51.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021191","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=447579","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11063","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-51.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=447579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5016","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences."},{"lang":"es","value":"El motor de diseño en Mozilla Firefox 3.x versiones anteriores a v3.0.4, Thunderbird 2.x versiones anteriores a v2.0.0.18, y SeaMonkey 1.x versiones anteriores a v1.1.13 permite a atacantes remotos provocar una denegación de servicio (caída) a través de múltiples vectores que disparan un fallo de evaluación u otras consecuencias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3","matchCriteriaId":"5207CF5A-8C0D-4796-AFA9-61F255D1063D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.12","matchCriteriaId":"54CA4275-83F7-4BCC-8027-6610AB86BB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"8813A5AB-98DC-472F-ABED-C163C6D63976"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021183","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=439206%2C453406%2C458637%2C444864%2C452157%2C449111%2C444260%2C457375%2C433429%2C443528%2C430394","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11356","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=439206%2C453406%2C458637%2C444864%2C452157%2C449111%2C444260%2C457375%2C433429%2C443528%2C430394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5017","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors."},{"lang":"es","value":"Desbordamiento de entero en xpcom/io/nsEscape.cpp en el motor de navegación en Mozilla Firefox 3.x antes de 3.0.4, Firefox 2.x antes de 2.0.0.18, Thunderbird 2.x antes de 2.0.0.18 y SeaMonkey 1.x antes de 1.1.13 permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021183","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=455987","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11436","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=455987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5018","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to \"insufficient class checking\" in the Date class."},{"lang":"es","value":"El motor JavaScript en Mozilla Firefox 3.x antes de 3.0.4, Firefox 2.x antes de 2.0.0.18, Thunderbird 2.x antes de 2.0.0.18, y SeaMonkey 1.x antes de 1.1.13, permite a atacantes remotos provocar una denegación de servicio (crash) mediante vectores relacionados con \"insufficient class checking\" en la clase Date."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021183","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=452786","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9872","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=452786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5019","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors."},{"lang":"es","value":"La característica de restauración de sesión en Mozilla Firefox 3.x antes de 3.0.4 y 2.x antes de 2.0.0.18 permite a atacantes remotos violar la política de mismo origen para llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) y ejecutar Javascript de su elección con privilegios chrome mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-53.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021184","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=459906%2C460983","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10943","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-53.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=459906%2C460983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5021","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory."},{"lang":"es","value":"nsFrameManager en Firefox v3.x antes de la v3.0.4, Firefox v2.x antes de la v2.0.0.18, Thunderbird 2.x antes de la v2.0.0.18, y SeaMonkey v1.x antes de la v1.1.13 permite a atacantes remotos producir una denegación de servicio (caída) y una posible ejecución de código a su elección modificación de las propiedades de un elemento de entrada de fichero mientras se inicia, cuando se esta utilizando el método blur para acceder a no ha sido inicializada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*","matchCriteriaId":"72E4DB7F-07C3-46BB-AAA2-05CD0312C57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:open_enterprise_server:-:*:*:*:*:*:*:*","matchCriteriaId":"C5C0C136-E406-4628-994A-682E8E729B50"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*","matchCriteriaId":"24818450-FDA1-429A-AC17-68F44F584217"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:-:*:*:*:*:*:*","matchCriteriaId":"4C1B3637-1CDC-47FE-B19C-95FCEB833450"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*","matchCriteriaId":"29184B59-5756-48DB-930C-69D5CD628548"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*","matchCriteriaId":"33EB57D5-DE8D-417C-8C00-AD331D61181C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*","matchCriteriaId":"D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-55.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021186","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460002","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5022","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check."},{"lang":"es","value":"El método nsXMLHttpRequest::NotifyEventListeners en Firefox v3.x anterior a v3.0.4, Firefox v2.x anterior a v2.0.0.18, Thunderbird v2.x anterior a v2.0.0.18 y SeaMonkey v1.x anterior a v1.1.13; permite a atacantes remotos eludir la política de mismo-origen y ejecutar secuencias de comandos (scripts) de su elección a través de múltiples oyentes; esto evita la comprobación de la ventana interior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-56.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021188","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460002","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-56.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5023","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file."},{"lang":"es","value":"Firefox 3.x antes de v3.0.4, Firefox 2.x antes de v2.0.0.18 y SeaMonkey 1.x antes de v1.1.13  permite a atacantes remotos evitar los mecanismos de protección para \"codebase principals\" y ejecutar secuencias de comandos de su elección mediante la propiedad -moz-binding CSS en un archivo signed JAR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-57.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021189","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=424733","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9908","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-57.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=424733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5024","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document."},{"lang":"es","value":"Mozilla Firefox 3.x antes de 3.0.4, Firefox 2.x antes de 2.0.0.18, Thunderbird 2.x antes de 2.0.0.18, Y SeaMonkey 1.x antes de 1.1.13 no escapan de manera apropiada los caracteres usados para el procesamiento XML, lo que permite a atacantes remotos realizar ataques de inyección de XML a través del espacio de nombres por defecto en un documento E4X."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-91"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.4","matchCriteriaId":"63B71385-5551-4021-A899-C995B3EBA68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.13","matchCriteriaId":"D8CF8688-28E3-408B-9167-0C36DB2765FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-58.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021192","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453915","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9063","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-667-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-58.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0976.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5025","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función hfs_cat_find_brec en fs/hfs/catalog.c en versiones del kernel de Linux anteriores a la 2.6.28-RC1 permite a atacantes provocar una denegación de servicio (corrupción de memoria o caida del sistema) a través de una imagen de un sistema de ficheros HFS con un campo \"longitud del catálogo\" inválido. Esta vulnerabilidad esta relacionada con la CVE-2008-4933."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=d38b7aa7fc3371b52d036748028db50b585ade2e","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/1","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/3","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/6","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/7","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/11/1","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/11/12","source":"cve@mitre.org"},{"url":"http://osvdb.org/49863","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33858","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:246","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32289","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021230","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470769","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46605","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=d38b7aa7fc3371b52d036748028db50b585ade2e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/10/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/11/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5026","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T15:23:29.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading HTML documents."},{"lang":"es","value":"SharePoint de Microsoft utiliza URLs con el mismo nombre de host y número de puerto para los archivos primarios de un sitio web y los archivos actualizados de los usuarios individuales (también conocidos como adjuntos), lo que permite a usuarios remotamente autentificados utilizar las relaciones desde el mismo origen y llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) actualizando documentos HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:*:*:*:*","matchCriteriaId":"067B7FB7-3921-4732-8562-A2AC0615BE95"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0055.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0056.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0058.html","source":"cve@mitre.org"},{"url":"http://www.pomcor.com/whitepapers/file_sharing_security.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46590","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pomcor.com/whitepapers/file_sharing_security.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5027","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T15:23:29.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon."},{"lang":"es","value":"El proceso Nagios en (1) Nagios anterior a v3.0.5 y (2) op5 Monitor anterior a v4.0.1 ; permite a usuarios autenticados en remoto evitar las comprobaciones de autorización y provocar la ejecución de ficheros de su elección por este proceso a través de (a) un formulario personalizado o (b) un complemento para el navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.4","matchCriteriaId":"286F0DB6-652E-4F1C-BB94-5D2F1C771697"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA91B05-9578-46D8-A21C-4E3C4AB4936A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"C178226A-CBE8-4ECB-BDA7-1E86C61D2A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b2:*:*:*:*:*:*:*","matchCriteriaId":"5B75383C-C37C-485F-B6D2-B4A7F2F7B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b3:*:*:*:*:*:*:*","matchCriteriaId":"67AF4805-B2EE-40F5-8D92-D2953866AD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"52432776-C9C6-4CA7-B3D9-87513CBA5716"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"601958D5-B393-4EFA-9A6F-A5A04A95F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b3:*:*:*:*:*:*:*","matchCriteriaId":"99B2E88A-A611-43C5-8037-411D6B78EC03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*","matchCriteriaId":"2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b5:*:*:*:*:*:*:*","matchCriteriaId":"E61ACC55-1002-4FA3-8E5A-52041CE5DCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b6:*:*:*:*:*:*:*","matchCriteriaId":"6C773265-0BE7-463A-8E24-84D804F14AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A847327-D74E-460C-9F6F-E04C9B77E0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F7425E3-F152-439B-B95F-5160E4593DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E5911624-5BD8-4A40-B417-FCD926D352BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF45013F-A844-4726-8B2A-EF602A3BC4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A91E463-D239-4853-8A63-E01EE7DB319F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"239CAF7F-E9BF-4D0F-BB99-EF51E1366516"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"738DF14D-A716-46F0-87AC-2DB2F1E44594"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"4E8E1234-9F0D-4E6F-BF58-5DAE8E41DB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"0073F69B-C5FA-470A-BA95-9C4E8033F5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b5:*:*:*:*:*:*:*","matchCriteriaId":"AAA7C5B6-C13D-4814-AA7B-444CF12E4DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b6:*:*:*:*:*:*:*","matchCriteriaId":"E1209D1C-DD27-41FC-8DAF-BFC0B4B1D602"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"39551FFC-E1F0-4D45-ADA6-AB3E74BB576D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"7BED52AA-BE20-447C-8896-4B591C42F66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.1:*:*:*:*:*:*:*","matchCriteriaId":"82DE68E3-7003-4675-96A9-6F7308E1E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E3F8DC3-2F34-4E11-A796-4EA7CB17FDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:*","matchCriteriaId":"7ADCBA8C-06DB-4D85-AEED-807E64A29DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D3EE2D7-BD17-4C37-ABA3-79FCE8328EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.4:*:*:*:*:*:*:*","matchCriteriaId":"927B8496-720D-4B15-A12E-52169AFB38D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9E80B2-E349-488F-A870-9BD50D47A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4C3374C3-9F57-4014-8712-DDDAB52998FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E5D4F00F-C732-477B-988A-25F8E8D32D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.11:*:*:*:*:*:*:*","matchCriteriaId":"725F9938-0A5C-4A59-BFA4-C58044DE26DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DDCA77EF-1020-4068-9CDC-5CF3B0CD66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"751C46D5-877F-454B-8488-BBCA10CA4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"F4754494-17BE-496E-A7B8-453B3028CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"CD15E8FA-04D3-4625-BEA5-9F5CC0337699"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"713C5F3E-AA57-4F52-AC0A-9B1F25C25580"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0AFABA9F-4A45-4150-AED1-897267076A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"830BB564-82FD-4519-A8EA-DCDF74F2BC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9A975310-9591-4EBF-B987-CA43433B4C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8653D6A2-4B5B-4F1D-A898-8F81F29C6FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"D18649FF-8838-432E-93B8-3F8B82B0DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9375EA90-0763-4817-8C7D-2D7E116E043F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta7:*:*:*:*:*:*","matchCriteriaId":"C02C2F95-2AC2-4E0C-B5D0-785CDF1EDB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12E7BC34-65F0-4DD6-8809-F05320955479"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"390CFA92-68AE-4DE9-A199-1B7290A82168"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1E56F249-3E6A-4764-8CAE-D3E5B6A86AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"953745B7-1381-47F5-8012-E699EFA065CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"87A8A3DA-61AF-4369-ACB0-7D54EEB1DAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"40B7525F-EEE1-4537-BCE6-15DF3E348FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"4A9A803F-1AD0-4359-B08C-79A68818BCA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B40BB586-111A-427F-9B16-53423B0AD939"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:2.6:*:*:*:*:*:*:*","matchCriteriaId":"061C311A-ABC7-49CA-B2FC-021A5E003000"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:2.8:*:*:*:*:*:*:*","matchCriteriaId":"FF2D71BF-88DE-4963-9313-30BFEC24DB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B3DA7FD7-C403-4086-AC2F-A51CE368FFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E4D52212-93AF-4397-B87B-7D778589F547"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.2:*:*:*:*:*:*:*","matchCriteriaId":"B760C26C-40A8-43DD-ADEA-7E2F0C8443A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"30126655-10BC-4EBF-9D60-D97EBFC8C6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"516245EB-0DB3-48F0-917D-B93135C287BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3BB3AA0C-8439-4B87-BC36-DBF0F2E4C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6BA52C25-22A5-460F-82B8-E9CB6A3CF618"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35002","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nagios.org/development/history/nagios-3x.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/06/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32156","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022165","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-698-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3029","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3364","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1256","source":"cve@mitre.org"},{"url":"https://www.ubuntu.com/usn/USN-698-3/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nagios.org/development/history/nagios-3x.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-698-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ubuntu.com/usn/USN-698-3/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5028","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T15:23:29.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en cmd.cgi en (1) Nagios 3.0.5 y (2) op5 Monitor antes de v4.0.1 permite a atacantes remotos enviar comandos al proceso Nagios y dispara la ejecución de programas de su elección por este proceso, mediante peticiones HTTP no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.4","matchCriteriaId":"286F0DB6-652E-4F1C-BB94-5D2F1C771697"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA91B05-9578-46D8-A21C-4E3C4AB4936A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"C178226A-CBE8-4ECB-BDA7-1E86C61D2A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b2:*:*:*:*:*:*:*","matchCriteriaId":"5B75383C-C37C-485F-B6D2-B4A7F2F7B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b3:*:*:*:*:*:*:*","matchCriteriaId":"67AF4805-B2EE-40F5-8D92-D2953866AD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"52432776-C9C6-4CA7-B3D9-87513CBA5716"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"601958D5-B393-4EFA-9A6F-A5A04A95F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b3:*:*:*:*:*:*:*","matchCriteriaId":"99B2E88A-A611-43C5-8037-411D6B78EC03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*","matchCriteriaId":"2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b5:*:*:*:*:*:*:*","matchCriteriaId":"E61ACC55-1002-4FA3-8E5A-52041CE5DCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b6:*:*:*:*:*:*:*","matchCriteriaId":"6C773265-0BE7-463A-8E24-84D804F14AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A847327-D74E-460C-9F6F-E04C9B77E0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F7425E3-F152-439B-B95F-5160E4593DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E5911624-5BD8-4A40-B417-FCD926D352BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF45013F-A844-4726-8B2A-EF602A3BC4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A91E463-D239-4853-8A63-E01EE7DB319F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"239CAF7F-E9BF-4D0F-BB99-EF51E1366516"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"738DF14D-A716-46F0-87AC-2DB2F1E44594"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"4E8E1234-9F0D-4E6F-BF58-5DAE8E41DB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"0073F69B-C5FA-470A-BA95-9C4E8033F5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b5:*:*:*:*:*:*:*","matchCriteriaId":"AAA7C5B6-C13D-4814-AA7B-444CF12E4DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b6:*:*:*:*:*:*:*","matchCriteriaId":"E1209D1C-DD27-41FC-8DAF-BFC0B4B1D602"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"39551FFC-E1F0-4D45-ADA6-AB3E74BB576D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"7BED52AA-BE20-447C-8896-4B591C42F66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.1:*:*:*:*:*:*:*","matchCriteriaId":"82DE68E3-7003-4675-96A9-6F7308E1E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E3F8DC3-2F34-4E11-A796-4EA7CB17FDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:*","matchCriteriaId":"7ADCBA8C-06DB-4D85-AEED-807E64A29DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D3EE2D7-BD17-4C37-ABA3-79FCE8328EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.4:*:*:*:*:*:*:*","matchCriteriaId":"927B8496-720D-4B15-A12E-52169AFB38D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9E80B2-E349-488F-A870-9BD50D47A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4C3374C3-9F57-4014-8712-DDDAB52998FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E5D4F00F-C732-477B-988A-25F8E8D32D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.11:*:*:*:*:*:*:*","matchCriteriaId":"725F9938-0A5C-4A59-BFA4-C58044DE26DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DDCA77EF-1020-4068-9CDC-5CF3B0CD66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"751C46D5-877F-454B-8488-BBCA10CA4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"F4754494-17BE-496E-A7B8-453B3028CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"CD15E8FA-04D3-4625-BEA5-9F5CC0337699"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"713C5F3E-AA57-4F52-AC0A-9B1F25C25580"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0AFABA9F-4A45-4150-AED1-897267076A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"830BB564-82FD-4519-A8EA-DCDF74F2BC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9A975310-9591-4EBF-B987-CA43433B4C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8653D6A2-4B5B-4F1D-A898-8F81F29C6FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"D18649FF-8838-432E-93B8-3F8B82B0DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9375EA90-0763-4817-8C7D-2D7E116E043F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta7:*:*:*:*:*:*","matchCriteriaId":"C02C2F95-2AC2-4E0C-B5D0-785CDF1EDB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12E7BC34-65F0-4DD6-8809-F05320955479"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"390CFA92-68AE-4DE9-A199-1B7290A82168"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1E56F249-3E6A-4764-8CAE-D3E5B6A86AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"953745B7-1381-47F5-8012-E699EFA065CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"87A8A3DA-61AF-4369-ACB0-7D54EEB1DAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"40B7525F-EEE1-4537-BCE6-15DF3E348FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"4A9A803F-1AD0-4359-B08C-79A68818BCA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B40BB586-111A-427F-9B16-53423B0AD939"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:2.6:*:*:*:*:*:*:*","matchCriteriaId":"061C311A-ABC7-49CA-B2FC-021A5E003000"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:2.8:*:*:*:*:*:*:*","matchCriteriaId":"FF2D71BF-88DE-4963-9313-30BFEC24DB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B3DA7FD7-C403-4086-AC2F-A51CE368FFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E4D52212-93AF-4397-B87B-7D778589F547"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.2:*:*:*:*:*:*:*","matchCriteriaId":"B760C26C-40A8-43DD-ADEA-7E2F0C8443A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"30126655-10BC-4EBF-9D60-D97EBFC8C6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"516245EB-0DB3-48F0-917D-B93135C287BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3BB3AA0C-8439-4B87-BC36-DBF0F2E4C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:op5:monitor:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6BA52C25-22A5-460F-82B8-E9CB6A3CF618"}]}]}],"references":[{"url":"http://git.op5.org/git/?p=nagios.git%3Ba=commit%3Bh=814d8d4d1a73f7151eeed187c0667585d79fea18","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/49678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32610","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35002","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/06/2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022165","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3029","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1256","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46426","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46521","source":"cve@mitre.org"},{"url":"https://www.ubuntu.com/usn/USN-698-3/","source":"cve@mitre.org"},{"url":"http://git.op5.org/git/?p=nagios.git%3Ba=commit%3Bh=814d8d4d1a73f7151eeed187c0667585d79fea18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=4914396D.5010009%40op5.se&forum_name=nagios-devel","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.op5.com/support/news/389-important-security-fix-available-for-op5-monitor","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ubuntu.com/usn/USN-698-3/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5029","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.060","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors."},{"lang":"es","value":"La función __scm_destroy de net/core/scm.c en el kernel de Linux 2.6.27.4, 2.6.2 y anteriores; realiza llamadas recursivas indirectas a sí mismo a través de llamadas a la función fput; esto permite a usuarios locales provocar una denegación de servicio (pánico) a través de vectores relacionados con el envío de un mensaje SCM_RIGTHS a través de un socket de dominio UNIX y cerrando los descriptores de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27.4","matchCriteriaId":"39B4877A-8246-487A-9E2E-C9DAF11013BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html","source":"cve@mitre.org"},{"url":"http://darkircop.org/unix.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-netdev&m=122593044330973&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33586","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33623","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33704","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4573","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:234","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/06/1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0225.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499700/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499744/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32154","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33079","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021292","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021511","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470201","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46538","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://darkircop.org/unix.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-netdev&m=122593044330973&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499700/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499744/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5030","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.107","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la función cddb_read_disc_data en el archivo cddb.c en libcdaudio versión 0.99.12p2, permite a los servidores CDDB remotos ejecutar código arbitrario por medio de datos CDDB largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libcaudio:libcaudio:0.99.12p2:*:*:*:*:*:*:*","matchCriteriaId":"B5594545-100B-4630-9761-D3CFACF981B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32678","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-31.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1288043&group_id=27134&atid=389442","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1665","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:233","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/07/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/11/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/11/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32122","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46392","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-31.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1288043&group_id=27134&atid=389442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/11/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5031","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315."},{"lang":"es","value":"Múltiples desbordamientos de enteros en Python versiones 2.2.3 hasta 2.5.1 y 2.6, permiten a los atacantes dependiendo del contexto tener un impacto desconocido por medio de un valor entero largo en el argumento tabsize para el método expandtabs, tal y como es implementado por ( 1) la función string_expandtabs en el archivo Objects/stringobject.c y (2) la función unicode_expandtabs en el archivo Objects/unicodeobject.c. NOTA: esta vulnerabilidad se presenta debido a una corrección incompleta para el CVE-2008-2315."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"569FAD3A-17DF-424A-AF93-B0720D48D6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"02839080-EFB1-4F63-9D4E-45E26D82ECF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"87B6E723-EC9D-44EF-9DB8-8A229E0ABBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"12D3CD4F-0C58-46F4-939D-FDF19BC98729"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2008-008.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-16.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/stringobject.c&p2=/python/trunk/Objects/stringobject.c","source":"cve@mitre.org"},{"url":"http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/unicodeobject.c&p2=/python/trunk/Objects/unicodeobject.c","source":"cve@mitre.org"},{"url":"http://svn.python.org/view?rev=61350&view=rev","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46612","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2008-008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/stringobject.c&p2=/python/trunk/Objects/stringobject.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/unicodeobject.c&p2=/python/trunk/Objects/unicodeobject.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.python.org/view?rev=61350&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5032","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c.  NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el reproductor multimedia VideoLAN VLC versiones 0.5.0 hasta 0.9.5, podría permitir a los atacantes asistidos por el usuario ejecutar código arbitrario por medio del encabezado de un archivo de imagen CUE no válido, relacionado con el archivo modules/access/vcd/cdrom.c. NOTA: este identificador originalmente incluía un problema relacionado con RealText, pero a ese problema se le ha asignado un identificador separado, CVE-2008-5036."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"12602EC1-07DE-4A40-9897-E7E6A23D4B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DC23A94C-3611-41BA-9043-22C477B8020B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"01118457-9068-48F7-B2A4-BABB354E1449"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6221A983-B4AC-4646-A939-FAA021EE7F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F1707178-C378-4098-8C97-CBFB5DD8B4ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"08AD173D-10D1-4145-88E9-20053ADA7A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.7.1a:*:*:*:*:*:*:*","matchCriteriaId":"DA2757CC-8491-4186-9D2D-C2D02A151083"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"46904EED-974A-4900-B676-DE298CB3ADE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.7.2:test2:*:*:*:*:*:*","matchCriteriaId":"086A0630-E837-482C-B402-7752D1047942"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.7.2:test3:*:*:*:*:*:*","matchCriteriaId":"E2E714EE-40F1-49DA-886C-1F24C9E56520"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4384C436-12AF-4051-B074-893BE6B4C7F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"7EC2CEE6-A2E1-437A-947F-608EB7987758"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C30A98A2-675A-4913-A425-2B9F8F06CEA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"C6A360E5-501E-4A97-94A0-620FC5B2627A"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.4:test2:*:*:*:*:*:*","matchCriteriaId":"EC6BC004-F036-4D5B-A28C-7DE3D7E235D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.4a:*:*:*:*:*:*:*","matchCriteriaId":"8E9742E3-756B-418F-8F9F-D86BD37080DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D2845107-7D0C-4F72-AF0C-0E059E923826"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.5:test3:*:*:*:*:*:*","matchCriteriaId":"92694DE5-F480-4647-BD9F-B0A184329269"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.5:test4:*:*:*:*:*:*","matchCriteriaId":"986E669D-6631-4191-A78A-59D2AA370D1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"18B68706-5A1F-479F-8A38-F93D98481F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6a:*:*:*:*:*:*:*","matchCriteriaId":"06BB94C4-9315-48FB-8859-425993D42973"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6b:*:*:*:*:*:*:*","matchCriteriaId":"97E4572E-337D-43F3-81AE-54E496F04E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"DDB2DD0B-7D95-4391-8881-4A22F4AA1778"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6d:*:*:*:*:*:*:*","matchCriteriaId":"AAFBA7B6-0227-4E0F-AF95-FC02FE84654D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6e:*:*:*:*:*:*:*","matchCriteriaId":"9D387A08-1B84-46BB-87E2-51E3E9567B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6f:*:*:*:*:*:*:*","matchCriteriaId":"8D26B400-DAF1-4602-9AF7-ECF97919529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6g:*:*:*:*:*:*:*","matchCriteriaId":"2150E50E-C00A-407B-9D14-444124D6AD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6h:*:*:*:*:*:*:*","matchCriteriaId":"725D145D-C3F6-4810-96D8-E8AC871093F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"FD824C10-CB0B-4988-99E9-1B8A2B52C5A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2989A186-A580-47FE-A8B0-87FD0861D325"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C13FF305-2547-4E85-9007-0A89F5E34BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3E93836E-E9D1-4180-A589-43602647741C"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B32073-DBD5-4344-8498-A132B99807A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5330E5C4-BF18-498A-9AE2-1C57E2494AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"86D31A16-94EE-45D6-8C54-4F27D466A29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"117C896C-1C61-440E-B0F4-A871828CD095"}]}]}],"references":[{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=5f63f1562d43f32331006c2c1a61742de031b84d","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33315","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-24.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/10/13","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498112/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32125","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-012.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0810.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46375","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14798","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=5f63f1562d43f32331006c2c1a61742de031b84d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/10/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498112/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-012.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0810.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5033","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and 2.6.27.x before 2.6.27.3 allows attackers to cause a denial of service (NULL function pointer dereference and OOPS) via unknown vectors."},{"lang":"es","value":"La function chip_command en  drivers/media/video/tvaudio.c en el Kernel de Linux v2.6.25.x anteriores a v2.6.25.19, v2.6.26.x anteriores a v2.6.26.7, y v2.6.27.x anteriores a 2.6.27.3 permite a los atacantes  provocar una denegación de servicio (referencia a puntero a función NULL y OOPS) a través de vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2008-11-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ba2f67afb02c5302b2898949ed6fc3b3d37dcf1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32918","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.19","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.7","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.3","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:246","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32094","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46544","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ba2f67afb02c5302b2898949ed6fc3b3d37dcf1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-679-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5034","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file.  NOTE: the vendor disputes this vulnerability, stating 'this package does not have \" possibility of attack with the help of symlinks\"'"},{"lang":"es","value":"** DISPUTADA ** master-filter en printfilters-ppd v2.13 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico al fichero temporal /tmp/filter.debug. NOTA: El fabricante ha disputado esta vulnerabilidad, manteniendo 'este paquete no tiene \"posibilidad de ataque con la ayuda de enlaces simbólicos\"'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a_mennucc1:printfilters-ppd:2.13:*:*:*:*:*:*:*","matchCriteriaId":"5DF3CCFE-04F8-4E0F-9408-B78DD4726FE3"}]}]}],"references":[{"url":"http://bugs.debian.org/496417","source":"cve@mitre.org"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/printfilters-ppd","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/496417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/printfilters-ppd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5035","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T16:15:12.247","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an invalid length."},{"lang":"es","value":"El demonio de Control y gestión de Recursos (RMC) en la Consola de Gestión de Hardware de IBM (HMC) 7 v3.2.0 SP1 y v3.3.0 SP2 permite a atacantes remotos provocar una denegación de servicio (cuelgue o caída del demonio) a través de un paquete con longitud inválida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:3.2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B878658A-9A50-4FE3-94F9-DD24DD4E2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:3.3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"45B8D085-B4AD-4426-99F8-EAF2655D5350"}]}]}],"references":[{"url":"http://secunia.com/advisories/32571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02482","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32181","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3051","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4441","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46413","source":"cve@mitre.org"},{"url":"https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01133","source":"cve@mitre.org"},{"url":"https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01134","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5036","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T22:18:34.490","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c.  NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en VideoLAN VLC media player v0.9.x anteriores a v0.9.6 permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un fichero de subtítulo de RealText (rt), relativo a la función ParseRealText en /modules/demux/subtitle.c. NOTA: Este problema es una parte de CVE-2008-5032 en 20081110."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2989A186-A580-47FE-A8B0-87FD0861D325"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C13FF305-2547-4E85-9007-0A89F5E34BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3E93836E-E9D1-4180-A589-43602647741C"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B32073-DBD5-4344-8498-A132B99807A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5330E5C4-BF18-498A-9AE2-1C57E2494AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"86D31A16-94EE-45D6-8C54-4F27D466A29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"117C896C-1C61-440E-B0F4-A871828CD095"}]}]}],"references":[{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=e3cef651125701a2e33a8d75b815b3e39681a447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32569","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33315","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-24.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/10/13","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498111/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32125","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-011.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0810.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46376","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14329","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7051","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=e3cef651125701a2e33a8d75b815b3e39681a447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/10/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498111/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-011.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0810.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5037","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T21:09:02.893","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php en ElkaGroup Image Gallery v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elkagroup:image_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7DB9AD45-67EF-4859-BAA1-38C8DD8E6F87"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/elkagroup-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/25844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31966","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/elkagroup-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/25844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5038","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T21:09:03.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of \"Get NCP Extension Information By Name\" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852."},{"lang":"es","value":"Una vulnerabilidad de uso de memoria previamente liberada en la funcionalidad NetWare Core Protocol (NCP) en Novell eDirectory versiones 8.7.3 SP10 anteriores a 8.7.3 SP10 FTF1 y versión 8.8 SP2 para Windows, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario por medio de una secuencia de peticiones de \"Get NCP Extension Information By Name\" que causan que un hilo (subproceso) opere en memoria después de que se haya liberado en otro hilo (subproceso), lo que desencadena una corrupción de memoria, también se conoce como Novell Bug 373852."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","versionEndExcluding":"8.7.3","matchCriteriaId":"069FE430-EFDA-40B2-8775-52130BC609D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp1:*:*:*:windows:*:*","matchCriteriaId":"4CC3E9C7-F5B1-4B68-AE32-BDE725E4C69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp2:*:*:*:windows:*:*","matchCriteriaId":"1959434F-9887-43A7-BCE3-E83B2B85332A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:*:*:*:windows:*:*","matchCriteriaId":"BC6D86F1-7C4B-4D4F-9434-667B8A3B68F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:*:*:*:windows:*:*","matchCriteriaId":"B5AFAE6C-E1EA-4B8D-98A3-DF1EC8D97D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:*:*:*:windows:*:*","matchCriteriaId":"3FDA680E-0549-43F9-B4A5-A983743370B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp6:*:*:*:windows:*:*","matchCriteriaId":"26A68A9C-D888-4535-BBFF-0465EC573319"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp7:*:*:*:windows:*:*","matchCriteriaId":"8967E2BF-9C16-4328-BA7D-76EC6B43B3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp8:*:*:*:windows:*:*","matchCriteriaId":"99BBADD0-FB28-4665-90BD-DA02EB05CB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp9:*:*:*:windows:*:*","matchCriteriaId":"DDBA1FE5-7C01-44F9-9E9C-12C29CAB5A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:-:*:*:*:windows:*:*","matchCriteriaId":"C3C6B247-7DE0-4B2F-BE11-EF4CEED803F2"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/48206","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32395","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31956","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021117","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2937","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46138","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/48206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/31956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5039","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T21:09:03.067","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos de sitios cruzados (XSS) en el módulo League para PHP-Nuke, puede que en v2.4; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro tid en una acción de equipo en modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:league_module:*:*:*:*:*:*:*:*","matchCriteriaId":"CAB44059-2559-4B19-9DC5-F212751A4EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:league_module:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C234BB85-83D0-4F67-8161-EC58D5D668CC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4575","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497855/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46154","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497855/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5040","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T21:09:03.097","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum_login and (2) myforum_pass cookies to 1."},{"lang":"es","value":"Graphiks MyForum v1.3 permite a atacantes remotos saltar la autenticación y obtener acceso de administración mediante la configuración de las cookies (1) myforum_login and (2) myforum_pass a el valor 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphiks:myforum:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6593767F-16EC-4BC5-8FD7-3C9D090540AE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31955","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46157","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6857","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5041","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T21:11:06.867","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sweex RO002 Router with firmware Ts03-072 has \"rdc123\" as its default password for the \"rdc123\" account, which makes it easier for remote attackers to obtain access.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Router Sweex RO002 con firmware Ts03-072 tiene \"rdc123\" como su contraseña por defecto para la cuenta \"rdc123\", lo cual hace más sencillo  a atacantes remotos obtener acceso.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sweex:ro002_router:ts03-072:*:*:*:*:*:*:*","matchCriteriaId":"2FEE8E49-695A-4E2C-9926-6C061E421806"}]}]}],"references":[{"url":"http://osvdb.org/49865","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32623","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32249","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46517","source":"cve@mitre.org"},{"url":"http://osvdb.org/49865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5042","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T21:11:06.897","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php."},{"lang":"es","value":"Zeeways PhotoVideoTube v1.1 y anteriores permite a atacantes remotos saltar la autenticación y realizar tareas de administración mediante una petición directa a admin/home.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:photovideotube:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"26F3B491-7F25-4EAB-9343-193EEF1716A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32223","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46501","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7070","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5043","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T23:30:02.837","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via (1) the elementid parameter in a generatedreportresults action to the ReportTree program, (2) the jnlpname parameter to the Launch program, or (3) the :tasklabel parameter to the ReportRequest program, related to the name of a report."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el interfaz web de IBM Metrica Service Assurance Framework que permitiría que usuarios remotos autenticados inyectar instrucciones Web o HTML a traves de (1) el parámetro elementid en la acción generatedreportresults del programa ReportTree, (2) el parámetro jnlpname en el programa Launch  o (3) el parámetro :tasklabel en el programa ReportRequest, relacionado con el nombre de un reporte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:metrica_service_assurance_framework:*:*:*:*:*:*:*:*","matchCriteriaId":"BC55B8C6-5BA4-4C30-83A4-DBFB78694783"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065520.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32683","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4578","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498168/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32233","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46495","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498168/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5044","sourceIdentifier":"cve@mitre.org","published":"2008-11-12T23:30:02.853","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring."},{"lang":"es","value":"Condición de carrera en Microsoft Windows Server 2003 y Vista; permite a usuarios loscales provocar una denegación de servicio (caída o cuelgue) mediante una aplicación multi-hilo que realice muchas llamadas a UnhookWindowsHookEx a la vez que se esté realizando otra actividad del escritorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://killprog.com/whk.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4576","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498165/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32206","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46506","source":"cve@mitre.org"},{"url":"http://killprog.com/whk.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498165/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5045","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T01:00:02.160","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of service (crash) via a 200 server response that is exactly 1024 characters long."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Network-Client FTP Now v2.6, y posiblemente otras versiones, permiten a los servidores FTP remotos provocar una denegación de servicio (caída) a través de una respuesta de servidor del tipo 200 que tiene un tamaño de 1024 caracteres."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network-client.com:ftp_now:2.6:*:*:*:*:*:*:*","matchCriteriaId":"A938976C-6EAD-4AD6-A6EA-33D1748D96BD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4583","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32080","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46319","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6926","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5046","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T02:30:00.777","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturers_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Mole Group Pizza Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"manufacturers_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole_group:pizza_script:*:*:*:*:*:*:*:*","matchCriteriaId":"6A492E4A-D98C-4DB7-812A-6549B7436CD5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4589","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32165","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46416","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5047","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T02:30:00.793","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en Mole Group Rental Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole_group:rental_script:*:*:*:*:*:*:*:*","matchCriteriaId":"06419F4C-3AA7-4092-A257-BF88BE90831C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4580","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32195","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46454","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7043","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5048","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T02:30:00.823","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long inputs to the 0x00222494 IOCTL."},{"lang":"es","value":"Desbordamiento de búfer en Atepmon.sys de ISecSoft Anti-Trojan Elite v4.2.1 y anteriores, y puede que v4.2.2; permite a los usuarios locales provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de inserciones largas al IOCTL 0x00222494."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isecsoft:anti-trojan_elite:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.2","matchCriteriaId":"9A87EC17-F727-4E3A-A2B7-D844FA98B7D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isecsoft:anti-trojan_elite:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8EA0B4FA-A85F-4A8D-9C11-AD0864EB1031"},{"vulnerable":true,"criteria":"cpe:2.3:a:isecsoft:anti-trojan_elite:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"19A3EE89-BD4F-4654-9252-C6B0073D35D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isecsoft:anti-trojan_elite:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"74C7A54A-0272-4FA5-80C6-2CC8BEF87F40"}]}]}],"references":[{"url":"http://secunia.com/advisories/32669","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ntinternals.org/ntiadv0802/ntiadv0802.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32202","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ntinternals.org/ntiadv0802/ntiadv0802.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5049","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T02:30:00.997","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3, allows local users to gain privileges via long inputs to the (1) 0x002224A4, (2) 0x002224C0, and (3) 0x002224CC IOCTL."},{"lang":"es","value":"Desbordamiento de búfer en AKEProtect.sys v3.3.3.0 en ISecSoft Anti-Keylogger Elite v3.3.0 y anteriores y, posiblemente otras versiones incluyendo la v3.3.3, permite a usuarios locales aumentar privilegios mediante entradas largas a los (1)0x002224A4, (2)0x002224C0, y (3)0x002224CC IOCTL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isecsoft:anti-keylogger_elite:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.0","matchCriteriaId":"1F181305-8BD5-4ACF-A09B-84C0E71975D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4582","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/ntiadv0802/ntiadv0802.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32202","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46465","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7054","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/ntiadv0802/ntiadv0802.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5050","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T02:30:01.027","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Error de superación de límite en la función get_unicode_name (libclamav/vba_extract.c) en Clam Anti-Virus (ClamAV) antes de v0.94.1 permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección mediante un archivo de proyecto VBA manipulado lo que dispara un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.94","matchCriteriaId":"B8A8B81E-0C61-4B3E-9BE6-BFE38A154EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.01:*:*:*:*:*:*:*","matchCriteriaId":"ACA56643-1912-4D32-84DF-8AF40BE4E90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.02:*:*:*:*:*:*:*","matchCriteriaId":"B853E106-F383-4C22-912D-77276A2DAFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.03:*:*:*:*:*:*:*","matchCriteriaId":"5265D3FC-EFF7-4661-AD21-01662C05B6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.04:*:*:*:*:*:*:*","matchCriteriaId":"F76D43F5-A621-4B5C-9FE6-0E650BCF4FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.05:*:*:*:*:*:*:*","matchCriteriaId":"A5C04564-5C90-4058-925C-6BFB3AEECD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.06:*:*:*:*:*:*:*","matchCriteriaId":"91599B52-AB8A-4423-8B99-2526E43B1C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.10:*:*:*:*:*:*:*","matchCriteriaId":"4EF8A6B6-D1EC-49F9-BE12-AEF22016BE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.11:*:*:*:*:*:*:*","matchCriteriaId":"B03FC481-8143-411F-AF74-86433188346D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.12:*:*:*:*:*:*:*","matchCriteriaId":"7A6E1E0C-7240-47A7-8C35-2C48D1C56F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.13:*:*:*:*:*:*:*","matchCriteriaId":"057EEF4D-3101-4575-83E3-34BA2823DE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.14:*:*:*:*:*:*:*","matchCriteriaId":"F86DA3C9-C6D5-4B04-9EAA-54350BE8CB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.14:pre:*:*:*:*:*:*","matchCriteriaId":"FB031F8A-2D70-46F4-BA98-64CACCF5A394"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9A0FA4-A4AE-4C90-98DA-8AF5ABB03CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"D0E9BC10-5F5B-499A-893C-1EEF6F1180B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"06A9B47A-8FC3-4BD2-A55F-9150307619B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"7068873F-E45D-4471-B55E-BF7B0E3AFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"695F0967-1529-42DB-8978-8B9192F7F615"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"073BBAA9-7C7B-4D07-8943-7459DD2BAAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"BB72ED94-7832-43CF-81CF-27F88CAC6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"802BFF6B-5D9F-49AE-B96A-86A85E0F1034"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"5F7B2943-BC22-4735-8AA5-AADBEA685FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C6257524-7FC5-40CA-9BDA-82B8565C5BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"35EBA938-DC66-40EA-8C66-38296AB57B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"659B4C39-0F0F-40C5-9B7E-0D00330611F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"508C140C-2F87-4270-85B0-00EA6678A344"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"3033A4A2-47E9-434F-BA0A-0F2476A67899"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"0C1EDFB4-B0C8-4832-BCA1-C35D28877581"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"4EF47B2A-4520-4872-987D-2EF88344ADB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc:*:*:*:*:*:*","matchCriteriaId":"5909491A-3D43-4648-B0F9-983BF2BE13B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc2:*:*:*:*:*:*","matchCriteriaId":"3DB0BD14-60D1-4482-A91E-AFA501DE1F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc3:*:*:*:*:*:*","matchCriteriaId":"FFFDE6BB-38A1-4074-A3E1-E59BB5E7ED74"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"79FC2D39-6F8E-4267-8D4B-0C59D28A0E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*","matchCriteriaId":"12A4541A-2560-482A-BAEA-275579B499B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9006F64F-D72B-49C4-9F51-8AD9273957B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5698AB2-94DE-480D-9E55-C05871562B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*","matchCriteriaId":"A44C0C8F-750B-4237-9E2F-1BEF67F2BCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"FC31E071-6BB8-45FE-AA09-E7E459B549D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:rc1:*:*:*:*:*:*","matchCriteriaId":"89533C50-275D-440D-88B4-363B3DED39E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C4CBE9C9-A1DE-4C68-B84D-C735A9A700E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"53D884A1-305C-416A-9851-3A7D875FDC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"E58A6CBC-ED1C-430D-8F43-88694971A850"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"E330A535-A376-4BFF-BB1B-31E83370FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:rc1:*:*:*:*:*:*","matchCriteriaId":"E787E42E-3339-47FD-904E-5E3C73991CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:rc2:*:*:*:*:*:*","matchCriteriaId":"F21E03C7-0293-402C-ACAE-41E7F11B7AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3E389E1C-46A6-4B5C-9091-8AAE5FFDC4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F1ADBDEE-1421-42E5-8DE2-404087613B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"EDF94B1E-E8D4-4952-9081-1254F335445D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"8657268E-4C78-4565-9966-7329095A7905"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"8D20F0D5-2291-4F24-94DB-180CDF926B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:rc1:*:*:*:*:*:*","matchCriteriaId":"B8BD1ADF-C784-4E43-A6A5-09D416E96AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"A0E2884A-615F-4063-8FB7-EC157C3EC07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BC41B7-272F-44BB-BD48-6C9231402526"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*","matchCriteriaId":"0138546B-3704-45FB-8115-05C12F9935D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"5F56722F-F61A-404B-B0B2-1C92C22D0436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"D00EBC44-B4AB-443F-A063-8C8CB64F5F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"FFFA6F1E-9F25-400C-B626-3B9EDA396913"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"2DB68680-FA6D-4235-90DA-E3DF0E5BB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p0:*:*:*:*:*:*","matchCriteriaId":"B44285AE-655B-4959-A7DC-4FADFF65F7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:p1:*:*:*:*:*:*","matchCriteriaId":"E702EF3E-D8B8-4D98-AFB0-ADB1223BF43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:p0:*:*:*:*:*:*","matchCriteriaId":"1BDC65CA-CE5D-4B69-B71B-CEE18DC85945"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:p0:*:*:*:*:*:*","matchCriteriaId":"E72D92F1-6316-4CCF-89A8-03FBAD10E6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"BC24A055-278C-4A78-8C68-AC7618EF3EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p0:*:*:*:*:*:*","matchCriteriaId":"04440EB7-E69B-4994-B058-9B476E061495"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:p1:*:*:*:*:*:*","matchCriteriaId":"01E81F38-9805-4FD8-8867-48C06762349B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B116E9A-0646-4AD5-A531-C35124AB02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3F3C25BA-72EF-4588-A90A-B323A3407FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"01FDAEBC-0B2E-4F60-8B59-13A93B1AF206"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*","matchCriteriaId":"E021DD71-1845-4899-BB87-8445147AD93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"8EFAC7BA-2A39-46A8-BF91-5537532F45D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"733CB165-98CD-4F8E-8A6D-07CF522634BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:p0:*:*:*:*:*:*","matchCriteriaId":"EE5B77A2-99D7-4553-B29F-B9EE15B96218"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91rc1:*:*:*:*:*:*:*","matchCriteriaId":"C721E8E3-FB32-41A1-B572-7DB06D9ECB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91rc2:*:*:*:*:*:*:*","matchCriteriaId":"4DCE173B-6229-42C9-8481-66F5727E464A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:p0:*:*:*:*:*:*","matchCriteriaId":"D8364198-B569-43FB-A946-A46969BCF2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"40F14DB9-8437-4CEB-9D63-098FD9E604E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"A4C92175-5E97-4197-8495-25900134B652"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93.2:*:*:*:*:*:*:*","matchCriteriaId":"4C78BC60-3E5F-4356-B27A-3A38646890E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93.3:*:*:*:*:*:*:*","matchCriteriaId":"5CF50FEF-9840-4B6C-BC60-02956F9E3099"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065530.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-21.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4579","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=637952&group_id=86638","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1680","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498169/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32207","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021159","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-672-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3085","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46462","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065530.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=637952&group_id=86638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-672-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5051","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T02:30:01.043","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PostID parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JooBlog (com_jb2) v0.1.1 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"PostID\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jooblog:jooblog:1.1:*:*:*:*:*:*:*","matchCriteriaId":"21AF191E-25E3-4944-9707-7767E8E508B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4581","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498234/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32236","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3094","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7078","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498234/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5052","sourceIdentifier":"secalert@redhat.com","published":"2008-11-13T11:30:01.470","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js."},{"lang":"es","value":"La función AppendAttributeValue en el motor de JavaScript en Mozilla Firefox v2.x anterior a v2.0.0.18, Thunderbird v2.x anterior a v2.0.0.18, y SeaMonkey v1.x anterior a v1.1.13 , permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores desconocidos que lanzan una corrupción de memoria, como se ha demostrado con e4x/extensions/regress-410192.js."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"151CBE7B-E10C-423C-9EE8-5A564FD7A168"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.1.13","matchCriteriaId":"98BCE84E-AD3E-470D-B542-B560B959AACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.18","matchCriteriaId":"B3FF4559-33AE-4F51-A99D-810AD31545C5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021183","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454113","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-319A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5053","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en admin.rssreader.php en el componente Simple RSS Reader (com_rssreader) 1.0 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro mosConfig_live_site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_rssreader:1.0:*:*:*:*:*:*:*","matchCriteriaId":"807072B3-9456-42F6-88BE-43BD04BD37A0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"}]}]}],"references":[{"url":"http://osvdb.org/49859","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4584","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/7096","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32265","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3119","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46559","source":"cve@mitre.org"},{"url":"http://osvdb.org/49859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/7096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5054","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters to customer_login.php and the (3) user_name and (4) user_pass parameters to admin/index.php. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Develop It Easy Membership System v1.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) email y (2) password a customer_login.php y (3) user_name y (4) user_pass a admin/index.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:develop_it_easy:membership_system:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3E9436BE-0C82-4B2F-B8B3-F5AA1A4B2EB2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32594","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32147","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46396","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5055","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en department_offline_context.php en ActiveCampaign TrioLive antes de v1.58.7 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"department_id\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:*:*:*:*:*:*:*:*","versionEndIncluding":"1.58.6","matchCriteriaId":"D69DC4E2-1B9C-41FA-95C1-2A727A047B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3830E887-4808-40C8-9F37-2F8D3F5F18DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.03:*:*:*:*:*:*:*","matchCriteriaId":"679EEBE1-D8DF-4F0E-9E1A-01658F6FC04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.04:*:*:*:*:*:*:*","matchCriteriaId":"F3C9544F-14FF-4A36-B6FF-70CB892ABE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.05:*:*:*:*:*:*:*","matchCriteriaId":"6AD1AEBD-FA89-4462-8C43-3B138C31FD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.06:*:*:*:*:*:*:*","matchCriteriaId":"12D1F27A-B046-4DD3-86DF-4EF5793B576E"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.07:*:*:*:*:*:*:*","matchCriteriaId":"FDAD0C1A-BF51-4571-936F-2C469A2D3862"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.08:*:*:*:*:*:*:*","matchCriteriaId":"588A0D87-CFF9-49E3-99E9-CF4B5A7F38E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.09:*:*:*:*:*:*:*","matchCriteriaId":"839EC8F2-550A-42AC-AA9D-4403AA7BA9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.10:*:*:*:*:*:*:*","matchCriteriaId":"2AEC77F0-84CB-4EE8-A449-E826B0111D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.11:*:*:*:*:*:*:*","matchCriteriaId":"2EA0A931-F954-41C0-AB84-5C1238B57AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.12:*:*:*:*:*:*:*","matchCriteriaId":"57CA5B22-E54D-4831-A8A0-29C84FCDB10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.13:*:*:*:*:*:*:*","matchCriteriaId":"B4730442-6F85-4A0B-8885-D2FAA6ABDFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.14:*:*:*:*:*:*:*","matchCriteriaId":"4B31C41B-BBA6-4453-966B-24882F6435CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.15:*:*:*:*:*:*:*","matchCriteriaId":"09440542-C469-41C7-9CEE-C3B2C6785823"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE767E5D-83ED-4F0C-A769-95C94D29C583"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.17:*:*:*:*:*:*:*","matchCriteriaId":"052B1287-6A0B-4853-82EE-FB87715C6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.18:*:*:*:*:*:*:*","matchCriteriaId":"5D1F25CD-A81F-457E-81F3-60A11CD90B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.19:*:*:*:*:*:*:*","matchCriteriaId":"E5B1E77F-26F5-4127-8C63-A823441B9851"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.20:*:*:*:*:*:*:*","matchCriteriaId":"6898F327-83EE-4257-91C2-8A3158FCAA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.21:*:*:*:*:*:*:*","matchCriteriaId":"F983135A-CE50-4BC4-BCC1-F7BFC9E70575"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.22:*:*:*:*:*:*:*","matchCriteriaId":"4CF162F3-A62B-432B-90A1-840992672C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.23:*:*:*:*:*:*:*","matchCriteriaId":"E4740E6F-4354-4D44-9559-2ECE897C4EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.24:*:*:*:*:*:*:*","matchCriteriaId":"8DF162B4-19D7-41A1-A6F1-40C1AF6A71D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.25:*:*:*:*:*:*:*","matchCriteriaId":"973FF91F-1B9D-4432-84FF-7CD79A6CAADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.26:*:*:*:*:*:*:*","matchCriteriaId":"72A482E9-2642-44DF-8D96-1A2DD74E9E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.27:*:*:*:*:*:*:*","matchCriteriaId":"F88FDA0C-DC07-4BCB-8510-695C805A3A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.28:*:*:*:*:*:*:*","matchCriteriaId":"2C27969E-38F2-44DF-AF93-015F00DCF2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.29:*:*:*:*:*:*:*","matchCriteriaId":"8C3B0F6A-2C47-476A-81DA-9D3524F18E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.30:*:*:*:*:*:*:*","matchCriteriaId":"CCDA4D43-85EB-4990-B7FD-D95FC713A74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.31:*:*:*:*:*:*:*","matchCriteriaId":"F01FC08E-3137-4A31-AFA6-6D54858549D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.32:*:*:*:*:*:*:*","matchCriteriaId":"322D9109-2EF5-45BB-B06E-9262CC742849"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.33:*:*:*:*:*:*:*","matchCriteriaId":"6D39BEEE-B1B6-4BC4-9E4A-A6BF7B4CB409"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.34:*:*:*:*:*:*:*","matchCriteriaId":"8942394E-8C42-468C-95FF-1503A57832BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.35:*:*:*:*:*:*:*","matchCriteriaId":"A342A09B-8E63-475E-B216-18C1A517DDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.36:*:*:*:*:*:*:*","matchCriteriaId":"A5223849-FA05-400B-B40A-72135BAE1ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.37:*:*:*:*:*:*:*","matchCriteriaId":"64198494-83B7-4340-B9F2-BB25F526F41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.39:*:*:*:*:*:*:*","matchCriteriaId":"FB2CB225-E34E-4659-A74E-E292FA0ECC96"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.40:*:*:*:*:*:*:*","matchCriteriaId":"8A83FB29-AABF-4636-9BB9-8754CBDEC8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.41:*:*:*:*:*:*:*","matchCriteriaId":"711CE7EF-552F-4240-B31E-9D512C632551"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.42:*:*:*:*:*:*:*","matchCriteriaId":"A533F569-E7CF-45A5-BB37-9FAFECB2A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.1:*:*:*:*:*:*:*","matchCriteriaId":"C3B36E78-5A0E-4718-BD11-322549C734BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.2:*:*:*:*:*:*:*","matchCriteriaId":"3DA1328E-6069-4073-AD99-8C4A48F50316"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.3:*:*:*:*:*:*:*","matchCriteriaId":"69B9D6F1-76AC-4CA4-88C2-94360DD772DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.4:*:*:*:*:*:*:*","matchCriteriaId":"672F4580-5355-4F71-B198-A0C8FB7724AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.5:*:*:*:*:*:*:*","matchCriteriaId":"B306C4AA-A374-4705-866B-E752F887D31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.6:*:*:*:*:*:*:*","matchCriteriaId":"1F4F8BA4-A768-4A89-A185-868CF8012C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.55.0:*:*:*:*:*:*:*","matchCriteriaId":"BD887085-3AF8-4B62-8E0A-CF11067B072D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.55.1:*:*:*:*:*:*:*","matchCriteriaId":"DC1DEFC2-C622-418F-91AE-67D27E637093"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.55.2:*:*:*:*:*:*:*","matchCriteriaId":"9C9B54CE-20B1-4592-A4D9-7FACE40ACD40"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.1:*:*:*:*:*:*:*","matchCriteriaId":"B40DF908-3FB3-4742-B4D8-3E4440D8C2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.2:*:*:*:*:*:*:*","matchCriteriaId":"97E28490-1748-4A01-9C0C-AF06EC89D54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.3:*:*:*:*:*:*:*","matchCriteriaId":"E0EBF9E6-216D-4818-9FC4-7A50781A56AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.4:*:*:*:*:*:*:*","matchCriteriaId":"4E30CDDD-C2B5-48D2-A702-1A428F25CED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.5:*:*:*:*:*:*:*","matchCriteriaId":"21FDEDA0-AE19-4C8F-A02E-BE8B327513E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.57:*:*:*:*:*:*:*","matchCriteriaId":"4E302031-D94E-4A77-B99A-C9C9E6DE1DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.0:*:*:*:*:*:*:*","matchCriteriaId":"7F607476-1619-42D8-9A22-80D2053577F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.1:*:*:*:*:*:*:*","matchCriteriaId":"89E55568-DDE1-489D-8C68-17AF2FF68A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.2:*:*:*:*:*:*:*","matchCriteriaId":"24C70825-1923-47A8-9443-3ED19FC28F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.3:*:*:*:*:*:*:*","matchCriteriaId":"0205A854-E75D-4834-B2A9-5738E45F5360"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.4:*:*:*:*:*:*:*","matchCriteriaId":"C483794B-5A46-4FFD-A0D5-CEE1347C4313"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.5:*:*:*:*:*:*:*","matchCriteriaId":"25331DA7-1E75-4F2E-8077-516C52F2D7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:unknown:beta2:*:*:*:*:*:*","matchCriteriaId":"EDA29A14-EF14-44D2-A9B4-2E4A72CCB4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:unknown:beta3:*:*:*:*:*:*","matchCriteriaId":"8FFC5142-FEFA-4AAF-AA8C-E392050C1C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:unknown:beta5:*:*:*:*:*:*","matchCriteriaId":"01771D66-5668-46BC-A602-C38279CAC4A8"}]}]}],"references":[{"url":"http://activecampaign.com/support/forum/showthread.php?t=4554","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://holisticinfosec.org/content/view/93/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/49825","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32703","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32268","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3125","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46557","source":"cve@mitre.org"},{"url":"http://activecampaign.com/support/forum/showthread.php?t=4554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://holisticinfosec.org/content/view/93/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5056","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en department_offline_context.php en ActiveCampaign TrioLive antes de 1.58.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro department_id parameter a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:*:*:*:*:*:*:*:*","versionEndIncluding":"1.58.6","matchCriteriaId":"D69DC4E2-1B9C-41FA-95C1-2A727A047B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3830E887-4808-40C8-9F37-2F8D3F5F18DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.03:*:*:*:*:*:*:*","matchCriteriaId":"679EEBE1-D8DF-4F0E-9E1A-01658F6FC04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.04:*:*:*:*:*:*:*","matchCriteriaId":"F3C9544F-14FF-4A36-B6FF-70CB892ABE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.05:*:*:*:*:*:*:*","matchCriteriaId":"6AD1AEBD-FA89-4462-8C43-3B138C31FD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.06:*:*:*:*:*:*:*","matchCriteriaId":"12D1F27A-B046-4DD3-86DF-4EF5793B576E"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.07:*:*:*:*:*:*:*","matchCriteriaId":"FDAD0C1A-BF51-4571-936F-2C469A2D3862"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.08:*:*:*:*:*:*:*","matchCriteriaId":"588A0D87-CFF9-49E3-99E9-CF4B5A7F38E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.09:*:*:*:*:*:*:*","matchCriteriaId":"839EC8F2-550A-42AC-AA9D-4403AA7BA9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.10:*:*:*:*:*:*:*","matchCriteriaId":"2AEC77F0-84CB-4EE8-A449-E826B0111D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.11:*:*:*:*:*:*:*","matchCriteriaId":"2EA0A931-F954-41C0-AB84-5C1238B57AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.12:*:*:*:*:*:*:*","matchCriteriaId":"57CA5B22-E54D-4831-A8A0-29C84FCDB10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.13:*:*:*:*:*:*:*","matchCriteriaId":"B4730442-6F85-4A0B-8885-D2FAA6ABDFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.14:*:*:*:*:*:*:*","matchCriteriaId":"4B31C41B-BBA6-4453-966B-24882F6435CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.15:*:*:*:*:*:*:*","matchCriteriaId":"09440542-C469-41C7-9CEE-C3B2C6785823"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.16:*:*:*:*:*:*:*","matchCriteriaId":"CE767E5D-83ED-4F0C-A769-95C94D29C583"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.17:*:*:*:*:*:*:*","matchCriteriaId":"052B1287-6A0B-4853-82EE-FB87715C6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.18:*:*:*:*:*:*:*","matchCriteriaId":"5D1F25CD-A81F-457E-81F3-60A11CD90B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.19:*:*:*:*:*:*:*","matchCriteriaId":"E5B1E77F-26F5-4127-8C63-A823441B9851"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.20:*:*:*:*:*:*:*","matchCriteriaId":"6898F327-83EE-4257-91C2-8A3158FCAA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.21:*:*:*:*:*:*:*","matchCriteriaId":"F983135A-CE50-4BC4-BCC1-F7BFC9E70575"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.22:*:*:*:*:*:*:*","matchCriteriaId":"4CF162F3-A62B-432B-90A1-840992672C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.23:*:*:*:*:*:*:*","matchCriteriaId":"E4740E6F-4354-4D44-9559-2ECE897C4EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.24:*:*:*:*:*:*:*","matchCriteriaId":"8DF162B4-19D7-41A1-A6F1-40C1AF6A71D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.25:*:*:*:*:*:*:*","matchCriteriaId":"973FF91F-1B9D-4432-84FF-7CD79A6CAADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.26:*:*:*:*:*:*:*","matchCriteriaId":"72A482E9-2642-44DF-8D96-1A2DD74E9E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.27:*:*:*:*:*:*:*","matchCriteriaId":"F88FDA0C-DC07-4BCB-8510-695C805A3A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.28:*:*:*:*:*:*:*","matchCriteriaId":"2C27969E-38F2-44DF-AF93-015F00DCF2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.29:*:*:*:*:*:*:*","matchCriteriaId":"8C3B0F6A-2C47-476A-81DA-9D3524F18E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.30:*:*:*:*:*:*:*","matchCriteriaId":"CCDA4D43-85EB-4990-B7FD-D95FC713A74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.31:*:*:*:*:*:*:*","matchCriteriaId":"F01FC08E-3137-4A31-AFA6-6D54858549D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.32:*:*:*:*:*:*:*","matchCriteriaId":"322D9109-2EF5-45BB-B06E-9262CC742849"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.33:*:*:*:*:*:*:*","matchCriteriaId":"6D39BEEE-B1B6-4BC4-9E4A-A6BF7B4CB409"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.34:*:*:*:*:*:*:*","matchCriteriaId":"8942394E-8C42-468C-95FF-1503A57832BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.35:*:*:*:*:*:*:*","matchCriteriaId":"A342A09B-8E63-475E-B216-18C1A517DDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.36:*:*:*:*:*:*:*","matchCriteriaId":"A5223849-FA05-400B-B40A-72135BAE1ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.37:*:*:*:*:*:*:*","matchCriteriaId":"64198494-83B7-4340-B9F2-BB25F526F41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.39:*:*:*:*:*:*:*","matchCriteriaId":"FB2CB225-E34E-4659-A74E-E292FA0ECC96"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.40:*:*:*:*:*:*:*","matchCriteriaId":"8A83FB29-AABF-4636-9BB9-8754CBDEC8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.41:*:*:*:*:*:*:*","matchCriteriaId":"711CE7EF-552F-4240-B31E-9D512C632551"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.42:*:*:*:*:*:*:*","matchCriteriaId":"A533F569-E7CF-45A5-BB37-9FAFECB2A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.1:*:*:*:*:*:*:*","matchCriteriaId":"C3B36E78-5A0E-4718-BD11-322549C734BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.2:*:*:*:*:*:*:*","matchCriteriaId":"3DA1328E-6069-4073-AD99-8C4A48F50316"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.3:*:*:*:*:*:*:*","matchCriteriaId":"69B9D6F1-76AC-4CA4-88C2-94360DD772DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.4:*:*:*:*:*:*:*","matchCriteriaId":"672F4580-5355-4F71-B198-A0C8FB7724AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.5:*:*:*:*:*:*:*","matchCriteriaId":"B306C4AA-A374-4705-866B-E752F887D31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.50.6:*:*:*:*:*:*:*","matchCriteriaId":"1F4F8BA4-A768-4A89-A185-868CF8012C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.55.0:*:*:*:*:*:*:*","matchCriteriaId":"BD887085-3AF8-4B62-8E0A-CF11067B072D"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.55.1:*:*:*:*:*:*:*","matchCriteriaId":"DC1DEFC2-C622-418F-91AE-67D27E637093"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.55.2:*:*:*:*:*:*:*","matchCriteriaId":"9C9B54CE-20B1-4592-A4D9-7FACE40ACD40"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.1:*:*:*:*:*:*:*","matchCriteriaId":"B40DF908-3FB3-4742-B4D8-3E4440D8C2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.2:*:*:*:*:*:*:*","matchCriteriaId":"97E28490-1748-4A01-9C0C-AF06EC89D54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.3:*:*:*:*:*:*:*","matchCriteriaId":"E0EBF9E6-216D-4818-9FC4-7A50781A56AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.4:*:*:*:*:*:*:*","matchCriteriaId":"4E30CDDD-C2B5-48D2-A702-1A428F25CED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.56.5:*:*:*:*:*:*:*","matchCriteriaId":"21FDEDA0-AE19-4C8F-A02E-BE8B327513E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.57:*:*:*:*:*:*:*","matchCriteriaId":"4E302031-D94E-4A77-B99A-C9C9E6DE1DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.0:*:*:*:*:*:*:*","matchCriteriaId":"7F607476-1619-42D8-9A22-80D2053577F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.1:*:*:*:*:*:*:*","matchCriteriaId":"89E55568-DDE1-489D-8C68-17AF2FF68A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.2:*:*:*:*:*:*:*","matchCriteriaId":"24C70825-1923-47A8-9443-3ED19FC28F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.3:*:*:*:*:*:*:*","matchCriteriaId":"0205A854-E75D-4834-B2A9-5738E45F5360"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.4:*:*:*:*:*:*:*","matchCriteriaId":"C483794B-5A46-4FFD-A0D5-CEE1347C4313"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:1.58.5:*:*:*:*:*:*:*","matchCriteriaId":"25331DA7-1E75-4F2E-8077-516C52F2D7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:unknown:beta2:*:*:*:*:*:*","matchCriteriaId":"EDA29A14-EF14-44D2-A9B4-2E4A72CCB4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:unknown:beta3:*:*:*:*:*:*","matchCriteriaId":"8FFC5142-FEFA-4AAF-AA8C-E392050C1C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:activecampaign:triolive:unknown:beta5:*:*:*:*:*:*","matchCriteriaId":"01771D66-5668-46BC-A602-C38279CAC4A8"}]}]}],"references":[{"url":"http://activecampaign.com/support/forum/showthread.php?t=4554","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://holisticinfosec.org/content/view/93/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/49858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46560","source":"cve@mitre.org"},{"url":"http://activecampaign.com/support/forum/showthread.php?t=4554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://holisticinfosec.org/content/view/93/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5057","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en film.asp en Yigit Aybuga Dizi Portali permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro film. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:dizi_portali:*:*:*:*:*:*:*:*","matchCriteriaId":"45CFEFEE-F49A-4206-B714-12EB7197D4BB"}]}]}],"references":[{"url":"http://osvdb.org/49803","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32239","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32239/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46522","source":"cve@mitre.org"},{"url":"http://osvdb.org/49803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32239/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5058","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.643","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en siteadmin/loginsucess.php en el CMS Pre Simple permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro user desde siteadmin/adminlogin.php. NOTA: Algunos de los detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:pre_simple_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"2EA1D7BC-9398-4139-BA2E-2C7FD0035613"}]}]}],"references":[{"url":"http://osvdb.org/49662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32541","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32132","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46384","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7004","source":"cve@mitre.org"},{"url":"http://osvdb.org/49662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5059","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"ModernBill has changed their name to Parallels Plesk Billing.  http://www.modernbill.com/","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en ModernBill 4.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante un evento Javascript en el parámetro new_language parameter en una acción login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"5BFC1B28-B614-4FFC-B3D5-BFA2FCBE3DD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.0","matchCriteriaId":"BDBDC781-819F-4F10-B5E4-2FDDBF7F20E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3E15EDAB-0E09-4CA8-886F-7A25F0DF64D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:2.02s:*:*:*:*:*:*:*","matchCriteriaId":"9187EE08-D182-401A-89CE-A6944719B6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:3.0:beta:*:*:*:*:*:*","matchCriteriaId":"FF0C51B0-DAA8-406A-BCD1-D5A0CC3C4145"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"811F7326-1388-4213-A255-D00F10A5D685"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9C9AD87E-50C2-48F6-874E-58ED280801FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.0.1:rc7:*:*:*:*:*:*","matchCriteriaId":"22458ABE-0700-4EDC-9CEA-857B4CF6892E"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.0.1:rc8:*:*:*:*:*:*","matchCriteriaId":"5109B7D6-3EF2-4D49-AEB5-F9DE73320746"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"26246803-AEE4-47AC-B595-68339DD3EA5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E01382A3-9906-42B0-AD7E-31AC42B69C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C8611171-DFFC-485E-BE3D-3A4D8AB75A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2F377319-E114-423B-854D-4C379B94C93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6E27141E-BD93-4A41-BC05-44CC9359DC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4765F769-099D-4A09-9B6A-E7191C6FEF9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"556B34A1-C714-4D98-9444-8EE65F7042B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4587","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46512","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5060","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.690","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) export_batch.inc.php, (2) run_auto_suspend.cron.php, and (3) send_email_cache.php in include/scripts/; (4) include/misc/mod_2checkout/2checkout_return.inc.php; and (5) include/html/nettools.popup.php, different vectors than CVE-2006-4034 and CVE-2005-1054."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivo remoto en ModernBill v4.4 y anteriores ermite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro DIR a (1) export_batch.inc.php, (2) run_auto_suspend.cron.php,  (3) send_email_cache.php en include/scripts/; (4) include/misc/mod_2checkout/2checkout_return.inc.php; y (5) include/html/nettools.popup.php, vectores diferentes que en CVE-2006-4034 y CVE-2005-1054."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"5BFC1B28-B614-4FFC-B3D5-BFA2FCBE3DD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4.0","matchCriteriaId":"BDBDC781-819F-4F10-B5E4-2FDDBF7F20E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3E15EDAB-0E09-4CA8-886F-7A25F0DF64D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:2.02s:*:*:*:*:*:*:*","matchCriteriaId":"9187EE08-D182-401A-89CE-A6944719B6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:3.0:beta:*:*:*:*:*:*","matchCriteriaId":"FF0C51B0-DAA8-406A-BCD1-D5A0CC3C4145"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"811F7326-1388-4213-A255-D00F10A5D685"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9C9AD87E-50C2-48F6-874E-58ED280801FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.0.1:rc7:*:*:*:*:*:*","matchCriteriaId":"22458ABE-0700-4EDC-9CEA-857B4CF6892E"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.0.1:rc8:*:*:*:*:*:*","matchCriteriaId":"5109B7D6-3EF2-4D49-AEB5-F9DE73320746"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"26246803-AEE4-47AC-B595-68339DD3EA5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E01382A3-9906-42B0-AD7E-31AC42B69C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C8611171-DFFC-485E-BE3D-3A4D8AB75A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2F377319-E114-423B-854D-4C379B94C93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6E27141E-BD93-4A41-BC05-44CC9359DC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4765F769-099D-4A09-9B6A-E7191C6FEF9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:modernbill:modernbill:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"556B34A1-C714-4D98-9444-8EE65F7042B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4587","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46513","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5061","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.720","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en php/cal_default.php in Mini Web Calendar (mwcal) 1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smolinari:mini_web_calendar:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E9E9C689-B580-4695-8EAD-3D1DEEC96D2C"}]}]}],"references":[{"url":"http://osvdb.org/49679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4590","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32196","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3077","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46456","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7049","source":"cve@mitre.org"},{"url":"http://osvdb.org/49679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5062","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.737","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en php/cal_pdf.php en Mini Web Calendar (mwcal) v1.2 permite a atacantes remotos leer archivos locales de su elección a través de secuencias de salto de directorio en el parámetro \"thefile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smolinari:mini_web_calendar:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E9E9C689-B580-4695-8EAD-3D1DEEC96D2C"}]}]}],"references":[{"url":"http://osvdb.org/49680","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4590","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32196","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3077","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46455","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7049","source":"cve@mitre.org"},{"url":"http://osvdb.org/49680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5063","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T11:30:01.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en Admin/ADM_Pagina.php en OTManager v2.4 permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro \"Tipo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otmanager:otmanager:2.4:*:*:*:*:*:*:*","matchCriteriaId":"3AC1A0EB-F8AA-4A44-9E15-5EC642485E37"}]}]}],"references":[{"url":"http://osvdb.org/49850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4586","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/7077","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32235","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3093","source":"cve@mitre.org"},{"url":"http://osvdb.org/49850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/7077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5064","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T17:24:03.503","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en liga.php en H&H WebSoccer v2.80 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:h\\&h:websoccer:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E3298C7C-2278-4368-A081-07A2A0BF7777"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/hhwebsoccer-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31963","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46164","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/hhwebsoccer-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5065","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T17:24:03.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to admin."},{"lang":"es","value":"TlGuestBook v1.2 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo eviando la cookie tlGuestBook_login a admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:tlguesbook:1.2:*:*:*:*:*:*:*","matchCriteriaId":"46BA112E-184D-459B-BCB8-955BC9EC7955"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4585","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31958","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6860","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5066","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T17:24:03.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en php en upload/admin/frontpage_right.php en Agares Media ThemeSiteScript v1.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"loadadminpage\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agaresmedia:themesitescript:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B7B7F089-477D-495E-B219-AD45FFA29957"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4592","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31959","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2959","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6859","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5067","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T17:24:03.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Kmita Catalogue 2.x permite a atacantes remotos inyectar web script o HTML a través del parámetro \"q\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kkeim:kmita_catalogue:2.0:*:*:*:*:*:*:*","matchCriteriaId":"50F432EA-96F3-4258-9A79-50EBD82B75DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32457","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49441","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31968","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5068","sourceIdentifier":"cve@mitre.org","published":"2008-11-13T17:24:03.613","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter to index.php and the (2) searchtext parameter to search.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Kmita Gallery permite a atacantes remotos inyectar web script o HTML a través de (1) el parámetro \"begin\" de index.php y (2) el parámetro \"searchtext\" de search.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kkeim:kmita_gallery:*:*:*:*:*:*:*:*","matchCriteriaId":"EEBAF6EE-061B-4B9F-B6FD-633CA03FFDE8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49444","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49445","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5069","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:07:59.823","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en go.php en Panuwat PromoteWeb MySQL, cuando magic_quotes_gpc no está activo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deeserver:panuwat_promoteweb_mysql:*:*:*:*:*:*:*:*","matchCriteriaId":"0216C19E-56C1-49A5-9228-EB80AE5B86CD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31425","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45436","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5070","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:07:59.887","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information (login required) - http://prochatrooms.com/clients.php?cid=1","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to (1) profiles/index.php and (2) profiles/admin.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Pro Chat Rooms v3.0.3, cuando magic_quotes_gpc no está activo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gud\" de (1) index.php y (2) admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pro_chat_rooms:pro_chat_rooms:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B0990F59-88B1-4D15-BA71-D5FE1CDB1BA7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31988","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4593","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31463","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6612","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5071","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:07:59.903","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección \"Eval\" en itpm_estimate.php en Yoxel v1.23beta y versiones anteriores permite a usuarios remotos autenticados ejecutar comandos PHP de su elección a través del parámetor \"proj_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23beta","matchCriteriaId":"A647E3D4-B88A-4D99-B813-93BB560DD025"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.06beta:*:*:*:*:*:*:*","matchCriteriaId":"989E177E-98D6-45B9-9434-0C8DFAE34FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.07beta:*:*:*:*:*:*:*","matchCriteriaId":"FD7A2FCA-B9AE-4F78-A21E-3DAC06DA4DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.08beta:*:*:*:*:*:*:*","matchCriteriaId":"4A62DC39-FCC8-4DB6-8E66-81E98B3B8F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.09beta:*:*:*:*:*:*:*","matchCriteriaId":"A09AE305-69C3-4893-8189-9EEBA53FD198"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.10beta:*:*:*:*:*:*:*","matchCriteriaId":"EE19C5E7-2676-4422-9048-58F12F43EF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.11beta:*:*:*:*:*:*:*","matchCriteriaId":"3EDFA99B-847D-4F04-A8E0-28C5538EE35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.12beta:*:*:*:*:*:*:*","matchCriteriaId":"2EC573FA-91A4-440F-B146-0A8FA0165549"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.13beta:*:*:*:*:*:*:*","matchCriteriaId":"DD9AD51C-28EE-47E0-A2D2-225E3388294A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.14beta:*:*:*:*:*:*:*","matchCriteriaId":"8E71B78B-211E-40C7-AC8E-BFF0B36E512D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.15beta:*:*:*:*:*:*:*","matchCriteriaId":"8BC91E52-5013-43D4-BF42-CB2A914E8358"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.16beta:*:*:*:*:*:*:*","matchCriteriaId":"767EAEBB-D2E9-47B1-91BD-94E60DFF0CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.17beta:*:*:*:*:*:*:*","matchCriteriaId":"6CECE0CC-038D-4E62-8E1A-3C723042FBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.18beta:*:*:*:*:*:*:*","matchCriteriaId":"E3A01DDD-1D24-4447-A14D-53088AA16848"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.19beta:*:*:*:*:*:*:*","matchCriteriaId":"339C69F5-5B86-436D-9393-E11F100BE1FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.20:*:*:*:*:*:*:*","matchCriteriaId":"724ECAA0-1CD8-4628-9363-DBE4C7CD064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.20beta:*:*:*:*:*:*:*","matchCriteriaId":"DD8FCE22-A7C8-4018-BEFE-B1B934230B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.21:*:*:*:*:*:*:*","matchCriteriaId":"7A84BC95-72DD-47E1-A168-EEEAF25AA6D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.21beta:*:*:*:*:*:*:*","matchCriteriaId":"7591AB90-7E1C-4227-A10C-1589C19D5039"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.22:*:*:*:*:*:*:*","matchCriteriaId":"801E1543-F8DF-46FB-BDA3-C1FD7AD0B333"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoxel:yoxel:1.22beta:*:*:*:*:*:*:*","matchCriteriaId":"EFA3C80F-822F-434A-91E2-4618BB74F491"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45488","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6606","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5072","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:07:59.933","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV file."},{"lang":"es","value":"vsfilter.dll en K-Lite Mega Codec Pack v3.5.7.0 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un fichero FLV malfomado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:k-lite:mega_codec_pack:3.5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"73B58E65-844F-4B65-80BF-06F8D982DCFD"}]}]}],"references":[{"url":"http://packetstormsecurity.org/filedesc/klite-dos-tgz.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4588","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31400","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45446","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6565","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/filedesc/klite-dos-tgz.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5073","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:07:59.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en un control ActiveX en Novell ZENworks Desktop Management v6.5 permite a atacantes remotos ejecutar código de su elección a través de un argumento largo del método CanUninstall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:zenworks_desktop_management:6.5:*:*:*:*:*:*:*","matchCriteriaId":"711E92B0-7088-4C30-98F5-ECC83AE81237"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4595","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45462","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5074","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:07:59.997","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo Freshlinks v1.0 RC1 para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"linkid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:freshlinks_module:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FE4C5FA9-7884-49CC-A349-E9649B477DA9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3E18BD-EA3F-4136-A256-A6A74F7066DD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4594","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31469","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45504","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6620","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5075","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:08:00.027","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to (g) browser.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en E-Uploader Pro v1.0 (también conocido como Uploader PRO), cuando magic_quotes_gpc está no está activo, permiten a atacantes remotos ejecutar comandos SQL de su elección a tra´ves del parámetro (1) \"id\" de (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, y (f) zipit.php, y el parámetro (2) \"view\" de (g) browser.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsfrenzy:e-uploader_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3730FCB9-110B-4401-9D75-0E06025650E3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31445","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45487","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6596","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5076","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T18:09:25.073","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with \"crazy control strings.\""},{"lang":"es","value":"htop v0.7 escribe nombres de procesos a un terminal sin desinfectar caracteres no imprimibles, lo cual puede permitir a usuarios locales esconder procesos, modificar ficheros de su elección, o tener otro impacto desconocido a través de nombres de proceso con \"cadenas de control crazy\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htop:htop:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B1176958-0A88-4154-B7FC-FCE3C702D415"}]}]}],"references":[{"url":"http://bugs.debian.org/504144","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/02/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/14/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32081","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46321","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/504144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/02/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/14/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5078","sourceIdentifier":"secalert@redhat.com","published":"2008-12-19T17:30:02.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename."},{"lang":"es","value":"Múltiples desbordamientos de búfer en las funciones (1) recognize_eps_file (src/psgen.c) y (2) tilde_subst (src/util.c) en GNU enscript vesión 1.6.1, y posiblemente anteriores, podría permitir a atacantes remotos ejecutar código arbitrario a través de una secuencia de escape EPSF con un nombre de archivo largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:escript:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BDE84573-1749-46A7-8C86-5182CC63DEB1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33181","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1021.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021401","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=473958","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47680","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11807","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=473958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5079","sourceIdentifier":"secalert@redhat.com","published":"2008-12-09T00:30:00.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table."},{"lang":"es","value":"net/atm/svc.c en el subsistema ATM del kernel de Linux v2.6.27.8 y anteriores; permite a usuarios locales provocar una denegación de servicio (bucle infinito del kernel) creando dos llamadas a svc_listen al mismo socket y luego leyendo el fichero /proc/net/atm/*vc que está relacionado con la corrupción de la tabla vcc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27.8","matchCriteriaId":"8710E83C-540F-44C9-824B-2579E363FC71"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=linux-netdev&m=122841256115780&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32913","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33083","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33348","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33623","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33641","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33704","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33706","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33854","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34981","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/4694","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:032","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0225.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/498943/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499044/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32676","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021360","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2915","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11288","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/714-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-netdev&m=122841256115780&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498943/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499044/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5080","sourceIdentifier":"secalert@redhat.com","published":"2008-12-03T18:30:00.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3714."},{"lang":"es","value":"awstats.pl en AWStats 6.8 y versiones anteriores no borrar apropiadamente el carácter de comilla simple, el cual permite a los atacantes remotos realizas un ataque de secuencias de comandos en sitios cruzados (XSS) a través del parámetro query_string. NOTA: Este asunto existe por una incompleta solución para CVE-2008-3714."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8","matchCriteriaId":"BB95D838-4A64-4FEE-82BB-E3788A87215F"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A13B168A-5B44-48F9-891B-0BB28AD02721"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1ADC1071-123D-4C66-BFEE-D140ABCD273B"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.2:*:*:*:*:*:*:*","matchCriteriaId":"2E169347-2804-4DC0-9EC9-B3840C719EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.3:*:*:*:*:*:*:*","matchCriteriaId":"34318EAF-8E44-49AF-87C0-A2C0BB981D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.4:*:*:*:*:*:*:*","matchCriteriaId":"058FD0C7-1E3F-4EDF-B024-F9D572D78693"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.5:*:*:*:*:*:*:*","matchCriteriaId":"882C578E-14B6-4003-A9B2-0366F7EDCEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.6:*:*:*:*:*:*:*","matchCriteriaId":"E916066B-7CB0-4111-A450-6313724D4805"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CEE32264-0980-4122-AA46-0E40D1432103"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.8:*:*:*:*:*:*:*","matchCriteriaId":"353361B9-864D-41E1-B4C0-337EA5373B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:5.9:*:*:*:*:*:*:*","matchCriteriaId":"4119D0EC-66BB-4C55-80E1-6D458492E978"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1C5DFFC3-A628-4569-9AB7-3C60C3F5DDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4B1B44AB-45F0-4E0A-8529-610C6B8934BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.2:*:*:*:*:*:*:*","matchCriteriaId":"312C3DA6-D34A-4566-923E-F2ECD613EF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.3:*:*:*:*:*:*:*","matchCriteriaId":"24439BBC-DEDA-4309-B8B5-78289476052B"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.4:*:*:*:*:*:*:*","matchCriteriaId":"25550AA8-8C79-48EA-A904-896B5B00077B"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.5:*:*:*:*:*:*:*","matchCriteriaId":"E37231F4-DEC9-46A7-8686-9B3C710CA396"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.6:*:*:*:*:*:*:*","matchCriteriaId":"D01C869D-EB1E-4204-A445-FBE28608321C"},{"vulnerable":true,"criteria":"cpe:2.3:a:awstats:awstats:6.7:*:*:*:*:*:*:*","matchCriteriaId":"617FF6E9-7C2C-48B4-B590-7F0E33367311"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432#21","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33002","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-686-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474396","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47116","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495432#21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5081","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T02:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure."},{"lang":"es","value":"La función originates_from_local_legacy_unicast_socket (avahi-core/server.c)en avahi-daemon en Avahi anterior a v0.6.24 permite a atacantes remotos producir una denegación de servicio (caída) a través de un paquete mDNS manipulado con un puerto de origen de 0, que dispara un fallo de evaluación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.23","matchCriteriaId":"E1E36434-D6E7-409A-BB41-CA9F6A9E9B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*","matchCriteriaId":"EB4B0D9D-FEBD-4C27-8208-CCB5BA5975AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*","matchCriteriaId":"EA69351E-9DB3-4F0E-AE4D-C5448BD0D99B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*","matchCriteriaId":"236CE850-B281-428F-8E2D-E0CC649C79FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*","matchCriteriaId":"1C1BDC60-035E-4F42-8FE2-1B1E22DC64B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC11CFE6-B57C-484C-8F10-9F68FED7B467"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9CC276CA-DC35-4955-82C6-EC0059970195"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7D330EA3-8EB9-4498-B6AD-787FF14ACE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3AACF748-AF75-46B3-BCF7-5E51FE51AB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"2D210D68-75A5-4518-B012-23474DA04E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"FB8A5591-6D72-4E74-A187-936A900CB1F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B839D606-3383-4887-862A-3E72F134352F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"D78AC30C-D5F7-4142-B4F2-1132BF0D1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"5FBA6408-1181-44DA-9C75-734AD745780C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"7C0D4625-24B2-4BF7-B32B-7BCC12C8BD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"8266D64B-B067-413E-BDA7-4AB770D4F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"F99BF964-2FC8-45B5-AD69-4790179B8AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"9CA79F96-1C98-49BE-8197-D52B8B6DEF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"6FF6E882-B66D-4B84-AFE7-D96B1B43E65D"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"AC5A8266-1859-45EB-9F16-BF0A5DE1A651"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"DC2000C5-238B-43EF-B374-E7505CC61B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"9BAC2B1B-C800-410D-8484-569675FFD484"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*","matchCriteriaId":"BD6F264D-6E78-4E57-96F7-C8B86BDFBD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*","matchCriteriaId":"2A18985C-8EBB-43A0-BCFC-5CF08DF9D3A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*","matchCriteriaId":"26E4AECD-B872-46D5-AAA0-280CC32E2F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*","matchCriteriaId":"563F6941-3A7E-4C44-BAC8-C19BDED9BDF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*","matchCriteriaId":"12B07E9A-345B-4E14-9D0D-5CAB84761D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*","matchCriteriaId":"5A187641-2E8C-4B40-B861-E49294F3E39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*","matchCriteriaId":"C6FE243E-6E65-4726-832D-0585FE31A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*","matchCriteriaId":"735FEE37-3948-46DD-A56F-42078EF31345"}]}]}],"references":[{"url":"http://avahi.org/milestone/Avahi%200.6.24","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33153","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33279","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33475","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200901-11.xml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1690","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/14/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32825","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-696-1","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/7520","source":"secalert@redhat.com"},{"url":"http://avahi.org/milestone/Avahi%200.6.24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200901-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/14/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-696-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5086","sourceIdentifier":"secalert@redhat.com","published":"2008-12-19T17:30:03.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions."},{"lang":"es","value":"Múltiples métodos en libvirt 0.3.2 a 0.5.1 no comprueban si una conexión es de sólo lectura, lo que permite a usuarios locales eludir restricciones de acceso y realizar acciones administrativas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3E86FE3D-BC93-49DE-8D34-61C17072D190"},{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DB95BD9D-A6B5-47B9-B2B0-9C4CC67BA62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4DA90AC2-B415-42F5-86E5-9564F4133A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"29FBE340-26FF-4D72-99C3-423786A2095B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"01BFB306-AF97-460F-9D26-9CF53018280D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D5D9844D-5B89-4B47-9E38-BDF0C44D1BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E4BA9E6F-7F06-4341-928A-5CE6C5EAAA7A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/50919","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33198","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33217","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33292","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34397","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00938.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0382.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32905","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-694-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=476560","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8765","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/libvir-list/2008-December/msg00522.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00938.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0382.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-694-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=476560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/libvir-list/2008-December/msg00522.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5087","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:53.870","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión TYPO3 Another Backend Login (wrg_anotherbelogin) versiones anteriores a v0.0.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:another_backend_login:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.3","matchCriteriaId":"BE2B50F3-283B-4402-8C51-DBBF22406A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:another_backend_login:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8BA67920-8106-428B-B375-AE3901C418BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:another_backend_login:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6655E0AA-464F-4371-90EE-0FC381874F2A"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31266","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5088","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:53.903","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) question.php, a different vector than CVE-2008-1909."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHPKB Knowledge Base Software v1.5 Professional permiten a atacantes remotos ejecutar comandos SQL de su elección a tra´ves del parámetro \"ID\" de (1) email.php y (2) question.php, un vector diferente que CVE-2008-1909."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgebase-script:phpkb_knowledge_base_software:1.5:_nil_:pro:*:*:*:*:*","matchCriteriaId":"C1188486-2988-43A7-A35B-E8E2C87BE6A0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4599","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31279","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6510","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5089","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:53.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en el control ActiveX DDActiveReportsViewer2.ARViewer2 (arview2.ocx) en Data Dynamics ActiveReports v2.5.0.1314 permite a atacantes remotos sobrescribir ficheros de su elección a través de un llamada los métodos (1) Pages.Save, (2) PrintReport, o (3) Canvas.Save"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datadynamics:activereports:2.5.0.1314:-:pro:*:*:*:*:*","matchCriteriaId":"F249488D-9DE3-43EA-A924-D263960186DE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31894","source":"cve@mitre.org"},{"url":"http://vuln.sg/ddarviewer2501314-en.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31227","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2612","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vuln.sg/ddarviewer2501314-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5090","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:53.997","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch."},{"lang":"es","value":"Electron Inc. Advanced Electron Forum versiones anteriores a v1.0.7 permite a atacantes remotos ejecutar código PHP de su elección a través de código PHP embebido en BBcode en el parámetro \"email\", lo cual es procesado por la función preg_replace con el switch \"eval\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"346A0065-57B5-44C8-9A0D-B681B653935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"68188511-BA5A-454A-8959-A754AA7147BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"39DBB3C6-A59B-46E8-AE2E-B4F90B4327E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B729A246-6642-44BD-8842-B676E6F9D0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"938E89B8-C921-44B5-B97F-D756CC5607C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D35C1FAF-9F98-42A0-B457-E5949AEA8864"}]}]}],"references":[{"url":"http://secunia.com/advisories/31978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4598","source":"cve@mitre.org"},{"url":"http://www.anelectron.com/board/index.php?tid=3282","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00131-09202008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496552/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31268","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45270","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.anelectron.com/board/index.php?tid=3282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00131-09202008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496552/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5091","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.027","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an \"invalid extensibleMatch filter.\""},{"lang":"es","value":"Un desbordamiento de búfer en el Servicio LDAP en eDirectory de Novell versiones 8.7.3 anteriores a SP10a y versiones 8.8 anteriores a SP3, permite a los atacantes causar una denegación de servicio (bloqueo de aplicación) por medio de vectores que implica un \"invalid extensibleMatch filter\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:sp2:windows:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"61B5F31A-C109-4856-88B9-52FE3551B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp1:windows:*:*:*:*:*","matchCriteriaId":"5CD101DD-9655-4A83-8F79-59333D4DD672"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:*","matchCriteriaId":"15E2B599-2B96-4ED3-B2D9-E4D6909A1F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:*","matchCriteriaId":"9DAFE77C-4AB9-4865-B673-C32EAB3ABB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:*","matchCriteriaId":"5FC5947C-15F7-4BF0-9C0A-F2817F4BB7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:*","matchCriteriaId":"1694F7CA-0E7B-4DC6-9B74-FCCE8B81F048"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:*","matchCriteriaId":"042CF2E0-CE2C-4939-899A-F193127A28B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:*","matchCriteriaId":"2A7E430B-DD25-4BE7-8495-B4FD8EB60F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:*","matchCriteriaId":"142A95E7-009C-4A54-AA04-97C7120C228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*","matchCriteriaId":"D27AAA23-21E1-4C35-97FA-7F038E2C8923"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*","matchCriteriaId":"6658D417-B666-400A-89BD-C74A84E4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*","matchCriteriaId":"A5286A48-E77F-4D5F-8B8C-D701B9DC1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A18AD730-2782-4BC3-8B2E-D35D29EBC699"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*","matchCriteriaId":"36699D76-090F-4ED3-9C02-A09EB68F5CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"896C7671-E300-4E6D-86A3-D0DAF4168CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*","matchCriteriaId":"9775274E-21A5-466E-B792-54F53ECCD8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*","matchCriteriaId":"1CE0CDA6-DFF5-45F7-A641-180AED4F074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B490E624-9A8E-4AD2-9B6F-BFDA431CD77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*","matchCriteriaId":"4747583B-125F-423F-863F-5CBC4CB46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*","matchCriteriaId":"F2AD4208-DD3E-427E-ADF8-5C59C59EDC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*","matchCriteriaId":"BEE923F3-28AB-4C29-A920-F363F415CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"F4DB1610-FDB3-432C-8AD7-C667DCAA29D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*","matchCriteriaId":"30ABEC83-326A-4888-BFC7-3A40BC2E2CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*","matchCriteriaId":"762D694C-7942-4265-BF99-1DE9F3BC9128"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*","matchCriteriaId":"20851E26-511C-41B2-A3BF-4E4A083A73F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*","matchCriteriaId":"57A9A26E-0FB6-4766-9C7E-CB82551BC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*","matchCriteriaId":"7CD4DD41-AD88-4AB2-BAC2-2B59AECA16BE"}]}]}],"references":[{"url":"http://www.novell.com/documentation/edir873/sp10_readme/netware/readme.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3477912","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30947","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020788","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=373853","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43590","source":"cve@mitre.org"},{"url":"http://www.novell.com/documentation/edir873/sp10_readme/netware/readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3477912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=373853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5092","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.060","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la pila del protocolo HTTP en Novell eDirectory (HTTPSTK) versiones anteriores a v8.8 SP3 tiene un impacto y vectores de ataque desconocidos relaciona a (1) cabeceras del lenguaje HTTP y (2) cabeceras \"content-length\" HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:sp2:windows:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"61B5F31A-C109-4856-88B9-52FE3551B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp1:windows:*:*:*:*:*","matchCriteriaId":"5CD101DD-9655-4A83-8F79-59333D4DD672"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:*","matchCriteriaId":"15E2B599-2B96-4ED3-B2D9-E4D6909A1F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:*","matchCriteriaId":"9DAFE77C-4AB9-4865-B673-C32EAB3ABB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:*","matchCriteriaId":"5FC5947C-15F7-4BF0-9C0A-F2817F4BB7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:windows:*:*:*:*:*","matchCriteriaId":"2A57D5D2-F490-4A33-AFAF-A66CE7988F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:*","matchCriteriaId":"1694F7CA-0E7B-4DC6-9B74-FCCE8B81F048"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:*","matchCriteriaId":"042CF2E0-CE2C-4939-899A-F193127A28B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:*","matchCriteriaId":"2A7E430B-DD25-4BE7-8495-B4FD8EB60F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:*","matchCriteriaId":"142A95E7-009C-4A54-AA04-97C7120C228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*","matchCriteriaId":"D27AAA23-21E1-4C35-97FA-7F038E2C8923"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*","matchCriteriaId":"6658D417-B666-400A-89BD-C74A84E4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*","matchCriteriaId":"A5286A48-E77F-4D5F-8B8C-D701B9DC1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A18AD730-2782-4BC3-8B2E-D35D29EBC699"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*","matchCriteriaId":"36699D76-090F-4ED3-9C02-A09EB68F5CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"896C7671-E300-4E6D-86A3-D0DAF4168CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*","matchCriteriaId":"9775274E-21A5-466E-B792-54F53ECCD8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*","matchCriteriaId":"1CE0CDA6-DFF5-45F7-A641-180AED4F074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B490E624-9A8E-4AD2-9B6F-BFDA431CD77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*","matchCriteriaId":"4747583B-125F-423F-863F-5CBC4CB46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*","matchCriteriaId":"F2AD4208-DD3E-427E-ADF8-5C59C59EDC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*","matchCriteriaId":"BEE923F3-28AB-4C29-A920-F363F415CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"F4DB1610-FDB3-432C-8AD7-C667DCAA29D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*","matchCriteriaId":"30ABEC83-326A-4888-BFC7-3A40BC2E2CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*","matchCriteriaId":"762D694C-7942-4265-BF99-1DE9F3BC9128"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*","matchCriteriaId":"20851E26-511C-41B2-A3BF-4E4A083A73F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*","matchCriteriaId":"57A9A26E-0FB6-4766-9C7E-CB82551BC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*","matchCriteriaId":"7CD4DD41-AD88-4AB2-BAC2-2B59AECA16BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:85.20:*:*:*:*:*:*:*","matchCriteriaId":"1DFEA521-37B2-4C23-B320-1D0E70823366"}]}]}],"references":[{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020786","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5093","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.073","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el protocolo HTTP Stack (HTTPSTK) en Novell eDirectory versiones anteriores a v8.8 SP3 permite a atacantes remotos inyectar web script o HTML a través de vectores deconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","matchCriteriaId":"598FC8C1-61F0-4597-B737-0428BBB66C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:sp2:windows:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"61B5F31A-C109-4856-88B9-52FE3551B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp1:windows:*:*:*:*:*","matchCriteriaId":"5CD101DD-9655-4A83-8F79-59333D4DD672"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:*","matchCriteriaId":"15E2B599-2B96-4ED3-B2D9-E4D6909A1F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:*","matchCriteriaId":"9DAFE77C-4AB9-4865-B673-C32EAB3ABB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:*","matchCriteriaId":"5FC5947C-15F7-4BF0-9C0A-F2817F4BB7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:windows:*:*:*:*:*","matchCriteriaId":"2A57D5D2-F490-4A33-AFAF-A66CE7988F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:*","matchCriteriaId":"1694F7CA-0E7B-4DC6-9B74-FCCE8B81F048"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:*","matchCriteriaId":"042CF2E0-CE2C-4939-899A-F193127A28B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:*","matchCriteriaId":"2A7E430B-DD25-4BE7-8495-B4FD8EB60F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:*","matchCriteriaId":"142A95E7-009C-4A54-AA04-97C7120C228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*","matchCriteriaId":"D27AAA23-21E1-4C35-97FA-7F038E2C8923"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*","matchCriteriaId":"6658D417-B666-400A-89BD-C74A84E4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*","matchCriteriaId":"A5286A48-E77F-4D5F-8B8C-D701B9DC1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A18AD730-2782-4BC3-8B2E-D35D29EBC699"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*","matchCriteriaId":"36699D76-090F-4ED3-9C02-A09EB68F5CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"896C7671-E300-4E6D-86A3-D0DAF4168CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*","matchCriteriaId":"9775274E-21A5-466E-B792-54F53ECCD8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*","matchCriteriaId":"1CE0CDA6-DFF5-45F7-A641-180AED4F074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B490E624-9A8E-4AD2-9B6F-BFDA431CD77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*","matchCriteriaId":"4747583B-125F-423F-863F-5CBC4CB46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*","matchCriteriaId":"F2AD4208-DD3E-427E-ADF8-5C59C59EDC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*","matchCriteriaId":"BEE923F3-28AB-4C29-A920-F363F415CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"F4DB1610-FDB3-432C-8AD7-C667DCAA29D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*","matchCriteriaId":"30ABEC83-326A-4888-BFC7-3A40BC2E2CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*","matchCriteriaId":"762D694C-7942-4265-BF99-1DE9F3BC9128"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*","matchCriteriaId":"20851E26-511C-41B2-A3BF-4E4A083A73F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*","matchCriteriaId":"57A9A26E-0FB6-4766-9C7E-CB82551BC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*","matchCriteriaId":"7CD4DD41-AD88-4AB2-BAC2-2B59AECA16BE"}]}]}],"references":[{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020785","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46667","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5094","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.107","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el servicio NDS en Novell eDirectory versiones anteriores a v8.8 SP3 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*","matchCriteriaId":"598FC8C1-61F0-4597-B737-0428BBB66C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:*:sp2:windows:*:*:*:*:*","versionEndIncluding":"8.8","matchCriteriaId":"61B5F31A-C109-4856-88B9-52FE3551B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp1:windows:*:*:*:*:*","matchCriteriaId":"5CD101DD-9655-4A83-8F79-59333D4DD672"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:*","matchCriteriaId":"15E2B599-2B96-4ED3-B2D9-E4D6909A1F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:*","matchCriteriaId":"9DAFE77C-4AB9-4865-B673-C32EAB3ABB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:*","matchCriteriaId":"5FC5947C-15F7-4BF0-9C0A-F2817F4BB7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:windows:*:*:*:*:*","matchCriteriaId":"2A57D5D2-F490-4A33-AFAF-A66CE7988F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:*","matchCriteriaId":"1694F7CA-0E7B-4DC6-9B74-FCCE8B81F048"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:*","matchCriteriaId":"042CF2E0-CE2C-4939-899A-F193127A28B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:*","matchCriteriaId":"2A7E430B-DD25-4BE7-8495-B4FD8EB60F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:*","matchCriteriaId":"142A95E7-009C-4A54-AA04-97C7120C228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:*","matchCriteriaId":"D27AAA23-21E1-4C35-97FA-7F038E2C8923"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*","matchCriteriaId":"6658D417-B666-400A-89BD-C74A84E4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*","matchCriteriaId":"A5286A48-E77F-4D5F-8B8C-D701B9DC1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A18AD730-2782-4BC3-8B2E-D35D29EBC699"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*","matchCriteriaId":"36699D76-090F-4ED3-9C02-A09EB68F5CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"896C7671-E300-4E6D-86A3-D0DAF4168CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*","matchCriteriaId":"9775274E-21A5-466E-B792-54F53ECCD8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*","matchCriteriaId":"1CE0CDA6-DFF5-45F7-A641-180AED4F074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*","matchCriteriaId":"B490E624-9A8E-4AD2-9B6F-BFDA431CD77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*","matchCriteriaId":"4747583B-125F-423F-863F-5CBC4CB46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*","matchCriteriaId":"F2AD4208-DD3E-427E-ADF8-5C59C59EDC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*","matchCriteriaId":"BEE923F3-28AB-4C29-A920-F363F415CBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"F4DB1610-FDB3-432C-8AD7-C667DCAA29D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*","matchCriteriaId":"30ABEC83-326A-4888-BFC7-3A40BC2E2CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*","matchCriteriaId":"762D694C-7942-4265-BF99-1DE9F3BC9128"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*","matchCriteriaId":"20851E26-511C-41B2-A3BF-4E4A083A73F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*","matchCriteriaId":"57A9A26E-0FB6-4766-9C7E-CB82551BC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*","matchCriteriaId":"7CD4DD41-AD88-4AB2-BAC2-2B59AECA16BE"}]}]}],"references":[{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020787","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5095","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.120","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en  Novell User Application v3.0.1, v3.5.0, y v3.5.1; y Identity Manager Roles Based Provisioning Module v3.6.0 y v3.6.1 permite a atacantes remotos inyectar web script o HTML a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:identity_manager_roles_based_provisioning_module:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7D958125-0657-4CEF-A9DF-2F8FFCC1DFD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:identity_manager_roles_based_provisioning_module:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6EBB3E8A-FA93-4D23-94F4-DBDDDBD3F861"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:user_application:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2B3955A1-EE11-47D8-A261-0523201FA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:user_application:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3C3AEC81-9C81-4880-A06C-F595CA058970"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:user_application:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E313324F-2C31-4CEF-97CF-A5C0D3D589F2"}]}]}],"references":[{"url":"http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020792","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020793","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5096","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.153","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión TYPO3 File List (file_list) v0.2.1 y versiones anteriores permite a atacantes remotos obtener información sensible a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:file_list_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.1","matchCriteriaId":"4BEA6B38-0A28-493C-AD0E-0FCBE47D992D"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31262","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45258","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5097","sourceIdentifier":"cve@mitre.org","published":"2008-11-14T19:20:54.167","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MyFWB v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myfwb:myfwb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F431E69-278F-4533-A4AF-22E8A584E3D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/31954","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4597","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496553/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31269","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2649","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496553/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5098","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242186-1\r\n\r\n5. Resolution\r\n\r\nThis issue is addressed in the following releases:\r\n\r\nSPARC Platform\r\n\r\n    * Sun Java System Messaging Server 6.2 and 6.3 (for Solaris 9 and Solaris 10) with patch 120228-29 or later\r\n    * Sun Java System Messaging Server 6.3 (64-bit Solaris) with patch 126479-10 or later\r\n\r\nx86 Platform\r\n\r\n    * Sun Java System Messaging Server 6.2 and 6.3 (for Solaris 9 and Solaris 10) with patch 120229-29 or later\r\n    * Sun Java System Messaging Server 6.3 (64-bit) with patch 126480-10 or later\r\n\r\nLinux Platform\r\n\r\n    * Sun Java System Messaging Server 6.2 and 6.3 (for RHEL 3 and RHEL 4) with patch 120230-29 or later","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-2904."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Messaging Server 6.2 y 6.3, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados. Se trata de una vulnerabilidad diferente de CVE-2007-2904."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_messaging_server:6.2:-:sparc:*:*:*:*:*","matchCriteriaId":"A0B260F4-7222-44F7-A1FB-55DB0BCC8AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_messaging_server:6.2:-:x86:*:*:*:*:*","matchCriteriaId":"7866748E-330F-40F9-9997-254D4780D6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_messaging_server:6.3:-:sparc:*:*:*:*:*","matchCriteriaId":"CF6D0FF1-8A69-4047-8F1B-831D4E5C03D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_messaging_server:6.3:-:x86:*:*:*:*:*","matchCriteriaId":"567DB384-0F1E-403E-9576-CE5E16E9AFB4"}]}]}],"references":[{"url":"http://osvdb.org/49836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021223","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242186-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46583","source":"cve@mitre.org"},{"url":"http://osvdb.org/49836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242186-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5099","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1\r\n\r\nNote: The x86 Platform is not affected by this issue, as Logical Domains (LDoms) software is supported only on the Sun SPARC Platform.","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the \"ldm ls -l\" command, a different vulnerability than CVE-2008-4992."},{"lang":"es","value":"Sun Logical Domain Manager (también conocido como LDoms Manager o ldm) v1.0 hasta v1.0.3 muestra el valor de la variable de seguridad de contraseñas OpenBoot PROM (OBP) en texto sin formato, lo cual permite a usuarios locales evitar la protección de contraseñas SPARC firmware, y obtener privilegios o datos de acceso, a través del comando \"ldm ls -l\", una vulnerabilidad diferente de CVE-2008-4992."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:logical_domain_manager:1.0:_nil_:sparc:*:*:*:*:*","matchCriteriaId":"E9B820C8-745D-4FE6-98D3-5394AEF28AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:logical_domain_manager:1.0.1:_nil_:sparc:*:*:*:*:*","matchCriteriaId":"E77685AA-DE79-4033-A407-936CA647B1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:logical_domain_manager:1.0.2:_nil_:sparc:*:*:*:*:*","matchCriteriaId":"1E40E231-2AA1-48AE-8A1F-5F69EC7B63BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:logical_domain_manager:1.0.3:_nil_:sparc:*:*:*:*:*","matchCriteriaId":"7AC95A91-C8CE-4D72-80EB-EAA1303AA205"}]}]}],"references":[{"url":"http://secunia.com/advisories/32674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021224","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139395-02-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139396-02-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139397-02-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139398-01-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-460.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32286","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3154","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139395-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139396-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139397-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139398-01-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-460.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5100","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs."},{"lang":"es","value":"La implementación de strong name (nombre fuerte) (SN) en Microsoft .NET Framework 2.0.50727 confía en la firma digital Public Key Token embebida en la ruta de un archivo DLL en vez de en la firma digital de este mismo archivo, lo que facilita a los atacantes evitar los mecanismos de protección Global Assembly Cache (GAC) y Code Access Security (CAS), también conocidos como MSRC8566gs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0.50727:*:*:*:*:*:*:*","matchCriteriaId":"60D50F4D-1FDD-46C4-B289-7EF93106E44E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4605","source":"cve@mitre.org"},{"url":"http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx","source":"cve@mitre.org"},{"url":"http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&tabid=161&mid=555","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498311/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&tabid=161&mid=555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498311/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5101","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an \"array overflow.\""},{"lang":"es","value":"Desbordamiento de búfer en el lector BMP en OptiPNG v0.6 y v0.6.1 permite a atacantes con usuario asistido ejecutar código de su elección a través de una imagen BMP manipulada, relacionado con un \"desbordamiento de array\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:optipng:optipng:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B082EF70-262A-4FBB-939E-E3CC05ABE06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:optipng:optipng:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D2C93574-A75F-4793-A548-036039D2C687"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505399","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/12/1","source":"cve@mitre.org"},{"url":"http://optipng.sourceforge.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://prdownloads.sourceforge.net/optipng/optipng-0.6.1.1.diff?download","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-01.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=639631&group_id=151404","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32248","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46519","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/12/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://optipng.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://prdownloads.sourceforge.net/optipng/optipng-0.6.1.1.diff?download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=639631&group_id=151404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5102","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:47.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt\r\n\r\nAffected Versions\r\n* Zope 2.7.0 to Zope 2.11.2\r\n\r\n---\r\n\r\nhttp://openwall.com/lists/oss-security/2008/11/12/2\r\n\r\nAffected Conga versions: - checked conga-0.9.1-8 (contains Zope2.7.5 RC2), conga-0.12.0-7.el5 (contains Zope-2.8.4),\r\n                               - but older,newer Conga versions can be also vulnerable to this issue (based on Zope 2 version).","cveTags":[],"descriptions":[{"lang":"en","value":"PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements."},{"lang":"es","value":"PythonScripts en Zope 2 2.11.2 y anteriores, como se usa en Conga y otros productos, permite a usuarios remotamente autentificados provocar una denegación de servicio (agotamiento de recursos o parada de aplicación) mediante ciertas sentencias (1) raise o (2) import."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11.2","matchCriteriaId":"D3A1D1A2-D5E3-4850-92F7-878AFC7227F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"46B2B101-676C-4EF3-90FB-7B5D36D1ADF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:1.10.4:*:*:*:*:*:*:*","matchCriteriaId":"C241A48A-D987-40AB-9FA0-E8B1B9BE7AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A03C6583-7D9D-488E-B724-A696809B6C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.0.0a4:*:*:*:*:*:*:*","matchCriteriaId":"232C32EB-2D06-4995-B7D3-6664BBDE8A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.0.0b4:*:*:*:*:*:*:*","matchCriteriaId":"DEFCF909-3125-46B9-978B-6A01C7C933B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.0.0b5:*:*:*:*:*:*:*","matchCriteriaId":"D908B47E-1ABB-466E-8ECD-6890C921F3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.0.0b6:*:*:*:*:*:*:*","matchCriteriaId":"7831E756-02CE-43AE-A1D1-A02C9DB3A92A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D10CB90E-AD3E-421C-9844-07A55AE13EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37DC0246-FFC5-475C-A58C-B449B96C19E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"A57269EA-85F9-4767-B679-E7B55BE5742C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"A97F577A-06E5-4F4F-8015-E3B1ADECBF3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C49596F-E215-4B70-8397-3C247F509D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9F8A280F-A140-4399-9742-1A729812F2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FED21663-A607-4C29-8271-CCDCAE1AA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4CEFCEE7-470B-4D7E-937A-4B9FFED8157F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BD9B7FD-BBB6-4A21-8094-2CE196633EDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0DC84727-3F26-4321-AC2B-02AAE528D37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0a1:*:*:*:*:*:*:*","matchCriteriaId":"6D4E13A0-7384-49E3-A848-8E864C340F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"0EA5CE15-530A-400D-9FDF-7044CD8C6DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"B7DC30CD-684E-4C53-833E-6EF2C8D1A3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"DABDC050-BF8B-4F8C-9FCD-4B0D86E46D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"C91E72CC-8AEA-49E5-BB7D-3C16E2E30A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1b1:*:*:*:*:*:*:*","matchCriteriaId":"98EBD292-5FC6-4463-B085-A34D1DFDB0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"15B80335-5F59-4530-A241-437367369BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53427D40-495B-4F37-95A5-6D069186CBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1DB2FC39-A95D-414E-A67E-66AF79A12CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4b1:*:*:*:*:*:*:*","matchCriteriaId":"AC78B80F-36CF-440D-98CD-D47FD239AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"925BC42D-02B5-4B6F-ADC6-156407868276"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.5b1:*:*:*:*:*:*:*","matchCriteriaId":"F6C0DBC3-F67F-49E9-A125-922C6F979906"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"25DE8A9F-432B-40C3-9A7E-3472E2AF0131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0a1:*:*:*:*:*:*:*","matchCriteriaId":"8544050B-C0F0-4622-8107-12CFF90EF4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0a2:*:*:*:*:*:*:*","matchCriteriaId":"91C8A312-A0FA-43C8-84B9-FEDE54F9EE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0b1:*:*:*:*:*:*:*","matchCriteriaId":"FD6B3455-CEC5-48EE-8F9A-67C8DFA480A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0b2:*:*:*:*:*:*:*","matchCriteriaId":"56C558B6-7E96-4750-A860-955D23F3E76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0b3:*:*:*:*:*:*:*","matchCriteriaId":"0B213F4B-21D2-44A8-A2F6-5D70DA7F337C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B34354C-3369-4926-9DFC-44608A1BC82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.1b1:*:*:*:*:*:*:*","matchCriteriaId":"BEF59BA6-33CC-4DC5-92B3-52BD64337549"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.1b2:*:*:*:*:*:*:*","matchCriteriaId":"7EA506D7-57D4-4148-ADFC-455B6FAE8A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.1b3:*:*:*:*:*:*:*","matchCriteriaId":"1645690B-5B9E-42C0-9E3C-DFE10162D05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"143AD011-2D33-43E1-AFEA-7C1BC96CBDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.2b1:*:*:*:*:*:*:*","matchCriteriaId":"E1E1B2EF-3D21-4675-A16F-DE8FF60DC4D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.2b2:*:*:*:*:*:*:*","matchCriteriaId":"DE9BB4AC-9ECF-4DDA-81D8-639C65E62C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"56D73A2B-7D4B-43BA-B7D7-E1FE397BD577"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.3b1:*:*:*:*:*:*:*","matchCriteriaId":"222ACC75-99E2-4C82-A627-6085582EC202"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"54DFA87E-DC83-40A8-AAC1-40B37F024255"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0a1:*:*:*:*:*:*:*","matchCriteriaId":"FC9470D9-988F-400B-985C-4595959966B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0b1:*:*:*:*:*:*:*","matchCriteriaId":"8617107E-F1E5-4401-9DBE-EA7815912045"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0b2:*:*:*:*:*:*:*","matchCriteriaId":"B6E4F185-B70E-44A1-A8AB-A07B45707346"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0b3:*:*:*:*:*:*:*","matchCriteriaId":"C1795AB2-4F03-4A9F-8F7E-BD77EDE0FC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4701F71F-D467-4C9E-8819-9E4361AB1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.1b1:*:*:*:*:*:*:*","matchCriteriaId":"15B8E2D3-6E4C-40F5-A6B1-AA422FEAB6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89A37024-4562-451B-B1C0-CD27DD694F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.2b1:*:*:*:*:*:*:*","matchCriteriaId":"6DE14F3E-BA60-44ED-847A-CB823FF94A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6881C300-3639-4B31-8182-C9DACE3F4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.3:upgrade:*:*:*:*:*:*","matchCriteriaId":"BA79F865-E620-4DC6-9758-E847EED38756"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.3b1:*:*:*:*:*:*:*","matchCriteriaId":"B5A77338-A0C4-4348-B7FC-4BB075BC5694"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E1936D04-23DE-45FE-BECC-9F5920D0C815"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.4:upgrade:*:*:*:*:*:*","matchCriteriaId":"6305CD2B-D5A3-48F2-9042-6C5C0B58F669"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.4b1:*:*:*:*:*:*:*","matchCriteriaId":"7D58B127-6410-4D56-9ACA-A453C64ACD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"219AC292-9793-4FA6-A6E8-9E6D922AFC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.0a1:*:*:*:*:*:*:*","matchCriteriaId":"FF4126BA-B101-48C6-A323-3598E44C9BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.0a2:*:*:*:*:*:*:*","matchCriteriaId":"AC1F354C-426E-4863-AC69-EAC7ED6E15F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.0b1:*:*:*:*:*:*:*","matchCriteriaId":"D2F4DE78-3D50-4133-8077-E77B62AE0270"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"484BD5DA-B3D7-41C4-8E02-AE8C4EBEC5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.1:upgrade:*:*:*:*:*:*","matchCriteriaId":"4DF37353-1EA6-45FD-A46D-500144D7C527"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.1b1:*:*:*:*:*:*:*","matchCriteriaId":"F1F42437-4591-4E5C-8AF2-C8EF6BCB694C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.1b2:*:*:*:*:*:*:*","matchCriteriaId":"15AD4D0C-258D-4AA4-A476-0386E67EE6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4A3615FB-53CE-401F-832C-C6DE39174BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.0a1:*:*:*:*:*:*:*","matchCriteriaId":"5F4A44CC-94FB-4708-AD7F-B8DA016DCF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.0b1:*:*:*:*:*:*:*","matchCriteriaId":"74BE51D9-9D3E-403E-A196-F970879BA6D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.0b2:*:*:*:*:*:*:*","matchCriteriaId":"753BA130-B420-4910-B5E4-66730DE932F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"60254EFC-026C-41A9-8587-ED22B2570CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.1:upgrade:*:*:*:*:*:*","matchCriteriaId":"CAFE302D-BB49-4476-9F89-F9EDF410C20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"62208BA1-C57E-4ECE-8F36-3B9FE0FC9864"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"2A59314F-5FAC-445E-BF53-409648AEE3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2.b1:*:*:*:*:*:*:*","matchCriteriaId":"F0FF11C4-EB9A-466A-9743-A1695DF3E75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2.b2:*:*:*:*:*:*:*","matchCriteriaId":"125E627B-480A-4146-A2E9-C8311117F265"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2.b3:*:*:*:*:*:*:*","matchCriteriaId":"ABAF8F64-68BC-4405-8AD8-4226D67AD2FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2.b4:*:*:*:*:*:*:*","matchCriteriaId":"A2C5EA9F-D371-435C-B6ED-EA060BB30CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2.b5:*:*:*:*:*:*:*","matchCriteriaId":"DBFFB8DB-C9D9-42A8-8B96-F86EAD3E910B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.2.b6:*:*:*:*:*:*:*","matchCriteriaId":"EAB4565C-F6A2-434A-9A27-54A4CFAB6CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D0247677-FCD4-4AA2-8031-CEA4D2F7F463"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"98388A7B-2DE4-4C40-9135-EB4BAD6BC69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.4:rc1:*:*:*:*:*:*","matchCriteriaId":"214EECAD-6BEB-4696-8A44-AECF3A483811"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.6.4:rc2:*:*:*:*:*:*","matchCriteriaId":"3FB9A9B6-A856-4444-A036-6D0AB6A62A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-a1:*:*:*:*:*:*:*","matchCriteriaId":"989F5266-B177-47B4-91A8-5EEFDF9CCAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-b1:*:*:*:*:*:*:*","matchCriteriaId":"8AB5C29F-7181-4C23-BC6F-FA6879FDCFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-b2:*:*:*:*:*:*:*","matchCriteriaId":"442DD5FA-3067-4A2E-9199-38C6B6D9AC85"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-b3:*:*:*:*:*:*:*","matchCriteriaId":"7906F684-9E70-456C-94F5-EF76D1FCFD6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-b4:*:*:*:*:*:*:*","matchCriteriaId":"2AC98282-4ED1-4804-9582-C56E63706C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-c1:*:*:*:*:*:*:*","matchCriteriaId":"793B03E2-A858-4BFD-A1A1-9EBB9FE3AE41"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-c2:*:*:*:*:*:*:*","matchCriteriaId":"BB0EA0C1-F506-4E8E-A06B-49571BD4F716"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.0-final:*:*:*:*:*:*:*","matchCriteriaId":"A56D2773-EF71-4E5A-B1CC-2377F3F039AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.1-b1:*:*:*:*:*:*:*","matchCriteriaId":"FC940DFD-7A80-4302-94E7-85C5C45D2C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.1-b2:*:*:*:*:*:*:*","matchCriteriaId":"8242C676-7040-4BD2-869B-057C8C1BB48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.1-final:*:*:*:*:*:*:*","matchCriteriaId":"EA0D4D70-B2A2-44B8-970E-456C9B16D833"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.2-c1:*:*:*:*:*:*:*","matchCriteriaId":"13002AEF-5C46-4B2D-B356-41B2F30965AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.2-final:*:*:*:*:*:*:*","matchCriteriaId":"2DD3255B-4791-4447-9BDA-3704A19AA063"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.3-b1:*:*:*:*:*:*:*","matchCriteriaId":"608CC5FB-DE42-4BC6-9CEC-6D19DB2A884A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.3-b2:*:*:*:*:*:*:*","matchCriteriaId":"CD5F3D7D-E37E-4868-A780-2F4EC112A8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.3-final:*:*:*:*:*:*:*","matchCriteriaId":"F52ABCA0-E54E-4C0B-93AB-1B601FE60D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.4-b1:*:*:*:*:*:*:*","matchCriteriaId":"7945440D-2EF0-4F0E-8A20-855E7C8FF181"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.4-b2:*:*:*:*:*:*:*","matchCriteriaId":"9920D1CF-AA84-4635-8FFB-D7CDEF06F0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.4-c1:*:*:*:*:*:*:*","matchCriteriaId":"DCBD57BF-4B05-4580-A2D4-A124BADEA446"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.4-c2:*:*:*:*:*:*:*","matchCriteriaId":"DB683668-3E95-4E9E-AD97-61102D72C29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.4-final:*:*:*:*:*:*:*","matchCriteriaId":"8B69CB01-0AB0-402E-9004-0D575CF8F487"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.5-b1:*:*:*:*:*:*:*","matchCriteriaId":"8F737278-263F-4EC7-A147-3C7C12C0A4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.5-c1:*:*:*:*:*:*:*","matchCriteriaId":"7B423128-0604-4DF1-A386-D8C4729EFB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.5-final:*:*:*:*:*:*:*","matchCriteriaId":"4D8861A0-A94B-4617-82C6-04B8ECA2D74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.6-b1:*:*:*:*:*:*:*","matchCriteriaId":"AD7672D0-AC3C-4BDA-B902-32C6E369AD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.6-b2:*:*:*:*:*:*:*","matchCriteriaId":"2155FC85-7A25-40FD-837F-F2C6EE1BEC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.6-final:*:*:*:*:*:*:*","matchCriteriaId":"BE17A356-A8DB-425C-B86B-F2095B1660F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.7-b1:*:*:*:*:*:*:*","matchCriteriaId":"C30F191D-BB4C-47E6-ACF8-0E4A95AD84D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.7-final:*:*:*:*:*:*:*","matchCriteriaId":"947D37B9-4908-417D-BA40-2DC38BC2DD89"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"5A52CDCE-172C-4FAC-9015-ACF362E8E8A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"84DFC911-D226-4F8C-840A-D5F6EBBBF0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.0-a1:*:*:*:*:*:*:*","matchCriteriaId":"4119535A-9B8C-45F2-B083-E6ABB3E08393"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.0-a2:*:*:*:*:*:*:*","matchCriteriaId":"7ADFE72D-9A97-4A76-A811-024DF90AD86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.0-b1:*:*:*:*:*:*:*","matchCriteriaId":"6C5B98B5-A2D7-4A71-AF16-7A57AA271252"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.0-b2:*:*:*:*:*:*:*","matchCriteriaId":"0B31785F-2DF7-4836-9933-7401F3303D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.0-final:*:*:*:*:*:*:*","matchCriteriaId":"E3A443D6-6079-4F15-83CC-78637A4CFF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.1-b1:*:*:*:*:*:*:*","matchCriteriaId":"94F1CF87-3A0E-437C-B8B9-92518D82092D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.1-final:*:*:*:*:*:*:*","matchCriteriaId":"BE1A6CB8-661E-4BBB-846E-43A537CA4A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"93785E75-3F82-471E-B802-6337A6469AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"B34066B4-CE72-4271-9CFD-F725F7D17C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9A40B0D1-1812-4BC7-AC7D-CCE6184A9DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"81028DBB-7A75-4D27-8027-947F15CAA21E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"62BCE60F-9081-44D3-87FC-396D1A954626"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DBA09D22-779C-4E63-B216-B931FA11E014"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"B2759CCE-3A1F-4E3F-9832-8BF3AA4F20F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"B6EBDE5C-4529-4BA2-81A2-A87F65462608"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"25D8B724-8D66-4025-9374-982416282500"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"9F87953F-C2F1-4284-819D-BA4BD74008C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.0-b1:*:*:*:*:*:*:*","matchCriteriaId":"E3643AA3-4997-4E12-9652-4DBC55D2FA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.0-b2:*:*:*:*:*:*:*","matchCriteriaId":"A85A6886-D27B-48A1-9749-7CA301B579DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.0-final:*:*:*:*:*:*:*","matchCriteriaId":"979B0D79-09B1-4C79-AD13-00CF817051BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"82D9A178-BF69-4C23-BEC8-D175FD58E10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"C0279FD6-9E30-429A-BB70-9B7AF7055160"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"78E8ABCF-A7BE-4AB7-BFE9-CF29F7E02860"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"6561FF26-91C5-40AF-8AA6-E98D295AC33F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DAF323F8-6F93-46CB-A94C-B0774C54188F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.6:*:*:*:*:*:*:*","matchCriteriaId":"0EF07C5D-DE44-409F-87B6-FB713BAF2547"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"AACD00C8-F451-4B27-855F-57B6F38A28E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.8:*:*:*:*:*:*:*","matchCriteriaId":"457D78E5-46CF-45CA-88E8-ED2A1502BB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"28791A2A-31DC-455C-8775-44E6FE0EF511"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.9.10:*:*:*:*:*:*:*","matchCriteriaId":"88B232C7-746E-4F2D-8886-B872C307E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.0-b1:*:*:*:*:*:*:*","matchCriteriaId":"A41D4E4B-EFEF-46E8-99E5-BA1B691F0673"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.0-b2:*:*:*:*:*:*:*","matchCriteriaId":"7B1685B1-4E40-4341-A4FD-54409EF5160A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.0-c1:*:*:*:*:*:*:*","matchCriteriaId":"7490F597-C4C5-4CF1-8090-08FB3B1A8ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.0-final:*:*:*:*:*:*:*","matchCriteriaId":"43997ED2-9214-42D9-8404-23BC5B79139E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.2-b1:*:*:*:*:*:*:*","matchCriteriaId":"AE608607-2800-4B9F-814B-3E339E2F86A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.2-final:*:*:*:*:*:*:*","matchCriteriaId":"EB02DAA0-3E51-4419-82FB-1DAF9C8105B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.3-final:*:*:*:*:*:*:*","matchCriteriaId":"B6819AA8-E777-4C9A-9950-AD1F34C89B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.4-final:*:*:*:*:*:*:*","matchCriteriaId":"F69CE0DC-A1C8-4E88-BA6E-3A152697D36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"02F52B0A-A6F9-4357-9E54-69794FE6568E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.6:*:*:*:*:*:*:*","matchCriteriaId":"B80D8374-50AD-4710-9B6E-C31B67B98C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.10.7:*:*:*:*:*:*:*","matchCriteriaId":"5B85BDEE-B9B3-45E5-B1FC-F639B2351E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"92CC66BD-4B63-4CA5-9F4E-A5F1FC6A86DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"68155E38-F337-42CE-AE30-9482EBED8EA6"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=246411","source":"cve@mitre.org"},{"url":"http://mail.zope.org/pipermail/zope/2008-August/174025.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/12/2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2418","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/Hotfix-2008-08-12/Hotfix_20080812-1.1.0.tar.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/zope2/+bug/257269","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/zope2/+bug/257276","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=246411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.zope.org/pipermail/zope/2008-August/174025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/12/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/Hotfix-2008-08-12/Hotfix_20080812-1.1.0.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/zope2/+bug/257269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/zope2/+bug/257276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5103","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:48.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! (exclamation point) and allows attackers to bypass intended login restrictions."},{"lang":"es","value":"Las implementaciones (1) python-vm-builder y (2) ubuntu-vm-builder en VMBuilder v0.9 en Ubuntu v8.10 omiten la opción -e cuando invocan chpasswd con un argumento root:!, lo cual configura la cuenta raíz con una contraseña en texto claro de ! (punto de exclamación) y permite a atacantes evitar restricciones de login intencionadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcgrendel:vmbuilder:0.9:*:*:*:*:*:*:*","matchCriteriaId":"131A9ABC-41B8-42D4-871C-5375D413F1FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:_nil_:lts:*:*:*:*:*","matchCriteriaId":"8CC514F1-FFCF-4ADD-8A2C-F22C693F9DCF"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"06FD8602-7069-41C6-B65C-84928EDCE2D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.04:_nil_:lts:*:*:*:*:*","matchCriteriaId":"3DD8F0EE-8DD3-4399-83E4-AD4FC89A1DCD"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"ED67B852-4B37-4B79-8F4D-23B2FEACA4ED"}]}]}],"references":[{"url":"http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/49996","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32697","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32292","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-670-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46603","source":"cve@mitre.org"},{"url":"http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/49996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-670-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5104","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:48.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm-builder or (2) ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! (exclamation point) as the default root password, which allows attackers to bypass intended login restrictions."},{"lang":"es","value":"Ubuntu 6.06 LTS, 7.10, 8.04 LTS y 8.10, cuando está instalado como una máquina virtual por (1) python-vm-builder o (2) ubuntu-vm-builder en VMBuilder 0.9 en Ubuntu 8.10, tiene un ! (signo de exclamación) como la contraseña por defecto de root, lo que permite a atacantes remotos evitar las restricciones de login previstas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcgrendel:vmbuilder:0.9:*:*:*:*:*:*:*","matchCriteriaId":"131A9ABC-41B8-42D4-871C-5375D413F1FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:_nil_:lts:*:*:*:*:*","matchCriteriaId":"8CC514F1-FFCF-4ADD-8A2C-F22C693F9DCF"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"06FD8602-7069-41C6-B65C-84928EDCE2D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.04:_nil_:lts:*:*:*:*:*","matchCriteriaId":"3DD8F0EE-8DD3-4399-83E4-AD4FC89A1DCD"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"ED67B852-4B37-4B79-8F4D-23B2FEACA4ED"}]}]}],"references":[{"url":"http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32697","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32292","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-670-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46881","source":"cve@mitre.org"},{"url":"http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-670-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5105","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:48.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands."},{"lang":"es","value":"El servidor FTP KarjaSoft Sami FTP Server 2.0.x permite a atacantes remotos causar una denegación de servicio (caida o bloqueo del demonio) a través de algunos comandos (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, ( 6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, y (10) STOR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"218CACF2-A382-4483-9319-889B9E2FB208"},{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EE91DCB5-8314-473B-A8D0-06B53B02FC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"075B214B-CFFE-408E-B341-FF9C5B43A51E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4603","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488198/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27817","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488198/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5106","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:48.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console.  NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212."},{"lang":"es","value":"Desbordamiento de búfer en KarjaSoft Sami FTP Server 2.0.x permte a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su elección a través de un argumento largo de un comando de su elección, lo cual dispara el desbordamiento cuando el fichero log SamyFtp.binlog se ve en la consola de gestión.\r\nNOTA: este CVE puede solaparse con CVE-2006-0441 y CVE-2006-2212."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"218CACF2-A382-4483-9319-889B9E2FB208"},{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EE91DCB5-8314-473B-A8D0-06B53B02FC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"075B214B-CFFE-408E-B341-FF9C5B43A51E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4603","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488198/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27817","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488198/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5107","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T18:18:48.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files."},{"lang":"es","value":"El proceso de instalación para Citrix Presentation Server 4.5 y Desktop Server 1.0, cuando MSI logging está habilitado, almacena las credenciales de la base de datos en archivos de log MSI, lo que permite a usuarios locales obtener estas credenciales leyendo los archivos de log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08AEEC3F-E8DD-4535-98D2-4CFD83439A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BD859173-2ACD-4C60-8EF4-5B0434EA8244"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX116228","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28047","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0705/references","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://support.citrix.com/article/CTX116228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0705/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}},{"cve":{"id":"CVE-2008-5108","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T22:21:27.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en Adobe AIR 1.1 y anteriores permite ejecutar código JavaScript no confiable a atacantes locales o remotos dependiendo del contexto en una aplicación AIR a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"F84C9D3A-E383-44ED-B253-6039CA1429E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"}]}]}],"references":[{"url":"http://osvdb.org/49915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32772","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-23.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32334","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021242","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3189","source":"cve@mitre.org"},{"url":"http://osvdb.org/49915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5109","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Guide for enabling SWF verification = http://kb.adobe.com/selfservice/viewContent.do?externalId=kb405456&sliceId=2","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software."},{"lang":"es","value":"La configuración por defecto de Adobe Flash Media Server (FMS) 3.0 no permite SWF Verification para sesiones (1) RTMPE y (2) RTMPTE, que hacen más fácil a los atacantes remotos hacer copias de contenidos de vídeo a través de software de captura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE4A07B6-E5DA-4781-ABB3-DB2663E2A737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"897B12DA-8749-44F7-AA1E-AB1F01BB205E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-11.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/49952","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/49952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5110","sourceIdentifier":"secalert@redhat.com","published":"2008-11-17T22:21:27.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9."},{"lang":"es","value":"syslog-ng no llama a chdir cuando llama a chroot, lo que podría permitir a los atacantes escapar de la jaula prevista. NOTA: esto es sólo una vulnerabilidad cuando una vulnerabilidad independiente esta presente. Esta fallo afecta a las versiones de syslog-ng anteriores e incluso a la versión 2.0.9"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.9","matchCriteriaId":"9BBDD6A5-C040-4978-8AB1-685367EB6849"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35748","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40551","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-10.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/17/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1796","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/17/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5111","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the socket function in Sun Solaris 10 and OpenSolaris snv_57 through snv_91, when InfiniBand hardware is not installed, allows local users to cause a denial of service (panic) via unknown vectors, related to the socksdpv_close function."},{"lang":"es","value":"Una vulnerabilidad sin especificar en la función socket de Sun Solaris 10 y OpenSolaris snv_57 a la snv_91, cuando Infiniband hardware no está instalado, permite a usuarios locales causar una denegación de servicio (causando un panic) a través de vectores desconocidos, relacionados con la función socksdpv_close."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:_nil_:sparc:*:*:*:*:*","matchCriteriaId":"F8785CD5-7DBD-4B4D-87AC-DC78A834A784"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:_nil_:x86:*:*:*:*:*","matchCriteriaId":"C0B5F360-4CBC-40DE-AFDF-FF4E527AE97E"}]}]}],"references":[{"url":"http://osvdb.org/49854","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32611","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021231","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242806-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46611","source":"cve@mitre.org"},{"url":"http://osvdb.org/49854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242806-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5112","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum."},{"lang":"es","value":"El servidor LDAP en Active Directory en Microsoft Windows 2000 SP4 y Server 2003 SP1 y SP2 responde de forma diferente a un intento fallido de bind dependiendo de si la cuenta de usuario existe y está habilitada para abrir una sesión, que permite que los atacantes remotos enumerar nombres de usuario válidos a través de una serie de peticiones bind de LDAP, según lo demostrado por ldapuserenum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp1:*:*:*:*:*:*","matchCriteriaId":"79F860DB-9616-4B63-A850-F5E950F667B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*","matchCriteriaId":"227A166A-39D3-49F5-89E7-0F75C7B5285C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]}],"references":[{"url":"http://labs.portcullis.co.uk/application/ldapuserenum/","source":"cve@mitre.org"},{"url":"http://www.portcullis-security.com/294.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32305","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46628","source":"cve@mitre.org"},{"url":"http://labs.portcullis.co.uk/application/ldapuserenum/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.portcullis-security.com/294.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5113","sourceIdentifier":"cve@mitre.org","published":"2008-11-17T23:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery (CSRF) attacks via crafted cookies, as demonstrated by attacks that (1) delete user accounts or (2) cause a denial of service (loss of application access).  NOTE: this issue relies on the presence of an independent vulnerability that allows cookie injection."},{"lang":"es","value":"WordPress 2.6.3 se basa en el array superglobal REQUEST en algunas situaciones peligrosas, lo cual facilita a los atacantes remotos a llevar a cabo ataques de falsificación de petición en sitios cruzados tanto persistentes como retardados a través de \"cookies\" modificadas a mano, como lo demuestran los ataques que (1) eliminan  cuentas de usuario o (2) provocan una denegación de servicio (pérdida de acceso a la aplicación). NOTA: Este problema se basa en la presencia de una vulnerabilidad independiente que permite la inyección de cookies.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1253161D-F1C8-46D6-B970-20335071500E"}]}]}],"references":[{"url":"http://bugs.debian.org/504771","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/14/1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46698","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/504771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/14/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5114","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Identity Manager v6.0 a v6.0 SP4, v7.0 y v7.1, permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"13445915-DF3D-4C52-B1DC-9FC6BE0DD519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"861DEDA3-93A1-405A-BA2F-764AE4219D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://osvdb.org/49765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32262","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46552","source":"cve@mitre.org"},{"url":"http://osvdb.org/49765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5115","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp."},{"lang":"es","value":"Una vulnerabilidad de  tipo cross-site request forgery (CSRF) en Sun Java System Identity Manager en versiones 6.0 hasta 6.0 SP4 , versiones 7.0 y 7.1, permite a los atacantes remotos secuestrar la autenticación de administradores para peticiones que actualizan la contraseña por medio del archivo idm/admin/changeself.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"13445915-DF3D-4C52-B1DC-9FC6BE0DD519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"861DEDA3-93A1-405A-BA2F-764AE4219D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://osvdb.org/49766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498479/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32262","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46553","source":"cve@mitre.org"},{"url":"http://osvdb.org/49766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr07-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498479/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5116","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo idm/includes/helpServer.jsp en Sun Java System Identity Manager versiones 6.0 hasta 6.0 SP4, y versiones 7.0 y 7.1, permite a los atacantes remotos leer archivos arbitrarios en el sistema de archivos del servidor IDM por medio de secuencias de salto de directorio en el parámetro ext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"13445915-DF3D-4C52-B1DC-9FC6BE0DD519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"861DEDA3-93A1-405A-BA2F-764AE4219D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://osvdb.org/49767","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR08-09.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498487/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32262","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46554","source":"cve@mitre.org"},{"url":"http://osvdb.org/49767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.procheckup.com/Vulnerability_PR08-09.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498487/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5117","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en Sun Java System Identity Manager v6.0 a v6.0 SP4, v7.0, y v7.1, permite a atacantes remotos, redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"13445915-DF3D-4C52-B1DC-9FC6BE0DD519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"861DEDA3-93A1-405A-BA2F-764AE4219D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://osvdb.org/49768","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32262","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46556","source":"cve@mitre.org"},{"url":"http://osvdb.org/49768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5118","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to \"frame injection.\""},{"lang":"es","value":"Sun Java System Identity Manager en las versiones  6.0, 6.0 Service Pack 4, 7.0, y 7.1 permite a atacantes remotos inyectar marcos de sitios web arbitrarios y llevar a cabo ataques de phishing a través de vectores no especificados, relacionados con \"inyección de marcos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"13445915-DF3D-4C52-B1DC-9FC6BE0DD519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D0C2964C-7435-4999-AF16-01CD9EF5782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"51CFF484-5A52-41DC-A003-A9319DF2AFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"9A7E88DA-F3A8-4B0F-AD4F-8680C1FB3282"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"861DEDA3-93A1-405A-BA2F-764AE4219D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"}]}]}],"references":[{"url":"http://osvdb.org/49769","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32262","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46555","source":"cve@mitre.org"},{"url":"http://osvdb.org/49769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5119","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Scripts4Profit DXShopCart v4.30mc permite a atacantes remotos inyectar web script o HTML a través del parametro keyword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts4profit:dxshopcart:4.30mc:*:*:*:*:*:*:*","matchCriteriaId":"3F98B944-9C73-4E6E-8581-AE7BCB73CF8E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0414.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30790","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44587","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5120","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string."},{"lang":"es","value":"Un desbordamiento de búfer basado en Process Software MultiNet finger service (también conocido como FINGERD) para HP OpenVMS 8.3 permite a atacantes remotos ejecutar código arbitrario a través de una peticion con una cadena de texto excesivamente larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openvms:8.3:*:*:*:*:*:*:*","matchCriteriaId":"C447F682-D584-4704-8195-21ABE097CC66"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4602","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495207/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30589","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495207/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5121","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\\\.\\DNE device interface."},{"lang":"es","value":"dne2000.sys en Citrix Deterministic Network Enhancer (DNE) desde la version 2.21.7.233 a la 3.21.7.17464, tal y como se usa en (1) Cisco VPN Client, (2) Blue Coat WinProxy, y (3) SafeNet SoftRemote y HighAssurance Remote, permite a usuarios locales obtener privilegios a través de una petición DNE_IOCTL DeviceIoControl modificada a la interfaz  de dispositivo \\\\.\\DNE .\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:deterministic_network_enhancer:2.21.7.223:*:*:*:*:*:*:*","matchCriteriaId":"10F0D8E9-67F6-4484-9BD1-A16228A41D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:deterministic_network_enhancer:3.21.7.17464:*:*:*:*:*:*:*","matchCriteriaId":"153E29F0-3E68-4CF3-B5B3-8A63E101A650"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:bluecoat:winproxy:*:*:*:*:*:*:*:*","matchCriteriaId":"BC5D863E-670D-4849-960B-FEEA70C95E74"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:vpn_client:*:*:*:*:*:*:*:*","matchCriteriaId":"099829D2-EC37-4BEF-91B7-375478189C1B"},{"vulnerable":false,"criteria":"cpe:2.3:a:safenet:highassurance_remote:*:*:*:*:*:*:*:*","matchCriteriaId":"7212B1EF-2AD3-42DD-A6D7-DB18F3ED2923"},{"vulnerable":false,"criteria":"cpe:2.3:a:safenet:softremote_vpn_client:*:*:*:*:*:*:*:*","matchCriteriaId":"0C384818-1B30-4EBA-99DE-E64008F72985"}]}]}],"references":[{"url":"http://secunia.com/advisories/30728","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30747","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30753","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4600","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX117751","source":"cve@mitre.org"},{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860","source":"cve@mitre.org"},{"url":"http://www.digit-labs.org/files/exploits/dne2000-call.c","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/858993","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29772","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1865","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1866","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1867","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1868","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43153","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5837","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX117751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digit-labs.org/files/exploits/dne2000-call.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/858993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/29772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5122","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo WorkArea/ContentRatingGraph.aspx en CMS400.NET de versión 7.5.2 y anteriores, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro res."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:*:*:*:*:*:*:*:*","versionEndIncluding":"7.52","matchCriteriaId":"EB62235C-211E-49C2-965F-DA084260E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.00:*:*:*:*:*:*:*","matchCriteriaId":"35694365-F7E4-4FF0-A99E-87A7A8B08EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.01:*:*:*:*:*:*:*","matchCriteriaId":"D4C5BF04-66FE-444F-8104-C76E68CC32AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.02:*:*:*:*:*:*:*","matchCriteriaId":"88831F1F-6734-4964-9C35-BC3C17A9386A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.03:*:*:*:*:*:*:*","matchCriteriaId":"F8139DE1-56AB-4C0A-8939-A5D997DCB9AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.04:*:*:*:*:*:*:*","matchCriteriaId":"C7F1BC7A-0F81-4847-9F55-26C42D45ACCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.50:*:*:*:*:*:*:*","matchCriteriaId":"562C8C2B-C5B4-45C6-8A94-3E60A7C755DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.51:*:*:*:*:*:*:*","matchCriteriaId":"CD9B496C-5071-47A4-A1B5-25EBBA3386D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/30824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-ektron.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29857","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-ektron.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5123","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en CCleague Pro 1.2 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro U."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:castillocentral:ccleague:1.2:*:pro:*:*:*:*:*","matchCriteriaId":"AAB43B64-0543-45C5-A2D1-D4C286F53B20"}]}]}],"references":[{"url":"http://secunia.com/advisories/30796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4604","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43280","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5888","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5124","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks."},{"lang":"es","value":"JSCAPE Secure FTP Applet v4.8.0 y anteriores, no pide al usuario la verificación de una nueva o desajustada clave de host SSH, lo cual hace más sencillo a atacantes remotos realizar ataques de hombre-en-medio (man-in-the-middle)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.0","matchCriteriaId":"30A65AD9-1D98-48E0-B7EF-7E1FB47C97F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7D73D5E2-38CD-4342-A064-C847738F7140"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:1.2:*:*:*:*:*:*:*","matchCriteriaId":"5138FA13-1943-4308-89DA-46BF5AE9DD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28009D43-E7AB-4D71-9FE7-1771E75D5735"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:1.4:*:*:*:*:*:*:*","matchCriteriaId":"3F5AE2D4-5D40-4414-93C0-63FD13FC782C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EF576BB4-BFDB-4481-A886-314C7B16B0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:1.6:*:*:*:*:*:*:*","matchCriteriaId":"5707E8E4-F4E9-4D87-BE87-571C9D062617"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FE7B8DF4-2E5C-4487-B0A7-2B1CBA3A484D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4BC6BB45-A0AE-4CFC-9987-23CD144403E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE591237-63D6-42D4-ACCF-23880ABBE1A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:2.6:*:*:*:*:*:*:*","matchCriteriaId":"1FB79624-E5FE-4F4F-AF3F-22058D687A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"15EE5E9A-F960-4B96-AE7F-0C25FF3C63D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A14E83A6-CAFA-48A9-8C0A-B1E23FFC44B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3B9FEEE0-CE4B-4EC6-904E-B559437BC9F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"216F6B93-4F99-4A4F-BCF5-61B83A7E2A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"88B5DE37-BE3C-4990-926C-40C179B68A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F830A41C-7442-4A41-AE65-95EFAE083C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"52DE1596-15C9-4697-B607-AD96DB337C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2A1C6F-18F1-4F29-8698-30B31482465C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"50967251-A251-4D2A-805B-9AC8DD7ED564"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D153F840-80F9-44DB-A1A4-6C0DF8F75E00"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"DB349AD0-49F0-4293-AEBD-85AAE7D915FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jscape:secure_ftp_applet:4.7:*:*:*:*:*:*:*","matchCriteriaId":"DAB78588-E150-4E4E-8C56-FBEFDD1FDD34"}]}]}],"references":[{"url":"http://secunia.com/advisories/30822","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4606","source":"cve@mitre.org"},{"url":"http://www.jscape.com/sftpapplet/docs/HTML/index.html?introhistory.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493569/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493652/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29882","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020346","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1919/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jscape.com/sftpapplet/docs/HTML/index.html?introhistory.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493569/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493652/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1919/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43300","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5125","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T00:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin."},{"lang":"es","value":"admin.php en CCleague Pro v1.2 permite a atacantes remotos evitar la autenticación estableciendo el valor de una cookie a admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:castillocentral:ccleague:1.2:*:pro:*:*:*:*:*","matchCriteriaId":"AAB43B64-0543-45C5-A2D1-D4C286F53B20"}]}]}],"references":[{"url":"http://secunia.com/advisories/30796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4604","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29871","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43281","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5888","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5126","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T02:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_query parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en BoutikOne CMS permite a atacantes remotos inyectar web script o HTML a través del parametro search_query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boutikone:boutikone_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"7AD6BCE1-7680-4943-8690-253E1FBA5F32"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0811-exploits/boutikone-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32757","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32321","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46621","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0811-exploits/boutikone-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5127","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T11:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12con.mdb."},{"lang":"es","value":"Ocean12 Contact Manager Pro 1.02 almacena información sensible en la raíz del web con controles de acceso deficientes; esto permite a atacantes remotos obtener información sensible mediante una solicitud directa a o12con.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:contact_manager:1.02:_nil_:pro:*:*:*:*:*","matchCriteriaId":"A7F3B16E-96AA-4347-8294-90AF5FF9127D"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7244","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5128","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T11:30:02.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb."},{"lang":"es","value":"Ocean12 Membership Manager Pro graba información sensible bajo la raíz web con control de acceso insuficiente, el cual permite a los atacantes remotos obtener información sensible a través de una petición directa a fichero o12member.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:membership_manager_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"422C907D-45EF-485A-8DD8-77470EA91231"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46693","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5129","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T11:30:02.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12poll.mdb."},{"lang":"es","value":"Ocean12 Poll Manager Pro v1.00 almacena información sensible bajo la raíz web con control de acceso insuficiente, lo cual permite a atacantes remotos obtener información sensible a través de una petición directa a o12poll.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:poll_manager:1.00:_nil_:pro:*:*:*:*:*","matchCriteriaId":"ED6B4DE6-1F5E-4464-8E74-8A9B52A31779"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46692","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5130","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T11:30:02.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12cal.mdb."},{"lang":"es","value":"Ocean12 Calendar Manager Gold v2.04 almacena información sensible bajo la web raíz con control de acceso insuficiente, lo cual permite a atacantes remotos obtener información sensible a través de una petición directa a o12cal.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:calendar_manager:2.04:_nil_:gold:*:*:*:*:*","matchCriteriaId":"FC2F1E86-E12B-4D27-96B1-492A0F96AC2F"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46694","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5131","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T11:30:02.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter to article_details.php, and the (2) username and (3) password to the admin panel (admin/index.php)."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Develop It Easy News And Article System v1.4; permiten a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro \"aid\" de article_details.php y los parámetros (2) \"username\" (nombre de ususario) y (3) password (contraseña) del panel de administración (admin/index.php)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:develop_it_easy:news_and_article_system:1.4:*:*:*:*:*:*:*","matchCriteriaId":"EEE78702-D54A-4F89-940D-B3650E2A525D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4607","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32144","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46397","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7014","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5132","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T11:30:02.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/ajax/ajax_rating.php en MemHT Portal v4.0.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cabecera HTTP X-Forwarded-For."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"609B2250-7839-44E0-A536-D69CD1F7C400"}]}]}],"references":[{"url":"http://osvdb.org/49903","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4608","source":"cve@mitre.org"},{"url":"http://www.memht.com/news_118_Small-fix-4-0-1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32294","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46610","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7114","source":"cve@mitre.org"},{"url":"http://osvdb.org/49903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.memht.com/news_118_Small-fix-4-0-1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5133","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named."},{"lang":"es","value":"ipnat en IP Filter de Sun Solaris v10 y OpenSolaris anteriores a snv_96, cuando se ejecutan en servidor DNS con traducción de direcciones de red (NAT) configurado cambia el puerto origen de forma incorrecta cuando el puerto destino es el puerto DNS, lo que permite a atacantes remotos evitar e intentar el mecanismo de protección CVE-2008-1447 y espíar las respuestas a solicitudes DNS enviadas por nombre."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"A674E851-57CE-4712-854E-C3DA87D61D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"2DF29037-97A8-4C4C-8602-44922802CB55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245206-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3129","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245206-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5134","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an \"invalid beacon/probe response.\""},{"lang":"es","value":"Desbordamiento de búfer en la función lbs_process_bss en drivers/net/wireless/libertas/scan.c en el subsistema libertas en versiones anteriores a 2.6.27.5 del kernel de linux, permite a los atacantes remotos tener un impacto desconocido a través de un \"respuesta inválida de balizamiento/prueba.\""}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n\nThe issue was addressed in the Linux kernel packages as shipped with Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0053.html","lastModified":"2009-02-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27.4","matchCriteriaId":"39B4877A-8246-487A-9E2E-C9DAF11013BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.kernel.wireless.general/23049","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=48735d8d8bd701b1e0cd3d49c21e5e385ddcb077","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/11/11/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33854","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32484","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470761","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/714-1/","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.linux.kernel.wireless.general/23049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=48735d8d8bd701b1e0cd3d49c21e5e385ddcb077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/11/11/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5135","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file.  NOTE: the vendor disputes this issue, stating \"the insecure code path should only ever run inside a d-i environment, which has no non-root users."},{"lang":"es","value":"** CUESTIONADA ** os-prober de os-prober v1.17, permite a usuarios locales sobrescribir ficheros de su elección mediante un ataque de enlace simbólico en los ficheros temporales (1) /tmp/mounted-map or (2) /tmp/raided-map. NOTA: El vendedor ha impugnado esta vulnerabilidad, argumentando que \"la ruta del código no seguro, sólo tendría que ejecutarse en un entorno d-i sin permisos de administrador\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:os-prober:1.17:*:*:*:*:*:*:*","matchCriteriaId":"9A621241-8EEC-4C67-A067-341EF82EB0B5"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00296.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00296.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5136","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file."},{"lang":"es","value":"tkusr en tkusr v0.82 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/tkusr.pgm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ldrolez:tkusr:0.82:*:*:*:*:*:*:*","matchCriteriaId":"CEC43CD1-323F-4934-8625-2CBA689C1415"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32406","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5137","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/tkman##### or (2) /tmp/ll temporary file."},{"lang":"es","value":"tkman en tkman v2.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales (1) /tmp/tkman##### o (2) /tmp/ll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tkman:tkman:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FAABAA7C-74A5-42DB-AE30-8972881D0B5C"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32407","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5138","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file."},{"lang":"es","value":"passwdehd en libpam-mount v0.43 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque symlink en un fihero temporal /tmp/passwdehd.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bkleineidam:libpam_mount:0.43:*:*:*:*:*:*:*","matchCriteriaId":"DAA6A07E-A613-4823-8CBC-53C1666A2000"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46724","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5139","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/#####.updatejail temporary file."},{"lang":"es","value":"updatejail en jailer 0.4 permite a los usuarios locales sobrescribir ficheros arbitrarios a través de un ataque de enlace simbólico en el archivo temporal /tmp/#####.updatejail"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:javier_fernandez:jailer:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0C2C459-84BF-45DA-BFA4-5E09934C61A3"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32943","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32959","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1674","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32413","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5140","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file."},{"lang":"es","value":"trend-autoupdate.new en mailscanner versiones 4.55.10 y otras anteriores a 4.74.16-1, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de tipo symlink en un archivo temporal (1) /tmp/opr.ini.##### o (2) /tmp/lpt*.zip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:mailscanner:4.55.10:*:*:*:*:*:*:*","matchCriteriaId":"5181B58B-FD88-4633-AD84-B259FC4EEDD1"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mailscanner.info/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32376","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46725","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mailscanner.info/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5141","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar.##### temporary file."},{"lang":"es","value":"flamethrower en flamethrower v0.1.8 permite a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlace simbólico en un fichero temporal /tmp/multicast.tar.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dann_frazier:flamethrower:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"21826C7F-C86A-4070-BE75-E3134C929E2B"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506350","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32961","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1676","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32386","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46717","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5142","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr.##### temporary file."},{"lang":"es","value":"sendbug en freebsd-sendpr v3.113+5.3 en Debian GNU/Linux permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/pr.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freebsd:freebsd-sendpr:3.113\\+5.3:*:*:*:*:*:*:*","matchCriteriaId":"9A8B142B-0C60-4AC7-8B2B-8BE010E3D060"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32381","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5143","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.debug or (2) /tmp/*.env temporary file."},{"lang":"es","value":"mgt-helper en multi-gnome-terminal v1.6.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales: (1) /tmp/*.debug y (2) /tmp/*.env."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mohammed_sameer:multi-gnome-terminal:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DF74EFEA-7795-49E8-9642-940452100729"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32415","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5144","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file."},{"lang":"es","value":"nvidia-cg-toolkit-installer de nvidia-cg-toolkit v2.0.0015, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/nvidia-cg-toolkit-manifest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:federico_di_gregorio:nvidia-cg-toolkit:2.0.0015:*:*:*:*:*:*:*","matchCriteriaId":"BD10B023-5B6D-4B9B-9CB0-FF7867AA3A9D"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32411","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5145","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file."},{"lang":"es","value":"ltpmenu en ltp 20060918 permite a los usuarios locales sobrescribir archivos arbitrarios a través de un ataque de enlace simbólico en los archivos temporales /tmp/runltp.mainmenu.#####"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:ltp:20060918:*:*:*:*:*:*:*","matchCriteriaId":"93C222CB-64BD-4E6B-BEFC-FDCB4F7A3B15"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32414","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46715","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5146","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file."},{"lang":"es","value":"add-accession-numbers en ctn v3.0.6 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólicoen el fichero temporal /tmp/accession."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erl_wustl:ctn:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"25764469-4A46-4A23-8A98-2FD29B45E67F"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5147","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file."},{"lang":"es","value":"test-pipe-to-pyodconverter.org en docvert 2.4 permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlaces simbólicos en el archivo temporal /tmp/outer.odt"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:holloway:docvert:2.4:*:*:*:*:*:*:*","matchCriteriaId":"77913E85-8340-42CA-95F6-E59179BDCCB5"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46713","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5148","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file."},{"lang":"es","value":"sch2eaglepos.sh en geda-gnetlist 1.4.0 permite a los usuarios locales sobrescribir arbitrariamente archivos a través de un ataque de enlace simbólico en un archivo temporal /tmp/#####"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geda:gnetlist:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CE403368-3CFA-4D59-94B4-CD4E0D6D3A28"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32875","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00431.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00475.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00475.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5149","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file."},{"lang":"es","value":"fwd_check.sh de libncbi6 v6.1.20080302 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal /tmp/#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aucko:libncbi6:6.1.20080302:*:*:*:*:*:*:*","matchCriteriaId":"591127D0-57D9-4C4F-98CB-C45FAA113778"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32401","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5150","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file."},{"lang":"es","value":"sample.sh en maildirsync v1.1 permite a usuarios locales añadir información a ficheros de su elección mediante un ataque de enlace simbólicoto en un fichero temporal /tmp/maildirsync-*.#####.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jose_carlos_medeiros:maildirsync:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0D0811FD-D599-4905-B494-B7A33028EB16"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46711","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5151","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"test_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file."},{"lang":"es","value":"test_parser.py en mayavi v1.5 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/err.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abottoms:mayavi:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F4550F04-3ABB-44CD-936E-97B5195458FC"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5152","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file."},{"lang":"es","value":"inmail-show en mh-book 200605 permite a los usuarios locales sobrescribir ficheros arbitrarios a través de un ataque de enlaces simbólicos en archivos temporales (1) /tmp/inmail#####.log o (2) /tmp/inmail#####.stdin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_s_galbraith:mh-book:2000605:*:*:*:*:*:*:*","matchCriteriaId":"25C085EF-BE46-4D4F-A354-4A85079E6C08"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32399","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46709","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5153","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file."},{"lang":"es","value":"spell-check-logic-cgi en Moodle v1.8.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en los ficheros temporales: (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, y (3) /tmp/spell-check-after."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33955","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32402","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46708","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5154","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file."},{"lang":"es","value":"bluetooth.rc en p3nfs v5.19 permite a usuarios locales sobreescribir archivos a su elección a traves de un ataque de enlace simulado en el fichero temporal /tmp/blue.log"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:koeniglich:p3nfs:5.19:*:*:*:*:*:*:*","matchCriteriaId":"1215EC2F-D687-4BBE-9EA9-102CE259EE05"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32818","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46707","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5155","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/body.##### temporary file, or append data to arbitrary files via a symlink attack on the (3) /tmp/sms.log temporary file."},{"lang":"es","value":"mail2sms.sh de smsclient v2.0.8z, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal (1) /tmp/header.##### o (2) /tmp/body.#####, o incluyendo los datos en ficheros de su elección mediante un ataque de enlace simbólico en el fichero temporal (3) /tmp/sms.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smsclient:smsclient:2.0.8z:*:*:*:*:*:*:*","matchCriteriaId":"D29AF9B2-DDA8-4D64-BDF5-0D3FC86C9F0F"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32405","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5156","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"si_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.inetd.conf or (2) /tmp/pxe.conf.*.tmp temporary file."},{"lang":"es","value":"si_mkbootserver en systemimager-server 3.6.3 permite a los usuarios locales sobrescribir arbitrariamente archivos a través de un ataque de enlace simbólico en archivos temporales(1) /tmp/*.inetd.conf o (2) /tmp/pxe.conf.*.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dann_frazier:systemimager-server:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"A6955194-B2BE-4346-AA44-6BC3374530B7"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32370","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5157","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T16:00:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/makefile.tau.*.##### or (2) /tmp/makefile.tau*.##### temporary file, related to the (a) tau_cxx, (b) tau_f90, and (c) tau_cc scripts."},{"lang":"es","value":"tau v2.16.4, permite a ausuarios locales sobreescribir ficheros de su elección a través de un ataque de enlace simbólico sobre (1) /tmp/makefile.tau.*.##### o el fichero temporal (2) /tmp/makefile.tau*.#####, relacionados con  las secuencias de comandos(a) tau_cxx, (b) tau_f90, y(c) tau_cc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uoregon:tau:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"8BCD8E69-4ECE-4C30-90E2-8C546620949C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506348","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32404","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46704","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5158","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T21:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving \"simply skipping the auth stage.\""},{"lang":"es","value":"aplicación Client Software WinCom LPD Total v3.0.2.623 y anteriores, permite a atacantes remotos evitar la autenticación y realizar acciones de administrador a través de vectores que involucran \"simply skipping the auth stage.\" (simplemente evitar el paso de autenticación)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clientsoftware:wincome_mpd_total:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2.623","matchCriteriaId":"66AD5DD7-ADE0-46C8-84B7-17A3C476F223"}]}]}],"references":[{"url":"http://aluigi.org/adv/wincomalpd-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/wincomalpd.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4610","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487507/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27614","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0410","source":"cve@mitre.org"},{"url":"http://aluigi.org/adv/wincomalpd-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/wincomalpd.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487507/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5159","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T21:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption."},{"lang":"es","value":"Desbordamiento de entero en el protocolo de administración remota en  Client Software WinCom LPD Total v3.0.2.623 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una cadena larga con un argumento de gran longitud que lanza una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clientsoftware:wincome_mpd_total:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2.623","matchCriteriaId":"66AD5DD7-ADE0-46C8-84B7-17A3C476F223"}]}]}],"references":[{"url":"http://aluigi.org/adv/wincomalpd-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/wincomalpd.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4610","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487507/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27614","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0410","source":"cve@mitre.org"},{"url":"http://aluigi.org/adv/wincomalpd-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/wincomalpd.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487507/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5160","sourceIdentifier":"cve@mitre.org","published":"2008-11-18T21:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a \"204 No Content error.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en MyServer v0.8.11, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de múltiples peticiones HTTP GET, DELETE, OPTIONS,  inválidas y posiblemente con otros métodos, relacionados con un \"204 No Content error.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myserver:myserver:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"DE5F0D87-E0D4-434E-9AA7-AF7E1AEC0999"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4609","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5184","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5161","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T17:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://securitytracker.com/alerts/2008/Nov/1021235.html\n\nCBC mode connections are affected","evaluatorSolution":"With a valid username and password patches are available at the following link:\nhttps://downloads.ssh.com/","cveTags":[],"descriptions":[{"lang":"en","value":"Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors."},{"lang":"es","value":"Error en el manejo del protocolo SSH en (1) SSH Tectia Client y Server y Connector 4v.0 a la v4.4.11, v5.0 a la v5.2.4, y v5.3 a la v5.3.8; Client y Server y ConnectSecure v6.0 a la v6.0.4; Server para Linux sobre IBM System z v6.0.4; Server para IBM z/OS v5.5.1 y anteriores, v6.0.0, y v6.0.1; y Client v4.0-J a la v4.3.3-J y v4.0-K a la v4.3.10-K; y (2) OpenSSH v4.7p1 y posiblemente otras versiones, cuando usan un  algoritmo de bloque  cifrado en el modo Cipher Block Chaining (CBC), facilita a los atacantes remotos el conseguir cierta información en texto plano desde cualquier bloque de texto cifrado de su elección en una sessión SSH mediante vectores de ataque desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed for Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1287.html\n\nAfter reviewing the upstream fix for this issue, Red Hat does not intend to address this flaw in Red Hat Enterprise Linux 3 or 4 at this time.","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.7p1:*:*:*:*:*:*:*","matchCriteriaId":"3B042083-6D26-4A91-B3F6-E6D46266FF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6693DC2D-CDA1-4E37-9569-58874F55A48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16CDE975-9E08-493B-9385-3EC2CABC4A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A63EA6B-2400-48C4-924D-3509971CCBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0658F08E-2596-4D8E-91AA-44A9DBE8F151"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"74169893-A34F-49FB-8C83-36C4AA808925"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.2:*:*:*:*:*:*:*","matchCriteriaId":"013E94CC-AF68-44D0-826F-28B1825A8DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C9981E30-0D54-4464-8287-E450E7E8F770"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3:*:*:*:*:*:*:*","matchCriteriaId":"4ED17577-F56D-48DF-8863-B4FF039C47D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B74A91E2-C93E-49F4-B349-8E4CEC285C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.1j:*:*:*:*:*:*:*","matchCriteriaId":"FBF7244A-BFF7-4C7C-82FF-6B53236DB86D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5BADA4CC-FC94-427A-AF93-9AAFDAADDB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.2j:*:*:*:*:*:*:*","matchCriteriaId":"1356E837-2CF3-4AF9-80DD-FA2A97B3B2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8F1D6B7F-8B52-42C0-8613-740CACFB3463"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D5024EC6-2A47-4ACE-A661-B78D314C7D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FA64A6E8-0EB7-4BCA-A7AA-245A466C2F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"5058DC44-835D-4BD9-B550-E5CB22F6475F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"23ED4911-6CF5-4562-B421-A328D7BE0291"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.8k:*:*:*:*:*:*:*","matchCriteriaId":"E7F3388A-39FA-4A3A-819A-764A16AAEB54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.3.9k:*:*:*:*:*:*:*","matchCriteriaId":"C90B0480-C558-41BD-A16C-AD63DA1C09C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4:*:*:*:*:*:*:*","matchCriteriaId":"81DDF3D8-35EA-4677-B1AC-1CA674EEBCD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F37366E9-F1B6-4458-AE1C-790405AC8740"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8C727829-5E3A-41F6-BAB3-01AED39674D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"1CF57477-FB53-49CC-BAD4-CDC0FD9363F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"65FB72FC-37EE-4D42-893E-9C0924EEA2E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"D863ED8D-2B63-4497-B250-6AFA29D6D9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D2BF5D4C-DFF8-4094-82A6-A1302169CD43"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"F5C5413C-47F1-4E3B-B618-2AECECA780FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"490A294D-AB7C-45C2-B887-1C3D2992AD91"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"43712853-9002-4778-9036-754262880B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"41A83090-D05D-40DD-AA29-F032CC165A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C5BCE145-44F4-4FED-8936-3AEBF8B38357"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"888C2DE3-2874-4310-9584-3AC96A82C306"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB6587AA-E91D-4194-81D0-FCF1AA382CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"237D84A0-3FC3-4CFD-9454-ACD9E42DCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A6B2C7F5-8182-48B8-AA8A-C0F45978D3D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"F5EAC7A0-CD7D-4AE9-8421-9CDFFD073B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"17855D5D-BDF5-48D3-9D71-694A3D41A826"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.0.3f:*:*:*:*:*:*:*","matchCriteriaId":"3915E4A8-6CCF-44A3-85B9-70651137C084"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0A5DEDB4-7E16-4356-B080-09BCDA68772F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC9DBDC7-DDF0-4596-84BC-E4E05F47F938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"36FA61F9-CE29-47B0-AF2A-B1045A59018E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9B338837-6346-48FC-A4D7-011EC20ACF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8644D458-786D-4310-BAA8-40B2E27EA966"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4746C2E-91B1-4341-9CCD-78191BDF9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5F3FCC3E-F3D5-4F90-B64F-85576E8B776B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"17672CBB-A79F-4B91-9B01-193F960A4611"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"177E5CE0-A518-447F-9397-FC527E367077"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5C808743-BFAF-4BB4-B0F0-13DF2C7D5531"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FB90715C-E50C-4682-8C94-DE5CBCAA9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6A8F8009-3586-4989-B180-2F46503DA59B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"44DDAAA8-185D-47FE-8434-E2FC000BD926"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"F2E5D670-FB1F-4560-A5A0-149FB4FCD2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"49A0662D-9356-4DC9-8082-58DBEE5C65FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"4E858413-3408-4A77-B56D-5016959FC690"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"CFFB475D-7996-48B3-8886-9000C6230414"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5E56BFE1-044A-45AC-BF9C-C0CFBD2F8C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E72BBCB-636C-4939-90B7-308223E433EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5884968-F218-4CD4-AD4B-4C0CD26EF674"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"56FD197E-27E9-4AF4-8A84-E1D0A7FD14DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_client:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DCD63A2-B666-4F5E-9D17-ED38B0BF973C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"63E32B6A-AF41-4AEA-B55B-52B821106D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC18FBF-1C2E-4D2F-9D3C-C6578CCBDB50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0824B78E-EB43-4D74-9062-79D0F273B06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"0A76B02F-C2C8-4A35-A60A-EC74F43B8895"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CD470B-274F-421C-AD4D-6D076935D741"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C30FE48E-857E-441C-B497-B6E541D2913F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1A813EED-25AC-4191-92E8-58C1BC7D1E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8719CEF9-6753-495B-9ACB-9E323CB7BCDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"553D3277-1B91-4998-A610-7E5D3E2C1413"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"17886B3D-394C-4C94-93B2-FAB23B45C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7584F9C5-41E9-4F84-9849-B5D604BB55A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"00008DAA-F66D-484B-941B-944F3E684981"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"EEF4DE0B-ED77-49CE-AE0C-2AF2AE35FB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"38EF9A76-6D83-4C99-A1DE-DC7E5AF28731"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"3C13F8DE-007E-467E-9872-9C4A951F1EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"698824F0-DDFA-4469-8D42-59A56ACD6B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30A3B9E9-3643-443B-A19A-2AE989832C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F86A43A5-0906-405E-B3D0-250DA24A9093"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3126AFB2-A043-4C51-8402-D36D2F62AA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00D37C5-5C79-46F9-97B7-555E48C53796"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"55A817B6-CD13-4E0A-99DD-C5C39DF04C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C6F7054-6EDF-4F25-945E-E24F00A4A2B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"16BEBCBF-8826-4451-9B6B-802BD8A4FA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"59F1EE63-6CF7-440D-BC5B-23D721996275"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5C446EEE-3D06-485D-A031-2DA2A6501712"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7F90B0C0-1CA9-47F8-B603-D6C15CF33352"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D7292ADB-5D2C-4569-93B5-76125D71E3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2810AD0C-4C6F-4B07-8D72-2D640219AE82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"06C3FAFB-90D2-4C6D-A210-27297926433E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connector:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"78E26C82-CA31-4EBB-9635-D895B04D90E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connectsecure:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"170C4ADE-68C7-4F73-BD64-800D8E07F5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connectsecure:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7FB022A4-BFF0-4154-A8B6-C38B6C09A1BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connectsecure:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"026CCB02-C710-4AEA-B002-852AD4A3DCDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connectsecure:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02ACCEFF-1301-4118-BFCA-877F7A1D84B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_connectsecure:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"625EE79F-33C9-4272-A37C-F82921950EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3E4480D2-1B5C-443D-8D7F-976885C33BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"795DEA94-79D6-4132-B205-AB098E92216A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CD05A3E8-105D-4712-8BBE-2D5CF4F78890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8D6691FF-77F2-4AE3-B49F-BFB8744AD046"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E58648AC-7288-46EC-B2BB-0805626BA31C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3F8A31AD-D2E8-45DC-BF80-BD102B1FBC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62FBDA08-566F-4D21-8186-4A287FD2F107"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"8B1DB64D-028A-422F-B106-873A45789A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"12509D69-71AF-48AF-986F-04A7E248011A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"075B6E8D-4C4B-4E98-94C6-52B842BE65FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BEDF9DB2-6C3D-4BF5-BF55-818C3932CF93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3:*:*:*:*:*:*:*","matchCriteriaId":"27B99F6E-712C-4205-9185-26F543EFC881"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F31FAA8F-EE03-4A7F-B0DE-BB4CE998FEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0AF0262B-1451-40CA-9DD1-F2DEA793BD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C27E0224-9431-49EF-8B32-850CDF6FFFE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"88A88A21-7427-4452-8C2A-6C31542FA83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A3DCEAA0-509A-4978-BE53-0CBE084366FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3203DC73-05F2-4A28-9E62-3D87B482586A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9BDA1AAC-3FCF-47D8-A6B4-9DB0D776CE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"64F4CDF1-695A-4677-A829-74BB365BF4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4:*:*:*:*:*:*:*","matchCriteriaId":"BBEF55DD-FC87-42A3-9DAF-9862AA9649CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61188360-C55E-47AD-8C3E-043689249DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5A5BCE08-8940-4658-A4D7-5CAD33D3751C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC0FA974-7671-4FB7-BB36-274B5970EBAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"011F841A-4F1B-49B2-B379-9FE126141568"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"B3C54819-CF51-4BBE-873F-4A0E2072D10F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"743C5472-860C-48A6-AED7-BB00B6E91440"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2094ACB3-635A-437D-AF0E-4BFEB496EDF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"40BE9A01-DEE5-4CD4-8C01-6689707A47EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"2838C7E9-F247-491B-AAD1-680927044C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.10:*:*:*:*:*:*:*","matchCriteriaId":"EAB99E2A-AF4D-4436-9C4F-EB043F8D16A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:4.4.11:*:*:*:*:*:*:*","matchCriteriaId":"86E5680C-2E57-4BFA-9D60-B560BA819039"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"83D8769C-E438-4805-955A-4EA7A274F036"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3B2E96C8-F8F8-4002-B242-3ADDF1E84B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D2ADC814-3F33-47F6-AE27-7233F5D337AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B56052F-6768-41D6-9E91-F1377EB4E122"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9803DD4B-C48D-45EA-8154-C1C626DBDED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"702A52AE-4E48-4138-8856-9EBE5A8DA964"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.1.1:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"B8C108AB-0C7C-4B58-8B54-C92C95A6B65D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"509B3B08-533C-46CE-B53F-5A2BFC553C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F0F992DB-F70C-4473-8C33-B5F59BD83A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"84D8E570-70B9-42CF-9764-238AAF6B380F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.0:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"9E582465-CC4A-4827-8C1F-548F01D6FCF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.1:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"60515678-F93E-46CC-94EF-0EF9B2091D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4054251B-98C7-4AC9-B610-BA0EB250972C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.2:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"5B4AC671-C67D-46EC-9FB2-720F0DC3D4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6A93E9C5-91A4-4FC1-871B-ECE0E0FAFAA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"958F4FB0-C7DA-48D8-9500-A4A43ED807E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D772EE8-FB18-4431-89D8-FAF42797A2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.0:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"A3A30FB0-35AB-4CF2-B74D-68015044770B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"75DA0AC9-E2BF-40C7-B970-43D0283FCC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EA26CDDC-24FD-4FFD-BA5E-79F55BC8DA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1003EDA5-E22E-4A4E-A289-660E823EE71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"844003FE-63E9-4E2F-83E6-02798B753FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"7ED73DCC-6501-4DA8-B0C0-45F1A6E97BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"711A3119-3390-48A9-8579-1D768D66386D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"798BE0FE-52F1-4283-8A0D-3E769A3752C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9F77CD27-4E7E-4B4A-9363-FC87B611338A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.4.0:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"09B1AFF1-4F5D-42F0-A3A7-91BB9854B561"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.4.1:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"01872E42-E249-48AB-9259-FF3B0F3CAA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.4.2:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"B73B06FD-3452-4900-AE09-44172A1EF174"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.5.0:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"DC126AA4-30B6-429B-A981-E4F0BCE03DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:5.5.1:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"1932FFE5-DC06-4560-ADA7-4C993B8A880D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"67BA8F3E-57F3-4388-8CD0-431AAA8DDB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.0:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"2BDEED3F-3936-429C-957E-9E3EE455445C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"71C39323-60AF-4CB5-BA5A-1F45353614F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.1:*:ibm_zos:*:*:*:*:*","matchCriteriaId":"3FE3D768-A3CF-422A-9EE2-6256E3ADDBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6D8E4B95-A551-4839-995F-5667CD215540"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8B474CD5-DEC0-49DB-992D-658A3C573982"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DB98ADBD-7FBB-4495-A71B-8EF9A6EAC33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:tectia_server:6.0.4:*:linux_ibm_zos:*:*:*:*:*","matchCriteriaId":"356A4B29-4BE7-4D33-8B64-CECCA6C24FAF"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5366","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"cve@mitre.org"},{"url":"http://openssh.org/txt/cbc.adv","source":"cve@mitre.org"},{"url":"http://osvdb.org/49872","source":"cve@mitre.org"},{"url":"http://osvdb.org/50035","source":"cve@mitre.org"},{"url":"http://osvdb.org/50036","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1287.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36558","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://support.attachmate.com/techdocs/2398.html","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm","source":"cve@mitre.org"},{"url":"http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/958563","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498558/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498579/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32319","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021235","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021236","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021382","source":"cve@mitre.org"},{"url":"http://www.ssh.com/company/news/article/953/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3172","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3173","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3409","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1135","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46620","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10106","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10163","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=5366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssh.org/txt/cbc.adv","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/958563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498558/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498579/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ssh.com/company/news/article/953/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5162","sourceIdentifier":"secteam@freebsd.org","published":"2008-11-26T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator."},{"lang":"es","value":"La función arc4random en el kernel enFreeBSD 6.3 a 7.1 no tiene una adecuada fuente de entropía durante un corto período de tiempo inmediatamente después del arranque, lo cual hace más fácil para los atacantes predecir los valores de retorno de la función y llevar a cabo ciertos ataques contra el GEOM framework y diversos protocolos de red en relación con el generador de números aleatorios Yarrow."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4","versionEndExcluding":"7.0","matchCriteriaId":"62111AD4-A714-4D00-A501-D3D304BD687C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:-:*:*:*:*:*:*","matchCriteriaId":"2D9F4FEB-30E5-4EF6-BEB6-0F1A4DE7EFB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p1:*:*:*:*:*:*","matchCriteriaId":"BB6FC258-9735-4199-9499-ACFCEF30EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p2:*:*:*:*:*:*","matchCriteriaId":"BA825CA5-84B6-4DA4-9F7F-644E532185A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p3:*:*:*:*:*:*","matchCriteriaId":"90B64FDC-01C0-4A83-827D-31F477C0359B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p4:*:*:*:*:*:*","matchCriteriaId":"6C826F67-CA6D-4DA4-B5E9-9F4FEFE3D6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p5:*:*:*:*:*:*","matchCriteriaId":"D5666E87-F0CB-45FA-9AED-C7A0F383A559"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:-:*:*:*:*:*:*","matchCriteriaId":"1EA45D5C-199D-44A1-90B1-1157F899A01A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p1:*:*:*:*:*:*","matchCriteriaId":"06C1FB6A-E829-4FF3-B206-8877C9747DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p3:*:*:*:*:*:*","matchCriteriaId":"F3A3BF88-7014-440D-8AC2-FB42A779F489"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p4:*:*:*:*:*:*","matchCriteriaId":"777E9236-AD46-484F-BC22-7F74AB6261F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p5:*:*:*:*:*:*","matchCriteriaId":"4D308A1E-5364-483D-AB82-8269D576CEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:-:*:*:*:*:*:*","matchCriteriaId":"93078B0C-2CA2-4A9C-A740-9947074F837C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p1:*:*:*:*:*:*","matchCriteriaId":"A6993EAC-AC35-4E5F-AF40-8E105CC0B34A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p10:*:*:*:*:*:*","matchCriteriaId":"1B0B829D-2160-4927-8896-C02D9593D9B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p12:*:*:*:*:*:*","matchCriteriaId":"87D5CC07-6D6C-4015-8EFA-D6A107E2E311"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p13:*:*:*:*:*:*","matchCriteriaId":"DA0358B5-0CD5-484D-AEAB-15B757F8DCC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p14:*:*:*:*:*:*","matchCriteriaId":"7932D1B4-CCC3-425E-B7D4-DD55331B0BCB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p15:*:*:*:*:*:*","matchCriteriaId":"86F07F8F-DA28-4905-B04E-303D4CF1430A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p16:*:*:*:*:*:*","matchCriteriaId":"816C8B21-94CD-4BC5-B425-0343FB4148B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p2:*:*:*:*:*:*","matchCriteriaId":"6F7B4C7E-ACD2-4450-A179-4526DF58DDF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p3:*:*:*:*:*:*","matchCriteriaId":"75D904EC-C9CD-438B-B9BE-B4B4C370761C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p4:*:*:*:*:*:*","matchCriteriaId":"71B49898-6E1C-4629-832C-787B8B205403"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p5:*:*:*:*:*:*","matchCriteriaId":"250A24F5-FE83-488C-9D07-C35E6D718BFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p6:*:*:*:*:*:*","matchCriteriaId":"55D7B8E3-25CB-4AEB-BF1B-EA115A19E762"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p7:*:*:*:*:*:*","matchCriteriaId":"FCEDB8D4-E96C-430C-AEFD-F20D25AAD097"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p8:*:*:*:*:*:*","matchCriteriaId":"E644315A-04C5-45AB-A814-BB5A6B8C93D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:p9:*:*:*:*:*:*","matchCriteriaId":"C666F892-19C7-4351-ACD1-A48048F2F234"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52DBF406-9C77-4DDA-AB7D-40FAE40023D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc2:*:*:*:*:*:*","matchCriteriaId":"6E04B0A6-E6AD-4C44-BEED-7BB7EC58A0A8"}]}]}],"references":[{"url":"http://osvdb.org/50137","source":"secteam@freebsd.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32871","source":"secteam@freebsd.org","tags":["Broken Link"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc","source":"secteam@freebsd.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021276","source":"secteam@freebsd.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32447","source":"secteam@freebsd.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/50137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/32871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5163","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewarticle.php and (2) viewarticle2.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en The Rat CMS Pre-Alpha 2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" a (1) viewarticle.php and (2) viewarticle2.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theratstudios:the_rat_cms:2:pre_alpha:*:*:*:*:*:*","matchCriteriaId":"F06A1E0D-56DC-493D-B9C6-F771165FDAED"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4612","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493684/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29959","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43377","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493684/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5164","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) viewarticle.php and (b) viewarticle2.php and the (2) PATH_INFO to viewarticle.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en The Rat CMS Pre-Alpha 2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) id a (a) viewarticle.php y(b) viewarticle2.php, y (2) PATH_INFO a viewarticle.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theratstudios:the_rat_cms:2:pre_alpha:*:*:*:*:*:*","matchCriteriaId":"F06A1E0D-56DC-493D-B9C6-F771165FDAED"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4612","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493684/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29959","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43378","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493684/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5165","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1) index.php, (2) open.php, (3) open_raw.php, and (4) newticket.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en eTicket v1.5.7, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pri\" a 1) index.php, (2) open.php, (3) open_raw.php, y (4) newticket.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eticket:eticket:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"89ADB334-7671-40FD-891E-F039B3AA043B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket2.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29973","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020379","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43398","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-eticket2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5166","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en riddle.php en Riddles Website v1.2.1, permite a atacantes remoto ejecutar comandos SQL de su elección a través del parámetro \"riddleid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:riddles_website:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B401D6AB-C036-4DBC-8D38-88C92E312057"}]}]}],"references":[{"url":"http://secunia.com/advisories/30862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4615","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29966","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5946","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5167","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConf[dir][layouts] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión repota de fichero  PHP en layout/default/params.php en Boonex Orca v2.0 y v2.0.2, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"gConf[dir][layouts]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boonex:orca:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E979BBA5-14C9-4731-8B5F-B5E07C5EA579"},{"vulnerable":true,"criteria":"cpe:2.3:a:boonex:orca:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"26F47C0E-2D9B-4F3A-B69C-BF2ABBD21A30"}]}]}],"references":[{"url":"http://secunia.com/advisories/30855","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4616","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29974","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5955","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6282","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5168","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL commands via the tipid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tip.php en Tips Complete Website v1.2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"tipid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:tips_complete_website:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D8402C7D-E404-4E51-9BC1-59B91BDDC652"}]}]}],"references":[{"url":"http://secunia.com/advisories/30861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4614","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29967","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43401","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5947","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5169","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbitrary SQL commands via the drinkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en drinks/drink.php en Drinks Complete Website v2.1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"drinkid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:drinks_complete_website:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B0EA2E37-2F1A-4B2A-A2E9-7EC9BE9F41EE"}]}]}],"references":[{"url":"http://secunia.com/advisories/30859","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4617","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29969","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43397","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5170","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en item.php en Cheats Complete Website v1.1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"itemid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:cheats_complete_website:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"071F6A0E-E472-4D35-A3E5-AE07452F3F7A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30838","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29970","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5950","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5171","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) DB, (2) lang, and (3) skin parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en admin/minibb/index.php en phpBLASTER CMS v1.0 RC1, cuando register_globals está activado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en los parámetros (1) DB, (2) lang, y (3) skin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpblaster:phpblaster_cms:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"38C21A92-E0BA-4B68-A073-61469AA99705"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5952","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5172","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to (a) search.jsp, and the (2) msg parameter to (b) error.jsp and (c) userAccount.jsp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en Yazd Forum Software v3.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) q a (a) search.jsp, y (2) msg a (b) error.jsp y (c) userAccount.jsp. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forumsoftware:yazd_forum_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3FB8CD50-772D-43DB-A594-C5081AEFB311"}]}]}],"references":[{"url":"http://secunia.com/advisories/30760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29980","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5173","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:49.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en testMAker anterior a v3.0p16, permite a usuarios autenticados remotamente ejecutar código PHP de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0p15","matchCriteriaId":"D499FAE2-0940-4C49-831B-426E4B520E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p3:*:*:*:*:*:*:*","matchCriteriaId":"9A48ABB1-7B11-4670-958D-F3C4B7CCF407"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p4:*:*:*:*:*:*:*","matchCriteriaId":"F756722F-C4F2-4F12-886B-4749894C9C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p5:*:*:*:*:*:*:*","matchCriteriaId":"3B7FFA50-6F5D-4A52-A7AD-162FCA8A2535"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p6:*:*:*:*:*:*:*","matchCriteriaId":"9F242AFA-9F68-4DAD-BAE1-6EBBB2589163"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p7:*:*:*:*:*:*:*","matchCriteriaId":"5CAEDFCE-DBA9-4A09-9C49-A8E7A6A9060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p8:*:*:*:*:*:*:*","matchCriteriaId":"ADF6486D-BAC5-45A8-8852-83460059B135"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p9:*:*:*:*:*:*:*","matchCriteriaId":"16A4365A-0AC2-46D9-B4E1-BFC98AC64582"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p10:*:*:*:*:*:*:*","matchCriteriaId":"39C20268-595C-477E-9FB8-6D6DC7305115"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p11:*:*:*:*:*:*:*","matchCriteriaId":"01A38FB4-49EE-4733-A108-3DB6B01522C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p12:*:*:*:*:*:*:*","matchCriteriaId":"A3D61BB4-750D-4756-8482-336A03CFA329"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p13:*:*:*:*:*:*:*","matchCriteriaId":"8414E648-DD1B-4397-8660-5D30705B02D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:testmaker:testmaker:3.0p14:*:*:*:*:*:*:*","matchCriteriaId":"9E015276-2BF2-46F3-8FB7-77B1CAADC583"}]}]}],"references":[{"url":"http://secunia.com/advisories/30870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=609679","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29978","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43403","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=609679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5174","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:50.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQL commands via the jokeid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en joke.php en Jokes Complete Website v2.1.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"jokeid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:jokes_complete_website:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"29E40D52-0E6D-4CD2-A2CF-E09BDEF57152"}]}]}],"references":[{"url":"http://secunia.com/advisories/30860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4613","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29968","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43425","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5175","sourceIdentifier":"cve@mitre.org","published":"2008-11-19T18:11:50.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el cliente FTP en AceFTP Freeware v3.80.3 y AceFTP Pro v3.80.2, permite a servidores FTP remotos crear y modificar fichero de su elección a través de ..(punto punto) en las respuestas a los comandos LIST. Relacionada con el CVE-2002-1345."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visicommedia:aceftp:3.80.3:_nil_:freeware:*:*:*:*:*","matchCriteriaId":"7198DE90-0B08-4CD4-B9C4-27C6188A3AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:visicommedia:aceftp:3.80.3:_nil_:pro:*:*:*:*:*","matchCriteriaId":"573E51A3-51EE-4725-AB13-932E9985C293"}]}]}],"references":[{"url":"http://secunia.com/advisories/30792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/aceftp3803-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29989","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1954/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/aceftp3803-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1954/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5176","sourceIdentifier":"cve@mitre.org","published":"2008-11-20T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515."},{"lang":"es","value":"Multiples desbordamientos de bufer en Client Software WinCom LPD Total v3.0.2.623 y anteriores que permite a atacantes remotos ejecutar codigo a su eleccion a traves de (1) un comando largo 0x02 al servicio de administracion remoto en el puerto TCP 13500 o (2) un fichero de control largo invalido a LPDService.exe en el puerto 515 TCP ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clientsoftware:wincom_mpd_total:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2.623","matchCriteriaId":"12DF9E27-4035-4901-9681-C8FFE3C35434"}]}]}],"references":[{"url":"http://aluigi.org/adv/wincomalpd-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/wincomalpd.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4610","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487507/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27614","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0410","source":"cve@mitre.org"},{"url":"http://aluigi.org/adv/wincomalpd-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/wincomalpd.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487507/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5177","sourceIdentifier":"cve@mitre.org","published":"2008-11-20T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"http://www.insight-tech.org/index.php?p=Yosemite-backup-8-7-DtbClsLogin-Buffer-Overflow-Vulnerability\r\n\r\n\"There exists a vulnerability within a function in Yosemite Backup 8.7 which leads to remote compromise of the vulnerable system if properly exploited.\r\nThe vulnerability affects both Linux/Windows versions of Yosemite Backup 8.7.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a Linux platform, related to libytlindtb.so; or (2) cause a denial of service (application crash) and possibly execute arbitrary code on a Windows platform, related to ytwindtb.dll; via a long username field during authentication."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función DtbClsLogin en Yosemite Backup v8.7 que permite a atacantes remotos (1) ejecutar código a su elección desde una plataforma Linux, relacionado con libytlindtb.so; o (2) producir una denegacion de servicio (caída de aplicación) y posiblemente una ejecución de código a elección del atacante a través de una plataforma Windows, relacionado con ytwindtb.dll; a través del campo de nombre usuario largo durante la autenticación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insight-tech:yosemite_backup:8.7:*:*:*:*:*:*:*","matchCriteriaId":"64DFEFC8-F6B1-471A-BBBB-3F4C8C0E6E7B"}]}]}],"references":[{"url":"http://osvdb.org/49743","source":"cve@mitre.org"},{"url":"http://osvdb.org/49744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Yosemite-backup-8-7-DtbClsLogin-Buffer-Overflow-Vulnerability","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://www.insight-tech.org/xploits/yosemiteStackOverflowExploit.zip","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/32246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46515","source":"cve@mitre.org"},{"url":"http://osvdb.org/49743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Yosemite-backup-8-7-DtbClsLogin-Buffer-Overflow-Vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://www.insight-tech.org/xploits/yosemiteStackOverflowExploit.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/32246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5178","sourceIdentifier":"cve@mitre.org","published":"2008-11-20T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.  NOTE: this might overlap CVE-2008-5680."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Opera v9.62 que permitiría a atacantes remotos ejecutar código a su elección a través de un fichero largo: // URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.62:*:*:*:*:*:*:*","matchCriteriaId":"2274B160-A577-4D40-8A89-345A858CE892"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0110.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/49882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/922/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32323","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3183","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46653","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7135","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/922/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5179","sourceIdentifier":"cve@mitre.org","published":"2008-11-20T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service (crash) via a crafted Real-time Transport Control Protocol (RTCP) receiver report packet."},{"lang":"es","value":"Vulnerabilidad inespecifica en Microsoft Office Communications Server (OCS), Office Communicator, y Windows Live Messenger que permite a atacantes remotos producir una denegacion de servicio (caida) a traves de la manipulacion de paquetes de reporte de receptor del protocolo Real-time Transport Control Protocol (RTCP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_communications_server:*:*:*:*:*:*:*:*","matchCriteriaId":"B4B474DB-804E-4E14-947C-A508951C32CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_communicator:*:*:*:*:*:*:*:*","matchCriteriaId":"D228E116-E6AA-4542-9294-0A946D29B704"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:*:*:*:*:*:*:*:*","matchCriteriaId":"72D7041E-41A7-4A1E-A1E8-E1FC2AB551CB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32341","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021294","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=132","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46670","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5180","sourceIdentifier":"cve@mitre.org","published":"2008-11-20T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions."},{"lang":"es","value":"Microsoft Communicator permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un gran numero de solicitudes SIP INVITE que produce la creación de muchas sesiones."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_communicator:*:*:*:*:*:*:*:*","matchCriteriaId":"D228E116-E6AA-4542-9294-0A946D29B704"}]}]}],"references":[{"url":"http://secunia.com/advisories/32940","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/12079","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39221","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021294","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.voipshield.com/research-details.php?id=133","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46673","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57581","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7262","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/12079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.voipshield.com/research-details.php?id=133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5181","sourceIdentifier":"cve@mitre.org","published":"2008-11-20T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant messages containing large numbers of emoticons."},{"lang":"es","value":"Microsoft Communicator permite a atacantes remotos producir una denegación de servicio (agotamiento de aplicación o dispositivo) a través de mensajes instantáneos que contienen un gran numero de emoticonos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_communicator:*:*:*:*:*:*:*:*","matchCriteriaId":"D228E116-E6AA-4542-9294-0A946D29B704"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021294","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=131","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46671","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5182","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T02:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount."},{"lang":"es","value":"La funcionalidad inotify en el kernel de Linux v2.6 anteriores a 2.6.28-rc5 que podría permitir a usuarios locales ganar privilegios a través de vectores desconocidos relacionados con las condiciones de carrera en el reloj de eliminación y desmontado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc4:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"C8D861D7-BB62-4BCE-85E7-8C6D1C8923B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"}]}]}],"references":[{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33083","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33623","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33854","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0225.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499044/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33503","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2915","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/714-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499044/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5183","sourceIdentifier":"security@ubuntu.com","published":"2008-11-21T02:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference.  NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184."},{"lang":"es","value":"cupsd en CUPS versión 1.3.9 y anteriores, permite a los usuarios locales, y posiblemente atacantes remotos, causar una denegación de servicio (bloqueo del demonio) mediante la adición de un gran número de Suscripciones RSS, que desencadena una desreferencia de puntero NULL. NOTA: este problema puede ser desencadenado remotamente mediante el aprovechamiento de CVE-2008-5184."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.6","matchCriteriaId":"A9759850-4805-447C-AF3F-5CD462E24810"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.6","matchCriteriaId":"2779F6D3-C4B4-4600-88EF-24B26741CEB8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]}],"references":[{"url":"http://lab.gnucitizen.org/projects/cups-0day","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"security@ubuntu.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"security@ubuntu.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33937","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43521","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3438","source":"security@ubuntu.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2176","source":"security@ubuntu.com","tags":["Third Party Advisory"]},{"url":"http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/19/3","source":"security@ubuntu.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/19/4","source":"security@ubuntu.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/20/1","source":"security@ubuntu.com","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1029.html","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32419","source":"security@ubuntu.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021396","source":"security@ubuntu.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0535","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241","source":"security@ubuntu.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46684","source":"security@ubuntu.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586","source":"security@ubuntu.com","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/7150","source":"security@ubuntu.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lab.gnucitizen.org/projects/cups-0day","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/19/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/19/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/7150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5184","sourceIdentifier":"security@ubuntu.com","published":"2008-11-21T02:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the (1) add and (2) cancel RSS subscription functions."},{"lang":"es","value":"La interfaz web (cgi-bin/admin.c) en CUPS antes de v1.3.8 utiliza un nombre de usuario de invitado cuando un usuario no esta conectado al servidor web, lo cual facilita a atacantes remotos evitar la política y conducir un ataque CSRF a través de las funciones (1) add y (2) cancel suscripciones RSS."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of CUPS as shipped with Red Hat Enterprise Linux 3, 4, or 5. Versions shipped do not support RSS subscriptions.","lastModified":"2008-12-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.7","matchCriteriaId":"6E8DB5A3-0C79-4D3D-BF78-7448D527B670"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"security@ubuntu.com"},{"url":"http://www.cups.org/str.php?L2774","source":"security@ubuntu.com"},{"url":"http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/","source":"security@ubuntu.com","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"security@ubuntu.com"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/19/3","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/19/3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5185","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T02:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using \"<\"."},{"lang":"es","value":"La funcionalidad highlighting en geshi.php en GeSHi antes de v1.0.8 permitiria a atacantes remotos producir una denegacion de servicio (bucle infinito) a traves de una secuencia XML que contiene un delimitador de apertura pero no de cierre, como se ha demostrado usando \"<\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.22","matchCriteriaId":"948E878F-EC7E-4708-92AE-4A51DEF81182"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7EF8085F-C8FA-4B7D-BE6B-46BD37599235"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E8640CA-5302-491A-91E7-0D559966F153"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2C7035B2-576E-4DB8-8F43-785FCE8D3077"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.2_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"63A062D8-2DE6-44F4-9CCF-BE2996F8A2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BACADB05-ABC5-4565-93C8-9545B16FC900"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6243E133-0612-4FF1-81D1-758F5B55AEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3A87C84D-044C-45E4-8FE9-EB6169CE8D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5E021E26-9C91-4644-8FFC-95F240E27F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"89D678F7-99E0-448A-89A6-EFFBB3B4060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF5342B1-7CC5-4A5B-B7A2-260E5B6983ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C72BCBFB-A9F1-43F0-9AFA-1C26D152ECED"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"755F9D37-D32E-4B2F-9BA3-0853A554C6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"DAB3F2AE-6353-4DE6-80FC-C83663975CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"5A4393E5-14CC-4973-8D00-F2D22DDD6293"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"9A9A6873-3024-40FE-BD9E-D5D225C0A5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"5E30A75B-5B35-4E92-95A2-E055810993F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"10EA5DE1-21D3-4CCC-BC3A-1165A69E0223"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"98105060-6780-4835-8092-B49130922690"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"3781AE2D-B315-452B-975A-5DA1B5A435C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"DBC96172-DB75-4F16-A615-A52F6EAB9250"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"EDECF138-3450-4DA4-8FD9-FAB6D6FE3326"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"62615324-C582-4008-A22E-E8203A3F4EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"0E1ABA58-8C64-427C-9900-782272A62A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"83C1A6A8-DD79-4BA1-A5AA-46EE4E5BCEE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.16:*:*:*:*:*:*:*","matchCriteriaId":"CD8F406E-9BE5-4358-B290-A6823FD40380"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.17:*:*:*:*:*:*:*","matchCriteriaId":"D8A551B1-F0A1-4873-B6D4-197777F77A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.18:*:*:*:*:*:*:*","matchCriteriaId":"AF3FD20D-00EF-4CBA-AC90-8EE73270D982"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.19:*:*:*:*:*:*:*","matchCriteriaId":"08FD2BC4-D823-4C45-8625-D39CF2D4974C"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.20:*:*:*:*:*:*:*","matchCriteriaId":"AF84D9E6-9044-49BC-BF3E-8F23FECAF76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.21:*:*:*:*:*:*:*","matchCriteriaId":"2024ABFC-402B-4BAA-8EB0-2B83BFCDF8DA"}]}]}],"references":[{"url":"http://geshi.svn.sourceforge.net/viewvc/geshi/trunk/geshi-1.0.X/src/geshi.php?r1=1321&r2=1322&view=patch","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/20/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32377","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46769","source":"cve@mitre.org"},{"url":"http://geshi.svn.sourceforge.net/viewvc/geshi/trunk/geshi-1.0.X/src/geshi.php?r1=1321&r2=1322&view=patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/20/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5186","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T02:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path ($path variable).  NOTE: this issue has been disputed by a vendor, stating that only a static value is used, so this is not a vulnerability in GeSHi. Separate CVE identifiers would be created for web applications that integrate GeSHi in a way that allows control of the default language path"},{"lang":"es","value":"** CUESTIONADA ** La funcion set_language_path en geshi.php en Generic Syntax Highlighter (GeSHi) antes de v1.0.8.1 podria permitir a atacantes remotos producir un ataque de conduccion de inclusion de fichero a traves de entradas manipuladas que influirian en la ruta de idioma por defecto ($path variable). NOTA: El vendedor a cuestionado esta vulnerabilidad, argumentando que solo es utilizado un valor estatico y que por lo tanto no es una vulnerabilidad en GeSHi. Identificadores CVE diferentes fueron creados para las aplicaciones web que integran GeSHi de tal modo que permiten el control de la ruta por defecto del idioma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"1142B5BC-0D42-47ED-B929-F4BAB5553D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7EF8085F-C8FA-4B7D-BE6B-46BD37599235"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E8640CA-5302-491A-91E7-0D559966F153"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2C7035B2-576E-4DB8-8F43-785FCE8D3077"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.2_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"63A062D8-2DE6-44F4-9CCF-BE2996F8A2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BACADB05-ABC5-4565-93C8-9545B16FC900"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6243E133-0612-4FF1-81D1-758F5B55AEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3A87C84D-044C-45E4-8FE9-EB6169CE8D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5E021E26-9C91-4644-8FFC-95F240E27F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"89D678F7-99E0-448A-89A6-EFFBB3B4060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF5342B1-7CC5-4A5B-B7A2-260E5B6983ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C72BCBFB-A9F1-43F0-9AFA-1C26D152ECED"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"755F9D37-D32E-4B2F-9BA3-0853A554C6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"DAB3F2AE-6353-4DE6-80FC-C83663975CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"5A4393E5-14CC-4973-8D00-F2D22DDD6293"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"9A9A6873-3024-40FE-BD9E-D5D225C0A5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"5E30A75B-5B35-4E92-95A2-E055810993F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"10EA5DE1-21D3-4CCC-BC3A-1165A69E0223"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"98105060-6780-4835-8092-B49130922690"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"3781AE2D-B315-452B-975A-5DA1B5A435C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"DBC96172-DB75-4F16-A615-A52F6EAB9250"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"EDECF138-3450-4DA4-8FD9-FAB6D6FE3326"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"62615324-C582-4008-A22E-E8203A3F4EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"0E1ABA58-8C64-427C-9900-782272A62A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"83C1A6A8-DD79-4BA1-A5AA-46EE4E5BCEE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.16:*:*:*:*:*:*:*","matchCriteriaId":"CD8F406E-9BE5-4358-B290-A6823FD40380"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.17:*:*:*:*:*:*:*","matchCriteriaId":"D8A551B1-F0A1-4873-B6D4-197777F77A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.18:*:*:*:*:*:*:*","matchCriteriaId":"AF3FD20D-00EF-4CBA-AC90-8EE73270D982"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.19:*:*:*:*:*:*:*","matchCriteriaId":"08FD2BC4-D823-4C45-8625-D39CF2D4974C"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.20:*:*:*:*:*:*:*","matchCriteriaId":"AF84D9E6-9044-49BC-BF3E-8F23FECAF76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.21:*:*:*:*:*:*:*","matchCriteriaId":"2024ABFC-402B-4BAA-8EB0-2B83BFCDF8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:geshi:geshi:1.0.7.22:*:*:*:*:*:*:*","matchCriteriaId":"3DC283CF-AA72-493B-8905-2B843C80AE74"}]}]}],"references":[{"url":"http://osvdb.org/49488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32559","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=637321","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/10/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32070","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46271","source":"cve@mitre.org"},{"url":"http://osvdb.org/49488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=637321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/10/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5187","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T02:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a \"pointer arithmetic error\" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426."},{"lang":"es","value":"La función de carga en el cargador XPM para imlib2 v1.4.2, y posiblemente otras versiones, que permite a atacantes producir una denegación de servicio (caída) y posiblemente una ejecución de código a elección del atacante a través de un fichero XPM que dispara un \"error aritmético de puntero\" desbordamiento de búfer basado en montículo, se trata de una vulnerabilidad diferente de CVE-2008-2426. NOTA: La procedencia de la información es desconocida; Los detalles han sido obtenidos únicamente de una tercera parte."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue does not affect the versions of imlib as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2008-11-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"ABE10952-EB03-4E87-8E8A-51E2A786989A"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/49970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-23.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1672","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:019","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/20/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32371","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-683-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3212","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/20/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-683-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5188","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T02:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process."},{"lang":"es","value":"Las secuencias de comando (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, y (3) ecryptfs-setup-pam-wrapped.sh en ecryptfs-utils v45 hasta la v61 en eCryptfs las lineas de comando y las contraseñas estan en texto en claro, que permite a usuarios locales conseguir información sensible mediante el listado de procesos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:45:*:*:*:*:*:*:*","matchCriteriaId":"2A4E82E6-AF24-4B7F-A6DD-EBCD181CAB54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:46:*:*:*:*:*:*:*","matchCriteriaId":"97C0970B-D35A-4D8B-B23D-8174451FF532"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:47:*:*:*:*:*:*:*","matchCriteriaId":"3CE63E38-3A4F-457C-9F15-66CFC421268B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:48:*:*:*:*:*:*:*","matchCriteriaId":"5A290B1C-54BF-456B-8D53-D2D33AE15E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:49:*:*:*:*:*:*:*","matchCriteriaId":"E6844D7B-734C-461A-9F5D-6C246F2DC7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:50:*:*:*:*:*:*:*","matchCriteriaId":"3EFE185F-8579-4216-B611-299B7CD9F3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:51:*:*:*:*:*:*:*","matchCriteriaId":"13BEDA62-A7CA-409C-B4D0-84945A3E46ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:53:*:*:*:*:*:*:*","matchCriteriaId":"2BDCD33C-7EA6-4922-914D-43472CC23F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:54:*:*:*:*:*:*:*","matchCriteriaId":"F20CFF16-B815-4F76-A099-B805AC1D2776"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:55:*:*:*:*:*:*:*","matchCriteriaId":"6B369A92-201D-4F84-9A5C-27853EF8286B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:56:*:*:*:*:*:*:*","matchCriteriaId":"4446FE35-FA53-4DC6-86FF-746E1D890340"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:57:*:*:*:*:*:*:*","matchCriteriaId":"94190953-E2B5-473B-B3C6-39BBD4C3783E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:58:*:*:*:*:*:*:*","matchCriteriaId":"CE9A6D32-8A3D-4A25-BF1E-2ED812539F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:59:*:*:*:*:*:*:*","matchCriteriaId":"AB9630D3-DE46-4C60-A9B0-57B8B9B3C857"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:60:*:*:*:*:*:*:*","matchCriteriaId":"DFE4E253-4CE1-4122-8FFA-974A466D309B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecryptfs:ecryptfs_utils:61:*:*:*:*:*:*:*","matchCriteriaId":"74A6D874-CFFC-49C8-8BB0-DC5DA52E5A16"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53","source":"cve@mitre.org"},{"url":"http://osvdb.org/49334","source":"cve@mitre.org"},{"url":"http://osvdb.org/50353","source":"cve@mitre.org"},{"url":"http://osvdb.org/50354","source":"cve@mitre.org"},{"url":"http://osvdb.org/50355","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1307.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32382","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36552","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/23/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/7","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46073","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/287908","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/23/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/287908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5189","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T12:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Ruby on Rails anteriores a v2.0.5, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de división de respuesta HTTP  mediante una URL manipulada a la función redirect_to."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"49B9DD7F-DA3A-49C5-B2D4-8A8BD73C6FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EB938651-C874-4427-AF9B-E9564B258633"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1D59FAFB-5D48-4BD8-AD51-FF9A204E373D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"FE23CCE1-1713-4813-A0AB-1E10DBDA4D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"897109FF-2C37-458A-91A9-7407F3DFBC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"289B1633-AAF7-48BE-9A71-0577428EE531"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B947FD6D-CD0B-44EE-95B5-E513AF244905"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"E3666B82-1880-4A43-900F-3656F3FB157A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"BE622F6D-AC7D-4D82-A33C-82C2CEFDB9B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"C06D18BA-A0AB-461B-B498-2F1759CBF37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"61EBE7E0-C474-43A7-85E3-093C754A253F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"D7195418-A2E9-43E6-B29F-AEACC317E69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"39485B13-3C71-4EC6-97CF-6C796650C5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E16D8B-4FBD-4FB6-ABA8-B38ECA4D413F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D8A3B30A-65F0-4D63-9A09-B23E9FC8D550"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"62323F62-AD04-4F43-A566-718DDB4149CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A8E890B1-4237-4470-939A-4FC489E04520"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24F3B933-0F68-4F88-999C-0BE48BC88CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E13DAEA-F118-4CB2-88A5-54E3327B6B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC33BF68-D887-4C67-8E8C-D2A6CD877FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7BFCB88D-D946-4510-8DDC-67C32A606589"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E793287E-2BDA-4012-86F5-886B82510431"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF706143-996C-4120-B620-3EDC977568DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"43E7F32B-C760-4862-B6DB-C38FB2A9182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"FD68A034-73A2-4B1A-95DB-19AD3131F775"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2E78C912-E8FF-495F-B922-43C54D1E2180"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"15B72C17-82C3-4930-9227-226C8E64C2E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FA59F311-B2B4-40EE-A878-64EF9F41581B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"035B47E9-A395-47D2-9164-A2A2CF878326"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BDA55D29-C830-45EF-A3B3-BFA9EED88F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0A9356A6-D32A-487C-B743-1DA0D6C42FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2B3C7616-8631-49AC-979C-4347067059AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"EC487B78-AAEA-4F0E-8C8B-F415013A381E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"50EEAFDA-7782-4E1E-9058-205AD4BE9A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CAC748BB-BFC5-44F7-B633-CEEBB1279889"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"38CF2C31-70BB-41D3-9462-0A8B9869A5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F8584B37-7950-4C89-83D2-04E1ACDC60BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8CB26F65-5CFB-4BF8-BCC4-679327D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"DA2DB681-506C-40ED-9259-AFD733F6273A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"04FDC63D-6ED7-48AE-9D72-6419F54D4B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"DBF12B2F-39D9-48D5-9620-DF378D199295"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"22E1EAAF-7B49-498B-BFEB-357173824F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1B9AD626-0AFA-4873-A701-C7716193A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BF69F60A-E8D3-4A4D-BBB5-DE42A1402262"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"986D2B30-FF07-498B-A5E0-A77BAB402619"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0E3141A-162C-4674-BD7B-E1539BAA0B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"86E73F12-0551-42D2-ACC3-223C98B69C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D6BA0659-2287-4E95-B30D-2441CD96DA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B01A4699-32D3-459E-B731-4240C8157F71"}]}]}],"references":[{"url":"http://github.com/rails/rails/commit/7282ed863ca7e6f928bae9162c9a63a98775a19d","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org"},{"url":"http://weblog.rubyonrails.org/2008/10/19/rails-2-0-5-redirect_to-and-offset-limit-sanitizing","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/10/19/response-splitting-risk","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32359","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://github.com/rails/rails/commit/7282ed863ca7e6f928bae9162c9a63a98775a19d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2008/10/19/rails-2-0-5-redirect_to-and-offset-limit-sanitizing","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://weblog.rubyonrails.org/2008/10/19/response-splitting-risk","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-5190","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en eSHOP100 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro SUB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eshop100:eshop100:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"FA58B1E8-8703-4E09-B921-E7D3A3771631"}]}]}],"references":[{"url":"http://secunia.com/advisories/30712","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30002","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1971/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43452","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1971/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5191","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id parameter to poll.php and the (2) sp_id parameter to staticpages.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SePortal v2.4 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de (1) el parámetro poll_id en poll.php y (2) el parámetro sp_id en staticpages.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seportal:seportal:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C88D9204-3669-4B87-A385-5555AE227042"}]}]}],"references":[{"url":"http://secunia.com/advisories/30865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/66315","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43450","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5960","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/66315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5192","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.  NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum.asp en W1L3D4 Philboard v1.14 y v1.2 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro forumid.  NOTA: esta puede sobreescribir la vulnerabilidad CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, o CVE-2007-0920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:philboard:philboard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EA052ED-7BBD-45E8-BE50-FBD0FBC58FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:philboard:philboard:1.14:*:*:*:*:*:*:*","matchCriteriaId":"B6BB798F-7DFC-4857-BA8A-26A2ABF280A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29998","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43449","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5193","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.  NOTE: this might overlap CVE-2007-4024."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en W1L3D4 Philboard v1.14 y v1.2  permite a atacantes remotos inyectar web script o HTML a través del parametro searchterms. NOTA: debería sobreescribir la vulnerabilidad CVE-2007-4024."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:philboard:philboard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EA052ED-7BBD-45E8-BE50-FBD0FBC58FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:philboard:philboard:1.14:*:*:*:*:*:*:*","matchCriteriaId":"B6BB798F-7DFC-4857-BA8A-26A2ABF280A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/30874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29998","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43451","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5194","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm) 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en checkavail.php en SoftVisions Software Online Booking Manager (obm) v2.2 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softvisions_software:online_booking_manager:2.2:*:*:*:*:*:*:*","matchCriteriaId":"52E1921A-B10C-4E7B-BC95-0E9C45240895"}]}]}],"references":[{"url":"http://secunia.com/advisories/30842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4622","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1976/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43448","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1976/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5195","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands via (1) the recid parameter to cms/form/read.php, (2) the uname parameter to cms/index.php, and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SebracCMS (sbcms) v0.4 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de (1) el parámetro recid en cms/form/read.php, (2) el parametro uname en cms/index.php, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebrac:sebraccms:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4E683EE7-C906-471F-80F9-6E7E099C1EEC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30003","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1973/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43453","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5967","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1973/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5196","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en kroax.php en el módulo Kroax (the_kroax) v4.42 y anteriores de PHP-Fusion permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3E18BD-EA3F-4136-A256-A6A74F7066DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:the_kroax_module:*:*:*:*:*:*:*:*","versionEndIncluding":"4.42","matchCriteriaId":"26A707DB-EC80-4CB7-AD3F-0D91A5B9D0A8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29976","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43462","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5942","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5197","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detail_adverts action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en classifieds.php en PHP-Fusion permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro lid en una acción detail_adverts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:-:*:*:*:*:*:*:*","matchCriteriaId":"BECDF2C9-B776-4BD6-A953-BFF0CBD8A344"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4640","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29995","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43561","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5961","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/4640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5198","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL commands via the pow parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en memberlist.php en Acmlmboard v1.A2 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro pow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vizzed:acmlmboard:1.a2:*:*:*:*:*:*:*","matchCriteriaId":"544936C1-30B7-4B0B-AC69-5D3B64DB8957"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4641","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30007","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1972/references","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5969","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1972/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5199","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the gorumDir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en include.php en PHPOutsourcing IdeaBox (también conocido como IdeBox) v1.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro gorumDir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpoutsourcing:ideabox:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC391E46-EFC6-4163-A7E2-8D05EA3E4B06"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121441106806293&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4642","source":"cve@mitre.org"},{"url":"http://securityvulns.ru/Ndocument286.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493666","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43374","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121441106806293&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityvulns.ru/Ndocument286.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5200","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Xe webtv (com_xewebtv) para Joomla! permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de parámetro id en una acción de detalle de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_xewebtv:*:*:*:*:*:*:*:*","matchCriteriaId":"4AA685C5-C069-48A5-901B-BCD575787CB7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4643","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30006","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1974/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43469","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5966","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1974/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5201","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conteudo parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en OTManager CMS v24a  permiten a atacantes remotos incluir y ejecutar archivos locales de su elección a través de un .. (punto punto) en el parámetro conteudo. NOTA: En algunos entornos, esta se puede aprovechar para incluir un archivo remoto mediante el uso de un recurso compartido UNC o una ruta de acceso ftp, ftps, o ssh2.sftp URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otmanager:otmanager_cms:24a:*:*:*:*:*:*:*","matchCriteriaId":"40A8C89E-E5D2-479F-A1AA-5375E1D0F29E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4644","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29992","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43459","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5957","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5202","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary web script or HTML via the conteudo parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en OTManager CMS v24a permite a atacantes remotos inyectar web script o HTML a través del parámetro conteudo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otmanager:otmanager_cms:24a:*:*:*:*:*:*:*","matchCriteriaId":"40A8C89E-E5D2-479F-A1AA-5375E1D0F29E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4644","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43457","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5957","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5203","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the l_vote_done parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en external_vote.php en PowerAward v1.1.0 RC1 permite a atacantes remotos inyectar web script o HTML a través del parámetro l_vote_done."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poweraward:poweraward:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EECA0BDF-E2B7-43EB-B83F-DD3EADE6632E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29993","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43464","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5204","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter to (1) agb.php, (2) angemeldet.php, (3) anmelden.php, (4) charts.php, (5) external_vote.php, (6) guestbook.php, (7) impressum.php, (8) index.php, (9) rss-reader.php, (10) statistic.php, (11) teilnehmer.php, (12) topsites.php, (13) votecode.php, (14) voting.php, and (15) winner.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en PowerAward v1.1.0 RC1, cuando register_globals está habilitado, permiten a atacantes remotos incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro lang a (1) agb.php, (2) angemeldet.php, (3) anmelden.php, (4) charts.php, (5) external_vote.php, (6) guestbook.php, (7) impressum.php, (8) index.php, (9) rss-reader.php, (10) statistic.php, (11) teilnehmer.php, (12) topsites.php, (13) votecode.php, (14) voting.php, and (15) winner.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poweraward:poweraward:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EECA0BDF-E2B7-43EB-B83F-DD3EADE6632E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29993","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43463","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5205","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en edit.php en wellyblog permite a atacantes remotos inyectar web script o HTML a través del parametro articleid parameter en una acción add."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wellyblog:wellyblog:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"A4C1F46A-4C1B-47C6-A7A5-D799C2900FD2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4645","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493710/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43433","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493710/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5206","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in modules/mod_mainmenu.php in MosXML 1 Alpha allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en modules / mod_mainmenu.php en MosXML Alfa 1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mosxml:mosxml:1:alpha:*:*:*:*:*:*","matchCriteriaId":"28417408-8E6F-42FD-9C79-D8C9A172371C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43430","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5207","sourceIdentifier":"cve@mitre.org","published":"2008-11-21T17:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the taal parameter to (1) backup.php and (2) gb_voegtoe.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en  Jonascms v1.2 permiten a atacantes remotos incluir y ejecutar archivos locales de su elección a través de un .. (punto punto) en el parámetro taal para (1) backup.php y (2) gb_voegtoe.php. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jonascms:jonascms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2530F580-D429-4049-992C-03272A7A50A8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29950","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43435","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5208","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sub_votepic.php en el módulo Datsogallery (com_datsogallery) v1.6 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección utilizando la cabecera HTTP \"User-Agent\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_datsogallery:1.6:*:*:*:*:*:*:*","matchCriteriaId":"8D2499B6-1C69-4604-B047-D857ED79B171"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30139","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29138","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42324","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5209","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en modules/download/get_file.php en Admidio v1.4.8 permite a atacantes remotos leer ficheros de su elección utilizando los caracteres .. (punto punto) en el parámetro \"file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:admidio:admidio:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"45CE8E6F-BD6D-4D6A-AD19-C29F0C5CC6BF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4625","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29127","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5575","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5210","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter to (1) script/init/createallimagecache.php, (2) allincludefortick.php and (3) test.php in script/tick/, and (4) modules/dungeon/tick/allincludefortick.php, different vectors than CVE-2008-1776."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en PhpBlock vA8.5 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"PATH_TO_CODE\" de (1) script/init/createallimagecache.php, (2) allincludefortick.php y (3) test.php en script/tick/, y (4) modules/dungeon/tick/allincludefortick.php, siendo un vector de ataque diferente que CVE-2008-1776."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpblock:phpblock:a8.5:*:*:*:*:*:*:*","matchCriteriaId":"EFDAB0B7-5139-4063-B8AA-60BFE8C4735E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29143","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42319","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5586","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5211","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attackers to inject arbitrary web script or HTML via the query parameter, a different vector than CVE-2006-2506."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Sphider v1.3.4, cuando está habilitada la funcionalidad de sugerencias de búsqueda, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"query\", siendo un vector de ataque indiferente que CVE-2006-2506."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sphider:sphider:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"67BD9E2C-539C-46B2-A049-060D712E6232"}]}]}],"references":[{"url":"http://secunia.com/advisories/30082","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4629","source":"cve@mitre.org"},{"url":"http://users.own-hero.net/~decoder/advisories/sphider134-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491712/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42240","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://users.own-hero.net/~decoder/advisories/sphider134-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491712/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5212","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en classifide_ad.php en AJ Auction v6.2.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"item_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"D60D6A53-586C-43DE-B135-120F8D4805B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F97618A8-143B-4205-B59A-707538021D72"},{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:web_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E093125D-5091-4EBF-8F2A-BAB9D299C284"},{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:web_2.0:*:pro:*:*:*:*:*","matchCriteriaId":"B41F858F-E47F-4EEE-99C0-2CFDF9F18292"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29150","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42328","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5591","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5213","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a search detail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en featured_article.php en AJ Article v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"artid\" en una acción de búsqueda detallada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_article:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00D4F6C2-A8A2-45D2-AF24-133DE7CC2D6F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29149","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42329","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5590","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6927","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5214","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to inject arbitrary web script or HTML via the annee parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en service/calendrier.php en ClanLite v2.2006.05.20 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"annee\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clanlite:clanlite:2.2006.05.20:*:*:*:*:*:*:*","matchCriteriaId":"AC6E719D-C0E7-4EBC-BFFF-55B9F2D04318"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29156","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42331","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5595","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5215","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via the link parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en service/profil.php en ClanLite v2.2006.05.20 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"link\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clanlite:clanlite:2.2006.05.20:*:*:*:*:*:*:*","matchCriteriaId":"AC6E719D-C0E7-4EBC-BFFF-55B9F2D04318"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29156","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42330","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5595","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5216","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category_list.php en AJ Square ZeusCart v2.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:zeuscart:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"DD45D8A2-F0D7-4D1A-86F6-B4AE31114AAE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42333","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5594","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5217","sourceIdentifier":"cve@mitre.org","published":"2008-11-24T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de txtCMS v0.3, cuando está habilitada la opción register_globals y la opción magic_quotes_gpc está deshabilitada, permite a atacantes remotos ejecutar ficheros locales de su elección utilizando los caracteres .. (punto punto) en el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpc0d3r:txtcms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"2DE56ED4-45CB-4767-AFBB-6994CB5EFA6C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4626","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29131","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5579","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5218","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords."},{"lang":"es","value":"ScriptsEz FREEze Greetings v1.0 almacena pwd.txt en la raíz web con un control de acceso insuficiente, esto permite a atacantes remotos obtener contraseñas en texto claro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:freeze_greetings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F619218E-B58E-4BAA-845F-061ED5E95D5A"}]}]}],"references":[{"url":"http://osvdb.org/49883","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32325","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7140","source":"cve@mitre.org"},{"url":"http://osvdb.org/49883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5219","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified npass and npass1 parameters."},{"lang":"es","value":"La característica de cambio de contraseña (admin/cp.php) en VideoScript 4.0.1.50 y versiones anteriores no comprueban la autenticación administrativa y no requiere el conocimiento de la contraseña original, lo que permite a los atacantes remotos cambiar la contraseña de la cuenta de administrador a través la modificación de los parámetros npass y npass1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videoscript:videoscript:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1.50","matchCriteriaId":"827F1C70-A82B-4E14-9973-29668E22EEF4"}]}]}],"references":[{"url":"http://osvdb.org/49885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4634","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7149","source":"cve@mitre.org"},{"url":"http://osvdb.org/49885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5220","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en admin/upload_form.php de wPortfolio v0.3 y anteriores; permite a atacantes remotos ejecutar código de su elección al subir un fichero con una extensión ejecutable y luego accediendo a él a través de una solicitud directa del fichero en admin/tmp/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wportfolio:wportfolio:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"D647BB0C-AB05-4D4F-BEE8-582E2977099B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wportfolio:wportfolio:0.2:*:*:*:*:*:*:*","matchCriteriaId":"ACA56D50-DDD6-42A9-A3EA-4F8278A32319"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32367","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46745","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5221","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and password_retype parameters."},{"lang":"es","value":"La accion account_save en admin/userinfo.php en wPortfolio v0.3 y anteriores no necesita autenticación a no es necesario conocer la contraseña original, lo que permite a usuarios remotos cambiar la contraseña de la cuenta de administrador a través de los parámetros modificados \"password\" (contraseña) y \"password_retype\" (reescribir contraseña)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wportfolio:wportfolio:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"D647BB0C-AB05-4D4F-BEE8-582E2977099B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wportfolio:wportfolio:0.2:*:*:*:*:*:*:*","matchCriteriaId":"ACA56D50-DDD6-42A9-A3EA-4F8278A32319"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32384","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46772","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7170","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5222","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp de Dvbbs 8.2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dvbbs:dvbbs:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C71D7775-F466-4828-A4B6-DF35439AF180"}]}]}],"references":[{"url":"http://secunia.com/advisories/30455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492753/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29429","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42731","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492753/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5223","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T19:30:03.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Airvae Commerce 3.0; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airvae:commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"47BDDD20-31AD-4464-8209-29262ED21C77"}]}]}],"references":[{"url":"http://secunia.com/advisories/30440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4637","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29423","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42734","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5689","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5224","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T19:30:08.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Kent Web Mart v1.61 y anteriores; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kent-web:kent-web_mart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.61","matchCriteriaId":"67337950-553E-4438-B10F-4681710905C0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN43906021/index.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kent-web.com/cart/mart.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42743","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN43906021/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kent-web.com/cart/mart.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5225","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T19:30:08.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en Xerox DocuShare v6 y anteriores que permite a atacantes remotos inyectar secuencias de comandos web o codigo HTML a traves de PATH_INFO a la URL por defecto a traves de (1) SearchResults/ y (2) Services/ en dsdn/dsweb/, y (3) la URL por defecto a traves de directorios inespecificos de docushare/dsweb/ServicesLib/Group-#/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:*:*:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"91DF9AA0-09C5-4448-A910-D034C9122AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:4:*:*:*:*:*:*:*","matchCriteriaId":"8A0B982F-BFFA-421F-B017-6F505C834011"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:5:*:*:*:*:*:*:*","matchCriteriaId":"3599B779-A0F7-4B01-9DD4-FA33B261CA96"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:5.00.00.2:*:*:*:*:*:*:*","matchCriteriaId":"0C62D663-B926-4107-9AB5-069C774B16F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6148D4E5-1691-427A-A17E-94BF78CA7C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:6.00.00.1:*:*:*:*:*:*:*","matchCriteriaId":"39F2541D-F946-4901-A198-C4B4DD1C3333"},{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:docushare:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"328775DB-F350-4E09-BEE7-EDA8C5F16124"}]}]}],"references":[{"url":"http://secunia.com/advisories/30426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4638","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492766/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492960/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29430","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020147","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1701/references","source":"cve@mitre.org"},{"url":"https://docushare.xerox.com/doug/dsweb/Get/Document-20353/SA30426-workaround.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docushare.xerox.com/doug/dsweb/View/Collection-7503","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42748","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492766/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492960/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1701/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docushare.xerox.com/doug/dsweb/Get/Document-20353/SA30426-workaround.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docushare.xerox.com/doug/dsweb/View/Collection-7503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5226","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T19:30:08.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5177."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente MambAds (com_mambads) v1.0 RC1 Beta y v1.0 RC1 para Mambo; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ma_cata en una acción \"view\" (ver) en index.php. Se trata de una vulnerabilidad diferente de CVE-2007-5177."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambads:mambads:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"4B6E84E4-1BD3-41B9-BBF4-5E1D72A899B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambads:mambads:1.0:rc1_beta:*:*:*:*:*:*","matchCriteriaId":"94300735-C955-460F-95FC-1D2E6A1E8857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42747","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5692","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5227","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in PHPCow allows remote attackers to execute arbitrary code via unknown vectors, related to a \"file inclusion vulnerability,\" as exploited in the wild in November 2008."},{"lang":"es","value":"Vulnerabilidad no especificada en PHPCow, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Está relacionado con una \"vulnerabilidad de inclusión de fichero\" como se ha explotado libremente en noviembre del 2008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcow:phpcow:*:*:*:*:*:*:*:*","matchCriteriaId":"A720EF9E-E34B-487D-9D7F-3B32337FB557"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/515417","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32361","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46714","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/515417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/32361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5228","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters \"not being encoded.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en IBM Workplace Content Management (WCM) 6.0G y 6.1 anterior a CF8, cuando el componente Page Navigation muestra las entradas de menú, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de parámetros no especificados en la URI. Relacionado con los parámetros \"sin codificar\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:workplace_content_management:6.0:*:*:*:*:*:*:*","matchCriteriaId":"74703172-E558-4225-9756-97987769F8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:workplace_content_management:6.1:*:*:*:*:*:*:*","matchCriteriaId":"40B93751-DE62-4487-B538-AA129529BFFA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK73108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK73933","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32408","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3234","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46749","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK73108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK73933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5229","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service (system crash) via a large invalid PrefixLength to the CreateIpForwardEntry2 method, as demonstrated by a \"route add\" command.  NOTE: this issue might not cross privilege boundaries."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Device IO Control de Microsoft en la biblioteca iphlpapi.dll en Microsoft Windows Vista Gold y SP1, permite a los usuarios locales del grupo Operador de Configuración de Red alcanzar privilegios o causar una denegación de servicio (bloqueo del sistema) por medio de un  prefixLength largo no válido en el método CreateIpForwardEntry2, como es demostrado mediante un comando \"route add\". NOTA: es posible que este problema no cruce los límites de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4646","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1021245","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498471/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498650/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32357","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46742","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1021245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498471/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498650/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5230","sourceIdentifier":"cve@mitre.org","published":"2008-11-25T23:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"The impact of this vulnerability has yet to be determined. The full list of affected platforms is subject to change. The NVD will continue to monitor this vulnerability and adjust the configurations as needed.","cveTags":[],"descriptions":[{"lang":"en","value":"The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packets from an access point (AP) to a client and spoof packets from an AP to a client, and conduct ARP poisoning attacks or other attacks, as demonstrated by tkiptun-ng."},{"lang":"es","value":"La implementación Temporal Key Integrity Protocol (TKIP) en productos de Cisco no especificados y productos de otros vendedores, como se usa en WPA y WPA2 en redes Wi-Fi, tiene unas contramedidas insuficientes contra ciertos paquetes manipulados y reenviados, lo que facilita a atacantes remotos descifrar paquetes de un punto de acceso (AP) a un cliente y envenenar paquetes de un AP a un cliente y llevar a cabo ataques de envenenamiento ARP y otros ataques, como se demostró por tkiptun-ng."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","matchCriteriaId":"5802E2D8-7069-474C-826F-AEE7B50BFE34"}]}]}],"references":[{"url":"http://arstechnica.com/articles/paedia/wpa-cracked.ars","source":"cve@mitre.org"},{"url":"http://dl.aircrack-ng.org/breakingwepandwpa.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2008-November/005413.html","source":"cve@mitre.org"},{"url":"http://radajo.blogspot.com/2008/11/wpatkip-chopchop-attack.html","source":"cve@mitre.org"},{"url":"http://trac.aircrack-ng.org/svn/trunk/src/tkiptun-ng.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.aircrack-ng.org/doku.php?id=tkiptun-ng","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a30036.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32164","source":"cve@mitre.org"},{"url":"http://arstechnica.com/articles/paedia/wpa-cracked.ars","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dl.aircrack-ng.org/breakingwepandwpa.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2008-November/005413.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://radajo.blogspot.com/2008/11/wpatkip-chopchop-attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.aircrack-ng.org/svn/trunk/src/tkiptun-ng.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.aircrack-ng.org/doku.php?id=tkiptun-ng","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a30036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5231","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método ExecuteRequest en el control ActiveX Novell iPrint en ienipp.ocx en Novell iPrint Client 5.06 y versiones anteriores, permite a los atacantes remotos ejecutar código arbitrario a través de un valor de opción largo 'target-frame'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:*:*:*:*:*:*:*:*","versionEndIncluding":"5.04","matchCriteriaId":"A5538B39-4C1E-42AE-9B93-6203C77A9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.26:*:*:*:*:*:*:*","matchCriteriaId":"3332CB43-D2ED-4720-8ED4-AE222C6F7FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.27:*:*:*:*:*:*:*","matchCriteriaId":"E9AD9057-2218-481E-96CB-BF568AD3A9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.28:*:*:*:*:*:*:*","matchCriteriaId":"0D044326-00CB-4158-A652-7D7FBDB380C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.30:*:*:*:*:*:*:*","matchCriteriaId":"3BDA0CD3-3E49-42E9-8D41-2B93FEE53610"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.32:*:*:*:*:*:*:*","matchCriteriaId":"AAB01661-76E1-4181-A798-6325EFD681FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.34:*:*:*:*:*:*:*","matchCriteriaId":"16769BC0-66AE-4AA3-B504-03389717A56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.36:*:*:*:*:*:*:*","matchCriteriaId":"25B2994C-8E01-4E7B-A5CA-9F9BE4C634C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.38:*:*:*:*:*:*:*","matchCriteriaId":"CCCA90D8-A320-43B0-A667-DAFC0D00924F"}]}]}],"references":[{"url":"http://secunia.com/advisories/30667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-27/advisory/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-27/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5232","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer en el método CallHTMLHelp en el control ActiveX Microsoft Windows Media Services en nskey.dll 4.1.00.3917 en Windows Media Services en Microsoft Windows NT y 2000, y Avaya Media y Message Application servers, permite a atacantes remotos ejecutar código de su elección mediante un argumento largo. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/wms-overflow.txt","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020733","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30814","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txt","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44629","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.org/0808-exploits/wms-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1020733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/30814.html.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5233","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specific_data function in demux_real.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file."},{"lang":"es","value":"xine-lib v1.1.12 y versiones anteriores a v1.1.15, no comprueba que pueda fallar malloc en circunstancias que incluyen (1) la función  mymng_process_header en demux_mng.c, (2) la función open_mod_file en demux_mod.c y (3) frame_buffer allocation en la función  real_parse_audio_specific_data en demux_real.c; esto permite a atacantes remotos provocar una denegación de servicio (caída) o puede que ejecutar código de su elección a través de un fichero multimedia manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"5EA01448-09E3-4DA9-A817-BFD7A4460F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/47747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44639","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44648","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44649","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/47747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5234","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://secunia.com/advisories/31502\r\n\r\n1) Multiple integer overflows exist within the processing of ID3 tags in src/demuxers/id3.c. These can be exploited to cause heap-based buffer overflows via overly large ID3 frame header size fields.\r\n\r\n2) Multiple boundary errors exist within the \"demux_real_send_chunk()\" function in src/demuxers/demux_real.c. These can potentially be exploited to cause heap-based buffer overflows via specially crafted Real Media files.\r\n\r\n3) A boundary error exists within the \"open_video_capture_device()\" function in src/input/input_v4l.c. This can be exploited to cause a heap-based buffer overflow via a specially crafted V4L stream.\r\n\r\n4) A boundary error exists within the \"parse_moov_atom()\" function in src/demuxers/demux_qt.c. This can be exploited to cause a heap-based buffer overflow via a specially crafted Quicktime file.\r\n\r\nSuccessful exploitation of the vulnerabilities may allow execution of arbitrary code.\r\n\r\nThe vulnerabilities are reported in versions prior to 1.1.15.","evaluatorSolution":"http://secunia.com/advisories/31502\r\n\r\nSolution:\r\nUpdate to version 1.1.15, which fixes vulnerabilities #1-#3. (as noted above).","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted metadata atom size processed by the parse_moov_atom function in demux_qt.c and (2) frame reading in the id3v23_interp_frame function in id3.c.  NOTE: as of 20081122, it is possible that vector 1 has not been fixed in 1.1.15."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en xine-lib 1.1.12, y otras versiones anteriores a 1.1.15, permiten a atacantes remotos ejecutar código de su elección a través de vectores relacionados con (1) un metadato manipulado de tamaño atómico procesado por la función parse_moov_atom en demux_qt.c y (2) un marco leyendo en la función id3v23_interp_frame en id3.c. NOTA: a fecha de 22-11-2008, es posible que el vector 1 no se haya fijado en 1.1.15.\r\n\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"5EA01448-09E3-4DA9-A817-BFD7A4460F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33544","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44633","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44647","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5235","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función demux_real_send_chunk en src/demuxers/demux_real.c en xine-lib antes de v1.1.15 permite a atacantes remotos ejecutar código de su elección mediante un archivo Real Media manipulado. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"0396208F-AF6E-4AB2-8C1B-9BC438121C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"56DE52C9-2381-483F-956D-C83503EBA664"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta1:*:*:*:*:*:*","matchCriteriaId":"A119AB14-EDB5-4C79-9058-60E610636728"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta10:*:*:*:*:*:*","matchCriteriaId":"44C4B2D6-DBAE-46CF-BE49-FC221B340726"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta11:*:*:*:*:*:*","matchCriteriaId":"197D04B5-8053-484F-A070-894BC9611C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta12:*:*:*:*:*:*","matchCriteriaId":"B2B22E87-6736-4C5B-A1A6-A3EA0064C10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta2:*:*:*:*:*:*","matchCriteriaId":"4F2CD2BA-DFFD-4A9C-8B09-4793BB723717"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta3:*:*:*:*:*:*","matchCriteriaId":"B993E680-B4FE-4DE5-800C-1E6B7C44849A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta4:*:*:*:*:*:*","matchCriteriaId":"F7100421-9BF9-4A07-AD54-C3D9CDCFBF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta5:*:*:*:*:*:*","matchCriteriaId":"D6BE4F65-E942-4259-94E3-95E7F95B2E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta6:*:*:*:*:*:*","matchCriteriaId":"4DCD596C-B080-4A98-BF14-57DDC370CCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta7:*:*:*:*:*:*","matchCriteriaId":"4272CD6A-E384-4035-A09A-C63927191CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta8:*:*:*:*:*:*","matchCriteriaId":"1D5828FA-6320-4983-AA70-ADFE9B475EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta9:*:*:*:*:*:*","matchCriteriaId":"6E12B75F-1820-42F9-8B7C-3024D5C37B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"31B68858-0176-4CB0-B015-256EC1796D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc1:*:*:*:*:*:*","matchCriteriaId":"41844D73-EE25-4835-A9C5-08AADDA2CE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc2:*:*:*:*:*:*","matchCriteriaId":"52EFFE9E-6A25-4A27-B483-96AA4A7C7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3:*:*:*:*:*:*","matchCriteriaId":"FCB9BA4F-0814-45C4-93C8-04DBFF8FC8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"8D49B22F-8C56-4842-8DE7-36011523E150"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"4B643DB4-63D2-4BA1-89B4-2EF813771718"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"C4FC619B-E611-4996-A12B-37830FD5B91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4:*:*:*:*:*:*","matchCriteriaId":"61D3DB46-02A6-4D63-B052-2458FB181DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"5083B06C-C9B2-4011-B8B0-23FECE2DD100"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc5:*:*:*:*:*:*","matchCriteriaId":"A03425FA-BB45-4FF4-B551-2A63129BDFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"A9B68EA2-EBCA-4272-B43E-9C2916447869"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc7:*:*:*:*:*:*","matchCriteriaId":"C609073D-30DF-42BF-B515-773205601FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc8:*:*:*:*:*:*","matchCriteriaId":"DD535324-2B5B-4535-A33B-29487F8FA4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"234EF75C-C5AA-4FAA-85C7-77EFBB35AF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AB02215-E511-4974-8AE3-834CAE630D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"449D32E9-C204-4429-8DE5-9677BEC1DEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"3AC157F9-D90C-4457-A17B-A4DB52E92855"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"856C23D9-14FC-4264-B85B-1E0D67FA73B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"89C1C896-C115-451D-840A-2DE3430B6D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"464603A5-ECBE-486A-BFC9-921D0B4D39D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E0A1D4E-A0C5-4063-A354-1D8782A89A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B8FB6DB2-E29D-48E2-A092-B9D99230C383"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"06E97F97-F3E4-48F8-BC24-E88AF98B93A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"EBCA9DB3-5F48-4078-84D2-CC65E04058F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30698","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5236","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted EBML element length processed by the parse_block_group function in demux_matroska.c; (2) a certain combination of sps, w, and h values processed by the real_parse_audio_specific_data and demux_real_send_chunk functions in demux_real.c; and (3) an unspecified combination of three values processed by the open_ra_file function in demux_realaudio.c.  NOTE: vector 2 reportedly exists because of an incomplete fix in 1.1.15."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en xine-lib v1.1.12 y otra v1.1.15 y versiones anteriores , permiten a atacantes remotos ejecutar código de su elección a través de vectores relacionados con (1) un tamaño manipulado del elemento EBML procesado por la función parse_block_group en demux_matroska.c; (2) una determinada combinación de los valores \"sps\", \"w\" y \"h\" procesados por las funciones real_parse_audio_specific_data y demux_real_send_chunk functions en demux_real.c y (3) una combinación no especificada de tres valores procesados por la función open_ra_file en demux_realaudio.c. NOTA: Al parecer el vector 2 existe por una reparación incompleta en la v1.1.15."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"52E2289A-767D-445B-8AF5-4201E3806F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"56DE52C9-2381-483F-956D-C83503EBA664"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta1:*:*:*:*:*:*","matchCriteriaId":"A119AB14-EDB5-4C79-9058-60E610636728"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta10:*:*:*:*:*:*","matchCriteriaId":"44C4B2D6-DBAE-46CF-BE49-FC221B340726"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta11:*:*:*:*:*:*","matchCriteriaId":"197D04B5-8053-484F-A070-894BC9611C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta12:*:*:*:*:*:*","matchCriteriaId":"B2B22E87-6736-4C5B-A1A6-A3EA0064C10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta2:*:*:*:*:*:*","matchCriteriaId":"4F2CD2BA-DFFD-4A9C-8B09-4793BB723717"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta3:*:*:*:*:*:*","matchCriteriaId":"B993E680-B4FE-4DE5-800C-1E6B7C44849A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta4:*:*:*:*:*:*","matchCriteriaId":"F7100421-9BF9-4A07-AD54-C3D9CDCFBF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta5:*:*:*:*:*:*","matchCriteriaId":"D6BE4F65-E942-4259-94E3-95E7F95B2E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta6:*:*:*:*:*:*","matchCriteriaId":"4DCD596C-B080-4A98-BF14-57DDC370CCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta7:*:*:*:*:*:*","matchCriteriaId":"4272CD6A-E384-4035-A09A-C63927191CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta8:*:*:*:*:*:*","matchCriteriaId":"1D5828FA-6320-4983-AA70-ADFE9B475EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta9:*:*:*:*:*:*","matchCriteriaId":"6E12B75F-1820-42F9-8B7C-3024D5C37B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"31B68858-0176-4CB0-B015-256EC1796D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc1:*:*:*:*:*:*","matchCriteriaId":"41844D73-EE25-4835-A9C5-08AADDA2CE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc2:*:*:*:*:*:*","matchCriteriaId":"52EFFE9E-6A25-4A27-B483-96AA4A7C7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3:*:*:*:*:*:*","matchCriteriaId":"FCB9BA4F-0814-45C4-93C8-04DBFF8FC8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"8D49B22F-8C56-4842-8DE7-36011523E150"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"4B643DB4-63D2-4BA1-89B4-2EF813771718"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"C4FC619B-E611-4996-A12B-37830FD5B91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4:*:*:*:*:*:*","matchCriteriaId":"61D3DB46-02A6-4D63-B052-2458FB181DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"5083B06C-C9B2-4011-B8B0-23FECE2DD100"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc5:*:*:*:*:*:*","matchCriteriaId":"A03425FA-BB45-4FF4-B551-2A63129BDFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"A9B68EA2-EBCA-4272-B43E-9C2916447869"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc7:*:*:*:*:*:*","matchCriteriaId":"C609073D-30DF-42BF-B515-773205601FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc8:*:*:*:*:*:*","matchCriteriaId":"DD535324-2B5B-4535-A33B-29487F8FA4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"234EF75C-C5AA-4FAA-85C7-77EFBB35AF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AB02215-E511-4974-8AE3-834CAE630D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"449D32E9-C204-4429-8DE5-9677BEC1DEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"3AC157F9-D90C-4457-A17B-A4DB52E92855"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"856C23D9-14FC-4264-B85B-1E0D67FA73B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"89C1C896-C115-451D-840A-2DE3430B6D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"464603A5-ECBE-486A-BFC9-921D0B4D39D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E0A1D4E-A0C5-4063-A354-1D8782A89A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4F2A24E4-CB4A-4D71-804F-63DA24563D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B8FB6DB2-E29D-48E2-A092-B9D99230C383"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"06E97F97-F3E4-48F8-BC24-E88AF98B93A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"EBCA9DB3-5F48-4078-84D2-CC65E04058F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31567","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33544","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/47744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2427","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44634","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44642","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/47744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5237","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) crafted width and height values that are not validated by the mymng_process_header function in demux_mng.c before use in an allocation calculation or (2) crafted current_atom_size and string_size values processed by the parse_reference_atom function in demux_qt.c for an RDRF_ATOM string."},{"lang":"es","value":"Múltiples desbordamientos de entero en xine-lib 1.1.12, y otros 1.1.15 y versiones anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección mediante (1) valores de altura y anchura manipulados que no se validan por al función mymng_process_header en demux_mng.c antes de usarse en un cálculo de asignación o (2)valores current_atom_size y string_size manipulados procesados por la función arse_reference_atom en demux_qt.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"52E2289A-767D-445B-8AF5-4201E3806F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"56DE52C9-2381-483F-956D-C83503EBA664"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta1:*:*:*:*:*:*","matchCriteriaId":"A119AB14-EDB5-4C79-9058-60E610636728"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta10:*:*:*:*:*:*","matchCriteriaId":"44C4B2D6-DBAE-46CF-BE49-FC221B340726"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta11:*:*:*:*:*:*","matchCriteriaId":"197D04B5-8053-484F-A070-894BC9611C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta12:*:*:*:*:*:*","matchCriteriaId":"B2B22E87-6736-4C5B-A1A6-A3EA0064C10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta2:*:*:*:*:*:*","matchCriteriaId":"4F2CD2BA-DFFD-4A9C-8B09-4793BB723717"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta3:*:*:*:*:*:*","matchCriteriaId":"B993E680-B4FE-4DE5-800C-1E6B7C44849A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta4:*:*:*:*:*:*","matchCriteriaId":"F7100421-9BF9-4A07-AD54-C3D9CDCFBF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta5:*:*:*:*:*:*","matchCriteriaId":"D6BE4F65-E942-4259-94E3-95E7F95B2E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta6:*:*:*:*:*:*","matchCriteriaId":"4DCD596C-B080-4A98-BF14-57DDC370CCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta7:*:*:*:*:*:*","matchCriteriaId":"4272CD6A-E384-4035-A09A-C63927191CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta8:*:*:*:*:*:*","matchCriteriaId":"1D5828FA-6320-4983-AA70-ADFE9B475EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta9:*:*:*:*:*:*","matchCriteriaId":"6E12B75F-1820-42F9-8B7C-3024D5C37B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"31B68858-0176-4CB0-B015-256EC1796D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc1:*:*:*:*:*:*","matchCriteriaId":"41844D73-EE25-4835-A9C5-08AADDA2CE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc2:*:*:*:*:*:*","matchCriteriaId":"52EFFE9E-6A25-4A27-B483-96AA4A7C7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3:*:*:*:*:*:*","matchCriteriaId":"FCB9BA4F-0814-45C4-93C8-04DBFF8FC8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"8D49B22F-8C56-4842-8DE7-36011523E150"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"4B643DB4-63D2-4BA1-89B4-2EF813771718"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"C4FC619B-E611-4996-A12B-37830FD5B91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4:*:*:*:*:*:*","matchCriteriaId":"61D3DB46-02A6-4D63-B052-2458FB181DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"5083B06C-C9B2-4011-B8B0-23FECE2DD100"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc5:*:*:*:*:*:*","matchCriteriaId":"A03425FA-BB45-4FF4-B551-2A63129BDFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"A9B68EA2-EBCA-4272-B43E-9C2916447869"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc7:*:*:*:*:*:*","matchCriteriaId":"C609073D-30DF-42BF-B515-773205601FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc8:*:*:*:*:*:*","matchCriteriaId":"DD535324-2B5B-4535-A33B-29487F8FA4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"234EF75C-C5AA-4FAA-85C7-77EFBB35AF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AB02215-E511-4974-8AE3-834CAE630D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"449D32E9-C204-4429-8DE5-9677BEC1DEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"3AC157F9-D90C-4457-A17B-A4DB52E92855"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"856C23D9-14FC-4264-B85B-1E0D67FA73B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"89C1C896-C115-451D-840A-2DE3430B6D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"464603A5-ECBE-486A-BFC9-921D0B4D39D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E0A1D4E-A0C5-4063-A354-1D8782A89A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4F2A24E4-CB4A-4D71-804F-63DA24563D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B8FB6DB2-E29D-48E2-A092-B9D99230C383"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"06E97F97-F3E4-48F8-BC24-E88AF98B93A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"EBCA9DB3-5F48-4078-84D2-CC65E04058F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33544","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44652","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5238","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted stream_name_size field."},{"lang":"es","value":"Desbordamiento de entero en la función real_parse_mdp en demux_real.c en xine-lib 1.1.12, y otras versiones anteriores a 1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección a través de un campo stream_name_size manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"8BE7CC5D-F1D1-487C-A18C-A47970ED9B6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"56DE52C9-2381-483F-956D-C83503EBA664"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta1:*:*:*:*:*:*","matchCriteriaId":"A119AB14-EDB5-4C79-9058-60E610636728"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta10:*:*:*:*:*:*","matchCriteriaId":"44C4B2D6-DBAE-46CF-BE49-FC221B340726"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta11:*:*:*:*:*:*","matchCriteriaId":"197D04B5-8053-484F-A070-894BC9611C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta12:*:*:*:*:*:*","matchCriteriaId":"B2B22E87-6736-4C5B-A1A6-A3EA0064C10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta2:*:*:*:*:*:*","matchCriteriaId":"4F2CD2BA-DFFD-4A9C-8B09-4793BB723717"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta3:*:*:*:*:*:*","matchCriteriaId":"B993E680-B4FE-4DE5-800C-1E6B7C44849A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta4:*:*:*:*:*:*","matchCriteriaId":"F7100421-9BF9-4A07-AD54-C3D9CDCFBF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta5:*:*:*:*:*:*","matchCriteriaId":"D6BE4F65-E942-4259-94E3-95E7F95B2E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta6:*:*:*:*:*:*","matchCriteriaId":"4DCD596C-B080-4A98-BF14-57DDC370CCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta7:*:*:*:*:*:*","matchCriteriaId":"4272CD6A-E384-4035-A09A-C63927191CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta8:*:*:*:*:*:*","matchCriteriaId":"1D5828FA-6320-4983-AA70-ADFE9B475EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:beta9:*:*:*:*:*:*","matchCriteriaId":"6E12B75F-1820-42F9-8B7C-3024D5C37B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"31B68858-0176-4CB0-B015-256EC1796D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc1:*:*:*:*:*:*","matchCriteriaId":"41844D73-EE25-4835-A9C5-08AADDA2CE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc2:*:*:*:*:*:*","matchCriteriaId":"52EFFE9E-6A25-4A27-B483-96AA4A7C7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3:*:*:*:*:*:*","matchCriteriaId":"FCB9BA4F-0814-45C4-93C8-04DBFF8FC8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"8D49B22F-8C56-4842-8DE7-36011523E150"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"4B643DB4-63D2-4BA1-89B4-2EF813771718"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"C4FC619B-E611-4996-A12B-37830FD5B91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4:*:*:*:*:*:*","matchCriteriaId":"61D3DB46-02A6-4D63-B052-2458FB181DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"5083B06C-C9B2-4011-B8B0-23FECE2DD100"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc5:*:*:*:*:*:*","matchCriteriaId":"A03425FA-BB45-4FF4-B551-2A63129BDFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"A9B68EA2-EBCA-4272-B43E-9C2916447869"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc7:*:*:*:*:*:*","matchCriteriaId":"C609073D-30DF-42BF-B515-773205601FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1:rc8:*:*:*:*:*:*","matchCriteriaId":"DD535324-2B5B-4535-A33B-29487F8FA4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"234EF75C-C5AA-4FAA-85C7-77EFBB35AF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AB02215-E511-4974-8AE3-834CAE630D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"449D32E9-C204-4429-8DE5-9677BEC1DEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"3AC157F9-D90C-4457-A17B-A4DB52E92855"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"856C23D9-14FC-4264-B85B-1E0D67FA73B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"89C1C896-C115-451D-840A-2DE3430B6D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"464603A5-ECBE-486A-BFC9-921D0B4D39D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E0A1D4E-A0C5-4063-A354-1D8782A89A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4F2A24E4-CB4A-4D71-804F-63DA24563D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B8FB6DB2-E29D-48E2-A092-B9D99230C383"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"06E97F97-F3E4-48F8-BC24-E88AF98B93A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"EBCA9DB3-5F48-4078-84D2-CC65E04058F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44650","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5239","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors such as (1) a file or (2) an HTTP response, which triggers consequences such as out-of-bounds reads and heap-based buffer overflows."},{"lang":"es","value":"xine-lib v1.1.12 y otra v1.1.15 y versiones anteriores; no maneja adecuadamente los valores (a) negative y (b) zero durante las llamadas no especificadas a la función read en file.c, input_net.c, input_smb.c e input_http.c. Esto permite a atacantes remotos provocar una denegación de servicio (caída) o puede que ejecutar código de su elección a través de vectores como (1) un fichero o (2) una respuesta HTTP, esto provoca consecuencias como lecturas fuera de rango y desbordamientos de búfer basados en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33544","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44651","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5240","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) MDPR_TAG, and (4) CONT_TAG chunks processed by the real_parse_headers function in demux_real.c; which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) or possibly execute arbitrary code via a crafted value."},{"lang":"es","value":"xine-lib 1.1.12, y otras versiones anteriores a 1.1.15, se basa en un valor de entrada no confiable para determinar la localización de memoria y no comprobar el resultado para (1) el elemento pista de entrada  MATROSKA_ID_TR_CODECPRIVATE procesado por  demux_matroska.c; y (2) PROP_TAG, (3) MDPR_TAG, y (4) CONT_TAG trozos procesados por la función real_parse_headers en demux_real.c; el cual permite a los atacantes remotos causar una denegación de servicios (putero nulo no referenciado y caída) o posiblemente ejecuta código arbitrario a través de un valor manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33544","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/47742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44653","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/47742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5241","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM)."},{"lang":"es","value":"Desbordamiento inferior de búfer en demux_qt.c en xine-lib 1.1.12, y otras 1.1.15 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) mediante un archivo media manipulado que resulta en un valor pequeño de moov_atom_size en un MOV comprimido (también conocido como  CMOV_ATOM)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44656","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5242","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file."},{"lang":"es","value":"demux_qt.c de xine-lib v1.1.12, y otra v1.1.15 y versiones anteriores, no valida el campo contador antes de hacer una llamada calloc para una  asignación atom de STSD_ATOM. Esto permite a atacantes remotos provocar una denegación de servicio (caída) o puede que ejecutar código de su elección a través de un fichero multimedia manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44657","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5243","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to \"reindex into an allocated buffer,\" which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error."},{"lang":"es","value":"La función real_parse_headers en demux_real.c en xine-lib 1.1.12, y otras v1.1.15 y versiones anteriores, confía en un valor de longitud de entrada no confiable a \"reindexar en un búfer asignado\", lo que permite a atacantes remotos provocar una denegación de servicio (caída) mediante un valor manipulado, probablemente un error de índice de array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33544","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44658","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5244","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad.  NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad."},{"lang":"es","value":"Vulnerabilidad no especificada en xine-lib anterior a v1.1.15, tiene un impacto desconocido y vectores de ataque relacionados con libfaad. NOTA: Debido a la falta de detalles, no está claro si es una vulnerabilidad que afecta a xine-lib o a libfaad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5245","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c."},{"lang":"es","value":"xine-lib anterior a 1.1.15 realiza marcos de video V4L preasignados antes del establecimiento de la longitud requerida, la cuál tiene un impacto y vectores de ataque desconocidos, posiblemente relacionado con un desbordamiento de búfer en la función  open_video_capture_device en src/input/input_v4l.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"5EA01448-09E3-4DA9-A817-BFD7A4460F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30698","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44470","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5246","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en xine-lib anterior a 1.1.15; permiten a atacantes remotos ejecutar código de su elección a a través de vectores que envían datos ID3 a las funciones (1) id3v22_interp_frame Y (2) id3v24_interp_frame en src/demuxers/id3.c. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"5EA01448-09E3-4DA9-A817-BFD7A4460F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/47677","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020703","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30698","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44468","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5247","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero value."},{"lang":"es","value":"La función real_parse_audio_specific_data en demux_real.c en xine-lib v1.1.12, y otros 1.1.15 y versiones anteriores, utiliza un valor de altura no confiable (también conocido como codec_data_length) como divisor, lo que permite a atacantes remotos provocar una denegación de servicio (error de dicisión por cero y caída) mediante un valor cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31827","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4648","source":"cve@mitre.org"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30797","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/analysis/2008-008/analysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5248","sourceIdentifier":"cve@mitre.org","published":"2008-11-26T01:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via \"MP3 files with metadata consisting only of separators.\""},{"lang":"es","value":"xine-lib anterior a 1.1.15 permite a atacantes remotos causar una denegación de servicio(caída)a través de \"archivos MP3 con metadatos que consisten únicamente de separadores.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"69EF5A16-DDEC-4B06-8A6E-E02594FC6FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*","matchCriteriaId":"BC32E976-3FB3-44DE-89EE-FF0E89D97090"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*","matchCriteriaId":"336D216E-5C30-4328-A422-DE134CABA091"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*","matchCriteriaId":"39B6FDDB-139E-4CAC-A1C9-69E4AB542357"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*","matchCriteriaId":"CCC58298-4DD7-47C4-BFA7-04596B21D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*","matchCriteriaId":"EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*","matchCriteriaId":"3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*","matchCriteriaId":"5BEFC0C7-1D8D-421B-B193-8A574AC8C712"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*","matchCriteriaId":"42736C09-AF59-45F7-A324-2A725F8C0AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*","matchCriteriaId":"30F3E90C-01A5-4085-8BA4-B5FA05BEA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*","matchCriteriaId":"91ACDCA2-F0CD-4133-85A1-FC95E703CB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*","matchCriteriaId":"58B3AEE5-1A56-464E-9EB2-F06E25FA5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*","matchCriteriaId":"EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*","matchCriteriaId":"5AC68CC2-969C-4596-AA38-AE10BFE1D5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D402CB-4DED-4525-AF38-B5EC73C39E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A905719D-4520-4374-B3A7-55034728B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2899EF34-824B-4893-8636-64A83EC5885B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8EB8D295-B589-4E88-8FEE-DDD1591D9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"877230F8-6040-4CE3-A882-1290D19D27CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"401AE3C4-3829-487D-B66E-F71705BDD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"46BF90AB-3B32-4899-8179-BDB9EB449760"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"69CE0C90-2DD1-49D2-AE4C-1D21B81EF812"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F2AF7B5-09C3-4E32-B981-E0D9F88E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C94CF963-7DA9-455C-BB7E-2EE9AACD6B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E515D538-80FA-4069-B466-1EC4F84EE5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"64546B22-3230-413A-BE51-E51F54B4A39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"686115E3-6BC0-4E9E-A0A7-9896F639FDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32505","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=619869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5249","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en MediaWiki 1.13.0 a 1.13.2 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarias a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33133","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32844","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5250","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web script or HTML by editing a wiki page."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en versiones de MediaWiki anteriores a  1.6.11, 1.12.x anteriores a 1.12.2, y 1.13.3 anteriores a 1.13.x, cuando se esta usando Internet Explorer y las subidas están habilitadas, o bien cuando un navegador que permita secuencias de comandos SVG se este usando y las subidas SVG estén habilitadas, permite a usuarios remotos autenticados inyectar HTML o secuencias de comandos web arbitrarias  durante la edición de una página del wiki."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9842D148-50D2-4A52-A3E1-529670A25EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"746023B5-2472-4FC9-BEDF-FE6A321F12B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"66714539-F1E1-4C16-AA12-059EEB1B9DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33133","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32844","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5252","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición en sitios cruzados en la funcionalidad Special:Import en MediaWiki 1.3.0 a 1.6.10, 1.12.x antes de 1.12.2, y 1.13.3 antes de 1.13.x, permite a atacantes remotos llevar a cabo acciones no especificadas como usuarios autenticados a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"30F54837-5004-4D10-B3B0-502CED4F6592"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A9F0067D-534A-4238-A244-D92A73845432"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3BEC422E-49BC-41D4-9F71-B834D4108EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6D854161-28AA-4386-B90A-97F9692CE37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5A0FA49-99DC-4691-968F-6AEB76B74370"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"2A0C6A2C-992B-45A0-8E0C-1AE983881337"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"2C9393EF-083A-4662-BC7A-89979C2B8546"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"AD90730F-BF26-46C5-83F8-039CD661C968"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"B4D3B5E2-AC84-421D-AC10-3266D9575922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"326D4BFB-EFE7-4EAC-AA71-45E8C7E41538"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"736DFCB7-B747-4F98-AB87-9023BCD0B5C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4DF75E48-208A-4531-AC8D-B307FD4E288B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"174665BA-F231-45F6-922C-933B8A613009"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8B175F5A-7CB6-44E6-9E98-FB40F6D14FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A45833DC-F104-42BB-8688-4DE66AFF72F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6B316A8E-DED1-427B-8137-11C767E9DF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:alpha1:*:*:*:*:*:*","matchCriteriaId":"6086E5E9-F69F-47EE-9034-8196CC03E6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:alpha2:*:*:*:*:*:*","matchCriteriaId":"49A43BF0-69CF-4694-9155-534FA31C26DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"A0751BD8-505A-42A3-A150-3523F12B9047"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"F964DBAD-0569-41DD-975B-23A975050595"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:beta4:*:*:*:*:*:*","matchCriteriaId":"3769AAA0-8492-40E1-B3EC-5E3BFE396809"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"E2616E5E-2D0B-4FD3-B43F-51D786F0D8D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:rc3:*:*:*:*:*:*","matchCriteriaId":"94766FF8-FC72-4F8F-8005-7F34E4AA4042"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5:rc4:*:*:*:*:*:*","matchCriteriaId":"D8693832-A576-492F-B4F7-B8415B3A5903"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9214FE72-045E-457A-B3C5-BCDFC506DDB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CDB55E62-A345-49F6-ACD0-A710977CA6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A340D0AB-2B4A-4DE6-9FA1-662D8F8205BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8C8B11E-5C0B-49B1-ACFA-5926057EF002"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"89A4EA0A-54E1-484A-ADDB-216CBC9C40FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"DA0ABA75-E966-43A2-90B1-89557BB0B7DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"3B6CE989-B7AD-42AA-986C-23266D965122"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"44FD9374-5B8A-4102-A005-D3F39186ABBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5D4388FF-3C2C-41A7-A2A2-CC3E38994222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3EAF847-B64C-4C12-8BF2-631F61B0618E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"09EF3827-9C87-4043-B10A-1D6AFCB64F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"08B1EDE8-940E-47C1-9CDA-C6BBE1BB9A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"A4554900-E09D-4D9D-99D4-FE5FDB3CDE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"93EB0312-A147-4307-9491-46AEC2EC727C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"48929086-E08E-472D-A503-4CA803A840D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"A98675FD-C9EA-49AB-BA9F-2CF5898203C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"EB9B4718-DF85-4E77-B720-0EC3E0D318BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"132A745B-0A1B-4186-8BE2-88C24FF4A455"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"E710375D-F5B3-4998-AA7F-F931022CF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3130C952-83B3-4755-99D7-D25C1447670E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9842D148-50D2-4A52-A3E1-529670A25EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"746023B5-2472-4FC9-BEDF-FE6A321F12B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"66714539-F1E1-4C16-AA12-059EEB1B9DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33133","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5256","sourceIdentifier":"cve@mitre.org","published":"2008-11-27T00:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file."},{"lang":"es","value":"La función AcquireDaemonLock en ipcdUnix.cpp en Sun Innotek VirtualBox antes de 2.0.6 permite a usuarios locales sobreescribir ficheros de su elección a través de un ataque de enlace simbólico en un archivo /tmp/.vbox-$USER-ipc/lock."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"9C53F921-B24B-4D59-955D-3394BE3897D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3FBE8C79-C50A-4CFE-AECC-BCA142F7C6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"363A5407-EA59-43C6-B9D3-960F9F8B97C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"874F34F3-8787-4A73-ACCD-82A90D854D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"A37F2E63-C442-48AE-B4E2-565BEBBACEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80674C86-4877-4533-A784-54DDB8F725B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CCA21D-9AB1-4C94-9858-5DFAA5844E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DFABD1DE-0ED7-4861-9C7D-C3C0D63A302E"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F7E0193E-A8C8-49CF-9DD1-80B1CE0DA9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"2ECF9487-3E3B-456C-8D47-8EFB8BFC22D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F0BD6DE6-D6F8-4691-A1DE-23B5E1D0CD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"806BCA22-C1E8-4818-93C6-41DD85F7B094"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CA0BA5DE-7973-407B-9A98-2E92E215912E"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"CA9F576B-FC99-48E3-ABC8-55277843A004"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24E2489D-C58B-47B2-858A-B13CC77CD5C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtualox:virtualox:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F5C997-3B2B-4B1D-9016-18AF461CB61C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504149","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32851","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247326-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32444","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021384","source":"cve@mitre.org"},{"url":"http://www.virtualbox.org/changeset?new=trunk%2Fsrc%2Flibs%2Fxpcom18a4%2Fipc%2Fipcd%2Fdaemon%2Fsrc%2FipcdUnix.cpp%4013810","source":"cve@mitre.org"},{"url":"http://www.virtualbox.org/wiki/Changelog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3410","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46826","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247326-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.virtualbox.org/changeset?new=trunk%2Fsrc%2Flibs%2Fxpcom18a4%2Fipc%2Fipcd%2Fdaemon%2Fsrc%2FipcdUnix.cpp%4013810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.virtualbox.org/wiki/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5257","sourceIdentifier":"cve@mitre.org","published":"2008-11-27T00:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan."},{"lang":"es","value":"webseald en WebSEAL 6.0.0.17 en IBM Tivoli Access Manager para e-busines permite a atacantes remotos provocar una denegación de servicio (caida o cuelgue) mediante peticiones HTTP, como lo demuestró una búsqueda de vulnerabilidades de McAfee."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"94B170D8-F1F6-4983-9741-E822ADEF99E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32755","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28611","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32461","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5264","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en searcher.exe en Tornado Knowledge Retrieval System v4.2 y versiones anteriores permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"p\" en una acción \"root\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tornado:tornado_knowledge_retrieval_system:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"BE91AE09-C95A-4A8A-ACB9-25B72C654367"}]}]}],"references":[{"url":"http://secunia.com/advisories/30623","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493217/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29626","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493217/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5265","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the modulo parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en TNT Forum v0.9.4, cuando magic_quotes_gpc no está activo, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetor \"modulo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tntforum:tnt_forum:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"E6D1CC74-0845-44B4-927E-76005A6C50BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4656","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29645","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42978","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5266","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en configuration/httpListenerEdit.jsf en la interfaz GlassFish 2 UR2 b04 webadmin en Sun Java System Application Server v9.1_01 build b09d-fcs y v9.1_02 build b04-fcs permite a atacantes remotos inyectar web script o HTML a través del parámetro \"name\", un vector diferente a CVE-2008-2751."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:9.1_01:b09d-fcs:*:*:*:*:*:*","matchCriteriaId":"4D4530B8-D1CC-4FCF-996B-65564B2543F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:9.1_02:b04-fcs:*:*:*:*:*:*","matchCriteriaId":"250D23D8-7897-4391-9B2B-278B2579DD1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6AD5FD-8A44-4184-B5F5-9FC0DF24B475"}]}]}],"references":[{"url":"http://secunia.com/advisories/30604","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4659","source":"cve@mitre.org"},{"url":"http://webappsecurity.wordpress.com/2008/06/11/xss-glassfish-web-admin-interface-sun-java-system-application/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493243/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29646","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47029","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://webappsecurity.wordpress.com/2008/06/11/xss-glassfish-web-admin-interface-sun-java-system-application/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493243/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5267","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the question_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en answer.php en Experts v1.0.0, cuando magic_quotes_gpc no está activo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"question_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:experts:experts:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"184FC3E3-5EFC-4241-8F8D-D6D254822E99"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4654","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29642","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42954","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5776","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5268","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en content/forums/reply.asp en ASPPortal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Topic_Id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspportal:aspportal:free:*:*:*:*:*:*:*","matchCriteriaId":"16F4D2B4-EA76-47FD-91FF-853FAF74840C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4653","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493302/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29631","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42977","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5775","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493302/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5269","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en pSys v0.7.0 alpha permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"shownews\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:psys:0.7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"BD1885FC-6DD8-4F8E-ACF1-E720093AB99A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4652","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42916","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5745","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5270","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.topics.php in Yuhhu Superstar 2008 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"board\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wareziz:yuhhu_superstar_2008:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"2E38897F-D869-458D-A78B-82F5B5766071"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4651","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29647","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5783","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5783","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5271","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Solution:\r\nUpdate to version 2.6.02.\r\nhttp://sourceforge.net/project/showfi...ckage_id=220740&release_id=610817","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Fred Stuurman SyndeoCMS v2.6.0 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"section\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:syndeocms:syndeocms:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EB2CB0C8-13CE-4E52-B2A8-18B9F9801B19"}]}]}],"references":[{"url":"http://secunia.com/advisories/30602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29644","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42970","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5272","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Solution:\r\nUpdate to version 2.6.02.\r\nhttp://sourceforge.net/project/showfi...ckage_id=220740&release_id=610817","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the template parameter to (1) starnet/editors/fckeditor/studenteditor.php; (2) starnet/modules/sn_news/edit_content.php, reached through starnet/index.php; and (3) starnet/modules/sn_newsletter/edit_content.php, reached through starnet/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Fred Stuurman SyndeoCMS v2.6.0 permiten a usuarios remotos autenticados leer ficheros de su elección a través de .. (punto punto) en el parámetro \"template\" de (1) starnet/editors/fckeditor/studenteditor.php; (2) starnet/modules/sn_news/edit_content.php, a través de starnet/index.php; y (3) starnet/modules/sn_newsletter/edit_content.php, a través de starnet/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:syndeocms:syndeocms:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EB2CB0C8-13CE-4E52-B2A8-18B9F9801B19"}]}]}],"references":[{"url":"http://secunia.com/advisories/30602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4660","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29644","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42969","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5273","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewnews.asp en Todd Woolums ASP News Management v2.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"newsID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toddwoolums:todd_woolums_asp_news_management:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B54CF20C-0F89-4858-A4BE-892E3BB4CEAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29638","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42964","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5781","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5274","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Todd Woolums ASP News Management v2.2 permite a atacantes remotos obtener nuevos elementos a través de una petición directa a (1) rss.asp, (2) viewheadings.asp, o (3) viewnews.asp.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toddwoolums:todd_woolums_asp_news_management:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B54CF20C-0F89-4858-A4BE-892E3BB4CEAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47032","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5275","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:00:08.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the (a) \"Unzip archive\" and (b) \"Upload files and archives\" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. (dot dot) in a filename within a (1) TAR or (2) ZIP archive.  NOTE: this can be leveraged for code execution by creating a .php file."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en las funcionalidades (a) \"Unzip archive\" y (b) \"Upload files and archives\" en et2ftp v0.96 estable y v0.97 beta permite a atacantes remotos crear, leer, o borrar ficheros de su elección a través de .. (punto punto) en un nombre de fichero con un archivo (1) TAR o (2) ZIP.\r\nNOTA: esto se puede aprovechar para la ejecución de código mediante la creación de un fichero .php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net2ftp:net2ftp:0.96:stable:*:*:*:*:*:*","matchCriteriaId":"E15C2167-3D5C-45D6-A3A4-D1AF76E097DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:net2ftp:net2ftp:0.97:beta:*:*:*:*:*:*","matchCriteriaId":"1F20497E-1230-4784-9282-C03FDAA1A30A"}]}]}],"references":[{"url":"http://secunia.com/advisories/30611","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/net2ftp096-en.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29664","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42994","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/net2ftp096-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5276","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.417","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función ReadRealIndex en el archivo real.c en el Real demuxer plugin en reproductor multimedia VideoLAN VLC desde la versión 0.9.0 hasta 0.9.7, permite a los atacante remotos ejecutar arbitrariamente código a través de ficheros RealMedia (.rm) mal formados que lanzan un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C13FF305-2547-4E85-9007-0A89F5E34BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3E93836E-E9D1-4180-A589-43602647741C"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B3B32073-DBD5-4344-8498-A132B99807A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5330E5C4-BF18-498A-9AE2-1C57E2494AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"86D31A16-94EE-45D6-8C54-4F27D466A29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"117C896C-1C61-440E-B0F4-A871828CD095"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"53C17E1A-2E3A-4765-92DE-55CFEE5E4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"117878B7-E04F-400E-8E63-FFC5420978A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8815D85E-1556-40A8-9465-0200D720444B"}]}]}],"references":[{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33315","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-24.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4680","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50333","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498768/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32545","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-013.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0811.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3287","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498768/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-013.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.videolan.org/security/sa0811.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5277","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query."},{"lang":"es","value":"PowerDNS y versiones anteriores a 2.9.21.2 permite a los atacantes remotos causar una denegación de servicios (caída del daemon) a través de una petición CH HINFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.21.1","matchCriteriaId":"BAD2312B-4B45-4615-A04B-371E899E7687"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.1:*:*:*:*:*:*:*","matchCriteriaId":"F9593BDE-0312-4974-9BB0-9F36A2E322CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.2:*:*:*:*:*:*:*","matchCriteriaId":"CC86997B-563C-45A1-A00E-4BA528399045"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.3:*:*:*:*:*:*:*","matchCriteriaId":"302D8930-8978-4F96-8567-FFE729DE090B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.4:*:*:*:*:*:*:*","matchCriteriaId":"7220C466-C380-44D1-9F34-14CE6F6C74B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.5:*:*:*:*:*:*:*","matchCriteriaId":"A3B6317C-4432-4B00-A9A4-2E4E3616CD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BA1E7C15-C860-45EB-9765-1A0314B00E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.7:*:*:*:*:*:*:*","matchCriteriaId":"A24A144D-DD9C-41AA-8813-520BD32BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8F9E1D-324A-4AF1-A4CC-BB1878AC651D"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.9:*:*:*:*:*:*:*","matchCriteriaId":"A076AC5F-2F6C-41B1-9ACB-EF449AE889D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.10:*:*:*:*:*:*:*","matchCriteriaId":"1D72865C-E4EE-414E-B503-6613AE806E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.11:*:*:*:*:*:*:*","matchCriteriaId":"165B5D82-A9B1-4FD0-9D2E-936E9F17AB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:1.99.12:*:*:*:*:*:*:*","matchCriteriaId":"22CC81DB-C4D8-41E8-913D-A7AE7E944295"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.0:*:*:*:*:*:*:*","matchCriteriaId":"04B35FA9-6D67-4A72-AD4D-7DB55ABB316A"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"53BFFA37-2992-4E2B-84C5-074AC5884B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"57A9CD23-6152-4C37-968B-3026E08075A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F54E488-7932-427D-A22A-BA49615CF49A"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0AE78107-A82E-442F-B6B6-0EBE631C7536"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDD20EBB-7FF5-4355-ADF8-0967BFE20BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DC92BD1B-DCB7-4DB1-9B1B-6E71E04B5FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.4:*:*:*:*:*:*:*","matchCriteriaId":"3855CD77-D3BB-4A0A-B442-EFDEB0990AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.5:*:*:*:*:*:*:*","matchCriteriaId":"0983B0D7-07B0-4090-BCFF-244E023B38D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"058AF85E-5FF5-4FBD-8BEF-F7B227CE6BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.6:*:*:*:*:*:*:*","matchCriteriaId":"D141A8D1-C9A0-450A-827A-A956B8D20A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.8:*:*:*:*:*:*:*","matchCriteriaId":"2AC7BEE9-06FF-487D-B77D-5F05AA5C6324"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"9C1E89A2-4993-4208-B67F-52B08A6F1BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"B340CA64-2358-46E6-8F65-725B6ACE77D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8ADBB8B1-C732-49BA-9270-F5551A9E2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"80C62126-2E61-4532-BFA2-D66FCCC8C9E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"4472A3D7-8E17-4D80-AA2D-724C74EEF9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"07CDE603-2A52-4C6F-B6A3-563D516BB4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*","matchCriteriaId":"AC3E5668-9B66-4C80-8C38-6FF01C342182"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"BB793844-A30A-4F97-954B-690083E77430"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*","matchCriteriaId":"B636157B-E627-4EF1-B6C2-640648C001D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*","matchCriteriaId":"34EEA40F-CD68-4AE9-A305-402BFBEEA23B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*","matchCriteriaId":"40FFBCCC-3595-4148-A3CD-28FD390FB786"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*","matchCriteriaId":"3B7722F1-D913-42A0-93EA-48140F47F221"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*","matchCriteriaId":"16E26E04-71AA-4A00-B0EE-9A04A63ADBBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*","matchCriteriaId":"4A413F4D-123A-4AA6-A097-9900F9B39817"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*","matchCriteriaId":"4F03070D-C76A-4A31-AA0C-E32442EBE83B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.16:*:*:*:*:*:*:*","matchCriteriaId":"F2BE9083-C8DA-4CCB-AAA0-8E31A1C566D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerdns:powerdns:2.9.17:*:*:*:*:*:*:*","matchCriteriaId":"11FC77A2-E464-4832-ADCD-68D66E7CB29E"}]}]}],"references":[{"url":"http://doc.powerdns.com/powerdns-advisory-2008-03.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33264","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-19.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47076","source":"cve@mitre.org"},{"url":"http://doc.powerdns.com/powerdns-advisory-2008-03.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5278","sourceIdentifier":"cve@mitre.org","published":"2008-11-28T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://wordpress.org/development/2008/11/wordpress-265/\r\n\r\nThe security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package.","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función self_link en el RSS Feed Generator (wp-includes/feed.php) para WordPress versiones anteriores a v2.6.5 permite a atacantes remotos inyectar web script o HTML de su elección a través de una cabecera Host (variable HTTP_HOST)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.3","matchCriteriaId":"6E8C6510-493D-4239-A346-991FDADE8AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*","matchCriteriaId":"C3C33D37-2FFF-4DE5-B260-E090F4E6377B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"3E4139FE-7C43-44AC-856F-226E1194D936"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*","matchCriteriaId":"FC499ABC-D1A6-4A9B-A06B-12C8275462DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*","matchCriteriaId":"5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*","matchCriteriaId":"056E641C-9322-4BEE-97B4-FE16DE8D7336"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*","matchCriteriaId":"ADB42CEF-E12D-4DB0-8536-FD393D3697A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*","matchCriteriaId":"C4AF89F9-AE67-49B5-ACF0-3A645C454E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*","matchCriteriaId":"FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*","matchCriteriaId":"C516C041-B945-4992-8104-E20B3B6CECDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E85A88D7-07A1-4A8C-88B5-057AD9C675E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*","matchCriteriaId":"AFBD4E49-EA17-4FFD-AF9C-950E542555A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*","matchCriteriaId":"6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*","matchCriteriaId":"4C4229BC-1646-4202-92B8-FC718D557518"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*","matchCriteriaId":"947635DB-A86E-45F0-B946-559202C49503"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEABEFD-E248-42B7-B99E-FFDEE27F7064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:*","matchCriteriaId":"46B86AD1-967D-4C8E-BD31-C2A2197B1E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*","matchCriteriaId":"94ADC624-E43E-4F1D-8525-F6903943C932"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"06A25444-2680-4379-B2CA-9858B6AF71CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4801D56C-5ED6-4648-A0C9-EB4D06786A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A777651-D2B2-47E0-A13C-BD667635F3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1503C4CB-5D58-4523-860C-4B637AD91CB9"}]}]}],"references":[{"url":"http://osvdb.org/50214","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32966","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4662","source":"cve@mitre.org"},{"url":"http://wordpress.org/development/2008/11/wordpress-265/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498652","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32476","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46882","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00000.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00176.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/development/2008/11/wordpress-265/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00176.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5279","sourceIdentifier":"cve@mitre.org","published":"2008-11-29T02:30:00.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier allow remote attackers to execute arbitrary code via (1) heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and (2) a stack-based buffer overflow with a long username in an information request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El servidor local ZIM zcs.exe) en Zilab Chat y Instant Messaging (ZIM) Server v2.1 y versiones anteriores permite a atacantes remotos ejecutar código de su elección a través de (1) desbordamientos de búfer basados en montículo envolviendo múltiples vectores incluyendo un nombre room largo y una cuenta origen larga, y (2) un desbordamiento de búfer basado en pila con un nombre de usuario largo en una petición de información.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zilab:zim_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"E1512E81-1C07-4242-A327-DD6ED51AF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:zilab:zim_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7967A0F3-148A-4B43-98CD-CFB45D63D563"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/zilabzcsx-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/zilabzcsx.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27940","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0664","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/zilabzcsx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/zilabzcsx.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5280","sourceIdentifier":"cve@mitre.org","published":"2008-11-29T02:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted requests without required parameters."},{"lang":"es","value":"El servidor local ZIM en Zilab Chat y Instant Messaging (ZIM) Server v2.0 y v2.1 permite a atacantes remotos provocar una denegación de servicio (puntero de referencia NULL) a través de peticiones manipuladas sin parámetro requeridos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zilab:zim_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"E1512E81-1C07-4242-A327-DD6ED51AF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:zilab:zim_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7967A0F3-148A-4B43-98CD-CFB45D63D563"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/zilabzcsx-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/zilabzcsx.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27940","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0664","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0665","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/zilabzcsx-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/zilabzcsx.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5281","sourceIdentifier":"cve@mitre.org","published":"2008-11-29T02:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a long DELE command."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el servidor FTP Titan v6.05 build 550 permite a atacantes remotos ejecutar código de su elección a través de un comando \"DELE\" largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:6.05:build_550:*:*:*:*:*:*","matchCriteriaId":"D763CF95-6A41-4BDB-87C9-FFB285194C99"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0802-exploits/titan-heap-py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27611","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0802-exploits/titan-heap-py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5282","sourceIdentifier":"cve@mitre.org","published":"2008-11-29T02:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el navegador web W3C Amaya v10.0.1 permiten a atacantes remotos ejecutar código de su elección a través de (1) un enlace con un atributo HREF largo, y (2) una etiqueta DIV con un atributo id largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:amaya_web_browser:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E1CE9DE5-7228-427A-8E6F-37DE9C000F29"}]}]}],"references":[{"url":"http://osvdb.org/50282","source":"cve@mitre.org"},{"url":"http://osvdb.org/50283","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4657","source":"cve@mitre.org"},{"url":"http://www.bmgsec.com.au/advisory/40/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bmgsec.com.au/advisory/41/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498578/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32442","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3255","source":"cve@mitre.org"},{"url":"http://osvdb.org/50282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bmgsec.com.au/advisory/40/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bmgsec.com.au/advisory/41/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498578/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5283","sourceIdentifier":"cve@mitre.org","published":"2008-11-29T02:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the delall action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. CVE analysis suggests that the most recent version as of 20081128 is 1.2, and the File Upload Manager does not have a \"delall\" action."},{"lang":"es","value":"Google Hack Honeypot (GHH) File Upload Manager v1.3 permite a atacantes remotos borrar ficheros subidos a través de vectores desconocidos relacionados con la acción \"delall\" de \"index.php\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros. El análisis CVE sugiere que la versión más reciente de 20081128 es 1.2, y File Upload Manager no tiene una acción \"delall\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghh:google_hack_honeypot_file_upload_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"549FEB40-55FF-4570-A507-7423D715924A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27877","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5284","sourceIdentifier":"cve@mitre.org","published":"2008-11-29T02:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El servidor web en IEA Software RadiusNT y RadiusX v5.1.38 y otras versiones anteriores a v5.1.44, Emerald v5.0.49 y otras versiones anteriores a v5.0.52, Air Marshal v2.0.4 y otras versiones anteriores a v2.0.8, y Radius test client (también conocido como Radlogin) v4.0.20 y otras versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una cabecera HTTP Content-Length con un valor negativo, lo cual dispara un byte único sobrescrito de memoria utilizando un terminador NULL.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FEB8F691-E231-475B-AFE2-81E1D01D33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"80F61318-D8E0-4ED9-AB2A-B2A0B7576194"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DDFAAD7E-4577-41D8-B6C6-D6D2C01F0E08"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"63555592-1B04-4932-8D0A-08D7AB361FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7B09CA82-D550-4AE3-809D-67D8C4AC4A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5769045C-4691-4636-A006-E4F2F5D47D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"36950501-D505-415F-BFFD-B146735B4A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D6B329B3-3B4E-4770-8F25-7527AF076AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"289480E0-5120-4A34-8E80-4E38F52A7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0EDDB7FF-B8AB-4F3E-860F-00BFB942C152"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"11FC9CEF-1E65-4473-92A6-8E672E72FCF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"85B39934-277B-4CB3-A1F2-1E64D2B3E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"2502B380-BA49-4995-AFC3-ECCDD9A29932"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D212315D-0712-4922-9AA7-8EEEE003A192"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"338B1773-7479-469E-BC7C-34EF403972AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"7A7D9061-96B9-4B63-BE4F-F2EF602B0EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FEC2C0E3-8FB2-4290-BBB0-3E82CC64A900"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.0.b.7:*:*:*:*:*:*:*","matchCriteriaId":"3A3DBE6F-A685-4E45-912A-9E9D6C5ED302"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.0.b1:*:*:*:*:*:*:*","matchCriteriaId":"CB26BA5D-EE16-43A8-818B-88BC0A22842E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CD48E614-496C-4326-9902-C86995BADC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FCFE9ECD-DB0E-4F92-B966-1772BA5F9089"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E832F112-2893-4E70-B142-CDD87D8088F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:air_marshal:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4C3C8815-826A-41E4-BCA9-9F78710F4BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F767190A-B0C3-46E8-B87C-70737648D6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"E0C71199-8F25-421C-9D35-22EF076F0707"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"3A15BE53-E545-482B-87D7-C0A61A854C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"44545FCA-7E9F-4E20-AC99-A4D4AF31FB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"8623456C-8417-49F3-8ABA-3BAD05E26373"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"FF1D00E8-6EEB-47E5-92A9-7E9977AE28D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"F9528573-9155-49CC-A6E9-DEF423456053"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.31:*:*:*:*:*:*:*","matchCriteriaId":"97225EF3-7509-421E-8A2C-E9729571B65F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"A0D80224-0808-4645-8F83-16AFD22AA6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"9D328AD7-C3CF-48B8-9EAB-97AA3FB50AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.35:*:*:*:*:*:*:*","matchCriteriaId":"BC4C6AE9-070C-467C-A823-C75BE067225C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F048B337-7063-4FD4-98F2-939AB6E45B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"C676B941-8361-4694-8083-9F9AA71D7C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.39:*:*:*:*:*:*:*","matchCriteriaId":"7C0FE97F-9155-4452-8659-924779624E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.40:*:*:*:*:*:*:*","matchCriteriaId":"7E6D623E-CA87-434C-9A20-F04815AD3F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"2AB79234-ADA3-4CE3-884A-D6FE09EC23BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"DD4A55DE-2281-453B-B5C3-CA5D8294690D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"EC8F24E7-080A-4D25-9F0F-6F073D2EAD6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.46:*:*:*:*:*:*:*","matchCriteriaId":"4241AE12-DFBC-4C79-8A33-920876782717"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.48:*:*:*:*:*:*:*","matchCriteriaId":"7F6B60B6-E507-4828-900F-1863BC85146D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.49:*:*:*:*:*:*:*","matchCriteriaId":"41434052-E61A-4B7F-B99F-28887279F0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"F8571E0D-1C8E-464F-A4DD-8F34274CE37A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:emerald:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"9782A4F3-141D-4D06-A73D-24FE1DF3E084"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radius_test_client:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F9525B-6E6E-41E6-B3DB-80A0E534D46B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radius_test_client:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE2B2-A923-4B34-B99E-7E40E237169B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.42","matchCriteriaId":"1A52B31C-B49B-4B39-94BB-0E544765BD51"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.145:*:*:*:*:*:*:*","matchCriteriaId":"DC8FFBDE-EB7A-40C9-BED7-805B9B072AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.147:*:*:*:*:*:*:*","matchCriteriaId":"47A3301A-4BE1-42C7-84B1-B4C9AE3EC950"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.149:*:*:*:*:*:*:*","matchCriteriaId":"40EE8139-C062-4931-9C4A-C491C7C31317"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.150:*:*:*:*:*:*:*","matchCriteriaId":"B0074DAC-E043-40FB-ADD2-56DFD7B16DD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.154:*:*:*:*:*:*:*","matchCriteriaId":"44BDF322-9F23-40A0-B8BD-4DD21940AE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.158:*:*:*:*:*:*:*","matchCriteriaId":"2078ABB7-0D32-449A-ADCD-12E8DB923DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.162:*:*:*:*:*:*:*","matchCriteriaId":"4919AC10-A6B6-419D-AC9D-AB20EA16CA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.167:*:*:*:*:*:*:*","matchCriteriaId":"D752E07C-EC17-4B55-BA74-B40BC97680B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.168:*:*:*:*:*:*:*","matchCriteriaId":"2F613FF6-1DD2-4DEE-B30E-8E0112C4AD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.171:*:*:*:*:*:*:*","matchCriteriaId":"AC1E69F2-4F3B-45D6-835F-1E78EFD5C863"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.172:*:*:*:*:*:*:*","matchCriteriaId":"3784EFAC-80A2-410C-A658-974327F074A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.173:*:*:*:*:*:*:*","matchCriteriaId":"7C59A80F-4EA9-4688-8F73-9ABC00F9F79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.174:*:*:*:*:*:*:*","matchCriteriaId":"DD86F955-6EB9-407F-A55B-D739E62ACF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.175:*:*:*:*:*:*:*","matchCriteriaId":"4298B815-639E-4127-B8D6-0574BB82DBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.176:*:*:*:*:*:*:*","matchCriteriaId":"412C9D91-6710-45FF-8D05-7563E7780C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.177:*:*:*:*:*:*:*","matchCriteriaId":"912F57D5-019B-48DB-A767-5DD9817BD5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.178:*:*:*:*:*:*:*","matchCriteriaId":"1DF3118E-3280-43D7-B3D1-0DDA06AC31B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.179:*:*:*:*:*:*:*","matchCriteriaId":"73BC6395-7CEE-4B3B-BDA5-FB0DC70CBC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.182:*:*:*:*:*:*:*","matchCriteriaId":"F598BEDB-58D9-4F2A-80CA-45FBD4DF8858"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.183:*:*:*:*:*:*:*","matchCriteriaId":"3A2AD0FD-04F3-4176-8209-4B4FFB78B778"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.184:*:*:*:*:*:*:*","matchCriteriaId":"E426A49F-F863-4716-8889-4923BFDB2286"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.185:*:*:*:*:*:*:*","matchCriteriaId":"B39DA088-EFB3-43DC-8AE7-7427C2B88029"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.186:*:*:*:*:*:*:*","matchCriteriaId":"6722C37A-261B-406C-9C2C-3C57C61F04B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.188:*:*:*:*:*:*:*","matchCriteriaId":"D0E57225-23D8-4CBD-81BC-B027D36B5B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.189:*:*:*:*:*:*:*","matchCriteriaId":"EFCB4725-F486-4F84-993F-7E84EE2B3BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.190:*:*:*:*:*:*:*","matchCriteriaId":"ABC6387B-9942-45E2-A30D-54AB588FE4AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:3.0.191:*:*:*:*:*:*:*","matchCriteriaId":"7438FB40-D802-42C6-8245-74F52AAC9EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3550583A-1D83-4B86-AB71-EE11EDB6A121"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A8C059DD-CF53-445F-8813-D8967E4F352E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E09A533F-A51F-4118-BEC6-403EC075A271"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"40ADF660-0889-4900-829A-681E279D81C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"343B02FE-B690-49C0-8B18-78F1F560B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"ACC612A7-66D2-4808-A1A6-0C1B805913C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"972D3ED8-438F-493C-8716-E7B5675AF73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"BE21AF6B-4469-4FEA-933E-4BB9899A156F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"BD5C2E16-B48C-4A7E-9B99-CB95099E3CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"240814AB-9E67-44F9-9722-57B497EF741F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"56DFD5E9-3DEB-4237-BEF5-375A3B928B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"CE8430D9-F61E-4D6F-B803-DA07ABC1FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3F71901C-5A7D-45ED-A63B-CD6751DAC665"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"0EA3FF33-DA3F-45B8-8481-D4F9F9DE3DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"62D383C5-A332-43B0-8AFF-CF0BF8FFF535"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"E7290B23-D0C3-477D-B242-A6446F322FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"1D89F1B2-8BA0-40E0-A240-814FD996194E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"13D85319-7726-476A-8A2D-485B94759894"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"93F0DCDA-3838-4045-A33F-C642FA987EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.27:*:*:*:*:*:*:*","matchCriteriaId":"D727E86E-0FC2-45E1-BD5D-9268951490AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.28:*:*:*:*:*:*:*","matchCriteriaId":"6AEDF077-70B9-4C9F-81FE-4CB34D09CD2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.29:*:*:*:*:*:*:*","matchCriteriaId":"AE35BA59-EAB7-4B83-91B4-4284CE2DEFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.30:*:*:*:*:*:*:*","matchCriteriaId":"04661B96-D4FB-42FC-B4FB-0B5529332307"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.31:*:*:*:*:*:*:*","matchCriteriaId":"A2DD702C-AE17-4477-BD6D-A2A22F55A5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.32:*:*:*:*:*:*:*","matchCriteriaId":"DC7381FD-B66C-4A8E-B2FD-52BAF55BBCF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.33:*:*:*:*:*:*:*","matchCriteriaId":"C124FEDA-A599-49C2-BBB8-61F9B767719B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.34:*:*:*:*:*:*:*","matchCriteriaId":"C3B3AF1A-D47F-4537-8AE7-4857C539AC6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.35:*:*:*:*:*:*:*","matchCriteriaId":"949E7273-896D-49C2-B102-7CE400438B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.38:*:*:*:*:*:*:*","matchCriteriaId":"517D1248-4841-45AB-A5C1-8F1FBC810276"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.39:*:*:*:*:*:*:*","matchCriteriaId":"46E27D21-0EE4-461E-9D14-CD780627C250"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.40:*:*:*:*:*:*:*","matchCriteriaId":"B8CB31B0-4434-464C-9CB9-37282512B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.41:*:*:*:*:*:*:*","matchCriteriaId":"A2690A34-A618-4EAD-8365-B0097D531C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.43:*:*:*:*:*:*:*","matchCriteriaId":"18F21C18-C87B-44AD-9368-07D7E4BDE75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.44:*:*:*:*:*:*:*","matchCriteriaId":"0F40C2A4-3604-40DD-B0B0-7344284D4D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.47:*:*:*:*:*:*:*","matchCriteriaId":"6170FEA8-F5D7-4251-8C3E-4F557AC14BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.49:*:*:*:*:*:*:*","matchCriteriaId":"EED4928A-E529-4DB2-A9A7-D5A9C32A4726"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.51:*:*:*:*:*:*:*","matchCriteriaId":"B6211500-AE2C-4A97-958F-9008FCFB4F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D5BC668B-0F17-47E1-ABA7-7729C4BA04A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.55:*:*:*:*:*:*:*","matchCriteriaId":"6F21D4AF-4434-42FF-A121-732502BD7C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.56:*:*:*:*:*:*:*","matchCriteriaId":"23573A10-25E8-4ED0-856A-9867CCD7B683"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.57:*:*:*:*:*:*:*","matchCriteriaId":"D04076DF-CB0D-4784-AFB2-E683BD7AD6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.59:*:*:*:*:*:*:*","matchCriteriaId":"13B63898-3898-4355-85CE-11845D1EC98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.60:*:*:*:*:*:*:*","matchCriteriaId":"330598BB-58C2-483A-8AA9-5DA20E48DDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.62:*:*:*:*:*:*:*","matchCriteriaId":"0B783D08-ECE9-4ECA-8D85-3750D6F44C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.63:*:*:*:*:*:*:*","matchCriteriaId":"86542554-A7AF-48BE-BFA5-7F8FD9EF4FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.67:*:*:*:*:*:*:*","matchCriteriaId":"5E14EAF3-B39D-40E8-9404-38FAF23AEBAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.68:*:*:*:*:*:*:*","matchCriteriaId":"4BFC5AB5-10B5-4308-9E6B-23A76BF54802"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.69:*:*:*:*:*:*:*","matchCriteriaId":"AA650A0D-E01D-41C1-B14D-46451F808222"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.70:*:*:*:*:*:*:*","matchCriteriaId":"6D07E8AC-1D3F-4CE0-8D0D-C53CC56E0F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.71:*:*:*:*:*:*:*","matchCriteriaId":"E45FB913-2263-4CE9-8DFC-78700B9939B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.72:*:*:*:*:*:*:*","matchCriteriaId":"E2A1F3A3-F2B0-4545-8C0A-33FEFDCD9896"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.73:*:*:*:*:*:*:*","matchCriteriaId":"48C061F2-F845-4005-ABED-1F13AD666FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.74:*:*:*:*:*:*:*","matchCriteriaId":"C4CFA30C-C2B9-4566-8336-0869E3554F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.75:*:*:*:*:*:*:*","matchCriteriaId":"D2F1D550-3F75-4013-A092-70A0611C5BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.76:*:*:*:*:*:*:*","matchCriteriaId":"85C32D55-4558-4963-87A8-1EF38781DA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.77:*:*:*:*:*:*:*","matchCriteriaId":"938E3D18-0CF0-4D5D-A17C-67D0D2BDB35F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.79:*:*:*:*:*:*:*","matchCriteriaId":"4C8F728E-1388-4ED1-94A4-0D91A573385B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.80:*:*:*:*:*:*:*","matchCriteriaId":"11DC0426-548D-4E6E-A78D-A83139848E03"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.81:*:*:*:*:*:*:*","matchCriteriaId":"4FF02261-9FAB-4113-96E7-6AA80DECBE9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.82:*:*:*:*:*:*:*","matchCriteriaId":"FEA71782-72E6-471C-A1F9-915CAA96ABC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.83:*:*:*:*:*:*:*","matchCriteriaId":"B8643A3C-C0B8-45C9-B5B5-7C86A84ADAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.84:*:*:*:*:*:*:*","matchCriteriaId":"DB2963EF-41B3-49EE-A033-C41DF6AC9FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.85:*:*:*:*:*:*:*","matchCriteriaId":"23638E57-F503-4B13-A78C-3B683FEC4805"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.86:*:*:*:*:*:*:*","matchCriteriaId":"8FDACE75-2A3F-4E39-90C3-1AFFB3672534"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.0.193:*:*:*:*:*:*:*","matchCriteriaId":"0627C8F5-1FDD-4C2B-A415-0DCF345E1C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:4.09:*:*:*:*:*:*:*","matchCriteriaId":"12F3A426-6AE4-4F96-B661-A5212203AE0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"F3CDC40D-E3C4-4CF3-AEF7-6E202D413DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"50309CC1-AB30-43B2-A952-D125236559C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.8b:*:*:*:*:*:*:*","matchCriteriaId":"37C310AD-6232-4F35-96A7-9DE3EE23EA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.9b:*:*:*:*:*:*:*","matchCriteriaId":"82F7449D-C71C-4001-A1C7-3B920A1ECA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.10b:*:*:*:*:*:*:*","matchCriteriaId":"7FDB9AE9-3C56-4BA1-95A6-0F8F3D964953"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.13b:*:*:*:*:*:*:*","matchCriteriaId":"3F3F892E-8982-48F4-95F9-BF04D0F77367"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.15b:*:*:*:*:*:*:*","matchCriteriaId":"B5315459-B3D5-45B3-B9B1-542C8ADAEA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"0ED79101-FB57-41B5-A575-97A66D1B7D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"D464D916-5D59-43FE-9F92-4655122DE43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"3AD66C7D-955D-4889-B372-F8ECB552FB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"5326011A-94E1-4BCB-87A0-E8A815E8A8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.31:*:*:*:*:*:*:*","matchCriteriaId":"1EF3C584-3ECC-4DCE-A694-5384D48722F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.35:*:*:*:*:*:*:*","matchCriteriaId":"52BBB402-8367-4FD9-90A5-7FA89CC94E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F6A19405-B12A-4BC7-A61F-6A009712F2B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"A15BEA0C-5AEC-456B-8825-BBCFF5E8E278"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.39:*:*:*:*:*:*:*","matchCriteriaId":"00F84BC6-00B0-4E24-A918-ED5EEDC3D21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"66E3BF6A-0F88-48B9-A0D8-A26EFD66E354"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.43:*:*:*:*:*:*:*","matchCriteriaId":"33EE4608-51BE-4672-91E7-A4EDD7D5C9F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"65FB9A15-28DF-48A7-BE7B-EF113033BF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.49:*:*:*:*:*:*:*","matchCriteriaId":"4D780F5B-D3A5-4626-83A5-4E9CD552DBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"99A63D59-B244-4A81-85E9-2767CBFD4AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"5601F7D8-85C9-4C3C-83FB-60781B16349E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.55:*:*:*:*:*:*:*","matchCriteriaId":"2E37C73F-763B-4518-AC9D-C09CC911CF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.0.58:*:*:*:*:*:*:*","matchCriteriaId":"F46BB49E-C5FD-4562-A1B7-7354F2E40789"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8776EE97-5EF3-48F7-B3DB-F253308313C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A20D34A0-E8AA-4D0F-9169-9D18C866952B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"703ACD21-F3BE-4159-8508-28D769EA0779"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"789368C2-74EF-4C7B-B445-B61E7A2B7FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"EE916504-D3BF-4117-94E8-F13490CCC466"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"6AD61A1B-C446-4BB8-BA07-693AF142B4C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"AADD7DD3-8B45-4FE3-8DFD-B6E79E06AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D2CC5A90-DA5E-4661-88DA-FDE2B489E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"DC69DA4D-BB1C-48B8-86D3-D45F36A77D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"7E1E5437-FCA2-429D-B3C2-B12BAC61EB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"E1AB2023-627D-46AB-A186-B3CA6D71EB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.29:*:*:*:*:*:*:*","matchCriteriaId":"00931C1C-703B-471F-8ADD-8DA2CB894A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.35:*:*:*:*:*:*:*","matchCriteriaId":"3E6F9023-C8F1-4DC5-A1E4-305480F4CC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.38:*:*:*:*:*:*:*","matchCriteriaId":"3214CC2F-D2DA-4D00-83EC-09E495CF5021"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.40:*:*:*:*:*:*:*","matchCriteriaId":"DD95DEC6-CEC1-476A-86FA-185E660487EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusnt:5.1.41:*:*:*:*:*:*:*","matchCriteriaId":"007546F7-3157-495C-8B89-B53C7DD28379"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.42","matchCriteriaId":"FB29C571-4908-4787-A18A-7B7B61D1D3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.145:*:*:*:*:*:*:*","matchCriteriaId":"14D05826-D78B-4987-AB2B-789226C06306"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.147:*:*:*:*:*:*:*","matchCriteriaId":"DFACC0E5-79D1-4C25-8CA0-EF2F64048C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.149:*:*:*:*:*:*:*","matchCriteriaId":"47B7A9FE-A95D-4591-969A-C9E4F0EEE1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.150:*:*:*:*:*:*:*","matchCriteriaId":"22103431-9519-4A51-AD1C-A48B4AB842CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.154:*:*:*:*:*:*:*","matchCriteriaId":"F5181FA6-0FE0-40E2-8CAE-C898CF52C14B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.158:*:*:*:*:*:*:*","matchCriteriaId":"904E9036-E651-41B3-8EDB-CA9065F1A3D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.162:*:*:*:*:*:*:*","matchCriteriaId":"ED7A5659-1E42-497D-AD93-8F1D0D2E174E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.167:*:*:*:*:*:*:*","matchCriteriaId":"41956E2E-C03E-4442-BC2B-3250CD657225"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.168:*:*:*:*:*:*:*","matchCriteriaId":"EDB5A037-E6EB-40C4-AE30-3C14C60BF53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.171:*:*:*:*:*:*:*","matchCriteriaId":"644CFB1A-56FE-4796-85E7-9C61370D75E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.172:*:*:*:*:*:*:*","matchCriteriaId":"FA9F8D12-2102-4D8F-A78A-DB440DC33E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.173:*:*:*:*:*:*:*","matchCriteriaId":"E8D3C881-7C94-468A-A415-ACE2CCCF71E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.174:*:*:*:*:*:*:*","matchCriteriaId":"09DF5632-8025-4995-8EF4-A12BF45679BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.175:*:*:*:*:*:*:*","matchCriteriaId":"72349B8C-F52F-48D4-ADE3-44AA19783126"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.176:*:*:*:*:*:*:*","matchCriteriaId":"7D1B8BA6-086F-4795-8E35-FB0122EC12E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.177:*:*:*:*:*:*:*","matchCriteriaId":"DA25D4A3-21F5-4722-BAD4-D29B40397124"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.178:*:*:*:*:*:*:*","matchCriteriaId":"EFCA626B-0DEC-4346-B4C4-091706BF5B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.179:*:*:*:*:*:*:*","matchCriteriaId":"7F977F94-32AB-431E-9890-579457611846"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.182:*:*:*:*:*:*:*","matchCriteriaId":"E21A05FA-27A1-40ED-BBDA-4580841D392F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.183:*:*:*:*:*:*:*","matchCriteriaId":"93BCC40D-1AB2-4DEE-8446-7CAA77885BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.184:*:*:*:*:*:*:*","matchCriteriaId":"3B4D3B44-D934-4CE8-BABA-6AE22110AC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.185:*:*:*:*:*:*:*","matchCriteriaId":"89723E3A-BF0C-45D9-A8AD-2B5B018F2892"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.186:*:*:*:*:*:*:*","matchCriteriaId":"833E75BF-5624-4B44-9C90-2E5140B9E759"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.188:*:*:*:*:*:*:*","matchCriteriaId":"77376237-4E49-4DC6-8102-AAEF7616C7E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.189:*:*:*:*:*:*:*","matchCriteriaId":"4EC5CCB6-31F1-44FB-9EDF-DCB82F4A98F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.190:*:*:*:*:*:*:*","matchCriteriaId":"D34CBC9E-840C-4AD9-9936-3B62D6225A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:3.0.191:*:*:*:*:*:*:*","matchCriteriaId":"8C97849D-BE1F-4118-AB75-70786DF5EFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73DAEF0D-CBAE-48CD-8D03-FD14F5B84439"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B55C2E0D-4750-4AB5-A372-B5F422B2FC64"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4A0753B9-C487-4394-B621-F76BA058411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"68B06F1C-8492-43A2-ADD2-DA903BC63CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B269D3F4-191A-4036-8018-96D73943FAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC037622-B20B-4EF5-B438-C091D05A2C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5FFBCFD3-8EF1-4289-8775-81436EDC1644"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"877DDA59-C246-49D8-B666-670EFB4F1EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5239E075-DE08-4E10-B74B-075ABFF9603E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"285917FC-5D16-43EF-9CF3-39FE31FEF237"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"F9DF0E11-ABFC-4477-BCBE-E9CD6D1CA577"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"AC3F05C8-BFAB-4318-8B2E-E515B04F4ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A7BCC10C-ABF4-4D2C-A983-034DBC8DAAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3D9E0AC5-6BB1-4CB6-B9B3-3B2172D1AEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"3EF47919-851E-4FF6-910A-41DB5E41952A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D03910CF-7A70-4820-8A52-EA2243661F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"B289C830-292D-43B6-A323-477199ADE207"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A433326E-64BF-4C6B-BB6E-97A640DB631E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"92B358DF-699E-4FD6-BD54-73EE68A7E2D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"E499B48B-EF99-4C71-9FA4-FD85DD5868E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.27:*:*:*:*:*:*:*","matchCriteriaId":"59456F9C-0657-48F9-9F9D-963B3B6A8F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.28:*:*:*:*:*:*:*","matchCriteriaId":"D698B042-738B-4F35-B469-F9E37A84B1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.29:*:*:*:*:*:*:*","matchCriteriaId":"9E17994A-C759-4CF4-8C15-16608F7B988E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.30:*:*:*:*:*:*:*","matchCriteriaId":"699B3B43-6B1A-42A5-98D7-124358142336"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.31:*:*:*:*:*:*:*","matchCriteriaId":"FBFED206-3914-4982-9733-F82F326BFA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.32:*:*:*:*:*:*:*","matchCriteriaId":"DE303730-C262-418D-B823-D363141123CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.33:*:*:*:*:*:*:*","matchCriteriaId":"8600A91C-2127-4126-91A1-6BC4EC65D40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.34:*:*:*:*:*:*:*","matchCriteriaId":"02B6F50F-8DAD-428C-B2BF-738EC5C5C003"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.35:*:*:*:*:*:*:*","matchCriteriaId":"08973DBC-FE14-472C-87BB-54BD181BE43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.38:*:*:*:*:*:*:*","matchCriteriaId":"A977FE01-94A7-41D6-93E3-D82CAEFC8867"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C05576D-6E54-4FE8-9C98-6550AF3157BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.40:*:*:*:*:*:*:*","matchCriteriaId":"324AE01C-5B1E-4CF7-96CC-6B0AD525B804"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.41:*:*:*:*:*:*:*","matchCriteriaId":"55056CB0-A007-4228-A82B-6AF4C292C31C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.43:*:*:*:*:*:*:*","matchCriteriaId":"3533194C-D140-430E-87E4-47D6CB1EA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.44:*:*:*:*:*:*:*","matchCriteriaId":"B1AD01F7-F2CF-4256-ACCD-97EBA1AD8DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.47:*:*:*:*:*:*:*","matchCriteriaId":"EE82CB7B-1045-4750-B648-DE191182074B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.49:*:*:*:*:*:*:*","matchCriteriaId":"7CE1E614-C8C0-4839-87EB-5BFC26AE3CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.51:*:*:*:*:*:*:*","matchCriteriaId":"8269AE5D-9334-43D4-A121-01A231FDC5F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.54:*:*:*:*:*:*:*","matchCriteriaId":"B9CF3049-33DA-4D4E-A309-36D57F9E8BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.55:*:*:*:*:*:*:*","matchCriteriaId":"3DF8E33C-6780-4789-A782-F97D4D22CB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.56:*:*:*:*:*:*:*","matchCriteriaId":"9794C132-68AA-41EA-B95D-48408C4D4C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.57:*:*:*:*:*:*:*","matchCriteriaId":"F0630710-E3AF-4DF8-92DD-E4F9188F49DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.59:*:*:*:*:*:*:*","matchCriteriaId":"332FFCA4-D7BE-4CC1-B83A-C41A46E68C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.60:*:*:*:*:*:*:*","matchCriteriaId":"84C622F5-9D36-4127-BDCA-2A03D3FC2E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.62:*:*:*:*:*:*:*","matchCriteriaId":"7F4F8524-0B31-4A4C-9DA0-FB7C9ABB2B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.63:*:*:*:*:*:*:*","matchCriteriaId":"8284A8A9-793A-47C0-B994-DD0B8E53CB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.67:*:*:*:*:*:*:*","matchCriteriaId":"D4E02FA3-4A5B-4B55-9796-97E80710FEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.68:*:*:*:*:*:*:*","matchCriteriaId":"96E0D308-139D-4AF0-959C-0F061037C8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.69:*:*:*:*:*:*:*","matchCriteriaId":"9FD71F44-4002-483E-8B82-3FF5AFB5BFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.70:*:*:*:*:*:*:*","matchCriteriaId":"53285410-85CD-44F9-B0CC-27DD6B322FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.71:*:*:*:*:*:*:*","matchCriteriaId":"6225698C-20B3-4E58-A771-836CBE161D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.72:*:*:*:*:*:*:*","matchCriteriaId":"9CC7AC35-3403-46AB-A221-38CB6C22F9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.73:*:*:*:*:*:*:*","matchCriteriaId":"0D3B98A7-C38C-4C0E-9D39-A4381B833FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.74:*:*:*:*:*:*:*","matchCriteriaId":"C5030D3E-FF6F-49FF-BA33-7BD8EDE0FBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.75:*:*:*:*:*:*:*","matchCriteriaId":"9623F377-7A11-4135-AB33-118BE4C00A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.76:*:*:*:*:*:*:*","matchCriteriaId":"FC1D5DFA-3C76-4E7D-9DD9-8E52CC3F6A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.77:*:*:*:*:*:*:*","matchCriteriaId":"5461D5CD-934E-481D-8EE6-120A4F5021DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.79:*:*:*:*:*:*:*","matchCriteriaId":"2A0889E6-67F1-4A09-8D6F-BD558A6E613F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.80:*:*:*:*:*:*:*","matchCriteriaId":"7DFAD775-9FC5-40C5-A09F-5A8381F99272"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.81:*:*:*:*:*:*:*","matchCriteriaId":"2DB4DC0E-B668-47BC-A9BB-0AF5DD0359E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.82:*:*:*:*:*:*:*","matchCriteriaId":"66C09FCA-BC88-4B3A-BE50-A0F586FBEFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.83:*:*:*:*:*:*:*","matchCriteriaId":"AAF5CBF6-97D7-4934-8BFE-449A83B4CA3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.84:*:*:*:*:*:*:*","matchCriteriaId":"0DD59D15-F5EB-47F9-B266-4413F80CC379"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.85:*:*:*:*:*:*:*","matchCriteriaId":"BCFDF334-E222-435C-8287-4940AA57A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.86:*:*:*:*:*:*:*","matchCriteriaId":"92161F4D-3447-4966-8D21-8930C9614E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.87:*:*:*:*:*:*:*","matchCriteriaId":"EF5BCFD1-CC50-468F-B486-01D014B91B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.88:*:*:*:*:*:*:*","matchCriteriaId":"34A65014-F727-49CF-AAEF-38234867B029"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:4.0.193:*:*:*:*:*:*:*","matchCriteriaId":"DDC0C856-2C6B-47FE-A0F5-53F4349324AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"706F0B87-F5A0-4F8F-9083-9B5D85F9DA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"97108200-81B6-433A-847B-B437B127B962"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.8b:*:*:*:*:*:*:*","matchCriteriaId":"0978A888-2061-4074-B581-F118C4268EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.9b:*:*:*:*:*:*:*","matchCriteriaId":"1383E54C-5205-4CB6-9B9E-AE29B623E876"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.10b:*:*:*:*:*:*:*","matchCriteriaId":"CB66F9E0-027D-4F70-9331-5C51501FBD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.13b:*:*:*:*:*:*:*","matchCriteriaId":"10B09E99-89C3-4D9A-9246-03B9897D5BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.15b:*:*:*:*:*:*:*","matchCriteriaId":"4A451A70-656D-46D0-B9BD-14881882FFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"670DEB21-0717-4B91-8FC4-235D12718FE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"E581A7BC-6051-4E6C-B367-7630C5A0CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"90F23876-25CD-492D-93CA-0AEBEAE4C530"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"63FECE72-F732-4112-8D03-99823AC0108D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.31:*:*:*:*:*:*:*","matchCriteriaId":"381396BC-196B-4694-B6D3-B5FECF9333B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FCCC3066-D00C-4B38-928F-187D049C7D11"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F18C3618-2B21-442F-A741-74B472B49716"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"0BC3086E-510E-4996-8C01-8F7CEEB56647"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.39:*:*:*:*:*:*:*","matchCriteriaId":"73BDC19A-8C8B-4E80-8C2E-9E65E53D157D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"A1276E08-C9CD-4992-8B95-81AC07891FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.43:*:*:*:*:*:*:*","matchCriteriaId":"54AC14C3-3D72-4B2B-9D95-49FEEDBA4D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"3E5022C0-0F7F-4189-BC9D-8E5524F05BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.49:*:*:*:*:*:*:*","matchCriteriaId":"17546E9F-9C55-487A-BC35-C1380474EAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C99D5C5C-9C5E-432B-B8A2-180A69358D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"3E67A195-5ACB-401F-AAE4-E323B36D0699"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.55:*:*:*:*:*:*:*","matchCriteriaId":"C6C475F0-8C4C-456B-AA30-BA47E6D09599"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.57:*:*:*:*:*:*:*","matchCriteriaId":"D7227540-0E8F-42AA-8717-22B736AA96C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.0.58:*:*:*:*:*:*:*","matchCriteriaId":"DBCD3D00-2781-4742-B2DD-757A53572550"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A1E169CD-7F49-4013-A35F-7A133993E2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"67A7C209-163D-4340-B5F4-7963DFEECE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E0D39E72-170A-4375-A0BA-9C41F03ABE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"2CE006CE-D59F-46D3-A944-CE4C8CC25490"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"30A23956-1372-4471-A365-8DC61F772E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"CF8BE196-40A1-41AE-98B6-9132DFAD3457"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"D2CA45FE-85B3-4344-9C4D-AA8DBDF5A6FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8DF48062-9B0C-4F5A-93E2-E792EDE37BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"5A69758B-0DC1-449D-B2DF-54788769EE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"236D789F-3232-4DD7-BA34-18408CEC2B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"64DE2BA2-87B8-4C90-BC8E-6604E5D4FE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.29:*:*:*:*:*:*:*","matchCriteriaId":"BCD98DEE-1ABF-4E6E-B769-FB2EF904F8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.35:*:*:*:*:*:*:*","matchCriteriaId":"2963D53B-7500-4DFE-9317-4E1861523BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.38:*:*:*:*:*:*:*","matchCriteriaId":"5853DBDE-877F-4237-8E75-C91338F6CFDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.40:*:*:*:*:*:*:*","matchCriteriaId":"2A2E1AC4-3CE0-4856-A27F-5F419996C7BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radiusx:5.1.41:*:*:*:*:*:*:*","matchCriteriaId":"AE3E0815-4389-477B-B047-EFE0B54E2789"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radlogin:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"A77EF06C-CE03-4FF9-9671-EEB866B99578"},{"vulnerable":true,"criteria":"cpe:2.3:a:iea_software:radlogin:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"73B00D65-C060-4A8B-A2E4-81D1B0995A04"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/emerdal-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28846","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iea-software.com/docs/Emerald5/changes.txt","source":"cve@mitre.org"},{"url":"http://www.iea-software.com/docs/Radius40/changes.txt","source":"cve@mitre.org"},{"url":"http://www.iea-software.com/docs/airmarshal1/changes.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487810/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0484","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/emerdal-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iea-software.com/docs/Emerald5/changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iea-software.com/docs/Radius40/changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iea-software.com/docs/airmarshal1/changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487810/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5285","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop."},{"lang":"es","value":"Wireshark 1.0.4 y anteriores permite a atacantes remotos causar una denegación de servicio a través de una petición SMTP demasiado larga, lo que ocasiona un bucle infinito."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Wireshark packages as shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2009-0313.html","lastModified":"2009-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"73D1A6BF-D71B-4EEA-A0FF-1922A0F0E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"DA052598-2E72-4568-B783-8B01382736DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3283D8D0-0714-48CC-94C4-B5FA6C913A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"090B987C-9880-4221-BC4C-8D53A8801649"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"06828062-5F31-4532-9E24-34F29CE30218"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"5738F4F0-41C6-48CF-8233-C94D79DCA807"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32840","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4663","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:242","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/24/1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498562/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32422","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021275","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3231","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-07.html","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472737","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11351","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498562/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499154/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5286","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow."},{"lang":"es","value":"Un desbordamiento de entero en la función _cupsImageReadPNG en CUPS 1.1.17 hasta 1.3.9 permite a atacantes remotos ejecutar código arbitrario a través de una imagen PNG con un gran valor de altura, lo cual impide una correcta comprobación de validación y ocasiona un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"7C671B95-8892-4D71-87FE-BABF5CBEC144"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33101","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33111","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L2974","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1677","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-01.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:029","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/01/1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1028.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32518","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021298","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3315","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46933","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10058","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L2974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5287","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en catagorie.php en Hilversum Werner FAQ Manager 1.2 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts4you:faq_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"280D2838-17C8-4C6A-92F6-670BA72AC2C2"}]}]}],"references":[{"url":"http://osvdb.org/50185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32868","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32466","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46833","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7224","source":"cve@mitre.org"},{"url":"http://osvdb.org/50185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5288","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config_path parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en include/header.php en Hilversum Werner FAQ Manager 1.2, cuando register_globals esté activado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro config_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts4you:faq_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"280D2838-17C8-4C6A-92F6-670BA72AC2C2"}]}]}],"references":[{"url":"http://osvdb.org/50184","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32868","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32472","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46840","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7229","source":"cve@mitre.org"},{"url":"http://osvdb.org/50184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5289","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en full_txt.php en Hilversum Werner Clean CMS 1.5 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts4you:clean_cms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C1E40B61-A6D7-49D8-8D98-691AC2D6C599"}]}]}],"references":[{"url":"http://secunia.com/advisories/32866","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32474","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46838","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7228","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7230","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5290","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en full_txt.php en Hilversum Werner Clean CMS 1.5 permite a atacantes remotos inyectar secuencias de comandos Web o HTML arbitrarios a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts4you:clean_cms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C1E40B61-A6D7-49D8-8D98-691AC2D6C599"}]}]}],"references":[{"url":"http://secunia.com/advisories/32866","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32474","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5291","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter, a different vector than CVE-2007-4805 and CVE-2008-3165."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en code/track.php en FuzzyLime 3.03 permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios a través de secuencias de salto de directorio en el parámetro p. Se trata de un vector diferente que el de CVE-2007-4805 y CVE-2008-3165."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03:*:*:*:*:*:*:*","matchCriteriaId":"16CC2B91-4E26-4E68-9F0E-FB4E6C1203D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4667","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32475","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46841","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7231","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5292","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL commands via the type parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en view_snaps.php en VideoGirls BiZ, permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videogirls:videogirls_biz:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"628AD3E6-5DFA-4382-B6D0-9ABB6D95C645"}]}]}],"references":[{"url":"http://osvdb.org/50309","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32808","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32477","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46872","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7234","source":"cve@mitre.org"},{"url":"http://osvdb.org/50309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5293","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands via the pageid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en Webstudio ehotel permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro PageID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bdigital_web_solutions:webstudio_ehotel:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"66E5F097-44B3-4A22-B7E3-5C100AD57B81"}]}]}],"references":[{"url":"http://osvdb.org/50201","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46831","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7222","source":"cve@mitre.org"},{"url":"http://osvdb.org/50201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5294","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en Webstudio eCatalogue permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro PageID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bdigital_web_solutions:webstudio_ecatalogue:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"5C6C9792-261A-4D3B-966C-E6CFDDA83E59"}]}]}],"references":[{"url":"http://osvdb.org/50200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32873","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4670","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46832","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7223","source":"cve@mitre.org"},{"url":"http://osvdb.org/50200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5295","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL commands via the show_emp parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en Jamit Job Board 3.4.10 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro show_emp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamit_software:jamit_job_board:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"6518E215-36E1-489D-A54A-BB4D36A06E26"}]}]}],"references":[{"url":"http://secunia.com/advisories/32797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4671","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46873","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5296","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Gallery 1.5.x antes de la versión 1.5.10 y 1.6 antes de 1.6 RC3, permite a atacantes remotos eludir el proceso de autenticación y obtener permisos de administración, cuando register_globals esté activado, a través de \"cookies\" no especificadas. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.9","matchCriteriaId":"262D20F7-E2F7-4B86-9C8F-989D18BA5F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"3D9D3D5D-8EAC-4542-A587-5430AF2971D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CB992A44-9FD4-4124-A745-041BDD6CBFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"40021F8A-58DD-403A-91A1-E0B5B6BAC274"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C3CC3D07-E409-4A70-8874-B86536A4ADCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"94BA1FE8-797B-4047-B8BB-D515093E8C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.3.4:pl1:*:*:*:*:*:*","matchCriteriaId":"2968FC3C-9241-4DEA-BD5A-7FA3F5A7FD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D18995C5-408E-45E6-84A6-47AF4EB777BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2D2AB579-D17F-4E79-BB44-C1B31C36E576"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EEB30F5E-BDFA-48A5-BC8D-F447C60FD67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.4.4:pl2:*:*:*:*:*:*","matchCriteriaId":"C967B574-E5B3-401A-B904-D2723B3F7131"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.5.1:rc2:*:*:*:*:*:*","matchCriteriaId":"E9F32445-DBD1-4F34-966B-36D5CED7302F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DA42491A-317B-4100-9ED5-D39C1EEA9807"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery:gallery:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"AEEE597B-491E-4ECB-8DAF-8E0277753AB6"}]}]}],"references":[{"url":"http://gallery.menalto.com/last_official_G1_releases","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50089","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32440","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46804","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/last_official_G1_releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5297","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function."},{"lang":"es","value":"Un desbordamiento de búfer en No-IP DUC versión 2.1.7 y anteriores, permite que los servidores HTTP remotos ejecuten código arbitrario por medio de una respuesta diseñada a una petición de actualización DNS, relacionada con una falta de comprobación de longitud en la función GetNextLine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vitalwerks:no-ip_duc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.7","matchCriteriaId":"556BD373-B9CB-4B59-A0CE-7F2DAA9D9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vitalwerks:no-ip_duc:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"25F22BF2-9012-4814-B627-A81A32768461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vitalwerks:no-ip_duc:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9BE3D72A-AB01-459B-AAF2-474B57A6F991"},{"vulnerable":true,"criteria":"cpe:2.3:a:vitalwerks:no-ip_duc:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F8C3458F-9F0E-44E1-98E7-D8E1F694C893"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179","source":"cve@mitre.org"},{"url":"http://git.debian.org/?p=collab-maint/no-ip.git%3Ba=commit%3Bh=60ed93621ff36d9731ba5d9f9336d6eb91122302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33610","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200901-12.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4672","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1686","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/21/15","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32344","source":"cve@mitre.org"},{"url":"http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46696","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7151","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.debian.org/?p=collab-maint/no-ip.git%3Ba=commit%3Bh=60ed93621ff36d9731ba5d9f9336d6eb91122302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200901-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/21/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5298","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time."},{"lang":"es","value":"chm2pdf 0.9 utiliza archivos temporales en directorios con nombres fijos, lo que permite a usuarios locales causar una denegación de servicio (con caída de chm2pdf) de otros usuarios mediante la creación de esos directorios antes de tiempo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karakas-online:chm2pdf:0.9:*:*:*:*:*:*:*","matchCriteriaId":"1AD83BA3-6CC3-4F36-BD49-58381FEEB6EE"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31735","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47030","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5299","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T15:30:03.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the (1) /tmp/chm2pdf/work or (2) /tmp/chm2pdf/orig temporary directories."},{"lang":"es","value":"chm2pdf 0.9 permite a los usuarios, con ayuda de los usuarios locales, borrar archivos arbitrarios a través de un ataque de enlace simbólico en sobre ficheros .chm en los directorios temporales (1) /tmp/chm2pdf/work o (2) /tmp/chm2pdf/orig ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karakas-online:chm2pdf:0.9:*:*:*:*:*:*:*","matchCriteriaId":"1AD83BA3-6CC3-4F36-BD49-58381FEEB6EE"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31735","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45813","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5300","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.6.28 allows local users to cause a denial of service (\"soft lockup\" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029."},{"lang":"es","value":"El kernel de Linux 2.6.28 permite a usuarios locales causar una denegación de servicio ( \"bloqueo blando\" y pérdida del proceso) a través de un gran número de llamadas a la función sendmsg, que no se bloquea durante la recolección de basura AF_UNIX y provoca una situación de memoria insuficiente. Se trata de una vulnerabilidad diferente a CVE-2008-5029."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-netdev&m=122721862313564&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-netdev&m=122765505415944&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50272","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32913","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33083","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33854","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4673","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:032","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499044/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32516","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46943","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2915","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/714-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-netdev&m=122721862313564&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-netdev&m=122765505415944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499044/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5301","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T17:30:01.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a \"..\" (dot dot) in a script name."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la implementación de ManageSieve en Dovecot 1.0.15, 1.1, y 1.2 permite a atacantes remotos leer y modificar arbitrariamente ficheros .sieve a través de un \"..\" (punto punto) en el nombre de un script."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of dovecot as shipped with Red Hat Enterprise Linux 4, or 5.  Those packages do not include ManageSieve server.","lastModified":"2008-12-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*","matchCriteriaId":"D0616CCF-D278-4B6D-A58B-393BCA128CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:0.99.14:*:*:*:*:*:*:*","matchCriteriaId":"D3C7BE64-7C1E-4043-A1C5-D0A7377C01A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4240BD98-3C31-42CE-AF8F-045DD4BFC084"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05ACA0-ED87-4DDF-94B6-8D25BE1790F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8C0C4A-F9DB-4BB7-BFC5-BEC22C3FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7E00B56-A1E5-4261-8349-37654AA9FB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E66427AA-A9D4-413F-8354-EA61407307C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D74BE6C7-114D-4885-8472-FFE71C817B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4A349510-4D00-4978-93D9-3F9F5E0CD8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B65B9EFD-1531-463C-992E-F0F16AABF9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"34BA7146-5793-44F4-9569-9D868FE6E325"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B5078363-6B42-491B-A219-F8D8A86132BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B1DDF093-B5C7-4AE5-B3D6-466C543AB2BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8BE860F-A3C2-43E0-BC75-503C437DAADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"9E6F249C-2793-46B5-A9E2-5EB3A62FF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E4E57B06-8650-4374-B643-6FCBE3ABDAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0384E42-1506-4C08-AA5A-18B2A711C7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F5DC1CE5-50B9-426E-B98A-224DC499AB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"350A26D6-A8BA-4125-A640-264E08D28CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"71057F4B-3040-4771-B989-9F3453934AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1730EBB1-4071-4A23-B770-D564AF422273"}]}]}],"references":[{"url":"http://secunia.com/advisories/32768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36904","source":"cve@mitre.org"},{"url":"http://www.dovecot.org/list/dovecot/2008-November/035259.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32582","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3190","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dovecot.org/list/dovecot/2008-November/035259.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5302","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T17:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448.  It is different from CVE-2008-5303 due to affected versions."},{"lang":"es","value":"Condición de carrera en la función rmtree de File::Path 1.08 y 2.07 (lib/File/Path.pm) en Perl 5.8.8 y 5.10.0 permite a usuarios locales crear binarios setuid arbitrarios a través de un ataque por enlace simbólico. Se trata de una vulnerabilidad diferente que CVE-2005-0448, CVE-2004-0452 y CVE-2008-2827. NOTA: Esto es un error de regresión relacionado con CVE-2005-0448. Es diferente de CVE-2008-5303 por las versiones afectadas."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in perl packages as shipped in Red Hat Enterprise Linux 3 and 4 via https://rhn.redhat.com/errata/RHSA-2010-0457.html and Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0458.html.\n","lastModified":"2010-06-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*","matchCriteriaId":"E98D2706-99B7-4153-925B-77A8CECD7CFB"},{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"9B84C088-F29F-4498-A390-187505361962"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:file\\:\\:path:1.08:*:*:*:*:*:*:*","matchCriteriaId":"EA2DEBED-F663-4F03-A7AA-601293DE48BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:file\\:\\:path:2.07:*:*:*:*:*:*:*","matchCriteriaId":"768FC916-07E3-4D66-B1B7-C36B40B64F35"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32980","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40052","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0011","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1678","source":"cve@mitre.org"},{"url":"http://www.gossamer-threads.com/lists/perl/porters/233695#233695","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:116","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0458.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500210/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-700-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-700-2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47043","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11076","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6890","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gossamer-threads.com/lists/perl/porters/233695#233695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500210/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-700-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-700-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5303","sourceIdentifier":"cve@mitre.org","published":"2008-12-01T17:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5302 due to affected versions."},{"lang":"es","value":"Condición de carrera en la función rmtree en File::Path 1.08 (lib/File/Path.pm) en Perl 5.8.8 permite a usuarios locales borrar archivos arbitrarios a través de un ataque de enlace simbólico, una vulnerabilidad diferente a CVE-2005-0448, CVE-2004-0452 y CVE-2008-2827. NOTA: esto es un error de regresión relacionado con CVE-2005-0448. Es diferente a CVE-2008-5302 debido a las versiones afectadas."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in perl packages as shipped in Red Hat Enterprise Linux 3 and 4 via https://rhn.redhat.com/errata/RHSA-2010-0457.html and Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0458.html.\n","lastModified":"2010-06-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*","matchCriteriaId":"E98D2706-99B7-4153-925B-77A8CECD7CFB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:file\\:\\:path:1.08:*:*:*:*:*:*:*","matchCriteriaId":"EA2DEBED-F663-4F03-A7AA-601293DE48BE"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32980","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40052","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0011","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1678","source":"cve@mitre.org"},{"url":"http://www.gossamer-threads.com/lists/perl/porters/233695#233695","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:116","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0458.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500210/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-700-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-700-2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47044","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6680","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9699","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gossamer-threads.com/lists/perl/porters/233695#233695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500210/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-700-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-700-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5304","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en TWiki anterior a v4.2.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la variable %URLPARAM{}%."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.3","matchCriteriaId":"67914289-4064-45AD-9E75-362225F928AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F893E121-82FA-41C8-9BA4-606E6DA01408"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"620356EA-F106-41DF-AADA-C1EF5A5A0829"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"979D8BC8-0032-496F-9503-F3BBBC8FA7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0804FF93-6554-4F56-9974-017198ED5F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"41445C95-0309-4B90-B725-87D2FE87C9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9996E5B-36AD-407F-B3B6-839CE8E5913E"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"748325A4-A237-498A-A185-905FC921D2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9FE3EEC6-7E05-4A37-97AA-D73E7D7A0E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"855671F5-C215-4382-B512-4ABD9D66F13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E9C00515-CFEE-427A-BACE-B3140B0D6C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E9CF4F9B-7ADF-47A2-A556-10CCF7401DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:*","matchCriteriaId":"89599BC3-E1D8-4670-9321-F63A788096A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*","matchCriteriaId":"354C8BA8-603D-4556-8C4C-39DEE4891719"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*","matchCriteriaId":"23CC3B43-A77A-471E-A0ED-E91E53C2400C"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*","matchCriteriaId":"374ADC0F-0EE2-4DEC-8A37-5F5F15C8137A"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*","matchCriteriaId":"BEC5965A-BFC8-42B3-AF13-28E097381E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C94AFFF9-5951-43A9-8018-B10C3F097CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*","matchCriteriaId":"5F823DF7-B38E-4FBF-8D9A-C1B49FC237BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*","matchCriteriaId":"FFA8E461-0CAA-4B44-8BCC-21CD8E1A6A41"}]}]}],"references":[{"url":"http://secunia.com/advisories/33040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021351","source":"cve@mitre.org"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32669","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3381","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47122","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5305","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable."},{"lang":"es","value":"Vulnerabilidad de inyección \"eval\" en TWiki y versiones anteriores a 4.2.4 que permite a los atacantes remotos ejecutar arbitrariamente código Perl a través de la variable %SEARCH{}%."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.3","matchCriteriaId":"67914289-4064-45AD-9E75-362225F928AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F893E121-82FA-41C8-9BA4-606E6DA01408"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47807C3A-8430-48E3-A7C8-C5A1FEDF84C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"620356EA-F106-41DF-AADA-C1EF5A5A0829"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"979D8BC8-0032-496F-9503-F3BBBC8FA7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0804FF93-6554-4F56-9974-017198ED5F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"41445C95-0309-4B90-B725-87D2FE87C9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9996E5B-36AD-407F-B3B6-839CE8E5913E"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"748325A4-A237-498A-A185-905FC921D2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9FE3EEC6-7E05-4A37-97AA-D73E7D7A0E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"855671F5-C215-4382-B512-4ABD9D66F13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E9C00515-CFEE-427A-BACE-B3140B0D6C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E9CF4F9B-7ADF-47A2-A556-10CCF7401DA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021352","source":"cve@mitre.org"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32668","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3381","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5306","sourceIdentifier":"cve@mitre.org","published":"2008-12-02T12:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter (username).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo admin/index.php en PG Real Estate Solution que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro login_lg (username). NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilot_group:pg_real_estate_solution:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"758035E4-A83B-4DE6-B63A-4492C29054D4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4674","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32429","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3239","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46792","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7200","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5307","sourceIdentifier":"cve@mitre.org","published":"2008-12-02T12:00:02.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo admin/index.php en PG Roommate Finder Solution \r\nque permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro login_lg. NOTA: algunas de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilot_group:pg_real_roommate_finder_solution:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"79D67870-210B-438A-AFC8-EB8593A771BB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32430","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3238","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7201","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5308","sourceIdentifier":"cve@mitre.org","published":"2008-12-02T12:00:02.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php."},{"lang":"es","value":"El módulo Simple Forum 3.1d para LoveCMS 1.6.2 Final no restringe adecuadamente el acceso a las funciones de administrador, lo que permite a atacantes remotos cambiar la contraseña de administrador a través de una petición directa a modules/simpleforum/admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lovecms:the_simple_forum:3.1d:*:*:*:*:*:*:*","matchCriteriaId":"0C561B16-D9D1-4E75-8E66-EFB7F16B13E4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:lovecms:lovecms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"682D1313-5E31-48F8-9A38-B45CCB1A5872"}]}]}],"references":[{"url":"http://osvdb.org/50067","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4676","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32435","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3243","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46793","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7191","source":"cve@mitre.org"},{"url":"http://osvdb.org/50067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5309","sourceIdentifier":"cve@mitre.org","published":"2008-12-02T12:00:02.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the ad_id parameter in the re_send_email module to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en NetArt Media Real Estate Portal 1.2 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro ad_id en el módulo re_send_email para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netart_media:real_estate_portal:1.2:*:*:*:*:*:*:*","matchCriteriaId":"560EB2C2-8BB7-4E03-A1E8-AE1A96AA3888"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4675","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32445","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46808","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7208","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5310","sourceIdentifier":"cve@mitre.org","published":"2008-12-02T12:00:02.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo image.php en NetArt Media Car Portal 2.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netart_media:car_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C7261AA5-C924-4D2E-9F8D-7CB5031A1DCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32844","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4677","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32426","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3241","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46786","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7198","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5311","sourceIdentifier":"cve@mitre.org","published":"2008-12-02T12:00:02.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo image.php en NetArt Media Blog System 1.5 que permite a lo atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netart_media:blog_system:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A3547C46-306D-45D1-B26D-29A3EDB0E4F5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4679","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32441","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3240","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46787","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7199","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5312","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.430","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) panda-autoupdate.new, (4) trend-autoupdate.new, and (5) rav-autoupdate.new scripts in /etc/MailScanner/autoupdate/, a different vulnerability than CVE-2008-5140."},{"lang":"es","value":"Mailscanner versión 4.55.10 y otras versiones anteriores a 4.74.16-1 podría permitir a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque symlink en ciertos archivos temporales utilizados por los scripts (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) panda-autoupdate.new, (4) trend-autoupdate.new, y (5) rav-autoupdate.new en /etc/MailScanner/autoupdate/, esta es una vulnerabilidad diferente al CVE-2008-5140."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.55.10:*:*:*:*:*:*:*","matchCriteriaId":"A2428238-01C0-47AA-9197-620FAA51BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.56.8-1:*:*:*:*:*:*:*","matchCriteriaId":"41CBF2B6-C419-402D-B628-878A4E452F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.57.7-1:*:*:*:*:*:*:*","matchCriteriaId":"FB6055DA-3613-41EE-A8D1-DEB8A322A1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.58.9-1:*:*:*:*:*:*:*","matchCriteriaId":"22B1D044-177D-4B29-B305-8F9227CC21D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.59.4-2:*:*:*:*:*:*:*","matchCriteriaId":"BB62E7A0-B104-4526-938A-7C2322210D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.60.8-1:*:*:*:*:*:*:*","matchCriteriaId":"63B6719B-64F6-4078-AFBC-E59C1ECDA210"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.61.7-2:*:*:*:*:*:*:*","matchCriteriaId":"E9A29933-B048-4627-B7AD-79E05499B996"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.62.9-3:*:*:*:*:*:*:*","matchCriteriaId":"7FD5D7A1-1C61-4DB8-AD76-529915A3E9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.63.8-1:*:*:*:*:*:*:*","matchCriteriaId":"468335CD-13FA-4BB4-8EF8-D89CDEBF9BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.64.3-2:*:*:*:*:*:*:*","matchCriteriaId":"46828E1F-7868-45ED-B03F-C155D7DBEBE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.65.3-1:*:*:*:*:*:*:*","matchCriteriaId":"65D6720C-B2AD-4325-BBC5-43400B1CC93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.66.5-3:*:*:*:*:*:*:*","matchCriteriaId":"B878D722-57B9-461D-A90C-40BE5D1A3002"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.67.6-1:*:*:*:*:*:*:*","matchCriteriaId":"FA0FAD3D-0744-4AB4-B469-4DC0B7618FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.68.8:*:*:*:*:*:*:*","matchCriteriaId":"1CE4E293-D53D-4FD7-BFE4-13A23C43A2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.68.8-1:*:*:*:*:*:*:*","matchCriteriaId":"D39BFD5F-02E1-4FB3-82C1-8D96ADAC1A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.69.9-3:*:*:*:*:*:*:*","matchCriteriaId":"6A7B2819-F30A-46D7-BD0A-EACAA2A1BEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.70.7-1:*:*:*:*:*:*:*","matchCriteriaId":"CE71AC0B-95B8-4D2F-B84C-47F25D8DB175"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.71.10-1:*:*:*:*:*:*:*","matchCriteriaId":"CFB1CBCB-A139-4CB3-8D23-F5547C883A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.72.5-1:*:*:*:*:*:*:*","matchCriteriaId":"CD5C13BB-E82B-47BA-B72D-A846C2E0BB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.73.4-2:*:*:*:*:*:*:*","matchCriteriaId":"6F1C65FA-CBA9-4BEE-95A8-B003F8CB85CC"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mailscanner.info/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/29/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32557","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mailscanner.info/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/29/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5313","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.463","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate, and (4) f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/; the (5) bitdefender-wrapper, (6) kaspersky-wrapper, (7) clamav-wrapper, and (8) rav-wrapper scripts in /etc/MailScanner/wrapper/; the (9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm, and (13) SA.pm scripts in /usr/share/MailScanner/MailScanner/; (14) /usr/sbin/MailScanner; and (15) scripts that load the /etc/MailScanner/mailscanner.conf.with.mcp configuration file."},{"lang":"es","value":"Mailscanner versión 4.68.8 y otras versiones anteriores a 4.74.16-1, podría permitir a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque symlink en ciertos archivos temporales utilizados por los scripts (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate, y (4) f-prot-6-autoupdate en /etc/MailScanner/autoupdate/; los scripts (5) bitdefender-wrapper, (6) kaspersky-wrapper, (7) clamav-wrapper y (8) rav-wrapper en /etc/MailScanner/wrapper/; los scripts (9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm y (13) SA.pm en /usr/share/MailScanner/MailScanner/; (14) /usr/sbin/MailScanner; y (15) scripts que cargan el archivo de configuración /etc/MailScanner/mailscanner.conf.with.mcp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.68.8:*:*:*:*:*:*:*","matchCriteriaId":"1CE4E293-D53D-4FD7-BFE4-13A23C43A2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.68.8-1:*:*:*:*:*:*:*","matchCriteriaId":"D39BFD5F-02E1-4FB3-82C1-8D96ADAC1A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.69.9-3:*:*:*:*:*:*:*","matchCriteriaId":"6A7B2819-F30A-46D7-BD0A-EACAA2A1BEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.70.7-1:*:*:*:*:*:*:*","matchCriteriaId":"CE71AC0B-95B8-4D2F-B84C-47F25D8DB175"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.71.10-1:*:*:*:*:*:*:*","matchCriteriaId":"CFB1CBCB-A139-4CB3-8D23-F5547C883A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.72.5-1:*:*:*:*:*:*:*","matchCriteriaId":"CD5C13BB-E82B-47BA-B72D-A846C2E0BB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:4.73.4-2:*:*:*:*:*:*:*","matchCriteriaId":"6F1C65FA-CBA9-4BEE-95A8-B003F8CB85CC"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mailscanner.info/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/29/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32557","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mailscanner.info/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/29/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5314","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions."},{"lang":"es","value":"Vulnerabilidad de consumo de pila en el archivo libclamav/special.c en ClamAV y versiones anteriores 0.94.2, que permite a los atacantes remotos causar una denegación de servicios (caída de demonio) a través de un archivo JPEG manipulado, relativo a las funciones cli_check_jpeg_exploit, jpeg_check_photoshop y jpeg_check_photoshop_8bim."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.94.1","matchCriteriaId":"EC7AF1DF-A5B0-4A28-8039-8195135DC02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"508C140C-2F87-4270-85B0-00EA6678A344"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"3033A4A2-47E9-434F-BA0A-0F2476A67899"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"4680089D-DEFB-41E3-AFAF-6DA9252F2DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"307ED99C-32B8-4C0C-8C55-E2BA6EDB961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"DEF4F0DE-DC05-4F06-BC2D-09BAEAB25184"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"0C1EDFB4-B0C8-4832-BCA1-C35D28877581"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"BF60319C-CFFB-47F4-BDCB-90A5D0FB4240"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"4EF47B2A-4520-4872-987D-2EF88344ADB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc:*:*:*:*:*:*","matchCriteriaId":"5909491A-3D43-4648-B0F9-983BF2BE13B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc2:*:*:*:*:*:*","matchCriteriaId":"3DB0BD14-60D1-4482-A91E-AFA501DE1F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc3:*:*:*:*:*:*","matchCriteriaId":"FFFDE6BB-38A1-4074-A3E1-E59BB5E7ED74"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"79FC2D39-6F8E-4267-8D4B-0C59D28A0E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"FC31E071-6BB8-45FE-AA09-E7E459B549D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.81:rc1:*:*:*:*:*:*","matchCriteriaId":"89533C50-275D-440D-88B4-363B3DED39E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"53D884A1-305C-416A-9851-3A7D875FDC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"E58A6CBC-ED1C-430D-8F43-88694971A850"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"E330A535-A376-4BFF-BB1B-31E83370FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:rc1:*:*:*:*:*:*","matchCriteriaId":"E787E42E-3339-47FD-904E-5E3C73991CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.84:rc2:*:*:*:*:*:*","matchCriteriaId":"F21E03C7-0293-402C-ACAE-41E7F11B7AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"EDF94B1E-E8D4-4952-9081-1254F335445D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"8657268E-4C78-4565-9966-7329095A7905"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"8D20F0D5-2291-4F24-94DB-180CDF926B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86:rc1:*:*:*:*:*:*","matchCriteriaId":"B8BD1ADF-C784-4E43-A6A5-09D416E96AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"A0E2884A-615F-4063-8FB7-EC157C3EC07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BC41B7-272F-44BB-BD48-6C9231402526"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D23F1D35-6073-49B0-8DD4-C58AEE2CC83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"D87DA1D8-59AC-4372-BBFC-ED8BC6603AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"5F56722F-F61A-404B-B0B2-1C92C22D0436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"D00EBC44-B4AB-443F-A063-8C8CB64F5F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"FFFA6F1E-9F25-400C-B626-3B9EDA396913"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"2DB68680-FA6D-4235-90DA-E3DF0E5BB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"0E5BCBA5-0CE1-4112-8C3D-BAED9C5537B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"3908B34C-823E-47BA-8A64-23547D2AB027"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"557C5437-4B40-4E89-A23D-96B95829281D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"A3394AD1-C667-46E7-82D3-E2E381CCC9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"142588F8-15C3-4288-BE7C-B2F7447BD60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"EC18418B-7477-436C-A24A-081701968DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"1A85C689-95E0-41F7-83D9-5A8B0AB42390"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"BC24A055-278C-4A78-8C68-AC7618EF3EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CC992A3B-24B4-48D8-BFBF-9B7884D11D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"8EFAC7BA-2A39-46A8-BF91-5537532F45D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"733CB165-98CD-4F8E-8A6D-07CF522634BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"8670A5ED-C41E-40B9-B2C9-68F22734B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C8BE6F91-5442-4156-B137-E4AD3E21CF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"40F14DB9-8437-4CEB-9D63-098FD9E604E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"A4C92175-5E97-4197-8495-25900134B652"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.93.3:*:*:*:*:*:*:*","matchCriteriaId":"5CF50FEF-9840-4B6C-BC60-02956F9E3099"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.94:*:*:*:*:*:*:*","matchCriteriaId":"67373928-C0E0-4A12-B97A-575EC57E5072"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"cve@mitre.org"},{"url":"http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50363","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32936","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33195","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-21.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1680","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:239","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/01/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32555","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021296","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-684-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3311","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46985","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7330","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/01/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-684-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5315","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.493","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la interfaz web en Apple iPhone Configuration Web Utility 1.0 en Windows, que permite a los atacantes remotos leer arbitrariamente ficheros a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:iphone_configuration_web_utility:1.0:*:*:*:*:*:*:*","matchCriteriaId":"99058EF1-7593-4F8F-BE5C-C9277B43E851"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0061.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065822.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46807","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065822.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5316","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.510","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of \"the input file,\" a different vulnerability than CVE-2007-2741."},{"lang":"es","value":"Desbordamiento de búfer en la función ReadEmbeddedTextTag en src/cmsio1.c en el motor de color Little cms (alias lcms), versiones anteriores a 1.16 que permite a los atacantes remotos conseguir un desconocido impacto a través de vectores relativos a una longitud de parámetros con inconsistentes contenido del archivo de entra, una diferente vulnerabilidad a CVE-2007-2741."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.15","matchCriteriaId":"F88D4AAB-DA31-4CFA-AF12-478C33A559C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.07:*:*:*:*:*:*:*","matchCriteriaId":"77D8173F-F341-4B34-A50A-388C93CABD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.08:*:*:*:*:*:*:*","matchCriteriaId":"405F539C-0A33-4703-8ADA-AF314EC92B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.09:*:*:*:*:*:*:*","matchCriteriaId":"7DCBA042-6C91-4CDD-96A6-5E99B60519C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"C3F25567-8DEF-491C-97F7-D2680115C02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"492B453F-5FC7-4B8B-9C42-C911FCA4BFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.12:*:*:*:*:*:*:*","matchCriteriaId":"CEFA9E7E-B7A9-4106-A480-0E57FCDA7B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.13:*:*:*:*:*:*:*","matchCriteriaId":"17B723CE-5A76-4DCE-9A2C-EFF32D4A5855"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.14:*:*:*:*:*:*:*","matchCriteriaId":"39EBE224-D0B7-4C74-B363-1BDA291594D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.15","matchCriteriaId":"1A2834DF-6FA0-4305-85AD-179157C8FEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.07:*:*:*:*:*:*:*","matchCriteriaId":"F3E1F2A4-2D67-4442-991B-BDD66DFD0A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.08:*:*:*:*:*:*:*","matchCriteriaId":"57F07310-A04B-49F3-B0F8-3B2BD1A70555"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.09:*:*:*:*:*:*:*","matchCriteriaId":"F433BC9D-C6B2-446D-976C-7A4BB4F2F668"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.10:*:*:*:*:*:*:*","matchCriteriaId":"7F153ED4-BC68-44F1-A8E6-284FDCD4D7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.11:*:*:*:*:*:*:*","matchCriteriaId":"7287F9F3-504E-4DB7-B189-B11DB0A9890C"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.12:*:*:*:*:*:*:*","matchCriteriaId":"0D086B58-D972-461D-A7D3-F12CDFD3845E"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.13:*:*:*:*:*:*:*","matchCriteriaId":"B0F21DB4-D8CA-48F0-9EFE-4F1D90108663"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.14:*:*:*:*:*:*:*","matchCriteriaId":"041BE71F-DCDC-47A7-8FF5-1B9A97FDB324"}]}]}],"references":[{"url":"http://lcms.cvs.sourceforge.net/viewvc/lcms/lcms/src/cmsio1.c?r1=1.33&r2=1.34","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/33066","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1684","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0011.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32708","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47119","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10531","source":"cve@mitre.org"},{"url":"http://lcms.cvs.sourceforge.net/viewvc/lcms/lcms/src/cmsio1.c?r1=1.33&r2=1.34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/33066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5317","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T17:30:00.540","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain \"number of entries\" value, which is interpreted improperly, leading to an allocation of insufficient memory."},{"lang":"es","value":"Error de presencia de signo en entero en la función cmsAllocGamma en src/cmsgamma.c en Little cms color engine (alias lcms) en versiones anteriores a 1.17 que permite a los atacantes tener un impacto desconocido a través de un archivo que contiene un cierto número de valores de entrada, que son interpretados inapropiadamente, permitiendo una asignación de memoria insuficiente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16","matchCriteriaId":"3921D964-CEBA-4100-8AFA-37CE87C9D939"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.07:*:*:*:*:*:*:*","matchCriteriaId":"77D8173F-F341-4B34-A50A-388C93CABD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.08:*:*:*:*:*:*:*","matchCriteriaId":"405F539C-0A33-4703-8ADA-AF314EC92B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.09:*:*:*:*:*:*:*","matchCriteriaId":"7DCBA042-6C91-4CDD-96A6-5E99B60519C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"C3F25567-8DEF-491C-97F7-D2680115C02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"492B453F-5FC7-4B8B-9C42-C911FCA4BFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.12:*:*:*:*:*:*:*","matchCriteriaId":"CEFA9E7E-B7A9-4106-A480-0E57FCDA7B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.13:*:*:*:*:*:*:*","matchCriteriaId":"17B723CE-5A76-4DCE-9A2C-EFF32D4A5855"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.14:*:*:*:*:*:*:*","matchCriteriaId":"39EBE224-D0B7-4C74-B363-1BDA291594D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.15:*:*:*:*:*:*:*","matchCriteriaId":"14BBFB7C-206E-47F5-9F78-50DB88E09215"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16","matchCriteriaId":"76B826F6-61F2-47E2-A78D-7347904A34C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.07:*:*:*:*:*:*:*","matchCriteriaId":"F3E1F2A4-2D67-4442-991B-BDD66DFD0A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.08:*:*:*:*:*:*:*","matchCriteriaId":"57F07310-A04B-49F3-B0F8-3B2BD1A70555"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.09:*:*:*:*:*:*:*","matchCriteriaId":"F433BC9D-C6B2-446D-976C-7A4BB4F2F668"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.10:*:*:*:*:*:*:*","matchCriteriaId":"7F153ED4-BC68-44F1-A8E6-284FDCD4D7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.11:*:*:*:*:*:*:*","matchCriteriaId":"7287F9F3-504E-4DB7-B189-B11DB0A9890C"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.12:*:*:*:*:*:*:*","matchCriteriaId":"0D086B58-D972-461D-A7D3-F12CDFD3845E"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.13:*:*:*:*:*:*:*","matchCriteriaId":"B0F21DB4-D8CA-48F0-9EFE-4F1D90108663"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.14:*:*:*:*:*:*:*","matchCriteriaId":"041BE71F-DCDC-47A7-8FF5-1B9A97FDB324"},{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms_color_engine:1.15:*:*:*:*:*:*:*","matchCriteriaId":"650BF28E-8D28-45C0-99C2-D6B78AA9BE6D"}]}]}],"references":[{"url":"http://lcms.cvs.sourceforge.net/viewvc/lcms/lcms/src/cmsgamma.c?view=diff&r1=1.16&r2=1.17","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33066","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33219","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1684","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0011.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32708","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47120","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10685","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/693-1/","source":"cve@mitre.org"},{"url":"http://lcms.cvs.sourceforge.net/viewvc/lcms/lcms/src/cmsgamma.c?view=diff&r1=1.16&r2=1.17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/11/28/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/693-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5318","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T18:30:00.477","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to \"size of user-provided input,\" a different issue than CVE-2008-3653."},{"lang":"es","value":"Vulnerabilidad no especificada en Tikiwiki y versiones anteriores a 2.2, con desconocido impacto y vectores de ataque relativos al \"tamaño de entrada proporcionado por el usuario\", diferente vulnerabilidad que CVE-2008-3653."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"E4003F93-8AE6-461B-BDB9-D55A1683B6B9"}]}]}],"references":[{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=41","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32341","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/50058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31857","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2889","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46029","source":"cve@mitre.org"},{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/50058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5319","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T18:30:01.227","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to tiki-error.php, a different issue than CVE-2008-3653."},{"lang":"es","value":"Vulnerabilidad no especificada en Tikiwiki 2.2 y versiones anteriores, con desconocido impacto y un vector de ataque relativo al archivo tiki-error.php, diferente vulnerabilidad que CVE-2008-3653."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"E4003F93-8AE6-461B-BDB9-D55A1683B6B9"}]}]}],"references":[{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=41","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32341","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31857","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2889","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47106","source":"cve@mitre.org"},{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5320","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T19:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue[] parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo usersettings.php en e107 0.7.13 y versiones anteriores, permite a los usuarios remotos autentificados ejecutar arbitrariamente comandos SQL a través del parámetro ue[]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.13","matchCriteriaId":"3C676F07-E60C-405B-9200-C58A5286D818"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*","matchCriteriaId":"70AB914E-D616-45D2-A451-1C247B8B6E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA03C1AC-97EA-47ED-9558-A7CA48420AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"32695A82-B042-46B7-9CB4-20F3446E0C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6716A040-0CBE-4402-AB2A-1621B1240B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"81627355-AB45-4D47-8DD2-4087E6971EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DAAA4F-B893-4914-8538-E68DDA211225"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"2FEEC90E-8640-4786-B014-CAD83EC4F2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"E29B9B12-4C94-4A8D-B407-2D288502EFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*","matchCriteriaId":"437C4251-886C-4E94-B7F6-AE34A0142A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*","matchCriteriaId":"761D4EE9-0D54-4370-BCBC-3C23481C127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*","matchCriteriaId":"E11E3F9E-708E-44CB-8FD2-E4961028B732"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*","matchCriteriaId":"8F38EB42-437C-4381-B36A-FD3DB78E724E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*","matchCriteriaId":"ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*","matchCriteriaId":"1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*","matchCriteriaId":"0FC4B3A4-2563-4C06-A484-5C02CD8F7408"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*","matchCriteriaId":"7E80F85C-61AD-49C0-9EBF-B79F728F6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*","matchCriteriaId":"3FE097FC-A525-4599-9FDA-1A011EECE767"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*","matchCriteriaId":"9FF51B0D-E020-491D-92A9-D2A01A7417AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*","matchCriteriaId":"75197306-53DB-4C94-959B-C46D3FB1F42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*","matchCriteriaId":"D0C5C91C-C1C5-457D-9E09-24C7CACCC280"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*","matchCriteriaId":"6EB88C92-4F62-471A-8C10-C13C890E764F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*","matchCriteriaId":"5585DC36-C65F-4FCA-B26F-E4A7901863E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*","matchCriteriaId":"2C7DD56C-66F7-421C-B211-07C7856112C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*","matchCriteriaId":"8E14B108-228D-454F-AF16-9D9086E4C10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*","matchCriteriaId":"B5CB33E9-9AB8-482A-A196-768A2085A49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*","matchCriteriaId":"12BD5CAD-0EB8-48F2-AF80-510584A83446"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*","matchCriteriaId":"AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*","matchCriteriaId":"92E294FE-F0A2-45FC-BB67-D988DD89D2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*","matchCriteriaId":"9640315B-7F04-4F5A-B213-8FAF509DFF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*","matchCriteriaId":"CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*","matchCriteriaId":"DF75A192-81C1-4F58-A660-7EFE4F33E58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4189588A-A887-4D27-B3A0-48A3DBBD5E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"AA26A71E-F1E6-4EA0-9165-F7989FB89B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.3_beta2:*:*:*:*:*:*:*","matchCriteriaId":"9C90BAB9-2ACE-48E4-BC15-E88C2C370B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.04:*:*:*:*:*:*:*","matchCriteriaId":"DFD219A3-4958-4EA9-A914-37D4F0A8A24D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta1:*:*:*:*:*:*:*","matchCriteriaId":"3417C70B-E531-49C8-971E-CC349FB5AA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta3:*:*:*:*:*:*:*","matchCriteriaId":"CB5EF2F8-0A65-4C8C-A4A3-9B9B1151509C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta4:*:*:*:*:*:*:*","matchCriteriaId":"62FBE3F6-7685-43BA-B63B-28AA79330323"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta5:*:*:*:*:*:*:*","matchCriteriaId":"94CC3B56-F1FC-452A-A0A7-4CF60089C1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta6:*:*:*:*:*:*:*","matchCriteriaId":"7524B12E-3D05-4CD1-B582-8A66EEC3F6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.05:*:*:*:*:*:*:*","matchCriteriaId":"590FE150-07AF-4E25-B8F8-D0E8500D73B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.21:*:*:*:*:*:*:*","matchCriteriaId":"F515DEBF-B55A-4B42-8E1F-AB9A2C3DD8DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4683","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31821","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2860","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45967","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6791","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5321","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T19:30:00.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the no parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en GesGaleri, un módulo para XOOPS, que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro no."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops_hocasi:gesgaleri:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"FAD59A9C-5EC0-4092-B07A-27F854F3665C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4682","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45976","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6778","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5322","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T19:30:00.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function."},{"lang":"es","value":"Wysi Wiki Wyg 1.0 permite a los atacantes remotos obtener información del sistema a través del parámetro invalido categup para el archivo index.php, el cual llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:wysi_wiki_wyg:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4E7C2A-9991-4FCA-9C77-78DF56F4164D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47105","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6042","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5323","sourceIdentifier":"cve@mitre.org","published":"2008-12-03T19:30:00.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en Wysi Wiki Wyg 1.0 que permite a los atacantes remotos inyectar una secuencia de comandos web o HTM a través del parámetro s."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:wysi_wiki_wyg:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4E7C2A-9991-4FCA-9C77-78DF56F4164D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31836","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45994","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6042","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5324","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en CQ Web en IBM Rational ClearQuest v2007 anteriores a v2007D y v2008 anteriores a v2008B permitiría a atacantes remotos inyectar secuencias de código web o HTML a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:2007:*:*:*:*:*:*:*","matchCriteriaId":"A04B4977-F5C0-4438-BBB2-541A3221082D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:2008:*:*:*:*:*:*:*","matchCriteriaId":"900B37B1-944F-4B18-97AD-E4696F6E4F1D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5325","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.330","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en CQ Web en IBM Rational ClearQuest v7.0.0 anterior a la v7.0.0.4 y 7.0.1 anterior a la v7.0.1.3 permitiría a atacantes remotos inyectar secuencias de comandos web o HTML a su elección a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndExcluding":"7.0.0.4","matchCriteriaId":"F596BC60-3103-466E-9155-9B5CACDA0BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.1.3","matchCriteriaId":"298DDF59-1348-4FEC-803A-4E36ACE453F6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32847","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50369","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32576","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5326","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks."},{"lang":"es","value":"La herramienta ClearQuest Maintenance en IBM Rational ClearQuest v7.0.0 anterior a la v7.0.0.4 v7.0.1 anterior a la v7.0.1.3 en Windows permitiría a usuarios locales obtener (1) usuario y (2) contraseñas de la base de datos mediante una utilidad de revelación de contraseña en un campo que contiene una serie de asteriscos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"}]}]}],"references":[{"url":"http://secunia.com/advisories/32847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32577","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46994","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5327","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree."},{"lang":"es","value":"La herramienta ClearQuest Maintenance en IBM Rational ClearQuest v7 anterior a la v7.1 almacena la contraseña de la base de datos en texto claro en un objeto en un perfil de conexión de ClearQuest o un fichero de exportación, que permitiría a usuarios remotos autenticados obtener información sensible localizando el objeto contraseña en el árbol de objetos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0:*:*:*:*:*:*:*","matchCriteriaId":"37B059D3-5A21-48FA-8D9D-F0DEB8CBB909"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEB65A10-EE74-43DF-8D05-B39551F57D2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46995","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5328","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process."},{"lang":"es","value":"La herramienta ClearQuest Maintenance en IBM Rational ClearQuest anterior a la v7 almacena la contraseña de la base de datos en texto claro en un objeto en un perfil de conexión de ClearQuest o un fichero de exportación, que permitiría a usuarios remotos autenticados obtener información sensible localizando el objeto contraseña en el árbol de objetos durante un proceso de importación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.0.3","matchCriteriaId":"96E77C5E-E70E-4468-8206-4B74150BC4E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"}]}]}],"references":[{"url":"http://secunia.com/advisories/32847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46995","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5329","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file."},{"lang":"es","value":"ClearQuest Web en IBM Rational ClearQuest MultiSite anteriores a la v7.1 permitiría a atacantes remotos dirigir envíos del cliente y cambios a una base de datos de su elección especificando unos identificadores de servidor separados por múltiples comas en la linea JTLRMIREGISTRYSERVERS del fichero jtl.properties."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.0.3","matchCriteriaId":"96E77C5E-E70E-4468-8206-4B74150BC4E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"}]}]}],"references":[{"url":"http://secunia.com/advisories/32847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5330","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en la interfaz web de ClearCase RWP server en IBM Rational ClearCase v7.0.0 anterior a la v7.0.0.4, y v7.0.1.1-RATL-RCC-IFIX02 y posiblemente v7.0.1 anteriores a v7.0.1.3, permitiria a atacantes remotos inyectar secuencias de comandos web o HTML a traves de PATH_INFO de un URI asociado con una pagina VOB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"}]}]}],"references":[{"url":"http://secunia.com/advisories/32957","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021295","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK70972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32574","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3330","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46983","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK70972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5331","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T00:30:00.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack."},{"lang":"es","value":"Adobe Acrobat v9 utiliza un cifrado mas eficiente que en anteriores versiones, lo que permite a atacantes averiguar la contraseña de un documento mas fácilmente a través de un ataque de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:professional:*:*:*:*:*","matchCriteriaId":"72CF5F4B-C1D4-4117-A379-14F38B4CAEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"}]}]}],"references":[{"url":"http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html","source":"cve@mitre.org"},{"url":"http://www.elcomsoft.com/PR/apdfpr_081126_en.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32610","source":"cve@mitre.org"},{"url":"http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.elcomsoft.com/PR/apdfpr_081126_en.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5332","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib parameter to files in lib/action/ including (a) alias.php, (b) cancel.php, (c) context.php, (d) deadlinks.php, (e) delete.php, and others; and the (2) GLOBALS[pie][library_path] parameter to files in lib/share/ including (f) diff.php, (g) file.php, (h) locale.php, (i) mapfile.php, (j) page.php, and others."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de ficheros PHP en Pie v0.5.3 permitiría a atacantes remotos ejecutar código PHP a su elección a través de una URL en (1) el parámetro \"lib\" a los ficheros incluidos en lib/action/ (a) alias.php, (b) cancel.php, (c) context.php, (d) deadlinks.php, (e) delete.php, y otros; y el parámetro (2) GLOBALS[pie][library_path] a los ficheros incluidos en lib/share/ (f) diff.php, (g) file.php, (h) locale.php, (i) mapfile.php, (j) page.php, y otros"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pie:pie:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"64DC8351-98D2-49F5-86DC-53F75FE1DE9F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4687","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46819","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7221","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5333","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.330","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en members.php en NitroTech v0.0.3a permitiría a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nitrotech:nitrotech:0.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"4E9A72AE-97EB-4A49-B16E-F36F39C71ECD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32458","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46822","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7218","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5334","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via a URL in the root parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en includes/common.php en NitroTech v0.0.3a permitiría a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro \"root\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nitrotech:nitrotech:0.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"4E9A72AE-97EB-4A49-B16E-F36F39C71ECD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4691","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7218","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5335","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msg_send parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and CVE-2006-2459."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en messages.php en PHP-Fusion v6.01.15 y v7.00.1, cuando magic_quotes_gpc se deshabilita, permitiría a atacantes remotos ejecutar comando SQL a su elección a traves de los parametros \"subject\" y \"msg_send\", es un vector diferente que CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, y CVE-2006-2459."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:6.01.15:*:*:*:*:*:*:*","matchCriteriaId":"11019A94-11B0-438E-AB2C-A216C0079788"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:7.00.1:*:*:*:*:*:*:*","matchCriteriaId":"29C3B75C-A4A7-4144-AA56-ACA16382535D"}]}]}],"references":[{"url":"http://osvdb.org/50065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32781","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4688","source":"cve@mitre.org"},{"url":"http://www.php-fusion.co.uk/downloads.php?cat_id=19","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php-fusion.co.uk/news.php?readmore=435","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.php-fusion.co.uk/news.php?readmore=436","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32388","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3248","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46760","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7173","source":"cve@mitre.org"},{"url":"http://osvdb.org/50065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php-fusion.co.uk/downloads.php?cat_id=19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php-fusion.co.uk/news.php?readmore=435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.php-fusion.co.uk/news.php?readmore=436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5336","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en WebStudio CMS permitiría atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"pageid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bdigital_web_solutions:webstudio_cms:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"3E7F2008-3AC0-4B8C-878A-1A53B46344EB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4690","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498597/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32449","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3273","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46818","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7216","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7236","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498597/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5337","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lyrics.php en Bandwebsite (conocido anteriormente como Bandsite portal system) v1.5 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:multimania:bandsite_portal_system:1.5:*:*:*:*:*:*:*","matchCriteriaId":"CA0721F3-C8D4-4CB5-835D-03AC6B26DF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:multimania:bandwebsite:1.5:*:*:*:*:*:*:*","matchCriteriaId":"772B1039-5C68-45CF-AD0E-8232DA643343"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4689","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32453","source":"cve@mitre.org"},{"url":"http://z0rlu.blogspot.com/2008/11/bandwebsite-15-sqlxss-multiple-remote.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46816","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7215","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://z0rlu.blogspot.com/2008/11/bandwebsite-15-sqlxss-multiple-remote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5338","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T01:30:00.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to inject arbitrary web script or HTML via the section parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en info.php en  Bandwebsite (anteriormente conocido como Bandsite portal system) v1.5 permite a atacantes remotos inyectar secuencias de código web o HTML a su elección a través del parámetro sección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:multimania:bandsite_portal_system:1.5:*:*:*:*:*:*:*","matchCriteriaId":"CA0721F3-C8D4-4CB5-835D-03AC6B26DF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:multimania:bandwebsite:1.5:*:*:*:*:*:*:*","matchCriteriaId":"772B1039-5C68-45CF-AD0E-8232DA643343"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4689","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://z0rlu.blogspot.com/2008/11/bandwebsite-15-sqlxss-multiple-remote.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46817","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7215","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://z0rlu.blogspot.com/2008/11/bandwebsite-15-sqlxss-multiple-remote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5339","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka CR 6727079."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Web Start (JWS) y Java Plug-in en Sun JDK y JRE v6 Update 10 y anteriores; JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite que aplicaciones JWS no confiables realicen conexiones de red con sistemas no autorizados mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6409","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5340","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Web Start (JWS) y Java Plug-in en Sun JDK y JRE v6 Update 10 y anteriores; JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite que aplicaciones JWS no confiables obtengan privilegios de acceso a ficheros o aplicaciones locales mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6627","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5341","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Web Start (JWS) y Java Plug-in en Sun JDK y JRE v6 Update 10 y anteriores, y en JDK y JRE v5.0 Update 16 y anteriores, permite que aplicaciones JWS no confiables obtengan la ruta de la caché JWS y el nombre de usuario de la aplicación mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5342","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.330","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668."},{"lang":"es","value":"Vulnerabilidad no especificada en BasicService para Java Web Start (JWS) y Java Plug-in en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite que aplicaciones descargadas no confiables puedan mostrar ficheros locales en el visualizador de usuario de la aplicación no confiable mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50514","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6359","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5343","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF and a Java JAR file, aka \"GIFAR\" and CR 6707535."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Web Start (JWS) y Java Plug-in en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite que código oculto realice conexiones de red no autorizadas y secuestrar sesiones HTTP que utilicen cookies almacenadas en el navegador mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50512","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32892","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5924","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xs-sniper.com/blog/2008/12/17/sun-fixes-gifars/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5344","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Web Start (JWS) y Java Plug-in en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE 5.0 Update 16 y anteriores; y en SDK y JRE 1.4.2_18 y anteriores permite a applets no confiables leer ficheros de su elección y realizarz conexiones de red no autorizadas mediante vectores desconocidos relacionados con el cargador de la clase \"applet\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50513","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47057","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6249","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5345","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; en SDK y JRE v1.4.2_18 y anteriores; y en SDK y JRE v1.3.1_23 y anteriores permite que código cargado desde un sistema de ficheros local lea ficheros de su elección y realice conexiones no autorizadas al localhost mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/50508","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1021305","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/50508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1021305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5346","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Sun JDK y JRE v5.0 Update 16 y anteriores; en SDK y JRE v1.4.2_18 y anteriores; y en SDK y JRE v1.3.1_23 y anteriores permite a applets y aplicaciones no confiables leer zonas de memoria de su elección utilizando un fichero ZIP modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/50507","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1021306","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/50507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1021306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5347","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages."},{"lang":"es","value":"Multiples vulnerabilidades no especificadas en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores permite a applets y aplicaciones no confiables obtener privilegios mediante vectores relacionados con el acceso a clases internas en los paquetes (1) JAX-WS y (2) JAXB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50506","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246366-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019798.1-1","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021307","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47068","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5633","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246366-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019798.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5348","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; JDK y JRE v5.0 Update 16 y anteriores; y SDK y JRE v1.4.2_18 y anteriores, cuando usan la autenticación Kerberos, permite a atacantes remotos provocar una denegación de servicio (consumo de recursos del  sistema operativo) mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50505","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5349","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores, y en JDK y JRE v5.0 Update 16 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) mediante una clave pública RSA modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50504","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504010/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021309","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47064","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504010/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5350","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.470","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite a applets y aplicaciones no confiables leer el contenido del directorio del usuario actual mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50503","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021310","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5351","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.487","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings."},{"lang":"es","value":"Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores acepta códigos UTF-8 que no están en la forma \"corta\", facilitando a los atacantes la evasión de los mecanismos de protección de otras aplicaciones que confían en la codificación UTF-8 en forma corta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50502","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021311","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5352","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la utilidad de desempaquetado JAR (unpack200) en la biblioteca de desempaquetar (unpack.dll) en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores, y en JDK y JRE v5.0 Update 16 y anteriores, permite a applets y aplicaciones no confiables obtener privilegios mediante un fichero JAR comprimido con Pack200 provocando un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50501","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021312","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5353","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\"."},{"lang":"es","value":"Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite a applets y aplicaciones no confiables obtener privilegios mediante vectores desconocidos relacionados con la \"segregación información de objetos de calendario\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://blog.cr0.org/2009/05/write-once-own-everyone.html","source":"cve@mitre.org"},{"url":"http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50500","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35118","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503797/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021313","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1391","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://blog.cr0.org/2009/05/write-once-own-everyone.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503797/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5354","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.550","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite a aplicaciones Java no confiables ejecutadas en local y posiblemente en remoto ejecutar código de su elección mediante un fichero JAR con una entrada larga en el manifiesto de Main-Class."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47060","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5355","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Java Update\" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks."},{"lang":"es","value":"La funcionalidad de actualización de Java en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores no verifica la firma del JRE que descarga, permitiendo a atacantes remotos ejecutar código de su elección mediante ataques DNS de man-in-the-middle (hombre en medio)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://osvdb.org/50498","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244989-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021315","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5664","source":"cve@mitre.org"},{"url":"http://osvdb.org/50498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5356","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.580","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; y en SDK y JRE v1.4.2_18 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un fichero de fuentes TrueType manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C2676EA2-C7F5-43D2-B77B-8EFBB24F0733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"31FC6770-628A-46DF-BC63-151B472D93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"67B5E3D0-2430-4680-8719-F6781019B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_18","matchCriteriaId":"F974FE80-E77D-4242-96E6-23C2D774E0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50516","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33187","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47103","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5357","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; en SDK y JRE v1.4.2_18 y anteriores; y en SDK y JRE v1.3.1_23 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un fichero de fuentes TrueType manipulado, provocando un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"5F0AD0F9-E797-4E16-95F3-C1AFDA557D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"9AF0780E-830E-4971-8F79-8FCF5D2EBC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/50517","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33187","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47050","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/50517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5358","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll."},{"lang":"es","value":"Java Runtime Environment (JRE) en Sun JDK and JRE v6 Update 10 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un fichero GIF manipulado que provoca una corrupción de memoria durante la visualación de la imagen de bienvenida, posiblemente relacionado con la biblioteca \"splashscreen.dll\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"4F52DFA7-EEC1-4B8C-9ADA-0DA3D81E2F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"AFC680FA-7FCA-4345-8492-F16C86151DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=758","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50515","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33187","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47049","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6319","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5359","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.643","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library."},{"lang":"es","value":"Desbordamiento de búfer en Java Runtime Environment (JRE) en Sun JDK y JRE v6 Update 10 y anteriores; en JDK y JRE v5.0 Update 16 y anteriores; en SDK y JRE v1.4.2_18 y anteriores; y en SDK y JRE v1.3.1_23 y anteriores permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos relacionados con el \"código de procesamiento de imágenes\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33187","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-080/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47048","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-080/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5360","sourceIdentifier":"cve@mitre.org","published":"2008-12-05T11:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors."},{"lang":"es","value":"Java Runtime Environment (JRE) para Sun JDK y JRE 6 Update 10 y versiones anteriores; JDK y JRE 5.0 Update 16 y versiones anteriores; SDK y JRE 1.4.2_18 y versiones anteriores y SDK y JRE 1.3.1_23 y versiones anteriores crea archivos temporales con nombres de archivo predecibles, lo que podría permitir a atacantes escribir archivos JAR maliciosos a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"D57BC929-6C98-4F36-B31B-6B946F986D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"C94CEFBC-250D-472E-9A5B-E9E054C967C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33187","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33528","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33709","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32608","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021316","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47045","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123678756409861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126583436323697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-1025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/32991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0445.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-340A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5361","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T11:30:00.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified other actions, which allows remote attackers to read sensitive data from process memory via a crafted PDF file."},{"lang":"es","value":"La máquina virtual ActionScript v2 en Adobe Flash Player v10.x anteriores a v10.0.12.36 y en v9.x anteriores a v9.0.151.0, y en Adobe AIR anteriores a v1.5, no verifica el tamaño de un elemento miembro cuando realiza las acciones (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, y otras acciones no especificadas, permitiendo a atacantes remotos leer información sensible del proceso en memoria mediante un fichero PDF modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5","matchCriteriaId":"31300012-1803-451C-9304-7D532CAAD597"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.16.0","versionEndExcluding":"9.0.151.0","matchCriteriaId":"C9617651-EBE0-443C-9C56-75A6DB6DFA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"10","versionEndExcluding":"10.0.12.36","matchCriteriaId":"24B27C65-29D0-42D7-8293-67839687888A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4692","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5362","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T11:30:06.080","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a \"constant count,\" which allows remote attackers to read sensitive data from process memory via a crafted PDF file."},{"lang":"es","value":"La acción \"DefineConstantPool\" en la máquina virtual ActionScript v2 en Adobe Flash Player v10.x anteriores a v10.0.12.36 y v9.x anteriores a v9.0.151.0, y en Adobe AIR anteriores a v1.5, acepta un valor de entrada no confiable en un \"contador constante\", permitiendo a atacantes remotos leer información sensible del proceso en memoria mediante un fichero PDF modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5","matchCriteriaId":"31300012-1803-451C-9304-7D532CAAD597"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.16.0","versionEndExcluding":"9.0.151.0","matchCriteriaId":"C9617651-EBE0-443C-9C56-75A6DB6DFA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"10","versionEndExcluding":"10.0.12.36","matchCriteriaId":"24B27C65-29D0-42D7-8293-67839687888A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4692","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5363","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T11:30:06.097","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF file."},{"lang":"es","value":"La máquina virtual ActionScript v2 en Adobe Flash Player v10.x anteriores a v10.0.12.36 y en v9.x anteriores a v9.0.151.0, y en Adobe AIR anteriores a v1.5, no realizan validación de los caracteres de los elementos durante la recuperación de la estructura de datos del diccionario, permitiendo a atacantes remotos provocar una denegación de servicio (referencia a puntero NULO y parada de la aplicación) mediante un fichero PDF modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5","matchCriteriaId":"31300012-1803-451C-9304-7D532CAAD597"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.16.0","versionEndExcluding":"9.0.151.0","matchCriteriaId":"C9617651-EBE0-443C-9C56-75A6DB6DFA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"10","versionEndExcluding":"10.0.12.36","matchCriteriaId":"24B27C65-29D0-42D7-8293-67839687888A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4692","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.isecpartners.com/advisories/2008-01-flash.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498561/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5364","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T11:30:06.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2008-4817."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX getPlus en gp.ocx v1.2.2.50 en NOS Microsystems getPlus Download Manager, como el usado por el proceso de instalación de Adobe Reader v8.1 y otras descargas, permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente a CVE-2008-4817."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nos_microsystems:getplus_download_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5A36AB0B-960E-4CA3-B543-D0E8F8C073B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=754","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32105","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5365","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T11:30:06.143","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en VoteHistory.asp en ActiveWebSoftwares ActiveVotes v2.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"AccountID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:activevotes:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A25FB95A-B1A9-42B6-9FAD-8C0AF80B3BFA"}]}]}],"references":[{"url":"http://osvdb.org/50391","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32922","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32541","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3304","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46924","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7287","source":"cve@mitre.org"},{"url":"http://osvdb.org/50391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5366","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file."},{"lang":"es","value":"La secuencia de comandos postinst en c, permite a usuarios locales sobrescribir archivos de su elección a través de un ataque simbólico en los archivos temporales (1) /tmp/probe-finished o (2) /tmp/ppp-errors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marco_d\\'itri:ppp:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"C48306D0-FC36-40CB-B95A-51F80B54E6F5"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32740","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5367","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file."},{"lang":"es","value":"ip-up en ppp-udeb v2.4rel sobre Debian GNU/Linux, permite a usuarios locales sobrescribir ficheros a través de un enlace simbólico sobre el fichero temporal /tmp/resolv.conf.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marco_d\\'itri:ppp-udeb:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"108EBDF6-3D8A-434C-ADB9-02A4C64C67ED"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5368","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.300","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file."},{"lang":"es","value":"muttprint en muttprint v0.72d, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico al fichero temporal /tmp/muttprint.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lukas_ruf:muttprint:0.72d:*:*:*:*:*:*:*","matchCriteriaId":"DC65FB33-6CC2-429E-A5FF-56B5479CE510"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34439","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-35.xml","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-35.xml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5369","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file."},{"lang":"es","value":"noip2 de noip2 v2.1.7, permite a usuarios locales sobrescribir ficheros de su elección a través de una ataque de enlace simbólico en el fichero temporal /tmp/noip2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:no-ip:no-ip2:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"278052B5-0973-48D6-B3E6-4D1BBAE0E1EE"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5370","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file."},{"lang":"es","value":"pvpgn-support-installer en pvpgn v1.8.1, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre el fichero temporal /tmp/pvpgn-support-1.0.tar.gz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pvpgn:pvpgn:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B0D332-A392-4B16-B4FE-DF5B396AC74B"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5371","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file."},{"lang":"es","value":"screenie en screenie v1.30.0 permite a usuarios locales sobrescribir archivos de su elección a través de un ataque simbólico en un archivo temporal /tmp/.screenie.#####."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_gloor:screenie:1.30.0:*:*:*:*:*:*:*","matchCriteriaId":"35EDBD9C-452E-4762-A0F3-1608A509B25B"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32737","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5372","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file."},{"lang":"es","value":"sdm-login de sdm-terminal v0.4.0b, permite a usuarios locales sobrescribir ficheros de su elección a través de ataques de enlace simbólico en el fichero temporal /tmp/sdm.autologin.once."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jonas_smedegaard:sdm-terminal:0.4.0b:*:*:*:*:*:*:*","matchCriteriaId":"60ACA5A1-53F6-44CE-8E7E-8128A0627109"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5373","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### temporary file, probably a related issue to CVE-2005-2995."},{"lang":"es","value":"mtx-changer.Adic-Scalar-24 in bacula-common v2.4.2, permite a usuarios locales sobrescribir ficheros de su elección a través de un enlace de ataque simbólico sobre el fichero temporal /tmp/mtx.#####. Cuestion probablemente relacionada con el CVE-2005-2995."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bacula:bacula:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5CF0341C-0496-46DB-9EE9-985622684EB6"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org","tags":["Mailing List","Technical Description"]},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Technical Description"]},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-5374","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts."},{"lang":"es","value":"bash-doc v3.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/cb#####.?. Está relacionado con las secuencias de comandos (scripts) (1) aliasconv.sh, (2) aliasconv.bash y(3) cshtobash."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-5374\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2008-12-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthias_klose:bash-doc:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1A33DEEC-2DA4-421B-BACC-D6C7E871C9F1"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43365","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/51086","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201210-05.xml","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:004","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0261.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1073.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32733","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0414","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/51086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201210-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5375","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file."},{"lang":"es","value":"cmus-status-display en cmus v2.2.0, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre el fichero temporal /tmp/cmus-status."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmus:cmus:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6FC3038F-03D0-4F6F-84FB-6BD66CF7985D"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33113","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32741","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5376","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file."},{"lang":"es","value":"editcomment en crip v3.7, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre el fichero temporal /tmp/*.tag.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crip:crip:3.7:*:*:*:*:*:*:*","matchCriteriaId":"2178FE23-2587-4AB2-BFA6-7254D5E28BFF"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5377","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.470","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a different vulnerability than CVE-2001-1333."},{"lang":"es","value":"pstopdf de CUPS v1.3.8 , permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/pstopdf.log. Se trata de una vulnerabilidad diferente de CVE-2001-1333."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of CUPS as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n\nAffected script is not part of the upstream CUPS distribution, but rather an addition used by Debian-based distributions (and possibly others).\n\nCUPS packages as shipped in Red Hat Enterprise Linux 5 also provide pstopdf filter.  However, that filter is different from the one used in Debian-based distributions, and is unaffected by this flaw.\n\nAdditionally, all filters used by CUPS on all versions of Red Hat Enterprise Linux are run under an unprivileged &quot;lp&quot; user, making the root privilege escalation mentioned in the published exploit impossible.","lastModified":"2009-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"cve@mitre.org"},{"url":"http://uvw.ru/report.sid.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7550","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://uvw.ru/report.sid.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5378","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.487","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids_*_* temporary file."},{"lang":"es","value":"arb-kill en arb v0.0.20071207.1 permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlace simbólico en el archivo temporal /tmp/arb_pids_*_*."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lehrstuhl_fur_mikrobiologie:arb:0.0.20071207.1:*:*:*:*:*:*:*","matchCriteriaId":"6C17EFF9-65EF-4235-B6C1-0BB4B4D174D1"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30895","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5379","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.503","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts."},{"lang":"es","value":"netdisco-mibs-installer v1.0, permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlace simbólico sobre el archivo temporal /tmp/netdisco-mibs-0.6.tar.gz, relacionado con los secuencias de comandos (1) netdisco-mibs-install y (2) netdisco-mibs-download."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oliver_gorwits:netdisco_mibs_installer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F5DAA42-DA7E-44D0-9EF0-92F0697428CF"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5380","sourceIdentifier":"cve@mitre.org","published":"2008-12-08T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959."},{"lang":"es","value":"gpsdrive (también conocido como gpsdrive-scripts) v2.09; permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal (a) /tmp/geo#####, (b) /tmp/geocaching.loc, (c) /tmp/geo#####.* o (d) /tmp/geo.*. Está relacionado con las secuencias de comandos (script) (1) geo-code y (2) geo-nearest. Se trata de vectores diferentes de CVE-2008-4959."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:2.09:*:*:*:*:*:*:*","matchCriteriaId":"E65C1B71-B86C-4777-8A6A-B7BAA520352D"}]}]}],"references":[{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33825","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5381","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the URL processing in ffdshow (aka ffdshow-tryout) before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL."},{"lang":"es","value":"Desbordamiento de búfer en el procesamiento de la URL en ffdshow (alias ffdshow-tryout) antes SVN revisión 2347, permite a los atacantes remotos ejecutar arbitrariamente código a través una URL larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffdshow-tryout:ffdshow:*:*:*:*:*:*:*:*","matchCriteriaId":"178C3490-6A8B-45A9-AE42-E81F9A26486E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=277","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498585/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32438","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3249","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498585/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5382","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300 y HDL-F320 con software empotrado (firmware) anterior a v1.02; permite a atacantes remotos (1) cambiar una configuración o (2) eliminar ficheros como un usuario autenticado a través de vectores desconocidos. NOTA: El origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:i-o_data:hlf-f160:*:*:*:*:*:*:*:*","matchCriteriaId":"07B2C515-0A02-4160-8149-29F77CF0B8E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:i-o_data:hlf-f250:*:*:*:*:*:*:*:*","matchCriteriaId":"1822C4EF-46E9-4B8A-9B0F-E7E95869A671"},{"vulnerable":true,"criteria":"cpe:2.3:h:i-o_data:hlf-f300:*:*:*:*:*:*:*:*","matchCriteriaId":"47EA1796-68AD-42F4-B6E8-7F64120ECA8C"},{"vulnerable":true,"criteria":"cpe:2.3:h:i-o_data:hlf-f320:*:*:*:*:*:*:*:*","matchCriteriaId":"0DBC0818-80EE-4452-8168-21CBD86BBFB4"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN70599814/index.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50183","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32836","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/news/2008/important/hdl-f.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46880","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN70599814/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iodata.jp/news/2008/important/hdl-f.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5383","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .ewb file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en National Instruments Electronics Workbench permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación) y posiblemente la ejecución de código de su elección a través de un fichero .ewb manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_instruments:electronics_workbench:*:*:*:*:*:*:*:*","matchCriteriaId":"6D61F945-09A3-4817-BB28-C4D4A7ADDD73"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32542","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46996","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7307","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5384","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor."},{"lang":"es","value":"crontab en bos.rte.cron en IBM AIX 6.1.0 hasta 6.1.2, permite a los usuarios locales con autorización aix.system.config.cron obtener privilegios por el lanzamiento de un editor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"cve@mitre.org"},{"url":"http://osvdb.org/50218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32916","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ30248","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34478","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34783","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021291","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5612","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ30248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5385","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors."},{"lang":"es","value":"enq en bos.rte.printers en IBM AIX v6.1.0 a la v6.1.2, cuando la cola de impresión está definida en /etc/qconfig, permite a usuarios locales eliminar ficheros de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"cve@mitre.org"},{"url":"http://osvdb.org/50217","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ33088","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34481","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34785","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021290","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ33088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5386","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en ndp en IBM AIX 6.1.0 hasta 6.1.2, cuando el daemon netcd está ejecutándose, permite a los usuario locales obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"cve@mitre.org"},{"url":"http://osvdb.org/50215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35170","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35181","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35209","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021288","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5387","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.470","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en autoconf6 \r\nen IBM AIX 6.1.0 hasta 6.1.2, cuando Role-Based Access Control está habilitado, permite a los usuarios locales con autorización aix.network.config.tcpip obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ30231","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34393","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34753","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021289","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6303","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ30231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5393","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.487","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays."},{"lang":"es","value":"UPR-Kernel en Ubuntu Privacy Remix (UPR) anterior a v8.04_r1 incluye soporte para el kernel para la implementación de arrays RAID, lo que permitiría a atacantes remotos evitar los mecanismo de aislamiento intencionados  mediante la (1) lectura o (2) escritura de estos arrays."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG. It only affected the Ubuntu Privacy Remix (UPR) kernel.","lastModified":"2008-12-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:privacy-cd:unbuntu_privacy_remix:*:*:*:*:*:*:*:*","versionEndIncluding":"8.04","matchCriteriaId":"3E17F73C-FA60-4275-A920-48E711390BB6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4696","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498905/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32629","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugs.launchpad.net/bugs/301285","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47082","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498905/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.launchpad.net/bugs/301285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5394","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry."},{"lang":"es","value":"/bin/login en shadow 4.0.18.1 en Debian GNU/Linux, y probablemente otras distribuciones de Linux, permiten a los usuarios locales en el el grupo utmp sobrescribir arbitrariamente archivos a través de un ataque de enlace simbólico en un archivo temporal referenciado en un campo línea (alias ut_line) en una entrada utmp."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the util-linux packages (providing /bin/login), as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.","lastModified":"2008-12-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:shadow:4.0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC9AF32-DEC5-4801-B975-23E9B65EBA4F"}]}]}],"references":[{"url":"http://bugs.debian.org/332198","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/505071","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/505271","source":"cve@mitre.org"},{"url":"http://osvdb.org/52200","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-24.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4695","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498769/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32552","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-695-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47037","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7313","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/332198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/505071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/505271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498769/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-695-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5395","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The parisc_show_stack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service (system crash) via vectors associated with an attempt to unwind a stack that contains userspace addresses."},{"lang":"es","value":"La función parisc_show_stack de arch/parisc/kernel/traps.c en el kernel de Linux anterior a v2.6.28-rc7 en PA-RISC; permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores asociados con un intento de retirar de una pila que contiene direcciones de espacio de usuario."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for the Linux kernel on the PA-RISC architecture.","lastModified":"2008-12-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:pa-risc:-:-:x64:*:*:*:*:*","matchCriteriaId":"C5BEA3A2-DD44-4CF4-A223-7717991A15EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:pa-risc:-:-:x86:*:*:*:*:*","matchCriteriaId":"37F0B457-4CE0-497C-AEF8-F7ECDD4D6BD7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc7","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-parisc&m=121736357203624&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32933","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32636","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47075","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-parisc&m=121736357203624&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5396","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.550","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to missing validation of the sync field associated with the ZT_SPANCONFIG ioctl."},{"lang":"es","value":"Error en índice de array en los controladores (1) torisa.c y (2) dahdi/tor2.c drivers en Zaptel (también conocido como DAHDI) v.1.4.11 y anteriores, permite a usuarios locales en el grupo de marcado, el sobrescribir un valor entero en la memoria del kernel escribiendo en /dev/zap/ctl, relacionado con la pérdida de validación del campo \"sync\" asociado con el  ZT_SPANCONFIG ioctl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.11","matchCriteriaId":"44ADB7D9-FDFE-478E-ADD0-8978BE18D365"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC52E469-E0A0-4114-A297-862E0D6364C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"3B906772-5BF8-4C60-B2D5-822D934BABFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"E8A4A878-FFDF-4A58-9254-74CD7AAEEEBF"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507459","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=13954","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32947","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32960","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/03/10","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.digium.com/view.php?id=13954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/03/10","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5397","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process."},{"lang":"es","value":"Tor anterior a v0.2.32 no procesa adecuadamente la configuración de las opciones de (1)usuario (User) y (2) Grupo (group), lo que permitiría a usuarios locales obtener privilegios aprovechando la pertenencia a grupos creados por defecto en los procesos de Tor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2.31","matchCriteriaId":"CB84ADB5-01EA-4ECF-B36E-9CE54E8309C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*","matchCriteriaId":"4490AC9B-E8D8-4C97-866B-AB76AB2536F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*","matchCriteriaId":"0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*","matchCriteriaId":"9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*","matchCriteriaId":"2A2A2B60-8D31-4B59-8407-9CE62709906A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*","matchCriteriaId":"CDE02B1D-AA25-4364-8E54-583A0304FA69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*","matchCriteriaId":"DE3AB095-3F57-4922-BC12-0842FA158555"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*","matchCriteriaId":"F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*","matchCriteriaId":"811FD436-8BD2-463A-8072-A915FFCA33C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*","matchCriteriaId":"83F107CD-7334-4D9D-AEFF-FA5F8DE72576"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*","matchCriteriaId":"07EB2211-D97D-47EF-94D1-01E7A3879BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*","matchCriteriaId":"28DC8889-4E65-46D0-AA68-6390757862D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*","matchCriteriaId":"4E4C7373-82F1-49E6-90D6-7A02AC52F255"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*","matchCriteriaId":"7F3D847A-D8F1-40CE-AE33-A397654C55B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*","matchCriteriaId":"8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*","matchCriteriaId":"D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7301BA35-2522-4144-83C2-6A3A6D329A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"37993416-D81F-4F6B-AB2C-16F351BE68D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"295C826F-CBEB-4BA2-A760-22D58D231BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D230B213-4A35-488F-A4B5-87F77BD65E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF88062-8726-4C1D-8F93-ABA0B1654656"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1A710565-6960-4D46-A1EB-86FE0927A66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"81F6C954-7C0A-41E5-9719-26082E40C5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"43784D06-2D2A-46D1-ADE2-B947B3F10F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"196BF37C-CD62-4D4C-A716-827B0E6A5065"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"20076B65-48E6-4DA2-BDA1-AC4F904B449D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"48A2CCAD-397B-4037-B99B-F0A622FAF8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"50E74056-DD32-49E6-808A-5A9B755F1DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E2103A8-0F3F-4226-A5D8-4BF239FD6636"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"0490AB18-A839-400D-88E2-D918B1EEFA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"DBED980F-A8B9-4C44-957C-FD18867B1799"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3E033E0C-C7F6-4910-A795-28BA60E9431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5AAAACA5-F431-4D83-B04D-EC9A81C96184"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A1D5B46C-E7D3-495F-861C-12324F09EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"639E3063-34CC-4AE2-B055-92D36ECAADF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C5305AF8-E26C-44A1-B546-AAC5D1C2D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"48DCAB29-4EF2-4A50-A941-DA5D89E27D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"33928D26-39DF-4E15-9979-F9484913C219"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48B8A291-E1F7-444F-8C5B-C3C38541B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24581D9F-02AF-42E6-A3D7-9CAD43E26477"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3B978E3E-69D7-46BD-BD88-1409A546FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E7FED829-128A-4F87-9838-AD0C9C11E458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3A39B543-5978-46FC-AF85-D635D87E3B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"803498D9-C750-4D16-8ADF-2F98E71888A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C04309D4-FEA8-47EA-BB9A-8CBD341B475F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"8607F3C9-F185-4B87-8A1B-B9495A4F244D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"667201BB-5FDA-4E51-B865-0AF8507DBCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"3C7D396C-36CA-4579-BCA0-672440CB5CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"811CE708-CEE6-4B0F-98E5-E138C06EA382"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0F837E-12E5-4332-9823-8B1F764042E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"6860F802-FEC2-449A-A5FC-AFACCA8633CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF80379-BD68-4E3B-A7CC-57B51619A0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*","matchCriteriaId":"A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"57DAA48C-4B3B-4665-87AB-38ACFD6C757C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4D9E677-01D2-4800-82AA-F5585475D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"37CF2822-88B6-41F2-B10A-A8B09B27245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*","matchCriteriaId":"9C589D4F-60B3-450B-860A-9975BB47BBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B300C56E-7DF5-4B24-84D1-A4732515325E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*","matchCriteriaId":"DA331167-6A2F-402F-A28F-9EE7B6F20207"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"13846571-C84A-43D6-9970-444E6B4DB0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*","matchCriteriaId":"F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4740B10-EFB8-4F79-88C1-9B6F5897A71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"B4D881C4-0302-44E9-A3C5-A23EFD681B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*","matchCriteriaId":"31CA7556-D132-4E81-8E13-C7E025AF20AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A8219F1A-D6F5-4D6E-B10D-4C455073520C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D224FA8D-4C5A-48BE-92F2-1EC57782046D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB701014-7980-4BBE-8BD9-3FD2A0AF6941"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D68C31D4-9478-4EB6-B160-E9970ADA785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"872F7B10-30EA-4945-99BC-9EC1C09D6D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5BBC3EFD-7F03-4DC1-988C-22007216F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"2F7898C5-9450-41FD-B45D-7504D97B4CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"B3A247E8-F22B-4639-96D2-9BC01C904D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"B1233504-041A-454E-9F2E-6E2A4207879D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"342D2B8A-A832-4CAB-9389-93764B0DE241"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"7D44F099-7BC3-45C4-9DB3-03A7E40BC548"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1A79A0CD-7B81-417E-8DE3-0D61006003FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"4F0A70AA-931A-4906-B4AD-D56E90683716"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"BB51EE46-D720-4C1F-8992-67F4422E43CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*","matchCriteriaId":"197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"EFC7477A-5DDA-42A6-828E-A818CCF208B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"963FD695-512A-45A8-A60D-887D93FBBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"65ABF89E-4814-44D3-A1AD-3B7A4F876A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"96F69A35-225C-41FF-A32B-AE53096516EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"2B218F1A-C04D-40B3-A6BE-86DA04E47D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"B6D575EF-37BA-4E69-BDD2-B99680D2CEC5"}]}]}],"references":[{"url":"http://blog.torproject.org/blog/tor-0.2.0.32-released","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33025","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32648","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47101","source":"cve@mitre.org"},{"url":"http://blog.torproject.org/blog/tor-0.2.0.32-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5398","sourceIdentifier":"cve@mitre.org","published":"2008-12-09T00:30:00.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream."},{"lang":"es","value":"Tor anterior a v0.2.0.32 no procesa adecuadamente la opción de configuración ClientDNSRejectInternalAddresses en situaciones donde una cuestión en la salida de transmisión  de una política que deniega el flujo, puede permitir a flujos de salida remotos tener un impacto desconocido mediante el mapeo de una dirección IP interna hacia el nombre de host destino de una flujo denegado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2.31","matchCriteriaId":"CB84ADB5-01EA-4ECF-B36E-9CE54E8309C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*","matchCriteriaId":"4490AC9B-E8D8-4C97-866B-AB76AB2536F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*","matchCriteriaId":"0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*","matchCriteriaId":"9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*","matchCriteriaId":"2A2A2B60-8D31-4B59-8407-9CE62709906A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*","matchCriteriaId":"CDE02B1D-AA25-4364-8E54-583A0304FA69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*","matchCriteriaId":"DE3AB095-3F57-4922-BC12-0842FA158555"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*","matchCriteriaId":"F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*","matchCriteriaId":"811FD436-8BD2-463A-8072-A915FFCA33C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*","matchCriteriaId":"83F107CD-7334-4D9D-AEFF-FA5F8DE72576"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*","matchCriteriaId":"07EB2211-D97D-47EF-94D1-01E7A3879BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*","matchCriteriaId":"28DC8889-4E65-46D0-AA68-6390757862D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*","matchCriteriaId":"4E4C7373-82F1-49E6-90D6-7A02AC52F255"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*","matchCriteriaId":"7F3D847A-D8F1-40CE-AE33-A397654C55B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*","matchCriteriaId":"8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*","matchCriteriaId":"D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7301BA35-2522-4144-83C2-6A3A6D329A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"37993416-D81F-4F6B-AB2C-16F351BE68D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"295C826F-CBEB-4BA2-A760-22D58D231BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D230B213-4A35-488F-A4B5-87F77BD65E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF88062-8726-4C1D-8F93-ABA0B1654656"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1A710565-6960-4D46-A1EB-86FE0927A66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"81F6C954-7C0A-41E5-9719-26082E40C5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"43784D06-2D2A-46D1-ADE2-B947B3F10F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"196BF37C-CD62-4D4C-A716-827B0E6A5065"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"20076B65-48E6-4DA2-BDA1-AC4F904B449D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"48A2CCAD-397B-4037-B99B-F0A622FAF8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"50E74056-DD32-49E6-808A-5A9B755F1DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E2103A8-0F3F-4226-A5D8-4BF239FD6636"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"0490AB18-A839-400D-88E2-D918B1EEFA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"DBED980F-A8B9-4C44-957C-FD18867B1799"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3E033E0C-C7F6-4910-A795-28BA60E9431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5AAAACA5-F431-4D83-B04D-EC9A81C96184"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A1D5B46C-E7D3-495F-861C-12324F09EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"639E3063-34CC-4AE2-B055-92D36ECAADF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C5305AF8-E26C-44A1-B546-AAC5D1C2D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"48DCAB29-4EF2-4A50-A941-DA5D89E27D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"33928D26-39DF-4E15-9979-F9484913C219"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48B8A291-E1F7-444F-8C5B-C3C38541B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24581D9F-02AF-42E6-A3D7-9CAD43E26477"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3B978E3E-69D7-46BD-BD88-1409A546FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E7FED829-128A-4F87-9838-AD0C9C11E458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3A39B543-5978-46FC-AF85-D635D87E3B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"803498D9-C750-4D16-8ADF-2F98E71888A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C04309D4-FEA8-47EA-BB9A-8CBD341B475F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"8607F3C9-F185-4B87-8A1B-B9495A4F244D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"667201BB-5FDA-4E51-B865-0AF8507DBCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"3C7D396C-36CA-4579-BCA0-672440CB5CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"811CE708-CEE6-4B0F-98E5-E138C06EA382"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0F837E-12E5-4332-9823-8B1F764042E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"6860F802-FEC2-449A-A5FC-AFACCA8633CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF80379-BD68-4E3B-A7CC-57B51619A0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*","matchCriteriaId":"A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"57DAA48C-4B3B-4665-87AB-38ACFD6C757C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4D9E677-01D2-4800-82AA-F5585475D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"37CF2822-88B6-41F2-B10A-A8B09B27245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*","matchCriteriaId":"9C589D4F-60B3-450B-860A-9975BB47BBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B300C56E-7DF5-4B24-84D1-A4732515325E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*","matchCriteriaId":"DA331167-6A2F-402F-A28F-9EE7B6F20207"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"13846571-C84A-43D6-9970-444E6B4DB0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*","matchCriteriaId":"F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4740B10-EFB8-4F79-88C1-9B6F5897A71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"B4D881C4-0302-44E9-A3C5-A23EFD681B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*","matchCriteriaId":"31CA7556-D132-4E81-8E13-C7E025AF20AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A8219F1A-D6F5-4D6E-B10D-4C455073520C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D224FA8D-4C5A-48BE-92F2-1EC57782046D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB701014-7980-4BBE-8BD9-3FD2A0AF6941"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D68C31D4-9478-4EB6-B160-E9970ADA785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"872F7B10-30EA-4945-99BC-9EC1C09D6D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5BBC3EFD-7F03-4DC1-988C-22007216F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"2F7898C5-9450-41FD-B45D-7504D97B4CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"B3A247E8-F22B-4639-96D2-9BC01C904D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"B1233504-041A-454E-9F2E-6E2A4207879D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"342D2B8A-A832-4CAB-9389-93764B0DE241"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"7D44F099-7BC3-45C4-9DB3-03A7E40BC548"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1A79A0CD-7B81-417E-8DE3-0D61006003FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"4F0A70AA-931A-4906-B4AD-D56E90683716"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"BB51EE46-D720-4C1F-8992-67F4422E43CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*","matchCriteriaId":"197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"EFC7477A-5DDA-42A6-828E-A818CCF208B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"963FD695-512A-45A8-A60D-887D93FBBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"65ABF89E-4814-44D3-A1AD-3B7A4F876A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"96F69A35-225C-41FF-A32B-AE53096516EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"2B218F1A-C04D-40B3-A6BE-86DA04E47D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"B6D575EF-37BA-4E69-BDD2-B99680D2CEC5"}]}]}],"references":[{"url":"http://blog.torproject.org/blog/tor-0.2.0.32-released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33025","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32648","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47102","source":"cve@mitre.org"},{"url":"http://blog.torproject.org/blog/tor-0.2.0.32-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5399","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:41.817","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the listonlineusers (aka \"Who's online\") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el componente  listonlineusers (también conocido como \"Who's online\") en mvnForum anterior a v1.2.1 GA, permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través de parámetros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:*:ga:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"03DC374E-FC63-4F75-A506-9CBA0CC680AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9C451367-C9A9-4D35-B873-DBF1884B405A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"0F9B9221-C1EA-4C76-B9E5-A6D79AE5D7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DD68AA01-B64F-4A9A-A542-807D58CD2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"66AFBB80-EA66-4C0B-93DB-6294733CD107"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"CA2751D2-7F4D-480F-B646-AF8DDB72BF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc3_01:*:*:*:*:*:*","matchCriteriaId":"09B0F1B0-BFBA-4549-B140-3FAD86820369"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"008038D2-7B8E-43DF-95D7-FD425710DD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.2.:ga:*:*:*:*:*:*","matchCriteriaId":"352C4C7D-13C8-4063-923D-8968ECD141EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.1:ga:*:*:*:*:*:*","matchCriteriaId":"7BD947A2-2FA1-443A-A213-47FF1C76A188"}]}]}],"references":[{"url":"http://osvdb.org/50403","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=286","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4699","source":"cve@mitre.org"},{"url":"http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/498872/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32605","source":"cve@mitre.org"},{"url":"http://osvdb.org/50403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/498872/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5400","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:41.830","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSFR) en mvnForum anterior a v1.2.1 GA, permite a atacantes remotos (1) crear foros, (2) modificar los permisos sobre las cuentas, (3) activar cuentas o (4) desactivar cuentas como administrador a través de vectores no especificados, posiblemente relacionado con las cabeceras HTTP Referers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:*:ga:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"03DC374E-FC63-4F75-A506-9CBA0CC680AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9C451367-C9A9-4D35-B873-DBF1884B405A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"0F9B9221-C1EA-4C76-B9E5-A6D79AE5D7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DD68AA01-B64F-4A9A-A542-807D58CD2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"66AFBB80-EA66-4C0B-93DB-6294733CD107"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"CA2751D2-7F4D-480F-B646-AF8DDB72BF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc3_01:*:*:*:*:*:*","matchCriteriaId":"09B0F1B0-BFBA-4549-B140-3FAD86820369"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"008038D2-7B8E-43DF-95D7-FD425710DD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D2FF3125-8BCA-4E22-9539-1613E24AEA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"150FFB30-9CDF-428C-B846-6F3C4B7935C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"AA97C851-1E4E-4055-96E6-689816EC0A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2B2FDF5C-373B-4F82-A7B1-1974E6E2DD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"2A39EBC4-9D83-42FE-8BB5-5E2581664DD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc3_01:*:*:*:*:*:*:*","matchCriteriaId":"2B43F991-B9E6-4D22-9EDE-F5C29984E99C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"DFEA96C0-26D5-4F17-8BDB-7EA7F7E470B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4_04:*:*:*:*:*:*:*","matchCriteriaId":"D0B00343-C685-4F40-866F-1424CBE89863"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0.2.:ga:*:*:*:*:*:*","matchCriteriaId":"352C4C7D-13C8-4063-923D-8968ECD141EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0_ga:*:*:*:*:*:*:*","matchCriteriaId":"DEDA805E-2B55-49B4-80E6-6A52DBB04D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"A8DD6FBA-DE95-4D53-8CB3-9676B6B6CDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mvnforum:mvnforum:1.1:ga:*:*:*:*:*:*","matchCriteriaId":"7BD947A2-2FA1-443A-A213-47FF1C76A188"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0061.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50404","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=286","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4699","source":"cve@mitre.org"},{"url":"http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/498872/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47027","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/498872/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5401","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:41.893","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to \"AIM IMG Tag Parsing.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la implementación del tooltip en Trillian anterior a 3.1.12.0, permite a atacantes remotos ejecutar código de su elección a través de un archivo de imagen con un nombre largo. Relacionado con \"AIM IMG Tag Parsing.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.11.0","matchCriteriaId":"FA247F0B-0D36-4B8F-8F90-C81F26F05E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.50:*:*:*:*:*:*:*","matchCriteriaId":"047EC674-59D9-444A-96EC-A08067E8F80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.52:*:*:*:*:*:*:*","matchCriteriaId":"65AAC782-32C6-4D83-BAF3-ABD32FF3F8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.60:*:*:*:*:*:*:*","matchCriteriaId":"B04BC0A1-D2DD-4D09-8AA2-6FC779F9CC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.61:*:*:*:*:*:*:*","matchCriteriaId":"59F43D1E-9367-4955-9411-AF9DA5E8B153"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.62:*:*:*:*:*:*:*","matchCriteriaId":"2E34AA38-B571-45C6-B5E1-9750F79D8B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.63:*:*:*:*:*:*:*","matchCriteriaId":"F8FB4E73-6706-4BC6-85A0-DA401D922980"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.70:*:*:*:*:*:*:*","matchCriteriaId":"1F08956C-441D-418B-A966-7C0D785BDCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*","matchCriteriaId":"12BB96CE-AEA5-4644-A41E-F317083B11CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.72:*:*:*:*:*:*:*","matchCriteriaId":"B635EEDE-6D99-4C12-ACC2-145AE3D6892B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74c:*:*:*:*:*:*:*","matchCriteriaId":"F28B0F08-4782-4C58-8455-835FCAD6081B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74d:*:*:*:*:*:*:*","matchCriteriaId":"7106A436-3061-4818-B8A3-A949823154B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74e:*:*:*:*:*:*:*","matchCriteriaId":"C1340171-B37F-47EF-A446-3C95EE5157A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74f:*:*:*:*:*:*:*","matchCriteriaId":"EE5CAF65-2E39-4CA8-B251-4E14B5BCB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74g:*:*:*:*:*:*:*","matchCriteriaId":"5A362992-03FF-413A-805B-A9C99D86F266"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74i:*:*:*:*:*:*:*","matchCriteriaId":"9BEF2AD0-094A-4AFF-8F20-D39E8BA72EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.635:*:*:*:*:*:*:*","matchCriteriaId":"EFAA0CC6-4A15-41DA-BF90-46668583EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F2B0C703-7A48-449E-8C45-FB3934D79925"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:1.0:*:pro:*:*:*:*:*","matchCriteriaId":"A9E40FB1-B179-4E27-9680-ABAC7D9E14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*","matchCriteriaId":"256C630F-3F51-4825-A7AB-EE20F5B6EB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"E3665E59-DD7D-4596-8437-D660AF6D4256"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2CDD3B6B-7AFD-4AD2-AC9A-9652010D3331"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E189B6C6-A516-4C23-A67F-F1505D977DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:basic:*:*:*:*:*","matchCriteriaId":"FCC63410-5FDB-444B-AF2F-F1410F7DE20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"35A0358C-CA5C-4722-89AA-31F1189ED6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D922E4FB-BAD1-45B6-B45D-4B7A3B338EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:basic:*:*:*:*:*","matchCriteriaId":"DB644E01-38AB-40B0-B3B9-23035A83F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"1B65FA71-2E12-4F65-B3D0-565C3F70E4AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.0.120:*:*:*:*:*:*:*","matchCriteriaId":"D8694251-340A-41B1-92A7-6354FFEF6DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.0.121:*:*:*:*:*:*:*","matchCriteriaId":"BA02C4B5-4866-4705-9B25-F4D867BB7D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"28B0FC73-E06D-4FCE-8555-E448AE8B468A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"24E329DC-435A-4201-916D-2460A18BA9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CC4D997-E8CB-45B7-860B-7C8BC64C2CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0967000-D0D6-479A-BBCD-E9CCE0C9686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4392C7CE-A428-4311-BD18-46B371EDF862"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"86ED2E92-F8E5-4DDC-A5FD-8B12557BC8F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*","matchCriteriaId":"79B4DE7F-9854-4D56-9376-007FA794E032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:*","matchCriteriaId":"F7299CCB-32EF-47E8-AFE6-A78DCC5EC9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"23BB316B-2F3F-4E3E-967F-65383AA9D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"BDFE0C5F-CEEB-44D8-B949-2CEBF02AB359"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2FE46-C0A4-4530-9FF6-FDAA6D347E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F895BBC-AD93-4B9E-9306-CF45AB6C97E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:*","matchCriteriaId":"CF67D526-06A8-40DA-BD53-7E31CA1BF202"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A7743FA8-9C43-4774-9FAA-DBEC02F676EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"76895B98-D51F-42E1-8247-61AB7EF027A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.1_build_121:*:*:*:*:*:*:*","matchCriteriaId":"07C47987-82A8-4653-8AF6-3B831144BD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:*:*:*:*:*:*:*:*","matchCriteriaId":"CFEACE88-949A-4682-BCFE-4FBBCE02546D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7227CE5-CE2B-4B80-9CF5-137A0B101314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E64CC47-F11E-4DA9-AEFE-70DF7AD4C8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"439FB835-1D41-49E2-953E-E774E4210D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5686234A-2588-4C20-8F3A-C8E5AFA3DD7D"}]}]}],"references":[{"url":"http://blog.ceruleanstudios.com/?p=404","source":"cve@mitre.org"},{"url":"http://osvdb.org/50472","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4700","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498932/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32645","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021335","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3348","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-077","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47093","source":"cve@mitre.org"},{"url":"http://blog.ceruleanstudios.com/?p=404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5402","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:41.940","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the \"IMG SRC ID.\""},{"lang":"es","value":"Vulnerabilidad de doble liberación en el validador en Trillian anterior a v3.1.12.0, permite a atacantes remotos ejecutar código de su elección a través de una expresión XML manipulada. Relacionado con el \"IMG SRC ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.50:*:*:*:*:*:*:*","matchCriteriaId":"047EC674-59D9-444A-96EC-A08067E8F80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.52:*:*:*:*:*:*:*","matchCriteriaId":"65AAC782-32C6-4D83-BAF3-ABD32FF3F8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.60:*:*:*:*:*:*:*","matchCriteriaId":"B04BC0A1-D2DD-4D09-8AA2-6FC779F9CC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.61:*:*:*:*:*:*:*","matchCriteriaId":"59F43D1E-9367-4955-9411-AF9DA5E8B153"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.62:*:*:*:*:*:*:*","matchCriteriaId":"2E34AA38-B571-45C6-B5E1-9750F79D8B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.63:*:*:*:*:*:*:*","matchCriteriaId":"F8FB4E73-6706-4BC6-85A0-DA401D922980"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.70:*:*:*:*:*:*:*","matchCriteriaId":"1F08956C-441D-418B-A966-7C0D785BDCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*","matchCriteriaId":"12BB96CE-AEA5-4644-A41E-F317083B11CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.72:*:*:*:*:*:*:*","matchCriteriaId":"B635EEDE-6D99-4C12-ACC2-145AE3D6892B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74c:*:*:*:*:*:*:*","matchCriteriaId":"F28B0F08-4782-4C58-8455-835FCAD6081B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74d:*:*:*:*:*:*:*","matchCriteriaId":"7106A436-3061-4818-B8A3-A949823154B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74e:*:*:*:*:*:*:*","matchCriteriaId":"C1340171-B37F-47EF-A446-3C95EE5157A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74f:*:*:*:*:*:*:*","matchCriteriaId":"EE5CAF65-2E39-4CA8-B251-4E14B5BCB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74g:*:*:*:*:*:*:*","matchCriteriaId":"5A362992-03FF-413A-805B-A9C99D86F266"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74i:*:*:*:*:*:*:*","matchCriteriaId":"9BEF2AD0-094A-4AFF-8F20-D39E8BA72EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.635:*:*:*:*:*:*:*","matchCriteriaId":"EFAA0CC6-4A15-41DA-BF90-46668583EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F2B0C703-7A48-449E-8C45-FB3934D79925"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:1.0:*:pro:*:*:*:*:*","matchCriteriaId":"A9E40FB1-B179-4E27-9680-ABAC7D9E14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*","matchCriteriaId":"256C630F-3F51-4825-A7AB-EE20F5B6EB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"E3665E59-DD7D-4596-8437-D660AF6D4256"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2CDD3B6B-7AFD-4AD2-AC9A-9652010D3331"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E189B6C6-A516-4C23-A67F-F1505D977DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:basic:*:*:*:*:*","matchCriteriaId":"FCC63410-5FDB-444B-AF2F-F1410F7DE20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"35A0358C-CA5C-4722-89AA-31F1189ED6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D922E4FB-BAD1-45B6-B45D-4B7A3B338EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:basic:*:*:*:*:*","matchCriteriaId":"DB644E01-38AB-40B0-B3B9-23035A83F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"1B65FA71-2E12-4F65-B3D0-565C3F70E4AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.0.120:*:*:*:*:*:*:*","matchCriteriaId":"D8694251-340A-41B1-92A7-6354FFEF6DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.0.121:*:*:*:*:*:*:*","matchCriteriaId":"BA02C4B5-4866-4705-9B25-F4D867BB7D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"28B0FC73-E06D-4FCE-8555-E448AE8B468A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"24E329DC-435A-4201-916D-2460A18BA9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CC4D997-E8CB-45B7-860B-7C8BC64C2CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0967000-D0D6-479A-BBCD-E9CCE0C9686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4392C7CE-A428-4311-BD18-46B371EDF862"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"86ED2E92-F8E5-4DDC-A5FD-8B12557BC8F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*","matchCriteriaId":"79B4DE7F-9854-4D56-9376-007FA794E032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:*","matchCriteriaId":"F7299CCB-32EF-47E8-AFE6-A78DCC5EC9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"23BB316B-2F3F-4E3E-967F-65383AA9D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"5A800667-F882-433C-BB79-DD3D40BE922E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"BDFE0C5F-CEEB-44D8-B949-2CEBF02AB359"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2FE46-C0A4-4530-9FF6-FDAA6D347E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F895BBC-AD93-4B9E-9306-CF45AB6C97E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:*","matchCriteriaId":"CF67D526-06A8-40DA-BD53-7E31CA1BF202"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A7743FA8-9C43-4774-9FAA-DBEC02F676EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"76895B98-D51F-42E1-8247-61AB7EF027A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.1_build_121:*:*:*:*:*:*:*","matchCriteriaId":"07C47987-82A8-4653-8AF6-3B831144BD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:*:*:*:*:*:*:*:*","matchCriteriaId":"CFEACE88-949A-4682-BCFE-4FBBCE02546D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7227CE5-CE2B-4B80-9CF5-137A0B101314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E64CC47-F11E-4DA9-AEFE-70DF7AD4C8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"439FB835-1D41-49E2-953E-E774E4210D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5686234A-2588-4C20-8F3A-C8E5AFA3DD7D"}]}]}],"references":[{"url":"http://blog.ceruleanstudios.com/?p=404","source":"cve@mitre.org"},{"url":"http://osvdb.org/50473","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33001","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4701","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498933/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32645","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3348","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47098","source":"cve@mitre.org"},{"url":"http://blog.ceruleanstudios.com/?p=404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498933/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5403","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el analizador XML en el plugin AIM en Trillian versiones anteriores a 3.1.12.0, que permite a los atacantes remotos ejecutar arbitrariamente código a través de etiquetas XML mal formadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.50:*:*:*:*:*:*:*","matchCriteriaId":"047EC674-59D9-444A-96EC-A08067E8F80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.52:*:*:*:*:*:*:*","matchCriteriaId":"65AAC782-32C6-4D83-BAF3-ABD32FF3F8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.60:*:*:*:*:*:*:*","matchCriteriaId":"B04BC0A1-D2DD-4D09-8AA2-6FC779F9CC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.61:*:*:*:*:*:*:*","matchCriteriaId":"59F43D1E-9367-4955-9411-AF9DA5E8B153"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.62:*:*:*:*:*:*:*","matchCriteriaId":"2E34AA38-B571-45C6-B5E1-9750F79D8B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.63:*:*:*:*:*:*:*","matchCriteriaId":"F8FB4E73-6706-4BC6-85A0-DA401D922980"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.70:*:*:*:*:*:*:*","matchCriteriaId":"1F08956C-441D-418B-A966-7C0D785BDCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*","matchCriteriaId":"12BB96CE-AEA5-4644-A41E-F317083B11CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.72:*:*:*:*:*:*:*","matchCriteriaId":"B635EEDE-6D99-4C12-ACC2-145AE3D6892B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74c:*:*:*:*:*:*:*","matchCriteriaId":"F28B0F08-4782-4C58-8455-835FCAD6081B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74d:*:*:*:*:*:*:*","matchCriteriaId":"7106A436-3061-4818-B8A3-A949823154B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74e:*:*:*:*:*:*:*","matchCriteriaId":"C1340171-B37F-47EF-A446-3C95EE5157A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74f:*:*:*:*:*:*:*","matchCriteriaId":"EE5CAF65-2E39-4CA8-B251-4E14B5BCB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74g:*:*:*:*:*:*:*","matchCriteriaId":"5A362992-03FF-413A-805B-A9C99D86F266"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74i:*:*:*:*:*:*:*","matchCriteriaId":"9BEF2AD0-094A-4AFF-8F20-D39E8BA72EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.635:*:*:*:*:*:*:*","matchCriteriaId":"EFAA0CC6-4A15-41DA-BF90-46668583EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F2B0C703-7A48-449E-8C45-FB3934D79925"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:1.0:*:pro:*:*:*:*:*","matchCriteriaId":"A9E40FB1-B179-4E27-9680-ABAC7D9E14F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:*","matchCriteriaId":"256C630F-3F51-4825-A7AB-EE20F5B6EB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"E3665E59-DD7D-4596-8437-D660AF6D4256"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2CDD3B6B-7AFD-4AD2-AC9A-9652010D3331"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E189B6C6-A516-4C23-A67F-F1505D977DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:basic:*:*:*:*:*","matchCriteriaId":"FCC63410-5FDB-444B-AF2F-F1410F7DE20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"35A0358C-CA5C-4722-89AA-31F1189ED6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D922E4FB-BAD1-45B6-B45D-4B7A3B338EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:basic:*:*:*:*:*","matchCriteriaId":"DB644E01-38AB-40B0-B3B9-23035A83F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"1B65FA71-2E12-4F65-B3D0-565C3F70E4AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.0.120:*:*:*:*:*:*:*","matchCriteriaId":"D8694251-340A-41B1-92A7-6354FFEF6DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.0.121:*:*:*:*:*:*:*","matchCriteriaId":"BA02C4B5-4866-4705-9B25-F4D867BB7D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"28B0FC73-E06D-4FCE-8555-E448AE8B468A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"24E329DC-435A-4201-916D-2460A18BA9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CC4D997-E8CB-45B7-860B-7C8BC64C2CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0967000-D0D6-479A-BBCD-E9CCE0C9686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4392C7CE-A428-4311-BD18-46B371EDF862"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"86ED2E92-F8E5-4DDC-A5FD-8B12557BC8F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*","matchCriteriaId":"79B4DE7F-9854-4D56-9376-007FA794E032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:*","matchCriteriaId":"F7299CCB-32EF-47E8-AFE6-A78DCC5EC9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"23BB316B-2F3F-4E3E-967F-65383AA9D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:3.1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"5A800667-F882-433C-BB79-DD3D40BE922E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"BDFE0C5F-CEEB-44D8-B949-2CEBF02AB359"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2FE46-C0A4-4530-9FF6-FDAA6D347E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F895BBC-AD93-4B9E-9306-CF45AB6C97E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:*","matchCriteriaId":"CF67D526-06A8-40DA-BD53-7E31CA1BF202"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A7743FA8-9C43-4774-9FAA-DBEC02F676EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"76895B98-D51F-42E1-8247-61AB7EF027A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:3.1_build_121:*:*:*:*:*:*:*","matchCriteriaId":"07C47987-82A8-4653-8AF6-3B831144BD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:*:*:*:*:*:*:*:*","matchCriteriaId":"CFEACE88-949A-4682-BCFE-4FBBCE02546D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7227CE5-CE2B-4B80-9CF5-137A0B101314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E64CC47-F11E-4DA9-AEFE-70DF7AD4C8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"439FB835-1D41-49E2-953E-E774E4210D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian_pro:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5686234A-2588-4C20-8F3A-C8E5AFA3DD7D"}]}]}],"references":[{"url":"http://blog.ceruleanstudios.com/?p=404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50474","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4702","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498936/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32645","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021336","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3348","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47100","source":"cve@mitre.org"},{"url":"http://blog.ceruleanstudios.com/?p=404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5404","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.050","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method.  NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX FlexCell.Grid en FlexCell.ocx v5.7.0.1 en el componente FlexCell Grid ActiveX, permite a atacantes remotos crear y sobrescribir ficheros de su elección a través del método HttpDownloadFile: NOTA: esto podría ser aprovechado para la ejecución de código mediante la creación de archivos ejecutables en las carpetas de inicio o accediendo a archivos usando URLs hcp://. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grid2000:flexcell_grid_control:5.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16D24DB4-79EB-47E9-B36D-376B9D9DF644"}]}]}],"references":[{"url":"http://secunia.com/advisories/32829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5405","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.173","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el protocolo decodificador de contraseñas RPD en Cain & Abel v4.9.23 y v4.9.24, y posiblemente versiones previas, permite a atacantes remotos ejecutar código de su elección a través de un archivo RPD que contiene una cadena larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:cain_and_abel:4.9.23:*:*:*:*:*:*:*","matchCriteriaId":"0BB410B2-BB79-485F-937C-79E44E0D56CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:cain_and_abel:4.9.24:*:*:*:*:*:*:*","matchCriteriaId":"60F40E48-6480-41C6-BA08-55842DA311BE"}]}]}],"references":[{"url":"http://osvdb.org/50342","source":"cve@mitre.org"},{"url":"http://oxid.netsons.org/phpBB2/viewtopic.php?t=2750","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32794","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3286","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46940","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7297","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7309","source":"cve@mitre.org"},{"url":"http://osvdb.org/50342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://oxid.netsons.org/phpBB2/viewtopic.php?t=2750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5406","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with \"long arguments,\" related to an \"off by one overflow.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Apple QuickTime Player 7.5.5 e iTunes 8.0.2.20, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y probablemente la ejecución de código de su elección a través de un archivo MOV con \"una argumento largo\". Relacionado con un \"error de superación de límite (off-by-one)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"E5D3F603-BD64-4C7C-978B-1D3B9A04BB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4704","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32540","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46984","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7296","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5407","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.330","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el proceso de logon en  Backup Exec remote-agent Symantec de Backup Exec para Servidores Windows v11.0 (también conocido como 11d) builds 6235 y 7170, v12.0 build 1364, y v12.5 build 2213, permite a atacantes remotos evitar la autenticación y leer o eliminar archivos a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.6235:*:*:*:*:*:*","matchCriteriaId":"7BB204AD-5637-4408-858E-DBEB2EDAB292"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.7170:*:*:*:*:*:*","matchCriteriaId":"90137D90-F420-45C7-9662-802D7EF61A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:12.0:12.0.1364:*:*:*:*:*:*","matchCriteriaId":"1CBEACF9-E444-4433-8587-09FE25CAF79E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:12.5:12.5.2213:*:*:*:*:*:*","matchCriteriaId":"D878440D-2A5A-4E12-BE28-0BECA084E07A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32810","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/314528.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32347","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021246","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/314528.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5408","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors.  NOTE: this can be exploited by unauthenticated remote attackers by leveraging CVE-2008-5407."},{"lang":"es","value":"Desbordamiento de búfer en el protocolo de administración de datos en Symantec Backup Exec para Windows Servers 11.0 (alias 11d) builds 6235 y 7170, 12.0 build 1364, y 12.5 build 2213 permiten a los usuarios autenticados remotamente causar una denegación de servicios (caída de la aplicación) y posiblemente ejecutar arbitrariamente código a través de vectores desconocidos. NOTA: esto puede ser explotado por un atacante remoto no autentificado por la utilización de CVE-2008-5407."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.6235:*:*:*:*:*:*","matchCriteriaId":"7BB204AD-5637-4408-858E-DBEB2EDAB292"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.7170:*:*:*:*:*:*","matchCriteriaId":"90137D90-F420-45C7-9662-802D7EF61A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:12.0:12.0.1364:*:*:*:*:*:*","matchCriteriaId":"1CBEACF9-E444-4433-8587-09FE25CAF79E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_for_windows_server:12.5:12.5.2213:*:*:*:*:*:*","matchCriteriaId":"D878440D-2A5A-4E12-BE28-0BECA084E07A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/314528.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32346","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021246","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46731","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/314528.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5409","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T06:44:42.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, and (3) Software602 Groupware Server 6.0.08.1118 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, possibly related to included compressed streams that were processed with the ASCIIHexDecode filter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad sin especificar en el módulo pdf.xmd en (1) BitDefender Free Edition 10 y Antivirus Standard 10, (2) BullGuard Internet Security v8.5, y (3) Software602 Groupware Server v6.0.08.1118, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de un archivo PDF manipulado, seguramente relacionado con la inclusión de flujos comprimidos que son procesados con el filtro ASCIIHexDecode. NOTA: algunos de éstos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:antivirus:10:_nil_:standard:*:*:*:*:*","matchCriteriaId":"99345132-856D-4E53-AE8F-101308FCC42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:bitdefender:10:_nil_:free_edition:*:*:*:*:*","matchCriteriaId":"62BA09A9-6D2C-4C35-BB3E-B517BCC9B6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bullguard:internet_security:8.5:*:*:*:*:*:*:*","matchCriteriaId":"B6B4BB76-CF3D-45E6-BB29-F4BBB547C7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:software602:groupware_server:6.0.08.1118:*:*:*:*:*:*:*","matchCriteriaId":"F8EE9C8A-9417-4A5A-90A0-5F6D8EB4370B"}]}]}],"references":[{"url":"http://milw0rm.com/sploits/2008-BitDefenderDOS.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/50010","source":"cve@mitre.org"},{"url":"http://osvdb.org/50103","source":"cve@mitre.org"},{"url":"http://osvdb.org/50205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27805","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32396","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46750","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7178","source":"cve@mitre.org"},{"url":"http://milw0rm.com/sploits/2008-BitDefenderDOS.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5410","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.317","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service (failed cryptographic operations) via unspecified vectors, related to the (1) RSA_sign and (2) RSA_verify functions."},{"lang":"es","value":"La caché PK11_SESSION en el motor OpenSSL PKCS#11 en Sun Solaris 10 no mantiene la cuenta de referencia para operaciones con claves asimétricas, lo que permite a atacantes dependientes del contexto provocar una denegación de servicio (fallos en las operaciones criptográficas) a través de vectores desconocidos, relacionado con las funciones (1) RSA_sign y (2) RSA_verify."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33050","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138863-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139459-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246846-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32671","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021358","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3372","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47137","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138863-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139459-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246846-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5411","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.330","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Vendor has released a Fixpack:\r\n\r\nhttp://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24021073","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over \"unsecured TCP,\" which makes it easier for remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) 7 y versiones anteriores 7.0.0.1 que envía tráfico SSL sobre \"TCP inseguro\", el cual hace más fácil para usuarios remotos obtener información sensible, rastreando la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"231A9A45-E2FE-423E-BE5D-AA9E3AFB5982"}]}]}],"references":[{"url":"http://secunia.com/advisories/33022","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK74777","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32679","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47135","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK74777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5412","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.347","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs.  NOTE: this is probably a duplicate of CVE-2009-0438."},{"lang":"es","value":"Una vulnerabilidad no especificada en IBM WebSphere Application Server (WAS) versiones 7 y anteriores a 7.0.0.1 en Windows, presenta un impacto y vectores de ataque desconocidos relacionados con JSP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"231A9A45-E2FE-423E-BE5D-AA9E3AFB5982"}]}]}],"references":[{"url":"http://secunia.com/advisories/33022","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32679","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47134","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5413","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"The vendor has released a fixpack:\r\nhttp://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24021073","cveTags":[],"descriptions":[{"lang":"en","value":"PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files.  NOTE: this is probably a duplicate of CVE-2009-0434."},{"lang":"es","value":"PerfServlet en el componente PMI/Performance Tools en IBM WebSphere Application Server (WAS) versiones 7 anteriores a 7.0.0.1, permite a los atacantes obtener información confidencial mediante la lectura de los archivos (1) systemout.log y (2) ffdc. NOTA: esto es probablemente un duplicado de CVE-2009-0434."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"231A9A45-E2FE-423E-BE5D-AA9E3AFB5982"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32679","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5414","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.393","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 has unknown impact and attack vectors related to \"userNameToken.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el Feature Pack para Web Services en el componente Web Services Security en IBM WebSphere Application Server (WAS) 7 anterior a v7.0.0.1, tiene un impacto y vectores de ataque desconocidos, relacionados con \"userNameToken\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33022","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67282","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32679","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5415","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.423","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure."},{"lang":"es","value":"El servicio LDBserver en el servidor en CA ARCserve Backup versiones 11.1 hasta 12.0 en Windows,  permite a atacantes remotos ejecutar código arbitrario por medio de un argumento handle_t hacia un endpoint RPC en el que el argumento hace referencia a un procedimiento incompatible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AB3E8F-50D3-41EC-BC2B-CF86FB4801E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx","source":"cve@mitre.org"},{"url":"http://osvdb.org/50683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-82/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4708","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499104/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499128/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32764","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-82/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499104/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499128/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=194293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5416","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T14:00:01.207","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka \"SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en SQL Server 2000 SP4, versiones 8.00.2050, 8.00.2039 y anteriores; Motor SQL Server 2000 Desktop (MSDE 2000) SP4; SQL Server 2005 SP2 y versión 9.00.1399.06; Motor SQL Server 2000 Desktop (WMSDE) en Windows Server 2003 SP1 y SP2; y Windows Internal Database (WYukon) SP2, de Microsoft, permite a los usuarios autenticados remotos causar una denegación de servicio (excepción de violación de acceso) o ejecutar código arbitrario mediante una llamada a un procedimiento almacenado extendido sp_replwritetovarbin con un conjunto de parámetros no válidos que desencadenan la sobrescritura de memoria, también se conoce como \"SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:*:*:*:*:*:*:*","matchCriteriaId":"36909BE0-9171-456B-9323-4DB04F921DE9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0304.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4706","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021363","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021490","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-055.htm","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/696644","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/961040.mspx","source":"cve@mitre.org"},{"url":"http://www.sec-consult.com/files/20081209_mssql-2000-sp_replwritetovarbin_memwrite.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499042/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499085/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32710","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3380","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47182","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6217","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7501","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0304.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-055.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/696644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/961040.mspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sec-consult.com/files/20081209_mssql-2000-sp_replwritetovarbin_memwrite.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499042/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499085/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5417","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T14:00:01.220","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the (1) SYS$CRELNM and (2) SYS$DELLNM system services."},{"lang":"es","value":"HP DECnet-Plus v8.3 antes de ECO03 para OpenVMS en plataforma Alpha utiliza permisos de escritura universales para el nombre logico de tabla de OSIT$NAMES, que permite a usuarios locales evitar las restricciones de acceso y modificar la tabla a traves de los servicios del sistema (1) SYS$CRELNM and (2) SYS$DELLNM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:decnet_plus_for_openvms:8.3:*:*:*:*:*:*:*","matchCriteriaId":"D49C792D-ADAD-441E-8019-1B36AD57B66B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hp:openvms:8.3:*:*:*:*:*:*:*","matchCriteriaId":"C447F682-D584-4704-8195-21ABE097CC66"}]}]}],"references":[{"url":"ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/AXP_DNVOSIECO03-V83.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021364","source":"cve@mitre.org"},{"url":"ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/AXP_DNVOSIECO03-V83.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5418","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T14:00:01.253","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter."},{"lang":"es","value":"Vulnerabilidad de salto directorio en login.php en el módulo PunPortal anterior a v2.0 para PunBB permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto)en el parámetro \"pun_user[language]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:justin_roy:punportal_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"450FC6D7-5388-4E11-BA64-BE9068A6859F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4707","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46774","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7168","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5419","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T14:00:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"http://secunia.com/advisories/32801\r\n\r\nApply Patches:\r\n\r\nEMC ControlCenter v 5.x:\r\nUpdate to version 5.2 SP5 Patch 4433.\r\n\r\nEMC ControlCenter v 6.x:\r\nUpdate to version 6.0 Patch 4434.","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en SAN Manager Master Agent service (antes conocido como msragent.exe) en EMC Control Center v5.2 SP5 and v6.0 permite a atacantes remotos ejecutar código a su elección a través de la ejecución de código a través de múltiples  peticiones SST_CTGTRANS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:control_center:5.2:sp5:*:*:*:*:*:*","matchCriteriaId":"71281A57-F3CE-4F93-A9F8-E39ECB14A23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:control_center:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F7C67374-104F-445E-8EA8-6DCAC2C434EF"}]}]}],"references":[{"url":"http://osvdb.org/50031","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32801","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4710","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498555/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32389","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021262","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3220","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46751","source":"cve@mitre.org"},{"url":"http://osvdb.org/50031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498555/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5420","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T14:00:01.283","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"http://secunia.com/advisories/32801\r\n\r\n\r\nApply Patches:\r\n\r\n\r\n\r\nEMC ControlCenter v 5.x:\r\nUpdate to version 5.2 SP5 Patch 4433.\r\n\r\nEMC ControlCenter v 6.x:\r\nUpdate to version 6.0 Patch 4434.","cveTags":[],"descriptions":[{"lang":"en","value":"The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate SST_SENDFILE requests, which allows remote attackers to read arbitrary files."},{"lang":"es","value":"El servicio SAN Manager Master Agent (alias msragent.exe)en EMC Control Center anterior 6.1 no autentica adecuadamente  peticiones SST_SENDFILE, las cuales permiten a atacantes remotos leer archivos de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:control_center:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"778C42F3-B39F-4C14-939C-27E371E18D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:control_center:5.2:sp5:*:*:*:*:*:*","matchCriteriaId":"71281A57-F3CE-4F93-A9F8-E39ECB14A23E"}]}]}],"references":[{"url":"http://osvdb.org/50032","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32801","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498556/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32392","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021263","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3220","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-076/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46753","source":"cve@mitre.org"},{"url":"http://osvdb.org/50032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498556/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-076/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5421","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.440","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header."},{"lang":"es","value":"El servicio SSL web administration en NetWin SmsGate v1.1n y anteriores permite a atacantes remotos provocar una denegación de servicio (cuelgue) mediante (1) un entero largo en la cabecera HTTP Content-Length; (2) un valor inválido en la cabecera HTTP Content-Length, como se demostró por el uso de un entero negativo; o (3) una cabecera HTTP Content-Length perdida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1n","matchCriteriaId":"E2211287-71BF-4E35-B85E-58847DBA353A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"B4EF5AA8-607A-4C3C-8F9A-804AFEF118AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:1.0c:*:*:*:*:*:*:*","matchCriteriaId":"3C1E2964-06AA-46E8-8203-8A362A8FA35F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:1.0h:*:*:*:*:*:*:*","matchCriteriaId":"3E0B695B-6A9D-4637-864D-9D13F0A97CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:1.0r:*:*:*:*:*:*:*","matchCriteriaId":"519E1CBF-547A-4982-83D2-92237E747B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:1.0w:*:*:*:*:*:*:*","matchCriteriaId":"0A9D52FB-66DC-4E01-B8C9-EA173469CDC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:smsgate:1.1m:*:*:*:*:*:*:*","matchCriteriaId":"F582AD2E-5954-49E2-B786-A082C7027FCF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/smsgheit-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28048","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/smsgheit-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5422","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.457","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors."},{"lang":"es","value":"Sun Sun Ray Server Software v3.1 a v4.0 no restringe el acceso apropiadamente, lo que permite a atacantes remotos descubrir la contraseña de administración de Sun Ray y obtener acceso admin a el Data Store y la Administration GUI, mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7D0CE9C1-18FF-4E85-B570-1A9771616559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"42C7BEE0-2BB5-4945-A352-380E6B89115F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:x86:*:*:*:*:*","matchCriteriaId":"6017DA4B-4B2C-4611-9DFC-25C4F429515C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD210ED7-C05B-45D2-BE3F-19ED9E8AB274"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"2621BD59-0ED4-402E-98EB-0F643078F4CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"18BE709B-6EEB-489D-B982-6D0D978D1D20"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4:*:advanced_server:*:*:*:*:*","matchCriteriaId":"0D89C3A6-C174-4D55-8DB8-343627516967"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E517321-3661-4C8C-9404-E90933FD10D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:linux:*:*:*:*:*","matchCriteriaId":"11873A8B-1C1F-4AD8-86AE-B3AEB58F58CE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5537D6C-7700-4818-93F7-4449049DF131"},{"vulnerable":false,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:8:*:*:*:*:*:*:*","matchCriteriaId":"03633A39-A07A-41B1-BF47-3DA3591F7896"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3:*:advanced_server:*:*:*:*:*","matchCriteriaId":"80220C9F-4E73-448C-8E2E-F1AECAD56419"}]}]}],"references":[{"url":"http://secunia.com/advisories/33108","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32769","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021383","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3406","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5423","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.487","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector."},{"lang":"es","value":"Sun Ray Server Software v3.x y v4.0 y Sun Ray Windows Connector v1.1 y v2.0 exponen la contraseña LDAP durante un paso de configuración, lo que permite a usuarios locales descubrir la contraseña de administración de Sun Ray y obtener acceso admin a el Data Store y el Administration GUI, mediante vectores no especificados relacionados con el componente utconfig de el Server Software y el componente uttscadm de el Windows Connector."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7D0CE9C1-18FF-4E85-B570-1A9771616559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"42C7BEE0-2BB5-4945-A352-380E6B89115F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:x86:*:*:*:*:*","matchCriteriaId":"6017DA4B-4B2C-4611-9DFC-25C4F429515C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_windows_connector:1.1:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7DCDD7-B3F1-4350-ACEC-A2D6176C3C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_windows_connector:2.0:*:sparc:*:*:*:*:*","matchCriteriaId":"8C672780-F3E2-4EA3-B577-BB3FF8567AE1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"42C7BEE0-2BB5-4945-A352-380E6B89115F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_windows_connector:1.1:*:x86:*:*:*:*:*","matchCriteriaId":"F8A8665A-796E-4209-B76B-13461E9BC88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_windows_connector:2.0:*:x86:*:*:*:*:*","matchCriteriaId":"3998743C-A5B6-4751-9CE7-B964D52B21FD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:x86:*:*:*:*:*","matchCriteriaId":"6017DA4B-4B2C-4611-9DFC-25C4F429515C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_windows_connector:1.1:*:linux:*:*:*:*:*","matchCriteriaId":"AE37C26E-746B-4939-A80E-1DC80D78EB83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_windows_connector:2.0:*:linux:*:*:*:*:*","matchCriteriaId":"328EAA35-CBAC-4D12-974A-E2934753D0B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD210ED7-C05B-45D2-BE3F-19ED9E8AB274"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"2621BD59-0ED4-402E-98EB-0F643078F4CB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD210ED7-C05B-45D2-BE3F-19ED9E8AB274"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"2621BD59-0ED4-402E-98EB-0F643078F4CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"18BE709B-6EEB-489D-B982-6D0D978D1D20"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4:*:advanced_server:*:*:*:*:*","matchCriteriaId":"0D89C3A6-C174-4D55-8DB8-343627516967"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E517321-3661-4C8C-9404-E90933FD10D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:3.1:*:linux:*:*:*:*:*","matchCriteriaId":"11873A8B-1C1F-4AD8-86AE-B3AEB58F58CE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5537D6C-7700-4818-93F7-4449049DF131"},{"vulnerable":false,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:8:*:*:*:*:*:*:*","matchCriteriaId":"03633A39-A07A-41B1-BF47-3DA3591F7896"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3:*:advanced_server:*:*:*:*:*","matchCriteriaId":"80220C9F-4E73-448C-8E2E-F1AECAD56419"}]}]}],"references":[{"url":"http://secunia.com/advisories/33108","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33119","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021379","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32772","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3406","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3407","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5424","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.503","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"La función MimeOleClearDirtyTree en InetComm.dll en Microsoft Outlook Express v6.00.2900.5512 no gestiona apropiadamente (1) mensajes de correo multipart/mixed con muchas partes MIME y posiblemente (2) mensajes de correo electrónico con muchas cabeceras \"Content-type: message/rfc822;\", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de pila o consumo de otros recursos) mediante un correo electrónico de gran tamaño, un problema relacionado a CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.00.2900.5512:*:*:*:*:*:*:*","matchCriteriaId":"61EBD5A3-9FEC-4DC4-AF2D-B37E888C4FDE"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32702","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5425","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"ESet NOD32 v2.70.0039.0000 no gestiona apropiadamente (1) mensajes de correo multipart/mixed con muchas partes MIME y posiblemente (2) mensajes de correo electrónico con muchas cabeceras \"Content-type: message/rfc822;\", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de pila o consumo de otros recursos) mediante un correo electrónico de gran tamaño, un problema relacionado a CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset:nod32_antivirus:2.70.0039.0000:*:*:*:*:*:*:*","matchCriteriaId":"FC6DFD04-2EDA-4EC5-8145-A346FEE427A0"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5426","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.533","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"Kaspersky Internet Security Suite 2009 no gestiona apropiadamente (1) mensajes de correo multipart/mixed con muchas partes MIME y posiblemente (2) mensajes de correo electrónico con muchas cabeceras \"Content-type: message/rfc822;\", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de pila o consumo de otros recursos) mediante un correo electrónico de gran tamaño, un problema relacionado a CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_internet_security_suite:2009:*:*:*:*:*:*:*","matchCriteriaId":"0DFB772F-582E-4509-A99D-3A8694717E86"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5427","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.567","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"Norton Antivirus en Norton Internet Security v15.5.0.231 no gestiona apropiadamente (1) mensajes de correo multipart/mixed con muchas partes MIME y posiblemente (2) mensajes de correo electrónico con muchas cabeceras \"Content-type: message/rfc822;\", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de pila o consumo de otros recursos) mediante un correo electrónico de gran tamaño, un problema relacionado a CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security_2008:15.5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"6C1FAE45-F468-43F7-ADA0-C014001D2565"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5428","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.580","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"Opera v9.51 en Windows XP no gestiona apropiadamente 1) mensajes de correo multipart/mixed con muchas partes MIME y posiblemente (2) mensajes de correo electrónico con muchas cabeceras \"Content-type: message/rfc822;\", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de pila o consumo de otros recursos) mediante un correo electrónico de gran tamaño, un problema relacionado a CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*","matchCriteriaId":"089A088C-6DAE-4335-AD14-DACE64641A5A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5429","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.597","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"Incredimail build 5853710 no gestiona apropiadamente (1) mensajes de correo multipart/mixed con muchas partes MIME y posiblemente (2) mensajes de correo electrónico con muchas cabeceras \"Content-type: message/rfc822;\", lo que permite a atacantes remotos provocar una denegación de servicio (consumo de pila o consumo de otros recursos) mediante un correo electrónico de gran tamaño, un problema relacionado a CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:incredimail:incredimail:5.85:*:*:*:*:*:*:*","matchCriteriaId":"CE166CB6-FBF4-48E6-9CCA-AADC17FEA416"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5430","sourceIdentifier":"cve@mitre.org","published":"2008-12-13T08:40:08.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which might allow remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173."},{"lang":"es","value":"Mozilla Thunderbird  versión 2.0.14 no maneja apropiadamente (1) los mensajes de correo electrónico multiparte/mixtos con muchas partes MIME y posiblemente (2) los mensajes de correo electrónico con muchos encabezados \"Content-type: message/rfc822;\", que podrían permitir a los atacantes remotos causar una denegación de servicio (consumo de pila u otro consumo de recursos) por medio de un mensaje de correo electrónico largo, un problema relacionado con CVE-2006-1173."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"}]}]}],"references":[{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32869","source":"cve@mitre.org"},{"url":"http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5431","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per Hyperlink Record 1049337:\r\n\r\nThe vulnerabilities are all confirmed in version 1.0.50 and vulnerability #1 is also confirmed in version 1.0.44. Other versions may also be affected.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command, (2) a long LIST command, or (3) a certain PORT command."},{"lang":"es","value":"Teamtek Universal FTP Server v1.0.44 permite a atacantes remotos provocar una denegación de servicio a través de (1) un cierto comando CWD, (2) un comando LIST largo o (3) un cierto comando PORT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:5e5:teamtek_universal_ftp_server:1.0.44:*:*:*:*:*:*:*","matchCriteriaId":"937AF8CF-2228-43A8-8DFA-C52FC4636F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:5e5:teamtek_universal_ftp_server:1.0.50:*:*:*:*:*:*:*","matchCriteriaId":"3E4D8873-A3BF-4A2B-8AF8-3F412DA94936"}]}]}],"references":[{"url":"http://secunia.com/advisories/22553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4722","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488142/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27804","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488142/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5432","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title)."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Moodle antes de 1.6.8, 1.7 antes de 1.7.6, 1.8 antes de 1.8.7, y 1.9 despues de 1.9.3 permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través de un nombre de página Wiki (alias título de página)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.7","matchCriteriaId":"3E9A07A7-7BF5-4AFC-9021-2EA27D8D4ECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3113CF64-DFDD-413F-BB85-5A8B251608D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CE4F8CC3-5428-4F72-B4DC-299A50EE9C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"28252347-44DD-4302-8170-21DDB0A3B3A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"740F27D0-4E66-4E2C-A2AB-54F5211F796F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"FA227895-91FF-4689-A03A-D712EAB5E369"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C42DBF05-906B-47E6-BC75-50EBA38B72BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B6C3409E-47BF-4D01-ADAC-58475E5D3077"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2E38AF73-EA00-485F-A63B-7C05AD9C948E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"66BD9A00-DA61-4389-8731-B92585C2BE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"680CE396-5F61-409C-A152-4D1E1CB44EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0794B997-0793-4465-B9BA-5BFF254D600A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DCFEA024-4CA7-4975-802C-1BB9C099C164"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CDC97F31-15F5-48D9-8768-D3FE5C0BD6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"92E97539-A7CC-48D3-A897-ADE4BC194B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"053EC862-22DB-4120-BA63-F3C8C988B3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"A3B70465-F734-4C65-9790-0D83D03B7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"78368F2F-8BCE-494A-9D7A-512776DF36FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://moodle.org/mod/forum/discuss.php?d=108590","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33079","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32714","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3405","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47193","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/mod/forum/discuss.php?d=108590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5433","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.643","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en login.php en PunBB v1.3 y v1.3.1 permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través del campo password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:*","matchCriteriaId":"8BFEEEAA-E8FE-436A-93B8-FC6A8461870D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B9C856B-8DF6-414D-9EF7-99FD10456F81"}]}]}],"references":[{"url":"http://punbb.informer.com/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://punbb.informer.com/forums/topic/20475/punbb-132/","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/wiki/punbb13/bugs#possible_xss_in_login","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33059","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/3","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://punbb.informer.com/forums/topic/20475/punbb-132/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/wiki/punbb13/bugs#possible_xss_in_login","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5434","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.673","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) order_by or (2) direction parameter to admin/users.php, or (3) configuration options to admin/settings.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PunBB v1.3 y v1.3.1 permite a administradores autenticados en remoto, ejecutar comandos SQL de su elección a través del parámetro (1) order_by o (2) direction a admin/users.php, o (3) opciones de configuración a admin/settings.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:*","matchCriteriaId":"8BFEEEAA-E8FE-436A-93B8-FC6A8461870D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B9C856B-8DF6-414D-9EF7-99FD10456F81"}]}]}],"references":[{"url":"http://punbb.informer.com/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://punbb.informer.com/forums/topic/20475/punbb-132/","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/wiki/punbb13/bugs#potential_sql-injections_at_adminusers.php_page","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://punbb.informer.com/wiki/punbb13/bugs#potential_sql-injections_in_adminsettings.php_via_configuration_values","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33059","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47185","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://punbb.informer.com/forums/topic/20475/punbb-132/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/wiki/punbb13/bugs#potential_sql-injections_at_adminusers.php_page","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://punbb.informer.com/wiki/punbb13/bugs#potential_sql-injections_in_adminsettings.php_via_configuration_values","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5435","sourceIdentifier":"cve@mitre.org","published":"2008-12-11T15:30:00.690","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en moderate.php en PunBB antes de 1.3.1 permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través del asunto de un tema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"8107ABC1-F3DF-4A0F-9C61-680B94AAF8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4C9B6A22-A7BD-4C31-B4BB-A3BA43F4B9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C80A6D72-289A-4F53-AF80-6F2697AFF2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:*","matchCriteriaId":"9CADED1D-A90F-485E-B9EB-8CCAA22C9FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"037398E0-C125-48DC-B0D8-FEE9DBEF6374"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D1E6BBD6-5EE2-4412-92E1-48401F3622C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3BEBC325-DD6F-4DB1-84B8-86C26AC4165C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"78C47271-AED6-444B-B2E6-EF2A48B15600"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF85286-A1F8-4797-99F0-4F42B6D859CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DDBA41AF-C817-476A-8ED1-57808D0B678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C353C194-328F-4C4C-9773-F06A0FA3978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFE58D68-FC34-4F70-849A-2E6CC919230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5713E747-5529-4A64-95B4-D9678D8E88B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1DFD4225-32F9-4D62-87C5-9632A1C03326"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4A75787B-6156-4710-9B24-48C5763E7771"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20A9473E-DE15-4BE2-839D-90B55F8713EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4546E547-54E1-4FB9-9F20-7C70B9F86BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"3295A0E9-854B-4AC3-B2C0-349303C54C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"0C42BE39-C741-4A28-86C7-7EE93E3C835F"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"45B97265-ACC7-4EA7-BAC3-1284445A819B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"89427CA6-7788-4FEB-801B-4B4C7311533F"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"66F790FB-D4F7-4043-A593-F88580790881"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3:beta:*:*:*:*:*:*","matchCriteriaId":"74C5F4B1-5062-4B65-8476-5EC149671CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"7AC9A07E-8ECA-48E7-8210-9FD32CADA6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"C7AF33DD-56CA-4E76-BC61-B0F59A300494"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.3:rc7:*:*:*:*:*:*","matchCriteriaId":"FDA784AD-3D96-4E99-8F00-2FEF34691E72"}]}]}],"references":[{"url":"http://osvdb.org/50680","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32800","source":"cve@mitre.org"},{"url":"http://osvdb.org/50680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/12/09/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5486","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en TurnkeyForms Text Link Sales permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:text_link_sales:*:*:*:*:*:*:*:*","matchCriteriaId":"07D4605F-CBC8-427A-9075-72C0C8F80032"}]}]}],"references":[{"url":"http://secunia.com/advisories/32732","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32308","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46631","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5487","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en admin.php en TurnkeyForms Text Link Sales permite a atacantes remotos inyectar secuencias de código web o HTML de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:text_link_sales:*:*:*:*:*:*:*:*","matchCriteriaId":"07D4605F-CBC8-427A-9075-72C0C8F80032"}]}]}],"references":[{"url":"http://secunia.com/advisories/32732","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32308","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46632","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5488","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the passfromform parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo admin.php en E-topbiz Domain Shop 2, permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro passfromform."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:domain_shop:2:*:*:*:*:*:*:*","matchCriteriaId":"96AF8F91-4C87-4C89-B00A-8308EE2328F9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46435","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5489","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en channel_detail.php en ClipShare Pro 4, y 2006 a 2007 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"chid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clip-share:clipshare:4:*:pro:*:*:*:*:*","matchCriteriaId":"483BE3B9-2286-48CA-9062-EDFF6FF26422"}]}]}],"references":[{"url":"http://secunia.com/advisories/32723","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32311","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3170","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46629","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7128","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5490","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en PHPStore Yahoo Answers permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:yahoo_answers:*:*:*:*:*:*:*:*","matchCriteriaId":"79743F75-753F-47E8-BE3F-37845640A3DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32717","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4718","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32316","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3169","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46624","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5491","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en edit.php en SlimCMS v1.0.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"pageID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slimcms:slimcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"7ED48E5D-728B-47A2-97C6-CEF06BB5198D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4717","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32300","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46633","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7121","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5492","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el control ActiveX PDFVIEW.PdfviewCtrl.1 en pdfview.ocx 2.0.0.1 en VeryDOC PDF Viewer OCX Control permite a atacantes remotos ejecutar código de su elección mediante un primer argumento largo para el método OpenPDF. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verypdf:verydoc_pdf_viewer:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7AFEBAAE-35A8-49C2-BEF7-D0B3E7D23D9D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4715","source":"cve@mitre.org"},{"url":"http://www.bmgsec.com.au/advisories/openpdf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32313","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46622","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bmgsec.com.au/advisories/openpdf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5493","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en track.php en PHPStore Wholesales (alias Wholesale) permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:wholesale:*:*:*:*:*:*:*:*","matchCriteriaId":"FD46553A-B5A4-4910-8D7E-9C4EF2E068C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:wholesales:*:*:*:*:*:*:*:*","matchCriteriaId":"698A8C89-7CE2-41D6-A9A1-643281789259"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0811-exploits/wholesale-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4720","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32314","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3167","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46626","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7134","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0811-exploits/wholesale-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5494","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Contact Information Module (com_contactinfo) permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"catid\" para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digitalgreys:com_contactinfo:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF4F99DD-AF93-495B-971C-3421065F4DD1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4712","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3122","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46563","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7093","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5495","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the GungHo LoadPrgAx ActiveX control 1.0.0.6 and earlier allows remote attackers to execute arbitrary Java applications via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el control ActiveX GungHo LoadPrgAx 1.0.0.6 y anteriores permite a atacantes remotos ejecutar aplicaciones Java de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gungho:loadprgax_control:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.6","matchCriteriaId":"346BF204-475B-48C3-8C02-E329ABC49D41"}]}]}],"references":[{"url":"http://gungho.jp/","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN47875752/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000077.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46623","source":"cve@mitre.org"},{"url":"http://gungho.jp/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN47875752/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5496","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showcategory.php en PozScripts Business Directory Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pozscripts:business_directory_script:*:*:*:*:*:*:*:*","matchCriteriaId":"44C79EA0-F402-46BD-8798-AF40F68F5AD1"}]}]}],"references":[{"url":"http://osvdb.org/49822","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32264","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3118","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46558","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7098","source":"cve@mitre.org"},{"url":"http://osvdb.org/49822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5497","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T16:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true."},{"lang":"es","value":"BandSite CMS v1.1.4 permite a atacantes remotos eludir el proceso de autenticación y obtener permisos de administración configurando la cookie login_auth como true."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bandsitecms:bandsite_cms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8FB4148-30D8-4E37-B030-3DC913277714"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46601","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7113","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5498","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image."},{"lang":"es","value":"Error de índice de array en la función imageRotate en PHP 5.2.8 y anteriores permite a atacantes dependientes del contexto leer los contenidos de posiciones de memoria de su elección mediante un valor manipulado del tercer argumento (también conocido como el argumento bgd_color o clrBack) para una imagen indexada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.8","matchCriteriaId":"D9FA6BB1-8F1F-423A-8353-054F5B3B7DBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/51031","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021494","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"cve@mitre.org"},{"url":"http://www.php.net/releases/5_2_9.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33002","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47635","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_2_9.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5499","sourceIdentifier":"cve@mitre.org","published":"2008-12-18T00:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file."},{"lang":"es","value":"Vulnerabilidad sin especificar en Adobe Flash Player para Linux v10.0.12.36, y v9.0.151.0 y versiones anteriores, permite a atacantes remotos ejecutar código de su elección a través de un fichero SWF manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.151.0","matchCriteriaId":"72468E9A-37B6-444C-BF20-FEA5548A4364"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"DC9C3926-1FDB-4D8C-AC72-C7E1A222DB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"1F08319F-1C6D-4BC5-BAF9-251509974532"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"15C534DD-167D-45AA-B6DD-0776E78E649A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"910B58CC-8121-4B71-9ED9-3C9C45FA085B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"FE94BCCA-F6B2-48C9-8FBD-36CC3194B00E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50796","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33267","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33294","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-24.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1047.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32896","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021458","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3449","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47445","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5500","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://www.mozilla.org/security/announce/2008/mfsa2008-60.html\r\n\r\nMozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.\r\n\r\nThunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images.","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow."},{"lang":"es","value":"El motor de diseño de Mozilla Firefox 3.x anterior a 3.0.5 y 2.x anterior a 2.0.0.19, Thunderbird 2.x anterior a 2.0.0.19 y SeaMonkey 1.x anterior a 1.1.14, permite a atacantes remotos provocar una denegación de servicio (caída) y probablemente provocar una corrupción de memoria a través de vectores relacionados con (1) un fallo de aserción o (2) un desbordamiento de entero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-60.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021417","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460803","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=464998","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47406","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11053","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-60.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=464998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5501","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure."},{"lang":"es","value":"El motor de diseño en Mozilla Firefox 3.x en versiones anteriores 3.0.5, Thunderbird 2.x en versiones anteriores a 2.0.0.19, y SeaMonkey 1.x en versiones anteriores 1.1.14 que permite a los atacantes remotos causar una denegación de servicios a través de vectores que lanzar un fallo de evaluación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-60.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021417","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=395623","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47407","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10257","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-60.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=395623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5502","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions."},{"lang":"es","value":"El motor de diseño en Mozilla Firefox 3.x antes de v3.0.5, Thunderbird 2.x antes de v2.0.0.19 y SeaMonkey 1.x antes de v1.1.14 permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores que disparan una corrupción de memoria, relacionada con las funciones GetXMLEntity y FastAppendChar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-60.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021417","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=458679","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47408","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10001","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-60.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=458679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5503","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings."},{"lang":"es","value":"La función loadBindingDocument en Mozilla Firefox 2.x antes de v2.0.0.19, Thunderbird 2.x antes de v2.0.0.19 y SeaMonkey 1.x antes de v1.1.14 no realiza ninguna comprobación de seguridad relacionada con la política de mismo dominio, que permite a atacantes remotos leer o acceder a datos de otros dominios mediante vínculos XBL manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.18","matchCriteriaId":"FCE69A26-4F19-4D04-B125-86C49AA80E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.18","matchCriteriaId":"350EE2EE-75EC-40A5-9159-282089D98383"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33232","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-61.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021424","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=379959","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47409","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11423","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/690-3/","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-61.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=379959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/690-3/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5504","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836."},{"lang":"es","value":"Mozilla Firefox 2.x versiones anteriores a v2.0.0.19 permite a atacantes remotos ejecutar JavaScript de su elección con privilegios chrome a través de vectores relacionados con la vista previa de las semillas, una vulnerabilidad diferente a CVE-2008-3836."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.18","matchCriteriaId":"FCE69A26-4F19-4D04-B125-86C49AA80E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-62.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021422","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453526","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47410","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10781","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-62.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5505","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies."},{"lang":"es","value":"Mozilla Firefox 3.x antes de v3.0.5 permite a atacantes remotos evitar las restricciones de privacidad previstas utilizando el atributo persist en un elemento XUL para crear y acceder las entidades de datos que son parecidas a las cookies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.4","matchCriteriaId":"6FA1A625-36AB-4D9B-879D-571FE5DEA2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"}]}]}],"references":[{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-63.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021428","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=295994","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47411","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10443","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-63.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=295994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5506","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka \"response disclosure.\""},{"lang":"es","value":"Mozilla Firefox 3.x versiones anteriores a v3.0.5 y 2.x versiones anteriores a v2.0.0.19, Thunderbird 2.x versiones anteriores a v2.0.0.19, y SeaMonkey 1.x versiones anteriores a v1.1.14 permite a atacantes remotos evitar la misma política de origen provocando que el navegador cause una XMLHttpRequest de un recurso controlado por el atacante que utiliza una redirección 302 a la fuente en un dominio distinto, a continuación leyendo el contenido de la respuesta, también conocido como \"revelación de respuesta\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-64.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021427","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=458248","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47412","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10512","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-64.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=458248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5507","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API."},{"lang":"es","value":"Mozilla Firefox 3.x versiones anteriores a v3.0.5 y 2.x versiones anteriores a v2.0.0.19, Thunderbird 2.x versiones anteriores a v2.0.0.19 y SeaMonkey 1.x versiones anteriores a v1.1.14 permite a atacantes remotos evitar la política origen y acceder a partes de datos de otro dominio a través de URL javascript que redirige a la fuente objetivo, el cual genera un error si los datos objetivo no tienen sintaxis Javascript, a los que se puede acceder utilizando la API window.onerror DOM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://scary.beasts.org/security/CESA-2008-011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-65.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499353/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021423","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461735","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47413","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2008-011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-65.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499353/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5508","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks."},{"lang":"es","value":"Mozilla Firefox 3.x en versiones anteriores 3.0.5 y 2.x en versiones anteriores 2.0.0.19, Thunderbird 2.x en versiones anteriores a 2.0.0.19, y SeaMonkey 1.x en versiones anteriores 1.1.14 no analizando propiamente URLs con espacios en blanco destacados o caracteres de control, el cual podría permitir a los atacantes remotos deformar URL y simplificar los ataques de fraude (phishing)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-66.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021426","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425046","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460803","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47414","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11040","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-66.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=425046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5510","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines."},{"lang":"es","value":"El analizador CSS en Mozilla Firefox 3.x en versiones anteriores a 3.0.5 y 2.x en versiones anteriores 2.0.0.19, Thunderbird 2.x en versiones anteriores a 2.0.0.19, y SeaMonkey 1.x en versiones anteriores a 1.1.14 ignora el carácter de escape nulo '\\0', el cual debería permitir a un atacante remoto evitar los mecanismos de protección como las rutinas de limpieza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-67.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021425","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=228856","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47415","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-67.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=228856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5511","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an \"unloaded document.\""},{"lang":"es","value":"Mozilla Firefox 3.x antes de v3.0.5 y 2.x antes de v2.0.0.19, Thunderbird 2.x antes 2.0.0.19 y SeaMonkey 1.x antes de v1.1.14  permite a atacantes remotos evitar la política de mismo origen y llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) mediante una vinculación XBL a un \"documento no descargado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-68.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021418","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451680","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=464174","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47417","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11881","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-68.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=464174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5512","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which \"page content can pollute XPCNativeWrappers.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Mozilla Firefox 3.x en versiones anteriores a 3.0.5 y 2.x en versiones anteriores anteriores a 2.0.0.19, Thunderbird 2.x en versiones anteriores a 2.0.0.19, y SeaMonkey 1.x en versiones anteriores a 1.1.14 permite a los atacantes remotos ejecutar arbitrariamente JavaScript con privilegios chrome a través de vectores desconocido en la cual \"el contenido de la página puede contaminar XPCNativeWrappers.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-68.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021418","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451680","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=464174","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47416","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9814","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-68.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-701-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=464174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5513","sourceIdentifier":"secalert@redhat.com","published":"2008-12-17T23:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica session-restore en Mozilla Firefox 3.x versiones anteriores a v3.0.5 y 2.x versiones anteriores a v2.0.0.19 permite a atacantes remotos evitar la misma política de origen, inyectar contenido dentro de documentos asociados con otros dominios, y llevar a cabo un ataque de secuencias de comandos en sitios cruzados (XSS) a través de vectores desconocidos relacionados con la restauración de datos SessionStore."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"C8B5BCBB-C10E-44E5-8235-01560BD9273C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.5","matchCriteriaId":"867B189D-CF88-41C5-8FBA-893C100BE203"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.1.14","matchCriteriaId":"47BE5CA2-9885-479A-8C9C-E6D5FA2E1C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.0.19","matchCriteriaId":"1884DC26-E9BE-43FB-8C7B-2116F4857E7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-69.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021421","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47418","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-69.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-1037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/32882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-690-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/690-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5514","sourceIdentifier":"secalert@redhat.com","published":"2008-12-23T18:30:03.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow."},{"lang":"es","value":"Error de superación de límite en la función rfc822_output_char en las rutinas RFC822BUFFER de las bibliotecas c-client library, de la Universidad de Washinton (UW), como las utilizadas en por el Juego de herramientas UW IMAP anteriores a imap-2007e y otras aplicaciones, permiten a atacantes, despendiendo del contexto, provocar una denegación de servicio (caída) a través de un correo electrónico, que desencadene un desbordamiento de buffer.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of imap as shipped with Red Hat Enterprise Linux 2.1 and 3, and the versions of libc-client as shipped with Red Hat Enterprise Linux 4 and 5.","lastModified":"2009-01-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:*:*:*:*:*:*:*:*","versionEndIncluding":"2007d","matchCriteriaId":"26CF4464-7DBE-4C8E-B6CF-A4777ADB1D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2000:*:*:*:*:*:*:*","matchCriteriaId":"68ABE6C6-A499-4E11-91E9-8F8B61776BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2000a:*:*:*:*:*:*:*","matchCriteriaId":"4BE0A870-F96D-42A8-ACDA-EC6BF9C4CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2000b:*:*:*:*:*:*:*","matchCriteriaId":"D2F84DA2-C7DE-4659-AEB6-8E4AB059B85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2000c:*:*:*:*:*:*:*","matchCriteriaId":"4DACC0FF-2831-4905-8862-DC46D9EF2B3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2001:*:*:*:*:*:*:*","matchCriteriaId":"64C291AE-CA06-4982-AB18-A2C6DF6BCB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2001a:*:*:*:*:*:*:*","matchCriteriaId":"85B417A8-D3DF-4808-9880-BCDB747148E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002:*:*:*:*:*:*:*","matchCriteriaId":"C8284427-CFFE-4075-9EC1-5E77DD5F0F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002a:*:*:*:*:*:*:*","matchCriteriaId":"593B87AB-3009-4690-B09F-2D79E7019B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002b:*:*:*:*:*:*:*","matchCriteriaId":"6C43CED0-66F6-4D3B-A24B-81ACA70243D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002c:*:*:*:*:*:*:*","matchCriteriaId":"ABD1CAF4-C478-4126-A450-AFBCA5CC1ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002d:*:*:*:*:*:*:*","matchCriteriaId":"35F2E0DB-E67C-4351-BC9D-6DF77F07D2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002e:*:*:*:*:*:*:*","matchCriteriaId":"DB4BB0BD-03F6-403B-BE5A-9D610DF59869"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2002f:*:*:*:*:*:*:*","matchCriteriaId":"851E2CD6-E061-4236-B44C-FC9810CD16DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004:*:*:*:*:*:*:*","matchCriteriaId":"188B27E0-5BAF-46B2-82F0-79CA0859A33D"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004a:*:*:*:*:*:*:*","matchCriteriaId":"E78E770B-83C3-414F-8F1F-2E70C604873E"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004b:*:*:*:*:*:*:*","matchCriteriaId":"A8E72678-D201-4A9E-B42F-E76B44C2F062"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004c:*:*:*:*:*:*:*","matchCriteriaId":"9E232637-E1E6-4B85-9AF1-FD91A9767087"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004d:*:*:*:*:*:*:*","matchCriteriaId":"EA74AD8D-6364-4DA9-8F0A-A11AE9FB1011"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004e:*:*:*:*:*:*:*","matchCriteriaId":"3465EC3A-5250-4729-AC7A-AE9D0E4C8BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004f:*:*:*:*:*:*:*","matchCriteriaId":"0E4D902D-C846-4698-952A-028927D24ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2004g:*:*:*:*:*:*:*","matchCriteriaId":"7724A2ED-D633-43C0-B547-FBD8EBA86DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006:*:*:*:*:*:*:*","matchCriteriaId":"E6C44FAA-8BDE-4C86-9891-A1CF6B23407F"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006a:*:*:*:*:*:*:*","matchCriteriaId":"2CB3CD69-985E-4DE1-9A08-E4EB216F0793"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006b:*:*:*:*:*:*:*","matchCriteriaId":"8423C322-77A5-4CAA-8901-8B8F1D9FF8E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006c:*:*:*:*:*:*:*","matchCriteriaId":"9862573C-0379-4585-8ECB-2B3B98FA7944"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006d:*:*:*:*:*:*:*","matchCriteriaId":"C028BF64-22F5-424E-A959-42AEB2ABEED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006e:*:*:*:*:*:*:*","matchCriteriaId":"9EAB09AD-F648-402F-921A-9345275143BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006f:*:*:*:*:*:*:*","matchCriteriaId":"4E8DA588-ADCA-4125-8217-F27D035948FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006g:*:*:*:*:*:*:*","matchCriteriaId":"F552DEE9-4730-405E-B482-E002E5A39A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006h:*:*:*:*:*:*:*","matchCriteriaId":"E74FA86E-A6A0-4EC7-A0F7-31AE362F9308"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006i:*:*:*:*:*:*:*","matchCriteriaId":"4CC6B678-CF97-431C-8EFB-5E2223966F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006j:*:*:*:*:*:*:*","matchCriteriaId":"6D9229C6-6251-4675-9396-5753AB81C80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2006k:*:*:*:*:*:*:*","matchCriteriaId":"9E280DD2-F66A-48FF-B23A-FF49753C2654"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2007:*:*:*:*:*:*:*","matchCriteriaId":"85BC14FB-C24B-405D-9C83-1444874489AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2007a:*:*:*:*:*:*:*","matchCriteriaId":"E25C5926-DCA2-4766-B2DE-C5818494F850"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:2007b:*:*:*:*:*:*:*","matchCriteriaId":"535F9E8E-6BB4-455D-A8A4-50D0531F28A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33275","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33638","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021485","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32958","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/3490","source":"secalert@redhat.com"},{"url":"http://www.washington.edu/imap/documentation/RELNOTES.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477227","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47526","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00846.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.washington.edu/imap/documentation/RELNOTES.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00846.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5520","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"AhnLab V3 v2008.12.4.1 y posiblemente v2008.9.13.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2008.9.13.0:*:*:*:*:*:*:*","matchCriteriaId":"97AAC686-393C-4A3C-BD22-CFC1863D1A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ahnlab:v3_internet_security:2008.12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEAA0318-BF02-4E11-A7BF-C906A0A098D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5521","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Avira AntiVir v7.9.0.36 y posiblemente v7.8.1.28, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free-av:antivir:7.8.1.28:*:*:*:*:*:*:*","matchCriteriaId":"591AA13F-8E51-4ABE-B872-368BC612871D"},{"vulnerable":true,"criteria":"cpe:2.3:a:free-av:antivir:7.9.0.36:*:*:*:*:*:*:*","matchCriteriaId":"B56B4F4B-2BB0-4137-BF18-A613E8289F27"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5522","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"AVG Anti-Virus v8.0.0.161, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avg:antivirus:8.0.0.161:*:*:*:*:*:*:*","matchCriteriaId":"D193394E-B1EC-4380-841C-4BFA5A34FCC1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5523","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"avast! antivirus v4.8.1281.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus:4.8.1281.0:*:*:*:*:*:*:*","matchCriteriaId":"64A9C0CB-F7D0-47BE-85E8-E709C27DA283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5524","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"CAT-QuickHeal v10.00 y posiblemente v9.50, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickheal:cat_quickheal:9.50:*:*:*:*:*:*:*","matchCriteriaId":"49C8975A-4A20-4CED-A0D2-BC509132F96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:quickheal:cat_quickheal:10.00:*:*:*:*:*:*:*","matchCriteriaId":"38E97D7E-D4AB-467C-AD12-3922FA369572"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5525","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"ClamAV v0.94.1 y posiblemente v0.93.1, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*","matchCriteriaId":"0722860E-934A-49CA-BEAD-0EB05AA6E4C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5526","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"DrWeb Anti-virus v4.44.0.09170, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drweb:anti-virus:4.44.0.09170:*:*:*:*:*:*:*","matchCriteriaId":"35232849-08D1-4827-B5CD-541B2843936C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5527","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"ESET Smart Security, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"50EA7DFB-53D1-42F7-943B-36E6EC5696C4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5528","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aladdin eSafe 7.0.17.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Aladdin eSafe v7.0.17.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin:esafe:7.0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5C6590DF-9164-4A76-ADEE-9110C5E3588E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5529","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"CA eTrust Antivirus v31.6.6086, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5530","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Ewido Security Suite v4.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avg:ewido_security_suite:4.0:*:*:*:*:*:*:*","matchCriteriaId":"DECAB8A9-3AB4-4709-8B77-7E68D3BCF314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ewido:ewido_security_suite:4.0:*:*:*:*:*:*:*","matchCriteriaId":"150F9897-9B32-4638-A172-31E208F31AE2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5531","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Fortinet Antivirus v3.113.0.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiguard_antivirus:3.113.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CF067763-7C88-487E-BF76-AA7191E4ECD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5532","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Ikarus Virus Utilities vT3.1.1.45.0 y posiblemente vT3.1.1.34.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_antivirus:t3.1.1.34.0:*:*:*:*:*:*:*","matchCriteriaId":"1C40721F-D431-438B-9051-2BB7A0D54180"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikarus:ikarus_antivirus:t3.1.1.45.0:*:*:*:*:*:*:*","matchCriteriaId":"5BC56CBC-2DC5-47A1-ADA6-EB37C793D46D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5533","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"K7AntiVirus v7.10.541 y posiblemente v7.10.454, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:k7computing:antivirus:7.10.454:*:*:*:*:*:*:*","matchCriteriaId":"26926A64-F2B1-4FDB-B28E-4E4BEAF3BFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:k7computing:antivirus:7.10.541:*:*:*:*:*:*:*","matchCriteriaId":"A34BFBA5-5A88-4C83-9159-CB647070BAB9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5534","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"ESET NOD32 Antivirus v3662 y posiblemente v3440, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset:nod32_antivirus:3440:*:*:*:*:*:*:*","matchCriteriaId":"81D57CAD-18A6-495D-A22C-BFFB0B900091"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:nod32_antivirus:3662:*:*:*:*:*:*:*","matchCriteriaId":"FA209275-E268-461E-A1BA-BB0B7D133159"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5535","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Norman Antivirus v5.80.02, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:norman:norman_antivirus_\\&_antispyware:5.80.02:*:*:*:*:*:*:*","matchCriteriaId":"EBAF8DE0-CB26-433A-8FDA-C96727E6FB4D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5536","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:02.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Panda Antivirus v9.0.0.4, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:9.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"89B6D853-87DE-43D5-8670-BF34635C7F07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5537","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"PC Tools AntiVirus v4.4.2.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pctools:pctools_antivirus:4.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CBEB4688-6E91-4C4F-9FA6-0A553FE281A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5538","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Prevx Prevx1 2, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prevx:prevx1:2:*:*:*:*:*:*:*","matchCriteriaId":"1D99CDB6-30EE-4A83-94C0-0D032F30FB85"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5539","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RISING Antivirus 21.06.31.00 and possibly 20.61.42.00, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"RISING Antivirus v21.06.31.00 y posiblemente v20.61.42.00, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rising-global:rising_antivirus:20.61.42.00:*:*:*:*:*:*:*","matchCriteriaId":"11C4E580-21F3-49F7-B014-C3E5D5D1AF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:rising-global:rising_antivirus:21.06.31.00:*:*:*:*:*:*:*","matchCriteriaId":"57833734-AC09-421A-8439-53D9B4A4A324"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5540","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Secure Computing Secure Web Gateway (alias Webwasher), cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:secure_computing:secure_web_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"C8B04E80-D9EE-4EAD-8638-AF723CDFA73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_computing:webwasher:*:*:*:*:*:*:*:*","matchCriteriaId":"29893D87-C7BD-46B3-B280-B9A20E4C3A94"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5541","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Sophos Anti-Virus v4.33.0, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.33.0:*:*:*:*:*:*:*","matchCriteriaId":"41F2865A-0D90-4E78-B2C7-9F6CF13A986E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5542","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sunbelt VIPRE 3.1.1832.2 and possibly 3.1.1633.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Sunbelt VIPRE v3.1.1832.2 y posiblemente v3.1.1633.1, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sunbeltsoftware:vipre:3.1.1633.1:*:*:*:*:*:*:*","matchCriteriaId":"ACFBB713-D367-41EA-A1A5-F5399B33BE72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sunbeltsoftware:vipre:3.1.1832.2:*:*:*:*:*:*:*","matchCriteriaId":"5BABD745-ECFC-428E-9B20-52B9F4F572DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5543","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Symantec AntiVirus (SAV) 10, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:*:*:*:*:*:*:*","matchCriteriaId":"E02FE2FB-514A-48F9-8833-B1EF4CC1E27E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5544","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Hacksoft The Hacker v6.3.1.2.174 y posiblemente v6.3.0.9.081, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hacksoft:the_hacker:6.3.0.9.081:*:*:*:*:*:*:*","matchCriteriaId":"FF8CCF95-46AB-473B-8F0D-AEB61AF3DCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hacksoft:the_hacker:6.3.1.2.174:*:*:*:*:*:*:*","matchCriteriaId":"8E13FA87-49A9-4D23-AE48-D651DBF29DA9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5545","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"Trend Micro VSAPI v8.700.0.1004 en Trend Micro AntiVirus, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:trend_micro_antivirus:8.700.0.1004:*:*:*:*:*:*:*","matchCriteriaId":"13EE9D2C-0135-4F50-86BB-94DB198796E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5546","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"VirusBlokAda VBA32 v3.12.8.5, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virusblokada:vba32_antivirus:3.12.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1F29899B-9B34-4D16-9638-2F8777981E07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5547","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"HAURI ViRobot v2008.12.4.1499 y posiblemente v2008.9.12.1375, cuando se utiliza Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hauri:virobot:2008.9.12.1375:*:*:*:*:*:*:*","matchCriteriaId":"43D048D2-04FF-4337-88E9-99FCF307ECD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hauri:virobot:2008.12.4.1499:*:*:*:*:*:*:*","matchCriteriaId":"4BD67931-8402-4E17-80DE-3D209FD9289B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5548","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit."},{"lang":"es","value":"VirusBuster v4.5.11.0, cuando se usa Internet Explorer 6 o 7, permite a atacantes remotos eludir la detección de malware en un documento HTML colocando una cabecera MZ (alias \"EXE info\") al principio, y modificar el nombre del archivo a (1 ) sin extensión, (2) una extensión. txt, o (3) una extensión .jpg, como lo demuestra un documento que contiene un exploit CVE-2006-5745."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virusbuster:virusbuster:4.5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"C82AE760-2809-4BA5-B960-9C901D3C3FDD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5549","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to \"access to secure files by ThemeServlet.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en los componentes de Sun Java Web Console en Sun Java System Portal Server v7.1 y v7.2 permite a atacantes remotos acceder a ficheros locales y leer la información de configuración del producto mediante vectores desconocidos, relacionado a \"acceso a ficheros seguros por ThemeServlet\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A29331A7-9D72-489D-A8DF-5B4C18A19692"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:*:*:*:*:*:*","matchCriteriaId":"83D63923-869B-4156-BBED-DFB417B19420"}]}]}],"references":[{"url":"http://secunia.com/advisories/33120","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021380","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32770","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3408","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-124301-12-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243886-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5550","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the redirect_url parameter."},{"lang":"es","value":"Vulnerabilidad involuntaria de redirección en console/faces/jsp/login/BeginLogin.jsp en Sun Java Web Console v3.0.2 a v3.0.5 y Solaris 10 permite a atacantes remotos redirigir a los usuarios a sitios web de su elección y realizar ataques de phising a través del parámetro redirect_url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E0D3747-9ACD-40F4-9433-823489249416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DD7786C0-4367-4224-BDA9-C5A0F466A6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C77A7094-D272-4A30-B79A-FE9D0301FA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"642641D5-A711-42AC-BA14-2EA789844EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125950-18-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125952-18-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243786-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32771","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47257","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125950-18-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125952-18-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243786-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5551","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a \"double injection.\""},{"lang":"es","value":"El filtro XSS (ejecución de secuencias de comandos en sitios cruzados) en Microsoft Internet Explorer 8.0 Beta 2 permite a atacantes remotos saltar el mecanismo de protección XSS y generar ataques XSS mediante la inyección de datos en dos posiciones diferentes en un documento HTML, relacionado con elementos STYLE y la propiedad CSS expression, alias una \"doble inyección\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32780","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5552","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value.  NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\""},{"lang":"es","value":"El filtro XSS (ejecución de secuencias de comandos en sitios cruzados) en Microsoft Internet Explorer 8.0 Beta 2 permite a atacantes remotos saltar el mecanismo de protección XSS y generar ataques XSS mediante una secuencia CRLF junto con una cabecera Content-Type manipulada, como se demostró por una cabecera con un valor de charset utf-7. NOTA: El fabricante mantiene que el filtro XSS de manera intencionada no intenta \"abordar todas las hipótesis de ataque XSS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47441","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5553","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\""},{"lang":"es","value":"El filtro XSS (ejecución de secuencias de comandos en sitios cruzados) en Microsoft Internet Explorer 8.0 Beta 2 se deshabilita a si mismo despues de encontrar una cierta cabecera X-XSS-Protection HTTP, lo que permite a atacantes remotos saltar el mecanismo de protección XSS y generar ataques XSS mediante la inyección de esta cabecera después de una secuencia CRLF. NOTA: El fabricante mantiene que el filtro XSS de manera intencionada no intenta \"abordar todas las hipótesis de ataque XSS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47442","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5554","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers.  NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\""},{"lang":"es","value":"El filtro XSS (ejecución de secuencias de comandos en sitios cruzados) en Microsoft Internet Explorer 8.0 Beta 2 no gestiona de manera apropiada algunas cabeceras HTTP que aparecen después de una secuencia CRLF en una URI, lo que permite a atacantes remotos saltar el mecanismo de protección XSS y generar ataques XSS o de redirección, como se ha demostrado por las cabeceras HTTP (1) Location y (2) Set-Cookie. NOTA: El fabricante mantiene que el filtro XSS de manera intencionada no intenta \"abordar todas las hipótesis de ataque XSS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47443","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5555","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to \"XDomainRequest Allowed Injection (XAI).\" NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\""},{"lang":"es","value":"Microsoft Internet Explorer 8.0 Beta 2 confía en la cabecera HTTP XDomainRequestAllowed para autorizar el intercambio de datos entre dominios, o que permite a atacantes remotos evitar el mecanismo de protección del producto XSS Filter y dirigir ataques XSS (ejecución de secuencias de comandos en sitios cruzados) y de dominios cruzados, mediante la inyección de esta cabecera después de una secuencia CRLF, relacionado con \"XDomainRequest Allowed Injection (XAI).\" NOTA: El fabricante mantiene que el filtro XSS de manera intencionada no intenta \"abordar todas las hipótesis de ataque XSS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47444","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5556","sourceIdentifier":"cve@mitre.org","published":"2008-12-12T18:30:03.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content.  NOTE: the vendor reportedly disputes this issue, stating \"Behaviour is by design."},{"lang":"es","value":"** CUESTIONADA ** El filtro XSS (ejecución de secuencias de comandos en sitios cruzados) en Microsoft Internet Explorer 8.0 Beta 2 no reconoce patrones de patrones de ataque diseñados para operar contra páginas web que están codificadas en utf-7, lo que permite a atacantes remotos saltar el mecanismo de protección XSS y generar ataques XSS mediante la inyección de contenido utf-7 manipulado. NOTA: El vendedor ha impugnado esta vulnerabilidad, argumentando que \"El comportamiento es una característica del diseño\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499124/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5557","sourceIdentifier":"cve@mitre.org","published":"2008-12-23T18:30:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en ext/mbstring/libmbfl/filters/mbfilter_htmlent.c en la extensión mbstring en PHP v4.3.0 hasta v5.2.6 permite a atacantes, dependiendo del contexto, ejecutar código arbitrario a través de una cadena manipulada conteniendo una entidad HTML, la cual no es manejada de forma adecuada durante la conversión a Unicode, relativo a (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, y (4) funciones mb_parse_str."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0477.html","source":"cve@mitre.org"},{"url":"http://bugs.php.net/bug.php?id=45722","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/mbstring/libmbfl/filters/mbfilter_htmlent.c?r1=1.7&r2=1.8","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021482","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32948","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47525","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10286","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0477.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.php.net/bug.php?id=45722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/mbstring/libmbfl/filters/mbfilter_htmlent.c?r1=1.7&r2=1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5558","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching."},{"lang":"es","value":"Asterisk Open Source 1.2.26 hasta 1.2.30.3 y Business Edition B.2.3.5 hasta B.2.5.5, cuando los usuarios realtime IAX2 son habilitados, permite a los atacantes remotos causar una denegación de servicio (caída) a través de intentos de autenticación relativos a (1) usuarios desconocidos o (2) usuarios que usan hostname coincidentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"BB3C2CF4-4A4B-4398-92DC-EAE43801D08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F796D547-034A-46FB-B245-3863C198AA84"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0F04F844-79C4-41F3-9671-8B46460D0AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"72375576-F857-4585-A677-A326D89A65B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"51E5EB34-30AD-4E81-8BD4-4AB905E52B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"4359322B-08D0-4710-A9C3-54BD4A17B800"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:*","matchCriteriaId":"78F84DF4-DBA7-430C-AF17-F52024EF80D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:*","matchCriteriaId":"34266614-3588-485C-A609-37823F8499AC"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2008-012.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4769","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499117/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32773","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021378","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3403","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2008-012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499117/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5559","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL sendcard.cfm en PostEcards permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"cid\".\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dazzlindonna:postecards:*:*:*:*:*:*:*:*","matchCriteriaId":"7BF43FF3-CC42-4731-9B22-1AA5173D593F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4725","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32719","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47194","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7398","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5560","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb."},{"lang":"es","value":"PostEcards almacena información sensible bajo el directorio web raíz con control de acceso insuficiente, permitiendo a atacantes remotos descargar el fichero de base de datos mediante una petición directa del fichero \"postcards.mdb\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dazzlindonna:postecards:*:*:*:*:*:*:*:*","matchCriteriaId":"7BF43FF3-CC42-4731-9B22-1AA5173D593F"}]}]}],"references":[{"url":"http://osvdb.org/50629","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4725","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47195","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7398","source":"cve@mitre.org"},{"url":"http://osvdb.org/50629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5561","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) fiche_product.php and (2) presentation.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Netref v4.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" a (1) fiche_product.php y (2) presentation.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netref:netref:4.0:*:*:*:*:*:*:*","matchCriteriaId":"491B327A-1B03-47C8-80EA-44095D778533"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4726","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47191","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7396","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5562","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb."},{"lang":"es","value":"ASPPortal almacena información sensible en la raíz web con un control de acceso insuficiente, lo cual permite a atacantes remotos descargarse una base de datos a través de una petición directa a xportal.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:aspportal:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"549F4FF9-A8F0-471A-BA91-72FE6CFDEA55"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4727","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7361","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5563","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://secunia.com/advisories/33057\r\n\r\nNote: When using wireless, this only affects devices running in WPA/WPA2 Enterprise modes.\r\n\r\nThe vulnerability is reported in ArubaOS 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x.","cveTags":[],"descriptions":[{"lang":"en","value":"Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame."},{"lang":"es","value":"Aruba Mobility Controller v2.4.8.x-FIPS, v2.5.x, v3.1.x, v3.2.x, v3.3.1.x, y v3.3.2.x permite a atacantes remotos provocar una denegación de servicio (caída del dispositivo) mediante una trama deformada del protocolo de autenticación extensible (EAP - Extensible Authentication Protocol)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.4.8:*:fips:*:*:*:*:*","matchCriteriaId":"44656001-F500-4C94-A812-CA33C3D724FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.4.8.5:*:fips:*:*:*:*:*","matchCriteriaId":"2FEE7B77-6BD8-4011-958A-CBD27AA58D42"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.4.8.6:*:fips:*:*:*:*:*","matchCriteriaId":"0531981C-71A8-4F18-ACB2-58809CD3FB8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.4.8.11:*:fips:*:*:*:*:*","matchCriteriaId":"454B3A9C-DA1D-47D1-AB6E-516A2E95F857"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"7E6DA11C-513C-41E1-AD52-AAF840D1D80F"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.4.17:*:*:*:*:*:*:*","matchCriteriaId":"0E20CDFF-3DD8-4E4F-B197-5E56C6497C35"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.4.18:*:*:*:*:*:*:*","matchCriteriaId":"FAED6877-D23C-45AD-A237-161765E95450"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.4.25:*:*:*:*:*:*:*","matchCriteriaId":"7726D164-2A1E-4DCE-B622-8A0A0EAF6E35"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"EDF1D87C-39D0-474B-B281-E705BA7414DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DDC018DB-DB29-467F-89EA-45603B077C4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DC30277F-22D1-4564-B21E-A3C8A906E5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controller:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF53F8E-CE83-43BE-9998-83A72E1C4212"},{"vulnerable":true,"criteria":"cpe:2.3:o:aruba_networks:aruba_mobility_controllers:3.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5AEA70CD-4626-4D63-8B75-5FB7F3980259"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:aruba_mobility_controller:3.1.1.0:*:fips:*:*:*:*:*","matchCriteriaId":"90D35907-7DAA-479A-A9D3-34062E03D8A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:aruba_mobility_controller:3.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D314CFDD-036D-4B7F-A688-CD7929513458"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:aruba_mobility_controller:3.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"082E8702-E969-4EDE-8289-C4D526466E37"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:aruba_mobility_controller:3.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"34AD9DE3-E466-4C79-AC14-2E6CA21A22D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:aruba_mobility_controller:3.3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4F283EE-28E0-4DC3-A8B8-989277C094B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4728","source":"cve@mitre.org"},{"url":"http://www.arubanetworks.com/support/alerts/aid-12808.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499014/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32694","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arubanetworks.com/support/alerts/aid-12808.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499014/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5564","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request."},{"lang":"es","value":"Vulnerabilidades no especificadas en el servidor en Orb Networks Orb anterior a v2.01.0025, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) mediante una petición HTTP mal formada"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.01.0022","matchCriteriaId":"6E748351-6942-485B-B6C6-330401AEA645"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.0930:*:*:*:*:*:*:*","matchCriteriaId":"D8654991-E3D4-4839-A912-71689C84A9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.0989:*:*:*:*:*:*:*","matchCriteriaId":"154F5BF6-3F5C-40F2-A02F-7A265423CAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.1014:*:*:*:*:*:*:*","matchCriteriaId":"EFFCCA29-35F9-46A5-9AB6-25817630D4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.1084:*:*:*:*:*:*:*","matchCriteriaId":"5E428767-B896-453B-A092-B6EA6443F885"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0008:*:*:*:*:*:*:*","matchCriteriaId":"2E8FCDF0-A5D6-4BDD-BBAB-767EB7CFE7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0013:*:*:*:*:*:*:*","matchCriteriaId":"77584A71-1EB5-4E9D-8C3A-B730B5356156"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0015:*:*:*:*:*:*:*","matchCriteriaId":"B7ACD0E2-A74B-4505-96CE-E1FE7D30ED8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0017:*:*:*:*:*:*:*","matchCriteriaId":"BB50434D-114D-4D97-9F80-604E4100D6BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4729","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498904/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32628","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47083","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498904/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5565","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en admin/settings.php en DL PayCart v1.34 y anteriores permite a atacantes remotos cambiar la contraseña de administrador mediante una acción de cierre de sesión conjuntamente con los parámetros \"NewAdmin\", \"NewPass1\", y \"NewPass2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dinkumsoft:dl_paycart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.34","matchCriteriaId":"64DFAE8B-0198-4FD6-AC62-E16E8219F863"},{"vulnerable":true,"criteria":"cpe:2.3:a:dinkumsoft:dl_paycart:1.01:*:*:*:*:*:*:*","matchCriteriaId":"D47035C3-2DEB-4F85-9172-4C1D931DDBE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33038","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4730","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7365","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5566","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Triangle Solutions PHP Multiple Newsletters 2.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML a su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmultiplenewsletters:phpmultiplenewsletters:2.7:*:*:*:*:*:*:*","matchCriteriaId":"F416299F-F9B3-499D-B961-76ABB3EA993C"}]}]}],"references":[{"url":"http://osvdb.org/50659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4751","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32727","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47198","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7400","source":"cve@mitre.org"},{"url":"http://osvdb.org/50659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5567","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en admin/ad_settings.php en Bonza Cart v1.10 y anteriores permite a atacantes remotos cambiar la contraseña de administrador mediante una acción de cierre de sesión conjuntamente con los parámetros \"NewAdmin\", \"NewPass1\", y \"NewPass2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bonzacart:bonza_cart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10","matchCriteriaId":"15E00AC4-3A56-42DD-9FAD-2A782BC99014"}]}]}],"references":[{"url":"http://secunia.com/advisories/33037","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4731","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7366","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5568","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the admin_id, newpass_1, and newpass_2 parameters."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en admin/settings.php en IPN Pro 3 v1.44 y anteriores permite a atacantes remotos cambiar la contraseña admin a través de cierre de sesión junto con los parámetros admin_id, newpass_1, y newpass_2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipn-mate:ipn_pro_3:*:*:*:*:*:*:*:*","versionEndIncluding":"1.44","matchCriteriaId":"8F1D277E-5928-427F-A4BE-F2F31D928134"}]}]}],"references":[{"url":"http://secunia.com/advisories/33039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4735","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7364","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5569","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php or (2) shop/kontakt.php, or (3) shop_kunden_mgmt.php or (4) SHOP_KONFIGURATION.php in shop/Admin/."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PHPepperShop v1.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML a su elección a través de PATH_INFO a (1) index.php o (2) shop/kontakt.php, o (3) shop_kunden_mgmt.php o (4) SHOP_KONFIGURATION.php en shop/Admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeppershop:phpeppershop:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F952ED93-607A-41D4-881B-41AC5B2F1F84"}]}]}],"references":[{"url":"http://osvdb.org/50568","source":"cve@mitre.org"},{"url":"http://osvdb.org/50569","source":"cve@mitre.org"},{"url":"http://osvdb.org/50570","source":"cve@mitre.org"},{"url":"http://osvdb.org/50571","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33069","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4745","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498998/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32690","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47157","source":"cve@mitre.org"},{"url":"http://osvdb.org/50568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498998/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5570","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto directorio en index.php en PHP Multiple Newsletters v2.7, cuando magic_quotes_gpc no está activo, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro \"lang\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_multiple_newsletters:php_multiple_newsletters:2.7:*:*:*:*:*:*:*","matchCriteriaId":"ED711A18-2CFB-4CDB-9F6A-AA520194747A"}]}]}],"references":[{"url":"http://osvdb.org/50660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4751","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32726","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47197","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7400","source":"cve@mitre.org"},{"url":"http://osvdb.org/50660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5571","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka passwd field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/login.asp en Professional Download Assistant v0.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"uname\" (también conocido como campo usuario) o (2) el parámetro \"psw\" (tamién conocido como campo contraseña). NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetindex:professional_download_assistant:0.1:*:*:*:*:*:*:*","matchCriteriaId":"51643DA3-90D5-48CC-83D1-049EAE2AFAD0"}]}]}],"references":[{"url":"http://osvdb.org/50548","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32706","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47170","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7390","source":"cve@mitre.org"},{"url":"http://osvdb.org/50548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5572","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb."},{"lang":"es","value":"Professional Download Assistant v0.1 almacena información sensible en la raíz web con un control de acceso insuficiente, lo cual permite a atacantes remotos descargarse una base de datos a través de una petición directa a database/downloads.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetindex:professional_download_assistant:0.1:*:*:*:*:*:*:*","matchCriteriaId":"51643DA3-90D5-48CC-83D1-049EAE2AFAD0"}]}]}],"references":[{"url":"http://osvdb.org/50547","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47148","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7371","source":"cve@mitre.org"},{"url":"http://osvdb.org/50547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5573","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) Password and (2) username parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el proceso de autenticación en Poll Pro v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"Password\" y (2) el parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adcomplete:poll_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"41A45B37-C72E-4DBA-99C1-1881F06013A0"}]}]}],"references":[{"url":"http://osvdb.org/50576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33044","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4741","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32707","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47169","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7391","source":"cve@mitre.org"},{"url":"http://osvdb.org/50576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5574","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en member.php en Webmaster Marketplace permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"u\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unscripts:webmaster_marketplace:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"3935895C-8948-478C-A421-FD5DF80D7199"}]}]}],"references":[{"url":"http://osvdb.org/50655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32756","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47210","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7407","source":"cve@mitre.org"},{"url":"http://osvdb.org/50655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5575","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en Pro Clan Manager v0.4.2 y anteriores, permite a atacantes remotos secuestrar sesiones web estableciendo el parámetro \"PHSESSID\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proclanmanager:pro_clan_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.2","matchCriteriaId":"E3065686-D5D5-4322-B7F8-EF14A25A946F"},{"vulnerable":true,"criteria":"cpe:2.3:a:proclanmanager:pro_clan_manager:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7DB01163-AF7E-45C0-9436-4674C0521D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:proclanmanager:pro_clan_manager:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"350A6535-1EDB-40D1-98AE-BFDDC4AAD76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:proclanmanager:pro_clan_manager:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2C87DF1B-9444-47F7-BF0F-7671CCEBE1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:proclanmanager:pro_clan_manager:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A4DFD78A-65A3-47F8-9B38-75B825693B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:proclanmanager:pro_clan_manager:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BA530B2A-D7B1-405D-B55B-91AD3C1915B5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4752","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498864/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32606","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47036","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498864/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5576","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter."},{"lang":"es","value":"admin/forums.php en sCssBoard v1.0, v1.1, v1.11, y v1.12 permite a atacantes remotos saltarse la autenticación y obtener acceso de administrador mediante un valor grande de el parámetro \"current_user[users_level]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2815DEC3-B709-4972-910D-7ADB3ACE38AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC044C7-05BC-4D6E-92C0-FF573EA8D608"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*","matchCriteriaId":"98463C5E-AFBE-4CC3-8BC7-94757B948D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.12:*:*:*:*:*:*:*","matchCriteriaId":"89CD9D3A-9018-4981-9084-66ABCE42A8FF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4739","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47456","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5149","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5577","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en index.php en sCssBoard v1.0, v1.1, v1.11, y v1.12 permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro inc_function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2815DEC3-B709-4972-910D-7ADB3ACE38AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC044C7-05BC-4D6E-92C0-FF573EA8D608"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*","matchCriteriaId":"98463C5E-AFBE-4CC3-8BC7-94757B948D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.12:*:*:*:*:*:*:*","matchCriteriaId":"89CD9D3A-9018-4981-9084-66ABCE42A8FF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4739","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47457","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5149","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5578","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en sCssBoard v1.0, v1.1, v1.11, y v1.12 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"f\" en la acción mostrar foro, (2) el parámetro \"u\" en la acción perfil, (3) el parámetro \"viewcat\", o (4) una combinación de valores scb_uid and scb_ident en la cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2815DEC3-B709-4972-910D-7ADB3ACE38AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC044C7-05BC-4D6E-92C0-FF573EA8D608"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*","matchCriteriaId":"98463C5E-AFBE-4CC3-8BC7-94757B948D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:scssboard:scssboard:1.12:*:*:*:*:*:*:*","matchCriteriaId":"89CD9D3A-9018-4981-9084-66ABCE42A8FF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27866","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5149","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5579","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en mini-pub.php/front-end/cat.php en mini-pub v0.3 permite a atacantes remotos leer archivos de su elección a través del path completo del fichero en el parámetro sFileName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.3:*:*:*:*:*:*:*","matchCriteriaId":"65A6ED64-8D27-4A53-B76A-701194B67CCC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4733","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487695/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27671","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6733","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487695/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5580","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument."},{"lang":"es","value":"mini-pub.php/front-end/cat.php en mini-pub v0.3 permite a atacantes remotos ejecutar código de su elección utilizando meta-caracteres del interprete de comandos en el parámetro \"sFileName\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.3:*:*:*:*:*:*:*","matchCriteriaId":"65A6ED64-8D27-4A53-B76A-701194B67CCC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4733","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487695/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27671","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31734","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6733","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487695/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5581","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en mini-pub.php/front-end/img.php en mini-pub v0.3 permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro \"sFileName\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.3:*:*:*:*:*:*:*","matchCriteriaId":"65A6ED64-8D27-4A53-B76A-701194B67CCC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4733","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487695/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27671","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6733","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487695/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5582","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en utilities/login.asp en Nukedit v4.9.x, y posiblemente versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"email\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B0D34433-B5C7-49FB-9256-F851EDA0535C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"5582561B-CCBB-4DDF-86AF-F5726C3D6674"},{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"E0AE0BBA-DA07-4EE5-A872-78AC9A3A89EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"C141F9F8-ADD5-4294-861B-5133EF43CC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3484667C-245C-499C-AFF6-4E700DCDB4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"98B76DBC-4A11-49E1-BD86-CF67F2F9C58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C339EB97-9275-4867-AEEE-6C9B3A33A9B9"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4732","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28009","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5192","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5583","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via the query string, as demonstrated by a delete project action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en index.php en ProjectPier v0.8 y anteriores permite a atacantes remotos realizar acciones como administradores mediante una cadena de consulta, como la utilizada por la acción de borrado de proyecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:projectpier:projectpier:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"D6BC50D2-723C-41A9-A7CA-BDF57DB86C0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4734","source":"cve@mitre.org"},{"url":"http://www.projectpier.org/node/679","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488294/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27857","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/29016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.projectpier.org/node/679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488294/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-5584","sourceIdentifier":"cve@mitre.org","published":"2008-12-15T18:00:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ProjectPier v0.8 y anterior permite a atacantes remotos inyectar script web de su elección o a través de HTML (1) un mensaje, (2) un hito, o (3) un nombre mostrado en un perfil, o el (4) parametro c en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:projectpier:projectpier:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"D6BC50D2-723C-41A9-A7CA-BDF57DB86C0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/29016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4734","source":"cve@mitre.org"},{"url":"http://www.projectpier.org/node/679","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488294/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.projectpier.org/node/679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488294/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5585","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) portal/includes/portal_block.php and (2) includes/acp/acp_lcxbbportal.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivo PHP remoto en lcxBBportal 0.1 Alpha 2 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro phpbb_root_path a (1) portal/includes/portal_block.php e (2) includes/acp/acp_lcxbbportal.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lcxbbportal:lcxbbportal:0.1:alpha_2:*:*:*:*:*:*","matchCriteriaId":"54EC5D86-BE41-4C7F-AEE4-777A19D960DB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/icxbbportal-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4738","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32647","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47092","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7341","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/icxbbportal-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5586","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo findoffice.php en Check Up New Generation (alias Check New) 4.52, cuando  magic_quotes_gpc es deshabilitado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:check_up:check_new:4.52:*:*:*:*:*:*:*","matchCriteriaId":"FC9D8278-B7B7-40EA-8F3C-B2C4FACBB690"}]}]}],"references":[{"url":"http://secunia.com/advisories/32958","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4736","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32590","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5587","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en libraries/lib.inc.php en phpPgAdmin v4.2.1 y versiones anteriores, cuando register_globals está activo, permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"_language\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1","matchCriteriaId":"949313AE-AAA2-47DC-89AF-F1B25AAB620C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B268F49-4F3A-4D05-8079-05EB75E1AE8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0F2CCA02-7AE3-4CF8-A514-ABCC16CDF435"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E23D4530-0B63-459C-B7F2-84F5866CCA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A913E0DA-8076-4850-B218-F65C8A86F370"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*","matchCriteriaId":"81B74FF6-8280-4A14-B988-F58FB7915232"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A673AB66-EE9C-4873-873B-72FA25F3ADB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"45DAC8C2-1469-41EA-B155-A9F24A46DD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DEA8E6BB-8BEB-4FDF-8935-EACED78E7EA4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33263","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4737","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1693","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32670","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47140","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7363","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5588","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rankup.asp en Katy Whitton RankEm permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro siteID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*","matchCriteriaId":"EDDD735F-165E-43E7-B227-3BEC885654B2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4740","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32659","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7349","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5589","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) txtpassword parameter (aka password field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en processlogin.asp de Katy Whitton RankEm, permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro txtusername (también conocido como campo username -nombre de usuario-) o (2) el parámetro txtpassword (también conocido como campo password -contraseña-). NOTA: Algunos de estos detalles se han obtenido de informaciones de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*","matchCriteriaId":"EDDD735F-165E-43E7-B227-3BEC885654B2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33012","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32686","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47114","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7350","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5590","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forum_topic_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo customer.forumtopic.php en Kalptaru Infotech Product Sale Framework 0.1 beta que permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro forum_topic_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptaru_infotech:product_sale_framework:0.1:beta:*:*:*:*:*:*","matchCriteriaId":"681D7573-D28B-4C31-84E7-975988B8407B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47144","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7368","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5591","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other \"login fields.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS)en login.asp en Nightfall Personal Diary 1.0 permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través de parametros de usuario y otros posibles \"campos de identificación de usuario.\" NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iwrite:nightfall_personal_diary:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9C6B97F5-0CF5-45E8-8D51-3DE3CAC8EAEA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32658","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47110","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7351","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5592","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb."},{"lang":"es","value":"Nightfall Personal Diary 1.0 almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el archivo de la base de datos mediante una petición directa a users-zza21.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iwrite:nightfall_personal_diary:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9C6B97F5-0CF5-45E8-8D51-3DE3CAC8EAEA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4742","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47111","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7351","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5593","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en Mini CMS v1.0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en los parámetros (1) page y (2) admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:mini_cms:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"063D3CC1-D221-4FBF-8DF6-69815CE81A58"}]}]}],"references":[{"url":"http://secunia.com/advisories/33024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4750","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32680","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7375","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5594","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:31.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php de Mini Blog v1.0.1, permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en los parámetros (1) page (página) y (2) admin (administrar)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:mini_blog:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D969F766-CFE1-44C1-A433-5CC30085CD59"}]}]}],"references":[{"url":"http://secunia.com/advisories/33024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47149","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5595","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.asp en ASP AutoDealer permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:asp_autodealer:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C5D2A636-B77B-4679-AB87-E8CC2D321AA8"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/aspautodealer-sqldisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32663","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47123","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7356","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/aspautodealer-sqldisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5596","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb."},{"lang":"es","value":"Ikon AdManager 2.1 y versiones anteriores, almacena información sensible bajo la raíz web con control insuficiente de acceso, el cual permite a los atacantes remotos, descargar archivos de la base de datos a través de peticiones directas para ikonBAnner_AdManager.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetindex:ikon_admanager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"80702DAD-F047-4E5D-84C8-99F073A68B7F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4755","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7372","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5597","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb."},{"lang":"es","value":"Cold BBS almacena información sensible en la raíz web con control de acceso insuficiente, esto permite a atacantes remotos descargar el fichero de la base de datos a través de una solicitud directa de db/cforum.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cold_bbs:cold_bbs:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"893E8B12-F35F-4AEF-973E-2E817729BEAE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4756","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47128","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7353","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5598","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dot dot) in the group parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en PHPmyGallery 1.51 gold permite a atacantes remotos listar directorios de su elección a través de .. (punto punto) en el parámetro \"group\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmygallery:phpmygallery:1.51:gold:*:*:*:*:*:*","matchCriteriaId":"92A942F9-F969-4992-805B-7B0D803D86C6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32678","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7377","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5599","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp en Merlix Teamworx Server permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro password (también conocido como passwd field) en una accion login. NOTA: algunos de estos detalles se han obtenido de información de terceros,"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merlix:teamworx_server:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"F3070FF5-1336-4AA5-B971-63A04445EF35"}]}]}],"references":[{"url":"http://secunia.com/advisories/33009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4757","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32660","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47126","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5600","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb."},{"lang":"es","value":"Merlix Teamworx Server graba información sensible bajo el administrador web con insuficientes controles de acceso, el cual permite a los atacantes remotos, descargar un archivo de base de datos a través de una petición directa a teamworx.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merlix:teamworx_server:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"F3070FF5-1336-4AA5-B971-63A04445EF35"}]}]}],"references":[{"url":"http://secunia.com/advisories/33009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4757","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47125","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5601","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb."},{"lang":"es","value":"User Engine Lite ASP almacena información sensible bajo la raíz web con controles de acceso insuficientes, lo cual permite a atacantes remotos descargar el fichero \"database\" a través de una petición directa para users.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robs-projects:asp_user_engine:_nil_:lite:*:*:*:*:*:*","matchCriteriaId":"4D13372F-44A3-4562-B66C-035D1A73ACD1"}]}]}],"references":[{"url":"http://osvdb.org/50439","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32993","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4758","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7338","source":"cve@mitre.org"},{"url":"http://osvdb.org/50439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5602","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb."},{"lang":"es","value":"Natterchat v1.12 almacena información sensible en la raíz web con un control de acceso insuficiente, esto permite a atacantes remotos descargar el fichero de la base de datos a través de una solicitud directa de natterchat112.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:natterchat:natterchat:1.12:*:*:*:*:*:*:*","matchCriteriaId":"754CD03A-0BC5-41F8-8374-E2C2FB758D41"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47147","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7370","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5603","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for news.mdb."},{"lang":"es","value":"ASPTicker v1.0 almacena información sensible en el root de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de la base de datos a través de una petición directa a news.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:aspticker:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F4FDEA56-B558-446C-B26C-232CE87D6670"}]}]}],"references":[{"url":"http://secunia.com/advisories/23573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4762","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47143","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7359","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5604","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en My Simple Forum 3.0 y 4.1, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante .. (punto punto) en el parámetro acción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drennansoft:my_simple_forum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54E65475-A2CE-408B-AC96-9BEB170806D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drennansoft:my_simple_forum:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6013D87E-8A09-49CB-AECB-E56A89A588E7"}]}]}],"references":[{"url":"http://osvdb.org/50433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32984","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4765","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32643","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47097","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7342","source":"cve@mitre.org"},{"url":"http://osvdb.org/50433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5605","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el Portal ASP, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) ItemID en classifieds.asp y (2) ID en Events.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:aspportal:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"549F4FF9-A8F0-471A-BA91-72FE6CFDEA55"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4763","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32662","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47268","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7357","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5606","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb."},{"lang":"es","value":"Gazatem QMail Mailing List Manager 1.2 almacena información sensible bajo la raíz web con control de acceso insuficiente, lo cual permite a atacantes remotos descargar el fichero \"database\" a través de una petición directa para qmail.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gazatem_technologies:qmail_mailing_list_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9064460D-9CF6-4040-B12A-F349E7B98072"}]}]}],"references":[{"url":"http://secunia.com/advisories/33008","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4764","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47152","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7376","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5607","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en el componente JMovies v1.1 (anteriormente conocido como JM o com_jmovies) para Joomla! permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"id\" a index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomitaly:jmovies:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6218C11D-4056-47A8-AA8F-7DD7E84B6FD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32615","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7331","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5608","sourceIdentifier":"cve@mitre.org","published":"2008-12-16T19:07:32.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb."},{"lang":"es","value":"ASP AutoDealer almacena información sensible en el root de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de la base de datos a través de una petición auto.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:asp_autodealer:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C5D2A636-B77B-4679-AB87-E8CC2D321AA8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4754","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47124","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7356","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7360","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5609","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Commerce extensión 0.9.6 y versiones anteriores para TYPO3, permite a los atacante remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:commerce_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.6","matchCriteriaId":"07BD4059-03F2-47DC-953B-0208B5B2C10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:commerce_extension:0.8.32:*:*:*:*:*:*:*","matchCriteriaId":"C51C314A-C313-455A-928D-C97E94440714"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:commerce_extension:0.8.35:*:*:*:*:*:*:*","matchCriteriaId":"CB0ADEE1-4140-41FF-B78B-E24021810E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:commerce_extension:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A18B8F33-2E7A-41A0-955B-96E20E8D85A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:commerce_extension:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B6856341-7D9C-4147-AF64-192CBD0C849B"}]}]}],"references":[{"url":"http://typo3.org/extensions/repository/view/commerce/0.9.7/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-2/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"cve@mitre.org"},{"url":"http://typo3.org/extensions/repository/view/commerce/0.9.7/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081020-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5616","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T01:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función demux_open_vqf en libmpdemux/demux_vqf.c en MPlayer v1.0 rc2 anterior a r28150 que permite a atacantes remotos ejecutar código a su elección a través de un fichero malformado TwinVQ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0_rc1","matchCriteriaId":"CB911389-3DF4-407A-B2B0-ADFD14763DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*","matchCriteriaId":"2AD73BA0-D315-4ADA-A942-8DCC2A920B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*","matchCriteriaId":"710ACCE6-B3E3-474A-B78B-5A123EC24DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*","matchCriteriaId":"55D3C3E6-862E-470E-8CEA-4B333B906172"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*","matchCriteriaId":"30D6A539-5523-4E52-854A-82CDCDBDFC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CA841B0B-8FA9-45F9-9B60-7C9BD1A92E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*","matchCriteriaId":"91907AEA-D84F-4DD9-AD22-41E563182FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"D200DE0F-D8BB-460D-928E-E59473F84B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*","matchCriteriaId":"5103A1E1-670A-4527-9FB8-9D8B0DA506D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"500E5BD7-3F17-455F-8463-50B145128873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"3BE4C532-1756-4B2E-94EE-8F8253281F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"0E6875BE-67F1-4E0E-A610-7B6EDBAB6431"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*","matchCriteriaId":"4E74EBC5-296E-4B20-8BCB-F104D06595AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"29A09BDA-DA05-4512-9E39-14819C410CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:*","matchCriteriaId":"A5650520-0CCA-47C1-A7B8-8A6129BE6B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:*","matchCriteriaId":"FD1FAB76-B1DB-400E-9224-09E82D9A8847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:*","matchCriteriaId":"D4D18950-F883-47D1-B95B-6F46F2F6F701"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre6:*:*:*:*:*:*:*","matchCriteriaId":"00928380-0E20-4678-98B7-18A634164F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7:*:*:*:*:*:*:*","matchCriteriaId":"A671EC1E-A917-4A9C-8254-7885FF612D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre7try2:*:*:*:*:*:*:*","matchCriteriaId":"430103FB-6255-4581-A7DC-F218E5B86D4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33136","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34845","source":"cve@mitre.org"},{"url":"http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?r1=24723&r2=28150&pathrev=28150","source":"cve@mitre.org"},{"url":"http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?view=log&pathrev=28150#rev28150","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2008-014.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1782","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:013","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499214/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?r1=24723&r2=28150&pathrev=28150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?view=log&pathrev=28150#rev28150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2008-014.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499214/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5617","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T02:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages."},{"lang":"es","value":"El manejador ACL de rsyslog v3.12.1 hasta v3.20.0, v4.1.0 y v4.1.1, no sigue la directiva $AllowSender, lo que permite a atacantes remotos evitar las restricciones de acceso pretendidas y falsear los mensajes de registro (log) o crear un gran número de mensajes falsos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of the rsyslog package, as shipped with Red Hat Enterprise Linux 5.","lastModified":"2008-12-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.12.1:*:*:*:*:*:*:*","matchCriteriaId":"89BF4CB5-5DBF-4D3F-BB71-EAA44A433D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.12.2:*:*:*:*:*:*:*","matchCriteriaId":"AFB62852-2AB0-4DD8-8742-8852E35680BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B1CD4DC0-12FC-49C5-B2A0-2934ADFEC45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.12.4:*:*:*:*:*:*:*","matchCriteriaId":"E4F8C757-DC7C-4611-BFB3-E2D909EBAFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B4268BBF-CEFE-4DC0-A540-20BDA4F61BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.13.0:*:*:*:*:*:*:*","matchCriteriaId":"B2ADEB3C-EC09-404B-B301-CF67106EC98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.15.0:*:*:*:*:*:*:*","matchCriteriaId":"FE774463-3916-4BF5-A8C5-796CD1FD4AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.15.1:beta:*:*:*:*:*:*","matchCriteriaId":"ECAECD24-A1B6-4B51-93D4-64CCEEDEB5CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.17.0:*:*:*:*:*:*:*","matchCriteriaId":"6E9185C1-A2A4-490B-B054-DE337D4BBAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.17.1:*:*:*:*:*:*:*","matchCriteriaId":"0831F7D3-6E65-4D92-8295-64F0649EDA2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.17.4:beta:*:*:*:*:*:*","matchCriteriaId":"D9EBE646-1515-4E30-8D6B-B5320A07F798"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.17.5:beta:*:*:*:*:*:*","matchCriteriaId":"12E5FB1C-08E9-4597-B729-9E9D7C7BBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.0:*:*:*:*:*:*:*","matchCriteriaId":"CDA49F2C-F679-4CB6-912F-E1C8F23C3E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.1:*:*:*:*:*:*:*","matchCriteriaId":"5EE3C64E-1596-4AF8-A335-0BDDC9A47C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.2:*:*:*:*:*:*:*","matchCriteriaId":"C016F6A1-83BF-4ED7-B811-44DB7B19B60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.3:*:*:*:*:*:*:*","matchCriteriaId":"2A3A2E1E-7492-486A-916F-B9DDD0E2810C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.4:*:*:*:*:*:*:*","matchCriteriaId":"FDE04C46-348E-4772-BDFC-7A43399741E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.5:*:*:*:*:*:*:*","matchCriteriaId":"37C49996-20B7-4763-AA6A-92EFDA69CF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.6:*:*:*:*:*:*:*","matchCriteriaId":"947E1B5B-E1F7-4770-9163-E8583F631810"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.7:*:*:*:*:*:*:*","matchCriteriaId":"89608E18-768A-4EA1-BEC2-05DEA93C85AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.8:*:*:*:*:*:*:*","matchCriteriaId":"B64A837C-553D-433A-9904-FAE91B897DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.9:*:*:*:*:*:*:*","matchCriteriaId":"5907B692-CCD4-40E8-B5FC-E0606996F044"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.10:*:*:*:*:*:*:*","matchCriteriaId":"90C6D691-8ACB-497C-B90B-CAEDE54965B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.11:*:*:*:*:*:*:*","matchCriteriaId":"6C042D96-9BB4-40F5-B752-0F1DE06BA458"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.19.12:*:*:*:*:*:*:*","matchCriteriaId":"EA326A8D-069A-4C60-B1E8-D83CD2E70DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.20.0:*:*:*:*:*:*:*","matchCriteriaId":"47275436-0B5A-4BC6-A3F6-2232BF8D36D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"841185A1-0CD7-4965-A40A-45836037B910"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4AB0A79C-E420-468E-9388-5E19EA54EA89"}]}]}],"references":[{"url":"http://secunia.com/advisories/32857","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rsyslog.com/Article322.phtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rsyslog.com/Article327.phtml","source":"cve@mitre.org"},{"url":"http://www.rsyslog.com/Topic4.phtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32630","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47080","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rsyslog.com/Article322.phtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rsyslog.com/Article327.phtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rsyslog.com/Topic4.phtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5618","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T02:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service (disk consumption) via a large number of spurious messages."},{"lang":"es","value":"imudp en rsyslog 4.x versiones anteriores a 4.1.2, 3.21 versiones anteriores a 3.21.9 beta, y 3.20 versiones anteriores a 3.20.2 genera un mensaje aún cuando es enviado por un remitente no autorizado, el cual permite a los atacantes remoto causar una denegación de servicios (consumo de disco) a través de un número largo de mensajes falsos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of the rsyslog package, as shipped with Red Hat Enterprise Linux 5.","lastModified":"2008-12-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.12.1:*:*:*:*:*:*:*","matchCriteriaId":"89BF4CB5-5DBF-4D3F-BB71-EAA44A433D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:3.20.0:*:*:*:*:*:*:*","matchCriteriaId":"47275436-0B5A-4BC6-A3F6-2232BF8D36D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"841185A1-0CD7-4965-A40A-45836037B910"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsyslog:rsyslog:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4AB0A79C-E420-468E-9388-5E19EA54EA89"}]}]}],"references":[{"url":"http://www.rsyslog.com/Topic4.phtml","source":"cve@mitre.org"},{"url":"http://www.rsyslog.com/Topic4.phtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5619","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T02:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch."},{"lang":"es","value":"html2text.php en Chuggnutt HTML a Text Converter, como se usa en PHPMailer en versiones anteriores a 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha y 0.2-3.beta, Mahara y AtMail Open 1.03, permite a atacantes remotos ejecutar código arbitrario a través de entrada manipulada que se procesa por la función preg_replace con el interruptor de eval."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2.1:alpha:*:*:*:*:*:*","matchCriteriaId":"F467A8BF-1792-47E1-9C3D-4A4AB0DD17AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2.3:beta:*:*:*:*:*:*","matchCriteriaId":"E083F7E9-44BE-4247-B93B-20E326D7FBF0"}]}]}],"references":[{"url":"http://mahara.org/interaction/forum/topic.php?id=533","source":"cve@mitre.org"},{"url":"http://osvdb.org/53893","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33145","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33170","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34789","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=898542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.roundcube.net/changeset/2148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://trac.roundcube.net/ticket/1485618","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/12/12/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499489/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3418","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3419","source":"cve@mitre.org"},{"url":"https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7549","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7553","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html","source":"cve@mitre.org"},{"url":"http://mahara.org/interaction/forum/topic.php?id=533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=898542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.roundcube.net/changeset/2148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://trac.roundcube.net/ticket/1485618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/12/12/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499489/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5620","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T02:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image."},{"lang":"es","value":"RoundCube Webmail (roundcubemail) antes de la v0.2-beta permite a atacantes remotos producir una denegación de servicio (agotamiento de memoria) a través de parámetros de tamaño manipulados  que son usado para crear una imagen de cuota grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:*:alpha:*:*:*:*:*:*","versionEndIncluding":"0.2","matchCriteriaId":"26E8CB38-3388-4150-8DE1-5F89B1DEA0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4C785B00-7F4D-4EBD-A9FA-726D4D35E5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20050811:*:*:*:*:*:*","matchCriteriaId":"6E525B8F-ED49-494A-A9C1-CCFFDCFAAA11"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20050820:*:*:*:*:*:*","matchCriteriaId":"A9C38F5E-A79B-45F4-AD0C-894DE7ADD8EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20051007:*:*:*:*:*:*","matchCriteriaId":"8BDB7224-1922-41BC-82F1-187DEEEE60DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20051021:*:*:*:*:*:*","matchCriteriaId":"9019C121-5D96-4967-92FA-AA63FAD40435"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8F433741-5F73-43B5-A522-C484C64C66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:beta:*:*:*:*:*:*","matchCriteriaId":"09DF755B-041E-4A61-BEF6-A613F6F0CE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"34D20437-7DE7-4DB8-8C11-37B09A87E3A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"55FB4AA3-3528-46B7-BBB9-9185DAA5425C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"066AA2BC-95A8-43E8-A1FE-9F15860691E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:stable:*:*:*:*:*:*","matchCriteriaId":"BADA5A07-C90D-4000-A973-0A918E390D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"82FB886B-35A4-4A8C-AE18-62C845886018"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"83FF6973-9BAC-4DF2-BACE-42F0D9340A27"}]}]}],"references":[{"url":"http://sourceforge.net/forum/forum.php?forum_id=898542","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47550","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=898542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5621","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T02:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter.  NOTE: other unspecified pages are also reachable, but they have the same root cause.  NOTE: this can be leveraged to conduct SQL injection attacks and execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en phpMyAdmin v2.11.x anterior a v2.11.9.4 y v3.x anterior a v3.1.1.0; permite a atacantes remotos realizar acciones no autorizadas como administrador a través de un enlace o etiqueta IMG a tbl_structure.php con un parámetro \"table\" (tabla) modificado. NOTA: esto puede ser utilizar para realizar ataques de inyección SQL y ejecutar código arbitrariamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AF4BA83-50C0-4D90-9755-CC99A0FF987E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A26E7D37-FA99-42EA-8E19-ED2343E8E70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A982E152-5A20-4A3A-9A98-6CF9EEF9141A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA11353-1DD1-4593-84E8-1D3CBB2C2166"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0C19FB-60DF-440F-9A32-B9C62EBA9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50894","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33246","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-32.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4753","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-1/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1723","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/1","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32720","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3402","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47168","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7382","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00784.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5622","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T02:30:00.313","lastModified":"2023-11-07T02:03:14.860","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-5621.  Reason: This candidate is a duplicate of CVE-2008-5621.  Notes: All CVE users should reference CVE-2008-5621 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-5624","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting of /etc for the error_log variable."},{"lang":"es","value":"PHP 5 en versiones anteriores a 5.2.7, no inicializa propiamente las variable page_uid y page_gid global para ser usadas por la función SAPI php_getuid, el cual permite a los atacante dependientes de contexto evitar la restricciones safe_mode a través de parámetros variables que pretende ser restringida para el directorio raíz, como demuestra por un parámetro de /etc para la variable error_log."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider these to be security issues. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php","lastModified":"2009-03-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50483","source":"cve@mitre.org"},{"url":"http://osvdb.org/52207","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/59","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32688","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47318","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/59","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5625","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a \"php_value error_log\" entry in a .htaccess file."},{"lang":"es","value":"PHP 5 versiones anteriores a 5.2.7 no cumple las restricciones error_log safe_mode cuando safe_mode está activado a través de un parámetro php_admin_flag en httpd.conf, el cual permite a los atacantes dependiente de contexto escribir arbitrariamente archivos colocando una entrada \"php_value error_log\" en un archivo .htaccess."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider this to be a security issue. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php","lastModified":"2009-03-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.6","matchCriteriaId":"9FCD404F-54C5-4DFF-ABC3-F0745C5BC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0152.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/52205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/57","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7171","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/57","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5626","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument."},{"lang":"es","value":"XM Easy Personal FTP Server 5.6.0 permite a los usuarios remotos autentificados causar una denegación de servicios a través de un argumento manipulado para el comando NLST, como se demuestra por un argumento -1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"598B123B-FD3D-4FC8-90EA-A045641BBEE6"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4766","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31739","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2803","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6741","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5627","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter (aka Email field) or the (2) password parameter. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo account.asp en Active Trade 2 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) username (alias campo Email) o (2) password. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_trade:2.0:*:*:*:*:*:*:*","matchCriteriaId":"297A8DB2-0846-4289-8534-2F3D946B95FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32941","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46911","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7282","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5628","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en CMS little 0.0.1 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro term."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:little_cms:little_cms:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E7AE4469-4197-492B-B982-63523B9905D9"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4781","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32523","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46931","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7269","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5629","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a play action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php in Turnkey Arcade Script que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id en una acción play."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyarcade:turnkey_arcade_script:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"F025DE8F-960D-45A3-A1B6-7322C5F999BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46935","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7256","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5630","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL commands via the umprof_status parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo merchants/index.php en Post Affiliate Pro 3 y 3.1.4 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro umprof_status."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualityunit:post_affiliate_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"18F3117A-2DAD-4DA7-8567-72E51436E77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualityunit:post_affiliate_pro:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5AC6CBF0-375B-4C66-8357-E38323AC8636"}]}]}],"references":[{"url":"http://secunia.com/advisories/32898","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4780","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32487","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3271","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46887","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7238","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5631","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo start.asp en Active eWebquiz 8.0 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) useremail (alias campo username) o (2) password. NOTA: algunas de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_ewebquiz:8.0:*:*:*:*:*:*:*","matchCriteriaId":"6051716A-FB00-434A-9C30-3CEAB0FA8D5A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32927","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46910","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7279","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5632","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo Account.asp en Active Time Billing 3.2 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) username y (2) password, posiblemente relativos al archivo start.asp. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_time_billing:3.2:*:*:*:*:*:*:*","matchCriteriaId":"FBD441B8-3CE5-4DB7-AF22-F741401EE71B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3295","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7301","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5633","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo register.asp en ActiveVotes 2.2 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de parámetros (1) username y (2) password, posiblemente relativos al archivo start.asp. NOTA algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:activevotes:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A25FB95A-B1A9-42B6-9FAD-8C0AF80B3BFA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46925","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5634","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"vulnerabilidad de inyección SQL en el archivo account.asp en Active Force Matrix 2.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) username y (2) password, posiblemente relativos a start.asp. NOTA: Algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_force_matrix:2.0:*:*:*:*:*:*:*","matchCriteriaId":"236E3313-530A-4346-8006-5E49A05AF12B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46927","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7273","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5635","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo account.asp en Active Membership 2.0 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) username y (2) password, posiblemente relativos a start.asp. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_membership:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0F8FE1-199E-4001-9E77-EB39B99F4C49"}]}]}],"references":[{"url":"http://secunia.com/advisories/32895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46917","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5636","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cate.php in Lito Lite CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cate.php en Lito Lite CMS, cuando magic_quotes_gpc esta inactivo, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lovedesigner:lito_lite_cms:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"149B81D3-8B07-4093-98A3-FF15ACFCA585"}]}]}],"references":[{"url":"http://secunia.com/advisories/32910","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4779","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32538","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3300","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46923","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5637","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands via the wr parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en blog.asp en ParsBlogger (Pb) permitiría a atacantes remotos ejecutar comando SQL a su elección a través del parámetro \"wr\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parsblogger:parsblogger:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"E83CA04F-C609-4378-98B3-EB0CC5FE647F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4778","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32488","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3270","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7239","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5638","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Active Price Comparison v4 permitiría a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1) \"ProductID\" a reviews.aspx o (2) \"linkid\" a links.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_price_comparison:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5BB3C7E1-A26E-4E6E-98F4-3AE16D45D144"}]}]}],"references":[{"url":"http://secunia.com/advisories/32896","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46908","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7300","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5639","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to read arbitrary files via a .. (dot dot) in the m parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en TxtBlog v1.0 alfa permitiria a atacantes remotos leer ficheros a su eleccion a traves de .. (doble punto) en el parametro \"m\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:txtblogcms:txtblog:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"6534CADE-5D2A-4CF9-B1D5-C3875F8C76D3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4777","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32498","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46902","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7241","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5640","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bidhistory.asp en Active Bids v3.5 permitiría a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro ItemID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_bids:3.5:*:*:*:*:*:*:*","matchCriteriaId":"55B0048B-4E88-4F46-9054-D450B7B0B1A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/32920","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4776","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32544","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3302","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46912","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7290","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5641","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en account.asp en Active Photo Gallery v6.2 permitiria a atacantes remotos ejecutar comandos SQL a su eleccion a traves de los parametros (1) username and (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_photo_gallery:6.2:*:*:*:*:*:*:*","matchCriteriaId":"6A74F05C-6F3B-4A48-BA9F-C372ECD621EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32901","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4767","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3297","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7299","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5642","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T17:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a cms_language cookie."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/login.php en CMS Made Simple v1.4.1 permitiria a atacantes remotos leer ficheros a su eleccion a traves de .. (doble punto) en la cookie cms_language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2DC37F28-C58A-4492-A107-4348ECE9AAFA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32924","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4775","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32535","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46942","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7285","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5643","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Books (com_books) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter in a book_details action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Books (com_books) para Joomla! permitiría a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro book_id en la acción book_details en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_books:*:*:*:*:*:*:*:*","matchCriteriaId":"13DA9E7A-94CC-478A-A19A-834FB280B4C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4774","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32255","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46561","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7092","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5644","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el modulo file backend en TYPO3 v4.2.2 permitiría a atacantes remotos inyectar comandos web o HTML a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"}]}]}],"references":[{"url":"http://secunia.com/advisories/32689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081113-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32284","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3144","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46585","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081113-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5645","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el media server en Orb Networks Orb anteriores a v2.01.0022 permite a atacantes remotos leer ficheros a su elección a través de secuencia de salto de directorio en un petición HTTP GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.01.0017","matchCriteriaId":"111FB028-90B6-4B68-959E-E6FBA290727B"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.0930:*:*:*:*:*:*:*","matchCriteriaId":"D8654991-E3D4-4839-A912-71689C84A9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.0989:*:*:*:*:*:*:*","matchCriteriaId":"154F5BF6-3F5C-40F2-A02F-7A265423CAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.0.1014:*:*:*:*:*:*:*","matchCriteriaId":"7847C210-7ADE-448A-BFE8-162411CABB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.1014:*:*:*:*:*:*:*","matchCriteriaId":"EFFCCA29-35F9-46A5-9AB6-25817630D4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.00.1084:*:*:*:*:*:*:*","matchCriteriaId":"5E428767-B896-453B-A092-B6EA6443F885"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0008:*:*:*:*:*:*:*","matchCriteriaId":"2E8FCDF0-A5D6-4BDD-BBAB-767EB7CFE7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0013:*:*:*:*:*:*:*","matchCriteriaId":"77584A71-1EB5-4E9D-8C3A-B730B5356156"},{"vulnerable":true,"criteria":"cpe:2.3:a:orb_networks:orb:2.01.0015:*:*:*:*:*:*:*","matchCriteriaId":"B7ACD0E2-A74B-4505-96CE-E1FE7D30ED8D"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=122606860208526&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32592","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4773","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32187","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3082","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46461","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=122606860208526&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5646","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to \"certain wiki markup.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Trac anterior a v0.11.2, permite a los atacantes provocar una denegación de servicio a través de vectores de ataque desconocidos relacionados con \"determinado marcado wiki\" (certain wiki markup)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0ADC7E-AE8D-467D-AAD4-CFBCB2402E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.2.1","matchCriteriaId":"A4D3A263-EA90-4550-8049-BB770C9CC681"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.5:*:*:*:*:*:*:*","matchCriteriaId":"F0C99624-9190-42FF-BDE9-A7A5938EDECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"04F968D4-9691-4ED1-A412-7DF43898863C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE1121C-5E38-4811-A9BA-3122EF00941D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF9D8496-03C6-4C9E-9511-B32EE1AD6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4AC75E-2EE6-4333-9AA5-B26571CA86AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.7:*:*:*:*:*:*:*","matchCriteriaId":"A370F182-C0BF-4E53-81B5-57E03974FA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"9C37AA14-7184-4FFC-BEDE-B567EE315E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8:*:*:*:*:*:*:*","matchCriteriaId":"661C665F-A7F1-4631-B232-1DC9A2635E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"9710175D-AB7F-4416-9BD6-DD9BD9D0D322"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3829D131-F1DB-426E-82C9-C39CBC1D8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9410D67A-6338-4076-AF88-9DFAB701E1FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9239A5E2-62D4-4100-BA88-B114FE5944F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9:*:*:*:*:*:*:*","matchCriteriaId":"39206222-52BA-49B3-B2D8-1AFB247AA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9:b1:*:*:*:*:*:*","matchCriteriaId":"BF8C0FF0-98FF-463F-B9F0-B26DC587CE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9:b2:*:*:*:*:*:*","matchCriteriaId":"ED00A360-A4BD-44A9-BF88-A81257CF5E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CEEE9CAF-6A17-4B68-988B-2EA0183FC45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"CE0E4289-9154-4547-8DAA-51536706EFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"7836864F-1F39-479A-99D0-A00247711FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"14D2B12D-3479-435C-BF76-158C4152C548"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E9AC7C92-2D82-470E-A04A-5C2B5AAA8CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"87EB909D-2F50-456E-9339-31617A9FC64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10:*:*:*:*:*:*:*","matchCriteriaId":"351C68FA-9A8E-4E65-BD8E-44F5BBDAFE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"76B67191-EBC8-4679-9434-9AF56E9151B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"CA90857B-FA3A-4DD8-A20D-04837CCFFF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"3012B1CE-686F-4F0E-BCB2-790D7C30D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F826915A-400C-4DC8-83A3-6EC158ACE0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"D1E1B93B-A614-45FA-8158-538213B8E441"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"1BB1EA1E-C8FC-4463-B48A-22A6CEB1E76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.11:*:*:*:*:*:*:*","matchCriteriaId":"8E33E8D3-578A-4B4F-8696-FEE41B5947DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"5835EE6F-06BE-49D9-BDDC-A347E0683EF4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32226","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46492","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5647","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el filtro HTML sanitizer de Trac anterior a 0.11.2, permite a los atacantes dirigir ataques de phishing a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0ADC7E-AE8D-467D-AAD4-CFBCB2402E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.2.1","matchCriteriaId":"A4D3A263-EA90-4550-8049-BB770C9CC681"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.5:*:*:*:*:*:*:*","matchCriteriaId":"F0C99624-9190-42FF-BDE9-A7A5938EDECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"04F968D4-9691-4ED1-A412-7DF43898863C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1EE1121C-5E38-4811-A9BA-3122EF00941D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF9D8496-03C6-4C9E-9511-B32EE1AD6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4AC75E-2EE6-4333-9AA5-B26571CA86AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.7:*:*:*:*:*:*:*","matchCriteriaId":"A370F182-C0BF-4E53-81B5-57E03974FA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"9C37AA14-7184-4FFC-BEDE-B567EE315E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8:*:*:*:*:*:*:*","matchCriteriaId":"661C665F-A7F1-4631-B232-1DC9A2635E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"9710175D-AB7F-4416-9BD6-DD9BD9D0D322"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3829D131-F1DB-426E-82C9-C39CBC1D8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9410D67A-6338-4076-AF88-9DFAB701E1FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9239A5E2-62D4-4100-BA88-B114FE5944F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9:*:*:*:*:*:*:*","matchCriteriaId":"39206222-52BA-49B3-B2D8-1AFB247AA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9:b1:*:*:*:*:*:*","matchCriteriaId":"BF8C0FF0-98FF-463F-B9F0-B26DC587CE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9:b2:*:*:*:*:*:*","matchCriteriaId":"ED00A360-A4BD-44A9-BF88-A81257CF5E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CEEE9CAF-6A17-4B68-988B-2EA0183FC45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"CE0E4289-9154-4547-8DAA-51536706EFE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"7836864F-1F39-479A-99D0-A00247711FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"14D2B12D-3479-435C-BF76-158C4152C548"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E9AC7C92-2D82-470E-A04A-5C2B5AAA8CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"87EB909D-2F50-456E-9339-31617A9FC64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10:*:*:*:*:*:*:*","matchCriteriaId":"351C68FA-9A8E-4E65-BD8E-44F5BBDAFE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"76B67191-EBC8-4679-9434-9AF56E9151B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"CA90857B-FA3A-4DD8-A20D-04837CCFFF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"3012B1CE-686F-4F0E-BCB2-790D7C30D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F826915A-400C-4DC8-83A3-6EC158ACE0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"D1E1B93B-A614-45FA-8158-538213B8E441"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"1BB1EA1E-C8FC-4463-B48A-22A6CEB1E76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.11:*:*:*:*:*:*:*","matchCriteriaId":"8E33E8D3-578A-4B4F-8696-FEE41B5947DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:trac:trac:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"5835EE6F-06BE-49D9-BDDC-A347E0683EF4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32226","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46491","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.edgewall.org/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5648","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrary SQL commands via the admin_username parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo admin/login.php en DeltaScripts PHP Shop 1.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro admin_username. NOTA: alguno de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_shop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B91592E0-A425-47F4-8F4E-BD0ECC25329B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32162","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46429","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7025","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5649","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/admin.php de AlstraSoft Article Manager Pro v1.6, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\" (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:article_manager_pro:1.6:*:*:*:*:*:*:*","matchCriteriaId":"260942FF-4FA5-45A5-8EA4-B6C064F3A510"}]}]}],"references":[{"url":"http://secunia.com/advisories/32665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4772","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3140","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46588","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7102","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5650","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el directorio login (registro) de AlstraSoft Web Host Directory, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:webhost_directory:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"058FCC46-ED96-44B9-AEA2-1EFFC3101C21"}]}]}],"references":[{"url":"http://secunia.com/advisories/32660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32298","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46592","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7103","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5651","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the Parent parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en plugins/bookmarker/bookmarker_backend.php de MyioSoft EasyBookMarker v4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Parent\" (Padre)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easybookmarker:4.0:*:*:*:*:*:*:*","matchCriteriaId":"10EA4E62-A981-43E9-817C-941A6C0D4958"}]}]}],"references":[{"url":"http://osvdb.org/49690","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32200","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46474","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7053","source":"cve@mitre.org"},{"url":"http://osvdb.org/49690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5652","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función loginADP en ajaxp.php en MyioSoft EasyBookMarker 4.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro rsargs, como alcanzable a través del parámetro username. NOTA: algunos de estos detalles ha sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easybookmarker:4.0:*:*:*:*:*:*:*","matchCriteriaId":"10EA4E62-A981-43E9-817C-941A6C0D4958"}]}]}],"references":[{"url":"http://osvdb.org/49701","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32673","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32199","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46447","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7045","source":"cve@mitre.org"},{"url":"http://osvdb.org/49701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5653","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función loginADP de ajaxp.php de MyioSoft AjaxPortal v3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro rsargs, como se puede alcanzar a través del parámetro \"username\" (nombre de usuario). NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft.com:ajaxportal:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A495D32-547A-4B0E-BEB6-D2FF4350CF42"}]}]}],"references":[{"url":"http://osvdb.org/49700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32673","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32199","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7044","source":"cve@mitre.org"},{"url":"http://osvdb.org/49700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5654","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función loginADP de ajaxp.php de MyioSoft EasyCalendar v4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro rsargs, como se puede alcanzar a través de parámetro \"username\" (nombre de usuario). Se trata de una vulnerabilidad diferente de CVE-2008-1344. NOTA: Algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easycalendar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CAC7ADFF-EB3F-4DDE-995C-F9E961988BC9"}]}]}],"references":[{"url":"http://osvdb.org/49702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32673","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32199","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46448","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7046","source":"cve@mitre.org"},{"url":"http://osvdb.org/49702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5655","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T18:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) delete_folder and (2) delete_link parameters to unspecified vectors, possibly to (a) plugins/bookmarker/bookmarker_backend.php or (b) ajaxp.php, different vectors than CVE-2008-5654.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en MyioSoft EasyBookMarker 4.0 permiten a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de parámetros (1) delete_folder y (2) delete_link para vectores no especificados, posiblemente para (a) plugins/bookmarker/bookmarker_backend.php o (b) ajaxp.php, es una vulnerabilidad diferente que CVE-2008-5654. NOTA: la procedencia de esta información es desconocida; los detalles son obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:easybookmarker:4.0:*:*:*:*:*:*:*","matchCriteriaId":"10EA4E62-A981-43E9-817C-941A6C0D4958"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/3075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47684","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5656","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en la extensión de interfaz externo (frontend plugin) para la extensión de sistemas Felogin en TYPO3 4.2.0, 4.2.1 y 4.2.2, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081113-2/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32284","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46591","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081113-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5657","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en Quassel Core anterior a 0.3.0.3, permite a atacantes remotos falsear mensajes IRC haciéndose pasar por otro usuario, utilizando un mensaje CTCP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.0.2","matchCriteriaId":"79924FF3-6DFE-44A2-BE21-DDC8C671F8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"417555E8-78DE-4C1E-8573-17EF781FE4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"92BA24A0-AA72-4F4C-B275-86B36036D582"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"0CDE6576-000F-4149-BB56-A2102AE5E7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"63819AAD-8D1C-45F0-81AB-CD5B5C34EDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"BCC7024C-7F2C-427B-B979-437251136BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"12DDD9FE-A251-469B-8B06-10498A141B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E47C7D10-D188-47C0-9BD1-0ECE21216EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:pre:*:*:*:*:*:*","matchCriteriaId":"0BA6FDC2-BF11-44DE-A569-CA3A957CF2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"95440603-CF24-4606-9E30-FBB09C9D6C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB132B8E-CBB7-4C40-85B3-86CDFE3F44B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.3.0:pre:*:*:*:*:*:*","matchCriteriaId":"C6315569-0DE5-4D58-BD20-BE2D86B39B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:quassel:quassel_core:0.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5F2CEE42-1C59-4698-9FFF-567894463D20"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506550","source":"cve@mitre.org"},{"url":"http://quassel-irc.org/node/89","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32692","source":"cve@mitre.org"},{"url":"http://wouter.coekaerts.be/site/security/quassel-ctcp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497882/30/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31973","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3164","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46195","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00354.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://quassel-irc.org/node/89","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wouter.coekaerts.be/site/security/quassel-ctcp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497882/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00354.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5658","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la función ZipArchive::extractTo de PHP 5.2.6 y anteriores, permite a atacantes dependientes del contexto escribir ficheros de su elección a través de un archivo ZIP con un fichero que contenga la secuencia .. (punto punto)."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect PHP versions as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5, and Red Hat Application Stack v1. PHP version in Red Hat Application Stack v2 was fixed via: https://rhn.redhat.com/errata/RHSA-2009-0350.html","lastModified":"2009-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.6","matchCriteriaId":"9FCD404F-54C5-4DFF-ABC3-F0745C5BC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0039.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35650","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/04/3","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32625","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021303","source":"cve@mitre.org"},{"url":"http://www.sektioneins.de/advisories/SE-2008-06.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47079","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/04/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/advisories/SE-2008-06.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5659","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys."},{"lang":"es","value":"La clase gnu.java.security.util.PRNG en GNU Classpath 0.97.2 y versiones anteriores usa una semilla predecible basada en la hora del sistema, la cual hace más fácil para atacantes dependientes de contexto, guiar un ataque de fuerza bruta contra rutinas criptográficas que usa esta clase para la aletoriedad, como se demuestra contra claves privadas DSA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:*:*:*:*:*:*:*:*","versionEndIncluding":"0.97.2","matchCriteriaId":"1A0CF267-C19F-4B32-A4E4-D515D3D7725B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.6:*:*:*:*:*:*:*","matchCriteriaId":"73D8EFC5-F994-475D-9072-A0EB5EE93223"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.7:*:*:*:*:*:*:*","matchCriteriaId":"ACEF6059-1270-45A8-A5F3-BC806ACA3DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.8:*:*:*:*:*:*:*","matchCriteriaId":"22290A7B-CD78-48EF-A180-3C470DE74587"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.9:*:*:*:*:*:*:*","matchCriteriaId":"D8F79579-AFB2-4DDA-A37C-CF0540770C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.10:*:*:*:*:*:*:*","matchCriteriaId":"34F6C9C7-0CEE-4BBB-9E77-B8727342C7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.11:*:*:*:*:*:*:*","matchCriteriaId":"C621A667-FA3A-4460-9409-827FB707D86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.12:*:*:*:*:*:*:*","matchCriteriaId":"FBAC1BF2-C7AE-4BB4-86FA-CFC0F8125F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.13:*:*:*:*:*:*:*","matchCriteriaId":"E17B6783-C80E-4600-B449-4ACA3F2D1AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.14:*:*:*:*:*:*:*","matchCriteriaId":"CDF9A1B0-80CF-4690-9142-F8CC1672DBDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.15:*:*:*:*:*:*:*","matchCriteriaId":"0F9C041D-9CCB-4B70-8C34-553DA84F9298"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.16:*:*:*:*:*:*:*","matchCriteriaId":"83CB8D0F-DA54-4126-81F2-CA7818129DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.17:*:*:*:*:*:*:*","matchCriteriaId":"EBA61C96-281A-455D-B065-704825B76A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4556AEA-F27E-4E5B-91F2-685A1DC925D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.19:*:*:*:*:*:*:*","matchCriteriaId":"73FFB9ED-4541-4211-A7AF-89EB4BF2A59B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.20:*:*:*:*:*:*:*","matchCriteriaId":"89BBB5A7-5859-4DF0-9A36-6C8450BD222B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.90:*:*:*:*:*:*:*","matchCriteriaId":"075463D4-5243-48C6-83AC-15861484719B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0561E70B-32A7-437C-803C-3A86A1C16D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.92:*:*:*:*:*:*:*","matchCriteriaId":"526F80F6-F252-4706-B8AE-206DF74C5D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.93:*:*:*:*:*:*:*","matchCriteriaId":"4B933028-5D62-4120-A30F-4F88246915D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.95:*:*:*:*:*:*:*","matchCriteriaId":"34024488-0741-429A-BCC6-0A7C1C7E7C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.96:*:*:*:*:*:*:*","matchCriteriaId":"2E223B28-1380-4D91-A3C2-B6093C6E4F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.96.1:*:*:*:*:*:*:*","matchCriteriaId":"178581EE-168B-42DC-9A13-E181BFDE4AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.97:*:*:*:*:*:*:*","matchCriteriaId":"037C8E1E-EA1A-435A-B463-60B725B51F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:classpath:0.97.1:*:*:*:*:*:*:*","matchCriteriaId":"282BE66F-A823-4A48-B028-014C8BFE9C20"}]}]}],"references":[{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38417","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/06/2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47574","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5660","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato en la función vinagre_utils_show_error (en el archivo src/vinagre-utils.c) en Vinagre versiones 0.5.x anteriores a 0.5.2 y versiones 2.x anteriores a 2.24.2, podría permitir a atacantes remotos ejecutar código arbitrario por medio de los especificadores de cadena de formato en una respuesta de servidor URI o VNC diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A3452AD7-94B2-4FA6-9DD8-B5E5AA1C80C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"254ED642-8E14-4422-9783-91ABD738A64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.1:*:*:*:*:*:*:*","matchCriteriaId":"6E2DED0A-F95D-49EE-B2B3-276E6FE13CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.2:*:*:*:*:*:*:*","matchCriteriaId":"69169089-7DD3-4661-82F7-7E9E65FD2E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.3:*:*:*:*:*:*:*","matchCriteriaId":"369596B8-8CF0-4C3A-8903-FCCC79637038"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6E333454-E615-4DA9-9BA0-18AB9FA8A339"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.4:*:*:*:*:*:*:*","matchCriteriaId":"D57BA5B7-4AF1-4C55-B4B9-824A4DBA43D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.90:*:*:*:*:*:*:*","matchCriteriaId":"EC972FE9-6DCF-4922-AC01-2A561B33FDA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.91:*:*:*:*:*:*:*","matchCriteriaId":"1FDB9A16-3F87-47B9-B996-A22EBE103DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.23.92:*:*:*:*:*:*:*","matchCriteriaId":"C67CCE9D-0AB5-4271-AF2D-D4BC4BD85926"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.24.0:*:*:*:*:*:*:*","matchCriteriaId":"0F2F8034-8193-4CB3-9D8B-C1646133C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:vinagre:2.24.1:*:*:*:*:*:*:*","matchCriteriaId":"E116D4D8-398A-4E24-AB6B-5C0E9BDC9245"}]}]}],"references":[{"url":"http://secunia.com/advisories/33041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33082","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/vinagre-format-string","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499057/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-689-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3362","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475070","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7401","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00473.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00485.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/vinagre-format-string","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499057/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-689-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00485.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5661","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://sunsolve.sun.com/search/document.do?assetkey=1-26-241126-1\r\n\r\n\"Note 3: A system is only affected by this issue if it is configured to use IPv4, has a network route with a gateway of 127.0.0.1,  and the route does not have the blackhole flag set.\"","cveTags":[],"descriptions":[{"lang":"en","value":"The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, allows remote attackers to cause a denial of service (panic) via unknown vectors that trigger a NULL pointer dereference."},{"lang":"es","value":"La característica IPv4 Forwarding en Sun Solaris v10 y OpenSolaris desde snv_47 hasta snv_82, con ciertos parches instalados, permite a atacantes remotos producir una denegacion de servicio (pánico) a través de vectores desconocidos que disparan una referencia a puntero nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33148","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241126-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32861","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021413","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241126-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5662","sourceIdentifier":"cve@mitre.org","published":"2008-12-17T20:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1\r\n\r\nThese issues are addressed in the following releases:\r\n\r\n    * Sun Java Wireless Toolkit for CLDC 2.5.2_01 or later\r\n\r\nSun Java Wireless Toolkit for CLDC is available at:\r\n\r\n    * http://java.sun.com/products/sjwtoolkit/","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Desbordamiento múltiple de búfer en Sun Java Wireless Toolkit (WTK) para CLDC 2.5.2 y versiones anteriores que permite descargar programas para ejecutar arbitrariamente código a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"DB58C06F-42A5-448A-9D77-3B8DACADA0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"757F80A5-1D3F-4184-B1D5-14B72BE802E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E0788C58-7360-438A-BE9C-1CCDCF8313E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:2.5:*:*:*:*:*:*:*","matchCriteriaId":"DB561E8E-F7F5-4FE1-AA68-0BBAEBB9C516"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"579ED29E-4930-4048-91DC-422EF67E5EAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019851.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32862","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47376","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019851.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5663","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:51:59.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) load_receiver.php or (2) a shipainter action to paint_save.php, then accessing the uploaded file via a direct request to this file in their user directory."},{"lang":"es","value":"Múltiples vulnerabilidades de subida de ficheros sin restricciones en Kusaba v1.0.4 y anteriores permite a usuarios remotos autenticados ejecutar código a su elección mediante la subida de un fichero con extensión ejecutable utilizando (1)load_receiver.php o (2) una acción shipainter a paint_save.php, cuando se accede al fichero a través de una petición directa en su directorio de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kusaba:kusaba:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"E0954054-2383-42F6-AB1F-7854EE379573"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45793","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45794","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6706","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6711","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5664","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Realtek Media Player (anteriormente conocido como Realtek Sound Manager, RtlRack, o rtlrack.exe) v1.15.0.0 permite a atacantes remotos ejecutar código a su elección a través de un fichero de lista de reproducción manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtek:realtek_media_player:1.15.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E26D05C6-FF8F-49C7-B207-0A300105D775"}]}]}],"references":[{"url":"http://osvdb.org/50715","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33183","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4783","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/3446","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47380","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7492","source":"cve@mitre.org"},{"url":"http://osvdb.org/50715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2008/3446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5665","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en index.php en el modulo xhresim en XOOPS permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"no\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31749","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45863","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6748","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5666","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid \"NLST -1\" command."},{"lang":"es","value":"WinFTP FTP Server v2.3.0 cuando se utiliza el modo pasivo (anteriormente conocido como PASV), permite a usuarios autenticados producir una denegación de servicio a través de una secuencia de sesiones FTP que incluyen el comando \"NLST -1\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wftpserver:winftp_ftp_server:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9874136D-8345-49BD-AC8D-86E50DF4C023"}]}]}],"references":[{"url":"http://secunia.com/advisories/32209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4785","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021040","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2801","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45806","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6717","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5667","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory corruption and application crash) via a malformed RAR archive."},{"lang":"es","value":"El motor de escaneo en VirusBlokAda VBA32 Personal Antivirus v3.12.8.x permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un archivo RAR malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virusblokada:vba32_personal_antivirus:3.12.8:*:*:*:*:*:*:*","matchCriteriaId":"B0EC32D6-064F-4B01-AEBC-FFB12F762E87"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31560","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47573","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5668","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to setup/index.php or (2) the name parameter to index.php in the comments preview section."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Textpattern (anteriormente conocido como Txp CMS) v4.0.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML a su elección a través de (1)PATH_INFO a setup/index.php o (2)el parametro \"name\" en index.php en la sección de previsualización de comentarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"24F2425F-6C20-404F-A257-8BBA5F8C1801"}]}]}],"references":[{"url":"http://secunia.com/advisories/28793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4786","source":"cve@mitre.org"},{"url":"http://textpattern.com/weblog/310/textpattern-406-released","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27606","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/28793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://textpattern.com/weblog/310/textpattern-406-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-5669","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long message parameter."},{"lang":"es","value":"index.php en la sección de previsualización de comentarios en Textpattern (anteriormente conocido como Txp CMS) v4.0.5 permite a atacantes remotos producir una denegación de servicio a través del parámetro \"long message\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"24F2425F-6C20-404F-A257-8BBA5F8C1801"}]}]}],"references":[{"url":"http://secunia.com/advisories/28793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4786","source":"cve@mitre.org"},{"url":"http://textpattern.com/weblog/310/textpattern-406-released","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27606","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/28793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://textpattern.com/weblog/310/textpattern-406-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-5670","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session."},{"lang":"es","value":"Textpattern (anteriormente conocido como Txp CMS) v4.0.5 no pregunta por la contraseña antigua durante una reinicialización de contraseña, lo cual permite a atacantes remotos cambiar una contraseña y posteriormente secuestrar una sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"24F2425F-6C20-404F-A257-8BBA5F8C1801"}]}]}],"references":[{"url":"http://secunia.com/advisories/28793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4786","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27606","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5671","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en index.php en Joomla! de v1.0.11 hasta v1.0.14 cuando RG_EMULATION esta activado en configuration.php, permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro \"mosConfig_absolute_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.14","matchCriteriaId":"8CB02CC5-351D-4AAE-9142-ACCA8AEE718A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"}]}]}],"references":[{"url":"http://secunia.com/advisories/29106","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4787","source":"cve@mitre.org"},{"url":"http://www.joomla.org/announcements/release-news/4609-joomla-1015-released.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488126/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488199/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27795","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.joomla.org/announcements/release-news/4609-joomla-1015-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488126/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488199/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5672","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en PHParanoid en versiones anteriores a 0.4,  permite a atacantes remotos secuestrar la autenticación de usuarios arbitrarios para peticiones que usan (1) el archivo admin.php y (2) mensajes privados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"614B53FC-1301-4B06-821A-7C52462679F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C004DC1-9DF7-4870-A4E3-916F9254D4AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.2:*:*:*:*:*:*:*","matchCriteriaId":"507C2B36-7646-4D0B-A099-357FE17176D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575358","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40518","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5673","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors."},{"lang":"es","value":"PHParanoid anterior a v0.4 no restringe adecuadamente el acceso al área de miembros para usuarios no autenticados, lo cual tiene un impacto desconocido y vectores de ataque remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"614B53FC-1301-4B06-821A-7C52462679F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C004DC1-9DF7-4870-A4E3-916F9254D4AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.2:*:*:*:*:*:*:*","matchCriteriaId":"507C2B36-7646-4D0B-A099-357FE17176D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/28847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575358","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40516","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5674","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:02.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component."},{"lang":"es","value":"Múltiples errores de índice de array en el servidor HTTP en Darkwet Network webcamXP v3.72.440.0 y anteriores y beta v4.05.280 y anteriores que permitiría a atacantes remotos producir una denegación de servicio (caída del dispositivo) y leer fragmentos de memoria a través de (1)un parámetro invalido \"camnum\" al componente pocketpc y (2) un parámetro \"id\" invalido al componente show_gallery_pic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:*:*:*:*:*:*:*:*","versionEndIncluding":"3.72.440.0","matchCriteriaId":"15872E1F-C1B4-49EC-AE30-8DC2147B1BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:1.02.432:*:*:*:*:*:*:*","matchCriteriaId":"C8DA647F-F355-49CF-8D98-C2877A683234"},{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:1.02.535:*:*:*:*:*:*:*","matchCriteriaId":"CFDFC029-4448-4CE7-B6A3-299D1E9E0DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:1.6.945:*:*:*:*:*:*:*","matchCriteriaId":"C89E7E91-1FBD-4980-B3E1-8EB8D9E76571"},{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:2.20:*:*:*:*:*:*:*","matchCriteriaId":"34AD5B8C-0F46-45A1-999A-7C0864D7904C"},{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:3.72:*:*:*:*:*:*:*","matchCriteriaId":"78C08C2B-58E0-4C28-9EF3-2624CC5A1716"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/webcamxp-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/42929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29007","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4788","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/42927","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/42928","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488364/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27875","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.altervista.org/adv/webcamxp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/42927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/42928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488364/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5675","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:57.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to \"Access problems with BasicAuthTAI.\""},{"lang":"es","value":"Vulnerabilidad inespecifica en IBM WebSphere Portal v6.0 anteriores a v6.0.1.5 tiene un impacto desconocido y vectores  de ataque relacionados con \"problemas de acceso con BasicAuthTAI\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1.4","matchCriteriaId":"169E7B27-1905-4BAB-9F15-4AB66D626880"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6C753E1B-D81B-4995-877E-58EDD6F49DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5D54D4DB-FA55-47AE-9E19-FB8368FD40C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FC6A48A-E669-4AA0-AD83-85778A7B6C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F8C5AD9-2086-4131-A03C-02A89D822080"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"82FC2F98-1E99-4B50-88D5-7A2904F4585C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007603","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK75304","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50720","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK75304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5676","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:58.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors related to \"transformation caching.\""},{"lang":"es","value":"Múltiples vulnerabilidades inespecificas en el modulo ModSecurity (anteriormente conocido como mod_security) desde v2.5.0 hasta v2.5.5 para el servidor HTTP de Apache, cuando SecCacheTransformations esta activado, permite a atacantes remotos producir una denegación de servicio (caída de demonio) o evitar la funcionalidad del producto a través de vectores desconocidos relacionados con el \"transformation caching\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:breach:modsecurity:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0","matchCriteriaId":"A6B7C132-C6D8-4AEB-A960-20F36B06442B"},{"vulnerable":true,"criteria":"cpe:2.3:a:breach:modsecurity:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.5","matchCriteriaId":"0F2C45DD-48A4-4BA9-8411-F12ECE52D7AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:breach:modsecurity:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CBFEDDD5-E233-48A3-B7C3-BD894206E760"},{"vulnerable":true,"criteria":"cpe:2.3:a:breach:modsecurity:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0F3F5973-A3E8-4C75-AFC1-E49E905F6537"},{"vulnerable":true,"criteria":"cpe:2.3:a:breach:modsecurity:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"51952413-5086-49A4-B592-0AADF38F942A"},{"vulnerable":true,"criteria":"cpe:2.3:a:breach:modsecurity:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"76270534-F275-4AB1-849E-D9F224ACCEE8"}]}]}],"references":[{"url":"http://blog.modsecurity.org/2008/08/transformation.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/projects/modsecurity/?branch_id=34901&release_id=282329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2795","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45770","source":"cve@mitre.org"},{"url":"http://blog.modsecurity.org/2008/08/transformation.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/projects/modsecurity/?branch_id=34901&release_id=282329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5677","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:58.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de subida de fichero no restringida en Kwalbum v2.0.4, v2.0.2 y anteriores cuando PICS_PATH esta localizado en el directorio raíz de la web, permite a usuarios remotos autenticados con capacidad de subida, ejecutar código a su elección mediante la subida de un fichero con una extensión ejecutable, entonces se accede al fichero a través de una petición items/, relacionado con la funcion ReplaceBadFilenameChars en include/ItemAdder.php. NOTA: Algunos detalles se han obtenido a través de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"E0E0029E-1244-4E27-836D-BCBCA768DAA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6A628EE1-AAA1-4EFF-A5CA-0F2E81DC2082"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"073E7663-63C2-4007-9CA3-B92265FB1378"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CD12A1D9-BE75-4210-A6A8-68A3086823CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"30A9933C-B569-4E0D-B3C8-47DDA0E22182"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"4EF6BC38-51AD-46AF-8DFD-C8117BA19C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"4CCC1058-CA0E-4AE5-A408-6AE34E81AC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7A0E6708-38A4-4DAE-810E-4C943BD822D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D7362D30-E1F5-4470-B02B-5DFC6ACA6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"6830C8C8-65C7-4888-8C8A-E58D625F418E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.11:*:*:*:*:*:*:*","matchCriteriaId":"174BFF63-F9C6-4FEC-948E-B05CAAD8904E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1B90ED9D-1EFD-40DC-A583-FF624792B125"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D4F54D5D-6680-4CCC-B33B-039C98BC36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"48AA41B6-DA32-40E1-B1F3-99699153270B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"841FE026-D523-4679-A6FC-F9D13FC76DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E21537AA-D4AA-472C-96B5-76A16B6777BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DFDF0EE8-AB3A-4BA3-87AC-7CFBAC15B234"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"285FE067-C167-429A-B740-50BAF88B6B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"2663EBA5-C63B-4430-8ADC-641A3BAF97AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"5CAEFE8B-4BA9-4934-8063-A4CDF1DCB180"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"4C061092-8B15-40EA-A2F5-0BEDCE88DCC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"07113ADE-C57F-4CD3-A903-53D17457277B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EECF6339-2DB1-410C-ACCA-CEDD4574FAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"CC7CCE33-F7FE-4EA7-903F-29D3CC86FA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"64817FF9-8C02-4273-B78E-9A119A3EE3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.15:*:*:*:*:*:*:*","matchCriteriaId":"6C57F9F8-A12B-4354-AFDF-8A2B3CCC0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.16:*:*:*:*:*:*:*","matchCriteriaId":"ACDBEF2D-EBCB-411B-9592-28542ACD3D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"676C76F3-F31B-4E44-AB4D-BD24039B9111"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"395A69AC-C27C-45D9-B783-C9FF536640E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"E20C19E4-B9F9-4E69-A166-670389CDA2E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E4E402E9-9E46-459A-8941-B699E2F0E789"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"069380E9-147A-44CB-AD96-C8E842CCA2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"90752D3F-37FA-43A5-B126-61BE98C661C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0178BB51-DF79-49D3-8CE3-B79035C5C062"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"F287A989-BDE9-41DB-9593-98F024296500"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F38A2B47-5301-44AD-954C-DC7EA02C0CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"770A30DB-C653-4998-9B77-2D7B04B78D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D0CD5333-882B-4B9C-AB3B-F9EE06CC5D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E8A3F7D-E2A4-4542-AA9E-09495A91FFA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4789","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31568","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5678","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T01:52:58.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the (1) get_settings.ini, (2) setup.ini, and (3) text.ini files."},{"lang":"es","value":"Fretwell-Downing Informatics (FDI) OLIB7 WebView v2.5.1.1 permite a usuarios remotos autenticados conseguir información sensible de ficheros a través del parámetro \"infile\" al URI por defecto bajo cgi/, como se ha demostrado a través de los ficheros (1) get_settings.ini, (2) setup.ini, y (3) text.ini."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fdgroup:olib7_webview:2.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"95E13FA1-1E25-4C53-980C-93533C997AF8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4790","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31544","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45638","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6653","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5679","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption."},{"lang":"es","value":"El motor de análisis HTML en versiones de Opera anteriores a la 9.63 permite a atacantes remotos ejecutar código arbitrario a través de páginas web convenientemente modificadas ocasionando un calculo de puntero inválido y la corrupción del montículo (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","matchCriteriaId":"E55AA4C5-7075-4336-AFC0-F8981054F8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*","versionEndIncluding":"9.62","matchCriteriaId":"470B01C5-EB35-4105-86EA-81D7FD51D1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"1CBC39B3-4106-4B28-8AFB-4F4B5B5119D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"763CEF7F-AAB2-4C16-BDC2-E5F864111592"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"B66F0EC7-452C-4847-B028-5086FE657440"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"5F966486-485B-4B0D-9BE1-F1D39CB08863"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"A32E4272-6CEF-4C1C-BDA2-96863E8301DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*","matchCriteriaId":"47B21D05-A906-44B5-AEDA-73D383B905E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*","matchCriteriaId":"E0BA115B-C42E-4794-90BC-778B0C85CE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*","matchCriteriaId":"7C0F2643-923D-4072-B5A4-6321066C3AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*","matchCriteriaId":"4500A623-BD2C-461A-B862-2C51BD25BE71"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"63114EE0-54F7-4418-9B9E-C37BB2869F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CF5C9CB9-6396-415D-AC64-312F47A76177"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"C8F3056A-14B5-411F-8FE8-80AF5605001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4CF6B223-8575-40C7-9EDA-BDDCF6ABDBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*","matchCriteriaId":"BB1B176A-1200-4E75-BFC0-AA5F87E2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*","matchCriteriaId":"911B0336-02CE-426C-ABFF-8CFD3BC146CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*","matchCriteriaId":"DB0E448B-8A9C-44BF-AE29-D05900F6FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"790C5B0D-9A06-4C0C-BBBF-9B4C17857213"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*","matchCriteriaId":"620666CE-AABB-4A36-9566-425F2C810F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*","matchCriteriaId":"476868D1-E4EA-4F9A-8282-0CE5BB574362"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*","matchCriteriaId":"D4D545A5-A8D9-4678-BB58-248B999AF4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"3EBC3851-2A2E-41E9-A6D0-D41334BF7C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*","matchCriteriaId":"C0B61DF6-755B-44D1-88C2-F3EF33BD6183"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEDD65A0-57AA-4374-AF0D-EBE7B6F4A3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"9EC34889-5A1F-4763-995E-67EE06EFB817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.6:*:*:*:*:*:*:*","matchCriteriaId":"7BC3478B-E45C-415C-B3D8-D9937BB3D98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*","matchCriteriaId":"83D2E44B-7DD4-4C41-BCCB-4B6F1D7DE171"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*","matchCriteriaId":"64166ABD-39BA-482C-BCA5-44468105E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*","matchCriteriaId":"6CC06019-8CF0-4F01-8A63-853FB3F60185"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*","matchCriteriaId":"C6E09E20-40D5-4166-B870-5954339E176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*","matchCriteriaId":"E751386F-0179-4BE7-9F46-66455EAFB1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*","matchCriteriaId":"6A7D9843-8967-4E36-9609-4497EECB2842"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*","matchCriteriaId":"16F85686-88F9-412C-9105-F94D4D4D61FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"1646DDF9-C217-4EF6-83D0-8F0CB2A16E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*","matchCriteriaId":"29DDD7BF-9265-4202-93C1-98FAEC336190"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*","matchCriteriaId":"089A088C-6DAE-4335-AD14-DACE64641A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.52:*:*:*:*:*:*:*","matchCriteriaId":"FB8DBBA4-B5A1-41FC-9E09-7D2397383C49"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.60:*:*:*:*:*:*:*","matchCriteriaId":"C77201A9-5FAA-47F6-8C1A-6B55C5A2B3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.60:beta_1:*:*:*:*:*:*","matchCriteriaId":"C5F81D1F-EB31-4B3C-BD2F-27242BC976EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.61:*:*:*:*:*:*:*","matchCriteriaId":"1FD18939-757A-4ED5-81EB-5D83FD305A0C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4791","source":"cve@mitre.org"},{"url":"http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/921/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499315/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/921/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499315/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5680","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL.  NOTE: this might overlap CVE-2008-5178."},{"lang":"es","value":"Múltiples desbordamientos de búfer en versiones de Opera anteriores a la 9.63 podrían permitir (1) a atacantes remotos ejecutar código arbitrario a través de un textarea convenientemente modificada, o permitir (2) con ayuda de los usuarios a atacantes remotos ejecutar código arbitrario a través de un nombre de host demasiado largo en un archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.62","matchCriteriaId":"D239D60E-36F5-4301-AAC7-6F6D928093B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"}]}]}],"references":[{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021457","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/920/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/922/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498452/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498499/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498517/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498543/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/920/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/922/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498452/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498499/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498517/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498543/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5681","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.63 does not block unspecified \"scripted URLs\" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs."},{"lang":"es","value":"Opera en versiones anteriores a la 9.63, no bloquea \"URLs en scripts\" durante la vista previa de servicios de suscipción a noticias, lo que permite a atacantes remotos leer las suscripciones y forzar suscripciones a URLs de noticias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.62","matchCriteriaId":"D239D60E-36F5-4301-AAC7-6F6D928093B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"}]}]}],"references":[{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/923/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/923/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5682","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Opera en versiones anteriores a 9.63 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarios a través de plantillas XSLT pre-instaladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.62","matchCriteriaId":"D239D60E-36F5-4301-AAC7-6F6D928093B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"}]}]}],"references":[{"url":"http://osvdb.org/50951","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/924/","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021462","source":"cve@mitre.org"},{"url":"http://osvdb.org/50951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/924/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5683","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.63 allows remote attackers to \"reveal random data\" via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad sin especificar en Opera 9.63 permite antes de atacantes remotos \"revelar datos aleatorios\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.62","matchCriteriaId":"D239D60E-36F5-4301-AAC7-6F6D928093B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"}]}]}],"references":[{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021459","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/924/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/963/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/924/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5684","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause a denial of service (application crash), as demonstrated by a port scan that triggers a segmentation violation in the Gnome session manager (aka gnome-session)."},{"lang":"es","value":"Una vulnerabilidad sin especificar en el X Inter Client Exchange library (tambien llamado libICE) en Sun Solaris 8 a 10 y en versiones de OpenSolaris anteriores a la snv_85, permite atacantes dependientes de contexto causar una denegación de servicio (mediante un fallo de aplicación), como lo demuestra un escaneo de puertos que desencadena una violación de segmento en el Gnome Session Manager(alias gnome-session)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_84","matchCriteriaId":"BFB08682-30F3-45FA-A076-E1328ABF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33157","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33325","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021391","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119067-11-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243566-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-513.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32807","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47311","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119067-11-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-243566-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-513.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5685","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Note: This issue only impacts systems that have a System Controller V2 without SSH enabled.","cveTags":[],"descriptions":[{"lang":"en","value":"Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller (SC), the system console, and possibly the host OS, and cause a denial of service (shutdown or reboot), via spoofed IP packets."},{"lang":"es","value":"Sun ScApp firmware 5.18.x, 5.19.x, y 5.20.0 hasta la 5.20.10 en plataformas Sun Fire y Netra permite a atacantes remotos acceder al Controlador del Sistema(SC), a la consola del sistema y, posiblemente, al sistema operativo anfitrión, y causar una denegación de servicio (mediante apagado o reinicio), a través de paquetes con IPs falsas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.18:*:*:*:*:*:*:*","matchCriteriaId":"28A2551B-1787-40A5-AB51-6177A64AA46C"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.19:*:*:*:*:*:*:*","matchCriteriaId":"25F877F4-682F-46D1-9F81-70C1FAF16A57"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.0:*:*:*:*:*:*:*","matchCriteriaId":"0E9C8979-3A8D-4805-90B9-FD20F5153651"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.1:*:*:*:*:*:*:*","matchCriteriaId":"189EF850-2D37-4290-AC8C-B858C7C40471"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.2:*:*:*:*:*:*:*","matchCriteriaId":"5D2BBB49-5C60-4D88-8007-F10697A04636"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.3:*:*:*:*:*:*:*","matchCriteriaId":"0F6DF9B4-1E0D-49DB-81EC-193E980334CB"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.4:*:*:*:*:*:*:*","matchCriteriaId":"6FF9935A-851D-4B79-B8C7-F98C08FD9F0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.5:*:*:*:*:*:*:*","matchCriteriaId":"316FCB5A-F03B-4D42-88D3-7CF75AB66CC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D474BDB0-23BD-48E9-AF53-14E45B5D6B4B"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.7:*:*:*:*:*:*:*","matchCriteriaId":"E58F2F5B-C150-4A91-9E67-3A718D35E7E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.8:*:*:*:*:*:*:*","matchCriteriaId":"9DF6CD6B-C732-45F1-ACE5-989CB62FBB2E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.9:*:*:*:*:*:*:*","matchCriteriaId":"54C75370-48FF-4062-B82E-784DFE38E352"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:scapp:5.20.10:*:*:*:*:*:*:*","matchCriteriaId":"4C5CFDC9-0FEB-47E4-B934-34594E11CCBE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sun:netra:1280:*:*:*:*:*:*:*","matchCriteriaId":"78C85E7E-BE58-4E4F-8D3D-D9532C60A0FC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:netra:1290:*:*:*:*:*:*:*","matchCriteriaId":"FD91C95B-01C7-4F4B-B3DB-5863389C4B62"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:3800:*:*:*:*:*:*:*","matchCriteriaId":"91D5F2D6-D0BF-4D6A-AB19-5C1301D71E8A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:4800:*:*:*:*:*:*:*","matchCriteriaId":"D964A21B-E067-4D89-A5E0-339817CB8544"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:4810:*:*:*:*:*:*:*","matchCriteriaId":"6759A24A-8ED7-4C60-92ED-2CE3D95DF6A3"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:6800:*:*:*:*:*:*:*","matchCriteriaId":"3F5F659A-CAA8-488C-8C67-B95984055803"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:e2900:*:*:*:*:*:*:*","matchCriteriaId":"8A7FBA86-D5E3-40CC-8B0E-19911A9053B2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:e4900:*:*:*:*:*:*:*","matchCriteriaId":"6E6972D4-6DB6-4885-9083-7F79ED64CF04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:e6900:*:*:*:*:*:*:*","matchCriteriaId":"43826816-BA22-4BD9-9943-4924F9E5FDCE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:v1280:*:*:*:*:*:*:*","matchCriteriaId":"0C258A35-787A-49FF-A7C4-39B11747EBF9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33158","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021392","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-114527-12-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246746-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019814.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32805","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3440","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-114527-12-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246746-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019814.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5686","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that an LDAP user be listed in the TPM user records, which allows remote authenticated users to execute SOAP commands that access arbitrary TPM functionality, as demonstrated by running provisioning workflows."},{"lang":"es","value":"IBM Tivoli Provisioning Manager (TPM) en versiones anteriores a la 5.1.1.1 IF0006, cuando su servicio LDAP es compartido con otras aplicaciones, no requiere que un usuario LDAP se encuentre en el listado de usuarios de TPM, lo que permite a usuarios remotos autenticados ejecutar comandos SOAP que accedan a funcionalidades TPM arbitrarias, como se ha demostrado mediante la ejecución de flujos de trabajo de provisión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_provisioning_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A141AB15-2D7B-4D48-9A1A-CEF50F21BEB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_provisioning_manager:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"128205D3-F6BD-47CB-B07E-B44FF7359D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_provisioning_manager:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DD89F060-05A7-46E4-A893-FBCEBC532703"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_provisioning_manager:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DD76DD8-85B6-4D1E-BCA3-996A70CBE570"}]}]}],"references":[{"url":"http://secunia.com/advisories/33143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021394","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21330228","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32824","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21330228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5687","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/."},{"lang":"es","value":"MediaWiki versión 1.11, y otras versiones anteriores a 1.13.3, no protege apropiadamente contra la descarga de copias de seguridad de imágenes eliminadas, lo que podría permitir a atacantes remotos obtener información confidencial por medio de peticiones de archivos en images/deleted/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8C54ADEF-F360-41C6-AE27-B6D12E5BAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11:rc1:*:*:*:*:*:*","matchCriteriaId":"77FBC313-0615-42D9-8617-4DE42CAA48BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4DB5EF0E-4E1B-4131-9142-5FBB59C235D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"F59B5992-716F-4901-BDD1-0C7E24BF9148"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"746023B5-2472-4FC9-BEDF-FE6A321F12B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0D18C85B-E82B-46AE-959E-3FD32DB6F294"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"66714539-F1E1-4C16-AA12-059EEB1B9DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"A80044C9-9F76-468E-84F7-D7D529004AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"C7CD7F5A-F4E4-45B6-9179-BD1BCD75D297"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D3CC82BE-8DEA-47D7-B6B7-2FFDFB728ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AFD79470-63A7-438B-A3BE-CABDAD7F848C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47678","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5688","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught exception."},{"lang":"es","value":"MediaWiki versión 1.8.1, y otras versiones anteriores a 1.13.3, cuando la variable wgShowExceptionDetails está habilitada, a veces proporciona el path de instalación completa en un mensaje de depuración, lo que podría permitir a los atacantes remotos conseguir información confidencial por medio de peticiones no especificadas que desencadenan una excepción no detectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"136E5FD9-C0A0-4970-8852-D97C5BC723E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FD2871-90BB-4AFA-89D0-B9B5BE365771"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"36D35193-8AF8-4CB9-A47D-A58DE389515E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9E1CD7D7-546A-48FA-9C4C-1FB0CA22C6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"AAD648C1-0908-43F8-951C-E7EBF8FB8CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B40FB49B-1E96-44BC-A9B0-9BDB28F858A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E3A0921C-BEC5-4646-96FD-0529828B5BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"DB4E8709-43E2-4ADC-8759-16AC265658C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8A1D30-57E7-4010-B68A-8D22EA091FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"4EF7C683-F6E2-4D79-B0F9-234C9FAFB7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"962C4B03-ABDF-4E94-8DE0-E035186E0F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"841A4099-1EB3-448A-81C2-67A68CF4B5C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"E0983C0E-9035-4256-AC99-C2C81C1634E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"76F47EF6-2695-44FD-B4B0-9DE911BB57CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.0:rc2:*:*:*:*:*:*","matchCriteriaId":"FC61592E-7479-45C1-9263-D608B644EE79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5460DB30-FA14-4017-BC8B-15F9451469F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"ED2392D6-6ACF-4715-BBCD-B6DA9B91C750"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"B0071C35-877F-44C6-BC39-B1AE885D7313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.10.4:*:*:*:*:*:*:*","matchCriteriaId":"AD83CF24-FC29-40C4-8B07-5FB6591E9812"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8C54ADEF-F360-41C6-AE27-B6D12E5BAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11:rc1:*:*:*:*:*:*","matchCriteriaId":"77FBC313-0615-42D9-8617-4DE42CAA48BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4DB5EF0E-4E1B-4131-9142-5FBB59C235D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"F59B5992-716F-4901-BDD1-0C7E24BF9148"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"746023B5-2472-4FC9-BEDF-FE6A321F12B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0D18C85B-E82B-46AE-959E-3FD32DB6F294"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"66714539-F1E1-4C16-AA12-059EEB1B9DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"A80044C9-9F76-468E-84F7-D7D529004AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"C7CD7F5A-F4E4-45B6-9179-BD1BCD75D297"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D3CC82BE-8DEA-47D7-B6B7-2FFDFB728ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AFD79470-63A7-438B-A3BE-CABDAD7F848C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mediawiki.org/wiki/Manual:%24wgShowExceptionDetails","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"cve@mitre.org"},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mediawiki.org/wiki/Manual:%24wgShowExceptionDetails","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5689","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Complete system compromise only affects x86 platforms (http://www.trapkit.de/advisories/TKADV2008-015.txt)","cveTags":[],"descriptions":[{"lang":"en","value":"tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference."},{"lang":"es","value":"Tun en IP Tunnel en Solaris 10 y OpenSolaris snv_01 a snv_76 permite a usuarios locales causar una denegación de servicio (causando un panic del sistema) y, posiblemente, ejecutar código arbitrario a través de una solicitud SIOCGTUNPARAM IOCTL modificada, que ocasiona una desreferencia a un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4801","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242266-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/15962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499352/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32904","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021464","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2008-015.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3454","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47449","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242266-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/15962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499352/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2008-015.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5690","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5."},{"lang":"es","value":"La funcionalidad de renovación de credenciales de Kerberos en Sun Solaris versiones 8, 9 y 10, y OpenSolaris build snv_01 hasta snv_104, permite a usuarios locales causar una denegación de servicio (fallo de autenticación) por medio de vectores no especificados relacionados con permisos incorrectos de archivos de caché y falta de almacenamiento de credenciales por parte de la función store_cred en pam_krb5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33313","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32793","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021390","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3428","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47291","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-112908-33-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-244866-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-515.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5691","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T17:30:03.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via a long argument to the SetID method."},{"lang":"es","value":"Un desbordamiento de búfer basado en montículo en el control ActiveX Phoenician Casino FlashAX 1.0.0.7 permite a atacantes remotos ejecutar código arbitrario a través de un argumento demasiado largo al método SetID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phonecian_casino:flashax:1.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7BD218D3-A245-44ED-96B0-A41CF585F84B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4795","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32901","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47448","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7505","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5692","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name."},{"lang":"es","value":"Ipswitch WS_FTP Server Manager anterior a la version 6.1.1, y posiblemente otros productos de Ipswitch, permite a atacantes remotos eludir la autenticación y leer los logs a través de una acción logLogout a FTPLogServer/login.asp seguido por una solicitud de FTPLogServer/LogViewer.asp con el nombre de cuenta localhostnull."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"898F836A-4413-4A14-9D99-E15CE2AF7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"89C81A58-330F-41DC-BEF7-A5850D5DF0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:2.01:*:*:*:*:*:*:*","matchCriteriaId":"69ADEDB9-99B5-4F1D-8D3F-CFAB6CA8DED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:2.02:*:*:*:*:*:*:*","matchCriteriaId":"BFBC2FE5-2367-4F08-B939-9F3F96356BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"EE467C51-6B92-4291-BF49-14422E5FE719"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40483FCD-0111-4950-8CAA-BE55DC3161D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"097E2EC7-83DB-47B1-BA69-0234FB2EC9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F87D07A-769A-4D5F-8EAB-3A2FF877DD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1329DB51-5871-4B3C-800D-EA0B99655862"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"440A634D-31F4-4B1A-8CAC-42368CBED0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C0B010EF-AA23-4297-B523-A6909E689D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.14:*:*:*:*:*:*:*","matchCriteriaId":"5ABD7295-9DB0-418E-ACCB-8623AA44AD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:4.00:*:*:*:*:*:*:*","matchCriteriaId":"155FCE9D-EA9C-48FF-9A07-49DD2232D2EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:4.01:*:*:*:*:*:*:*","matchCriteriaId":"9EF2984F-1130-42A3-89F4-AB1CB1E5A4BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:4.02:*:*:*:*:*:*:*","matchCriteriaId":"81332CD2-A180-4D79-BA79-6B5FD560CC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.00:*:*:*:*:*:*:*","matchCriteriaId":"06DAC70D-AA7E-4F18-82CD-8EB93C64B1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"A37736C6-D729-41AC-BABD-2FBAC371E777"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"F6E87011-C9AA-4D52-A8F1-E3172B635929"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"4E2AB91D-0EFB-4E20-978D-D38168F4BFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"3EBA8A91-2C2D-4C50-AFD1-898C9C79C5F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"32212E07-9A0F-4E03-A83F-82D11BA0A256"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D0C1CC7B-B4F9-4F15-8EAC-033119C5DA37"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/wsftpweblog-adv.txt","source":"cve@mitre.org"},{"url":"http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28822","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4799","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487686/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487697/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27654","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0473","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/wsftpweblog-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487686/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487697/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5693","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character."},{"lang":"es","value":"Ipswitch WS_FTP Server Manager 6.1.0.0 y anteriores, y posiblemente otros productos de Ipswitch, podría permitir a atacantes remotos leer el contenido de ficheros ASP en WSFTPSVR/ a través de una solicitud con un carácter punto al final."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"898F836A-4413-4A14-9D99-E15CE2AF7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"89C81A58-330F-41DC-BEF7-A5850D5DF0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:2.01:*:*:*:*:*:*:*","matchCriteriaId":"69ADEDB9-99B5-4F1D-8D3F-CFAB6CA8DED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:2.02:*:*:*:*:*:*:*","matchCriteriaId":"BFBC2FE5-2367-4F08-B939-9F3F96356BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"EE467C51-6B92-4291-BF49-14422E5FE719"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40483FCD-0111-4950-8CAA-BE55DC3161D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"097E2EC7-83DB-47B1-BA69-0234FB2EC9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F87D07A-769A-4D5F-8EAB-3A2FF877DD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1329DB51-5871-4B3C-800D-EA0B99655862"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"440A634D-31F4-4B1A-8CAC-42368CBED0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C0B010EF-AA23-4297-B523-A6909E689D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:3.14:*:*:*:*:*:*:*","matchCriteriaId":"5ABD7295-9DB0-418E-ACCB-8623AA44AD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:4.00:*:*:*:*:*:*:*","matchCriteriaId":"155FCE9D-EA9C-48FF-9A07-49DD2232D2EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:4.01:*:*:*:*:*:*:*","matchCriteriaId":"9EF2984F-1130-42A3-89F4-AB1CB1E5A4BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:4.02:*:*:*:*:*:*:*","matchCriteriaId":"81332CD2-A180-4D79-BA79-6B5FD560CC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.00:*:*:*:*:*:*:*","matchCriteriaId":"06DAC70D-AA7E-4F18-82CD-8EB93C64B1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"A37736C6-D729-41AC-BABD-2FBAC371E777"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"F6E87011-C9AA-4D52-A8F1-E3172B635929"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"4E2AB91D-0EFB-4E20-978D-D38168F4BFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"3EBA8A91-2C2D-4C50-AFD1-898C9C79C5F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"32212E07-9A0F-4E03-A83F-82D11BA0A256"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D0C1CC7B-B4F9-4F15-8EAC-033119C5DA37"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/wsftpweblog-adv.txt","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4799","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487686/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487697/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27654","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47677","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/wsftpweblog-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487686/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487697/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5694","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors.  NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox."},{"lang":"es","value":"Una vulnerabilidad de inclusión de archivo PHP remoto en lib/jpgraph/jpgraph_errhandler.inc.php en Sandbox 1.4.1 podría permitir a atacantes remotos ejecutar código PHP arbitrario a través de vectores no especificados. NOTA: El problema, si lo hay, podría estar localizado en Aditus JpGraph en lugar de Sandbox. Si es así, entonces esto no debería ser tratado como un problema en Sandbox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sandbox:sandbox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5E79E7A8-1C79-4DB0-8BE3-93E5EB2257DB"}]}]}],"references":[{"url":"http://www.by-f10.com/bug.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/487903/100/200/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47688","source":"cve@mitre.org"},{"url":"http://www.by-f10.com/bug.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/487903/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5695","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options and upload_files capabilities to execute arbitrary code by uploading a PHP script and adding this script's pathname to active_plugins."},{"lang":"es","value":"wp-admin/options.php en versiones de WordPress MU anteriores a la 1.3.2, y WordPress 2.3.2 y anteriores, no valida las solicitudes de actualización de una opción, lo que permite a usuarios remotos que tengan las capacidades manage_options y upload_files y esten autenticados, ejecutar código arbitrario subiendo un Script PHP y añadiendo la ruta de este script a los plugins activos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.2","matchCriteriaId":"149525FA-612C-4719-80F1-1CC5DB5E5E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.2","matchCriteriaId":"6221BD74-B6BA-48C0-ABDC-3742656F26C9"}]}]}],"references":[{"url":"http://mu.wordpress.org/forums/topic.php?id=7534&page&replies=1","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28789","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4798","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.buayacorp.com/files/wordpress/wp-blog-option-overwrite.txt","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27633","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5066","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://mu.wordpress.org/forums/topic.php?id=7534&page&replies=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://secunia.com/advisories/28789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.buayacorp.com/files/wordpress/wp-blog-option-overwrite.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/27633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5696","sourceIdentifier":"cve@mitre.org","published":"2008-12-19T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations."},{"lang":"es","value":"Novell NetWare 6.5, en versiones anteriores al Support Pack 8, cuando un servidor Linux OES2  se instala en el árbol NDS, no requiere una contraseña para la consola ApacheAdmin, lo que permite a atacantes remotos reconfigurar el Servidor HTTP Apache a través de operaciones de consola."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:*:sp7:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"174FE537-D73F-4230-AED1-B9F1C4182C08"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*","matchCriteriaId":"D328A81E-DC60-4B67-B707-F0AD9A6F48E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*","matchCriteriaId":"1CEB9CEA-9245-490F-88F6-EFD23B11A19B"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*","matchCriteriaId":"0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*","matchCriteriaId":"062E2A9A-CF88-4844-B5A1-7418722087D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*","matchCriteriaId":"0F8E031C-CE1F-410F-8F32-B3E33719C498"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*","matchCriteriaId":"87F80FDC-7851-4EA8-BC7D-87B85C6BB93C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*","matchCriteriaId":"8C3AB68F-1D78-4217-9C56-B1B25F62FF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp5:*:*:*:*:*:*","matchCriteriaId":"0F7A41C8-4332-4F8C-A297-6850C05B3EB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp6:*:*:*:*:*:*","matchCriteriaId":"5DC7371E-6D35-4C9A-B688-E14391D9B953"}]}]}],"references":[{"url":"http://secunia.com/advisories/32989","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7001907","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32657","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021350","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3368","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47104","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7001907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5697","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the clipboard via a string argument."},{"lang":"es","value":"El método skype_tool.copy_num en la extensión Skype BETA 2.2.0.95 para Firefox, permite a atacantes remotos escribir datos de su elección en el portapapeles a través de un argumento de cadena."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype:skype_extension_for_firefox:2.2.0.95:beta:*:*:*:*:*:*","matchCriteriaId":"3F2E5DBB-48BC-4157-B1DE-928297D81DE6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4797","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31613","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45739","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6690","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5698","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"HTMLTokenizer::scriptHandler en Konqueror de KDE v3.5.9 y v3.5.10, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de una llamada no válida a document.load, esto lanza que se use un objeto eliminado. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider a crash of a client application such as Konqueror to be a security issue.","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:kde:kde:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"F5F38CD2-8531-403D-B522-389DD4F8C5E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:kde:kde:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"4060AC52-64EA-46E8-82EC-91F1040A4FCD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*","matchCriteriaId":"0A65B798-C4F1-44BF-8B64-FDB7F234580B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32208","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31696","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45804","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5699","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El Demonio de Caché del Servicio de Nombres (ncsd) en Sun Solaris 10 y OpenSolaris snv_50 hasta snv_104 no comprueba adecuadamente los permisos, esto permite a usuarios locales obtener privilegios e información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://osvdb.org/50934","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33218","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021477","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242006-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32921","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/50934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-5700","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program."},{"lang":"es","value":"libata en el kernel de Linux anterior a 2.6.27.9, no establece un tiempo de espera mínimo para solicitudes SG_IO; esto permite a usuarios locales provocar una denegación de servicio (Modo E/S programado en controladores) a través de múltiples invocaciones simultáneas de un programa de test no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27.8","matchCriteriaId":"8710E83C-540F-44C9-824B-2579E363FC71"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=f2f1fa78a155524b849edf359e42a3001ea652c0","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/09/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33854","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34252","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.9","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47669","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10948","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8606","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/714-1/","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=f2f1fa78a155524b849edf359e42a3001ea652c0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5701","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table."},{"lang":"es","value":"Error de índice de array en arch/mips/kernel/scall64-o32.S en el kernel de Linux anterior a 2.6.28-rc8 en plataformas MIPS de 64 bits, permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de una llamada al sistema 032 con un número de llamada pequeño, esto provoca un intento de operación de lectura fuera del rango de la tabla de la llamada al sistema."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for the Linux kernel on the MIPS architecture.","lastModified":"2009-05-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=e807f9574e37a3f202e677feaaad1b7c5d2c0db8","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/09/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33078","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc8","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32716","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47190","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=e807f9574e37a3f202e677feaaad1b7c5d2c0db8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/09/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5702","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call."},{"lang":"es","value":"Desbordamiento inferior de búfer en la función ibwdt_ioctl de drivers/watchdog/ib700wdt.c en el kernel de Linux anterior a 2.6.28-rc1, puede que permita a usuarios locales tener un impacto desconocido a través de determinada llamada /dev/watchdog WDIOC_SETTIMEOUT IOCTL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=11399","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7c2500f17d65092d93345f3996cf82ebca17e9ff","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/10/5/173","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/10/2","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/20","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/6","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/9","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47667","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11344","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/714-1/","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=11399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7c2500f17d65092d93345f3996cf82ebca17e9ff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/10/5/173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/10/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-715-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5703","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380."},{"lang":"es","value":"gpsdrive (también conocido como gpsdrive-scripts) 2.10~pre4, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal (a) /tmp/.smswatch o (b) /tmp/gpsdrivepos, relacionado con (1) examples/gpssmswatch y (2) src/splash.c. Se trata de vectores diferentes de CVE-2008-4959 y CVE-2008-5380."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:*:pre2:*:*:*:*:*:*","versionEndIncluding":"2.10","matchCriteriaId":"D89781D2-6103-4E81-9941-871B7F5CEA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:1.32:*:*:*:*:*:*:*","matchCriteriaId":"21711269-0B84-4E45-A7C6-8E0E896AAFD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:1.33:*:*:*:*:*:*:*","matchCriteriaId":"4E8305A1-89F0-4A07-B611-B55FF4012A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:2.09:*:*:*:*:*:*:*","matchCriteriaId":"E65C1B71-B86C-4777-8A6A-B7BAA520352D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/15","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33825","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2121124&group_id=148048&atid=770280","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32887","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2121124&group_id=148048&atid=770280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5704","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380."},{"lang":"es","value":"src/unit_test.c de gpsdrive (también conocido como gpsdrive-scripts) 2.10~pre4, puede que permita a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/gpsdrive-unit-test/proc. Se trata de un vector diferente de CVE-2008-4959 y CVE-2008-5380."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:*:pre2:*:*:*:*:*:*","versionEndIncluding":"2.10","matchCriteriaId":"D89781D2-6103-4E81-9941-871B7F5CEA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:1.32:*:*:*:*:*:*:*","matchCriteriaId":"21711269-0B84-4E45-A7C6-8E0E896AAFD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:1.33:*:*:*:*:*:*:*","matchCriteriaId":"4E8305A1-89F0-4A07-B611-B55FF4012A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gpsdrive:gpsdrive:2.09:*:*:*:*:*:*:*","matchCriteriaId":"E65C1B71-B86C-4777-8A6A-B7BAA520352D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/15","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5705","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument."},{"lang":"es","value":"La función cTrigger::DoIt de src/ctrigger.cpp en el mecanismo de lanzamiento (trigger) en el  demonio de Verlihub 0.9.8d-RC2 y anteriores, cuando están habilitados los lanzamientos de usuario (user triggers), permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de línea de comandos en un argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verlihub-project:verlihub:0.9.8d:rc2:*:*:*:*:*:*","matchCriteriaId":"1E2C134F-9B54-4964-A2C4-30C99B0A0A23"}]}]}],"references":[{"url":"http://bugs.debian.org/506530","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/16","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32420","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46801","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7183","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/506530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5706","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file."},{"lang":"es","value":"La función cTrigger::DoIt de src/ctrigger.cpp en el mecanismo de lanzamiento (trigger) en el  demonio de Verlihub 0.9.8d-RC2 y anteriores, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en el fichero temporal /tmp/trigger.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verlihub-project:verlihub:0.9.8d:rc2:*:*:*:*:*:*","matchCriteriaId":"1E2C134F-9B54-4964-A2C4-30C99B0A0A23"}]}]}],"references":[{"url":"http://bugs.debian.org/506530","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/16","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32889","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7183","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/506530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/17/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5707","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:28:40.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en urunler.asp en Iltaweb Alisveris Sistemi permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catno."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:iltaweb_alisveris_sistemi:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"0670282C-810B-42BE-9200-1D7889DD4A5F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/497279/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497279/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5708","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1."},{"lang":"es","value":"redirect.php in SlimCMS 1.0.0 no requiere autentificación, lo que permite a atacantes remotos crear usuarios administradores utilizando los parámetros newusername y newpassword y estableciendo el parámetro newisadmin a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slimcms:slimcms:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4546FBAC-DCB2-468A-826C-36A22B702614"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4804","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31736","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45824","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6729","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5709","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en la interfaz de gestión web en Avaya Communication Manager (CM) 3.1 antes de 3.1.4 SP2, 4.0 antes de 4.0.3 SP1 y 5.0 antes de 5.0 SP3 permite a usuarios remotamente autentificados ejecutar código de su elección mediante vectores de ataque desconocidos en los componentes (1) Set Static Routes y (2) Backup History."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5DE700B-B830-445B-AF08-4AD28EF1BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*","matchCriteriaId":"522FD345-91ED-4FE2-8069-028C3A2E3974"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*","matchCriteriaId":"3507CABD-74EE-4A53-9C09-AF38B3F218F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"84E2136B-6FE3-4548-A89D-444ED9393C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"FB4B7CCA-3961-48BC-ABFD-A608B39BD921"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:sp2:*:*:*:*:*:*","matchCriteriaId":"F9DD5F5B-5F44-422C-B9D9-731B53981BEB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31645","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=121","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=122","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2772","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45749","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5710","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en la interfaz de gestión web en Avaya Communication Manager (CM) 3.1.x, 4.0.3 y 5.x permite a atacantes remotos leer (1) archivos de configuración, (2) archivos de log, (3) archivos binarios de imagen y (4) archivos de ayuda mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"84E2136B-6FE3-4548-A89D-444ED9393C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"FB4B7CCA-3961-48BC-ABFD-A608B39BD921"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:sp2:*:*:*:*:*:*","matchCriteriaId":"F9DD5F5B-5F44-422C-B9D9-731B53981BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:sp3:*:*:*:*:*:*","matchCriteriaId":"AD401628-23D0-4CC0-8D30-B10910533003"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"0A32A986-3DB3-4CB5-AF52-12D83C4A6B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"223037D6-1345-4705-BB88-E814211D666D"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4ED0CFA4-C45E-465B-9F45-EB0742305CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"22364E59-5248-43E3-8B6A-E646188F69E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"120EA1E2-EEF0-4FF6-960D-34FF9E88F2F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.1.2:sp0:*:*:*:*:*:*","matchCriteriaId":"ED8A8551-7374-4A21-B141-10BE4CEF222F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31639","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=123","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2774","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45750","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-394.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5711","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el control ActiveX de Facebook PhotoUploader 5.0.14.0 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un valor de la propiedad FileMask largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:facebook:photouploader:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.14.0","matchCriteriaId":"F49EF4A2-CD90-402A-AF3F-08A248564FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:facebook:photouploader:4.5.57.0:*:*:*:*:*:*:*","matchCriteriaId":"6FA99512-97A0-453D-A142-5C743DD9D8D0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4805","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27756","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5102","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5712","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element.  NOTE: the FONT vector is already covered by CVE-2008-4514."},{"lang":"es","value":"El analizador HTML en KDE Konqueror 3.5.9 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante (1) un atributo COLOR largo en un elemento HR; o unos atributos (a) BGCOLOR o (b) BORDERCOLOR largos en un elemento (2) TABLE, (3) TD, o (4) TR. NOTA: el vector FONT está ya cubierto en CVE-2008-4514."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider a crash of a client application such as Konqueror to be a security issue.","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"4A1F1157-C9DB-43EF-B215-04E7FBDD8E17"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4806","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47696","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6704","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5713","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode."},{"lang":"es","value":"La función __qdisc_run en net/sched/sch_generic.c en el kernel de Linux antes de 2.6.25 en máquinas SMP permite a usuarios locales provocar una denegación de servicio (bloqueo blando \"soft lockup\") enviando una cantidad de tráfico de red grande, como se demostró por múltiples invocaciones simultáneas de la aplicación Netperf benchmark en modo UDP_STREAM."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.  It was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-0264.html","lastModified":"2009-02-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.24.7","matchCriteriaId":"C4298B94-7040-4CC0-8933-61CE1D967FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=2ba2506ca7ca62c56edaa334b0fe61eb5eab6ab0","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/23/1","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32985","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477744","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9385","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/714-1/","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=2ba2506ca7ca62c56edaa334b0fe61eb5eab6ab0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/23/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/714-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5714","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended."},{"lang":"es","value":"Error de superación de límite (off-by-one) en monitor.c en Qemu 0.9.1 podría facilitar a atacantes remotos adivinar la contraseña VNC, que está limitada a siete caracteres cuando se habrían previsto ocho."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Xen as shipped with Red Hat Enterprise Linux 5.","lastModified":"2009-02-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6205775B-4A83-498F-A60E-54473F5D5704"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35062","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33020","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47683","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-776-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5715","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms."},{"lang":"es","value":"Firefox 3.0.5 de Mozilla en Windows Vista permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante código JavaScript con un valor de cadena largo para la propiedad hash (también conocido como location.hash)."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider a crash of a client application such as Firefox to be a security issue.","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"}]}]}],"references":[{"url":"http://osvdb.org/51032","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4807","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3424/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32988","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47572","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7554","source":"cve@mitre.org"},{"url":"http://osvdb.org/51032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3424/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5716","sourceIdentifier":"cve@mitre.org","published":"2008-12-24T18:29:15.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue exists because of erroneous set_permissions calls in the fix for CVE-2008-4405."},{"lang":"es","value":"xend en Xen 3.3.0 no restringe adecuadamente el acceso de escritura de una máquina virtual invitada en el árbol de directorios xenstore /local/domain, lo que permite a usuarios del sistema operativo visitantes provocar una denegación de servicio y posiblemente tener otro impacto no especificado escribiendo en (1) console/tty, (2) console/limit, o (3) image/device-model-pid. NOTA: este problema existe debido a llamadas set_permissions erróneas en el parche para CVE-2008-4405."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Xen as shipped with Red Hat Enterprise Linux 5.  Security update released to address CVE-2008-4405 - https://rhn.redhat.com/errata/RHSA-2009-0003.html - contained correct patch which did not introduce this problem and resolved the original issue.","lastModified":"2009-01-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xen:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"29D50CDE-9F80-4C2E-A1F4-530B6C2D8E6B"}]}]}],"references":[{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00842.html","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00845.html","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00846.html","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00847.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31499","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47668","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00842.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00845.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00846.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2008-12/msg00847.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5717","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Fixed in the following versions:\r\n\r\nProduct name: JP1/Integrated Management - Service Support\r\n\r\nVersion(s):\r\n\r\nWindows\r\n    08-10-06 December 10, 2008\r\n    08-11-04 December 10, 2008\r\n    08-50-04 December 10, 2008\r\n    08-51 October 7, 2008","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Hitachi JP1/Integrated Management - Service Support de v08-10 a v08-10-05, de v08-11 a v08-11-03 y de v08-50 a v08-50-03 en Windows permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-10:*:*:*:*:*:*:*","matchCriteriaId":"AEDBE4C4-6318-4C11-B2C5-9C2E1F04B040"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-10-01:*:*:*:*:*:*:*","matchCriteriaId":"E9F9F2FD-EBB6-4FF2-8B62-3CCB8D75CB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-10-02:*:*:*:*:*:*:*","matchCriteriaId":"4B711118-FECD-4D07-93B3-F0C1CC02EC62"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-10-03:*:*:*:*:*:*:*","matchCriteriaId":"78F9A4F2-1828-4079-A33E-407DD125B2C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-10-04:*:*:*:*:*:*:*","matchCriteriaId":"BC9DC5F9-BFDC-400B-8605-527DBF8C3BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-10-05:*:*:*:*:*:*:*","matchCriteriaId":"96E96ED4-C358-4620-9A32-71FCACD63854"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-11:*:*:*:*:*:*:*","matchCriteriaId":"8DFCF55F-1C6B-4A62-BA4B-CC380E5710FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-11-01:*:*:*:*:*:*:*","matchCriteriaId":"87E84892-8A5F-4577-A278-260E3F73EBC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-11-02:*:*:*:*:*:*:*","matchCriteriaId":"714C28C4-FC02-46D4-948E-745F862223DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-11-03:*:*:*:*:*:*:*","matchCriteriaId":"4209BD0D-8361-4020-93C6-1B6505D5D87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-50:*:*:*:*:*:*:*","matchCriteriaId":"2C163E73-83BD-463E-8FB5-3FAA08CEF7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-50-01:*:*:*:*:*:*:*","matchCriteriaId":"1E5C8945-0F88-46EE-ACB0-4F4DC167E012"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-50-02:*:*:*:*:*:*:*","matchCriteriaId":"2EFAAFD8-845B-44D7-83EC-3A3098800045"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_integrated_management_service_support:08-50-03:*:*:*:*:*:*:*","matchCriteriaId":"38C5C666-ABA5-4700-8A0E-A32E909E4843"}]}]}],"references":[{"url":"http://secunia.com/advisories/33193","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS08-023/index.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS08-023/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5718","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title."},{"lang":"es","value":"El demonio papd en Netatalk anterior a la versión 2.0.4-beta2, cuando se utilizan ciertas variables en un comando pipe para el archivo print, permite a los atacantes remotos ejecutar comandos arbitrarios mediante metacaracteres shell en una petición print, como se muestra utilizando un título creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"AE54A8AE-4A5C-49E3-85E9-6B98E1FA8FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.4.99-0.20000927:*:*:*:*:*:*:*","matchCriteriaId":"1F2E2712-3A5F-4B85-8002-8CF930BB56D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.4.99-0.20001108:*:*:*:*:*:*:*","matchCriteriaId":"5C9DBE37-D511-4D43-9439-217CA6197209"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"883A8C43-5190-420F-9198-11BFFC6FC11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"37D67DDF-BADE-49E2-9C23-D7B7A8852BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4B93E06D-AFF0-430F-A813-81C9CBEFD2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1F7D38B3-8337-4100-AE05-FFE4DD1BBAC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"807D8A23-9754-45F3-960A-61CCCB770D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"37213229-90C4-4DD2-9FC5-050DA20CDA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"505166C0-054B-4CF0-B578-062BE2CC2F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"60839BFB-D6CC-4C10-8F77-5212B1D7122F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5pre3:*:*:*:*:*:*:*","matchCriteriaId":"66E6659A-090A-4530-8DD2-DCDDE3B9DC28"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5pre4:*:*:*:*:*:*:*","matchCriteriaId":"539606AD-F238-4B2A-A0C8-E7F966B911CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5pre5:*:*:*:*:*:*:*","matchCriteriaId":"9D48C1E8-7B05-40F9-999E-134051E01BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5pre6:*:*:*:*:*:*:*","matchCriteriaId":"35C50763-FBB0-4BB3-BD0D-559F77000C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5pre7:*:*:*:*:*:*:*","matchCriteriaId":"5970BEF7-6157-4578-84EE-314AA2788A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.5pre8:*:*:*:*:*:*:*","matchCriteriaId":"18928D5D-D8C0-4AB4-9FF0-0C3319DF42FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"18C2C602-7664-4C9B-9AA9-6E5BF9E509B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4D7AEEFA-8E33-4C2E-8B2F-902C4E448D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"23DEE4B4-8FB4-48AC-B696-6B6C4A7FCFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D72C34FC-AA36-409D-BBAA-CE2C19293326"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F9A3E26A-EFF9-4754-A98E-4D972454866C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:1.6.4a:*:*:*:*:*:*:*","matchCriteriaId":"01BAED79-3A01-4D1D-97A8-0A65DDD85516"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"AF660756-9374-48D0-BF8E-507F20E18631"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"F30B40F1-737A-4818-893C-3316A7EAE0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B39D755E-C924-4135-99F0-645466949F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"0B5E3E8B-91BB-404A-B5E6-5E372558DCA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"370406D5-6FAD-4064-AA00-5987D2C8BE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"EE9DB24C-BEDC-45F0-811F-41607034C5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"159AF306-E2C0-4F94-93D3-85409B5D892E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"097B2536-37F4-458F-9298-FE83EE967725"},{"vulnerable":true,"criteria":"cpe:2.3:a:netatalk:netatalk:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DA9295B1-8C9E-4D74-8786-A3B893BC459D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50824","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34484","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=648189","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1705","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/13/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32925","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00962.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00966.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=648189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00962.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00966.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5719","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-/C and Hitachi Groupmax Workflow - Development Kit for Active Server Pages before 06-52-/A allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Hitachi Groupmax Web Workflow SDK Set para Active Server Pages antes de v06-52-/C e Hitachi Groupmax Workflow - Development Kit para Active Server Pages antes de v06-52-/A permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:*:*:*:*:*:*:*:*","versionEndIncluding":"06-52_b","matchCriteriaId":"970367C6-1AEE-4C40-AC0D-7384DABE7C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:03-10:*:*:*:*:*:*:*","matchCriteriaId":"127792A9-5BFF-4DAB-BE37-091BCDE81414"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:03-10_a:*:*:*:*:*:*:*","matchCriteriaId":"564EEAFC-3253-4F1A-AEA9-D35A72A9D00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:03-10_b:*:*:*:*:*:*:*","matchCriteriaId":"1867AB6D-867D-4B28-99C5-6517F8F293C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:03-10_c:*:*:*:*:*:*:*","matchCriteriaId":"EFDD3AF3-12C5-49DE-9CDA-0449381336F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:03-10_d:*:*:*:*:*:*:*","matchCriteriaId":"24393FD0-F237-4CBB-80AB-D91EF7FA75A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-00:*:*:*:*:*:*:*","matchCriteriaId":"73A4B03B-328C-4484-9D50-BAF02893889A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-00_a:*:*:*:*:*:*:*","matchCriteriaId":"7D6114DF-F46E-4BDD-847D-338F9A11E999"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-00_b:*:*:*:*:*:*:*","matchCriteriaId":"6C7BE040-D36E-493E-BB12-F27195726991"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-00_c:*:*:*:*:*:*:*","matchCriteriaId":"BBC102A3-DD3B-4989-98EF-BE3CAFFA94BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-00_d:*:*:*:*:*:*:*","matchCriteriaId":"92829CAC-FD6D-4900-B1E1-DCF94AF9E145"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-10:*:*:*:*:*:*:*","matchCriteriaId":"75CA0776-4705-4D9E-8F5A-216F04E4B0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-10_a:*:*:*:*:*:*:*","matchCriteriaId":"7D74C462-8CCC-4D9E-8280-F7D1EFD99593"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-10_b:*:*:*:*:*:*:*","matchCriteriaId":"EA6C17F6-6CCE-46A2-9E35-BEBB87320EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-10_c:*:*:*:*:*:*:*","matchCriteriaId":"E8DF9449-8FFA-46A8-9EB8-F8D66CF87FF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-11:*:*:*:*:*:*:*","matchCriteriaId":"7C112803-F9FC-42F6-A94F-6F1828159C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-11_a:*:*:*:*:*:*:*","matchCriteriaId":"8A957A81-3537-463F-BD71-A79158172A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-11_b:*:*:*:*:*:*:*","matchCriteriaId":"4308F30C-28F7-4CC2-87A7-7DBA68B010F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-11_c:*:*:*:*:*:*:*","matchCriteriaId":"9B6CB1BA-4094-42A4-B88D-CF3A34F79C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-11_d:*:*:*:*:*:*:*","matchCriteriaId":"6AC3C0E1-BBBF-47E5-AC2F-A75E900704B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-11_e:*:*:*:*:*:*:*","matchCriteriaId":"6517A78C-246C-4834-B197-E562408070E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-20:*:*:*:*:*:*:*","matchCriteriaId":"63FB5080-E1E0-45A3-9701-38F1405ACC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-20_a:*:*:*:*:*:*:*","matchCriteriaId":"1360FF36-04A2-477E-9B73-94AAEE8CEE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-20_b:*:*:*:*:*:*:*","matchCriteriaId":"DC0AAAF9-A390-4B48-971C-43D3E91603F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:05-20_c:*:*:*:*:*:*:*","matchCriteriaId":"0C96627C-D320-43C9-996A-2D1A36F7B124"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-00:*:*:*:*:*:*:*","matchCriteriaId":"70A74D9C-9887-4524-8D08-26947C2147DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-01:*:*:*:*:*:*:*","matchCriteriaId":"D7F869E6-5913-4671-A88B-74AF7569DAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-02:*:*:*:*:*:*:*","matchCriteriaId":"BBF9061B-714B-415A-9938-0A2D3F0D6EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-03:*:*:*:*:*:*:*","matchCriteriaId":"62F0AF46-F5F8-4021-8E4E-852C7158B034"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-03_a:*:*:*:*:*:*:*","matchCriteriaId":"448026A0-E0A6-464A-81AC-F054A4A56AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-50:*:*:*:*:*:*:*","matchCriteriaId":"B9EA1066-6EA1-4BFD-A2DB-F3E0ADF8BCA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-51:*:*:*:*:*:*:*","matchCriteriaId":"6227E691-D128-47F1-A17C-0326A3B4AC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-52:*:*:*:*:*:*:*","matchCriteriaId":"5AC9A5AC-2B2F-40A2-BAAC-7B50B2B14DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_web_workflow_sdk_set_for_active_server_pages:06-52_a:*:*:*:*:*:*:*","matchCriteriaId":"D29C195A-B1D0-40BD-8D1A-474DD30238C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:*:*:*:*:*:*:*:*","versionEndIncluding":"06-52","matchCriteriaId":"9313F7D1-75D8-4541-A913-18CEBB760EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:3-10:*:*:*:*:*:*:*","matchCriteriaId":"7F181E44-B7A4-4874-862E-4C2C5711BEE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:3-10_a:*:*:*:*:*:*:*","matchCriteriaId":"31CE75B1-BB8F-429F-91DB-1EE5D4EAC78C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:3-10_b:*:*:*:*:*:*:*","matchCriteriaId":"92432528-0A35-4E7E-8BA7-BE6EFA1FE689"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-00:*:*:*:*:*:*:*","matchCriteriaId":"68F1C3DE-5BCC-45B7-AE3B-AE39B0DDD763"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-00_a:*:*:*:*:*:*:*","matchCriteriaId":"4FD414F9-F7BB-4B77-A072-48EFABF08414"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-00_b:*:*:*:*:*:*:*","matchCriteriaId":"94FB1BE8-8D8F-448A-8B21-93C8298C0BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-10:*:*:*:*:*:*:*","matchCriteriaId":"35A2431C-2CC0-4428-8654-96749A36E0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-10_a:*:*:*:*:*:*:*","matchCriteriaId":"02712285-5746-427B-81AB-78C078A1917E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-11:*:*:*:*:*:*:*","matchCriteriaId":"ABDFBC58-DEAA-4D4C-BDE9-74725C513912"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-11_a:*:*:*:*:*:*:*","matchCriteriaId":"6D98A1F6-0DCA-4B24-991A-6BABE9214D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-20:*:*:*:*:*:*:*","matchCriteriaId":"DF737FC6-414E-4BC5-A0E1-B2562B3AEF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:05-20_a:*:*:*:*:*:*:*","matchCriteriaId":"AD4E473F-41EC-46E3-A598-1CA8515C3919"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-00:*:*:*:*:*:*:*","matchCriteriaId":"486BCEF1-EC15-406F-8BDE-57C958AAD2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-01:*:*:*:*:*:*:*","matchCriteriaId":"272EEBC9-1462-4566-AD38-6DEDD30AE51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-02:*:*:*:*:*:*:*","matchCriteriaId":"1119349C-A2DA-4170-97AF-B1DBB1F7266E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-03:*:*:*:*:*:*:*","matchCriteriaId":"753DF9B2-008F-498B-961C-873A7DDA13E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-03_a:*:*:*:*:*:*:*","matchCriteriaId":"7CB1AFC6-2711-499E-A8CD-BFC7617E6685"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-50:*:*:*:*:*:*:*","matchCriteriaId":"86B391D2-F27D-4666-8091-324EA24B694C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_workflow_to_development_kit_for_active_server_pages:06-51:*:*:*:*:*:*:*","matchCriteriaId":"F68E3986-5C94-4AAA-B24A-A98D8068E21E"}]}]}],"references":[{"url":"http://secunia.com/advisories/33281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2008/Dec/1021483.html","source":"cve@mitre.org"},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS08-026/index.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2008/Dec/1021483.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS08-026/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5720","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mayaa antes de v1.1.23 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante vectores no especificados que involucran la página de error por defecto para la excepción org.seasar.mayaa.impl.engine.PageNotFoundException y posiblemente otras excepciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.22","matchCriteriaId":"148D2F2D-C7DF-4476-B523-0663690E5F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"35502985-0EE4-4EFE-A65E-12D45424C6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.1.0f:*:*:*:*:*:*:*","matchCriteriaId":"7DA3AEC8-6526-44E8-BE50-B1A0A24999BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"42B07EC1-5014-4844-9745-F5DD5BBA5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460CEC42-E7B3-4861-8178-BAAC984D3786"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FE16C6F2-BB97-453F-AD80-FB841DBB3764"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3D1BD85C-DF97-4F1C-8F9C-3590AE0A7E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7F8379E6-B059-4AA3-AD99-D0F05CDB62E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E224FB88-039B-43CE-BE26-E1BC7611A4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6DE7C9C9-EA81-4F24-8F00-A4EDCC56C123"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"70CD409C-D6EB-4B1B-AA24-3A4724C4C5AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"705A1021-26AB-4C2F-902C-EFE1DF378476"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"E5A2BC02-842E-4263-B45A-5DE39159ABFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"F75E8386-97FF-4BAA-B093-F53AEC61572D"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"FE4C76DD-D022-4DA7-8193-DE4ADB393473"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A1DDF6FE-CA59-449D-89CA-43755517CF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"407F6DF4-55C2-4ACF-8CC1-621A08451416"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2C1E71AF-4B0B-4B93-8FC1-66C377854600"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"FB2151E1-F2BC-4211-AC23-E8EA02459DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"1D08D030-935A-4637-A9E0-28A8B80C5F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1AB5FEAA-DE93-4924-AC01-9CD0AB2CF0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"015902EF-F87C-423C-AFD4-B5EC4AB58037"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"02B5E666-9D5D-4C22-B289-27C8C27D1EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"DB812D74-B5BF-4DC2-8F2D-3E4D19FB955E"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"D2E15228-1F9D-4116-BCF2-8AB81791F776"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"2678FE15-D74B-4719-94AD-4F4170755996"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6F99F56A-03B9-41A0-B41B-85BF64807950"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.17:*:*:*:*:*:*:*","matchCriteriaId":"4A68E53E-E11A-4E61-9154-AB53B46435FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.18:*:*:*:*:*:*:*","matchCriteriaId":"AA485425-CBBF-4421-9EF9-E15624741FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"63785AB0-8297-4604-9E80-F81268FE3E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"87BC2330-8532-410E-9175-400D7A197B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:0.9.20a:*:*:*:*:*:*:*","matchCriteriaId":"A9BE5E1D-0576-4DE3-AA70-693B45C4408D"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B8768412-0081-4A58-A6BC-35EAE0949CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6D9D4CFA-D58F-4A87-95E3-BFB46AF932BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"70E05F24-2792-4C43-B692-85D3D70BDB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"A8D7FF44-1D82-4B05-9937-59A910F58736"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CA135D9F-AE1E-4A73-878B-210B64DB6473"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3AC0E8CB-FF8F-4FA0-A004-777C7E5B696C"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E96BBA4-C1D6-4AE5-A637-92E770B0CCC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D0CBD141-BCE4-479B-AA95-8B9FBFAE6EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A4669663-C2D1-4076-A4CD-F032A14B4F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"233A0A34-91F5-4CD9-96C3-75DD710E8606"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"58BE8980-14BE-453D-9760-C50FA9859F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"96F6668F-9596-4CEB-8905-4FB5CC20587A"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"78BF40B5-0721-4C91-A4F3-3BAEA5B2268B"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:beta5:*:*:*:*:*:*","matchCriteriaId":"A6A44DD1-52EF-40BA-8303-28C7CE842410"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.0:beta6:*:*:*:*:*:*","matchCriteriaId":"3E1EE904-9EA4-445A-BCDB-4C624AA46233"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ECD0FC53-3AF7-45A3-BF6C-A27199F4AAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"28957D35-8DEE-4DA8-A565-95DF7AC4E294"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B22EC4D0-341D-4964-BFBD-BAEE9400A7C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E521783A-C6E9-4B2D-A295-9722259C4B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7CFC65F3-4B38-4B29-9B1C-325A36F1A6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D321E720-6E00-4EB2-B253-4BDF766BCE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9BDCFEFD-39A0-4966-8A24-8AE9F0A051FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"A09402E8-C487-46D0-9B96-5458968D7A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"3A93043D-C586-43D9-9B37-A413D8AFEE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"E50D7FA7-AD00-41A7-9952-DDDC6C7D6410"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"ABA29603-1916-4211-B5F9-437A82000E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"C20AE9F9-E78E-42E6-8B85-0016AAAC51AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3D5307D6-DB49-4913-A7E8-2BA117116B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"8FEB5E1D-576A-4D16-85F6-344ADF9EB6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"53C3510A-067B-4029-A859-7F15E366B5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"EBCFC635-CDB0-48BD-AFB1-250F77A3CDF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D349E517-F99B-41E5-B6FF-AAA0BAB361FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"3060AE4D-91CB-471E-961C-2C24EE0EE11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"48834D46-3613-4C28-AE6E-8C83A665163D"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"61F1478D-1963-4597-8D93-600DE54155EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:seasar:mayaa:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"A60A6991-2388-4A8A-B410-C075056796CF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN17298485/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html","source":"cve@mitre.org"},{"url":"http://mayaa.seasar.org/news/vulnerability20081225.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33333","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47623","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN17298485/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mayaa.seasar.org/news/vulnerability20081225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5721","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote attackers to bypass authentication and obtain sensitive information via unspecified vectors."},{"lang":"es","value":"SapporoWorks BlackJumboDog (BJD) antes de 4.2.3 permite a atacantes remotos evitar la autentificación y obtener información sensible mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.2","matchCriteriaId":"066E3B06-C1B3-4D16-BC57-F09F2D20905D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2:*:*:*:*:*:*:*","matchCriteriaId":"D946E761-D8AC-4F76-A425-3091876E22A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AE5EE368-D652-48CA-91B2-EE95CF9C44C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CF9D8A15-F1CF-4863-9B8E-C7C44DE597B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1BE38F69-D1F8-41F7-80C2-5A4DDF91E377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A6ED90E-35D5-4D46-822A-62E323BB6819"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"E672B6E6-8F04-431B-90C1-4A1AAD24754A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B4711CB5-F15B-4640-9595-4DBCCAABEB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B536E1D5-EEF6-4976-A629-CEA8B3A42B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8D77CA6-53EC-4C2A-BEA3-6837311BEEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC6CA6E1-26AA-4432-89A1-5DE4FBF667C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5062726D-9443-46EE-80C9-A38A37170632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"900FE834-DD67-4090-922E-9E584EE0EE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6655B601-9A68-45D0-86F5-F7A345402FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DAB85F83-95FC-4D4A-9D9D-C36C49118473"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"539859E8-F669-4D26-810E-60EC01C9F114"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E41C6DD1-085D-485E-B6D8-F1BB6F898659"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9B3708C2-7891-454C-8185-352EA0FBFBE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2F38512F-F818-46A7-87E3-F0759C07C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CEE3315B-8275-4AC0-A14D-89B554AC59F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"7BC3FC62-B286-4888-BCC2-E14B913B9E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"155BF20D-743E-4CC1-B3E7-57AE9301CF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F58C78EA-F791-4210-85BD-2EF9D5F71E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"94CE18A5-E6C0-4687-896B-D67461D4167F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"554C5803-F82D-45FF-B9BD-1B123E79072D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"53665295-3A19-4A42-BC7D-9EE0591BA8C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D30AF2B0-7B99-4CA9-BCC8-FBF07124ABE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"16947CC3-E637-402F-B25E-033D6A1739BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"937FAFB5-ED36-44E1-8E6F-DF961694C679"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C7A04CC2-51AE-48B1-BC6B-1A201B23FCED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BA82AB6E-7BB0-41FE-932E-BB828B4AEB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D1FF1BE9-9D29-43F0-8F9D-78AFD9F08E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5AF8DF4E-E54F-4629-9E83-22553BDB5AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5149ADA-DC40-441C-BA9C-95EAF9B2B478"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"32988F6A-7634-4C85-85DB-D00AEDB5B666"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"10B388E3-5F40-44C9-9205-81257810FF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0EC292B7-680A-4116-BFC3-0140C57616C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"653C5DF6-703D-4BBA-98EF-5E93DAA58B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0C833EB3-6E2E-4391-9DD2-ADF7F63B34D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"EADF35D1-FC6C-42AC-B492-83ACE45EF72F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"0BA9E1D2-A97F-4E42-B747-6E9DE4F94067"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"F6F030EB-ADB9-4FC8-8A8B-F0F96A45B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"1E00222C-BF5C-4ED5-8562-1531DC3A203C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6D291C7F-AEEF-4C1A-B133-EC2C6A124E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1703D8F1-714F-4D3A-93D3-058F6C01CEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"8EEC7C5D-662E-45FA-9878-967D9D64BFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AEE3A860-5263-4643-A2B7-E1BF76266953"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8763B7B2-EF5F-4ADA-A758-E616A4A92646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E2C703E6-2510-4833-A9F9-7E26274ED611"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8AAF1B-94AF-4E84-92D9-8AA88ABE2BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4B934AB8-E759-4E75-8E99-AF3ADD542F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"EC9DDD93-7DF2-4580-94E8-633667D3770D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"19E4EB4A-9A44-4950-AAE9-B2525B7D72DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"C51C7FA0-18A2-4B22-8436-B6D0B4FE89E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"9BCFEA6A-2412-405B-BCC2-76B4E3CE9F39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"D778886B-2324-423B-90B8-89062FD92D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0F1C3E7F-F0F0-47B2-94B7-A9B4DFB815E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6CBEB619-0913-4492-9B61-C24FA0C646EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"C7B6965B-8979-4F9B-A19D-F53435659CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"42198F14-52D0-42C3-9939-206C0744007E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"67054433-D029-4904-AC86-6BF9BCC7DA96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"AB4CDCAF-B8E2-4559-A3DE-356DFCD05CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4FCDF0EF-2A6C-435C-B9C0-C27FA27E98B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"7729EE10-1093-4746-94D1-0D7AF4C4E31C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"07ABEFF0-95D6-4174-AC8F-D53853481172"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"51940D28-5C50-4B2E-8491-56BB7F4F63E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7815EE73-330C-41DF-BD44-914BE6441605"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"677189D8-A723-432D-9F2B-389B8E510D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"277E5026-C540-49AB-A32B-8B76DF09F19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"01234286-4A65-4FAF-A60E-86A4EA84555F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"042CB1DA-600A-4814-96BD-0898C7BDAC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"3855C567-D571-4815-B474-B409F9FB3B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C676DE63-FE08-474A-B1F7-CB1F1CBD89C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F3B5FBB5-307D-45C0-B6F7-C6122B8C5C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"5337C951-04EE-4E78-9E69-4D4E317F9ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"700C25C9-0AA7-4C7A-834E-CDB015375914"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"B307E755-089B-4FD1-9FDE-300BD4A3DDB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E4AE5A36-1FFE-4804-AE48-EC1729304D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3:*:*:*:*:*:*:*","matchCriteriaId":"E8101C62-1A42-4993-BFF5-C9E6B500C411"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A2DFCF57-4F9A-40C3-9B9D-C6319CFC92E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3CBBB475-C04C-4750-8AC6-AF4BE8EE88B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DDD6956C-CB47-446F-8DFF-E9FB39EE8AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9F5FD8BA-B174-4BA7-A482-F7C884FE0356"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7EA4DBEE-792A-462B-8663-944053748DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BFDFC168-E1DE-42ED-91C4-67075F7F19AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E82EA33-6AFD-4EF8-8376-7372C3F40C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F3AFE8F3-E32B-4E83-8B94-A88403421BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"401FBB1D-FE73-4936-9DE1-51005424DB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"82D6A8A4-5537-4B78-837B-71F891515CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91FC6C5A-8CA9-4995-8F45-D4811A84B1F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"703377ED-6385-4B6B-860C-CE8280464528"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E289A6FD-6167-4D06-9507-C653D2E74D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8E0826F8-6D4C-4814-873D-7A31546CCC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1255152D-7151-4274-B865-8278CE1DAC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"EA8D3F0D-A74E-4A2D-A800-CAD6B9BBC191"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"4EB7677F-9EA8-4441-A460-329F9376DC0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A13C6800-E9F2-4458-9DB3-83A4FF2C4A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F25787A6-6053-4347-9926-01FCA993765D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"180D6B19-6228-4B13-9BD9-ADDAB447AF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5153C2F8-1473-455E-A98E-FAACB1F9C13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7DEF7C4-08C2-4E62-A7F1-61D66F81CAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55F45832-90DD-4C97-AE2A-93ED47A56845"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96638F8D-98BB-46AF-82F3-F6F125DE400C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"752D0826-7EFA-4570-8D2C-BC618253D543"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6F5C31F9-3700-470A-A9B8-705CE63FD36A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"4A0B9601-B33A-46AC-BF7E-7E1711A808A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"49F25EBC-770D-482F-97A0-1A896F8EB551"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1A1D5EB5-7267-4BA0-A46E-F0788D257DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"48FEE145-F31E-4008-8B86-5CA61F7344A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C170242E-9835-45EB-AEE2-ED992EFA1DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"29DB06D7-15B9-4EF9-9B96-81F171D4AC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45EA961B-5DB4-4B95-9686-2B850B5CC450"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1E8C5C84-A31B-49E9-8731-17AB4119327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4E6BA067-DDF0-42D6-8146-EB63F3DF1737"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"98711137-FE45-4132-9DB9-7496828D8F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"3578C733-E577-491A-A182-9CE3D8EB4BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"BF33B78C-4C42-4792-A5BF-EE31205F9A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"916C15BC-D064-48DD-A3D7-B32E74CC9D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"03A148BE-A58C-4B46-9BE4-2938ED1DD90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8DA26D26-53D3-4212-BFA3-134110978BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"398008B3-8CA5-43C0-ADA9-A8BC0ACFAE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"C8E4D18D-4F6A-4B83-9391-0336153E5B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0A13D650-6A50-4910-8EC1-6B10BC1E1721"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5B3E64-A98E-4FC7-852E-EC98D5E90073"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0A29F1E3-B66C-4C3D-A731-B4596072BA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FD73DE-3158-4E1C-A3D1-3A464F0DE0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2CEE14A8-93AB-4CA5-AF6C-5BC109E79C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2F49E021-90D7-4719-B7D8-6F1730B83544"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"095B838B-593F-4588-83E9-4E743850B438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D0483D-E367-4DA5-8F8E-60C6028711C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"66EDDDAD-2FF4-4958-AD60-C60E3E432A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9CE4B40-7436-4124-B8B8-598D4259B3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BD11C9E7-FE3A-48CA-954C-E78E59CF4DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"76D94A9D-9FC0-4805-9BFC-7A5166447267"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"97749C34-78E8-40AC-8C10-A0DF5C95E6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"0B26124C-CE85-4A79-9A3F-D0291464D815"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6A72687D-5B1C-4A09-9490-64127EE4FDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0D989C4B-E353-426A-BDD1-AD442F4FA856"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.8.3:*:*:*:*:*:*:*","matchCriteriaId":"C34521AE-5E99-42C9-8D4A-704914070253"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"8ACB1204-3CE0-486E-B570-EFD0B7BF5F58"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4:*:*:*:*:*:*:*","matchCriteriaId":"D5E3DB1D-5F2B-4FBC-922B-B9ACA378BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"85F15CF3-31B5-4B01-8D52-7E5B5D74C5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.0-b1:*:*:*:*:*:*:*","matchCriteriaId":"001837AD-F5E5-41A0-8A9B-7825C5F1D847"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.0-b2:*:*:*:*:*:*:*","matchCriteriaId":"377F36E4-F212-4A79-957D-824C73799189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.0-b3:*:*:*:*:*:*:*","matchCriteriaId":"92A9E075-8EB4-4CE1-AA6F-B503DE04E2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A1FDF5A0-E190-4C76-9B67-A69EF965113F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD0ADB30-C758-4F17-BD84-DA7A2C591BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F146887B-CD6C-488E-8184-696B023E7786"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EFA442CE-1EF0-41B9-BC1A-FE298A69FB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5669F8FA-BF57-40E9-8302-D0DA035ADD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8A2E20D8-E912-4A5E-9907-1B5383A7FC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"02C357E1-8F37-4CC4-B5E9-EFD94C872971"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB65D0F0-F5EE-4E85-A60E-B1B6602D99CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C08F46EE-004D-4C78-8683-A09A985DD26E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E293ECE3-EBC3-4692-AE5A-7BC6AB295CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0490F288-7C83-4FF0-8E68-DC226FF495A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"34C99CC2-6A80-4F47-85FE-F6BDF8B7555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"AB7E4FD9-AAA2-48F3-8AD4-316BFD255D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"30BB1079-476F-46FE-8E30-69968C6C4E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F79DC21F-BA61-4F63-9727-A411DA82EB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9E221D5E-65F0-4087-A988-C717795E5ECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9DBA588F-76EB-4531-8850-90103FC7D000"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBCA627-6AD1-4C76-A0F1-AB5AE36B4B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CB3F9E73-FA2C-4787-843D-1BBABB4E4486"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:5:*:*:*:*:*:*:*","matchCriteriaId":"D2468A36-0FBD-424B-8CE4-0A6FBB246B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:6:*:*:*:*:*:*:*","matchCriteriaId":"A1A6FB3D-4B5B-4F78-8149-A2574877C2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:7:*:*:*:*:*:*:*","matchCriteriaId":"AA81ABAB-749D-4110-B6D3-BE967126CBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:8:*:*:*:*:*:*:*","matchCriteriaId":"B0BD60BA-D586-4507-A633-17AC9A6A60AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:9:*:*:*:*:*:*:*","matchCriteriaId":"703FE517-FFBC-451C-88B3-91B0A47A10CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:10:*:*:*:*:*:*:*","matchCriteriaId":"02E35BB6-1B19-4689-AF30-3F00C9A0A2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:11:*:*:*:*:*:*:*","matchCriteriaId":"101FEC5D-AFD8-4423-B958-81687C612066"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:12:*:*:*:*:*:*:*","matchCriteriaId":"7F5996B0-C5B1-4563-BA8E-F18187631827"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:13:*:*:*:*:*:*:*","matchCriteriaId":"0033515B-80CA-454B-A315-7D6A9DB6CAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:14:*:*:*:*:*:*:*","matchCriteriaId":"094D2D2D-45A4-43D4-BC7A-0C25D408892E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:15:*:*:*:*:*:*:*","matchCriteriaId":"90591FFB-8526-45F2-B110-D0F6B643BD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:16:*:*:*:*:*:*:*","matchCriteriaId":"25F32AF7-95F4-46CF-A9CE-FFD341B96A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:17:*:*:*:*:*:*:*","matchCriteriaId":"6F3447D2-1667-45FF-989F-00C663886FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:18:*:*:*:*:*:*:*","matchCriteriaId":"D4DF1A7F-D274-4E6E-827C-93E136D2C864"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:19:*:*:*:*:*:*:*","matchCriteriaId":"6427FE92-FF77-48D7-BD02-738F2DB448D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:19b:*:*:*:*:*:*:*","matchCriteriaId":"EBD326E5-77F6-4D13-9B12-B5FD26F7A3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:19c:*:*:*:*:*:*:*","matchCriteriaId":"12A53673-FBCD-4D1E-9D50-37F6CCC0CB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:19d:*:*:*:*:*:*:*","matchCriteriaId":"5FE637E7-16BB-4896-AC04-B2A35D963169"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:20:*:*:*:*:*:*:*","matchCriteriaId":"874C50AB-A93F-432D-9DF5-BBA4829F9A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:21:*:*:*:*:*:*:*","matchCriteriaId":"2827B244-8DB4-4A79-B340-96BA75EE7270"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:22:*:*:*:*:*:*:*","matchCriteriaId":"3E3BAE83-0F8F-4E96-AD91-4CC2C583F0EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:blackjumbodog:23:*:*:*:*:*:*:*","matchCriteriaId":"E8DA338B-31FE-411E-A9E9-EA75A14D3A7C"}]}]}],"references":[{"url":"http://homepage2.nifty.com/spw/info/secure2.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN98063934/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000086.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33334","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33016","source":"cve@mitre.org"},{"url":"http://homepage2.nifty.com/spw/info/secure2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN98063934/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5722","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (preferences) file."},{"lang":"es","value":"Desbordamiento de búfer en SAWStudio 3.9i permite a atacantes remotos ayudados por el usuario provocar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código de su elección mediante un valor SAWSTUDIO PREFERENCES STRUCT largo en un archivo .prf (preferencias)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sawstudio:sawstudio:3.9i:*:*:*:*:*:*:*","matchCriteriaId":"86B8D05E-4D0E-4CD2-BF74-7F28FDD64B2B"}]}]}],"references":[{"url":"http://osvdb.org/51025","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4808","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33011","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7578","source":"cve@mitre.org"},{"url":"http://osvdb.org/51025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5723","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before 1.03 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en CGI RESCUE KanniBBS2000 (también conocido como KanniBBS2000i, MiniBBS2000 y MiniBBS2000i) antes de v1.03 permite a atacantes remotos leer archivos de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-rescue:kannibbs2000:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"F69B1184-7D91-4635-852B-52EBFB0748CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-rescue:kannibbs2000i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"BA4A42C7-EDB8-4FBD-A504-C7C3BC1BBF89"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN86833991/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000078.html","source":"cve@mitre.org"},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081113221811","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32485","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46972","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN86833991/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081113221811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5724","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \\Device\\Epfw that overwrites portions of memory."},{"lang":"es","value":"El driver de Personal Firewall (también conocido como epfw.sys) 3.0.672.0 y anteriores en ESET Smart Security 3.0.672 y anteriores permite a usuarios locales obtener privilegios mediante un IRP manipulado en una petición METHOD_NEITHER IOCTL a \\Device\\Epfw que sobrescribe porciones de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.672","matchCriteriaId":"D3C2CFB8-20F3-4771-ABF3-B39EC52C0C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.551:*:*:*:*:*:*:*","matchCriteriaId":"9E4614B9-9546-49EF-965E-D545C0D8D05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.560:*:*:*:*:*:*:*","matchCriteriaId":"C782CED1-3314-4F26-9F45-3349993676AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.563:*:*:*:*:*:*:*","matchCriteriaId":"7921FB99-64B5-447A-9E80-E1D92655D593"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.621:*:*:*:*:*:*:*","matchCriteriaId":"1C2AAA1D-9816-401F-AD46-1E20681E5EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.642:*:*:*:*:*:*:*","matchCriteriaId":"230BE4DC-8FF9-4B19-A003-97F935681937"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.650:*:*:*:*:*:*:*","matchCriteriaId":"4D069AC5-87F9-44DF-818E-D6B4902C5C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.657:*:*:*:*:*:*:*","matchCriteriaId":"2FFB0EE7-1355-4292-901E-BB214767D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.667:*:*:*:*:*:*:*","matchCriteriaId":"4E07A232-9611-4845-990B-FB455CE38D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.669:*:*:*:*:*:*:*","matchCriteriaId":"ED4D97E2-BA73-40ED-9B72-A2769306E473"}]}]}],"references":[{"url":"http://secunia.com/advisories/33210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/ntiadv0807/ntiadv0807.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32917","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3456","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47477","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/ntiadv0807/ntiadv0807.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5725","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \\Device\\Powerstrip1 that overwrites portions of memory."},{"lang":"es","value":"El driver de NT kernel-mode (también conocido como pstrip.sys) 5.0.1.1 y anteriores en EnTech Taiwan PowerStrip 3.84 y anteriores permite a usuarios locales obtener privilegios mediante ciertos parámetros IRP en una petición IOCTL a \\Device\\Powerstrip1 que sobrescribe porciones de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:*:*:*:*:*:*:*:*","versionEndIncluding":"3.84","matchCriteriaId":"78FE35B0-3706-4496-AC3C-F8F7878D9856"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.00:*:*:*:*:*:*:*","matchCriteriaId":"AAA1435F-7466-4942-981B-31361374E939"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.01:*:*:*:*:*:*:*","matchCriteriaId":"3AE4399E-F4E1-4D53-90FB-C243369D6293"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.02:*:*:*:*:*:*:*","matchCriteriaId":"F8B8DF65-325A-49D2-9912-F1AD1ECE467F"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5090A42F-40A0-47C4-A254-EB5ECA6C2509"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.11:*:*:*:*:*:*:*","matchCriteriaId":"282A32BA-7ABF-4676-9FD3-CC32D35F6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.12:*:*:*:*:*:*:*","matchCriteriaId":"13D14840-195F-4025-A5A4-666B153BDE2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.15:*:*:*:*:*:*:*","matchCriteriaId":"F544C0DF-81F2-4167-83AC-1105283FF29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.16:*:*:*:*:*:*:*","matchCriteriaId":"9C25E753-8854-4528-A048-16B3D55E50EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.18:*:*:*:*:*:*:*","matchCriteriaId":"BD0BB87D-41F1-4827-BE71-B3C8F8C74AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.20:*:*:*:*:*:*:*","matchCriteriaId":"5C7CEE7B-1CB2-4D9D-80AE-887588048D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.25:*:*:*:*:*:*:*","matchCriteriaId":"DD3D08A4-CF00-40F8-A540-941D8D980DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.26:*:*:*:*:*:*:*","matchCriteriaId":"DA98E762-62C1-43EB-88DF-30736B74A5F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.28:*:*:*:*:*:*:*","matchCriteriaId":"4FAFC7CC-03B2-4CB3-B779-9D2D792B5FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.29:*:*:*:*:*:*:*","matchCriteriaId":"6CEFEEFD-BB9D-4750-9230-A10ADB8713F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.30:*:*:*:*:*:*:*","matchCriteriaId":"6335D859-7261-444F-8393-8250E0625D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.40:*:*:*:*:*:*:*","matchCriteriaId":"0FAED109-7C1B-4649-A425-4AE7C4676C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.43:*:*:*:*:*:*:*","matchCriteriaId":"62657BEA-E628-4B47-8C96-55A6E5130E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.44:*:*:*:*:*:*:*","matchCriteriaId":"CF9057B8-2D4D-4FCB-9F61-A47DC41BED06"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.45:*:*:*:*:*:*:*","matchCriteriaId":"E786A8B1-62A0-43AF-9AAF-85FF65403D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.46:*:*:*:*:*:*:*","matchCriteriaId":"499E1776-043C-41F4-B0E9-B9BFDF9511E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.47:*:*:*:*:*:*:*","matchCriteriaId":"197427A9-8A72-4D41-9017-D2BE1F963F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.49:*:*:*:*:*:*:*","matchCriteriaId":"E803A6B8-1ADA-4FB9-A9DE-E53A493F1F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.50:*:*:*:*:*:*:*","matchCriteriaId":"75B2B4B2-999B-4B09-9D0E-2B858EE7ABF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.51:*:*:*:*:*:*:*","matchCriteriaId":"5AE39306-14E6-4E82-9D4C-B54D11871E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.52:*:*:*:*:*:*:*","matchCriteriaId":"7DC3B106-CAE7-4D75-9DA6-EA538D215BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.53:*:*:*:*:*:*:*","matchCriteriaId":"5210F125-318A-4977-B26D-96EAA9CA42D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.54:*:*:*:*:*:*:*","matchCriteriaId":"6309C887-106D-488E-87E6-907E714F6265"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.55:*:*:*:*:*:*:*","matchCriteriaId":"45AC8EE0-A390-4F25-90B0-4E8BBF9CC64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.56:*:*:*:*:*:*:*","matchCriteriaId":"06E08371-6DA8-42B9-B499-924084F5034D"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.57:*:*:*:*:*:*:*","matchCriteriaId":"9663FE3D-54B2-4A32-A6C5-409B91F848F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.58:*:*:*:*:*:*:*","matchCriteriaId":"EC58B3EC-6CA0-4FAF-9338-1B5EA25C59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.59:*:*:*:*:*:*:*","matchCriteriaId":"512F5260-DB81-4D71-8AD2-10F61E316288"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.60:*:*:*:*:*:*:*","matchCriteriaId":"ED43EF6D-A0DC-4AF7-99D8-333E44B47B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.61:*:*:*:*:*:*:*","matchCriteriaId":"34A329F0-4879-4AA4-ADAE-A514CA4C6B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.62:*:*:*:*:*:*:*","matchCriteriaId":"E09C7983-DE2E-41B0-93F1-154F8015759A"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.63:*:*:*:*:*:*:*","matchCriteriaId":"9A4C9ED6-7190-4579-92C4-B7488FA9BDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.64:*:*:*:*:*:*:*","matchCriteriaId":"120A943F-3443-49A2-ADF8-3C38CD0B5E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.65:*:*:*:*:*:*:*","matchCriteriaId":"D8A18669-28BC-4D20-AC2A-745AD947D4B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.70:*:*:*:*:*:*:*","matchCriteriaId":"40512F60-DB77-47DC-A468-7EFF32F10B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.72:*:*:*:*:*:*:*","matchCriteriaId":"9987ED71-A973-4C2E-8773-E69F63CD1BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.73:*:*:*:*:*:*:*","matchCriteriaId":"4E2CB50C-80CA-4195-9D8D-63E70E1706AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.74:*:*:*:*:*:*:*","matchCriteriaId":"6EE00FCF-3E4D-462B-BC96-E2CE51A571F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.75:*:*:*:*:*:*:*","matchCriteriaId":"6DD49643-8B73-4FC3-BBA9-1779E37759C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.76:*:*:*:*:*:*:*","matchCriteriaId":"3C7658ED-57E3-4F7B-9CCB-8BA27B57C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.77:*:*:*:*:*:*:*","matchCriteriaId":"2C5BBD32-CF44-4A44-A9B2-72B0771E287A"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.78:*:*:*:*:*:*:*","matchCriteriaId":"C1F2BC22-A1CA-4601-8317-DEE5EEB25B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.80:*:*:*:*:*:*:*","matchCriteriaId":"DD1AA858-9FDB-4218-A316-59C50BF97E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.81:*:*:*:*:*:*:*","matchCriteriaId":"9D962253-93B1-4D86-BF98-99EA9AA8BE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:entechtaiwan:powerstrip:3.83:*:*:*:*:*:*:*","matchCriteriaId":"1ABA1282-2AD2-4474-908A-FD02759EA5AF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4809","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/ntiadv0810/ntiadv0810.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32961","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47532","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/ntiadv0810/ntiadv0810.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5726","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en thread.php en stormBoards 1.0.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormboards_aaronnemisis:stormboards:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B8E4FC4-6360-43FB-AB80-1ADB1DFDEA68"}]}]}],"references":[{"url":"http://osvdb.org/51023","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4810","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32993","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3507","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7565","source":"cve@mitre.org"},{"url":"http://osvdb.org/51023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5727","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the query string."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules/auth/password_recovery.php en AIST NetCat 3.12 y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección mediante la cadena query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"0AEB2D63-CC6D-4A4E-B74F-05ED07069920"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B63CEAE5-9423-4CBA-A493-D5EC71441857"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B52E6C38-426E-49F4-9BA7-CF83ACDB97D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4A988705-A606-4AA2-8753-3F95226CDCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"894816D2-6D9F-4417-B67D-141A5D4B66B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8C3740EA-278A-45ED-879D-FB8B25394F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.4:*:*:*:*:*:*:*","matchCriteriaId":"604479AA-BA7C-4793-A6D5-E7DEA5D7461F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"07F9D73E-1A8D-4863-9A4C-3B650175206C"}]}]}],"references":[{"url":"http://osvdb.org/50965","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4818","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32990","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47575","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7559","source":"cve@mitre.org"},{"url":"http://osvdb.org/50965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5728","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the system parameter in modules/netshop/post.php; and the INCLUDE_FOLDER parameter in (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, and (5) forum.inc.php in modules/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en AIST NetCat 3.12 y anteriores, cuando magic_quotes_gpc está deshabilitado y register_globals está habilitado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en (1) el parámetro system en modules/netshop/post.php; y el parámetro INCLUDE_FOLDER en (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, y (5) forum.inc.php en modules/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"0AEB2D63-CC6D-4A4E-B74F-05ED07069920"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B63CEAE5-9423-4CBA-A493-D5EC71441857"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B52E6C38-426E-49F4-9BA7-CF83ACDB97D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4A988705-A606-4AA2-8753-3F95226CDCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"894816D2-6D9F-4417-B67D-141A5D4B66B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8C3740EA-278A-45ED-879D-FB8B25394F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.4:*:*:*:*:*:*:*","matchCriteriaId":"604479AA-BA7C-4793-A6D5-E7DEA5D7461F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"07F9D73E-1A8D-4863-9A4C-3B650175206C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32992","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47576","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5729","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) form and (2) control parameters to FCKeditor/neditor.php, and the (3) path parameter to admin/siteinfo/iframe.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AIST NetCat 3.12 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) form y (2) control a FCKeditor/neditor.php, y el parámetro (3) path a admin/siteinfo/iframe.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"0AEB2D63-CC6D-4A4E-B74F-05ED07069920"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B63CEAE5-9423-4CBA-A493-D5EC71441857"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B52E6C38-426E-49F4-9BA7-CF83ACDB97D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4A988705-A606-4AA2-8753-3F95226CDCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"894816D2-6D9F-4417-B67D-141A5D4B66B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8C3740EA-278A-45ED-879D-FB8B25394F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.4:*:*:*:*:*:*:*","matchCriteriaId":"604479AA-BA7C-4793-A6D5-E7DEA5D7461F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"07F9D73E-1A8D-4863-9A4C-3B650175206C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47577","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5730","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving (1) a %0a sequence in a cookie and (2) the add.php file."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de CRLF en AIST NetCat versión 3.12 y anteriores, permite a atacantes remotos tener un impacto desconocido por medio de vectores no especificados involucrando a (1) una secuencia %0a en una cookie y (2) el archivo add.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"0AEB2D63-CC6D-4A4E-B74F-05ED07069920"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B63CEAE5-9423-4CBA-A493-D5EC71441857"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B52E6C38-426E-49F4-9BA7-CF83ACDB97D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4A988705-A606-4AA2-8753-3F95226CDCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"894816D2-6D9F-4417-B67D-141A5D4B66B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8C3740EA-278A-45ED-879D-FB8B25394F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.4:*:*:*:*:*:*:*","matchCriteriaId":"604479AA-BA7C-4793-A6D5-E7DEA5D7461F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"07F9D73E-1A8D-4863-9A4C-3B650175206C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47579","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5731","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a \"Driver Collapse.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El driver del dispositivo GPwded (también conocido como PGPwded.sys) en PGP Corporation PGP Desktop 9.0.6 versión 6060 y 9.9.0 versión 397 permite a usuarios locales provocar una denegación de servicio (caída del sistema) y posiblemente obtener privilegios mediante una cierta petición METHOD_BUFFERED IOCTL que sobrescribe porciones de memoria, relacionado con una \"caída del driver\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:9.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C2A6783F-4221-4BA0-9D1F-C432014499F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"3A82504F-541C-4123-8C06-7801B9281BF1"}]}]}],"references":[{"url":"http://osvdb.org/50914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33310","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4811","source":"cve@mitre.org"},{"url":"http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.php","source":"cve@mitre.org"},{"url":"http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service_POC.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499572/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32991","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021493","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7556","source":"cve@mitre.org"},{"url":"http://osvdb.org/50914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.evilfingers.com/advisory/PGPDesktop_9_0_6_Denial_Of_Service_POC.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499572/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5732","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo sin restricciones en lib/image_upload.php en KafooeyBlog 1.55b permite a atacantes remotos ejecutar código de su elección actualizando un archivo con extensión ejecutable y a continuación accediendo a él mediante una petición directa al archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kafooeyblog:kafooeyblog:1.55b:*:*:*:*:*:*:*","matchCriteriaId":"11FE54C7-4A97-42E6-8EA0-62EC77C189F9"}]}]}],"references":[{"url":"http://osvdb.org/50876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4812","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32953","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47535","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7537","source":"cve@mitre.org"},{"url":"http://osvdb.org/50876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5733","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en blog.php en Team Impact TI Blog System mod para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:team_impact_ti_blog_system_module:-:*:*:*:*:*:*:*","matchCriteriaId":"7E7FB4E0-B477-4AC0-A070-F89DB7A87B87"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3E18BD-EA3F-4136-A256-A6A74F7066DD"}]}]}],"references":[{"url":"http://osvdb.org/51017","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7598","source":"cve@mitre.org"},{"url":"http://osvdb.org/51017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5734","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T17:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebMail Pro en IceWarp Software Merak Mail Server 9.3.2 permite a atacantes remotos inyectar secuencias de comandos web de su elección o HTML mediante un elementos IMG en un mensaje e-mail en formato HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:merak_mail_server:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E96027B1-E22E-4CFA-99B6-75C87E6AD990"}]}]}],"references":[{"url":"http://blog.vijatov.com/index.php?itemid=11","source":"cve@mitre.org"},{"url":"http://osvdb.org/50885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32969","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47533","source":"cve@mitre.org"},{"url":"http://blog.vijatov.com/index.php?itemid=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5735","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en skin.c en CoolPlayer de 2.17 a 2.19 permite a atacantes remotos ejecutar código de su elección mediante un valor PlaylistSkin grande en un archivo skin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolplayer:coolplayer:2.17:*:*:*:*:*:*:*","matchCriteriaId":"89472CA5-7BA9-4F29-8E0E-C52BB2D3298B"},{"vulnerable":true,"criteria":"cpe:2.3:a:coolplayer:coolplayer:2.18:*:*:*:*:*:*:*","matchCriteriaId":"FF60AE3E-90C0-4F60-9C76-68CAD2A9C0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:coolplayer:coolplayer:2.19:*:*:*:*:*:*:*","matchCriteriaId":"925F1556-4CEF-484D-B712-B1FE45079B9A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4813","source":"cve@mitre.org"},{"url":"http://www.bmgsec.com.au/advisory/43/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499480/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32947","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47527","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7536","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7547","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bmgsec.com.au/advisory/43/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499480/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5736","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T18:30:03.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc\r\n\r\n\r\n\r\nSolution\r\n\r\nPerform one of the following:\r\n\r\n1) Upgrade your vulnerable system to 6-STABLE, or 7-STABLE, or to the\r\nRELENG_7_0, RELENG_6_4, or RELENG_6_3 security branch dated after the\r\ncorrection date.\r\n\r\n2) To patch your present system:\r\n\r\nThe following patches have been verified to apply to FreeBSD 6.3, 6.4,\r\nand 7.0 systems.\r\n\r\na) Download the relevant patch from the location below, and verify the\r\ndetached PGP signature using your PGP utility.\r\n\r\n[FreeBSD 6.x]\r\n# fetch http://security.FreeBSD.org/patches/SA-08:13/protosw6x.patch\r\n# fetch http://security.FreeBSD.org/patches/SA-08:13/protosw6x.patch.asc\r\n\r\n[FreeBSD 7.x]\r\n# fetch http://security.FreeBSD.org/patches/SA-08:13/protosw.patch\r\n# fetch http://security.FreeBSD.org/patches/SA-08:13/protosw.patch.asc\r\n\r\nb) Apply the patch.\r\n\r\n# cd /usr/src\r\n# patch < /path/to/patch\r\n\r\nc) Recompile your kernel as described in\r\n<URL:http://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the\r\nsystem.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are \"not properly initialized\" for (1) netgraph sockets and (2) bluetooth sockets."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en FreeBSD 6 antes de 6.4-STABLE, 6.3 antes de 6.3-RELEASE-p7, 6.4 antes de 6.4-RELEASE-p1, 7.0 antes de 7.0-RELEASE-p7, 7.1 antes de 7.1-RC2 y 7 antes de 7.1-PRERELEASE permite a usuarios locales obtener privilegios mediante vectores de ataque desconocidos relacionados con punteros de funciones que \"no están correctamente inicializados\" para sockets(1) netgraph y (2) bluetooth."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:-:*:*:*:*:*:*","matchCriteriaId":"F587A367-E975-4A38-BBC3-AF3194F1E296"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:-:*:*:*:*:*:*","matchCriteriaId":"2D9F4FEB-30E5-4EF6-BEB6-0F1A4DE7EFB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p1:*:*:*:*:*:*","matchCriteriaId":"BB6FC258-9735-4199-9499-ACFCEF30EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p2:*:*:*:*:*:*","matchCriteriaId":"BA825CA5-84B6-4DA4-9F7F-644E532185A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p3:*:*:*:*:*:*","matchCriteriaId":"90B64FDC-01C0-4A83-827D-31F477C0359B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p4:*:*:*:*:*:*","matchCriteriaId":"6C826F67-CA6D-4DA4-B5E9-9F4FEFE3D6D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p5:*:*:*:*:*:*","matchCriteriaId":"D5666E87-F0CB-45FA-9AED-C7A0F383A559"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:p6:*:*:*:*:*:*","matchCriteriaId":"6032AC16-C610-4D19-96A2-FA5233FC56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:-:*:*:*:*:*:*","matchCriteriaId":"F0F3E8EE-7DA6-4A92-8A73-4785205E4BF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:-:*:*:*:*:*:*","matchCriteriaId":"1EA45D5C-199D-44A1-90B1-1157F899A01A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p1:*:*:*:*:*:*","matchCriteriaId":"06C1FB6A-E829-4FF3-B206-8877C9747DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p3:*:*:*:*:*:*","matchCriteriaId":"F3A3BF88-7014-440D-8AC2-FB42A779F489"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p4:*:*:*:*:*:*","matchCriteriaId":"777E9236-AD46-484F-BC22-7F74AB6261F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p5:*:*:*:*:*:*","matchCriteriaId":"4D308A1E-5364-483D-AB82-8269D576CEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:p6:*:*:*:*:*:*","matchCriteriaId":"A0BD460B-45CC-48DF-853D-E6BF7A7BEDFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:-:*:*:*:*:*:*","matchCriteriaId":"93078B0C-2CA2-4A9C-A740-9947074F837C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52DBF406-9C77-4DDA-AB7D-40FAE40023D0"}]}]}],"references":[{"url":"http://osvdb.org/50936","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8124","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/16951","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32976","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021491","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47570","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7581","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/50936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/16951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/32976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5737","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T18:30:03.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Nodstrum MySQL Calendar 1.1 y 1.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodstrum:mysql_calendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC9FBA8-207B-493E-A0CA-CA581E027C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodstrum:mysql_calendar:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3B21BDD1-2CD1-4164-AF26-08466D67E107"}]}]}],"references":[{"url":"http://osvdb.org/50892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33266","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4815","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32978","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47544","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7551","source":"cve@mitre.org"},{"url":"http://osvdb.org/50892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5738","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T18:30:03.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Nodstrum MySQL Calendar 1.1 y 1.2 permite a atacantes remotos evitar la autentificación y obtener acceso de administrador estableciendo la cookie nodstrumCalendarV2 a 1. NOTA: alguno de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodstrum:mysql_calendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC9FBA8-207B-493E-A0CA-CA581E027C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodstrum:mysql_calendar:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3B21BDD1-2CD1-4164-AF26-08466D67E107"}]}]}],"references":[{"url":"http://osvdb.org/50827","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4816","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32914","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7513","source":"cve@mitre.org"},{"url":"http://osvdb.org/50827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5739","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T18:30:03.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en evb/check_url.php en Pligg CMS 9.9.5 Beta permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.5:beta:*:*:*:*:*:*","matchCriteriaId":"3D7F4359-BD59-4291-BB58-CBA34A6A5F27"}]}]}],"references":[{"url":"http://osvdb.org/50913","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4817","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32970","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47571","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7544","source":"cve@mitre.org"},{"url":"http://osvdb.org/50913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5742","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T20:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the redirect parameter in a logoff action to modules/auth/index.php or (2) the url parameter to modules/linkmanager/redirect.php.  NOTE: this was reported within an \"HTTP Response Splitting\" section in the original disclosure."},{"lang":"es","value":"Múltiples vulnerabilidades de redirección abierta en AIST NetCat 3.12 y anteriores permite a atacantes remotos redirigir usuarios a sitios web de su elección y llevar a cabo ataques de phishing mediante (1) el parámetro redirect en una acción de logoff a modules/auth/index.php o (2) el parámetro url a modules/linkmanager/redirect.php. NOTA: esto se reportó en una sección \"Separación de Respuesta HTTP\" en el momento que se mostró el original."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"0AEB2D63-CC6D-4A4E-B74F-05ED07069920"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B63CEAE5-9423-4CBA-A493-D5EC71441857"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B52E6C38-426E-49F4-9BA7-CF83ACDB97D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4A988705-A606-4AA2-8753-3F95226CDCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"894816D2-6D9F-4417-B67D-141A5D4B66B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8C3740EA-278A-45ED-879D-FB8B25394F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:2.4:*:*:*:*:*:*:*","matchCriteriaId":"604479AA-BA7C-4793-A6D5-E7DEA5D7461F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"07F9D73E-1A8D-4863-9A4C-3B650175206C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7560","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5743","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack."},{"lang":"es","value":"pdfjam crea los archivos (1) pdf90, (2) pdfjoin y (3) pdfnup con un nombre predecible, lo que permite a usuarios locales sobrescribir archivos de su elección mediante un ataque de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdfjam:pdfjam:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C6692CD0-700F-4E2B-82EF-C94155B95D08"}]}]}],"references":[{"url":"http://secunia.com/advisories/33278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34312","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/19/3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32931","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=459031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47519","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00484.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00488.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/19/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=459031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00488.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5744","sourceIdentifier":"cve@mitre.org","published":"2008-12-26T21:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync."},{"lang":"es","value":"Error de índice de array en el driver de dahdi/tor2.c en Zaptel (también conocido como DAHDI) 1.4.11 y anteriores permite a usuarios locales en el grupo dialout sobrescribir un valor entero en la memoria del kernel escribiendo a /dev/zap/ctl, relacionado con un parche tor2 incorrecto para CVE-2008-5396 que utiliza la variable equivocada en una comprobación de rango contra el valor de lc->sync."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.11","matchCriteriaId":"44ADB7D9-FDFE-478E-ADD0-8978BE18D365"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC52E469-E0A0-4114-A297-862E0D6364C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"3B906772-5BF8-4C60-B2D5-822D934BABFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:zaptel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"E8A4A878-FFDF-4A58-9254-74CD7AAEEEBF"}]}]}],"references":[{"url":"http://bugs.digium.com/view.php?id=13954#96700","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32960","source":"cve@mitre.org"},{"url":"http://svn.digium.com/view/dahdi?view=rev&revision=5590","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/19/2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475446#c4","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47666","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=13954#96700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.digium.com/view/dahdi?view=rev&revision=5590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/12/19/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475446#c4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5745","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"This bug cannot be leveraged for code execution according to the vendor.  \r\n\r\nSource 1 - http://blogs.technet.com/swi/archive/2008/12/29/windows-media-player-crash-not-exploitable-for-code-execution.aspx\r\n\r\nSource 2 - http://blogs.technet.com/msrc/archive/2008/12/29/questions-about-vulnerability-claim-in-windows-media-player.aspx","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927."},{"lang":"es","value":"Desbordamiento de entero en Microsoft Windows Media Player 9, 10 y 11, permite a atacantes remotos ejecutar código de su elección a través de ficheros (1) WAV, (2) SND, o (3) MID manipulados. NOTA: no está claro si esta vulnerabilidad está relacionada con el CVE-2008-4927 o CVE-2008-2253."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:10:*:*:*:*:*:*:*","matchCriteriaId":"C28602CC-7866-4C30-B518-055923599A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:11:*:*:*:*:*:*:*","matchCriteriaId":"B27BB8B0-BC24-4A3F-A18B-63D57AB4799B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4823","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499579/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33018","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47664","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7585","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499579/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5746","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1\r\n\r\nThis issue can occur in the following releases:\r\n\r\nSPARC Platform\r\n\r\n    * Sun SNMP Management Agent \"SUNWmasf\" 1.4u2 thru 1.5.4 (For Solaris 8, 9 and 10)\r\n","evaluatorSolution":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1\r\n\r\nThis issue is addressed in the following release:\r\n\r\nSPARC Platform\r\n\r\n    * Sun SNMP Management Agent (\"SUNWmasf\") 1.5.5 or later (For Solaris 8, 9 and 10)\r\n\r\nSun SNMP Management Agent is available for download at http://www.sun.com/download/","cveTags":[],"descriptions":[{"lang":"en","value":"Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files."},{"lang":"es","value":"Sun SNMP Management Agent (SUNWmasf) v1.4u2 a la v1.5.4, permite a usuarios locales sobrescribir ficheros de su elección y obtener privilegios a través de un ataque de enlace simbólico sobre ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:snmp_management_agent:1.4:update_2:sparc:*:*:*:*:*","matchCriteriaId":"F87AFE55-50CA-47F3-8EA1-11197360AEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:snmp_management_agent:1.5.3:*:sparc:*:*:*:*:*","matchCriteriaId":"E8A5E994-1F45-4DAC-A6A1-21B35054E24C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:snmp_management_agent:1.5.4:*:sparc:*:*:*:*:*","matchCriteriaId":"B6C7240A-5419-4F70-9E48-73C7F5F9942C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://osvdb.org/50987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33014","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021496","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47619","source":"cve@mitre.org"},{"url":"http://osvdb.org/50987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5747","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a \"corrupted\" header that still allows the program to be executed.  NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor."},{"lang":"es","value":"F-Prot 4.6.8 para GNU/Linux, permite a atacantes remotos evitar la protección antivirus a través del programa ELF manipulado mediante una cabecera \"corrupta\" que permite que el programa sea ejecutado. NOTA:  debido a un error en la revelación inicial, F-secure fue indicado incorrectamente por el fabricante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:4.6.8:*:linux:*:*:*:*:*","matchCriteriaId":"2F743B76-C8BC-4D16-A216-A5B13C18FFE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/34700","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-14.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4822","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499305/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499501/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499305/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499501/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5748","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en plugins/spaw2/dialogs/dialog.php en BloofoxCMS 0.3.4, permite a atacantes remotos leer ficheros de su elección a través de los parámetros (1) \"lang\", (2) \"theme\", y (3) \"module\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bloofox:bloofoxcms:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E154CCD4-0BFB-473C-BE02-0098675C3B2D"}]}]}],"references":[{"url":"http://osvdb.org/51006","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33135","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4820","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33013","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47611","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7580","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/51006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5749","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.  NOTE: a third party disputes this issue, stating that Chrome \"will ask for user permission\" and \"cannot launch the applet even [if] you have given out the permission."},{"lang":"es","value":"** CUESTIONADA ** Vulnerabilidad de inyección de argumento en Google Chrome 1.0.154.36 sobre  Windows XP SP3, permite a atacantes remotos ejecutar comandos de su elección a través de la opción \"--renderer-path\" en una URI chromehtml:. NOTA: un tercero cuestiona esta vulnerabilidad argumentando que Chrome \"pregunta sobre los permisos de usuario\" y \"no puede lanzar el applet incluso si el usuario da el permiso\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_chrome.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499570/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499581/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499616/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32997","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7566","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_chrome.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499570/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499581/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499616/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5750","sourceIdentifier":"cve@mitre.org","published":"2008-12-29T15:24:23.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en Microsoft Internet Explorer 8 beta 2 sobre Windows XP SP3, permite a atacantes remotos ejecutar comandos de su elección a través de la opción \"--renderer-path\" en una URI chromehtml:."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_chrome.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499570/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32999","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7566","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_chrome.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/4821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499570/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5751","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ndex.php en AlstraSoft Web Email Script Enterprise (ESE), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"directory\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:web_email_script_enterprise:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"A5C8A61D-53DA-482C-A883-581D6F2BFDAB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4824","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7596","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5752","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en getConfig.php en el plugin Page Flip Image Gallery v0.2.2 y anteriores para WordPress, cuando magic_quotes_gpc están deshabilidadas, permite a atacantes remotos leer ficheros de su elección a través de ..(punto punto) en el parámetro \"book_id\". NOTA: algunos de estos detalles se han obtenido a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2","matchCriteriaId":"A69E8AF2-7287-4CDA-B3BD-A899926788F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"494EB920-41A9-4B70-908B-200361FB2E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"77273E14-62F6-412F-BFB8-D3B9A54853C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"90E3FF21-B1D9-432E-BC5F-DAA69D589835"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B3880C31-B666-482A-B09B-9B42D188B459"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C511C86E-3560-4F44-943C-82C90460736D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"28C030E1-0ECF-4C70-AD38-8CE2A5AF6E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:page_flip_image_gallery_plugin:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B4825659-ECDA-4530-AE80-AC50B1FD4360"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://osvdb.org/50902","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4836","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32966","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47568","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7543","source":"cve@mitre.org"},{"url":"http://osvdb.org/50902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5753","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the quick-connect bar."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en BulletProof FTP Client 2.63 y 2010 permite a atacantes asistidos por usuario ejecutar código arbitrario a través de una entrada en un archivo de marcadores con un nombre host largo, lo cual aparece como un parámetro host dentro de la barra de conexión rápida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpftp:bulletproof_ftp_client:2.63:*:*:*:*:*:*:*","matchCriteriaId":"23FB5828-510A-4854-BBE3-5AEB8858A149"}]}]}],"references":[{"url":"http://osvdb.org/50968","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/131965/BulletProof-FTP-Client-2010-Buffer-Overflow.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33322","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4835","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/565580","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33007","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/37056/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7571","source":"cve@mitre.org"},{"url":"http://osvdb.org/50968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/131965/BulletProof-FTP-Client-2010-Buffer-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/565580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/37056/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5754","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-File) with a long second line, possibly a related issue to CVE-2008-5753."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en BulletProof FTP Client, permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero .bps (también conocido como Session-File) con una segunda línea larga, posiblemente relacionado con el CVE-2008-5753."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpftp:bulletproof_ftp_client:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"0A782F7F-DEB0-47A8-B81F-04F05E66C693"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33024","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7589","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8420","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5755","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en IntelliTamper v2.07 y v2.08, permite a atacantes remotos ejecutar código de su elección a través de un fichero MAP que contiene una URL larga. Cuestión posiblemente relacionada con el CVE-2006-2494."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.07:*:*:*:*:*:*:*","matchCriteriaId":"5DB8599A-66C1-4F5A-BCBD-7F87F4A70F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.08:*:*:*:*:*:*:*","matchCriteriaId":"B4E5A0A1-3DCC-4F45-8943-5379F4B10CC3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33022","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47741","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7582","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5756","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping (.cmap) file."},{"lang":"es","value":"Desbordamiento de búfer en BreakPoint Software Hex Workshop v5.1.4 permite a atacantes asistidos por el usuario provocar una denegación de servicio y posiblemente la ejecución de código de su elección a través de una referencia de mapeo larga en un fichero Color Mapping (.cmap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BAD8E03A-2B59-4015-8A46-70B8C7494392"}]}]}],"references":[{"url":"http://secunia.com/advisories/33327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4838","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33023","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3519","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47630","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5757","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en textarea/index.php en Textpattern (también conocido como Txp CMS) v4.0.6 y anteriores, permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección  a través del parámetro \"Body\" en una acción \"article\". NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.6","matchCriteriaId":"B189370D-9772-4CC7-8576-FE57AD3D1EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"82F2F1FE-DC36-42D4-BA22-542BFABC8ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F5DCB6-1FCD-4455-B00B-B65F090EF021"},{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DA7DA403-63BF-4863-9CCC-BF4F0652F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E3ADC0D7-7488-4F01-9BD5-F200E49E02B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:textpattern:textpattern:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"24F2425F-6C20-404F-A257-8BBA5F8C1801"}]}]}],"references":[{"url":"http://secunia.com/advisories/28793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27606","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487483/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5758","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors related to private messages."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en PHParanoid anterior a v0.5, permite a atacantes remotos realizar acciones sin especificar como usuarios validados a través de vectores de ataque desconocidos relacionados con los mensajes privados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"4F4BD80F-9351-42D8-9548-FE12A94ECCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C004DC1-9DF7-4870-A4E3-916F9254D4AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.2:*:*:*:*:*:*:*","matchCriteriaId":"507C2B36-7646-4D0B-A099-357FE17176D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phparanoid:phparanoid:0.3:*:*:*:*:*:*:*","matchCriteriaId":"84EF42B6-520E-400F-97B1-1F9A0831FA7C"}]}]}],"references":[{"url":"http://secunia.com/advisories/28847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575374","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47749","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=575374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5759","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08_Files module.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en FlatnuX CMS (también conocido como Flatnuke3) 2008-12-11. permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"name\" en una acción updaterecord al index.php en el módulo 08_Files. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos únicamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flatnux:flatnux:2008-12-11:*:*:*:*:*:*:*","matchCriteriaId":"6F995CC9-9C76-48BF-A3C8-F3EEB108BFBE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47367","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5760","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en error413.php en Kerio MailServer anterior a v6.6.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"sent\". NOTA: algunos de estos detalles han sido obtenidos a a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.6.1","matchCriteriaId":"07939A85-795C-4DEC-A63F-B2A468888EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B7D26DCD-85B0-4908-A414-119862437C28"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8B58BAF1-CF68-4F8C-8BCD-FF3C015FE72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B9C9084-B518-44F2-9F65-032A644FEC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F55CFA68-E07E-46CE-87F6-00AE9A268CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"58ECCE69-EAB9-427E-8922-F463E184C9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"20E50A0F-7AFF-4F17-8833-839DDBD538C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"9063B23B-E585-41E4-98FF-DF18602C6E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"6CB993B9-0CF5-4E71-A612-F3033F4F202B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2B079207-FAF3-4FE2-B420-342440958C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"8A82C0BC-50D5-4FAC-A654-387B49CB7047"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"9BC1748E-32F0-4144-A597-89E8B8705FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.5:*:*:*:*:*:*:*","matchCriteriaId":"39C92F3B-23E3-4978-89AA-FC17B8EDF580"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.6:*:*:*:*:*:*:*","matchCriteriaId":"7B1FA201-CBCF-4D61-9848-F661A16EBEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.7:*:*:*:*:*:*:*","matchCriteriaId":"0A2154DF-2306-4E8B-B78A-1BF20E697157"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.8:*:*:*:*:*:*:*","matchCriteriaId":"79C4389A-4BF4-4C38-8FF5-72B92548EFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.9:*:*:*:*:*:*:*","matchCriteriaId":"67230E76-2C30-4038-BC5B-BAC02EDDFAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.10:*:*:*:*:*:*:*","matchCriteriaId":"FAEA1EB3-5F4F-40D6-833C-225AC348760D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EC515E75-119E-4CB9-985E-00E6A9349178"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FA7CEE3-7D36-4F9D-8AC6-3F4C55D360CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"937A6092-48C9-4721-B069-0B46D3520E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F38A0AAC-ACA8-44D3-B36A-741D01BE166F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E9AC0D46-2096-4006-8FED-A67AFCE2ED98"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B391EF70-D407-4087-96CF-B925CA2799B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"23D64B85-51A2-47BC-94A2-8C9980CC573D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D4AB197E-4F2E-4976-B6F7-17EB8A8BFBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A8ADC9C-F49D-4CD2-B6DC-63552480646F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"991FC66F-B9F7-4E67-9D90-E56DE26FD85F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F343A3A1-1335-4785-B90E-3C62736A06B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5605CD2B-8607-446C-94C4-B539C2396FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B88E6A90-0433-493B-9E68-D0809F8A7B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.3_patch_1:*:*:*:*:*:*:*","matchCriteriaId":"402EE4C7-77D0-4C06-8407-9F69F4059890"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"59830366-4CE8-44A2-9761-FB9226414A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E119E7EB-F7FE-451E-8E7C-BBAB3849DF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9B080E7F-7BA8-48A1-B0EC-16B3BE5B183F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A75F2BE-8D1A-4022-823E-16BA42DA02DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF86DC55-8519-44D5-A7FD-77FA8B2651AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC7A299-CD9D-4159-A6C5-40F72DA158B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"83D02EC9-EF7F-4EBF-A053-1AE7DE164C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1_p2:*:*:*:*:*:*:*","matchCriteriaId":"2AE229C4-559F-4BB9-AF47-54C43AD03587"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"45649E00-F6B4-4782-A989-D9D5E20FA75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"178E27A1-7A68-4298-96D8-540E0E77CDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F30234CC-D865-4F1D-A4C7-FE6D050D2158"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"312EC630-9D21-4560-A57D-77D1704942C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.0:patch_1:*:*:*:*:*:*","matchCriteriaId":"4522E3BF-C7DC-4160-8841-7784C4C575BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FB7D282B-ED68-45EB-912E-72F9E85DC23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"609DCDF8-437A-49B1-95FB-5E0ED30E0711"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8CD16F9A-6CC4-4FB2-9441-768312DEBB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.0:patch_1:*:*:*:*:*:*","matchCriteriaId":"FE8D55BD-7C1A-455C-8243-01632C0438F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"cve@mitre.org"},{"url":"http://www.kerio.com/security_advisory.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32863","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47398","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kerio.com/security_advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5761","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto parameter to photo.php in the 05_Foto module; or (3) the name parameter in an insertrecord action to index.php in the 08_Files module, as demonstrated by injection within a SRC attribute of an IFRAME element."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en FlatnuX CMS (también conocido como Flatnuke3) 2008-12-11, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) the mod parameter to the default URI; (2) \"foto\" a photo.php en el módulo 05_Foto; o(3) \"name\" en una acción insertrecord al index.php en el módulo 08_Files, como se ha demostrado mediante la inyección dentro de un atributo SRC en un elemento IFRAME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flatnux:flatnux:2008-12-11:*:*:*:*:*:*:*","matchCriteriaId":"6F995CC9-9C76-48BF-A3C8-F3EEB108BFBE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32826","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32828","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47367","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47369","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5762","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt."},{"lang":"es","value":"Simple Text-File Login Script (SiTeFiLo) 1.0.6 almacena información sensible bajo la raíz del directorio web con un control de acceso insuficiente, lo que permite a atacantes remotos la descarga del fichero de base de datos que contiene las contraseñas, a través de una petición directa a slog_users.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariovaldez:simple_text-file_login_script:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9B4864E8-BA78-4274-9D29-9D0C32424665"}]}]}],"references":[{"url":"http://osvdb.org/50712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4847","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7444","source":"cve@mitre.org"},{"url":"http://osvdb.org/50712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5763","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en slogin_lib.inc.php en Simple Text-File Login Script (SiTeFiLo) v1.0.6, permite a atacantes remotos ejecutar código PHP de su elección  a través de una URL en el parámetro \"slogin_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariovaldez:simple_text-file_login_script:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9B4864E8-BA78-4274-9D29-9D0C32424665"}]}]}],"references":[{"url":"http://osvdb.org/50711","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32811","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7444","source":"cve@mitre.org"},{"url":"http://osvdb.org/50711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5764","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en calendar.php en WorkSimple v1.2.1, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"lang\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2500mhz:worksimple:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9B70486B-AAF6-4A0D-8CA7-CF6BF9266308"}]}]}],"references":[{"url":"http://osvdb.org/50726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33163","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32849","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47361","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7481","source":"cve@mitre.org"},{"url":"http://osvdb.org/50726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5765","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt."},{"lang":"es","value":"WorkSimple v1.2.1 almacena información sensible bajo el directorio raíz sin el suficiente control de acceso, lo que permite a atacantes remotos descargar el fichero de base de datos que contiene la información de usuarios y contraseñas a través de una petición directa a data/usr.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2500mhz:worksimple:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9B70486B-AAF6-4A0D-8CA7-CF6BF9266308"}]}]}],"references":[{"url":"http://osvdb.org/50725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33163","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32849","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47368","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7481","source":"cve@mitre.org"},{"url":"http://osvdb.org/50725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5766","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en download.php en Farsi Script Faupload, permite a atacantes remoto ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fascript:faupload:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"1E8B727C-81AB-4B93-A1D7-956901DDABF0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4830","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32858","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47394","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7487","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5767","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en authors.asp en gNews Publisher, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"authorID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gazatem:gnews_publisher:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"92F350D4-6D32-496E-8581-3B4AF76531A9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4829","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32883","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5768","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en print.php en el módulo  AM Events v0.22 (también conocido como Amevents) para XOOP, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sirium:am_events_module:0.22:*:*:*:*:*:*:*","matchCriteriaId":"4F506510-1DB9-4B32-A61A-D20E6E705542"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4854","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32848","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47360","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7479","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5769","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Kerio MailServer anterior a v6.6.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"folder\" a mailCompose.php o (2) \"daytime\" a calendarEdit.php. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.6.1","matchCriteriaId":"07939A85-795C-4DEC-A63F-B2A468888EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B7D26DCD-85B0-4908-A414-119862437C28"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8B58BAF1-CF68-4F8C-8BCD-FF3C015FE72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B9C9084-B518-44F2-9F65-032A644FEC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F55CFA68-E07E-46CE-87F6-00AE9A268CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"58ECCE69-EAB9-427E-8922-F463E184C9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"20E50A0F-7AFF-4F17-8833-839DDBD538C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"9063B23B-E585-41E4-98FF-DF18602C6E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"6CB993B9-0CF5-4E71-A612-F3033F4F202B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2B079207-FAF3-4FE2-B420-342440958C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"8A82C0BC-50D5-4FAC-A654-387B49CB7047"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"9BC1748E-32F0-4144-A597-89E8B8705FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.5:*:*:*:*:*:*:*","matchCriteriaId":"39C92F3B-23E3-4978-89AA-FC17B8EDF580"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.6:*:*:*:*:*:*:*","matchCriteriaId":"7B1FA201-CBCF-4D61-9848-F661A16EBEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.7:*:*:*:*:*:*:*","matchCriteriaId":"0A2154DF-2306-4E8B-B78A-1BF20E697157"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.8:*:*:*:*:*:*:*","matchCriteriaId":"79C4389A-4BF4-4C38-8FF5-72B92548EFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.9:*:*:*:*:*:*:*","matchCriteriaId":"67230E76-2C30-4038-BC5B-BAC02EDDFAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:5.7.10:*:*:*:*:*:*:*","matchCriteriaId":"FAEA1EB3-5F4F-40D6-833C-225AC348760D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EC515E75-119E-4CB9-985E-00E6A9349178"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FA7CEE3-7D36-4F9D-8AC6-3F4C55D360CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"937A6092-48C9-4721-B069-0B46D3520E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F38A0AAC-ACA8-44D3-B36A-741D01BE166F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"08AE0CAA-B5A4-4E3A-B997-A2858E88CCC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E9AC0D46-2096-4006-8FED-A67AFCE2ED98"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1F931B5E-6F02-48F6-8DAB-C0D796DFC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B391EF70-D407-4087-96CF-B925CA2799B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"23D64B85-51A2-47BC-94A2-8C9980CC573D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D4AB197E-4F2E-4976-B6F7-17EB8A8BFBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A8ADC9C-F49D-4CD2-B6DC-63552480646F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"991FC66F-B9F7-4E67-9D90-E56DE26FD85F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F343A3A1-1335-4785-B90E-3C62736A06B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5605CD2B-8607-446C-94C4-B539C2396FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B88E6A90-0433-493B-9E68-D0809F8A7B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.3_patch_1:*:*:*:*:*:*:*","matchCriteriaId":"402EE4C7-77D0-4C06-8407-9F69F4059890"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"59830366-4CE8-44A2-9761-FB9226414A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E119E7EB-F7FE-451E-8E7C-BBAB3849DF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9B080E7F-7BA8-48A1-B0EC-16B3BE5B183F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A75F2BE-8D1A-4022-823E-16BA42DA02DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF86DC55-8519-44D5-A7FD-77FA8B2651AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DAC7A299-CD9D-4159-A6C5-40F72DA158B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"83D02EC9-EF7F-4EBF-A053-1AE7DE164C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.3.1_p2:*:*:*:*:*:*:*","matchCriteriaId":"2AE229C4-559F-4BB9-AF47-54C43AD03587"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"45649E00-F6B4-4782-A989-D9D5E20FA75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"178E27A1-7A68-4298-96D8-540E0E77CDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F30234CC-D865-4F1D-A4C7-FE6D050D2158"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"312EC630-9D21-4560-A57D-77D1704942C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.0:patch_1:*:*:*:*:*:*","matchCriteriaId":"4522E3BF-C7DC-4160-8841-7784C4C575BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FB7D282B-ED68-45EB-912E-72F9E85DC23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"609DCDF8-437A-49B1-95FB-5E0ED30E0711"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8CD16F9A-6CC4-4FB2-9441-768312DEBB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.0:patch_1:*:*:*:*:*:*","matchCriteriaId":"FE8D55BD-7C1A-455C-8243-01632C0438F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"cve@mitre.org"},{"url":"http://www.kerio.com/security_advisory.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32863","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47397","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kerio.com/security_advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5770","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en config/make_config.php en  PHP Weather v2.2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpweather:phpweather:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"41D7C141-9043-4349-B4FF-167D492F4838"}]}]}],"references":[{"url":"http://secunia.com/advisories/33098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47308","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5771","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en test.php en PHP Weather v2.2.2 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de escalado de directorios en el parámetro language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpweather:phpweather:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"41D7C141-9043-4349-B4FF-167D492F4838"}]}]}],"references":[{"url":"http://secunia.com/advisories/33098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5772","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ASPSiteWare RealtyListings v1.0 y v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro iType de type.asp y (2) el parámetro iPro de detail.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspsiteware:realtylistings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"93082583-F3ED-4424-966F-D3FFBA52A900"},{"vulnerable":true,"criteria":"cpe:2.3:a:aspsiteware:realtylistings:2.0:*:*:*:*:*:*:*","matchCriteriaId":"12EB8C10-8D68-4177-83B7-0EB26726F6CD"}]}]}],"references":[{"url":"http://osvdb.org/50707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/50708","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33167","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4848","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32812","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47323","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7464","source":"cve@mitre.org"},{"url":"http://osvdb.org/50707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/50708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5773","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb."},{"lang":"es","value":"Nukedit v4.9.8 almacena información sensible bajo el raíz web con insuficientes controles de acceso, lo cual permite a atacantes remotos descargar el fichero de la base de datos que contiene los nombres de usuario y las contraseñas a través de una petición directa a database/dbsite.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nukedit:nukedit:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C339EB97-9275-4867-AEEE-6C9B3A33A9B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4840","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7491","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5774","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and the (2) iPro parameter to (c) detail.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ASPSiteWare HomeBuilder v1.0 y v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) iType de (a) type.asp y (b) type2.asp y el (2) parámetro iPro de (c) detail.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspsiteware:homebuilder:1.0:*:*:*:*:*:*:*","matchCriteriaId":"75F36E40-898C-48FA-B339-25E27A221335"},{"vulnerable":true,"criteria":"cpe:2.3:a:aspsiteware:homebuilder:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5301BBEB-80BE-4D70-8E2E-F59DAB15D327"}]}]}],"references":[{"url":"http://secunia.com/advisories/33172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32812","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47319","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5775","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en categories.php en Aperto Blog v0.1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apertoblog:apertoblog:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CD65E8A0-2968-46A6-9E70-95AC1F43FE9C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32853","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47346","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7482","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5776","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) action parameter to admin.php and the (2) get parameter to index.php.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Aperto Blog v0.1.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de escalado de directorios en (1) el parámetro action en admin.php y el (2) parámetro get en index.php. NOTA: en algunos entornos esto puede ser aprovechado para la inclusión remota de fichero usando una ruta compartida UNC o una URL ftp, ftps o ssh2.sftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apertoblog:apertoblog:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CD65E8A0-2968-46A6-9E70-95AC1F43FE9C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32850","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7482","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5777","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en CadeNix permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cadenix:cadenix:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"19BCCB7D-B950-4CD7-84B3-DA9493BB876D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32846","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47344","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7480","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5778","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en report.php en Free Links Directory Script (FLDS) v1.2a permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro linkid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flds_script:flds:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"C20C43D8-82ED-487D-BE2F-08E79078FDF0"}]}]}],"references":[{"url":"http://osvdb.org/50724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4852","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32859","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47377","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7489","source":"cve@mitre.org"},{"url":"http://osvdb.org/50724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5779","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lpro.php en Free Links Directory Script (FLDS) v1.2a permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flds_script:flds:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"C20C43D8-82ED-487D-BE2F-08E79078FDF0"}]}]}],"references":[{"url":"http://osvdb.org/50723","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4849","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32835","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7474","source":"cve@mitre.org"},{"url":"http://osvdb.org/50723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5780","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing passwords via a direct request for blog.mdb."},{"lang":"es","value":"Forest Blog v1.3.2 almacena información sensible bajo el raíz web con insuficientes controles de acceso, lo cual permite a atacantes remotos descargar el fichero de la base de datos que contiene las contraseñas a través de una petición directa a blog.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hostforest:forest_blog:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C70BA992-8CED-499B-BA4B-B9B1C160D138"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4842","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47359","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7466","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5781","sourceIdentifier":"cve@mitre.org","published":"2008-12-30T20:30:01.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en right.php en Cant Find A Gaming CMS (CFAGCMS) v1.0 Beta permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro title."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfagcms:cfagcms:1.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"D6F22A84-D99B-49B8-B5F8-90B6F31D5080"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4850","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32851","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47358","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7483","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5782","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bannerclick.php en ZeeMatri v3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"adid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeematri:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AB991B11-BE63-4342-9548-43C5AA0A82EF"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4845","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32221","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3063","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46494","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7072","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5783","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1."},{"lang":"es","value":"admin/index.php en V3 Chat Live Support v3.0.4, permite a atacantes remotos evitar la autenticación y obtener acceso como administradores estableciendo la cookie \"admin\" a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v3chat:v3_chat_live_support:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9631EF9E-ECDD-4D82-B4E6-EB0C6B802DE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4843","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32216","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3066","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46481","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5784","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1."},{"lang":"es","value":"V3 Chat - Profiles/Dating Script v3.0.2, permite a atacantes remotos evitar la autenticación y obtener acceso como administradores estableciendo la cookie \"admin\" a 1."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-565"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v3chat:v3_chat_profiles_dating_script:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B9F8598E-C062-4072-9807-3AB2BE3F1DCE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32603","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32216","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/3071","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46479","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7063","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/32603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/3071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5785","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en V3 Chat - Profiles/Dating Script v3.0.2 permite  a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) \"username\" y (2) \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v3chat:v3_chat_profiles_dating_script:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B9F8598E-C062-4072-9807-3AB2BE3F1DCE"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4846","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46478","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7061","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5786","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la extensión Silva Find v1.1.5 y anteriores en Silva v1.x anterior a v1.6.3.2, Silva v2.0 anterior a v2.0.12.2, y Silva v2.1 anterior a v2.1.0.2, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"fulltext\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BDC5F3F4-193C-4008-89DE-2C57E4C11E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CADC1549-2548-4C5F-A6EE-9A8676E07F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1:*:*:*:*:*:*:*","matchCriteriaId":"37F28947-F4E3-4A18-A54F-8BCC8EFD81EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B2726264-675C-4B0D-99F0-EB5B98AE3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8182A4CB-A9FC-44E0-A086-2F1C9B328D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8536FC3B-62A2-457B-AF5A-49019A02CC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6CDB488-5AF8-4D9C-91DE-90771CE6C4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1b1:*:*:*:*:*:*:*","matchCriteriaId":"25F6946D-B16C-4A28-8421-C91C78EDC1E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.1b2:*:*:*:*:*:*:*","matchCriteriaId":"8313F394-6B86-4921-AA79-02860A1CDDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6BA48537-123A-40D9-9E50-58DF27F09ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D8A288B6-3D0A-4E24-A40D-34746E1D6D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"18905BD4-4F53-4C59-A7A5-E0EF31F36244"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"156E4C2A-0CCC-4C61-9C63-81F72FDA7C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.2b1:*:*:*:*:*:*:*","matchCriteriaId":"5F2F33F1-31B9-4A04-BD62-CCEF423EE28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4CF909D5-D106-4450-8911-37F0DD0C34E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.3b3:*:*:*:*:*:*:*","matchCriteriaId":"EAADD71D-A56E-4E4E-A496-5413B66DFA0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D522AEEA-DB52-49B5-83D5-5FAAD596B0A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"03AA8327-1387-40CA-A7AC-30D85102D3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F8EC75B1-DB7E-4948-B780-E6EDB01CD96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.4b1:*:*:*:*:*:*:*","matchCriteriaId":"5A1118B0-5FA1-44D6-8A59-AB88CB6D7A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A4EE06BD-B6A6-4C15-A68C-996497E3ECB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F9812465-443C-4705-9F33-2FD23E12C642"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3AD67F52-03B2-4886-8B19-563345E82CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"D82D2FE1-5002-4686-AD98-8D9BA5778B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3190B8FE-FD30-4C94-83A6-FB1169205452"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B50E02F1-D6A0-40B5-A596-A455A88C4EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"67FB8E64-3560-4939-BA09-87A24BF8FAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"BC24C47E-ACB6-466B-BA9B-7FC161079A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"471A9E3D-23D7-4A24-8039-B9D4C0226886"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"A48BA931-2717-41FD-BA2B-9B7D6B954259"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"608CC05A-F055-4AF2-93ED-30F41F3D88A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.5b1:*:*:*:*:*:*:*","matchCriteriaId":"3AD570CC-8EF6-4E3C-8BE8-9C57F146E46B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.6:*:*:*:*:*:*:*","matchCriteriaId":"4E38B353-669B-4F65-A6C1-1E453298E9CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DFEFB8EC-8B60-4BDD-9755-10042D69C3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB410E06-37EE-4D9D-AC71-CABAD5D3EE06"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E99D1501-8085-4E5B-9A9A-D8B7124C2A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.6b3:*:*:*:*:*:*:*","matchCriteriaId":"320F8CF2-7981-47D5-B960-8C97D67607A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:1.6b4:*:*:*:*:*:*:*","matchCriteriaId":"A7580A86-49DC-49CE-AE2B-50FF562A2949"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0:*:*:*:*:*:*:*","matchCriteriaId":"38AEC1A8-447D-410F-AFEA-EA8786778E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81E6291B-D5AA-4DDB-B90D-00EE3318950A"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8ACCAB7E-96D6-4058-B501-5C376A576295"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E3AD7553-44B3-4495-B3FE-B36A8E12040E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2D2220AD-1C3D-4E83-8D37-B1564D3E8C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4CFC90C8-2835-4779-A377-3B7D6822889B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"09EA59F6-3532-4DF5-A6CB-CDBFDBA763E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"11186132-E216-4CD8-8ED2-B358C4030976"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCE2E90E-0CBF-4E7B-B219-862769BA7EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"477275E1-70D8-43BE-B960-573106887EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"01CC2C0A-9BB4-4D0A-A504-F8341CB9C0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"61C67C3B-A090-49F0-8B0E-08EC9842E1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0a1:*:*:*:*:*:*:*","matchCriteriaId":"A4E0BB70-898D-496A-BB85-CE4B0632885F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"1A075B25-9069-4C15-A8DF-6442D1BCB1CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB9CE7E6-CF08-4040-A527-60783033D6C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.1a2:*:*:*:*:*:*:*","matchCriteriaId":"EF1ABA33-1F5D-43B3-8143-BB3B76055FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva:2.1b1:*:*:*:*:*:*:*","matchCriteriaId":"A897EB3E-9491-497E-AA99-79D0FFDCBDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"38E26E3B-83BA-400A-A188-6DC5D73682EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7689C4EF-7558-46AD-915E-07C909B99508"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AEC9A96D-2403-46E5-AEDC-3423F77F3492"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"56D294F5-D3F7-4C75-B259-754CFC511710"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.0:*:*:*:*:*:*:*","matchCriteriaId":"53DDCAC5-6B3C-41FA-AA11-525C5495112C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.1:*:*:*:*:*:*:*","matchCriteriaId":"710020FE-9498-4503-AF78-5B26CEBAE272"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AB5998AE-69F0-4684-9616-D5F5956A9E60"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"80BB915B-C41E-4CD8-9DC2-DA7AEDF9EBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4A2E6603-3CC0-4DF5-B28D-C8AD90EF51D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"58FC3131-A342-47D6-AAF9-7EEE4C8A2E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:infrae:silva_find:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"19287B1F-FFAA-4567-9863-1E3526BD52B3"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/91/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.infrae.com/newsitems/silva_security_bulletin_08-11-07","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/49659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32183","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46427","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/91/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.infrae.com/newsitems/silva_security_bulletin_08-11-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/49659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5787","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, in conjunction with a show action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en mod.php en Arab Portal v2.1 sobre Windows, permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"file\" en conjunción con una acción \"show\" (mostrado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arabportal:arab_portal:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A9DE5B82-2AC0-4DC1-976B-91BC33DC6CE9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/32590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4851","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498092/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32146","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46404","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7019","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498092/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5788","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Domain Seller Pro v1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:domainsellerpro:domain_seller_pro:1.5:*:*:*:*:*:*:*","matchCriteriaId":"43F17B1C-D676-4968-9949-9AEA0727DCE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/32637","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32201","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46475","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7052","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5789","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) mosConfig_absolute_path parameter to (a) add_tmsp.php, (b) edit_tmsp.php and (c) tmsp.php in includes/tmsp/; and the (2) GLOBALS[mosConfig_absolute_path] parameter to (d) includes/tmsp/subscription.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero en el componente Recly Interactive Feederator (com_feederator) v1.0.5  para Joomla!, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro  (1) mosConfig_absolute_path parameter a (a) add_tmsp.php, (b) edit_tmsp.php y (c) tmsp.php en includes/tmsp/; y el parámetro (2) GLOBALS[mosConfig_absolute_path] a (d) includes/tmsp/subscription.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recly:interactive_feederator:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F4DB47DB-5706-4747-B192-D097B4EDC819"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4827","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32194","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46438","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7040","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5790","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a) add.php and (b) competitions.php in includes/competitions/, and the (2) mosConfig_absolute_path parameter to (c) includes/settings/settings.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en  el componente Recly!Competitions v1.0 (com_competitions) para Joomla!, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro (1) GLOBALS[mosConfig_absolute_path] a (a) add.php y (b) competitions.php in includes/competitions/, el el parámetro (2) mosConfig_absolute_path parameter a (c) includes/settings/settings.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recly:competitions:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F616A2-2CE4-4A82-A5A7-6541173683AB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32192","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7039","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5791","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vectors, related to the (1) bankwire module, (2) cheque module, and other components."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en PrestaShop e-Commerce Solution anterior a v1.1 Beta 2 (también conocida como v1.1.0.1), tiene un impacto y vectores de ataque desconocidos relacionados con los módulos (1) bankwire y (2) cheque así como con otros componentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"6DA16E87-B2A5-48B2-A3A3-AFE38599F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"4A787D70-3C0B-48B9-AC28-C43D93048756"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"816F93A5-6513-4857-8FC9-2B27A584C183"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"02AEFA3E-CA70-490B-AEF4-D3F63A85F0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2DCA3511-BCA4-4A33-8498-2BD2E87E897F"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"82C16D46-5809-4EAE-B633-B2B00DDD98AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC8056C-1225-4473-84CE-E81D2300B3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9:*:*:*:*:*:*:*","matchCriteriaId":"54EDD2D3-1F4B-4086-AB45-95CBFEBF366B"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9.1:rc1:*:*:*:*:*:*","matchCriteriaId":"CE1B6EB6-B861-48FC-AF8F-1B0E6984F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9.1:rc2:*:*:*:*:*:*","matchCriteriaId":"721D0EE5-8E4A-49B6-8CDB-F6C009426957"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"57F59F4F-8542-404E-BEA9-E7458E8545C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4D1CD639-A779-4719-8FA3-8CD6D04BCC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"0DC571AA-23A4-4FFA-9B5A-142B52C52D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"EDC994F4-6BB4-4157-9127-5BDA59198A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"07A283FD-CF6B-4BF1-BDD0-D58B2D4BA9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:1.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC46D61-2E72-488B-B4D3-5790C4C4DEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:1.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"52A2BB6A-F24B-45B5-A15B-74AB4027DCC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:1.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"37838F2C-30C5-48E1-8C16-226BB4C7702B"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:1.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ED69764D-EECF-4B3D-BA21-F233657C73B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32486","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=638105","source":"cve@mitre.org"},{"url":"http://www.prestashop.com/download/changelog_1.1.0.1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32184","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=638105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.prestashop.com/download/changelog_1.1.0.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5792","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.  NOTE: the researcher also points out the analogous directory traversal issue."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en show_joined.php en Indiscripts Enthusiast v3.1.4, y posiblemente anteriores, permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro \"path\". Nota: el investigador también señala la cuestión análoga de salto de directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:indisguise:indiscripts_enthusiast:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"AAC30A96-6023-41BD-BDCD-88F6FE1A072D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4853","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_57.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498161/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32205","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46476","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7059","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_57.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5793","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a) install.clickheat.php, (b) Cache.php and (c) Clickheat_Heatmap.php in Recly/Clickheat/, and (d) Recly/common/GlobalVariables.php; and the (2) mosConfig_absolute_path parameter to (e) _main.php and (f) main.php in includes/heatmap, and (g) includes/overview/main.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivo PHP remoto en el componente para Joomla! Clickheat - Heatmap stats (com_clickheat) v1.0.1, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro (1) GLOBALS[mosConfig_absolute_path] de (a) install.clickheat.php, (b) Cache.php y (c) Clickheat_Heatmap.php en Recly/Clickheat/, y (d) Recly/common/GlobalVariables.php; y el parámetro (2) mosConfig_absolute_path de (e) _main.php y (f) main.php en includes/heatmap, y (g) includes/overview/main.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recly:clickheat-heatmap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F6741C4C-66A9-4F9D-974D-58A4872FC502"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46439","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7038","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5794","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en system/admin/images.php en LoveCMS v1.6.2 Final permite a atacantes remotos borrar archivos de su elección mediante un .. (punto punto) en el parámetro delete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lovecms:lovecms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"682D1313-5E31-48F8-9A38-B45CCB1A5872"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32158","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46452","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7022","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5795","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en la extensión eluna Page Comments (eluna_pagecomments) v1.1.2 y anteriores en TYPO3, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:eluna_page_comments_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"17D2D353-0E6C-46F3-9259-C9EFC1419215"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5796","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión eluna Page Comments (eluna_pagecomments) v1.1.2 y anteriores en TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:eluna_page_comments_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"17D2D353-0E6C-46F3-9259-C9EFC1419215"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46468","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5797","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión advCalendar v0.3.1 y anteriores en TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:advcalendar_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.1","matchCriteriaId":"790B223A-62F6-4989-8817-19C9885A2A02"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46469","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5798","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión CMS Poll system (cms_poll) anterior a v0.1.1 en TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:cms_poll_system_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"E816F541-8DD3-4337-95AE-4BFBCA5226FC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32231","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46470","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5799","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en la extensión Wir ber uns [sic] (fsmi_people) v0.0.24 y anteriores, en TYPO3, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wir_ber_uns_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.24","matchCriteriaId":"7374B2D1-DECA-4A21-93B4-3EBA7E112536"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wir_ber_uns_extension:0.0.23:*:*:*:*:*:*:*","matchCriteriaId":"8C1462DE-BBEF-433A-82B0-B0CAFD0B1BD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46471","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5800","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Wir ber uns [sic] (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el Wir ber uns [sic] (fsmi_people) extension v0.0.24 y anteriores en TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:fsmi_people:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.24","matchCriteriaId":"AAF1CBAA-6CAE-422E-BABB-1E807E025839"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wir_ber_uns_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.24","matchCriteriaId":"7374B2D1-DECA-4A21-93B4-3EBA7E112536"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wir_ber_uns_extension:0.0.23:*:*:*:*:*:*:*","matchCriteriaId":"8C1462DE-BBEF-433A-82B0-B0CAFD0B1BD4"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46472","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5801","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Dictionary (rtgdictironary) extension v0.1.9 y anteriores en TYPO3, permite a atacantes ejecutar código de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dictionary_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.9","matchCriteriaId":"18EEF1AB-FED8-4101-9C6D-92896395D013"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dictionary_extension:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E7E2F2-D3CB-4D0C-84F9-4411E7A8000C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dictionary_extension:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D49E88F9-4E5A-4509-8A60-5F46C9AFB458"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dictionary_extension:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"03C24EF0-A6FD-41ED-A104-882871C205E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:dictionary_extension:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F1ED71A7-C3D7-4E75-A39C-4AB11A61B2CF"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32234","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46473","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5802","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en E-topbiz Online Store v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:online_store:1.0:*:*:*:*:*:*:*","matchCriteriaId":"22865DC6-AD28-48DF-A3D5-3C2A7E88BFD2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32197","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46453","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7048","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5803","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka username field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/login.php en E-topbiz Online Store v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro user (también conocido como username). NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:online_store:1.0:*:*:*:*:*:*:*","matchCriteriaId":"22865DC6-AD28-48DF-A3D5-3C2A7E88BFD2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4855","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32188","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47751","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7041","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5804","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/admin_catalog.php en e-topbiz Number Links 1 Php Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción edit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:number_links_1_php_script:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"CD2D94D3-0E9C-4CF8-A90F-CAA94B3EF66F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4828","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32198","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46485","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7050","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5805","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.php en DeltaScripts PHP Classifieds v7.5 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro siteid, un vector diferente de CVE-2006-5828."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"527C732B-E698-449C-B244-369626FAC6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"768C3B0C-3773-4C64-824B-B675F037A242"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.04:*:*:*:*:*:*:*","matchCriteriaId":"231777FA-2581-4964-AB5A-71A80F0ED839"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.18:*:*:*:*:*:*:*","matchCriteriaId":"8B2E8AE8-3B62-472D-B3BD-AC780B2D1340"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.19:*:*:*:*:*:*:*","matchCriteriaId":"C5EBB2F6-D866-46DD-AB80-0443D47C607D"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.20:*:*:*:*:*:*:*","matchCriteriaId":"63E29ACE-2333-49D0-98B4-E6535152EA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1E8C8628-C965-4B62-92D9-01122908FD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4585D910-015F-492D-B8CF-8D1B69CBB326"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3CCFC254-1FCA-4AEE-B34A-E57845DFE305"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.3:*:*:*:*:*:*:*","matchCriteriaId":"B27EE0F3-E2E5-4195-8727-06CB7FD6451A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32161","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32191","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46428","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7047","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5806","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en DeltaScripts PHP Classifieds v7.5 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro admin_username (también conocido como admin field). NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5","matchCriteriaId":"527C732B-E698-449C-B244-369626FAC6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"768C3B0C-3773-4C64-824B-B675F037A242"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.04:*:*:*:*:*:*:*","matchCriteriaId":"231777FA-2581-4964-AB5A-71A80F0ED839"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.18:*:*:*:*:*:*:*","matchCriteriaId":"8B2E8AE8-3B62-472D-B3BD-AC780B2D1340"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.19:*:*:*:*:*:*:*","matchCriteriaId":"C5EBB2F6-D866-46DD-AB80-0443D47C607D"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.20:*:*:*:*:*:*:*","matchCriteriaId":"63E29ACE-2333-49D0-98B4-E6535152EA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1E8C8628-C965-4B62-92D9-01122908FD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4585D910-015F-492D-B8CF-8D1B69CBB326"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3CCFC254-1FCA-4AEE-B34A-E57845DFE305"},{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:7.3:*:*:*:*:*:*:*","matchCriteriaId":"B27EE0F3-E2E5-4195-8727-06CB7FD6451A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32161","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46428","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48317","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5807","sourceIdentifier":"cve@mitre.org","published":"2008-12-31T11:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TestLink  v1.8 RC1 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) Testproject Names y (2) Testplan Names a planEdit.php, y posiblemente (3) Testcaseprefixes a projectview.tpl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:*:beta3:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"D697B9AC-5D8A-441D-8F54-D2FA8059D6CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4E88B7B2-FA29-41EF-A2FB-4B5EF3889435"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B667E47-CFD5-4125-844D-F79505FC95C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"EFFAFFD7-26B8-4ADF-B134-F71268EC9FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"E136AD4F-552C-4414-A8B4-0CEC91480671"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:beta1:*:*:*:*:*:*","matchCriteriaId":"4434FB82-6BA6-4335-8FF0-26738318FB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:beta2:*:*:*:*:*:*","matchCriteriaId":"F5FEACF5-86A6-4E8C-896E-436E2FF2948F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=638751","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46431","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=638751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6339","sourceIdentifier":"cve@mitre.org","published":"2008-05-01T19:05:00.000","lastModified":"2023-11-07T02:03:21.400","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6339.  Reason: This candidate is a duplicate of CVE-2007-6339.  Notes: All CVE users should reference CVE-2007-6339 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6426","sourceIdentifier":"cve@mitre.org","published":"2008-02-21T00:44:00.000","lastModified":"2023-11-07T02:03:22.110","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6426.  Reason: This candidate is a duplicate of CVE-2007-6426.  Notes: All CVE users should reference CVE-2007-6426 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6432","sourceIdentifier":"cve@mitre.org","published":"2008-11-04T07:13:18.330","lastModified":"2023-11-07T02:03:22.190","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6432.  Reason: This candidate is a duplicate of CVE-2007-6432.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2007-6432 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}}]}